last executing test programs:

3m56.78899172s ago: executing program 2 (id=3319):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x28}, 0x0)

3m56.640216842s ago: executing program 2 (id=3321):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

3m56.180822356s ago: executing program 2 (id=3328):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
listen(r1, 0x80)
r2 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
listen(r2, 0x3a5)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1)

3m56.067156443s ago: executing program 2 (id=3332):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)

3m55.945996409s ago: executing program 2 (id=3333):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000940), 0x10)
close(0x3)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

3m55.806418847s ago: executing program 2 (id=3335):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r0, 0x3)
accept4(r0, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

3m40.643577667s ago: executing program 32 (id=3335):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r0, 0x3)
accept4(r0, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

2m35.750383513s ago: executing program 1 (id=4727):
pipe(&(0x7f00000045c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0)
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f0000001a00)="ce", 0x1}, {&(0x7f0000001a40)="fa", 0x1}], 0x2, 0x1)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x0)
splice(r0, 0x0, r4, 0x0, 0x66, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4)

2m35.651081443s ago: executing program 1 (id=4728):
r0 = socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000)

2m34.936965002s ago: executing program 1 (id=4734):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x61e2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x12)
close(0x4)

2m34.311563231s ago: executing program 1 (id=4741):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
socket(0x10, 0x803, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
socket(0x400000000010, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)

2m33.35625349s ago: executing program 1 (id=4749):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)

2m33.173991845s ago: executing program 1 (id=4752):
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x78}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

2m18.087218605s ago: executing program 33 (id=4752):
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x78}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

2m3.98971312s ago: executing program 5 (id=5040):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x24, r5, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r7}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r8, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x101, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x2004c088)

2m3.940551895s ago: executing program 5 (id=5042):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000040018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000011)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in=@private=0xa010101, @in=@broadcast, 0x4e24, 0x2c, 0x4e24, 0x81, 0xa, 0x0, 0xa0, 0x32}, {0x1eec, 0x4, 0x7fff, 0x400, 0x3ff, 0x100000001, 0xfffffffffffffffe, 0x1d}, {0x5, 0x3, 0xea, 0x5}, 0x5, 0x6e6bbb, 0x2, 0x1, 0x3, 0x1}, {{@in=@loopback, 0x4d5, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x3507, 0x4, 0x2, 0xf, 0x1, 0x6, 0x9}}, 0xe8)
socket$netlink(0x10, 0x3, 0x4)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x9450)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)

2m3.841677475s ago: executing program 5 (id=5044):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)
unshare(0x2c020400)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2m2.412110854s ago: executing program 5 (id=5052):
socket$packet(0x11, 0xa, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket(0x10, 0x3, 0x0)
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000120)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r1, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1, r1, 0xffffffffffffffff, r1], 0x0, 0x10, 0xfffffffe}, 0xc3)

2m1.326407381s ago: executing program 5 (id=5063):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
pipe(0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
pipe(&(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf4, 0x17}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0)

2m1.221433254s ago: executing program 5 (id=5064):
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000c0d1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$6lowpan_control(r1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0xa)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
epoll_create1(0x80000)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

1m57.269103478s ago: executing program 4 (id=5116):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f01, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x62040200)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r0, &(0x7f00000001c0)={0x6, 0x8, 0x2}, 0x8)

1m56.749134883s ago: executing program 4 (id=5118):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000049b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000200), &(0x7f0000000280)=r8}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

1m56.612344935s ago: executing program 4 (id=5121):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
unshare(0x6a040000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', 0x0})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)

1m56.148423524s ago: executing program 4 (id=5128):
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x5, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x74, r2, {0x3}, {}, {0xa, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x10}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x24044115}, 0x0)

1m55.93985482s ago: executing program 4 (id=5129):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x6, &(0x7f00000002c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
read(0xffffffffffffffff, &(0x7f0000003580)=""/4096, 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

1m55.452389714s ago: executing program 4 (id=5136):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, 0x0, 0x0)

1m46.090177439s ago: executing program 34 (id=5064):
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000c0d1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$6lowpan_control(r1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0xa)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
epoll_create1(0x80000)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

1m40.38881902s ago: executing program 35 (id=5136):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @loopback, 0x4}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, 0x0, 0x0)

3.067379123s ago: executing program 7 (id=6020):
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r0 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
unshare(0x20000400)
socket$alg(0x26, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
socket(0x10, 0x803, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)
write$tun(r2, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r1}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008110}, 0x8000)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f00000000c0))
r4 = socket$kcm(0x2, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x4a, &(0x7f0000000040), 0x4)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240400c0}, 0x4004800)
socket$qrtr(0x2a, 0x2, 0x0)

2.989129808s ago: executing program 6 (id=6021):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ad8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20)
r3 = socket(0x8000000010, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4a}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write(r3, &(0x7f00000002c0)="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", 0xfc)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r6, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000068000100ffffffffffdbdf250a0000000000000004000b00040006"], 0x20}}, 0x0)
ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r8)
ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000200))

2.711881138s ago: executing program 6 (id=6022):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r2}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r3)
socket$kcm(0x10, 0x2, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000000)={'virt_wifi0\x00', @random='4\x00'})
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000002700), &(0x7f0000002780)=0x80)
sendmmsg$inet(r0, &(0x7f0000000700), 0x0, 0x0)

2.629748523s ago: executing program 0 (id=6023):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000045)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000040))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x1001}], 0x1, 0x0, 0x0, 0x300}, 0x0)
sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0)

2.402450661s ago: executing program 0 (id=6024):
unshare(0x6a040000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x804)
unshare(0x600)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000380)="ab1ddf4d6e00ee52fb8b16e1451954aec420bf0ea3ba5396ece4f839ad43ac288f902ca9c3a9b61eae4cbdd36756fa62a091a4c001f9394ba9ae2ce00c7751ed37692119b12d0203e6f2f52109c9a701f44464", 0x53)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x27, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd70010080000034000000080073000000000008000300000000000e0001006e657464657673696d0000000f0002006e65746465"], 0x44}}, 0x20000000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r2, 0x0, 0xd88d02a0}, 0x38)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0xff, 0xe3}]}, 0x10)
unshare(0x2000b00)
sendmmsg$inet(r1, &(0x7f0000001e40), 0x0, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.35159197s ago: executing program 3 (id=6025):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4)

2.308421635s ago: executing program 7 (id=6026):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)

2.174943775s ago: executing program 8 (id=6027):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r0=>0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="08007ac587344af2", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c00"], 0x40}, 0x24040090)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r3, @ANYBLOB="887c254e5dcd62c4486b2ae6ba9cc8df3c3be6ec66961a935d304858161cb92fca1969272e691e725a2ae773527cab850577ccc7819e98cb54dd486bf99ef44583494fcd5eb89036deae0c9e6f1ca4704202271cf15dfea661c14caf1f209aa3988053bec07eba30b8d24995771471a659e9f829272dbc58a8dab5923e078f668eb2c3b8f28a36ab", @ANYRES32=r0, @ANYRES16=r1], 0x70}}, 0x48805)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r6, 0xffffffffffffffff, 0x500}, 0x57)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="68000000100002002dbd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="b0000000000000001c00128008000100677265001000028004001200260005004000000008000500", @ANYRES32=0x0, @ANYBLOB="24000e000400000000000000000800000000000008000000000000000900067f00000000"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x24000000)
r7 = socket$inet6(0x10, 0x3, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='pids.current\x00', 0x0, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r10, 0x8de13c6b70ae92c3, 0x41003, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4050)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="00001000000000435bafc3091a11e44f8991f4c1e066f55e4d4775b576a4f130a6d14fc9cfbdefd6056677f6d049cf9b9e6ea6901b04fd864de259ccd4e99423baf3ec19d1479e77bc21bf7993c1a137259388762e0e66ad0d580000000000000000ba8a79934fffbb780da0623ab6fae7df68b68e6d8da222cbc66626cbf5d3f84d809a238afed7cc0d0b56369804eb4e51b5d415af24efd122ca592458a74aef36ecc7f27d59698ea9ea9a75e47d6811d63cd386353c38588c923473", @ANYRES16=r9, @ANYBLOB="000129bd7000fedbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="0c0099000000000019000000050018010a00000008002201c20300000800a10000800000080027000200000008009f00000000000a00cd000900020000800000"], 0x5c}, 0x1, 0x0, 0x0, 0x20040810}, 0x0)
getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, 0x0, &(0x7f0000000240))
ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x80049367, &(0x7f0000000040))

2.127820069s ago: executing program 3 (id=6028):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3)
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x128, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92d7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa7c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5242}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000010}, 0x8001)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$tun(r5, &(0x7f0000000340)=ANY=[], 0x33)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
socket(0x2, 0x80805, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000a40), 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff})
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r10}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendfile(r5, r3, 0x0, 0x10000)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x38, r2, 0x239b5da1764946cd, 0x70bd2d, 0x25dfcbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "887f9e1804d2635ee9cfef1cb8"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40400d4)

2.08129715s ago: executing program 8 (id=6029):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x50, r7, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xd, 0xac, "9b42ba63684a1d6c17"}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x358}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x7, 0x13, [{0x30, 0x1}, {0x9, 0x1}, {0x18}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)={0x20, r7, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)

1.96755732s ago: executing program 8 (id=6030):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}}, 0x4000)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet6_int(r1, 0x29, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
unshare(0x22020600)
socket$kcm(0x11, 0x3, 0x0)
socket$kcm(0x10, 0x3, 0x10)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1e, &(0x7f0000000840)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)

1.821611529s ago: executing program 0 (id=6031):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2004890)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
vmsplice(r1, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f43", 0x2fe}], 0x1, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010100000000000000000a0000041000020073797a310000000008000a40fffffffc090001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.82029143s ago: executing program 6 (id=6032):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffc5f, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd70000000000001000000040008801400020077673000000000e4ffffffffffffff000800050001000000240003000000000000000000000000000000000000000000000000000000000000000000060006"], 0x60}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x40888)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
listen(r3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r3, &(0x7f0000001b40), 0x0, 0x0)
socket$inet6(0xa, 0x80803, 0x87)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0x4008014)

1.738394171s ago: executing program 3 (id=6033):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xad356f19b320d40b)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000c40)="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")
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xffeff010}, {0x6, 0x7, 0xfe, 0x6}]}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001500)={r9}, 0x8)

1.680981994s ago: executing program 6 (id=6034):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xb, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)
r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x20, r2, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x20}}, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000dc0)={0x1, 0x0, 0x0}, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x110, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r8=>0x0})
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r8}, 0x10, &(0x7f0000000200)={0x0}}, 0x44001)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000045}, 0x44000)

1.65121358s ago: executing program 0 (id=6035):
r0 = socket$inet6(0xa, 0x4, 0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)={0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x35b}]}, 0x10)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10)
getsockopt$inet_int(r2, 0x0, 0x6, &(0x7f00000000c0), 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000", 0x48}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x40}, {0x6}]}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})

1.418213111s ago: executing program 6 (id=6036):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000400000000000007000000000300000000"], 0x0, 0x44}, 0x28)
r2 = socket(0x10, 0x803, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
readv(r5, &(0x7f0000002380)=[{&(0x7f0000002180)=""/117, 0x75}], 0x1)
connect$unix(r4, &(0x7f0000000140)=@abs={0x1}, 0x6e)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x104, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0xc040)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.359999709s ago: executing program 7 (id=6037):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000002c0), 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r2, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}, {0x0}], 0x2)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r2], 0x80}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$kcm(r1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e33, @multicast1}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)

1.355046141s ago: executing program 8 (id=6038):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'sit0\x00', r6, 0x10, 0x80, 0x3, 0x3, {{0x12, 0x4, 0x0, 0x20, 0x48, 0x64, 0x0, 0x7, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x31}, {[@generic={0x7, 0x2}, @rr={0x7, 0x3, 0x1c}, @generic={0x86, 0x2}, @timestamp_addr={0x44, 0x2c, 0x6c, 0x1, 0x4, [{@multicast2, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff01}, {@multicast1, 0x1}, {@loopback, 0x1ff}, {@loopback, 0x2}]}]}}}}})
sendmsg$nl_route_sched(r5, 0x0, 0x20004804)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)=""/212, 0xd4}], 0x1}, 0x3ff}], 0x4000300, 0x2, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r9, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x3, 0x7, 0x40000000000009})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c801000010000900"/20, @ANYRESOCT, @ANYRESHEX=r1], 0x1c8}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)

1.133561321s ago: executing program 3 (id=6039):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
socket$inet(0xa, 0x801, 0x84)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x0, 0x0, 0xfffffffc, 0x8a}, 0x9c)
accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8000, 0x0, 0x1}}}}}}, 0x0)

689.544959ms ago: executing program 0 (id=6040):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
unshare(0x68040200)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000001480))
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18)
mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r3, 0x3f38e000)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000680)='tlb_flush\x00', r4, 0x0, 0x6b8}, 0x18)
write(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
sendmsg$can_raw(r1, &(0x7f0000000640)={&(0x7f0000000500), 0x10, &(0x7f0000000600)={&(0x7f00000005c0)=@can={{0x4, 0x1}, 0x2, 0x0, 0x0, 0x0, "84f470d9b9180f33"}, 0x10}, 0x1, 0x0, 0x0, 0x20000801}, 0x20)
shutdown(r5, 0x1)

456.160353ms ago: executing program 6 (id=6041):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r1, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r2=>0x0, 0x4, 0x66, 0x6, 0x7, 0x4c, @loopback, @remote, 0x7800, 0x700, 0x799a, 0x3}})
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)=0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x2006, 0x7fffffff, 0x6, 0x2, r1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x4}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000"], 0xd0}}, 0x0)
unshare(0x400)
r7 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r7}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, 0x4100}}, 0x20}}, 0x4008000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8)
sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9004", 0x0, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0)

339.686135ms ago: executing program 8 (id=6042):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300000000000c000180"], 0x28}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1401"], 0x114}], 0x1}, 0x400c010)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@fadd={0x0, 0x114, 0x6, {{0x9, 0xb}, &(0x7f0000000380)=0x6, &(0x7f00000003c0)=0x342cb223, 0x80, 0x1, 0xffffffffffffffff, 0x5, 0x8, 0x8}}, @mask_cswp={0x0, 0x114, 0x9, {{0xfffeffff, 0xf}, &(0x7f0000000580)=0x7, &(0x7f0000000600)=0x6, 0x7fffffffffffffff, 0x6, 0x7, 0x7, 0x2, 0xfffffffffffffffc}}], 0x48, 0x40014}, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0)
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0xfdef)
r4 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0)
r5 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x24048841)
write$cgroup_pid(r5, &(0x7f0000000180), 0x12)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$sock_int(r7, 0x1, 0xb, &(0x7f0000000bc0)=0x5, 0x4)
write$cgroup_freezer_state(r4, &(0x7f0000000200)='THAWED\x00', 0x7)
r8 = socket$tipc(0x1e, 0x5, 0x0)
connect$tipc(r8, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x4}}, 0x10)

338.830633ms ago: executing program 7 (id=6043):
socket(0x2b, 0x80801, 0x1)
socket$inet6(0xa, 0x80003, 0xff)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x9}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6(0xa, 0x5, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

326.834957ms ago: executing program 0 (id=6044):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close(0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x3}}]}}}]}, 0x78}}, 0x0)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x800)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x44}}, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
bind$ax25(r5, &(0x7f0000000380)={{0x3, @null, 0x1}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = socket$alg(0x26, 0x5, 0x0)
accept4(r6, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00'}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0)

224.638354ms ago: executing program 7 (id=6045):
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x40080)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfe3a)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2000, @remote}}}, 0x108)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r3, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x2, 0x1}, {0x73, 0x6}, {0x5, 0x3}, {0x7a, 0x2}, {0xf, 0x2}, {0x8, 0x2}, {0x6, 0x7}, {0x4, 0x6}], "7ecd4163b8fccf09"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)

82.324348ms ago: executing program 8 (id=6046):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x800}, 0x50)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xe, 0x8, [0x1a, 0xf, 0xf, 0x2f, 0x23, 0x3e, 0x30, 0x15, 0x3b, 0xe, 0x1e, 0x17, 0x1b, 0x3c, 0x36, 0x4], 0x2, 0x2, 0x8}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x6, 0x0, 'snmp\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close(0x4)

81.780838ms ago: executing program 7 (id=6047):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x800}, 0x50)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xe, 0x8, [0x1a, 0xf, 0xf, 0x2f, 0x23, 0x3e, 0x30, 0x15, 0x3b, 0xe, 0x1e, 0x17, 0x1b, 0x3c, 0x36, 0x4], 0x2, 0x2, 0x8}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x6, 0x0, 'snmp\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

56.237634ms ago: executing program 3 (id=6048):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x3}, [@RTA_OIF={0x8}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0xffffff7f}, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)

0s ago: executing program 3 (id=6049):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x14, 0x2, 0x4)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{0x0, 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000f80)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], 0x18c}], 0x1}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1d00164b1f84decb000000330000000a002000004a0000", @ANYRES32=r1, @ANYBLOB="018000"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000040000000000"], 0x50)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000c00)='devices.deny\x00', 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_int(r0, &(0x7f0000000c40)='memory.swap.high\x00', 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getpid()
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x42020054, &(0x7f0000000c80)={{{@in6=@mcast1, @in=@loopback}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000d80)=0xe8)

kernel console output (not intermixed with test programs):

561][    C1] TC_ACT_REPEAT abuse ?
[  328.819290][    C0] TC_ACT_REPEAT abuse ?
[  328.965823][T18441] __nla_validate_parse: 8 callbacks suppressed
[  328.965844][T18441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5010'.
[  329.033608][T18441] bond0: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  329.088312][T18448] netlink: 'syz.5.5011': attribute type 12 has an invalid length.
[  329.122075][T18448] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.5011'.
[  329.139240][T18447] netlink: 'syz.6.5012': attribute type 14 has an invalid length.
[  329.244769][T18447] netlink: 'syz.6.5012': attribute type 14 has an invalid length.
[  329.381635][T18460] netlink: 'syz.3.5017': attribute type 12 has an invalid length.
[  329.406898][T18463] netlink: 'syz.6.5018': attribute type 1 has an invalid length.
[  329.453096][T18463] veth3: entered promiscuous mode
[  329.541666][T18470] netlink: 'syz.4.5020': attribute type 10 has an invalid length.
[  329.576824][T18470] batman_adv: batadv0: Removing interface: 
0!

[  329.635141][T18477] bridge: RTM_NEWNEIGH with invalid ether address
[  329.834761][T18484] macsec2: entered promiscuous mode
[  329.841059][T18484] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode
[  329.850075][T18484] mac80211_hwsim hwsim8 wlan1: left promiscuous mode
[  329.864948][T18491] tun0: tun_chr_ioctl cmd 2147767520
[  330.139660][T18508] syzkaller0: entered promiscuous mode
[  330.145340][T18508] syzkaller0: entered allmulticast mode
[  330.384018][T18515] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5036'.
[  330.407255][T18513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5035'.
[  331.264047][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.301787][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.481796][T18547] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  331.841334][T18557] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5050'.
[  332.094348][T18551] tipc: Resetting bearer <eth:syzkaller0>
[  332.182766][T18560] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  332.203186][T18560] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  332.522931][T18572] vlan0: entered promiscuous mode
[  333.229338][    C0] TC_ACT_REPEAT abuse ?
[  333.905472][T18604] netlink: 'syz.6.5068': attribute type 1 has an invalid length.
[  333.931726][T18607] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5069'.
[  333.950462][T18607] netlink: 'syz.4.5069': attribute type 1 has an invalid length.
[  333.973878][T18607] 8021q: adding VLAN 0 to HW filter on device bond11
[  333.976654][T18604] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5068'.
[  334.045926][T18611] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  334.053535][T18611] syzkaller0: entered promiscuous mode
[  334.059264][T18611] syzkaller0: entered allmulticast mode
[  334.068754][T18611] tipc: Resetting bearer <eth:syzkaller0>
[  334.074759][T18611] syzkaller0: tun_net_xmit 90
[  334.084057][T18610] tipc: Resetting bearer <eth:syzkaller0>
[  334.092521][T18610] tipc: Disabling bearer <eth:syzkaller0>
[  334.500428][T18627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  334.899431][    C1] TC_ACT_REPEAT abuse ?
[  334.903925][    C1] TC_ACT_REPEAT abuse ?
[  334.908367][    C1] TC_ACT_REPEAT abuse ?
[  334.912826][    C1] TC_ACT_REPEAT abuse ?
[  334.917260][    C1] TC_ACT_REPEAT abuse ?
[  334.921734][    C1] TC_ACT_REPEAT abuse ?
[  334.926146][    C1] TC_ACT_REPEAT abuse ?
[  335.477612][T18653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5085'.
[  335.574516][T18657] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  335.620103][ T3602] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  335.643469][ T3602] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  335.673834][ T3602] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  335.709728][ T3602] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  335.793692][T18670] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5089'.
[  335.851168][T18670] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5089'.
[  336.031033][T18681] netlink: 'syz.3.5094': attribute type 1 has an invalid length.
[  336.065607][T18678] syzkaller0: entered promiscuous mode
[  336.084241][T18678] syzkaller0: entered allmulticast mode
[  336.112724][T18681] bond7: entered promiscuous mode
[  336.123679][T18681] bond7: entered allmulticast mode
[  336.133006][T18681] 8021q: adding VLAN 0 to HW filter on device bond7
[  336.166422][T18687] bridge8: entered promiscuous mode
[  336.176417][T18687] bridge8: entered allmulticast mode
[  336.183846][T18687] bond7: (slave bridge8): Enslaving as a backup interface with an up link
[  336.219084][   T12] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  336.238070][T18689] syzkaller1: entered promiscuous mode
[  336.243788][T18689] syzkaller1: entered allmulticast mode
[  336.274873][T18691] netlink: 'syz.4.5097': attribute type 1 has an invalid length.
[  336.283282][T18691] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5097'.
[  336.322899][T18694] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  336.333525][T18694] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  336.392421][T18698] netlink: 'syz.3.5099': attribute type 1 has an invalid length.
[  336.430436][T18698] 8021q: adding VLAN 0 to HW filter on device bond8
[  336.453681][T18698] ipvlan1: entered allmulticast mode
[  336.459261][T18698] bond8: entered allmulticast mode
[  336.479183][T18698] bond8: (slave gretap2): making interface the new active one
[  336.486816][T18698] gretap2: entered allmulticast mode
[  336.493479][T18698] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  336.670387][T18713] bond0: Caught tx_queue_len zero misconfig
[  336.676982][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5105'.
[  336.697200][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5105'.
[  336.998249][T18726] macsec1: entered promiscuous mode
[  337.177945][T18732] vlan2: entered promiscuous mode
[  337.183482][T18732] bond0: entered promiscuous mode
[  338.200977][T18769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5123'.
[  338.442960][T18781] netlink: 'syz.6.5126': attribute type 1 has an invalid length.
[  338.491380][T18781] 8021q: adding VLAN 0 to HW filter on device bond2
[  338.532576][T18786] 8021q: adding VLAN 0 to HW filter on device bond2
[  338.543640][T18786] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  338.564279][T18789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5128'.
[  338.575474][T18786] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  338.622999][T18792] netlink: 'syz.4.5128': attribute type 13 has an invalid length.
[  338.654486][T18789] macvtap1: entered promiscuous mode
[  338.661976][T18789] ip6gretap0: entered promiscuous mode
[  338.667701][T18789] macvtap1: entered allmulticast mode
[  338.674297][T18789] ip6gretap0: entered allmulticast mode
[  338.691173][T18781] bond2: (slave bridge1): Enslaving as an active interface with a down link
[  339.093105][T18809] syzkaller0: entered promiscuous mode
[  339.098696][T18809] syzkaller0: entered allmulticast mode
[  348.680045][T18846] 8021q: adding VLAN 0 to HW filter on device bond11
[  348.721170][T18849] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  348.740259][T18849] bond11: (slave macvlan2): Enslaving as a backup interface with an up link
[  348.790000][   T59] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  348.838695][T18846] batman_adv: batadv0: Removing interface: dummy0
[  348.874023][T18846] bond7: left allmulticast mode
[  348.890553][T18846] bridge0: port 1(bond7) entered disabled state
[  348.891974][ T5861] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  348.904808][ T5861] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  348.919495][ T5861] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  348.927288][T18846] bond8: (slave wireguard0): Releasing backup interface
[  348.938899][ T5861] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  348.943130][T18846] wireguard0: left promiscuous mode
[  348.955870][ T5861] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  348.977083][T18846] bond8: (slave wireguard1): making interface the new active one
[  348.986645][ T3017] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  349.002895][T18846] wireguard1: entered promiscuous mode
[  349.014279][T18860] netlink: 'syz.3.5149': attribute type 1 has an invalid length.
[  349.025440][T18846] bond8: (slave wireguard1): Releasing backup interface
[  349.035154][T18846] wireguard1: left promiscuous mode
[  349.044683][T18846] bond11: (slave macvlan2): Removing an active aggregator
[  349.055188][T18846] bond11: (slave macvlan2): Releasing backup interface
[  349.129422][T18860] 8021q: adding VLAN 0 to HW filter on device bond9
[  349.165898][T18862] bond9: (slave bridge9): making interface the new active one
[  349.174693][T18862] bond9: (slave bridge9): Enslaving as an active interface with an up link
[  349.194488][T18860] bond9: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  349.403702][T18857] chnl_net:caif_netlink_parms(): no params data found
[  349.484136][T18857] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.491667][T18857] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.499090][T18857] bridge_slave_0: entered allmulticast mode
[  349.507034][T18857] bridge_slave_0: entered promiscuous mode
[  349.516988][T18857] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.525380][T18857] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.526149][T18879] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5153'.
[  349.532747][T18857] bridge_slave_1: entered allmulticast mode
[  349.534073][T18857] bridge_slave_1: entered promiscuous mode
[  349.585064][T18857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.597797][T18857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.638547][T18857] team0: Port device team_slave_0 added
[  349.650532][T18857] team0: Port device team_slave_1 added
[  349.707175][T18857] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.722905][T18857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.750025][T18857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.770432][T18884] netlink: 'syz.6.5154': attribute type 1 has an invalid length.
[  349.779991][T18857] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.786975][T18857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.813204][T18857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.868522][T18884] bond3: entered promiscuous mode
[  349.873970][T18884] bond3: entered allmulticast mode
[  349.880019][T18884] 8021q: adding VLAN 0 to HW filter on device bond3
[  349.908205][T18884] bridge2: entered promiscuous mode
[  349.914054][T18884] bridge2: entered allmulticast mode
[  349.920655][T18884] bond3: (slave bridge2): Enslaving as a backup interface with an up link
[  349.934386][T18857] hsr_slave_0: entered promiscuous mode
[  349.946039][T18857] hsr_slave_1: entered promiscuous mode
[  349.954755][T18857] debugfs: 'hsr0' already exists in 'hsr'
[  349.963038][T18857] Cannot create hsr debugfs directory
[  349.979377][   T59] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  350.079744][T18884] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.087509][T18884] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.116574][   T59] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  350.230568][T18884] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.246650][T18884] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.376255][ T3602] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.397569][ T3602] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  350.429242][ T3602] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.438169][ T3602] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  350.481871][ T3602] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.505574][ T3602] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  350.524615][ T3602] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.537202][ T3602] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  350.761034][T18857] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  350.771272][T18857] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  350.791379][T18857] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  350.818876][T18857] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  350.981204][ T5861] Bluetooth: hci7: command tx timeout
[  350.989597][T18857] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.012660][T18857] 8021q: adding VLAN 0 to HW filter on device team0
[  351.026920][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.034083][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  351.060564][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.067777][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state
[  351.171025][T18916] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5163'.
[  351.207743][T18919] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  351.224041][T18919] tipc: Resetting bearer <eth:syzkaller0>
[  351.306343][T18924] netlink: 'syz.3.5165': attribute type 1 has an invalid length.
[  351.391711][T18924] 8021q: adding VLAN 0 to HW filter on device bond10
[  351.448121][T18926] 8021q: adding VLAN 0 to HW filter on device bond10
[  351.456644][T18926] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[  351.472807][T18926] bond10: (slave vxcan3): Error -95 calling set_mac_address
[  351.503274][T18924] veth21: entered promiscuous mode
[  351.512347][T18924] bond10: (slave veth21): Enslaving as an active interface with a down link
[  351.514020][T18934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5165'.
[  351.537618][T18934] 8021q: adding VLAN 0 to HW filter on device bond10
[  351.548312][T18857] 8021q: adding VLAN 0 to HW filter on device batadv0
[  351.772109][T18944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5167'.
[  351.805919][T18944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5167'.
[  351.818206][ T3017] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  351.837525][ T3017] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  351.853715][ T3017] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  351.882414][ T3017] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  351.964671][T18857] veth0_vlan: entered promiscuous mode
[  351.979459][T18857] veth1_vlan: entered promiscuous mode
[  352.036387][T18857] veth0_macvtap: entered promiscuous mode
[  352.046002][T18857] veth1_macvtap: entered promiscuous mode
[  352.073259][T18857] batman_adv: batadv0: Interface activated: batadv_slave_0
[  352.087942][T18857] batman_adv: batadv0: Interface activated: batadv_slave_1
[  352.104386][ T1320] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  352.115337][T18952] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5169'.
[  352.119863][ T1320] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  352.137317][ T1320] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  352.147593][ T1320] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  352.186045][T18955] vlan2: entered allmulticast mode
[  352.191364][T18955] bond4: entered allmulticast mode
[  352.264292][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.279693][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.316722][T18957] netlink: 'syz.0.5170': attribute type 1 has an invalid length.
[  352.325760][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.342096][T18957] 8021q: adding VLAN 0 to HW filter on device bond12
[  352.348414][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.376691][T18957] 8021q: adding VLAN 0 to HW filter on device bond12
[  352.384444][T18957] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address
[  352.396339][T18957] bond12: (slave vxcan3): Error -95 calling set_mac_address
[  352.443010][T18961] veth15: entered promiscuous mode
[  352.445527][T18962] ieee802154 phy0 wpan0: encryption failed: -22
[  352.454890][   T24] IPVS: starting estimator thread 0...
[  352.462152][T18961] bond12: (slave veth15): Enslaving as an active interface with a down link
[  352.560077][T18963] IPVS: using max 33 ests per chain, 79200 per kthread
[  352.584614][T18957] erspan0: entered allmulticast mode
[  352.595625][T18957] bond12: (slave erspan0): making interface the new active one
[  352.604368][T18957] bond12: (slave erspan0): Enslaving as an active interface with an up link
[  352.684454][T18969] smc: net device bond0 applied user defined pnetid SYZ2
[  352.696025][T18969] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5172'.
[  352.767473][T18971] netlink: 'syz.6.5173': attribute type 4 has an invalid length.
[  352.769960][T18969] smc: removing net device bond0 with user defined pnetid SYZ2
[  352.784167][T18969] bond0 (unregistering): Released all slaves
[  352.833073][T18971] netlink: 'syz.6.5173': attribute type 12 has an invalid length.
[  353.060311][ T5861] Bluetooth: hci7: command tx timeout
[  353.073561][T18984] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  353.188191][T18988] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  353.294989][T18997] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  353.380380][T19001] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  353.596310][T19009] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5186'.
[  353.674970][T19009] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  353.736867][T19012] smc: net device bond0 applied user defined pnetid SYZ2
[  353.744845][T19012] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5187'.
[  353.817182][T19012] smc: removing net device bond0 with user defined pnetid SYZ2
[  353.825389][T19012] bond0 (unregistering): left promiscuous mode
[  353.835393][T19012] bond0 (unregistering): Released all slaves
[  353.866033][T19014] netlink: 'syz.0.5188': attribute type 4 has an invalid length.
[  353.877661][T19014] netlink: 'syz.0.5188': attribute type 12 has an invalid length.
[  354.114171][T19022] netlink: 'syz.0.5191': attribute type 1 has an invalid length.
[  354.145145][T19022] smc: adding net device bond0 with user defined pnetid SYZ2
[  354.154479][T19022] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.184615][T19022] bond0: (slave geneve2): making interface the new active one
[  354.194002][T19022] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  354.202884][T19025] tipc: Started in network mode
[  354.214689][T19025] tipc: Node identity 26a3b584e2bd, cluster identity 4711
[  354.222460][T19025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  354.232574][   T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.291879][   T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.310838][T19028] syzkaller0: entered promiscuous mode
[  354.318669][T19028] syzkaller0: entered allmulticast mode
[  354.345297][   T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.360015][T19025] tipc: Resetting bearer <eth:syzkaller0>
[  354.368219][   T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.384971][T19023] tipc: Resetting bearer <eth:syzkaller0>
[  354.401708][T19023] tipc: Disabling bearer <eth:syzkaller0>
[  354.493304][T19037] tipc: Started in network mode
[  354.507091][T19037] tipc: Node identity ae598a1c1869, cluster identity 4711
[  354.523963][T19037] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  354.541171][T19037] syzkaller0: entered promiscuous mode
[  354.555696][T19037] syzkaller0: entered allmulticast mode
[  354.584149][T19037] tipc: Resetting bearer <eth:syzkaller0>
[  354.592924][T19043] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5198'.
[  354.626054][T19036] tipc: Resetting bearer <eth:syzkaller0>
[  354.636803][T19036] tipc: Disabling bearer <eth:syzkaller0>
[  354.666499][ T5871] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  354.673970][ T5871] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  354.681540][ T5871] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  354.690007][ T5871] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  354.697657][ T5871] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  354.977390][T19056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  354.984766][T19056] IPv6: NLM_F_CREATE should be set when creating new route
[  354.992064][T19056] IPv6: NLM_F_CREATE should be set when creating new route
[  355.004779][T19056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  355.025385][T19060] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5200'.
[  355.034837][T19053] smc: net device bond0 applied user defined pnetid SYZ2
[  355.067033][T19060] smc: removing net device bond0 with user defined pnetid SYZ2
[  355.076401][T19060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  355.090274][T19060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  355.102975][T19060] bond0 (unregistering): Released all slaves
[  355.125457][T19045] chnl_net:caif_netlink_parms(): no params data found
[  355.139178][ T5861] Bluetooth: hci7: command tx timeout
[  355.146431][T19058] team0 (unregistering): Port device team_slave_0 removed
[  355.173720][T19058] team0 (unregistering): Port device team_slave_1 removed
[  355.295652][T19063] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.341235][T19063] syzkaller0: entered promiscuous mode
[  355.346775][T19063] syzkaller0: entered allmulticast mode
[  355.377912][T19066] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5204'.
[  355.427471][T19063] tipc: Resetting bearer <eth:syzkaller0>
[  355.457760][T19069] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  355.496456][T19062] tipc: Resetting bearer <eth:syzkaller0>
[  355.518667][T19062] tipc: Disabling bearer <eth:syzkaller0>
[  355.546402][T19045] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.568206][T19045] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.592251][T19045] bridge_slave_0: entered allmulticast mode
[  355.598313][T19075] netlink: 308 bytes leftover after parsing attributes in process `syz.0.5207'.
[  355.605795][T19045] bridge_slave_0: entered promiscuous mode
[  355.619191][T19075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5207'.
[  355.642009][T19075] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  355.664592][T19077] IPv6: addrconf: prefix option has invalid lifetime
[  355.668492][T19045] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.687509][T19045] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.697322][T19045] bridge_slave_1: entered allmulticast mode
[  355.710762][T19045] bridge_slave_1: entered promiscuous mode
[  355.749105][T19082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.782712][T19073] syzkaller0: entered promiscuous mode
[  355.788223][T19073] syzkaller0: entered allmulticast mode
[  355.801776][T19045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  355.817023][T19073] tipc: Resetting bearer <eth:syzkaller0>
[  355.825587][T19045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  355.841593][T19072] tipc: Resetting bearer <eth:syzkaller0>
[  355.848674][T19072] tipc: Disabling bearer <eth:syzkaller0>
[  355.967639][T19093] tipc: Resetting bearer <eth:syzkaller0>
[  356.002567][T19045] team0: Port device team_slave_0 added
[  356.072335][T19045] team0: Port device team_slave_1 added
[  356.130258][T19045] batman_adv: batadv0: Adding interface: batadv_slave_0
[  356.137248][T19045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  356.170420][T19045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  356.186650][T19045] batman_adv: batadv0: Adding interface: batadv_slave_1
[  356.210932][T19045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  356.279009][T19045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  356.434267][T19045] hsr_slave_0: entered promiscuous mode
[  356.452069][T19045] hsr_slave_1: entered promiscuous mode
[  356.467112][T19045] debugfs: 'hsr0' already exists in 'hsr'
[  356.483894][T19045] Cannot create hsr debugfs directory
[  356.743069][ T5861] Bluetooth: hci8: command tx timeout
[  356.808333][T19045] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  356.818849][T19045] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  356.839511][T19045] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  356.853340][T19045] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  357.078614][T19045] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.130220][T19045] 8021q: adding VLAN 0 to HW filter on device team0
[  357.159797][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.166979][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.217584][T19116] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5216'.
[  357.217634][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.227284][ T5861] Bluetooth: hci7: command tx timeout
[  357.233731][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.470541][T19123] netlink: 'syz.0.5217': attribute type 1 has an invalid length.
[  357.551265][T19123] bond13: entered promiscuous mode
[  357.556453][T19123] bond13: entered allmulticast mode
[  357.582027][T19123] 8021q: adding VLAN 0 to HW filter on device bond13
[  357.632263][T19123] bridge10: entered promiscuous mode
[  357.637754][T19123] bridge10: entered allmulticast mode
[  357.680380][ T3602] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  357.697320][T19123] bond13: (slave bridge10): Enslaving as an active interface with an up link
[  357.758490][   T37] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.779579][   T37] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.797359][T19045] 8021q: adding VLAN 0 to HW filter on device batadv0
[  357.806714][   T37] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.826114][   T37] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.846700][T19132] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input7
[  358.068023][T19135] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5220'.
[  358.087193][T19143] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.095112][T19143] syzkaller0: entered promiscuous mode
[  358.101266][T19143] syzkaller0: entered allmulticast mode
[  358.108738][T19135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.127592][T19135] batman_adv: batadv0: Removing interface: batadv_slave_1
[  358.151596][T19146] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  358.163361][T19143] tipc: Resetting bearer <eth:syzkaller0>
[  358.172127][T19142] tipc: Resetting bearer <eth:syzkaller0>
[  358.185879][T19142] tipc: Disabling bearer <eth:syzkaller0>
[  358.240962][T19045] veth0_vlan: entered promiscuous mode
[  358.293537][T19045] veth1_vlan: entered promiscuous mode
[  358.306764][T19151] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  358.318069][T19149] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.346854][T19149] syzkaller0: entered promiscuous mode
[  358.362586][T19149] syzkaller0: entered allmulticast mode
[  358.378475][T19045] veth0_macvtap: entered promiscuous mode
[  358.400729][T19149] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  358.414937][T19149] tipc: Resetting bearer <eth:syzkaller0>
[  358.422565][T19045] veth1_macvtap: entered promiscuous mode
[  358.436115][T19148] tipc: Resetting bearer <eth:syzkaller0>
[  358.444196][T19148] tipc: Disabling bearer <eth:syzkaller0>
[  358.484400][T19045] batman_adv: batadv0: Interface activated: batadv_slave_0
[  358.518801][T19045] batman_adv: batadv0: Interface activated: batadv_slave_1
[  358.561657][ T3017] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.597021][ T3017] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.627949][T19161] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.652639][T19161] syzkaller0: entered promiscuous mode
[  358.668456][T19161] syzkaller0: entered allmulticast mode
[  358.691434][ T3017] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.706257][ T3017] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  358.762474][T19164] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.786806][T19161] tipc: Resetting bearer <eth:syzkaller0>
[  358.798596][T19164] syzkaller0: entered promiscuous mode
[  358.808431][T19164] syzkaller0: entered allmulticast mode
[  358.819534][ T5861] Bluetooth: hci8: command tx timeout
[  358.844878][T19160] tipc: Resetting bearer <eth:syzkaller0>
[  358.855322][T19160] tipc: Disabling bearer <eth:syzkaller0>
[  358.883537][T19164] tipc: Resetting bearer <eth:syzkaller0>
[  358.895084][T19163] tipc: Resetting bearer <eth:syzkaller0>
[  358.905391][T19163] tipc: Disabling bearer <eth:syzkaller0>
[  358.916753][T19168] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  358.928266][T19166] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  358.939602][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.952037][T19166] tipc: Resetting bearer <eth:syzkaller0>
[  358.968244][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.042454][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.050878][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.072882][T19166] tipc: Resetting bearer <eth:syzkaller0>
[  359.104742][T19170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.117875][T19170] syzkaller0: entered promiscuous mode
[  359.139412][T19170] syzkaller0: entered allmulticast mode
[  359.181803][T19170] tipc: Resetting bearer <eth:syzkaller0>
[  359.194033][T19169] tipc: Resetting bearer <eth:syzkaller0>
[  359.201736][T19169] tipc: Disabling bearer <eth:syzkaller0>
[  359.224656][T19182] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.236082][T19178] tipc: Started in network mode
[  359.241323][T19178] tipc: Node identity caa4604aa489, cluster identity 4711
[  359.249114][T19178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.256113][T19182] syzkaller0: entered promiscuous mode
[  359.263631][T19182] syzkaller0: entered allmulticast mode
[  359.282816][T19178] syzkaller0: entered promiscuous mode
[  359.288327][T19178] syzkaller0: entered allmulticast mode
[  359.299596][ T5861] Bluetooth: hci7: command tx timeout
[  359.309972][T19182] tipc: Resetting bearer <eth:syzkaller0>
[  359.335530][T19181] tipc: Resetting bearer <eth:syzkaller0>
[  359.353598][T19181] tipc: Disabling bearer <eth:syzkaller0>
[  359.384014][T19178] tipc: Resetting bearer <eth:syzkaller0>
[  359.403839][T19177] tipc: Resetting bearer <eth:syzkaller0>
[  359.414601][T19177] tipc: Disabling bearer <eth:syzkaller0>
[  359.858836][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5243'.
[  360.093820][T19207] bridge_slave_1: left allmulticast mode
[  360.100594][T19207] bridge_slave_1: left promiscuous mode
[  360.106500][T19207] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.127679][T19207] bridge_slave_0: left allmulticast mode
[  360.133487][T19207] bridge_slave_0: left promiscuous mode
[  360.139464][T19207] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.211388][T19213] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  360.220686][T19213] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  360.368786][T19219] syzkaller1: entered promiscuous mode
[  360.378899][T19219] syzkaller1: entered allmulticast mode
[  360.419771][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5247'.
[  360.460318][T19225] ip6gre0: Master is either lo or non-ether device
[  360.537371][T19230] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.552485][T19230] syzkaller0: entered promiscuous mode
[  360.558073][T19230] syzkaller0: entered allmulticast mode
[  360.574272][T19232] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  360.593513][T19230] tipc: Resetting bearer <eth:syzkaller0>
[  360.612624][T19232] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  360.624818][T19232] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  360.642643][T19229] tipc: Resetting bearer <eth:syzkaller0>
[  360.654100][T19229] tipc: Disabling bearer <eth:syzkaller0>
[  360.677618][T19234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.686419][T19234] syzkaller0: entered promiscuous mode
[  360.695303][T19234] syzkaller0: entered allmulticast mode
[  360.724188][T19234] tipc: Resetting bearer <eth:syzkaller0>
[  360.749678][T19233] tipc: Resetting bearer <eth:syzkaller0>
[  360.763480][T19233] tipc: Disabling bearer <eth:syzkaller0>
[  360.824683][T19240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5253'.
[  360.856101][T19241] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.867646][T19241] syzkaller0: entered promiscuous mode
[  360.880695][T19241] syzkaller0: entered allmulticast mode
[  360.890016][T19243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.899441][ T5861] Bluetooth: hci8: command tx timeout
[  360.908642][T19241] tipc: Resetting bearer <eth:syzkaller0>
[  360.918019][T19243] syzkaller0: entered promiscuous mode
[  360.928147][T19243] syzkaller0: entered allmulticast mode
[  360.940217][T19239] tipc: Resetting bearer <eth:syzkaller0>
[  360.954345][T19239] tipc: Disabling bearer <eth:syzkaller0>
[  360.967596][T19243] tipc: Resetting bearer <eth:syzkaller0>
[  360.984299][T19242] tipc: Resetting bearer <eth:syzkaller0>
[  360.994783][T19242] tipc: Disabling bearer <eth:syzkaller0>
[  361.079604][T19250] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  361.098193][T19249] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  361.193946][T19249] syzkaller0: entered promiscuous mode
[  361.199498][T19249] syzkaller0: entered allmulticast mode
[  361.803164][T19254] tipc: Resetting bearer <eth:syzkaller0>
[  361.874635][T19247] tipc: Resetting bearer <eth:syzkaller0>
[  361.905399][T19247] tipc: Disabling bearer <eth:syzkaller0>
[  361.917455][T19265] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5262'.
[  362.071567][T19263] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5261'.
[  362.104322][T19269] netlink: 830 bytes leftover after parsing attributes in process `syz.6.5263'.
[  362.310695][T19276] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  362.484992][T19286] netlink: 'syz.0.5268': attribute type 12 has an invalid length.
[  362.497308][T19281] syzkaller0: entered promiscuous mode
[  362.508000][T19281] syzkaller0: entered allmulticast mode
[  362.526368][T19283] team_slave_0: entered promiscuous mode
[  362.532165][T19283] team_slave_1: entered promiscuous mode
[  362.538243][T19283] vlan2: entered promiscuous mode
[  362.548165][T19283] team0: entered promiscuous mode
[  362.723072][T19293] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.732412][T19293] syzkaller0: entered promiscuous mode
[  362.737926][T19293] syzkaller0: entered allmulticast mode
[  362.786581][T19293] tipc: Resetting bearer <eth:syzkaller0>
[  362.814560][T19292] tipc: Resetting bearer <eth:syzkaller0>
[  362.836453][T19292] tipc: Disabling bearer <eth:syzkaller0>
[  362.867806][T19303] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.885846][T19295] syzkaller0: entered promiscuous mode
[  362.893884][T19295] syzkaller0: entered allmulticast mode
[  362.903889][T19301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.915479][T19306] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  362.935899][T19301] syzkaller0: entered promiscuous mode
[  362.942416][T19301] syzkaller0: entered allmulticast mode
[  362.954456][T19295] tipc: Resetting bearer <eth:syzkaller0>
[  362.967866][T19294] tipc: Resetting bearer <eth:syzkaller0>
[  362.974923][T19294] tipc: Disabling bearer <eth:syzkaller0>
[  362.979556][ T5861] Bluetooth: hci8: command tx timeout
[  362.989885][T19301] tipc: Resetting bearer <eth:syzkaller0>
[  362.998645][T19300] tipc: Resetting bearer <eth:syzkaller0>
[  363.008147][T19300] tipc: Disabling bearer <eth:syzkaller0>
[  363.016849][T19309] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  363.026961][T19309] syzkaller0: entered promiscuous mode
[  363.032525][T19309] syzkaller0: entered allmulticast mode
[  363.070542][T19309] tipc: Resetting bearer <eth:syzkaller0>
[  363.095540][T19308] tipc: Resetting bearer <eth:syzkaller0>
[  363.113562][T19308] tipc: Disabling bearer <eth:syzkaller0>
[  363.137467][T19312] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  363.149045][T19312] syzkaller0: entered promiscuous mode
[  363.154552][T19312] syzkaller0: entered allmulticast mode
[  363.162742][T19314] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  363.172454][T19316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  363.190164][T19312] tipc: Resetting bearer <eth:syzkaller0>
[  363.199372][T19311] tipc: Resetting bearer <eth:syzkaller0>
[  363.209529][T19311] tipc: Disabling bearer <eth:syzkaller0>
[  363.218782][T19316] syzkaller0: entered promiscuous mode
[  363.225327][T19316] syzkaller0: entered allmulticast mode
[  363.247987][T19316] tipc: Resetting bearer <eth:syzkaller0>
[  363.266099][T19315] tipc: Resetting bearer <eth:syzkaller0>
[  363.305321][T19315] tipc: Disabling bearer <eth:syzkaller0>
[  363.327954][T19321] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  363.360690][T19324] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  363.388802][T19324] syzkaller0: entered promiscuous mode
[  363.412890][T19324] syzkaller0: entered allmulticast mode
[  363.443364][T19324] tipc: Resetting bearer <eth:syzkaller0>
[  363.470613][T19323] tipc: Resetting bearer <eth:syzkaller0>
[  363.481289][T19323] tipc: Disabling bearer <eth:syzkaller0>
[  363.503416][T19330] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  363.609852][T19334] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  363.662662][T19337] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  363.677540][T19337] syzkaller0: entered promiscuous mode
[  363.689956][T19337] syzkaller0: entered allmulticast mode
[  363.738493][T19337] tipc: Resetting bearer <eth:syzkaller0>
[  363.760428][T19336] tipc: Resetting bearer <eth:syzkaller0>
[  363.845821][T19341] IPVS: persistence engine module ip_vs_pe_ not found
[  363.895103][T19336] tipc: Disabling bearer <eth:syzkaller0>
[  364.000131][T19346] tipc: Resetting bearer <eth:syzkaller0>
[  364.063577][T19346] tipc: Resetting bearer <eth:syzkaller0>
[  364.116475][T19350] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.162327][T19350] syzkaller0: entered promiscuous mode
[  364.170545][T19357] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5296'.
[  364.196121][T19350] syzkaller0: entered allmulticast mode
[  364.282589][T19359] netlink: 'syz.8.5297': attribute type 5 has an invalid length.
[  364.308604][T19359] netlink: 'syz.8.5297': attribute type 7 has an invalid length.
[  364.370791][T19359] : entered promiscuous mode
[  364.438620][T19349] tipc: Resetting bearer <eth:syzkaller0>
[  364.475269][T19349] tipc: Disabling bearer <eth:syzkaller0>
[  364.697369][T19366] netlink: 'syz.0.5299': attribute type 1 has an invalid length.
[  364.793631][T19366] 8021q: adding VLAN 0 to HW filter on device bond14
[  364.872890][T19370] 8021q: adding VLAN 0 to HW filter on device bond14
[  364.881629][T19370] bond14: (slave vcan0): The slave device specified does not support setting the MAC address
[  364.894463][T19370] bond14: (slave vcan0): Error -95 calling set_mac_address
[  364.971246][T19366] gretap2: entered promiscuous mode
[  364.983155][T19366] bond14: (slave gretap2): making interface the new active one
[  365.000148][T19366] bond14: (slave gretap2): Enslaving as an active interface with an up link
[  365.116768][T19372] macvlan2: entered promiscuous mode
[  365.153021][T19372] macvlan2: entered allmulticast mode
[  365.193338][T19372] bond14: entered promiscuous mode
[  365.206065][T19372] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  365.233315][T19372] bond14: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  365.262648][T19372] bond14: left promiscuous mode
[  365.371408][T19378] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  365.468698][T19382] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  365.515555][T19382] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) !
[  365.565636][T19384] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.591084][T19384] syzkaller0: entered promiscuous mode
[  365.623556][T19384] syzkaller0: entered allmulticast mode
[  365.676554][T19384] tipc: Resetting bearer <eth:syzkaller0>
[  365.739542][T19383] tipc: Resetting bearer <eth:syzkaller0>
[  365.762455][T19383] tipc: Disabling bearer <eth:syzkaller0>
[  365.814602][T19399] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.830838][T19399] syzkaller0: entered promiscuous mode
[  365.842000][T19399] syzkaller0: entered allmulticast mode
[  365.883861][T19399] tipc: Resetting bearer <eth:syzkaller0>
[  365.907835][T19398] tipc: Resetting bearer <eth:syzkaller0>
[  365.920197][T18020] hid-generic 0005:0B57:0000.0001: collection stack underflow
[  365.933524][T19398] tipc: Disabling bearer <eth:syzkaller0>
[  365.966489][T18020] hid-generic 0005:0B57:0000.0001: item 0 0 0 12 parsing failed
[  366.012787][T18020] hid-generic 0005:0B57:0000.0001: probe with driver hid-generic failed with error -22
[  366.026951][T19404] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.063491][T19404] syzkaller0: entered promiscuous mode
[  366.095465][T19404] syzkaller0: entered allmulticast mode
[  366.113188][T19413] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  366.129139][T19412] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.138480][T19409] netlink: 'syz.3.5312': attribute type 4 has an invalid length.
[  366.157873][T19404] tipc: Resetting bearer <eth:syzkaller0>
[  366.176569][T19412] syzkaller0: entered promiscuous mode
[  366.185511][T19412] syzkaller0: entered allmulticast mode
[  366.207180][T19416] netlink: 'syz.3.5312': attribute type 4 has an invalid length.
[  366.216524][T19403] tipc: Resetting bearer <eth:syzkaller0>
[  366.225743][T19403] tipc: Disabling bearer <eth:syzkaller0>
[  366.254355][T19415] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.267401][T19412] tipc: Resetting bearer <eth:syzkaller0>
[  366.276916][T19415] syzkaller0: entered promiscuous mode
[  366.282567][T19415] syzkaller0: entered allmulticast mode
[  366.295599][T19411] tipc: Resetting bearer <eth:syzkaller0>
[  366.314474][T19411] tipc: Disabling bearer <eth:syzkaller0>
[  366.345697][T19422] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  366.362138][T19415] tipc: Resetting bearer <eth:syzkaller0>
[  366.363414][T19423] netlink: 332 bytes leftover after parsing attributes in process `syz.6.5318'.
[  366.377488][T19423] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5318'.
[  366.386998][T19423] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5318'.
[  366.398251][T19414] tipc: Resetting bearer <eth:syzkaller0>
[  366.408767][T19414] tipc: Disabling bearer <eth:syzkaller0>
[  366.553514][T19433] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  366.672710][T19438] team_slave_0: left promiscuous mode
[  366.695263][T19438] team0: Port device team_slave_0 removed
[  366.702496][T19438] team_slave_1: left promiscuous mode
[  366.712695][T19438] team0: Port device team_slave_1 removed
[  366.719663][T19438] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.727097][T19438] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.764028][T19440] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.786247][T19429] tc_dump_action: action bad kind
[  366.818318][T19447] netlink: 'syz.3.5325': attribute type 1 has an invalid length.
[  366.926859][T19440] syzkaller0: entered promiscuous mode
[  366.932609][T19440] syzkaller0: entered allmulticast mode
[  366.964277][T19447] smc: adding net device bond0 with user defined pnetid SYZ2
[  366.973574][T19447] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.011913][T19443] tipc: Resetting bearer <eth:syzkaller0>
[  367.052642][T19453] veth23: entered promiscuous mode
[  367.064190][T19453] bond0: (slave veth23): Enslaving as an active interface with a down link
[  367.075220][T19439] tipc: Resetting bearer <eth:syzkaller0>
[  367.103363][T19439] tipc: Disabling bearer <eth:syzkaller0>
[  367.114968][T19450] erspan0: entered allmulticast mode
[  367.124949][T19450] bond0: (slave erspan0): making interface the new active one
[  367.134130][T19450] erspan0: entered promiscuous mode
[  367.140401][T19450] bond0: (slave erspan0): Enslaving as an active interface with an up link
[  367.226262][T19467] ieee802154 phy0 wpan0: encryption failed: -22
[  367.237041][T19463] team0: Mode changed to "loadbalance"
[  367.387063][T19481] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5331'.
[  367.403207][T19480] netlink: 'syz.7.5333': attribute type 10 has an invalid length.
[  367.439673][T19480] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5333'.
[  367.502031][T19480] geneve0: entered promiscuous mode
[  367.530520][T19480] team0: Port device geneve0 added
[  367.637440][T19493] lo speed is unknown, defaulting to 1000
[  367.643828][T19493] lo speed is unknown, defaulting to 1000
[  367.650141][T19493] lo speed is unknown, defaulting to 1000
[  367.666406][T19493] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  367.671721][T19489] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.697183][T19493] lo speed is unknown, defaulting to 1000
[  367.785123][T19489] syzkaller0: entered promiscuous mode
[  367.798176][T19489] syzkaller0: entered allmulticast mode
[  367.844764][T19493] lo speed is unknown, defaulting to 1000
[  367.870291][T19499] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.892703][T19493] lo speed is unknown, defaulting to 1000
[  367.893890][T19491] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5334'.
[  367.910693][T19489] tipc: Resetting bearer <eth:syzkaller0>
[  367.918204][T19493] lo speed is unknown, defaulting to 1000
[  367.925387][T19486] tipc: Resetting bearer <eth:syzkaller0>
[  367.937059][T19486] tipc: Disabling bearer <eth:syzkaller0>
[  367.974877][T19493] lo speed is unknown, defaulting to 1000
[  367.996136][T19493] lo speed is unknown, defaulting to 1000
[  368.034887][T19506] bond5: option mode: unable to set because the bond device has slaves
[  368.051694][T19506] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  368.071153][T19506] bond5: (slave macvlan2): Enslaving as an active interface with an up link
[  368.090133][T19493] lo speed is unknown, defaulting to 1000
[  368.105557][T19493] lo speed is unknown, defaulting to 1000
[  368.125556][T19493] lo speed is unknown, defaulting to 1000
[  368.145528][T19493] lo speed is unknown, defaulting to 1000
[  368.154359][T19506] bond0: (slave erspan0): Releasing active interface
[  368.163063][T19506] erspan0: left promiscuous mode
[  368.186491][T19506] dummy0: left allmulticast mode
[  368.197020][T19506] bridge0: port 1(dummy0) entered disabled state
[  368.213383][T19506] bond2: (slave bond3): Releasing backup interface
[  368.276398][T19506] bond5: (slave ip6gretap1): Releasing active interface
[  368.285121][T19506] bond5: (slave macvlan2): making interface the new active one
[  368.296802][T19506] bond6: (slave veth19): Releasing active interface
[  368.305470][T19506] bond7: (slave bridge8): Removing an active aggregator
[  368.313265][T19506] bond7: (slave bridge8): Releasing backup interface
[  368.322816][T19506] bridge8: left promiscuous mode
[  368.327882][T19506] bridge8: left allmulticast mode
[  368.334633][T19506] bond8: (slave gretap2): Releasing active interface
[  368.342832][T19506] gretap2: left allmulticast mode
[  368.353576][T19506] bond9: (slave bridge9): Releasing active interface
[  368.372515][T19506] bond10: (slave veth21): Releasing active interface
[  368.385579][T19506] bond0: (slave veth23): Releasing active interface
[  368.399443][T19506] bond5: (slave macvlan2): Releasing active interface
[  368.408542][T19493] lo speed is unknown, defaulting to 1000
[  368.445238][T19518] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  368.453016][T19520] syzkaller0: entered promiscuous mode
[  368.458535][T19520] syzkaller0: entered allmulticast mode
[  368.515255][T19514] tipc: Resetting bearer <eth:syzkaller0>
[  368.545073][T19515] lo speed is unknown, defaulting to 1000
[  368.560180][T19512] tipc: Resetting bearer <eth:syzkaller0>
[  368.585404][T19512] tipc: Disabling bearer <eth:syzkaller0>
[  368.897066][T19545] lo speed is unknown, defaulting to 1000
[  368.935891][T19548] netlink: 128 bytes leftover after parsing attributes in process `syz.7.5350'.
[  369.196933][T19553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  369.205216][T19553] syzkaller0: entered promiscuous mode
[  369.212369][T19553] syzkaller0: entered allmulticast mode
[  369.227768][T19553] tipc: Resetting bearer <eth:syzkaller0>
[  369.235731][T19552] tipc: Resetting bearer <eth:syzkaller0>
[  369.243261][T19552] tipc: Disabling bearer <eth:syzkaller0>
[  369.407332][T19556] lo speed is unknown, defaulting to 1000
[  369.445716][T19561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5353'.
[  369.464130][T19562] geneve2: entered allmulticast mode
[  369.588179][T19570] netlink: 'syz.3.5357': attribute type 1 has an invalid length.
[  369.684523][T19572] lo speed is unknown, defaulting to 1000
[  369.728411][T19570] bond11: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  369.940626][T19584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5357'.
[  369.952934][T19570] veth25: entered promiscuous mode
[  369.975176][T19585] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5361'.
[  369.993594][T19570] bond11: (slave veth25): Enslaving as a backup interface with a down link
[  370.037322][T19582] bridge_slave_0: left allmulticast mode
[  370.049777][T19582] bridge_slave_0: left promiscuous mode
[  370.064236][T19582] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.101259][T19582] bridge_slave_1: left allmulticast mode
[  370.115609][T19582] bridge_slave_1: left promiscuous mode
[  370.132471][T19582] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.161858][T19582] bond0: (slave bond_slave_0): Releasing backup interface
[  370.197889][T19582] bond0: (slave bond_slave_1): Releasing backup interface
[  370.246776][T19582] team0: Failed to send options change via netlink (err -105)
[  370.255122][T19582] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  370.265937][T19582] team0: Port device team_slave_0 removed
[  370.278361][T19582] team0: Failed to send options change via netlink (err -105)
[  370.287089][T19582] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  370.302681][T19582] team0: Port device team_slave_1 removed
[  370.314716][T19582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  370.333595][T19582] batman_adv: batadv0: Removing interface: batadv_slave_0
[  370.358847][T19582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  370.373990][T19582] batman_adv: batadv0: Removing interface: batadv_slave_1
[  370.416817][T19584] 8021q: adding VLAN 0 to HW filter on device bond11
[  370.426681][ T1320] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  370.498075][T19585] team0: Failed to send options change via netlink (err -105)
[  370.539508][T19585] team0: Mode changed to "loadbalance"
[  370.569142][   T36] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  370.639447][T19593] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  370.730007][T19597] lo speed is unknown, defaulting to 1000
[  370.823325][T19601] xt_policy: neither incoming nor outgoing policy selected
[  371.011068][T19608] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.018591][T19608] syzkaller0: entered promiscuous mode
[  371.024434][T19608] syzkaller0: entered allmulticast mode
[  371.041391][T19608] tipc: Resetting bearer <eth:syzkaller0>
[  371.054647][T19607] tipc: Resetting bearer <eth:syzkaller0>
[  371.076846][T19607] tipc: Disabling bearer <eth:syzkaller0>
[  371.312955][T19619] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  371.382658][T19623] netlink: 'syz.3.5373': attribute type 11 has an invalid length.
[  371.645999][T19629] lo speed is unknown, defaulting to 1000
[  371.884859][T19639] bond0: (slave rose0): Error: Slave does not support XDP
[  371.973682][T19641] __nla_validate_parse: 2 callbacks suppressed
[  371.973701][T19641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5377'.
[  372.020941][T19646] netlink: 248 bytes leftover after parsing attributes in process `syz.6.5378'.
[  372.064219][T19649] netlink: 'syz.3.5379': attribute type 1 has an invalid length.
[  372.064939][   T30] audit: type=1800 audit(1756382801.049:14): pid=19635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5375" name="memory.events" dev="tmpfs" ino=134 res=0 errno=0
[  372.140261][T19652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5379'.
[  372.149577][T19652] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5379'.
[  372.292850][T19652] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  372.376175][T19654] netlink: 'syz.0.5380': attribute type 6 has an invalid length.
[  372.389874][T19652] gretap3: entered promiscuous mode
[  372.548857][T19661] netlink: 'syz.7.5381': attribute type 29 has an invalid length.
[  372.653579][T19669] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  372.670905][T19667] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  372.685496][T19667] syzkaller0: entered promiscuous mode
[  372.691276][T19667] syzkaller0: entered allmulticast mode
[  372.728814][T19667] tipc: Resetting bearer <eth:syzkaller0>
[  372.740047][T19666] tipc: Resetting bearer <eth:syzkaller0>
[  372.778712][T19666] tipc: Disabling bearer <eth:syzkaller0>
[  372.802931][T19672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5385'.
[  373.043859][T19684] netlink: 'syz.3.5389': attribute type 1 has an invalid length.
[  373.052249][T19685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5388'.
[  373.072037][   T30] audit: type=1800 audit(1756382802.069:15): pid=19675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5386" name="memory.events" dev="tmpfs" ino=484 res=0 errno=0
[  373.116938][T19684] 8021q: adding VLAN 0 to HW filter on device bond12
[  373.166906][T19688] bond12: (slave ip6gretap3): making interface the new active one
[  373.190870][T19688] bond12: (slave ip6gretap3): Enslaving as an active interface with an up link
[  373.218052][T19689] bridge11: port 1(bond15) entered blocking state
[  373.231002][T19689] bridge11: port 1(bond15) entered disabled state
[  373.244346][T19689] bond15: entered allmulticast mode
[  373.264500][T19689] bond15: entered promiscuous mode
[  373.354078][T19696] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  373.373825][T19697] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  373.403704][T19697] syzkaller0: entered promiscuous mode
[  373.427726][T19697] syzkaller0: entered allmulticast mode
[  373.440217][T19704] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5396'.
[  373.457553][T19704] bridge0: entered allmulticast mode
[  373.465285][T19704] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5396'.
[  373.484009][T19704] bridge0 (unregistering): left allmulticast mode
[  373.548769][T19709] tipc: Resetting bearer <eth:syzkaller0>
[  373.632419][T19712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5397'.
[  373.670150][   T30] audit: type=1800 audit(1756382802.659:16): pid=19702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5394" name="memory.events" dev="tmpfs" ino=251 res=0 errno=0
[  373.769661][T19695] tipc: Resetting bearer <eth:syzkaller0>
[  373.780025][T19695] tipc: Disabling bearer <eth:syzkaller0>
[  374.157507][T19731] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  374.245579][T19729] lo speed is unknown, defaulting to 1000
[  374.256287][T19731] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  374.320262][T19731] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  374.375396][T19731] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  374.453774][T18936] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  374.488236][   T37] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  374.520648][   T37] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  374.539362][   T37] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  374.571937][T19736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5404'.
[  374.793257][T19738] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  375.044377][T19744] bridge0: port 3(veth0_to_team) entered blocking state
[  375.051941][T19744] bridge0: port 3(veth0_to_team) entered disabled state
[  375.080111][T19744] veth0_to_team: entered allmulticast mode
[  375.097355][T19744] veth0_to_team: entered promiscuous mode
[  375.132913][T19750] veth0_to_batadv: Caught tx_queue_len zero misconfig
[  375.212820][T19751] IPVS: length: 49 != 24
[  376.316732][T19771] netlink: 'syz.6.5415': attribute type 10 has an invalid length.
[  376.345743][T19771] batman_adv: batadv0: Removing interface: batadv_slave_0
[  376.366454][T19771] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  377.148848][T19787] __nla_validate_parse: 3 callbacks suppressed
[  377.148871][T19787] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5418'.
[  377.604418][T19798] netlink: 'syz.0.5422': attribute type 1 has an invalid length.
[  377.659438][T19801] netlink: 'syz.7.5423': attribute type 9 has an invalid length.
[  377.666153][T19798] 8021q: adding VLAN 0 to HW filter on device bond16
[  377.675897][T19801] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5423'.
[  377.693357][T19802] bond16: (slave veth17): Enslaving as an active interface with a down link
[  377.707092][T19801] hsr0: entered promiscuous mode
[  377.717574][T18020] IPVS: starting estimator thread 0...
[  377.723465][T19801] macvlan2: entered promiscuous mode
[  377.729440][T19801] macvlan2: entered allmulticast mode
[  377.738376][T19801] hsr0: entered allmulticast mode
[  377.743917][T19801] hsr_slave_0: entered allmulticast mode
[  377.754104][T19801] hsr_slave_1: entered allmulticast mode
[  377.786926][T19798] macvlan2: entered promiscuous mode
[  377.804456][T19798] macvlan2: entered allmulticast mode
[  377.816015][T19798] bond16: entered promiscuous mode
[  377.821888][T19798] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  377.829839][T19798] bond16: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  377.850282][T19804] IPVS: using max 36 ests per chain, 86400 per kthread
[  377.857334][T19798] bond16: left promiscuous mode
[  377.887029][T19806] syzkaller0: entered promiscuous mode
[  377.892806][T19806] syzkaller0: entered allmulticast mode
[  377.903585][T19806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  377.930793][T19806] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  377.946251][T19806] tipc: Resetting bearer <eth:syzkaller0>
[  377.990526][T19805] tipc: Resetting bearer <eth:syzkaller0>
[  377.999946][T19805] tipc: Disabling bearer <eth:syzkaller0>
[  378.036315][T19814] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5427'.
[  378.109853][T19810] lo speed is unknown, defaulting to 1000
[  378.360284][T19819] netlink: 'syz.8.5428': attribute type 1 has an invalid length.
[  378.404197][T19823] veth3: entered promiscuous mode
[  378.525370][T19827] erspan0: entered allmulticast mode
[  378.557756][T19835] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  378.622316][T19819] 8021q: adding VLAN 0 to HW filter on device bond1
[  378.753466][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  378.783916][T19835] syzkaller0: entered promiscuous mode
[  378.803351][T19835] syzkaller0: entered allmulticast mode
[  378.896070][T19847] netlink: 'syz.0.5435': attribute type 1 has an invalid length.
[  378.942531][T19847] 8021q: adding VLAN 0 to HW filter on device bond17
[  379.067827][T19848] lo speed is unknown, defaulting to 1000
[  379.256271][T19856] netlink: 'syz.7.5436': attribute type 11 has an invalid length.
[  379.269666][T19856] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5436'.
[  379.286157][T19860] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  379.293509][T19860] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  379.497367][T19868] tipc: New replicast peer: 255.255.255.255
[  379.531280][T19868] tipc: Enabled bearer <udp:syz2>, priority 10
[  379.586162][T19873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5441'.
[  380.123387][   T30] audit: type=1800 audit(1756382809.109:17): pid=19875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5442" name="memory.events" dev="tmpfs" ino=287 res=0 errno=0
[  380.508198][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5445'.
[  380.517340][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5445'.
[  380.529027][T18020] tipc: Node number set to 3290346884
[  380.539640][T19888] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.547622][T19888] syzkaller0: entered promiscuous mode
[  380.556347][T19892] netlink: 'syz.7.5448': attribute type 1 has an invalid length.
[  380.564456][T19888] syzkaller0: entered allmulticast mode
[  380.583750][T19892] smc: adding net device bond0 with user defined pnetid SYZ2
[  380.592688][T19892] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.604712][T19888] tipc: Resetting bearer <eth:syzkaller0>
[  380.612111][T19887] tipc: Resetting bearer <eth:syzkaller0>
[  380.619451][T19887] tipc: Disabling bearer <eth:syzkaller0>
[  380.635444][T19894] bond0: (slave ip6gretap1): making interface the new active one
[  380.648489][T19894] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  380.716275][T19892] veth3: entered promiscuous mode
[  380.729724][T19892] bond0: (slave veth3): Enslaving as an active interface with a down link
[  380.761710][T19899] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5449'.
[  380.802932][T19908] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5459'.
[  380.852476][T19907] lo speed is unknown, defaulting to 1000
[  380.992468][T19917] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5453'.
[  381.091113][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  381.220865][T19931] syzkaller0: entered promiscuous mode
[  381.226363][T19931] syzkaller0: entered allmulticast mode
[  381.423393][T19942] lo speed is unknown, defaulting to 1000
[  381.998288][T19959] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  382.019821][T19959] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  382.037645][T19959] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  382.151528][T19967] lo speed is unknown, defaulting to 1000
[  382.308125][T19977] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.368185][T19977] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.473221][T19977] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.550577][T19981] lo speed is unknown, defaulting to 1000
[  382.571236][T19977] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.640863][ T1320] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.675898][ T1320] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.708653][ T1320] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.734644][ T1320] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  383.120592][T20002] __nla_validate_parse: 2 callbacks suppressed
[  383.120613][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5472'.
[  383.505086][T20005] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  383.906373][T20017] lo speed is unknown, defaulting to 1000
[  383.996911][T20021] lo speed is unknown, defaulting to 1000
[  384.663646][T20043] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.675848][T20043] syzkaller0: entered promiscuous mode
[  384.684679][T20043] syzkaller0: entered allmulticast mode
[  384.704354][T20043] tipc: Resetting bearer <eth:syzkaller0>
[  384.713821][T20042] tipc: Resetting bearer <eth:syzkaller0>
[  384.743318][T20042] tipc: Disabling bearer <eth:syzkaller0>
[  385.057971][T20051] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5487'.
[  385.251657][T20063] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5489'.
[  385.275062][T20066] netlink: 248 bytes leftover after parsing attributes in process `syz.7.5490'.
[  385.766554][T20072] netlink: 'syz.8.5491': attribute type 1 has an invalid length.
[  385.882855][T20072] 8021q: adding VLAN 0 to HW filter on device bond2
[  385.914630][T20074] bond2: (slave ip6gretap1): making interface the new active one
[  385.932617][T20074] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  385.966805][T20080] veth3: entered promiscuous mode
[  385.982010][T20080] bond2: (slave veth3): Enslaving as an active interface with a down link
[  386.027020][T20084] netlink: zone id is out of range
[  386.035686][T20084] netlink: zone id is out of range
[  386.041278][T20086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.046851][T20084] netlink: zone id is out of range
[  386.049337][T20086] syzkaller0: entered promiscuous mode
[  386.058678][T20086] syzkaller0: entered allmulticast mode
[  386.095288][T20084] netlink: set zone limit has 4 unknown bytes
[  386.095528][T20087] netlink: del zone limit has 4 unknown bytes
[  386.108393][T20078] lo speed is unknown, defaulting to 1000
[  386.111051][T20086] tipc: Resetting bearer <eth:syzkaller0>
[  386.122986][T20085] tipc: Resetting bearer <eth:syzkaller0>
[  386.145384][T20085] tipc: Disabling bearer <eth:syzkaller0>
[  386.333602][T20097] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.473852][T20097] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.520723][T20106] lo speed is unknown, defaulting to 1000
[  386.534849][T20097] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.623267][T20097] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.729489][   T59] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.773555][   T59] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.801895][   T59] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.843119][   T59] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.035478][T20115] lo speed is unknown, defaulting to 1000
[  387.338096][T20127] block nbd2: server does not support multiple connections per device.
[  387.381008][T20127] block nbd2: shutting down sockets
[  387.689793][T20143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5509'.
[  387.891662][T20145] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  387.996871][T20147] Bluetooth: MGMT ver 1.23
[  388.039705][T20149] syzkaller0: entered promiscuous mode
[  388.055202][T20149] syzkaller0: entered allmulticast mode
[  388.072438][T20149] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  388.087955][T20149] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  388.127019][T20153] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  388.151836][T20149] tipc: Resetting bearer <eth:syzkaller0>
[  388.184918][T20148] tipc: Resetting bearer <eth:syzkaller0>
[  388.206385][T20148] tipc: Disabling bearer <eth:syzkaller0>
[  388.242998][T20156] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5515'.
[  388.252815][T20156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5515'.
[  388.267282][T20156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5515'.
[  388.364888][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5517'.
[  388.496948][T20169] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  388.513171][T20169] syzkaller0: entered promiscuous mode
[  388.524363][T20169] syzkaller0: entered allmulticast mode
[  388.545914][T20169] tipc: Resetting bearer <eth:syzkaller0>
[  388.564476][T20167] tipc: Resetting bearer <eth:syzkaller0>
[  388.589940][T20167] tipc: Disabling bearer <eth:syzkaller0>
[  388.794359][T20177] netlink: 'syz.6.5524': attribute type 1 has an invalid length.
[  388.795220][T20179] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5526'.
[  388.817458][T20179] 8021q: VLANs not supported on ipvlan1
[  388.836168][T20179] macsec1: entered promiscuous mode
[  388.844068][T20179] macsec1: entered allmulticast mode
[  388.966220][T20187] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5528'.
[  388.988410][T20177] 8021q: adding VLAN 0 to HW filter on device bond5
[  389.153642][T20193] netlink: 'syz.6.5529': attribute type 1 has an invalid length.
[  389.198900][T20193] 8021q: adding VLAN 0 to HW filter on device bond6
[  389.227111][T20198] bond6: (slave geneve3): making interface the new active one
[  389.267073][T20198] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  389.295954][ T3602] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.313193][ T3602] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.332904][ T3602] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.366372][ T3602] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.099582][ T5861] Bluetooth: hci8: command tx timeout
[  390.565963][T20203] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5542'.
[  390.583202][T20206] netlink: 'syz.7.5534': attribute type 10 has an invalid length.
[  390.598699][T20203] netlink: 'syz.0.5542': attribute type 1 has an invalid length.
[  390.607854][T20207] netlink: 'syz.6.5533': attribute type 1 has an invalid length.
[  390.662489][T20203] 8021q: adding VLAN 0 to HW filter on device bond18
[  390.710042][T20210] bond18: (slave gretap3): making interface the new active one
[  390.723682][T20203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5542'.
[  390.754092][T20210] bond18: (slave gretap3): Enslaving as an active interface with an up link
[  390.897971][T20207] 8021q: adding VLAN 0 to HW filter on device bond7
[  390.934311][T20212] bond7: (slave ip6gretap1): making interface the new active one
[  390.956778][T20212] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link
[  391.021334][T20214] veth3: entered promiscuous mode
[  391.042684][T20214] bond7: (slave veth3): Enslaving as an active interface with a down link
[  391.081263][T20203] macsec1: entered promiscuous mode
[  391.098823][T20203] bond0: entered promiscuous mode
[  391.123873][T20203] geneve2: entered promiscuous mode
[  391.140105][T20203] bond0: left promiscuous mode
[  391.147465][T20203] geneve2: left promiscuous mode
[  391.174891][T20215] erspan0: entered allmulticast mode
[  391.485315][T20224] syzkaller0: entered promiscuous mode
[  391.520348][T20224] syzkaller0: entered allmulticast mode
[  391.555097][T20237] netlink: 'syz.3.5540': attribute type 7 has an invalid length.
[  391.600515][T20237] netlink: 'syz.3.5540': attribute type 8 has an invalid length.
[  391.606937][T20243] netlink: 'syz.3.5540': attribute type 1 has an invalid length.
[  391.629050][T20237] netlink: 'syz.3.5540': attribute type 15 has an invalid length.
[  391.659501][T20243] netlink: 208 bytes leftover after parsing attributes in process `syz.3.5540'.
[  391.995796][T20254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  392.024641][T20254] syzkaller0: entered promiscuous mode
[  392.031744][T20254] syzkaller0: entered allmulticast mode
[  392.064850][T20261] pimreg: left allmulticast mode
[  392.117117][T20254] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  392.147324][T20254] tipc: Resetting bearer <eth:syzkaller0>
[  392.212745][T20254] tipc: Resetting bearer <eth:syzkaller0>
[  392.237064][T20254] tipc: Disabling bearer <eth:syzkaller0>
[  392.343425][T20275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  392.365821][T18020] lo speed is unknown, defaulting to 1000
[  392.373593][T20278] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.425802][T20278] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.484888][T20285] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5551'.
[  392.544684][T20278] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.565786][T20285] macvtap1: entered promiscuous mode
[  392.571401][T20285] team0: entered promiscuous mode
[  392.576805][T20285] macvtap1: entered allmulticast mode
[  392.582596][T20285] team0: entered allmulticast mode
[  392.588361][T20285] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  392.597688][T20287] team0: left allmulticast mode
[  392.607268][T20287] team0: left promiscuous mode
[  392.621901][T20278] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.707596][ T3602] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  392.741549][T20289] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  392.752770][ T1320] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  392.762136][ T1320] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  392.770712][ T1320] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  392.983818][T20293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  393.509197][T20313] __nla_validate_parse: 2 callbacks suppressed
[  393.509222][T20313] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5569'.
[  393.569424][T20319] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5559'.
[  394.553608][T20333] lo speed is unknown, defaulting to 1000
[  394.690535][T20345] netlink: 'syz.8.5564': attribute type 1 has an invalid length.
[  394.722300][T20345] 8021q: adding VLAN 0 to HW filter on device bond3
[  394.755759][T20345] bond3: (slave geneve2): making interface the new active one
[  394.770021][T20345] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  394.850928][T20345] bond3: entered promiscuous mode
[  394.856020][T20345] geneve2: entered promiscuous mode
[  395.407495][T20360] netlink: 248 bytes leftover after parsing attributes in process `syz.7.5573'.
[  395.609821][T20369] bridge0: port 1(veth0_to_team) entered blocking state
[  395.626924][T20369] bridge0: port 1(veth0_to_team) entered disabled state
[  395.644259][T20369] veth0_to_team: entered allmulticast mode
[  395.685085][T20369] veth0_to_team: entered promiscuous mode
[  395.710476][T20374] netlink: 'syz.3.5577': attribute type 1 has an invalid length.
[  396.143436][T20374] 8021q: adding VLAN 0 to HW filter on device bond13
[  396.352344][T20376] bond13: (slave erspan0): making interface the new active one
[  396.366986][T20376] bond13: (slave erspan0): Enslaving as an active interface with an up link
[  396.548533][T20387] lo speed is unknown, defaulting to 1000
[  396.732224][T20394] lo speed is unknown, defaulting to 1000
[  396.820276][T20398] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  396.839142][   T24] IPVS: starting estimator thread 0...
[  396.963134][T20403] IPVS: using max 37 ests per chain, 88800 per kthread
[  397.014835][T20408] netlink: 248 bytes leftover after parsing attributes in process `syz.8.5586'.
[  397.253497][T20416] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  398.093626][T20438] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  398.331049][T20440] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  398.634799][T20305] Set syz1 is full, maxelem 65536 reached
[  398.854801][T20453] ieee802154 phy0 wpan0: encryption failed: -22
[  398.868962][T20452] lo speed is unknown, defaulting to 1000
[  398.942691][T20458] netlink: 264 bytes leftover after parsing attributes in process `syz.6.5603'.
[  398.967829][T20458] batman_adv: batadv0: Adding interface: macvlan1
[  398.989641][T20458] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.049193][T20458] batman_adv: batadv0: Not using interface macvlan1 (retrying later): interface not active
[  399.251424][   T24] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  399.265973][   T24] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  399.279393][T20467] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  399.306756][T20471] syz_tun: entered promiscuous mode
[  399.315541][T20471] batadv_slave_0: entered promiscuous mode
[  399.352447][T20471] batadv_slave_0: left promiscuous mode
[  399.392595][T20471] syz_tun: left promiscuous mode
[  399.617419][T20484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5612'.
[  399.667085][T20488] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5613'.
[  399.673232][T20489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5612'.
[  399.703723][T20484] macvtap1: entered promiscuous mode
[  399.720521][T20484] dummy0: entered promiscuous mode
[  399.729848][T20484] macvtap1: entered allmulticast mode
[  399.735451][T20484] dummy0: entered allmulticast mode
[  399.836844][T20489] dummy0: left allmulticast mode
[  399.846217][T20489] dummy0: left promiscuous mode
[  399.890344][T20493] batman_adv: batadv0: Adding interface: dummy0
[  399.906877][T20493] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.960243][T20493] batman_adv: batadv0: Interface activated: dummy0
[  399.970946][T20492] batadv0: mtu less than device minimum
[  399.980402][T20492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  399.991699][T20492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  400.002936][T20492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  400.014139][T20492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  400.025393][T20492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  400.036646][T20492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  400.047792][T20492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  400.059048][T20492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  400.117693][T20497] batman_adv: batadv0: Adding interface: ip6gretap2
[  400.129426][T20497] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  400.155316][T20497] batman_adv: batadv0: Interface activated: ip6gretap2
[  400.276823][T20507] lo speed is unknown, defaulting to 1000
[  400.286468][T20509] netlink: 'syz.0.5618': attribute type 13 has an invalid length.
[  400.305732][T20509] netlink: 'syz.0.5618': attribute type 17 has an invalid length.
[  400.336839][T20511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5619'.
[  400.388605][T20516] netlink: 248 bytes leftover after parsing attributes in process `syz.8.5620'.
[  400.453426][T20509] erspan0: left allmulticast mode
[  400.473835][T20521] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input8
[  400.683419][T20531] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  400.698706][T20532] netlink: 240 bytes leftover after parsing attributes in process `syz.7.5623'.
[  400.918302][T20539] lo speed is unknown, defaulting to 1000
[  401.095867][T20554] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5632'.
[  401.145313][T20557] team0: No ports can be present during mode change
[  401.168684][T20556] lo speed is unknown, defaulting to 1000
[  401.563637][T20581] bond8: left promiscuous mode
[  401.569374][T20581] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  401.576791][T20581] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  401.585360][T20581] veth15: left promiscuous mode
[  401.591084][T20581] bond13: left promiscuous mode
[  401.596044][T20581] bridge10: left promiscuous mode
[  401.601421][T20581] bond13: left allmulticast mode
[  401.606558][T20581] bridge10: left allmulticast mode
[  401.612838][T20581] gretap2: left promiscuous mode
[  401.644085][T20587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5641'.
[  401.716605][T20590] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5642'.
[  401.727573][T20584] netlink: 'syz.3.5641': attribute type 1 has an invalid length.
[  401.801657][T20597] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input9
[  402.085300][T20614] hsr_slave_1 (unregistering): left promiscuous mode
[  402.299866][T18023] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[  402.308039][T18023] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[  402.315727][T18023] hid-generic 0005:16BF:5505.0003: reserved main item tag 0xe
[  402.323621][T18023] hid-generic 0005:16BF:5505.0003: item fetching failed at offset 16/18
[  402.333840][T18023] hid-generic 0005:16BF:5505.0003: probe with driver hid-generic failed with error -22
[  402.460615][T20632] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  402.672184][ T5861] Bluetooth: hci8: link tx timeout
[  402.678473][ T5861] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[  402.698315][T20643] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.771259][T20642] veth19: entered promiscuous mode
[  402.813014][T20643] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.876798][T20643] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.007014][T20643] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.087679][T20649] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  403.147569][T20650] syzkaller0: entered promiscuous mode
[  403.173739][T20650] syzkaller0: entered allmulticast mode
[  403.214684][   T37] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  403.238486][T20649] tipc: Resetting bearer <eth:syzkaller0>
[  403.277859][T20648] tipc: Resetting bearer <eth:syzkaller0>
[  403.297006][T20648] tipc: Disabling bearer <eth:syzkaller0>
[  403.326001][   T59] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  403.353140][   T59] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  403.402250][   T37] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.148071][T20676] lo speed is unknown, defaulting to 1000
[  404.409472][T20687] lo speed is unknown, defaulting to 1000
[  404.417316][T20687] lo speed is unknown, defaulting to 1000
[  404.424161][T20687] lo speed is unknown, defaulting to 1000
[  404.478114][T20691] netlink: 'syz.8.5670': attribute type 12 has an invalid length.
[  404.612936][T20687] infiniband syz0: set down
[  404.679394][T20687] infiniband syz0: added lo
[  404.701092][ T5994] lo speed is unknown, defaulting to 1000
[  404.742789][ T5871] Bluetooth: hci8: command 0x0406 tx timeout
[  404.813777][T20687] RDS/IB: syz0: added
[  404.845909][T20687] smc: adding ib device syz0 with port count 1
[  404.869089][T20687] smc:    ib device syz0 port 1 has pnetid 
[  404.917195][T20687] lo speed is unknown, defaulting to 1000
[  404.951920][ T5994] lo speed is unknown, defaulting to 1000
[  404.978872][T20698] __nla_validate_parse: 10 callbacks suppressed
[  404.978893][T20698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5671'.
[  405.112939][T20687] lo speed is unknown, defaulting to 1000
[  405.191772][T20709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5674'.
[  405.344804][T20687] lo speed is unknown, defaulting to 1000
[  405.504707][T20722] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5678'.
[  405.653561][T20729] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5680'.
[  405.708534][T20687] lo speed is unknown, defaulting to 1000
[  405.816083][T20735] veth0_virt_wifi: renamed from vlan0
[  405.993343][T20737] lo speed is unknown, defaulting to 1000
[  406.062712][T20687] lo speed is unknown, defaulting to 1000
[  406.188790][T20742] netlink: 'syz.8.5684': attribute type 83 has an invalid length.
[  406.315568][T20742] lo speed is unknown, defaulting to 1000
[  406.416263][T20737] lo speed is unknown, defaulting to 1000
[  406.443544][T20754] sctp: [Deprecated]: syz.7.5686 (pid 20754) Use of struct sctp_assoc_value in delayed_ack socket option.
[  406.443544][T20754] Use struct sctp_sack_info instead
[  406.449969][T20740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5682'.
[  406.481059][T20754] sctp: [Deprecated]: syz.7.5686 (pid 20754) Use of struct sctp_assoc_value in delayed_ack socket option.
[  406.481059][T20754] Use struct sctp_sack_info instead
[  406.521871][T20750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5682'.
[  406.542698][   T30] audit: type=1800 audit(1756382835.519:18): pid=20749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5685" name="memory.events" dev="tmpfs" ino=6129 res=0 errno=0
[  406.612310][T20740] netlink: 'syz.0.5682': attribute type 13 has an invalid length.
[  406.649439][T20740] netlink: 'syz.0.5682': attribute type 17 has an invalid length.
[  406.736857][T20740] net_ratelimit: 56 callbacks suppressed
[  406.736870][T20740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  407.122177][T20742] lo speed is unknown, defaulting to 1000
[  407.739046][T20687] lo speed is unknown, defaulting to 1000
[  407.956513][T20687] lo speed is unknown, defaulting to 1000
[  408.023940][T20791] netlink: 248 bytes leftover after parsing attributes in process `syz.7.5692'.
[  408.126460][T20687] lo speed is unknown, defaulting to 1000
[  408.287546][T20687] lo speed is unknown, defaulting to 1000
[  408.672819][T20797] lo speed is unknown, defaulting to 1000
[  408.679631][T20797] lo speed is unknown, defaulting to 1000
[  408.696946][T20798] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5694'.
[  408.987768][T20800] team0: Mode changed to "activebackup"
[  409.344024][T20813] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  409.578309][T20819] syzkaller0: entered promiscuous mode
[  409.628673][T20819] syzkaller0: entered allmulticast mode
[  409.709703][T20830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  410.017655][T20835] tipc: Resetting bearer <eth:syzkaller0>
[  410.068065][T20817] tipc: Resetting bearer <eth:syzkaller0>
[  410.083204][T20817] tipc: Disabling bearer <eth:syzkaller0>
[  410.156162][T20839] lo speed is unknown, defaulting to 1000
[  410.178380][T20839] lo speed is unknown, defaulting to 1000
[  410.811832][T20857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5709'.
[  410.882194][T20861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5711'.
[  411.039559][T20863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5711'.
[  411.488415][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5712'.
[  411.829644][T20875] lo speed is unknown, defaulting to 1000
[  411.857802][T20875] lo speed is unknown, defaulting to 1000
[  412.158095][T20894] netlink: 'syz.7.5721': attribute type 13 has an invalid length.
[  412.189804][T20894] netlink: 'syz.7.5721': attribute type 17 has an invalid length.
[  412.450499][T20894] 8021q: adding VLAN 0 to HW filter on device team0
[  412.495232][T20894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  412.587218][T20905] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  412.624627][T20905] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5723'.
[  413.018301][T20920] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5727'.
[  413.029128][T20921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5728'.
[  413.087907][T20922] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5727'.
[  413.173902][T20920] macvtap2: entered promiscuous mode
[  413.186204][T20920] bond0: entered promiscuous mode
[  413.212478][T20920] macvtap2: entered allmulticast mode
[  413.217983][T20920] bond0: entered allmulticast mode
[  413.228597][T20920] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  413.245456][T20922] bond0: left allmulticast mode
[  413.265354][T20922] bond0: left promiscuous mode
[  413.278118][T20928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5730'.
[  413.383591][T20939] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5733'.
[  413.456495][T20945] netlink: 'syz.7.5736': attribute type 10 has an invalid length.
[  413.466130][T20943] netlink: 'syz.0.5735': attribute type 1 has an invalid length.
[  413.572182][T20943] veth21: entered promiscuous mode
[  413.595733][T20947] erspan0: entered allmulticast mode
[  413.618804][T20947] bond12: (slave erspan0): Releasing active interface
[  413.707134][T20961] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  413.777713][T20963] lo speed is unknown, defaulting to 1000
[  413.790042][T20963] lo speed is unknown, defaulting to 1000
[  413.961729][T20974] vlan2: entered promiscuous mode
[  413.998497][T20974] macvtap0: entered promiscuous mode
[  414.035510][T20978] IPVS: stopping backup sync thread 20531 ...
[  414.292527][T20986] lo speed is unknown, defaulting to 1000
[  414.304465][T20986] lo speed is unknown, defaulting to 1000
[  414.523550][T20997] geneve4: entered promiscuous mode
[  414.765221][T21002] lo speed is unknown, defaulting to 1000
[  414.790671][T21002] lo speed is unknown, defaulting to 1000
[  414.908740][T21006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  415.008300][T21006] tipc: Resetting bearer <eth:syzkaller0>
[  415.031172][T21005] tipc: Disabling bearer <eth:syzkaller0>
[  415.067912][T21008] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  415.085081][T21008] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  415.112855][T21008] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  415.206614][T21013] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.389188][T21023] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  415.543848][T21013] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.615400][T21026] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  415.667166][T21035] syzkaller0: entered promiscuous mode
[  415.687108][T21035] syzkaller0: entered allmulticast mode
[  415.708703][T21039] erspan0: left allmulticast mode
[  415.733474][T21039] bond3: left promiscuous mode
[  415.738290][T21039] bridge2: left promiscuous mode
[  415.745973][T21039] bond3: left allmulticast mode
[  415.750960][T21039] bridge2: left allmulticast mode
[  415.787292][T21039] veth3: left promiscuous mode
[  415.793450][T21039] macvtap1: left promiscuous mode
[  415.801919][T21039] macvtap1: left allmulticast mode
[  415.813797][T21039] geneve4: left promiscuous mode
[  415.862667][T21013] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.883470][T21026] tipc: Resetting bearer <eth:syzkaller0>
[  415.893892][T18936] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.917823][T18936] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.944851][T21016] tipc: Resetting bearer <eth:syzkaller0>
[  415.959941][T21016] tipc: Disabling bearer <eth:syzkaller0>
[  415.968298][T18936] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.985333][T18936] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.014475][T21013] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.039479][T21057] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input10
[  416.170645][T21061] __nla_validate_parse: 9 callbacks suppressed
[  416.170665][T21061] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5766'.
[  416.194537][T21067] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input11
[  416.194552][T21061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5766'.
[  416.235008][T21066] erspan0: left allmulticast mode
[  416.267613][T21066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  416.331178][ T3602] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  416.347071][ T3602] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  416.356313][ T3602] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  416.372796][ T3017] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.414161][T21072] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5768'.
[  416.587574][T21078] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  416.834187][T21084] lo speed is unknown, defaulting to 1000
[  416.841510][T21084] lo speed is unknown, defaulting to 1000
[  416.847813][T21086] lo speed is unknown, defaulting to 1000
[  416.878763][T21088] ieee802154 phy0 wpan0: encryption failed: -22
[  416.972714][T21093] netlink: 248 bytes leftover after parsing attributes in process `syz.8.5775'.
[  417.093034][T21086] lo speed is unknown, defaulting to 1000
[  417.351305][T21101] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5777'.
[  417.594223][T21106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.610410][T21106] syzkaller0: entered promiscuous mode
[  417.616226][T21106] syzkaller0: entered allmulticast mode
[  417.632813][T21105] tipc: Resetting bearer <eth:syzkaller0>
[  417.643438][T21105] tipc: Disabling bearer <eth:syzkaller0>
[  417.838434][T21115] lo speed is unknown, defaulting to 1000
[  417.907030][T21115] lo speed is unknown, defaulting to 1000
[  417.931542][T21122] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input12
[  417.999494][T21126] netlink: 'syz.3.5784': attribute type 1 has an invalid length.
[  418.033257][T21126] veth27: entered promiscuous mode
[  418.074945][T21126] bond13: (slave erspan0): Releasing active interface
[  418.200184][T21132] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5782'.
[  418.806859][T21151] batman_adv: batadv0: Adding interface: dummy0
[  418.816476][T21151] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.842384][T21151] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  418.857240][T21151] macvtap1: mtu less than device minimum
[  418.935534][T21151] batman_adv: batadv0: Adding interface: ip6gretap2
[  418.945230][T21151] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.009323][T21151] batman_adv: batadv0: Interface activated: ip6gretap2
[  419.035736][T21154] netlink: 248 bytes leftover after parsing attributes in process `syz.7.5791'.
[  419.236605][T21160] siw: device registration error -23
[  419.248343][T21160] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5792'.
[  419.533204][T21167] netlink: 'syz.7.5796': attribute type 1 has an invalid length.
[  419.558085][T21168] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5795'.
[  419.614854][T21167] veth5: entered promiscuous mode
[  419.631920][T21167] erspan0: entered allmulticast mode
[  419.761336][T21177] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5800'.
[  419.805436][T21180] lo speed is unknown, defaulting to 1000
[  419.812433][T21180] lo speed is unknown, defaulting to 1000
[  420.063773][T21201] netlink: 'syz.7.5803': attribute type 1 has an invalid length.
[  420.087836][T21201] netlink: 'syz.7.5803': attribute type 2 has an invalid length.
[  420.351958][T21211] lo speed is unknown, defaulting to 1000
[  420.358540][T21211] lo speed is unknown, defaulting to 1000
[  420.497137][T21215] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  421.310296][T21245] __nla_validate_parse: 1 callbacks suppressed
[  421.310317][T21245] netlink: 248 bytes leftover after parsing attributes in process `syz.8.5817'.
[  421.885916][T21260] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  421.947759][T21265] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  421.951660][T21266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5825'.
[  422.015722][T21265] bond12: (slave veth15): Releasing active interface
[  422.057266][T21265] bond0: (slave geneve2): Releasing active interface
[  422.095563][T21272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5827'.
[  422.126828][T21265] bond13: (slave bridge10): Removing an active aggregator
[  422.135322][T21265] bond13: (slave bridge10): Releasing backup interface
[  422.150345][T21276] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5827'.
[  422.168391][T21277] netlink: 'syz.0.5822': attribute type 10 has an invalid length.
[  422.210372][T21265] bond14: (slave gretap2): Releasing active interface
[  422.244761][T21265] bond15: left allmulticast mode
[  422.274068][T21265] bond15: left promiscuous mode
[  422.280419][T21265] bridge11: port 1(bond15) entered disabled state
[  422.301814][T21265] bond16: (slave veth17): Releasing active interface
[  422.410968][T21265] bond18: (slave gretap3): Releasing active interface
[  422.436028][T21277] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  422.591714][T21276] lo speed is unknown, defaulting to 1000
[  422.626501][T21276] lo speed is unknown, defaulting to 1000
[  422.735225][T21292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5831'.
[  422.906005][T21297] netlink: 'syz.6.5833': attribute type 1 has an invalid length.
[  422.961992][T21297] 8021q: adding VLAN 0 to HW filter on device bond8
[  423.033526][T21297] veth7: entered promiscuous mode
[  423.043254][T21297] bond8: (slave veth7): Enslaving as an active interface with a down link
[  423.072036][T21297] erspan0: entered allmulticast mode
[  423.095491][T21297] bond8: (slave erspan0): making interface the new active one
[  423.105701][T21297] erspan0: entered promiscuous mode
[  423.115023][T21297] bond8: (slave erspan0): Enslaving as an active interface with an up link
[  423.288488][T21317] netlink: 'syz.6.5837': attribute type 16 has an invalid length.
[  423.305565][T21317] netlink: 'syz.6.5837': attribute type 17 has an invalid length.
[  423.323093][T21317] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  423.334668][T21315] lo speed is unknown, defaulting to 1000
[  423.340523][T21317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5837'.
[  423.352035][T21317] IPv6: NLM_F_REPLACE set, but no existing node found!
[  423.352652][T21315] lo speed is unknown, defaulting to 1000
[  423.413130][T21318] lo speed is unknown, defaulting to 1000
[  423.472599][T21318] lo speed is unknown, defaulting to 1000
[  423.723089][T21333] netlink: 'syz.3.5842': attribute type 1 has an invalid length.
[  423.749783][T21333] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5842'.
[  423.890320][T21339] atomic_op ffff888082c0f198 conn xmit_atomic 0000000000000000
[  424.213746][T21351] netlink: 248 bytes leftover after parsing attributes in process `syz.6.5848'.
[  424.451049][T21357] netlink: 'syz.0.5849': attribute type 1 has an invalid length.
[  424.459473][T21357] netlink: 'syz.0.5849': attribute type 2 has an invalid length.
[  424.467563][T21357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5849'.
[  424.481318][T21350] lo speed is unknown, defaulting to 1000
[  424.505689][T21350] lo speed is unknown, defaulting to 1000
[  424.795487][T21367] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  424.829435][T21369] netlink: set zone limit has 4 unknown bytes
[  424.836718][T21367] sch_fq: defrate 257 ignored.
[  424.848204][T21370] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.927798][T21370] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.064268][T21370] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.289761][T21370] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.410076][   T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.439259][   T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.447674][   T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.504516][   T12] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.760775][T21401] dvmrp8: entered allmulticast mode
[  426.869385][T21401] lo speed is unknown, defaulting to 1000
[  426.877881][T21401] lo speed is unknown, defaulting to 1000
[  427.484673][T21431] tun0: tun_chr_ioctl cmd 2148045848
[  427.498625][T21431] tun0: tun_chr_ioctl cmd 21731
[  427.589945][T21434] lo speed is unknown, defaulting to 1000
[  427.672194][T21434] lo speed is unknown, defaulting to 1000
[  427.716979][T21442] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5873'.
[  427.729657][T21438] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5869'.
[  427.816211][T21445] netlink: 'syz.8.5871': attribute type 16 has an invalid length.
[  427.824485][T21445] netlink: 'syz.8.5871': attribute type 17 has an invalid length.
[  427.848442][T21445] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  428.315989][T21456] lo speed is unknown, defaulting to 1000
[  428.325134][T21456] lo speed is unknown, defaulting to 1000
[  428.383526][T21462] netlink: 'syz.7.5878': attribute type 1 has an invalid length.
[  428.467786][T21462] 8021q: adding VLAN 0 to HW filter on device bond1
[  428.568745][T21462] veth7: entered promiscuous mode
[  428.613154][T21462] bond1: (slave veth7): Enslaving as an active interface with a down link
[  428.647029][T21473] netlink: 'syz.3.5876': attribute type 10 has an invalid length.
[  428.687380][T21474] netlink: 248 bytes leftover after parsing attributes in process `syz.8.5879'.
[  428.764296][T21467] bond1: (slave erspan0): making interface the new active one
[  428.846472][T21467] erspan0: entered promiscuous mode
[  428.887903][T21467] bond1: (slave erspan0): Enslaving as an active interface with an up link
[  429.046859][T21481] lo speed is unknown, defaulting to 1000
[  429.085041][T21481] lo speed is unknown, defaulting to 1000
[  429.101204][T21478] lo speed is unknown, defaulting to 1000
[  429.237382][T21484] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  429.406143][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5885'.
[  429.442608][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5885'.
[  429.467436][T21495] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5883'.
[  429.517706][T21495] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5883'.
[  429.643491][T21478] lo speed is unknown, defaulting to 1000
[  429.773698][T21501] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5887'.
[  429.849648][T21504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5888'.
[  429.881264][T21507] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  429.995031][T21509] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5890'.
[  430.135731][T21513] netlink: 'syz.6.5892': attribute type 10 has an invalid length.
[  430.150417][T21513] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode
[  430.205454][T21517] lo speed is unknown, defaulting to 1000
[  430.235982][T21517] lo speed is unknown, defaulting to 1000
[  431.050903][T21547] lo speed is unknown, defaulting to 1000
[  431.078280][T21547] lo speed is unknown, defaulting to 1000
[  431.952058][T21549] netlink: 'syz.7.5901': attribute type 13 has an invalid length.
[  431.963943][T21549] netlink: 'syz.7.5901': attribute type 17 has an invalid length.
[  432.034858][T21549] erspan0: left allmulticast mode
[  432.092510][T21549] 8021q: adding VLAN 0 to HW filter on device team0
[  432.111391][T21549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  432.171963][T21562] lo speed is unknown, defaulting to 1000
[  432.193321][T21560] lo speed is unknown, defaulting to 1000
[  432.224838][T21562] lo speed is unknown, defaulting to 1000
[  432.339115][ T5861] Bluetooth: hci8: command 0x0406 tx timeout
[  432.392011][T21560] lo speed is unknown, defaulting to 1000
[  432.792447][T21586] netlink: 'syz.3.5907': attribute type 13 has an invalid length.
[  432.809827][T21586] netlink: 'syz.3.5907': attribute type 17 has an invalid length.
[  432.835806][T21586] erspan0: left allmulticast mode
[  432.843625][T21591] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  432.861911][T21586] 8021q: adding VLAN 0 to HW filter on device team0
[  432.871300][T21586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  432.910637][T21581] lo speed is unknown, defaulting to 1000
[  432.962715][T21581] lo speed is unknown, defaulting to 1000
[  433.064545][T21592] __nla_validate_parse: 6 callbacks suppressed
[  433.064568][T21592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5908'.
[  433.394570][T21610] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5912'.
[  433.406966][T21610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5912'.
[  433.493775][T21610] bond9: entered promiscuous mode
[  433.500130][T21610] bond9: entered allmulticast mode
[  433.505765][T21610] 8021q: adding VLAN 0 to HW filter on device bond9
[  433.563965][T21617] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  433.594547][T21605] lo speed is unknown, defaulting to 1000
[  433.612028][T21605] lo speed is unknown, defaulting to 1000
[  433.675620][T21610] lo speed is unknown, defaulting to 1000
[  433.898020][T21610] lo speed is unknown, defaulting to 1000
[  434.127004][T21620] lo speed is unknown, defaulting to 1000
[  434.145075][T21626] lo speed is unknown, defaulting to 1000
[  434.313696][T21620] lo speed is unknown, defaulting to 1000
[  434.522227][T21630] veth3: left promiscuous mode
[  434.528418][T21630] macvtap1: left promiscuous mode
[  434.533744][T21630] macvtap1: left allmulticast mode
[  434.539109][T21630] bond3: left promiscuous mode
[  434.543947][T21630] geneve2: left promiscuous mode
[  434.551557][T21630] macvtap2: left promiscuous mode
[  434.556621][T21630] macvtap2: left allmulticast mode
[  434.565913][T21626] lo speed is unknown, defaulting to 1000
[  434.581265][ T1320] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  434.634615][   T37] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  434.652110][   T37] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  434.779104][   T37] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  435.663229][T21653] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  435.875333][T21657] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  435.928489][T21659] lo speed is unknown, defaulting to 1000
[  435.975122][T21659] lo speed is unknown, defaulting to 1000
[  436.187766][T21666] lo speed is unknown, defaulting to 1000
[  436.412860][T21672] netlink: 'syz.7.5923': attribute type 1 has an invalid length.
[  436.654529][T21660] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5924'.
[  436.691389][T21672] 8021q: adding VLAN 0 to HW filter on device bond2
[  436.750201][T21660] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5924'.
[  436.763012][T21678] erspan0: entered allmulticast mode
[  436.777462][T21678] bond1: (slave erspan0): Releasing active interface
[  436.807133][T21677] netlink: 'syz.8.5924': attribute type 13 has an invalid length.
[  436.819655][T21678] erspan0: left promiscuous mode
[  436.829286][T21677] netlink: 'syz.8.5924': attribute type 17 has an invalid length.
[  436.850267][T21666] lo speed is unknown, defaulting to 1000
[  437.035400][T21677] 8021q: adding VLAN 0 to HW filter on device bond0
[  437.081189][T21677] 8021q: adding VLAN 0 to HW filter on device team0
[  437.133005][T21677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  437.472813][T21692] lo speed is unknown, defaulting to 1000
[  437.482679][T21692] lo speed is unknown, defaulting to 1000
[  438.341686][T21703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  438.449065][T21732] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.527544][T21732] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.530965][T21734] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5937'.
[  438.633057][T21732] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.781287][T21732] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.876918][T21743] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5938'.
[  438.939291][   T59] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.964241][   T59] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.996423][   T59] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  439.042199][ T1320] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  439.423715][T21751] lo speed is unknown, defaulting to 1000
[  439.517353][T21751] lo speed is unknown, defaulting to 1000
[  439.582071][T21762] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5942'.
[  439.795695][T21768] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5945'.
[  439.809075][T21768] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5945'.
[  439.833649][T21766] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5944'.
[  439.846033][T21766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5944'.
[  439.885352][T21766] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5944'.
[  439.927914][T21766] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5944'.
[  440.181675][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  440.195803][T21784] ªªªªªª: renamed from wg2
[  440.210558][T21783] delete_channel: no stack
[  440.260740][T21787] netlink: 'syz.0.5951': attribute type 16 has an invalid length.
[  440.379303][T21787] netlink: 'syz.0.5951': attribute type 17 has an invalid length.
[  440.509106][T21787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  440.602612][T21797] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  440.695856][T21801] netlink: 248 bytes leftover after parsing attributes in process `syz.7.5956'.
[  440.969563][T21805] lo speed is unknown, defaulting to 1000
[  441.031904][T21805] lo speed is unknown, defaulting to 1000
[  441.308320][T21812] erspan0: left allmulticast mode
[  441.405019][T21812] batman_adv: batadv0: Interface deactivated: dummy0
[  441.673770][T21812] geneve2: left allmulticast mode
[  441.698752][T21812] hsr0: left allmulticast mode
[  441.909608][T21812] hsr_slave_0: left allmulticast mode
[  441.929504][T21812] hsr_slave_1: left allmulticast mode
[  441.977709][T21812] macvlan2: left promiscuous mode
[  442.000204][T21812] macvlan2: left allmulticast mode
[  442.009974][T21812] veth3: left promiscuous mode
[  442.026026][T21812] macsec1: left promiscuous mode
[  442.041375][T21812] macsec1: left allmulticast mode
[  442.092091][T21812] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  442.114240][T21812] veth5: left promiscuous mode
[  442.122030][T21812] veth7: left promiscuous mode
[  442.128828][   T24] lo speed is unknown, defaulting to 1000
[  442.144007][   T12] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.153073][   T24] syz2: Port: 1 Link DOWN
[  442.173075][   T12] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.183561][   T12] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.224231][T21819] lo speed is unknown, defaulting to 1000
[  442.240017][T21819] lo speed is unknown, defaulting to 1000
[  442.241161][   T12] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.269274][ T5871] Bluetooth: hci5: command 0x0406 tx timeout
[  442.292966][T21826] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode
[  442.428873][T21826] bond2: (slave ip6gretap1): Releasing active interface
[  442.436173][T21826] bond2: (slave ip6gretap1): the permanent HWaddr of slave - f6:09:42:e4:41:a4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  442.462980][T21826] bond2: (slave veth3): Releasing active interface
[  442.475596][T21826] bond3: (slave geneve2): Releasing active interface
[  442.504355][T21827] lo speed is unknown, defaulting to 1000
[  442.552712][T21827] lo speed is unknown, defaulting to 1000
[  442.564782][T21826] netlink: 'syz.8.5963': attribute type 10 has an invalid length.
[  442.606804][T21826] mac80211_hwsim hwsim30 wlan1: left allmulticast mode
[  442.636460][T21826] bond0: (slave wlan1): refused to change device type
[  442.900043][T21839] nbd: nbd0 already in use
[  442.909768][T21839] block nbd0: NBD_DISCONNECT
[  442.916722][T21839] block nbd0: Send disconnect failed -32
[  442.923101][T21839] block nbd0: Send disconnect failed -32
[  442.930288][T21839] block nbd0: shutting down sockets
[  442.934014][T21836] lo speed is unknown, defaulting to 1000
[  442.953757][T21836] lo speed is unknown, defaulting to 1000
[  443.463248][T21851] lo speed is unknown, defaulting to 1000
[  443.497619][T21851] lo speed is unknown, defaulting to 1000
[  444.177336][T21860] __nla_validate_parse: 3 callbacks suppressed
[  444.177356][T21860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5971'.
[  444.517691][T21879] bond8: (slave erspan0): Releasing active interface
[  444.525554][T21879] erspan0: left promiscuous mode
[  444.537772][T21879] batman_adv: batadv0: Removing interface: dummy0
[  444.545220][T21879] bridge_slave_0: left allmulticast mode
[  444.553146][T21879] bridge_slave_0: left promiscuous mode
[  444.560122][T21880] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5977'.
[  444.569734][T21879] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.587085][T21879] bridge_slave_1: left allmulticast mode
[  444.594714][T21879] bridge_slave_1: left promiscuous mode
[  444.602909][T21879] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.614139][T21879] bond0: (slave bond_slave_0): Releasing backup interface
[  444.623073][T21879] bond0: (slave bond_slave_1): Releasing backup interface
[  444.632327][T21879] veth0_to_team: left allmulticast mode
[  444.638029][T21879] veth0_to_team: left promiscuous mode
[  444.641843][T21888] netlink: 'syz.6.5976': attribute type 10 has an invalid length.
[  444.647260][T21879] bridge0: port 3(veth0_to_team) entered disabled state
[  444.662683][T21879] bond0: (slave batadv_slave_0): Releasing backup interface
[  444.671014][T21879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  444.679541][T21879] batman_adv: batadv0: Removing interface: macvlan1
[  444.689615][T21879] bond1: (slave geneve2): Releasing backup interface
[  444.698255][T21879] bond2: (slave bridge1): Releasing active interface
[  444.707542][T21879] bond3: (slave bridge2): Removing an active aggregator
[  444.715448][T21879] bond3: (slave bridge2): Releasing backup interface
[  444.724084][T21879] bond6: (slave geneve3): Releasing active interface
[  444.732320][T21879] bond7: (slave ip6gretap1): Releasing active interface
[  444.739656][T21879] bond7: (slave ip6gretap1): the permanent HWaddr of slave - e6:f6:5d:5a:8a:95 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  444.765872][T21879] bond7: (slave veth3): Releasing active interface
[  444.774047][T21879] batman_adv: batadv0: Removing interface: ip6gretap2
[  444.782530][T21879] bond8: (slave veth7): Releasing active interface
[  444.863243][T21878] lo speed is unknown, defaulting to 1000
[  445.017636][T21878] lo speed is unknown, defaulting to 1000
[  445.089751][T21896] nbd7: detected capacity change from 0 to 63
[  445.105684][T21901] block nbd7: NBD_DISCONNECT
[  445.113678][T21901] block nbd7: Disconnected due to user request.
[  445.124461][T21901] block nbd7: shutting down sockets
[  445.213751][T21904] wg1: entered promiscuous mode
[  445.218673][T21904] wg1: entered allmulticast mode
[  446.071574][T21921] netlink: 248 bytes leftover after parsing attributes in process `syz.8.5985'.
[  446.296237][T21934] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5988'.
[  446.998360][T21947] lo speed is unknown, defaulting to 1000
[  447.019859][T21947] lo speed is unknown, defaulting to 1000
[  447.039577][T21944] lo speed is unknown, defaulting to 1000
[  447.406678][T21944] lo speed is unknown, defaulting to 1000
[  447.627276][T21959] netlink: 'syz.6.5993': attribute type 4 has an invalid length.
[  447.636049][T21959] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5993'.
[  447.646611][T21959] Ã: renamed from bond0
[  448.044381][T21966] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5995'.
[  448.101074][T21966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5995'.
[  448.116236][T21964] lo speed is unknown, defaulting to 1000
[  448.127109][T21964] lo speed is unknown, defaulting to 1000
[  448.427340][T21968] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5998'.
[  448.560021][T21973] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6000'.
[  448.790061][T21981] netlink: 'syz.6.6001': attribute type 4 has an invalid length.
[  449.223445][   T30] audit: type=1800 audit(1756382878.219:19): pid=21988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.6002" name="memory.events" dev="tmpfs" ino=680 res=0 errno=0
[  449.495264][T21995] netlink: 'syz.0.6006': attribute type 1 has an invalid length.
[  449.545318][T21998] netlink: 'syz.3.6007': attribute type 1 has an invalid length.
[  449.574221][T22002] netlink: 248 bytes leftover after parsing attributes in process `syz.8.6008'.
[  449.593659][T21995] 8021q: adding VLAN 0 to HW filter on device bond19
[  449.634870][T21998] 8021q: adding VLAN 0 to HW filter on device bond14
[  449.682214][T22004] bond14: (slave geneve0): making interface the new active one
[  449.706686][T22004] bond14: (slave geneve0): Enslaving as an active interface with an up link
[  449.846213][T21995] veth25: entered promiscuous mode
[  449.866207][ T1320] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.938654][ T1320] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.011546][T22003] netlink: 'syz.6.6005': attribute type 1 has an invalid length.
[  450.028682][ T1320] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.031331][T22003] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6005'.
[  450.107561][ T1320] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.052873][T22037] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6015'.
[  451.065149][T22037] netlink: 216 bytes leftover after parsing attributes in process `syz.6.6015'.
[  451.182139][T22039] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  451.735118][T22065] netlink: 'syz.6.6021': attribute type 12 has an invalid length.
[  452.147860][T22079] lo speed is unknown, defaulting to 1000
[  452.181555][T22079] lo speed is unknown, defaulting to 1000
[  452.338645][T22087] lo speed is unknown, defaulting to 1000
[  452.512870][T22087] lo speed is unknown, defaulting to 1000
[  452.662805][T22102] netlink: 'syz.3.6028': attribute type 4 has an invalid length.
[  452.773220][T22107] netlink: 248 bytes leftover after parsing attributes in process `syz.8.6030'.
[  452.915129][T22114] tap0: tun_chr_ioctl cmd 1074025677
[  452.929525][T22114] tap0: linktype set to 0
[  452.949086][T22114] bridge_slave_0: Caught tx_queue_len zero misconfig
[  453.138266][T22117] IPVS: Scheduler module ip_vs_sip not found
[  453.760880][T22131] netlink: 424 bytes leftover after parsing attributes in process `syz.8.6038'.
[  454.004305][T22146] lo speed is unknown, defaulting to 1000
[  454.011983][T22146] lo speed is unknown, defaulting to 1000
[  454.238582][T22151] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6041'.
[  454.321003][T22154] batadv_slave_0: entered promiscuous mode
[  454.362280][T22156] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6043'.
[  454.378873][T22156] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6043'.
[  454.899299][   T31] INFO: task syz.1.4752:17614 blocked for more than 143 seconds.
[  454.908255][   T31]       Not tainted syzkaller #0
[  454.918833][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  454.938978][   T31] task:syz.1.4752      state:D stack:26840 pid:17614 tgid:17613 ppid:5865   task_flags:0x400140 flags:0x00004004
[  454.951120][   T31] Call Trace:
[  454.954435][   T31]  <TASK>
[  454.957397][   T31]  __schedule+0x1798/0x4cc0
[  454.962054][   T31]  ? __pfx___schedule+0x10/0x10
[  454.971775][   T31]  ? schedule+0x91/0x360
[  454.976326][   T31]  ? rcu_is_watching+0x15/0xb0
[  454.982911][   T31]  ? lock_release+0x4b/0x3e0
[  454.987776][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  454.996060][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  455.005641][   T31]  schedule+0x165/0x360
[  455.012380][   T31]  schedule_preempt_disabled+0x13/0x30
[  455.018167][   T31]  __mutex_lock+0x7e6/0x1350
[  455.024547][   T31]  ? __mutex_lock+0x5bb/0x1350
[  455.031794][   T31]  ? nfsd_nl_threads_set_doit+0x2cb/0x960
[  455.037895][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  455.044810][   T31]  ? rcu_is_watching+0x15/0xb0
[  455.049959][   T31]  ? net_generic+0x1e/0x240
[  455.054516][   T31]  ? lock_release+0x4b/0x3e0
[  455.059511][   T31]  ? net_generic+0x1e/0x240
[  455.064061][   T31]  ? net_generic+0x1e/0x240
[  455.068594][   T31]  nfsd_nl_threads_set_doit+0x2cb/0x960
[  455.074308][   T31]  genl_family_rcv_msg_doit+0x215/0x300
[  455.080027][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  455.086146][   T31]  ? bpf_lsm_capable+0x9/0x20
[  455.091009][   T31]  ? security_capable+0x7e/0x2e0
[  455.096087][   T31]  genl_rcv_msg+0x60e/0x790
[  455.100706][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  455.105771][   T31]  ? __kasan_slab_alloc+0x6c/0x80
[  455.110997][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  455.117117][   T31]  ? __netlink_lookup+0xbd/0x810
[  455.122323][   T31]  ? rcu_is_watching+0x15/0xb0
[  455.127177][   T31]  netlink_rcv_skb+0x205/0x470
[  455.132164][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  455.137328][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  455.142708][   T31]  ? lock_release+0x4b/0x3e0
[  455.147337][   T31]  ? down_read+0x1ad/0x2e0
[  455.151925][   T31]  genl_rcv+0x28/0x40
[  455.155923][   T31]  netlink_unicast+0x82c/0x9e0
[  455.160795][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  455.166231][   T31]  ? netlink_sendmsg+0x642/0xb30
[  455.171380][   T31]  ? skb_put+0x11b/0x210
[  455.175748][   T31]  netlink_sendmsg+0x805/0xb30
[  455.180621][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  455.186023][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  455.191153][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  455.196580][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  455.201975][   T31]  __sock_sendmsg+0x21c/0x270
[  455.206705][   T31]  ____sys_sendmsg+0x505/0x830
[  455.211675][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  455.216979][   T31]  ? import_iovec+0x74/0xa0
[  455.222142][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  455.226902][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  455.232334][   T31]  ? futex_wake+0x4b2/0x560
[  455.236898][   T31]  ? __fget_files+0x2a/0x420
[  455.241571][   T31]  ? __fget_files+0x3a0/0x420
[  455.246304][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  455.251420][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  455.256925][   T31]  ? rcu_is_watching+0x15/0xb0
[  455.261922][   T31]  ? rcu_is_watching+0x15/0xb0
[  455.266730][   T31]  do_syscall_64+0xfa/0x3b0
[  455.272898][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.279406][   T31]  ? clear_bhb_loop+0x60/0xb0
[  455.284190][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.290292][   T31] RIP: 0033:0x7f52f2b8ebe9
[  455.294741][   T31] RSP: 002b:00007f52f39ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  455.303389][   T31] RAX: ffffffffffffffda RBX: 00007f52f2db5fa0 RCX: 00007f52f2b8ebe9
[  455.311520][   T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000008
[  455.319655][   T31] RBP: 00007f52f2c11e19 R08: 0000000000000000 R09: 0000000000000000
[  455.327719][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  455.335921][   T31] R13: 00007f52f2db6038 R14: 00007f52f2db5fa0 R15: 00007ffd2ae27448
[  455.344061][   T31]  </TASK>
[  455.347165][   T31] INFO: lockdep is turned off.
[  455.352109][   T31] NMI backtrace for cpu 0
[  455.352142][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  455.352165][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  455.352180][   T31] Call Trace:
[  455.352187][   T31]  <TASK>
[  455.352197][   T31]  dump_stack_lvl+0x189/0x250
[  455.352231][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  455.352256][   T31]  ? __pfx__printk+0x10/0x10
[  455.352293][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  455.352320][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  455.352347][   T31]  ? __pfx__printk+0x10/0x10
[  455.352378][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  455.352413][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  455.352440][   T31]  watchdog+0xf93/0xfe0
[  455.352473][   T31]  ? watchdog+0x1de/0xfe0
[  455.352505][   T31]  kthread+0x70e/0x8a0
[  455.352532][   T31]  ? __pfx_watchdog+0x10/0x10
[  455.352568][   T31]  ? __pfx_kthread+0x10/0x10
[  455.352594][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  455.352621][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  455.352650][   T31]  ? __pfx_kthread+0x10/0x10
[  455.352675][   T31]  ret_from_fork+0x3f9/0x770
[  455.352699][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  455.352724][   T31]  ? __switch_to_asm+0x39/0x70
[  455.352750][   T31]  ? __switch_to_asm+0x33/0x70
[  455.352774][   T31]  ? __pfx_kthread+0x10/0x10
[  455.352798][   T31]  ret_from_fork_asm+0x1a/0x30
[  455.352824][   T31]  </TASK>
[  455.352829][   T31] Sending NMI from CPU 0 to CPUs 1:
[  455.500082][    C1] NMI backtrace for cpu 1
[  455.500100][    C1] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  455.500120][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  455.500132][    C1] Workqueue: bat_events batadv_nc_worker
[  455.500162][    C1] RIP: 0010:batadv_nc_purge_paths+0xd1/0x3b0
[  455.500189][    C1] Code: 8b 4c 24 18 4c 8d 24 cd 00 00 00 00 4d 03 26 48 8b 4c 24 28 42 80 3c 29 00 74 0f 48 8b 7c 24 10 e8 c4 4b db f6 48 8b 44 24 10 <48> 8b 7c 24 18 48 c1 e7 06 48 03 38 48 89 7c 24 50 e8 59 91 34 00
[  455.500206][    C1] RSP: 0018:ffffc90000ad7988 EFLAGS: 00000246
[  455.500221][    C1] RAX: ffff888078250f48 RBX: ffffffff8b47ce30 RCX: 1ffff1100f04a1e9
[  455.500235][    C1] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffffffff8184e7fd
[  455.500247][    C1] RBP: 0000000000000000 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[  455.500260][    C1] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffff888079700ab8
[  455.500273][    C1] R13: dffffc0000000000 R14: ffff888078250f40 R15: ffff888078250f50
[  455.500286][    C1] FS:  0000000000000000(0000) GS:ffff888125d1a000(0000) knlGS:0000000000000000
[  455.500301][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  455.500312][    C1] CR2: 00007ffcce8f1c58 CR3: 000000002dcc0000 CR4: 00000000003526f0
[  455.500328][    C1] Call Trace:
[  455.500335][    C1]  <TASK>
[  455.500344][    C1]  ? rcu_is_watching+0x15/0xb0
[  455.500368][    C1]  batadv_nc_worker+0x328/0x610
[  455.500392][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  455.500411][    C1]  process_scheduled_works+0xae1/0x17b0
[  455.500441][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  455.500467][    C1]  worker_thread+0x8a0/0xda0
[  455.500486][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  455.500515][    C1]  ? __kthread_parkme+0x7b/0x200
[  455.500538][    C1]  kthread+0x70e/0x8a0
[  455.500562][    C1]  ? __pfx_worker_thread+0x10/0x10
[  455.500578][    C1]  ? __pfx_kthread+0x10/0x10
[  455.500601][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  455.500624][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  455.500649][    C1]  ? __pfx_kthread+0x10/0x10
[  455.500670][    C1]  ret_from_fork+0x3f9/0x770
[  455.500690][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  455.500710][    C1]  ? __switch_to_asm+0x39/0x70
[  455.500733][    C1]  ? __switch_to_asm+0x33/0x70
[  455.500755][    C1]  ? __pfx_kthread+0x10/0x10
[  455.500777][    C1]  ret_from_fork_asm+0x1a/0x30
[  455.500808][    C1]  </TASK>
[  455.503944][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  455.744523][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  455.753650][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  455.763713][   T31] Call Trace:
[  455.766995][   T31]  <TASK>
[  455.769933][   T31]  dump_stack_lvl+0x99/0x250
[  455.774534][   T31]  ? __asan_memcpy+0x40/0x70
[  455.779148][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  455.784357][   T31]  ? __pfx__printk+0x10/0x10
[  455.788963][   T31]  vpanic+0x281/0x750
[  455.792958][   T31]  ? __pfx_vpanic+0x10/0x10
[  455.797553][   T31]  ? preempt_schedule+0xae/0xc0
[  455.802418][   T31]  ? preempt_schedule_common+0x83/0xd0
[  455.807892][   T31]  panic+0xb9/0xc0
[  455.811622][   T31]  ? __pfx_panic+0x10/0x10
[  455.816046][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  455.821451][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  455.827615][   T31]  watchdog+0xfd2/0xfe0
[  455.831783][   T31]  ? watchdog+0x1de/0xfe0
[  455.836125][   T31]  kthread+0x70e/0x8a0
[  455.840227][   T31]  ? __pfx_watchdog+0x10/0x10
[  455.844917][   T31]  ? __pfx_kthread+0x10/0x10
[  455.849514][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  455.854727][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  455.859938][   T31]  ? __pfx_kthread+0x10/0x10
[  455.864543][   T31]  ret_from_fork+0x3f9/0x770
[  455.869151][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  455.874268][   T31]  ? __switch_to_asm+0x39/0x70
[  455.879042][   T31]  ? __switch_to_asm+0x33/0x70
[  455.883823][   T31]  ? __pfx_kthread+0x10/0x10
[  455.888425][   T31]  ret_from_fork_asm+0x1a/0x30
[  455.893554][   T31]  </TASK>
[  455.896879][   T31] Kernel Offset: disabled
[  455.901206][   T31] Rebooting in 86400 seconds..