last executing test programs:

3m29.140541058s ago: executing program 1 (id=4846):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)={0x50, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x2}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001a14010002000000fcdbdf2508004b0013000000080001000000000008004f0000000000080015000400000008000300"], 0x38}}, 0x80)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r5, 0x11c, 0x4, 0x0, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r7, 0x89f0, &(0x7f0000000000))
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRESDEC=r6, @ANYBLOB="58e3072478701bed8dce5e7b670c2d250ce78b6f845a6de117651d728fb0b624dee6faf35391f4a18bf8fca3a9a1e3f391cc89a0f9ac4ff4f3dea0710a1a101e305ff785b30e2a0173447fb8cc2762c60255e2280c240bb02c72185d20ad394d25dce55b65eb0c8da790b681ea9fb9acaec0986088c161fe08020f05ff6d53d419832c9b6000713f6a70dfff0ff33bc45a4d3fadf52e3fe07984e1fda8136ed09a7741692f1c37fb7b33509d04144a7f14e943d31f85d6c22ae0facbe89d791b9bf923c41dcae2e0fa5b17b5d95d34e03c"], 0x38}, 0x1, 0x0, 0x0, 0x6}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x2, 0x4, 0x1, 0x5, 0x4e, 0x0, 0x8, 0x3, 0xa4, 0xe6, 0x1, 0x6, 0x17, 0x8}, 0xe)
sendmsg$nl_route(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000440)=ANY=[@ANYBLOB="700100001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040000008002300030000001400030064756d6d79300000000000000000000008001b00010100002c0116806800018054000c8014000100000000008a0900000700000088a800001400010007000000770a00000800000088a800001400010002000000a60500006c0f0000810000001400010080000000730200000800000088a80000100006000800000003000000050000006c0001802800010003000000aaaaaaaaaa2c00000000000000000000000000000000000000000000000000000c000700020000000100000014000a00070000000000000008000000000000000c000400ff0300000600000014000a00f2ffffff000000000400000000000000200001800c0004000700000004000000100002000100000016030000ff0f0000340001801000020001000000050f00006a00000014000a00010100000000000000000000000000000c000700050000008000000015fcf23888abc394b9bd6e95991bdc7d98e9421667b4917c0f6e66afa2"], 0x170}}, 0xc090)

3m28.949654199s ago: executing program 1 (id=4850):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
getsockopt$nfc_llcp(r1, 0x3a, 0x1, 0x0, 0x20000000)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x7}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x5, 0xff, 0x0, 0x1}, 0x48)
unshare(0x22020400)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, 0x0, 0x4}, 0x20)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r4 = accept4(r2, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000800)={<r5=>0x0, 0x76, "7c16304e05db46900c87899593b6e565a424705d020751bfb6b83f405a4746480780ed1cfd09162f86263cca9d0d06b25dbc9077985ed7e62392d771b596ad4c5b9ada5c466aa8bab60097b28e1c86927d821508cf1d474f6243c83dd1deac09cd418a57f6a0a474ee44d4ca70cc23b115cb02478478"}, &(0x7f0000000240)=0x7e)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000480)=r5, 0x4)
sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x0, &(0x7f0000000880)=""/233, &(0x7f0000000780)=0xe9)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r8)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGARP(r10, 0x8954, &(0x7f0000000b40)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0xa, {0x2, 0x4e21, @local}, 'vcan0\x00'})
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r11=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0)
sendmsg$sock(r0, &(0x7f0000000600)={&(0x7f0000000000)=@nfc={0x27, r11, 0x3, 0x7}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="8972a1dcbb3ed5e74853a0f61c9977ae5deac25f0aad17d84beb8ca79ae05557152e2e4852150aa055e49a333c3e7ee406440ddeea7eb0eda2436f01e268c47728a21723a491cccd2001951f8d30c690e3f510225f5d74d1a5d57722432256724bc42a6dcd4a29f59a9765b4cb18d44ccd51ed6068a193a15ed30347b071a0c8b6d9bcf350214add", 0x88}, {&(0x7f0000000680)="b4cde07996024e27fb1d4a185dfa2b8b9354f6534753eae6d50b352c82a6f066a6896ea996aaf9e657a152231c44034e5dadee0f33", 0x35}, {&(0x7f00000001c0)="7d17c14139c1f5bdb71b1e9f1b708ed1d2e3908fa8c2773f634410f521beb4f0b14828abadb6e2a2b1f5c92864d600f2f30a2790bd5a90f170", 0x39}, {&(0x7f0000000200)="0928f3924b802f845c7ac5827247d98eae90b951", 0x14}, {&(0x7f0000000340)="0b88aba2fe3e7496c1f1828021faa864d3539382e53b42de018f1474445ecd6923462c9947499495332fcc6dfe409021c0d131675252e3a8cfa8db0de11c648a0d4b382491fd6bc425e47eed32ca0c708e68d3fe50b8262740d1048d3c03c4db2fdb301479eaefcb129b436839da596c8692410ab8a5116b0b7355715188be446138b87986fe27cc58b391b5cade71903cba7f2ab6217ef8982fa56cfded3863200789489e839cbe78130ba759a2897106956f171f85b3c4309b007ac66b0d1277c85401517520217b89421904a7e373788cc1000000000000", 0xd9}, {&(0x7f00000006c0)="86f49c8727b3dca2aac757006641b744407d69f422c23094365b2e0bb64e2ad7dac823342b4b644be9475592d2166376be318254fb0abd858ffeedd0a3eb9485ddb64318c06fd854c5bf720a8666287b93f317f513b78db2694d09fbf61096b1543df1d4a845f81ffc62b16b59badaf42f9e", 0x72}, {&(0x7f00000004c0)="24618113802385f9950f535d76723cbccad9be71a651e3bfe92d7f01783c4a725971d7360019aebf365887c9da4ac288e6aca8dc3cd54a0a69adcfc8b6fcd8417673e7a84b7528c99c6e97218629cc84368a4100b4b3932ccaefe18f4b42c2253f0362a1037bf553569a8be404600bb56a7a5de939e2a65d26f0dc7804e57a78b1dcfb20dbf2f05f564f78713d6c94e7", 0x90}], 0x7, &(0x7f0000000440)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}], 0x30}, 0x20044810)

3m27.857517393s ago: executing program 1 (id=4866):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000003c0)={{<r1=>r0, &(0x7f0000000000)='\x00', 0x4140, &(0x7f0000000040)={@_ha_fsid={[0x1000, 0xec2d7fb3]}, {0x7, 0x0, 0x5, 0x3da}}, 0x81, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x401}, 0x2, &(0x7f0000000240)=[{0x3, 0xfffffff9, &(0x7f0000000100)=')\x00', &(0x7f00000001c0)="ba818423142322f6592fe4924fbd96a532afcd31e376573d8271b0e1bf7030be87226a0fca82", 0x26, 0x28}, {0x2, 0x6, &(0x7f0000000200)=':]\xa2\x00', &(0x7f00000002c0)="680b02aa05d79cb2e0bb127cc8d35ba6101329809d71632069608c366cfa55d66ab4d5867669800dd2de56069300017ef13b4e25c22355a207e5ce08f9f0d77cf3c80bd52767d04f26126e2155db2a5563c3b12c45e6cb9d62c844e09a52c2bd49c29b34d5ef7bf956fe759b9a72d0158ab99d9431e6358b64c283df8358b9f81a21afd003242c467fcc3ae7d680ae276d3f9fd8e9df4112654e5859833ea2e354a58c9aaaecb67b7e7fc665931b021b569f87051f624d699cdea11dd6467d2b2c38cf82f11863a08bd1ec17b9eae00a924a4c02c9e7817ad2df6c0a5dc1fa3279d15c28af1004ba853a6ff7", 0xec, 0x10}]}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004f80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) (async)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000480)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x2, 0x800, 0x0, 0x168a, 0x100], 0x3, &(0x7f0000000440)=[{}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8)

3m27.085661589s ago: executing program 1 (id=4872):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r2], 0x78}}, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e24, 0x4e20, 0x8}}}, 0x2a) (async)
write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e24, 0x4e20, 0x8}}}, 0x2a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', <r5=>0x0})
socket(0x2, 0x80805, 0x0) (async)
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3fab00000000000000002e00"], 0x50}}, 0x80) (async)
sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3fab00000000000000002e00"], 0x50}}, 0x80)
setsockopt$sock_int(r7, 0x1, 0x22, &(0x7f00000001c0)=0x2c, 0x4)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r9=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000240)={r9, 0x2}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x10200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmmsg$unix(r11, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r10, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r11], 0x30, 0x40400d1}}], 0x1, 0x10) (async)
sendmmsg$unix(r11, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r10, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r11], 0x30, 0x40400d1}}], 0x1, 0x10)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
splice(r10, 0x0, r12, 0x0, 0x400000, 0x0)
write$cgroup_type(r12, &(0x7f0000000100), 0x9)

3m26.726487268s ago: executing program 1 (id=4876):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189", @ANYRES8=r0], 0x340a)
r2 = accept(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000001c0)=0x80)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d)
sendmsg$AUDIT_TRIM(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f6, 0x1, 0x70bd27, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004084}, 0x800)

3m26.381846002s ago: executing program 1 (id=4879):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="c021", 0x2}], 0x1, 0x7, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x2c8, 0x370, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x0, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}}, 0x24048000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

3m11.343970901s ago: executing program 32 (id=4879):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="c021", 0x2}], 0x1, 0x7, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x2c8, 0x370, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x0, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}}, 0x24048000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

2m27.235309749s ago: executing program 4 (id=5590):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0xb)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth1_vlan\x00', 0x200})

2m27.003216987s ago: executing program 4 (id=5594):
r0 = socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000010c0)=@assoc_value={r1, 0x2}, &(0x7f0000001100)=0x8)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000001300), 0x4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f00000000c0)="4b0003000000", 0x6)
connect$inet6(r2, &(0x7f0000001380)={0xa, 0x4e22, 0x1000, @private0, 0x9b}, 0x1c)

2m26.017810566s ago: executing program 4 (id=5611):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1], 0x50}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)={0x24, 0x140f, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x40810)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r6], 0x50}}, 0x2)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000180))

2m25.786060184s ago: executing program 4 (id=5615):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100dffffffffffffff607"], 0x14}], 0x1}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r1}, 0x38)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

2m25.658498874s ago: executing program 4 (id=5618):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1)
sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000103b208c32d7a4631de10c5c1ad5b6e3438fbc5c899fa336a2cc4bce72ce49f140c09529ff6e23dd7fc99998ae1eddfdb2322e", @ANYRES16=r0, @ANYBLOB="010000000000ffffffff0200000008002600d51600000800270003000000"], 0x24}}, 0x4048854)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a00000000000000000700000000000000007f000001000000000000000000000000000000d8"], 0x38}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00012dbd4cd07000ffdbdf252000"], 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000008c0)=0x2)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40004}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x58, 0x2, 0x8, 0x401, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80db}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x20000080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711053000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
syz_emit_ethernet(0x171, &(0x7f00000006c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x6, 0x1, 0x1}, {0x8100, 0x3, 0x1, 0x3}}, {@ipv4={0x800, @dccp={{0x1a, 0x4, 0x2, 0x37, 0x15b, 0x64, 0x0, 0x8, 0x21, 0x0, @private=0xa010100, @multicast1, {[@ssrr={0x89, 0x13, 0xb, [@empty, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010102, @loopback]}, @noop, @lsrr={0x83, 0x1f, 0x92, [@empty, @empty, @broadcast, @broadcast, @remote, @multicast1, @broadcast]}, @noop, @rr={0x7, 0x2f, 0xae, [@empty, @multicast1, @remote, @private=0xa010102, @broadcast, @broadcast, @local]}]}}, {{0x4e20, 0x4e21, 0x4, 0x1, 0x1, 0x0, 0x0, 0xa, 0x0, "5901e0", 0x2, "b50aae"}, "506f4bf34a9215853d5726800bb93fb0c700d38b03d8aa4eb57f95ee32e37134326abf5479f242905345bf4826a743b79c1c850afd7e22ea16b336c61646bf90924e1d99c256e0cb0dceae5d14c112072d632e3a9ddd6334699eccde0567b560b2cf1aeb58d08948825b5db30650b12f2d404c862e5ae7c38ae2154f79fb357cf713698bbe9463186b91d786b041ed3dfe97b8791af0b29b2fdb27fc9cfc8f89ea1e417292f4e44d7d4806f4093ae894ab4dd87789a1b7812e4503a5af9e4d34a4fd76480213d7ef2e608a1bd432d6cec4f803fd558489fdcd9caf0d5834d1174b50c8"}}}}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r6, 0x8b1b, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'gretap0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0xfff2, 0x2}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40440c4}, 0x800)

2m25.571747287s ago: executing program 4 (id=5619):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x7, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x8}, 0x94)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x78}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

1m23.088342706s ago: executing program 33 (id=5619):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x7, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x8}, 0x94)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x78}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

10.240373705s ago: executing program 0 (id=6182):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f8, 0xb15, 0x70bd28, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x1005)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000004c0)={<r7=>r1, &(0x7f0000000380)='\x00', 0x12102, &(0x7f00000003c0)={@align=0x1, {0x5, 0x8, 0x1, 0x6}}, 0xff, &(0x7f0000000440), &(0x7f0000000480)=0xf})
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000800), &(0x7f0000000840)=0x4)
sendto$packet(r6, &(0x7f0000000400)="ba0455111f1b8072fd932350948b29a0232ed90fcb831ff6", 0x18, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c020000130000012bbd7000fbdbdf2528032b004e204e200300000008000000070000000f000000ff0700007f0000009e68000009000000", @ANYRES32=r2, @ANYBLOB="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"/544], 0x25c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})

9.857366691s ago: executing program 0 (id=6190):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x220c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e22, 0xffff, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}}, 0x0, 0x0, 0x1b, 0x0, "13abcd9d2debb68a5bfc1c64b50a30e0cb34dde0c1121e78614906563b981f8c4600b8b8f4ccd35ddda70f54941e7c6343089a41b19dd068a877fa13dd60be9ce9b50c0a568bce047c3ee863b194c264"}, 0xd8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x728a, r0}, 0x38)

5.557927653s ago: executing program 2 (id=6255):
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
syz_emit_ethernet(0xa2, &(0x7f0000000440)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "fb3519", 0x68, 0x3, 0x0, @loopback, @remote, {[@hopopts={0x33, 0xb, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x5, 0x2, [0x665c, 0x4c, 0x1, 0xd9, 0x6b1daa84, 0x2]}}, @pad1, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0xfffb, [0x1]}}, @pad1]}, @dstopts={0x32}]}}}}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="fc79ea35d065b9ab3476a577889a62263064a4f9365db73c96a2400dc5e53ae7", 0x20}], 0x1, 0x0, 0x0, 0x20008014}], 0x1, 0x4814)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

5.453949638s ago: executing program 2 (id=6257):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000040)={0x7, 'vxcan1\x00', {0x401}, 0x40})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xf}, {0x1}}}, 0x24}}, 0x80)

3.483214354s ago: executing program 2 (id=6262):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r1=>0x0})
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x3, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
unshare(0x6a040000)
r3 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x4)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vlan0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x204026, 0x4)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@local, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x10, 0x7, 0x7, 0x400, 0x4b3, 0x1, r4})

2.472152885s ago: executing program 6 (id=6271):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x20, 0x20, 0x6, 0x0, {{0x7, 0x4, 0x1, 0x6, 0x1c, 0x64, 0x0, 0x31, 0x29, 0x0, @remote, @multicast2, {[@generic={0xc6, 0x5, "542eb5"}, @end]}}}}})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0)
setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000000)={0x1, 0x0, 0x82, 0x3, @vifc_lcl_ifindex=r5, @broadcast}, 0x10)

2.013490842s ago: executing program 6 (id=6273):
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10)
close(0x4)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

1.740935138s ago: executing program 6 (id=6278):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0xd, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3a, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @local, @val={@void, {0x8100, 0x3, 0x1}}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @empty, {[@timestamp={0x44, 0xc, 0x61, 0x0, 0x7, [0x6, 0x5]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6_vti0\x00', <r2=>0x0, 0x2f, 0x6, 0x8d, 0xa9, 0x40, @private2, @local, 0x1, 0x20, 0x713b, 0x2}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000780)={'wg1\x00', <r4=>0x0})
sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000280)="5be987f1651efe39a821d59d84783390d3d7a9000bc0231e64c4c3d928aaaabb59ed74a87957314d", 0x28}, {&(0x7f0000000380)="48e1a8da58fad3d09b0e5897fb", 0xd}, {&(0x7f00000003c0)="9ec5633f9845cb69af0ed4680a5c348012407554259d4f693c90d6b3b9f18b25013c9c1a69acbf1e69bd57c78932319b198a4ce050efc8a462065997cbe16fcbadaece07fb97535557fdbc3f6d2d1448d70ccd16744fe403d85eadb9084262df8f5de466f9a22caebf1617d720d6f388243ff55b81990b93e5a46eb653e29dfbaebdf050c473f66669aff6bb52988aa53d03967f49b75db12151f969007c08491a4042768dbd5efa29c167c1d75b026f9da68f2409ab2dbb92ea4e7d3317d5482ec55dc382d8a43f2caa0d59b9c286ce", 0xd0}, {&(0x7f00000004c0)="658668c2b8e7e81d181d46c187412ce0841c25793efd4583cc0328f3549a1d8c63d0a965f6bc8f62df45b10ae42b6e1dfe77b4972c2e7b18ce474780420eedf1946f3b5fb2fc4b67f8edb51e1e01c735db108cef0a7704e3fff0f79254335c329a6b161e4dd9d67fd1494d22bbe34eee3b98329bdf3a65641bb56b23f4e6ef18c74d192d0501176fb424d57b83e8ec2eab8edc658cb455f8275a4670310e5fa123c4ecb01c3ccc76b803aa468da46ddd5305f3417311cbc603e8c9c55af48e71d54b2f5a8a002084962bc7ed24a02c9cded593ab281b92cf3aac930d69185e", 0xdf}], 0x4, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast2}}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x11, 0x1, 0xd, [{@loopback, 0xe}]}, @timestamp_prespec={0x44, 0x44, 0x61, 0x3, 0x0, [{@empty, 0x9a10}, {@broadcast, 0x4}, {@rand_addr=0x64010100}, {@local, 0x7f}, {@multicast1, 0x10001}, {@multicast2, 0x58}, {@local, 0x5ea}, {@local, 0x606}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x6a, [@loopback, @empty]}, @timestamp_addr={0x44, 0xc, 0x70, 0x1, 0xb, [{@local, 0x4}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @empty}}}], 0x110}, 0x8000)

1.639956053s ago: executing program 5 (id=6280):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000200), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x5, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6e8b02d66efc80bb"}}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8080)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xfffffffffffffffc}, {0x6, 0x6, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0xa, @in6=@empty, 0x0, 0x3, 0x3, 0x7}}, 0xe8)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x80)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
socket$key(0xf, 0x3, 0x2)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', <r5=>0x0})
accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000180)=0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TESTMODE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x10c, r7, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x40, 0x1b}}}}, [@NL80211_ATTR_TESTDATA={0xe0, 0x45, "6b9db1712be1d4f7bf2bdacab7bcedbeeaa493c9db04212623dec614055e05e9e34ab7a51dcc84d2377c152027753d1a6cb17ee1675c1e94d3ab2d36747dff7d0483de0e1b0ba7edc372295bd0a15164e819d9bce0b029c11536cdbe66e455a035f45bc5f1b42b011916a89fe30afd2f3796962bfd61d62a1a6351879663dc0226486ad9592a8cb947e1ba93145ffbf52fc3251687af59ab61d8719d67b7388c13cce81e65a3e213f144e067c5b449595e39c4365df90c6e9eb7d6107b5a4eb60ad28abe795d7d130b7812b17428a5d3c393221180b49b6b1ea7358b"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1000)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x84, r7, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xc72, 0x6e}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3a0}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x7, 0x52, 0x4, 0xc961, 0x4, 0x9, 0x8]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4a0}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x11, r3, 0x100000000)

1.448707991s ago: executing program 5 (id=6282):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x50, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)
listen(r0, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x13, r1, 0xa3618000)
syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, "8000"}]}}}}}}}}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x50, 0x0, 0x0) (async)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) (async)
listen(r0, 0x0) (async)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x13, r1, 0xa3618000) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, "8000"}]}}}}}}}}, 0x0) (async)

1.436815426s ago: executing program 3 (id=6283):
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{<r0=>0xffffffffffffffff, &(0x7f0000000000)=',\x00', 0x0, &(0x7f0000000040)={@align=0x5, {0x3, 0xfffd, 0x5, 0x7}}, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x5}, {[0x8, 0x5, 0x8, 0x400]}, 0x9, 0xef, &(0x7f0000000100)=""/239})
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000004)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80822000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x4, 0x8, 0x201, 0x0, 0x0, {0x44e8c69619b6b166, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xeb}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x40000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000500), r0)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000)
ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000801)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040044}, 0x81)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000880)={'ip_vti0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1401008}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r5, 0xb24, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xc11e, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}}, 0xc001)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2006000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0xfffff4dc, @bearer=@l2={'ib', 0x3a, 'ip6gre0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8001)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000d40)={'erspan0\x00', &(0x7f0000000cc0)={'syztnl2\x00', <r7=>0x0, 0x700, 0x40, 0x4c, 0x3, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x65, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @remote, {[@lsrr={0x83, 0x13, 0x2a, [@remote, @multicast2, @local, @private=0xa010100]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000d80)={'batadv0\x00', <r8=>0x0})
getpeername$packet(r0, &(0x7f0000000dc0)={0x11, 0x0, <r9=>0x0}, &(0x7f0000000e00)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'team0\x00', <r10=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001000)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x110, r3, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x840)
sendto$packet(r0, &(0x7f0000001040)="f3ce2687661d6875fe18fc877c9932ed56e50b086f8d008a09a5156731a1cf0c60a966fcd9944fa9538eeaa51333bfec71ca2e45a62e65e7032667b2eeaa62c16fdbced6ca7298c214473b873dbb00347a073e4a06118bd65888cfd9e1fd63623a8b5a370eab43049db43c873283d0e8b140cd5d92cdcb27b13a0116af9e05175e5b883d199ad2642959", 0x8a, 0x94, &(0x7f0000001100)={0x11, 0xf8, r8, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r11, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, r12, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x800)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(r13, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x54, r14, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20008001)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000001480)=0x34, &(0x7f00000014c0)=0x1)

1.298384189s ago: executing program 5 (id=6284):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000440)="18349ff0707314657eaa8c2904dd1d1d86dd", 0x12, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x3}, 0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000210000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e00000000a5fe0280060001000000000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmmsg$sock(r10, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff5", 0xca}, {&(0x7f0000000fc0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000280)="3b3d07b7091f697381965e2e09f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f31be5fae8ab75f88ff7687f9143eb2c30f42e2659c8f7f2eea31b74e233226f1965762bb075dcb39d9130dd1cef7b04035bd0fe45803ec1e165d4340d55eaae5c40d7bf46712a2bb2ed87c9b84e4bd49775c10e86b58d47fadbc520d8d", 0xcc}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000140)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2d", 0x59}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) (async)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r11 = socket(0x400000000010, 0x3, 0x0) (async)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r14 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x18}}, 0x0)

1.209196216s ago: executing program 3 (id=6285):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0)
preadv(r0, &(0x7f0000002840)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x757b, 0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x4}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f0000000040)=@tcp6, 0x1000000}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20004080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x842}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfff7fffd, 0x2}, 0x10)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x20000000, 0x9, 0x2}, 0x4e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xe}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @initdev}, &(0x7f0000000280)=0xc)
r8 = socket$tipc(0x1e, 0x2, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "04b74afd7a6806cd", "7e0d0b7a01578be73f97d467f027c72c", "c4597a10", "fd9b52eb6a10ad85"}, 0x28)
sendmsg$tipc(r8, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

989.924181ms ago: executing program 5 (id=6286):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800030000000000000000000a000000", @ANYRES32, @ANYRES8=r1], 0x38}}, 0x0)

920.220721ms ago: executing program 3 (id=6287):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000)=0x6f2, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xe}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_route={{0x8}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x800)
close(0x3)

804.773035ms ago: executing program 6 (id=6288):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040084}, 0x4000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', <r4=>0x0}) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', <r5=>0x0}) (rerun: 32)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x148, r3, 0x31d, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x100, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xa4, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x35}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "62a104412f216865e237c2e11d3bef47c04c69dfbb83eb903930467af6e59c03"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "206b1087b24c4ddb477e4bd3bc6cf2efcebc907967115504fb7993a6ef25de56"}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000801) (async, rerun: 64)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x40}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004014}, 0x48011) (async)
r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000640), r0)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r7, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x8009)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r0)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, r8, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x694b}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3cdfda}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20400100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x8c, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4010}, 0x880) (async, rerun: 64)
syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), r2) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001040)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001000)={&(0x7f0000000b40)={0x488, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0xab, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_a, @device_b, @initial, {0x1, 0x40}, @value=@ver_80211n={0x0, 0x7, 0x1, 0x2, 0x0, 0x0, 0x1}}, 0xff, @default, 0x801, @void, @void, @val={0x3, 0x1, 0xb6}, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x4, 0xc, 0xf7}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x5, 0x8}}, @val={0x76, 0x6, {0x65, 0xfd, 0x3, 0x11}}, [{0xdd, 0x5b, "cf5c73cae000651b51745bcb6d37f59edea90270f74ca7a888b7800ae92f56bd8a9d150f2e734df03483e9b020f7894e75607d8d4c47401ef81c19a7feff96ec1800ed4ef806438c54961de4d39c8e7fc205fa8c4f49e21d09079e"}]}}, @NL80211_ATTR_IE={0x99, 0x2a, [@dsss={0x3, 0x1, 0x64}, @random={0x2, 0x3b, "55c2b9f24205070f0a747e3e8fa3ec5567eb11c5f9da50d0bfad541b6b7c02063a870e4af198510cf7f477d9e8e32d98f3b8ee44f8623090ed79d4"}, @random_vendor={0xdd, 0x49, "de421b557727d0c09619cbd53fcc63f6c9183bb7cc5ed57c7b4d818dce00583899f31659ef7bb5f1a59e5ae44d59d065ac0ecb5dabeb55aea395bfeb5f2b0d25d350d20ea306642480"}, @dsss={0x3, 0x1, 0x9}, @supported_rates={0x1, 0x5, [{0xc}, {0x1b, 0x1}, {0x36, 0x1}, {0x60}, {0x44}]}]}, @NL80211_ATTR_BEACON_HEAD={0x10e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7}, @broadcast, @broadcast, @initial, {0x0, 0xeaf}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x4, @random, 0x0, @val={0x0, 0x14, @random="5d8e09937541dec3bd5881c402cd9b0535ac76b5"}, @void, @void, @val={0x4, 0x6, {0x1, 0x4, 0x8, 0x3}}, @val={0x6, 0x2}, @void, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x0, 0x9f, 0xd, 0xc}}, @val={0x2d, 0x1a, {0x8, 0x1, 0x6, 0x0, {0x9, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0xffff, 0x2}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x1e, "e4d9ee0fdde328f39b5b473450a40e210f5e663dc9ae5e643f24a977a310"}, {0xdd, 0x3f, "3bd1bbe5aa73350d9e4335b908b3551689bb351dd799d40c77765a47158241168fbcf7714b14185173f18f76943e4ebffc34787bf2b951c060c932c6769951"}, {0xdd, 0x30, "dbb660d6dfd6ff80c398bab30522fb6ebba425ff2391f4ba785729b6b428711edfa093e90f1ee6e1c5b6e4c160775871"}]}}, @NL80211_ATTR_BEACON_HEAD={0x179, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @broadcast, @random="29711c24eafe", {0x5, 0x7}}, 0x7, @default, 0x8008, @void, @val={0x1, 0x6, [{0x6, 0x1}, {0x3, 0x1}, {0x1b, 0x1}, {0x16}, {0x24}, {0x1b, 0x1}]}, @val={0x3, 0x1, 0xd}, @val={0x4, 0x6, {0xd, 0x7, 0xd384, 0x7}}, @void, @void, @val={0x25, 0x3, {0x1, 0x5, 0x4}}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x53, 0x95, 0x81}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x4, 0x41}}, @val={0x76, 0x6, {0x10, 0x5, 0xc, 0x7fff}}, [{0xdd, 0xe0, "defc48888a02436b219f2ece770a053573277326d7d27ed12be92878b81fc83a91ab0e5e073df3c60148efce91a8e4a6a47cad3ff975a2eea95e1e3721aeebb49a4f5197bc2f9d2679308de2914f54e4768834f4ebe55d93e6ba82e5d54b97ed21e1acb06eedf2f4f0833341bcfafbd40e7f325b7e6cf3644afcdbf885d875d72e62605eabdb38f61137964ca3340b3c495912d42f672eb472752f61ecdad0361495d93c7f0039fc99823dfad89510b17a5ae773fd9c8ccf019dd9e323a20e8d469e31526436ccac0d7f19b5c5080d7d4db8b54dab9bf5016648a0af7f2de512"}, {0xdd, 0x6, "8b12be0cf2bf"}, {0xdd, 0x2b, "7debfe737ffdf409db2203bb082fe6ef5d77ab9e1376f880c709994707d3d4d1468b9ae6959f5cbfe0fb0c"}]}}, @NL80211_ATTR_BEACON_TAIL={0x89, 0xf, [@mic={0x8c, 0x10, {0x4b1, "9e09cb52d39f", @short="ecc5e8a11351c129"}}, @peer_mgmt={0x75, 0x6, {0x1, 0xffff, @void, @val=0x25, @void}}, @preq={0x82, 0x30, {{0x0, 0x0, 0x1}, 0x4, 0x7, 0x2, @device_b, 0x5, @void, 0xc0, 0x3, 0x2, [{{0x1, 0x0, 0x1}, @broadcast, 0x1}, {{}, @device_a, 0x200}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x2, 0x3, @broadcast, 0x8, @value=@broadcast, 0x8, 0xffffffff, @device_b, 0x8}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0x1}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x60}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xa, 0x7f, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0x80, 0x8}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x54}, 0x20044080)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), r0)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xb4, r10, 0x83683faceee64589, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ee91ec7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) (async)
r11 = syz_init_net_socket$ax25(0x3, 0x5, 0x7)
sendto$ax25(r11, &(0x7f0000001240)="4dd4c8a4165ec59f0e4b98664546c1ef1b3eacd6955df3af8c5244705712df8c6f313e8ca3866f51c82f07bf78a86be26aa1f3884f1402bd3d41e5bbaed6de1e2c0bfc00974c68ac9da2b638a255bbaf90bd3d335ff4862b401ddcd00bc62dce105a6814bd820579c4857ea4d087683d0e0cf5a61bfde6a0c6fdeac020f327fc38582b61de62e7f4c73c997fbaeafdcaf7c590e4de7d61e80e892649946774624e80498b9d2c9beb81680451d7e3c5a65482bd64e07ba31340c21f5a29715ee5a1de35f02b", 0xc5, 0x20000040, 0x0, 0x0)
r12 = syz_genetlink_get_family_id$team(&(0x7f0000001380), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000013c0)={'team0\x00', <r13=>0x0}) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001400)=<r14=>0x0, &(0x7f0000001440)=0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001480)={'team0\x00', <r15=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001540)={'syztnl1\x00', &(0x7f00000014c0)={'syztnl1\x00', <r16=>0x0, 0x29, 0x8, 0xce, 0x1, 0x48, @local, @local, 0x700, 0x8, 0x10, 0xff}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000001580)={'team0\x00', <r17=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001680)={'gretap0\x00', &(0x7f00000015c0)={'gre0\x00', <r18=>0x0, 0x7, 0x8, 0xe, 0x51, {{0x28, 0x4, 0x1, 0x7, 0xa0, 0x64, 0x0, 0x10, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp={0x44, 0x2c, 0x3b, 0x0, 0x7, [0x0, 0x2, 0xfd88, 0x5, 0x6, 0x8, 0x0, 0x9, 0x5, 0x7ff]}, @timestamp_addr={0x44, 0x1c, 0xc, 0x1, 0xf, [{@remote, 0x200}, {@local, 0x7ff}, {@private=0xa010102, 0xff}]}, @timestamp={0x44, 0x28, 0xa2, 0x0, 0x7, [0xe, 0x8, 0x3, 0x0, 0x6, 0xbd7c, 0x2, 0x3ff, 0xb]}, @cipso={0x86, 0x1b, 0x1, [{0x0, 0x9, "13805ee5575162"}, {0x5, 0xc, "62ae62d2f6fb7e2f23f9"}]}]}}}}})
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001e00)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x30000030}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001840)={0x564, r12, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r13}, {0x10c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x2, 0x2, 0x9}, {0xfff, 0xd, 0x9}, {0x4, 0xff, 0x0, 0x7ff}, {0x5, 0xe1, 0x6b, 0x8cd}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r15}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9c8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r17}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8000, 0x8, 0x2, 0x9}, {0x8, 0xdc, 0x1, 0x93}, {0xe46, 0x7, 0xf, 0x8e5}, {0x241, 0xf, 0x8, 0x6}, {0xe1, 0x3, 0x40}, {0x0, 0x7, 0x5, 0x800}, {0x10, 0xac, 0x5, 0x4}, {0x5, 0x9, 0x2, 0x7}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfb70}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}]}}]}, 0x564}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040)

790.858818ms ago: executing program 5 (id=6289):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000080), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0x519, 0x4)

690.044257ms ago: executing program 6 (id=6290):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}]}, 0x20}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

601.364738ms ago: executing program 5 (id=6291):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000802f00000011fe0600"/28], 0x1c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0)
r1 = epoll_create(0x80) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0)
r2 = socket$caif_seqpacket(0x25, 0x5, 0x5) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x40000005}) (async)
syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000043054000080045000028000000000006907864010101ac1414aafffc4e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000000780000"], 0x0)

599.69689ms ago: executing program 2 (id=6292):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x250, 0x206, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc0, 0x128, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@connlabel={{0x28}, {0x401, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x5, 0x2, 0x4, 'syz1\x00', 'syz1\x00', {0x6}}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@ah={{0x30}, {[0x8, 0xd0]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x720, 0xd, [0x3e, 0x8, 0x40, 0x32, 0x1e, 0x8, 0x2b, 0xe, 0x3c, 0xe, 0x6f, 0x34, 0xff, 0x21, 0x8, 0x2a], 0x0, 0xce4a, 0xfffffffffffff801}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}}, 0x0)

575.965864ms ago: executing program 0 (id=6195):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x64, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nicvf0\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000800}, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x5a1, 0x5, 0x0, 0x5}}}}, 0x30}}, 0x0)

500.118454ms ago: executing program 6 (id=6293):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000380)={0x8, [0x7, 0x1, 0x4, 0x8, 0x8, 0x6, 0x3, 0x4]}, &(0x7f0000000440)=0x14)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2}, 0x94)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
write$nci(r3, &(0x7f0000000040)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0x1, {0x6, 0x1}}, 0x5)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000300)=0xb1b, 0x4)
bind$802154_dgram(r8, &(0x7f0000000540)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14)
sendmmsg(r8, &(0x7f0000004300)=[{{&(0x7f00000003c0)=@can, 0x80, 0x0}}], 0x1, 0x800)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000400)={'wg2\x00', <r9=>0x0})
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa, r9}, 0x10)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000000340)=0x44, 0x4)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r11, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000100), 0x3)
setsockopt$inet6_tcp_int(r11, 0x11a, 0x3, &(0x7f0000000140)=0x304, 0x4)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000100)={'syztnl1\x00', r9, 0x700, 0x8000, 0x9, 0xa1, {{0x14, 0x4, 0x2, 0x30, 0x50, 0x68, 0x0, 0x9, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x14, 0xfe, 0x1, 0x0, [{@private=0xa010102, 0x3}, {@broadcast, 0x8000}]}, @end, @lsrr={0x83, 0x17, 0xe4, [@remote, @private=0xa010102, @rand_addr=0x64010101, @multicast1, @remote]}, @noop, @noop, @generic={0x83, 0xc, "fb7f96bd16666d61a808"}]}}}}})

453.87247ms ago: executing program 3 (id=6294):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x300, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, &(0x7f0000000e40)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)="afeb0776849227c1bfcd82d810bfaaaf5ce1564a005dcad37ebaa6950bb4bf1a893901ec438de069c6bb8ad12b2ce31862a990e2604ac349606902a0e175d92912e7cb0f1c9da69cdcfc8a21de2923eb5bdb44fef58ef0716e9425b0c2ac91c999bcea879f0ee833d4e9b8c27b1f72c58c3a40a62853bdf61702a98a4f1a6bea3f2841111d36b2ffadfc0d5c1e35a2fde35dd4859d3f4533b24a04554e63358f52191d8a64dc671775856b850aeec7aa1fe3d9a3c44e0df4a57a0adb232ae8", 0xbf}, {&(0x7f00000004c0)="e082d76dc099439d6d47cea4c5ab7997fa7cd83baa89da8673f587d5566425633de6da5b9e3ada887be8e46c9c55b6c37088ab305eeabb96a54e", 0x3a}, {&(0x7f0000000500)="d60c132e93aa7dd63eb296cfa690ed840ef3f01e86854cf0240dec89208018eb12fa89", 0x23}, {&(0x7f0000000f40)="d4482ca6ee1acb52fa97ad29497f649a00a9509a1e0f6596d63c12219151002b960420c6b7858329f60ba24c5b2286b4180cd0d858dab1f59e24440aa485c5552f8814c421bff410e71bba1700d4837216a13b3039036e9c83ad22e4eb00514e9330754043278110607ccb275528aef04846522d67473408cc359acb9e6a22b0eb15609c1fe8661b245c3d7e3e12b3ca37921bdaf42f4416ef99ee9bbb88fc94f0e5f898e8433a2c306b7eb3b9341d25a35eb6997aa52ce824", 0xb9}, {&(0x7f0000000780)="fa72050e55b86e85e0d6bc8574118f1f6fbaf5289bfdc2cc781a20d80d0e57eb61c33ab94fe6575a4d2d49ec836f531aa1add54fc19b0acb5998b25e793eb8be4ffcb02d3feebd66e3589da2580346a242bef6214c5435b175ba05434729afbc4cb20cc5117741e15185089d5d8103a225a78db3a29b1d26eca7021f3bc3f795d4d6dd176e7152d43b0697b1734bc2d4f66e6a8cea7fa9a16cc945a92647b5ba8d54d2a719dcd9cc9e5a30ea709f4d802661ef8622", 0xb5}, {&(0x7f00000016c0)="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", 0x167}], 0x6, 0x0, 0x0, 0x8014}], 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6f}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

407.126496ms ago: executing program 0 (id=6295):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0xfffffffe, 0x1, 0x0, 0x44, 0x2, 0x9, 0x0, 0x3}})
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4e}}, &(0x7f0000000480)='GPL\x00'}, 0x90)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a000008001500", @ANYRES32=0x0, @ANYBLOB="06001200800a0000040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8)
sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x28, 0x2, 0x70bd2a, 0x25dfdbff, {0x20}, [@typed={0x8, 0x46, 0x0, 0x0, @uid=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc5}, 0x80c1)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r5, @ANYRES64=r3, @ANYBLOB="14001b00"], 0x14}}, 0x0)

318.369827ms ago: executing program 2 (id=6296):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x270, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008"], 0xa8}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4)
sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)={0x13, 0x18, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4}]}, 0x18}}, 0x0)
setsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000040)=0x1, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008000a"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x270, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008"], 0xa8}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) (async)
sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)={0x13, 0x18, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4}]}, 0x18}}, 0x0) (async)
setsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000040)=0x1, 0x4) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008000a"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)

237.668925ms ago: executing program 0 (id=6297):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r1 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @mcast2, 0xfffffffe}, 0x1c) (async)
setsockopt$inet6_mtu(r1, 0x29, 0x1e, &(0x7f0000000040), 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x12, &(0x7f00000001c0)=0x10, 0x4) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'})
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) (async)
sendmsg$nl_route(r8, 0x0, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000850000000500000095"], &(0x7f0000000040)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES16=r4, @ANYRES64=r4, @ANYRES32=0x0, @ANYRES16=r4, @ANYRES32=r4, @ANYRES8=r10], 0x1f0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

168.687101ms ago: executing program 0 (id=6298):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c)
sendto$inet6(r0, &(0x7f0000000480)="10", 0xfffffffffffffdcd, 0x8000, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4)
poll(&(0x7f0000000000)=[{r0, 0x2340}], 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x85, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f00000002c0)=0x100)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', <r4=>0x0})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a3000000000080009"], 0x558}}, 0x40)
r6 = gettid()
r7 = socket(0x1e, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, 0x0, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000304f9fffffffedbdf2500007400", @ANYRES32=r4, @ANYBLOB="fc973139170d030008001300", @ANYRES32=r6, @ANYBLOB="1400350076657468305f6d6163"], 0x50}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000200)=r6)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/138, 0x8a}], 0x1, &(0x7f0000000480)=""/4096, 0x1000}, 0x10000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000004c000000030a01010000000000000000010000000800000b40000000010900010073797a31000000001c0008800c00024000000000000000000c0001400000000000000000140000001000010000000000000000000000000a76ce6d958c967059351456452e713a6235fdad960a77d4c64c1b10d8a6442a7453d98a33d179bdaf93afb4bad4e23dc06b2285074559865e36957b609ffa115dc504d54f78f9d31c9e588edb018b37a800000000000000"], 0x94}}, 0x0)

114.508447ms ago: executing program 2 (id=6299):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x110, 0x110, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x220}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', r4, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

33.735862ms ago: executing program 3 (id=6300):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0x401, 0x4)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) (async)
getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f0000000140)) (async)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x1, 0x5, 0x7, 0x8f4e, 0xa}) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x100, r5, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x15}, 0x0) (async, rerun: 32)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000080)=0x4, 0x4) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009052abd7000fddbdf25021000ff", @ANYRES32=r6, @ANYBLOB="08000900530a000008000200fffffff708000400ac1414aa0800"], 0x48}, 0x1, 0x0, 0x0, 0x24048881}, 0x0) (async, rerun: 32)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (rerun: 32)

0s ago: executing program 3 (id=6301):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r0=>0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r0, @ANYBLOB="00030000000000004c001280110001006272696467655f736c6176650000000034000580050019"], 0x98}}, 0x0)

kernel console output (not intermixed with test programs):

[T22152] netlink: 'syz.4.4379': attribute type 3 has an invalid length.
[  526.075160][T22157] block nbd2: Unsupported socket: should be TCP or UNIX.
[  526.438782][T22183] tipc: Resetting bearer <eth:syzkaller0>
[  526.724031][T22197] bridge0: entered promiscuous mode
[  526.745155][T22197] bridge0: left promiscuous mode
[  526.823911][T22215] netlink: 'syz.4.4395': attribute type 1 has an invalid length.
[  526.861564][T22215] 8021q: adding VLAN 0 to HW filter on device bond2
[  526.886924][T22215] vlan2: entered promiscuous mode
[  526.900234][T22215] bond2: entered promiscuous mode
[  526.906940][T22215] vlan2: entered allmulticast mode
[  526.913491][T22215] bond2: entered allmulticast mode
[  527.046282][T22215] bond2: (slave bridge3): making interface the new active one
[  527.074823][T22215] bridge3: entered promiscuous mode
[  527.086150][T22215] bridge3: entered allmulticast mode
[  527.104810][T22215] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  527.133198][T22224] syzkaller1: entered promiscuous mode
[  527.148651][T22224] syzkaller1: entered allmulticast mode
[  528.022547][T22288] netlink: 'syz.4.4410': attribute type 16 has an invalid length.
[  528.032302][T22288] netlink: 'syz.4.4410': attribute type 17 has an invalid length.
[  528.165568][T22288] 8021q: adding VLAN 0 to HW filter on device bond0
[  528.176492][T22288] 8021q: adding VLAN 0 to HW filter on device team0
[  528.190759][T22288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  528.244270][T22295] sctp: [Deprecated]: syz.1.4413 (pid 22295) Use of int in maxseg socket option.
[  528.244270][T22295] Use struct sctp_assoc_value instead
[  528.416046][T22307] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component
[  528.632540][T22313] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode
[  528.864900][ T5842] Bluetooth: hci1: command 0x0406 tx timeout
[  528.912846][T22327] x_tables: duplicate underflow at hook 2
[  528.942373][T22328] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  529.048806][T22335] netlink: 'syz.2.4426': attribute type 11 has an invalid length.
[  529.173200][T22347] netlink: Unknown conntrack attr (type=2304, max=9)
[  529.643440][T22375] __nla_validate_parse: 16 callbacks suppressed
[  529.643458][T22375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4440'.
[  529.686500][T22380] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4443'.
[  529.700672][T22373] syzkaller0: entered promiscuous mode
[  529.721042][T22373] syzkaller0: entered allmulticast mode
[  529.729709][T22376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4440'.
[  529.840560][T22388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4443'.
[  529.854347][T22376] batman_adv: batadv0: Removing interface: batadv_slave_0
[  529.920368][T22394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4445'.
[  529.930171][T22394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4445'.
[  530.166419][T22396] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component
[  531.041996][T22423] netlink: 'syz.2.4452': attribute type 13 has an invalid length.
[  531.104819][T22417] : entered promiscuous mode
[  531.152232][T22432] gretap2: entered promiscuous mode
[  531.518488][T22449] netlink: 'syz.0.4458': attribute type 10 has an invalid length.
[  531.531349][T22449] bridge0: port 3(team0) entered blocking state
[  531.542097][T22449] bridge0: port 3(team0) entered disabled state
[  531.570366][T22449] team0: entered allmulticast mode
[  531.576413][T22449] team_slave_0: entered allmulticast mode
[  531.626805][T22449] team_slave_1: entered allmulticast mode
[  531.644267][T22451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4461'.
[  531.645790][T22449] team0: entered promiscuous mode
[  531.678320][T22449] team_slave_0: entered promiscuous mode
[  531.694510][T22449] team_slave_1: entered promiscuous mode
[  531.695691][T22451] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1792741145/1792741146
[  531.707818][T22449] bridge0: port 3(team0) entered blocking state
[  531.722133][T22449] bridge0: port 3(team0) entered forwarding state
[  531.747489][T22451] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1792741145/1792741146
[  531.963593][T22470] pimreg7: entered allmulticast mode
[  532.000340][T22472] netlink: 'syz.3.4465': attribute type 83 has an invalid length.
[  532.035813][T22478] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  532.140130][T22483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4466'.
[  532.169396][T22483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4466'.
[  532.471079][T22497] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20002
[  532.643135][T22501] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4472'.
[  533.423121][T22531] netlink: 'syz.0.4477': attribute type 1 has an invalid length.
[  533.734343][T22540] netlink: 'syz.4.4479': attribute type 1 has an invalid length.
[  533.803727][T22540] bond3: (slave gretap3): making interface the new active one
[  533.813253][T22540] bond3: (slave gretap3): Enslaving as an active interface with an up link
[  534.354755][T22580] x_tables: duplicate underflow at hook 1
[  534.958639][T22608] __nla_validate_parse: 10 callbacks suppressed
[  534.958654][T22608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4501'.
[  537.108399][T22560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  537.121831][T22592] ksmbd: Unknown IPC event: 8, ignore.
[  537.275544][T22625] netlink: 'syz.4.4502': attribute type 21 has an invalid length.
[  537.287571][T22625] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4502'.
[  537.536764][T22643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4508'.
[  537.554078][T22649] !
: renamed from dummy0 (while UP)
[  537.859659][T22668] veth0_virt_wifi: default FDB implementation only supports local addresses
[  537.878312][T22668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4513'.
[  537.917811][T22668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4513'.
[  538.173531][T22675] infiniband syz0: set down
[  538.180337][T22675] infiniband syz0: added bond0
[  538.241448][T22675] RDS/IB: syz0: added
[  538.245913][T22675] smc: adding ib device syz0 with port count 1
[  538.253186][T22675] smc:    ib device syz0 port 1 has no pnetid
[  538.314238][T10499] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x9
[  538.424726][T22701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4521'.
[  538.468137][T22701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4521'.
[  538.809775][T22716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4526'.
[  539.282933][T22733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4533'.
[  539.441537][T22738] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20003
[  539.689887][T22755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4540'.
[  539.744259][T22755] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  539.771958][T22755] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  539.791141][T22755] gretap1: entered promiscuous mode
[  539.808269][T22755] gretap1: entered allmulticast mode
[  539.976593][T22769] xt_hashlimit: invalid rate
[  539.995113][T22776] IPv6: NLM_F_CREATE should be specified when creating new route
[  540.374840][T22798] Bluetooth: MGMT ver 1.23
[  540.579143][T22810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4556'.
[  540.777854][T22816] sctp: [Deprecated]: syz.0.4558 (pid 22816) Use of int in max_burst socket option.
[  540.777854][T22816] Use struct sctp_assoc_value instead
[  540.913163][T22822] netlink: 'syz.0.4561': attribute type 10 has an invalid length.
[  541.027201][T22826] wg1: entered promiscuous mode
[  541.044142][T22826] wg1: entered allmulticast mode
[  541.275892][T22843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4568'.
[  541.323299][T22849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4568'.
[  541.336791][T22849] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  541.671354][T22864] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  541.711921][T22864] bond6 (unregistering): Released all slaves
[  542.397853][T22897] netlink: 'syz.0.4581': attribute type 1 has an invalid length.
[  542.424700][T22897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4581'.
[  542.877502][T22911] netlink: 'syz.2.4583': attribute type 1 has an invalid length.
[  544.380316][ T5827] Bluetooth: hci1: command 0x0406 tx timeout
[  545.030508][T22911] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  545.235304][T22924] netlink: 'syz.0.4587': attribute type 10 has an invalid length.
[  545.256629][T22921] netlink: 'syz.4.4585': attribute type 58 has an invalid length.
[  545.265791][T22921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4585'.
[  545.280129][T22924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4587'.
[  545.290648][T22925] syzkaller0: entered promiscuous mode
[  545.296943][T22925] syzkaller0: entered allmulticast mode
[  545.310190][T22929] openvswitch: netlink: EtherType 50a is less than min 600
[  545.377736][T22925] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4586'.
[  545.600951][T22937] netlink: 'syz.0.4592': attribute type 4 has an invalid length.
[  545.608954][T22937] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4592'.
[  545.658494][T22937] `: renamed from bond0 (while UP)
[  545.729295][T22947] atomic_op ffff88807c3c1198 conn xmit_atomic 0000000000000000
[  545.741082][T22947] netlink: 340 bytes leftover after parsing attributes in process `syz.3.4591'.
[  545.771496][T22947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4591'.
[  545.875077][T22956] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4595'.
[  545.910132][T22956] unsupported nlmsg_type 40
[  545.926617][T22954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4596'.
[  545.962119][T22958] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4597'.
[  546.028846][T22958] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4597'.
[  546.076314][T22958] netlink: 'syz.3.4597': attribute type 6 has an invalid length.
[  546.119464][T22958] netlink: 'syz.3.4597': attribute type 5 has an invalid length.
[  546.127902][T22958] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4597'.
[  546.422621][T22975] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  546.434817][T22975] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  546.447128][T22975] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  547.028262][T23004] netlink: 'syz.0.4610': attribute type 1 has an invalid length.
[  547.082526][T23010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4610'.
[  547.128282][T23004] 8021q: adding VLAN 0 to HW filter on device bond0
[  547.202312][T23004] netlink: 'syz.0.4610': attribute type 1 has an invalid length.
[  547.214771][T23004] netlink: 'syz.0.4610': attribute type 2 has an invalid length.
[  547.226882][T23004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4610'.
[  547.241232][T23010] bond0: (slave veth5): Enslaving as an active interface with a down link
[  547.309009][T23012] bond0: (slave veth0_to_bond): making interface the new active one
[  547.340793][T23024] IPVS: set_ctl: invalid protocol: 51 172.30.0.5:20001
[  547.356974][T23012] veth0_to_bond: entered promiscuous mode
[  547.399968][T23012] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  547.545202][T23004] bond0: (slave veth7): Enslaving as an active interface with a down link
[  547.601965][T23004] netlink: 'syz.0.4610': attribute type 1 has an invalid length.
[  547.636861][T23004] netlink: 'syz.0.4610': attribute type 2 has an invalid length.
[  547.970998][T23054] openvswitch: netlink: Unknown key attributes 2
[  548.371394][T23088] block nbd2: Unsupported socket: should be TCP or UNIX.
[  548.405170][T23087] block nbd3: Unsupported socket: should be TCP or UNIX.
[  548.634709][T23099] bond6 (unregistering): Released all slaves
[  548.922199][T23121] netlink: 'syz.2.4642': attribute type 10 has an invalid length.
[  548.964078][T23121] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.979059][T23121] bridge_slave_1: left allmulticast mode
[  548.996078][T23121] bridge_slave_1: left promiscuous mode
[  549.012560][T23125] netlink: 'syz.1.4644': attribute type 11 has an invalid length.
[  549.023426][T23121] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.040581][T23121] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  549.053341][T23126] bond0: (slave sit0): Error: Device type is different from other slaves
[  549.084408][T23131] bond0: (slave sit0): Error: Device type is different from other slaves
[  549.109851][T23135] bond0: Caught tx_queue_len zero misconfig
[  549.177406][T23139] netlink: 'syz.1.4648': attribute type 7 has an invalid length.
[  549.403954][T23155] sctp: [Deprecated]: syz.0.4656 (pid 23155) Use of struct sctp_assoc_value in delayed_ack socket option.
[  549.403954][T23155] Use struct sctp_sack_info instead
[  549.603567][T23170] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  549.634607][T23170] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  549.750798][T23170] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  549.777344][T23186] xt_hashlimit: size too large, truncated to 1048576
[  549.820434][T23170] bond6: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  549.906405][T23170] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  549.967264][T23170] bond8: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  550.042246][T23170] bond9: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  550.084861][T23170] bond10: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  550.198302][T23170] bond11: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  550.261640][T23170] bond12: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  550.357947][T23170] bond13: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  550.692246][T23234] __nla_validate_parse: 9 callbacks suppressed
[  550.692267][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4670'.
[  550.741773][T23238] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4668'.
[  550.761779][T23234] ip6tnl0: Caught tx_queue_len zero misconfig
[  551.035583][T23257] bond14: (slave ip6gretap1): making interface the new active one
[  551.078793][T23257] bond14: (slave ip6gretap1): Enslaving as an active interface with an up link
[  551.224814][T23273] 8021q: VLANs not supported on sit0
[  551.234234][T23277] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  551.236412][T23273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4680'.
[  551.305380][T23282] tipc: Started in network mode
[  551.339307][T23282] tipc: Node identity 3ecace335b8d, cluster identity 4711
[  551.347271][T23282] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  551.386793][T23273] vlan3: entered allmulticast mode
[  551.397162][T23273] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode
[  551.431116][T23287] syzkaller0: entered promiscuous mode
[  551.448604][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4684'.
[  551.458864][T23287] syzkaller0: entered allmulticast mode
[  551.500962][T23286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4684'.
[  551.583179][T23282] tipc: Resetting bearer <eth:syzkaller0>
[  551.625160][T23278] tipc: Resetting bearer <eth:syzkaller0>
[  551.670595][T23278] tipc: Disabling bearer <eth:syzkaller0>
[  551.982773][T23319] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode
[  551.994791][T23319] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4694'.
[  552.068454][T23325] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4695'.
[  552.164666][T23330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4698'.
[  552.181211][T23330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4698'.
[  552.208852][T10512] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  552.249730][T10512] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  552.285086][T10512] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  552.308804][T10512] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  552.557189][T23345] validate_nla: 3 callbacks suppressed
[  552.557209][T23345] netlink: 'syz.0.4702': attribute type 1 has an invalid length.
[  552.601153][T23345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4702'.
[  552.658486][T23345] hsr_slave_0: left promiscuous mode
[  552.688060][T23345] hsr_slave_1: left promiscuous mode
[  553.151222][T23368] ip6t_srh: unknown srh match flags  5F28
[  553.233265][T23368] netlink: 'syz.1.4711': attribute type 1 has an invalid length.
[  553.290801][T23374] netlink: 'syz.0.4712': attribute type 1 has an invalid length.
[  553.318356][T23374] netlink: 'syz.0.4712': attribute type 2 has an invalid length.
[  553.425609][T23374] netlink: 'syz.0.4712': attribute type 1 has an invalid length.
[  553.444968][T23376] syzkaller0: entered promiscuous mode
[  553.452959][T23374] netlink: 'syz.0.4712': attribute type 3 has an invalid length.
[  553.465284][T23376] syzkaller0: entered allmulticast mode
[  553.877017][T21815] IPVS: starting estimator thread 0...
[  553.990942][T23395] IPVS: using max 32 ests per chain, 76800 per kthread
[  556.838064][T23386] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.906395][T23386] bridge_slave_0 (unregistering): left allmulticast mode
[  556.914362][T23386] bridge_slave_0 (unregistering): left promiscuous mode
[  556.926062][T23386] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.177750][T23414] __nla_validate_parse: 5 callbacks suppressed
[  557.177773][T23414] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4725'.
[  557.536837][T23429] syzkaller0: entered promiscuous mode
[  557.549331][T23429] syzkaller0: entered allmulticast mode
[  557.814264][T23452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4739'.
[  557.878946][T23452] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  557.891156][T23457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4740'.
[  557.913524][T23461] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4742'.
[  557.999048][T23464] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4743'.
[  558.077415][T23457] team_slave_0 (unregistering): left promiscuous mode
[  558.087501][T23457] team_slave_0 (unregistering): left allmulticast mode
[  558.105572][T23478] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4743'.
[  558.121524][T23457] team0: Port device team_slave_0 removed
[  558.501848][T23501] netlink: 'syz.3.4754': attribute type 12 has an invalid length.
[  558.533086][T23501] netlink: 'syz.3.4754': attribute type 29 has an invalid length.
[  558.556311][T23501] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4754'.
[  558.574370][T23501] netlink: 59 bytes leftover after parsing attributes in process `syz.3.4754'.
[  558.611132][T10505] veth0_to_bond: left promiscuous mode
[  559.196330][T23522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4763'.
[  559.283110][T23522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4763'.
[  559.351847][T23538] GUP no longer grows the stack in syz.0.4766 (23538): 200000003000-20000000a000 (200000001000)
[  559.403883][T23538] CPU: 1 UID: 0 PID: 23538 Comm: syz.0.4766 Not tainted syzkaller #0 PREEMPT(full) 
[  559.403913][T23538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  559.403926][T23538] Call Trace:
[  559.403934][T23538]  <TASK>
[  559.403942][T23538]  dump_stack_lvl+0xe8/0x150
[  559.403972][T23538]  __get_user_pages+0x2453/0x29d0
[  559.404020][T23538]  ? __gup_longterm_locked+0xc4e/0x1630
[  559.404047][T23538]  ? down_read_killable+0x1bb/0x340
[  559.404071][T23538]  ? try_get_folio+0xec/0x650
[  559.404101][T23538]  __gup_longterm_locked+0xdcf/0x1630
[  559.404153][T23538]  gup_fast_fallback+0x1d82/0x22e0
[  559.404214][T23538]  ? __pfx_gup_fast_fallback+0x10/0x10
[  559.404243][T23538]  ? is_valid_gup_args+0x11f/0x200
[  559.404269][T23538]  ? get_user_pages_fast+0x4d/0xb0
[  559.404298][T23538]  __iov_iter_get_pages_alloc+0x3b6/0xb10
[  559.404336][T23538]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  559.404365][T23538]  iov_iter_get_pages2+0x5e/0xa0
[  559.404396][T23538]  __se_sys_vmsplice+0x7b3/0x1490
[  559.404439][T23538]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  559.404461][T23538]  ? __pfx_futex_wait+0x10/0x10
[  559.404554][T23538]  do_syscall_64+0xe2/0xf80
[  559.404575][T23538]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.404593][T23538]  ? trace_irq_disable+0x37/0x100
[  559.404611][T23538]  ? clear_bhb_loop+0x60/0xb0
[  559.404635][T23538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.404665][T23538] RIP: 0033:0x7f7507f9bf79
[  559.404683][T23538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  559.404700][T23538] RSP: 002b:00007f7508e33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  559.404723][T23538] RAX: ffffffffffffffda RBX: 00007f7508215fa0 RCX: 00007f7507f9bf79
[  559.404737][T23538] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005
[  559.404749][T23538] RBP: 00007f75080327e0 R08: 0000000000000000 R09: 0000000000000000
[  559.404762][T23538] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  559.404773][T23538] R13: 00007f7508216038 R14: 00007f7508215fa0 R15: 00007fff8c766758
[  559.404806][T23538]  </TASK>
[  559.711624][T23546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  559.766452][T23552] netlink: 'syz.3.4769': attribute type 1 has an invalid length.
[  559.775970][T23552] netlink: 'syz.3.4769': attribute type 2 has an invalid length.
[  559.793493][T23552] netlink: 'syz.3.4769': attribute type 1 has an invalid length.
[  559.870527][T23552] netlink: 'syz.3.4769': attribute type 9 has an invalid length.
[  559.938421][T23560] gtp0: entered promiscuous mode
[  559.948210][T23560] gtp0: entered allmulticast mode
[  560.404599][T23592] netlink: 'syz.1.4780': attribute type 3 has an invalid length.
[  560.470941][T23592] erspan0: entered allmulticast mode
[  560.706775][T23615] IPVS: set_ctl: invalid protocol: 94 172.20.20.13:20003
[  560.717124][T23616] IPVS: set_ctl: invalid protocol: 94 172.20.20.13:20003
[  561.092141][T23634] syzkaller0: entered promiscuous mode
[  561.109882][T23634] syzkaller0: entered allmulticast mode
[  561.450177][T23659] netlink: 'syz.3.4806': attribute type 5 has an invalid length.
[  561.534052][T23667] netlink: 'syz.2.4803': attribute type 3 has an invalid length.
[  561.563653][T23659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  561.588569][T23659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  562.435981][T23719] netlink: 'syz.3.4825': attribute type 1 has an invalid length.
[  562.489446][T23724] __nla_validate_parse: 9 callbacks suppressed
[  562.489464][T23724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4826'.
[  562.556252][T23719] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  562.662620][T23734] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4829'.
[  562.705243][T23728] macvlan2: entered promiscuous mode
[  562.712909][T23728] macvlan2: entered allmulticast mode
[  562.741185][T23728] bond7: (slave macvlan2): Opening slave failed
[  562.870015][T23743] syzkaller0: entered promiscuous mode
[  562.870909][T23745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4832'.
[  562.882800][T23743] syzkaller0: entered allmulticast mode
[  562.888393][T23745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4832'.
[  562.916558][T23745] geneve4: entered promiscuous mode
[  562.923051][T23745] geneve4: entered allmulticast mode
[  562.932082][T10504] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  562.962028][T10504] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  562.971821][T10504] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  562.986203][T10504] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  563.531087][T23775] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4839'.
[  563.558329][T23770] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4838'.
[  563.615000][T23770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4838'.
[  563.633239][T23783] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4841'.
[  563.737393][T23793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4843'.
[  563.964719][T23805] openvswitch: netlink: IP tunnel dst address not specified
[  564.208715][T23820] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4853'.
[  564.280844][T23827] tunl0: left promiscuous mode
[  564.331068][T23828] ip6_vti0 speed is unknown, defaulting to 1000
[  564.394025][T23832] ip6gre0: Master is either lo or non-ether device
[  564.405518][T23828] ip6_vti0 speed is unknown, defaulting to 1000
[  564.423510][T23828] ip6_vti0 speed is unknown, defaulting to 1000
[  564.777293][T23828] infiniband syz2: set down
[  564.782783][T21808] ip6_vti0 speed is unknown, defaulting to 1000
[  564.792278][T23828] infiniband syz2: added ip6_vti0
[  564.798771][T23828] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  564.802579][T23828] infiniband syz2: Couldn't open port 1
[  564.836616][T23828] RDS/IB: syz2: added
[  564.841067][T23828] smc: adding ib device syz2 with port count 1
[  564.847268][T23828] smc:    ib device syz2 port 1 has no pnetid
[  564.854764][T21808] ip6_vti0 speed is unknown, defaulting to 1000
[  564.862692][T23828] ip6_vti0 speed is unknown, defaulting to 1000
[  564.906798][T23814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  565.045894][T23865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  565.538858][T23881] ip6gre2: entered allmulticast mode
[  565.722074][T23828] ip6_vti0 speed is unknown, defaulting to 1000
[  566.009009][T23897] syzkaller1: entered promiscuous mode
[  566.021959][T23897] syzkaller1: entered allmulticast mode
[  566.430236][T23828] ip6_vti0 speed is unknown, defaulting to 1000
[  566.591618][T23920] validate_nla: 2 callbacks suppressed
[  566.591640][T23920] netlink: 'syz.0.4878': attribute type 1 has an invalid length.
[  566.630298][T23920] netlink: 'syz.0.4878': attribute type 1 has an invalid length.
[  566.681185][T23923] pim6reg: entered allmulticast mode
[  566.692711][T23923] pim6reg: left allmulticast mode
[  566.700103][T23922] Cannot find add_set index 65532 as target
[  567.045385][T23828] ip6_vti0 speed is unknown, defaulting to 1000
[  567.352969][T23828] ip6_vti0 speed is unknown, defaulting to 1000
[  567.648919][T23960] __nla_validate_parse: 10 callbacks suppressed
[  567.648942][T23960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4889'.
[  567.827602][T23828] ip6_vti0 speed is unknown, defaulting to 1000
[  567.887767][T23972] Bluetooth: MGMT ver 1.23
[  567.945216][T23979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4894'.
[  567.974659][T23981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4895'.
[  568.054463][T23981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4895'.
[  568.064728][T23983] netlink: 'syz.4.4896': attribute type 1 has an invalid length.
[  568.064750][T23983] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4896'.
[  568.357488][T23828] ip6_vti0 speed is unknown, defaulting to 1000
[  568.898356][T24026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4909'.
[  568.950436][ T1301] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  568.967085][T23828] ip6_vti0 speed is unknown, defaulting to 1000
[  569.085967][T24030] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  569.115045][T24034] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4911'.
[  569.120893][T24030] syzkaller0: entered promiscuous mode
[  569.164975][T24030] syzkaller0: entered allmulticast mode
[  569.180932][T24034] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4911'.
[  569.246136][T24028] tipc: Resetting bearer <eth:syzkaller0>
[  569.276880][T24027] tipc: Resetting bearer <eth:syzkaller0>
[  569.394356][T24027] tipc: Disabling bearer <eth:syzkaller0>
[  569.776045][T24057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  570.021612][T24078] netlink: 'syz.3.4928': attribute type 88 has an invalid length.
[  570.100617][T24083] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4930'.
[  570.127755][T24084] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4930'.
[  570.252145][T24094] bond4: entered promiscuous mode
[  570.257679][T24094] 8021q: adding VLAN 0 to HW filter on device bond4
[  570.288523][T24094] 8021q: adding VLAN 0 to HW filter on device bond4
[  570.297666][T24094] bond4: (slave sit1): The slave device specified does not support setting the MAC address
[  570.310106][T24094] bond4: (slave sit1): Error -95 calling set_mac_address
[  570.454032][T24097] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  570.533978][T24111] netlink: 'syz.2.4936': attribute type 11 has an invalid length.
[  570.636296][T24115] netlink: 'syz.4.4939': attribute type 83 has an invalid length.
[  570.873166][T24127] netlink: 'syz.4.4943': attribute type 39 has an invalid length.
[  571.138526][T24131] netlink: 'syz.3.4945': attribute type 1 has an invalid length.
[  571.192420][T24136] xt_TPROXY: Can be used only with -p tcp or -p udp
[  571.356615][T24144] gre1: entered promiscuous mode
[  571.371112][T24144] gre1: entered allmulticast mode
[  571.475074][T24151] x_tables: unsorted underflow at hook 4
[  571.661481][T24162] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  571.696199][T24167] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  571.716674][T24162] ip6gre2: entered allmulticast mode
[  571.770638][T24170] netlink: 'syz.0.4958': attribute type 1 has an invalid length.
[  571.872681][T24179] sctp: [Deprecated]: syz.3.4959 (pid 24179) Use of struct sctp_assoc_value in delayed_ack socket option.
[  571.872681][T24179] Use struct sctp_sack_info instead
[  572.007422][T24187] IPv6: sit2: Disabled Multicast RS
[  572.034514][T24183] netlink: 'syz.3.4963': attribute type 3 has an invalid length.
[  572.044705][T24183] netlink: 'syz.3.4963': attribute type 1 has an invalid length.
[  572.096026][T24191] gre1: entered promiscuous mode
[  572.107251][T24191] gre1: entered allmulticast mode
[  572.385373][T24210] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  572.461742][T24212] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  572.469327][T24212] IPv6: NLM_F_CREATE should be set when creating new route
[  572.534699][T24214] openvswitch: netlink: Message has 6 unknown bytes.
[  572.551387][T24220] xt_ecn: cannot match TCP bits for non-tcp packets
[  572.874235][T24219] bond0 (unregistering): (slave veth5): Releasing active interface
[  572.883175][T24219] veth0_to_bond: entered promiscuous mode
[  572.894664][T24219] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface
[  572.908839][T24219] bond0 (unregistering): (slave veth7): Releasing active interface
[  572.923303][T24219] bond0 (unregistering): Released all slaves
[  572.967211][T24231] syz.3.4977 (24231) used obsolete PPPIOCDETACH ioctl
[  573.082750][T24241] xt_TCPMSS: Only works on TCP SYN packets
[  573.123296][T24229] veth0: entered promiscuous mode
[  573.130407][T24243] __nla_validate_parse: 20 callbacks suppressed
[  573.130425][T24243] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4982'.
[  573.130664][T24228] veth0: left promiscuous mode
[  573.541073][T24264] netlink: 'syz.0.4988': attribute type 29 has an invalid length.
[  573.564672][T24264] netlink: 'syz.0.4988': attribute type 29 has an invalid length.
[  574.303634][T24305] team0: Port device team_slave_0 removed
[  574.735237][T24323] syzkaller1: entered allmulticast mode
[  574.737032][T24309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5001'.
[  574.751298][T24323] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5004'.
[  574.780869][T24309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5001'.
[  574.812359][T24323] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5004'.
[  574.831348][T24309] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  574.867304][T24323] netlink: 'syz.0.5004': attribute type 6 has an invalid length.
[  574.889537][T24323] netlink: 'syz.0.5004': attribute type 5 has an invalid length.
[  574.919673][T24323] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5004'.
[  574.971481][T24309] batman_adv: batadv0: Removing interface: batadv_slave_0
[  575.046014][T24321] ip6_vti0 speed is unknown, defaulting to 1000
[  575.267957][T24339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5006'.
[  575.331521][T24342] xt_socket: unknown flags 0xe4
[  575.920767][T24372] syzkaller0: entered promiscuous mode
[  575.927205][T24372] syzkaller0: entered allmulticast mode
[  576.045489][T24378] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5019'.
[  576.374512][T24389] xt_l2tp: v2 doesn't support IP mode
[  576.387899][T24390] bridge_slave_0: left allmulticast mode
[  576.394975][T24390] bridge_slave_0: left promiscuous mode
[  576.402026][T24390] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.413877][T24390] .: left allmulticast mode
[  576.422857][T24390] .: left promiscuous mode
[  576.430134][T24390] bridge0: port 2(.) entered disabled state
[  576.442934][T24390] bond0: (slave bond_slave_0): Releasing backup interface
[  576.455917][T24390] bond0: (slave bond_slave_1): Releasing backup interface
[  576.468786][T24390] team0: Port device team_slave_1 removed
[  576.476629][T24390] batman_adv: batadv0: Removing interface: batadv_slave_0
[  576.487471][T24390] batman_adv: batadv0: Removing interface: batadv_slave_1
[  576.498871][T24390] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  576.520679][T24398] sctp: [Deprecated]: syz.2.5023 (pid 24398) Use of struct sctp_assoc_value in delayed_ack socket option.
[  576.520679][T24398] Use struct sctp_sack_info instead
[  576.784376][T24411] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  576.796343][T24411] bond0 (unregistering): Released all slaves
[  576.814758][T24414] batadv_slave_0: Caught tx_queue_len zero misconfig
[  576.944205][T24419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5032'.
[  576.955051][T24419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5032'.
[  577.700905][T24457] delete_channel: no stack
[  578.088492][T24502] netlink: 'syz.4.5054': attribute type 21 has an invalid length.
[  578.110396][T24504] netlink: 'syz.4.5054': attribute type 21 has an invalid length.
[  578.608264][T24543] __nla_validate_parse: 6 callbacks suppressed
[  578.608285][T24543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5063'.
[  578.896782][T24561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5067'.
[  578.943229][T24564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5070'.
[  578.955113][T24565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5070'.
[  578.985341][T24564] bond4: entered promiscuous mode
[  578.991530][T24564] 8021q: adding VLAN 0 to HW filter on device bond4
[  579.039065][T24554] unsupported nla_type 33542
[  579.069446][T24565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5070'.
[  579.134506][T24561] bond5: option mode: invalid value (133)
[  579.144633][T24561] bond5 (unregistering): Released all slaves
[  579.171739][T24567] netlink: 34 bytes leftover after parsing attributes in process `syz.3.5067'.
[  579.358118][T24585] netlink: 'syz.4.5077': attribute type 21 has an invalid length.
[  579.382188][T24585] IPv6: NLM_F_CREATE should be specified when creating new route
[  579.392499][T24585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  579.400618][T24585] IPv6: NLM_F_CREATE should be set when creating new route
[  579.409147][T24585] IPv6: NLM_F_CREATE should be set when creating new route
[  579.417567][T24585] IPv6: NLM_F_CREATE should be set when creating new route
[  579.497448][T24590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5079'.
[  579.498152][T24594] openvswitch: netlink: Duplicate key (type 32).
[  579.567533][T24596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5081'.
[  579.710428][T24606] netlink: 300 bytes leftover after parsing attributes in process `syz.4.5086'.
[  579.748232][T24608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5085'.
[  579.788295][T24608] netlink: 'syz.3.5085': attribute type 10 has an invalid length.
[  579.797912][T24608] bridge0: port 1(team0) entered blocking state
[  579.805653][T24608] bridge0: port 1(team0) entered disabled state
[  579.813899][T24608] team0: entered allmulticast mode
[  579.831512][T24608] team0: entered promiscuous mode
[  580.021958][T24620] netlink: 'syz.3.5090': attribute type 2 has an invalid length.
[  580.055382][T24620] º
: renamed from veth1_vlan
[  580.183854][T24624] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  580.263200][T24626] nlmon0: Caught tx_queue_len zero misconfig
[  580.994563][T24650] bridge0: port 3(team0) entered disabled state
[  581.378446][T24650] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  581.421549][T24650] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  581.594502][T24679] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  581.807243][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  581.818672][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  581.827861][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  581.838263][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  581.851095][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  581.951077][T24675] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  581.962889][T10499] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  581.979158][T10499] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  581.989834][T10499] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  582.013109][T10499] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  582.251304][T24698] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  582.482089][T24683] ip6_vti0 speed is unknown, defaulting to 1000
[  582.854424][ T5842] Bluetooth: hci1: link tx timeout
[  582.860485][ T5842] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  582.916691][T24740] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  582.937638][T24740] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  582.957996][T24740] gretap2: entered promiscuous mode
[  582.974400][T24740] gretap2: entered allmulticast mode
[  583.192695][T24734] ip6_vti0 speed is unknown, defaulting to 1000
[  583.503972][T24759] netlink: 'syz.3.5127': attribute type 1 has an invalid length.
[  583.624897][T24755] __nla_validate_parse: 7 callbacks suppressed
[  583.624919][T24755] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5126'.
[  583.675682][T24683] chnl_net:caif_netlink_parms(): no params data found
[  583.902758][ T5827] Bluetooth: hci0: command tx timeout
[  583.957493][T24780] netlink: 'syz.2.5130': attribute type 24 has an invalid length.
[  584.628090][T24797] netlink: 'syz.2.5134': attribute type 1 has an invalid length.
[  584.773318][T24805] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  584.909484][T24683] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.920619][T24683] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.929693][T24683] bridge_slave_0: entered allmulticast mode
[  584.937016][T24683] bridge_slave_0: entered promiscuous mode
[  584.943050][ T5827] Bluetooth: hci1: command 0x0406 tx timeout
[  584.957841][T24809] netlink: 'syz.2.5137': attribute type 1 has an invalid length.
[  584.961888][T24683] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.973698][T24683] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.984014][T24683] bridge_slave_1: entered allmulticast mode
[  585.003189][T24683] bridge_slave_1: entered promiscuous mode
[  585.181924][T24809] bond9: entered promiscuous mode
[  585.196234][T24809] 8021q: adding VLAN 0 to HW filter on device bond9
[  585.255239][T24683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  585.287158][T24811] bond9: (slave bridge4): making interface the new active one
[  585.295247][T24811] bridge4: entered promiscuous mode
[  585.301733][T24811] bond9: (slave bridge4): Enslaving as an active interface with an up link
[  585.352088][T24683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  585.434747][T24828] netlink: 'syz.0.5140': attribute type 2 has an invalid length.
[  585.465190][T24683] team0: Port device team_slave_0 added
[  585.486111][T24683] team0: Port device team_slave_1 added
[  585.547617][T24683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  585.572313][T24833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5141'.
[  585.589356][T24683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  585.638129][T24683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  585.700908][T24683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  585.731875][T24683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  585.914629][T24683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  585.983648][ T5842] Bluetooth: hci0: command tx timeout
[  586.001525][T24853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5147'.
[  586.079983][T24853] batman_adv: batadv0: Removing interface: batadv_slave_1
[  586.227015][T24857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5148'.
[  586.252033][T24683] hsr_slave_0: entered promiscuous mode
[  586.275253][T24683] hsr_slave_1: entered promiscuous mode
[  586.290375][T24683] debugfs: 'hsr0' already exists in 'hsr'
[  586.290508][T24867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5151'.
[  586.321220][T24683] Cannot create hsr debugfs directory
[  586.466398][T24878] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5155'.
[  586.545778][T24883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5154'.
[  586.575715][T24873] netlink: 'syz.3.5153': attribute type 29 has an invalid length.
[  586.580769][T24883] netlink: 'syz.2.5154': attribute type 20 has an invalid length.
[  586.610777][T24883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5154'.
[  586.669145][T10507] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  586.685016][T24887] netlink: 900 bytes leftover after parsing attributes in process `syz.4.5156'.
[  586.696640][T10507] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  586.735144][T10507] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  586.752496][T10507] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  587.073345][T24909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5158'.
[  587.188829][T24683] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  587.221078][T24683] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  587.245442][T24683] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  587.306302][T24683] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  587.342423][T24916] batman_adv: batadv0: Removing interface: batadv_slave_0
[  587.486421][T21802] IPVS: starting estimator thread 0...
[  587.494605][T24922] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  587.599392][T24927] IPVS: using max 36 ests per chain, 86400 per kthread
[  587.695558][T24938] x_tables: duplicate underflow at hook 4
[  587.783163][T24683] 8021q: adding VLAN 0 to HW filter on device bond0
[  587.894288][T24683] 8021q: adding VLAN 0 to HW filter on device team0
[  587.928107][T10499] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.937529][T10499] bridge0: port 1(bridge_slave_0) entered forwarding state
[  588.051690][T24952] netlink: 'syz.0.5167': attribute type 2 has an invalid length.
[  588.064208][ T5842] Bluetooth: hci0: command tx timeout
[  588.215984][T10512] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.223745][T10512] bridge0: port 2(bridge_slave_1) entered forwarding state
[  588.288421][T24969] veth0_macvtap: Device is already in use.
[  588.525230][T24984] Bluetooth: MGMT ver 1.23
[  588.926661][T25005] __nla_validate_parse: 7 callbacks suppressed
[  588.926681][T25005] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5179'.
[  588.954829][T25006] openvswitch: netlink: IP tunnel dst address not specified
[  588.972204][T24683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  588.994660][T24999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5178'.
[  589.052578][T25009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5180'.
[  589.963159][T24683] veth0_vlan: entered promiscuous mode
[  590.027016][T24683] veth1_vlan: entered promiscuous mode
[  590.141964][ T5842] Bluetooth: hci0: command tx timeout
[  590.191740][T25068] : entered promiscuous mode
[  590.202309][T25073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5189'.
[  590.204593][T25076] netlink: 'syz.3.5187': attribute type 6 has an invalid length.
[  590.215717][T24683] veth0_macvtap: entered promiscuous mode
[  590.321235][T25060] netlink: 212196 bytes leftover after parsing attributes in process `syz.3.5187'.
[  590.341967][T24683] veth1_macvtap: entered promiscuous mode
[  590.382572][T25073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5189'.
[  590.396229][T24683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  590.581082][T24683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  590.616956][T10524] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  590.637955][T10524] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  590.738565][T10524] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  590.785983][T10524] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  590.833373][T25093] bond0: Device is already in use.
[  591.063410][T25113] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  591.090950][T25115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5198'.
[  591.199471][T25116] syzkaller1: tun_chr_ioctl cmd 37896
[  591.264215][T25124] syzkaller1: tun_chr_ioctl cmd 1074025677
[  591.279152][T25124] syzkaller1: Refused to change device type
[  591.314971][T10504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  591.324816][T10504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  591.392490][T25130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5202'.
[  591.497391][T10524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  591.537352][T10524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  591.675617][T25137] bond10: Removing last ns target with arp_interval on
[  591.885954][T25154] bridge_slave_0: left allmulticast mode
[  591.913748][T25154] bridge_slave_0: left promiscuous mode
[  591.933440][T25157] netlink: 'syz.4.5208': attribute type 4 has an invalid length.
[  591.956069][T25154] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.986647][T25164] netlink: 'syz.4.5208': attribute type 4 has an invalid length.
[  592.053501][T25154] bridge_slave_1: left allmulticast mode
[  592.071316][T25154] bridge_slave_1: left promiscuous mode
[  592.078824][T25154] bridge0: port 2(bridge_slave_1) entered disabled state
[  592.108388][T25154] bond0: (slave bond_slave_0): Releasing backup interface
[  592.128193][T25154] bond0: (slave bond_slave_1): Releasing backup interface
[  592.150721][T25154] team0: Port device team_slave_0 removed
[  592.165318][T25154] team0: Port device team_slave_1 removed
[  592.176710][T25154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  592.203320][T25154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  592.219037][T25154] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  592.220578][ T5842] Bluetooth: hci0: command tx timeout
[  592.618551][T25206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5218'.
[  592.814017][T25201] macvlan0: entered promiscuous mode
[  593.201227][T25227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  593.264709][T25200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5219'.
[  593.279967][T25200] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  593.370715][T25235] xt_ipcomp: unknown flags 1D
[  593.610420][T25248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  593.715149][T25252] netlink: 'syz.0.5227': attribute type 1 has an invalid length.
[  594.086766][T25272] __nla_validate_parse: 5 callbacks suppressed
[  594.086787][T25272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5230'.
[  594.950347][T10504] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  595.050428][ T1318] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  595.092958][ T1318] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  595.128148][ T1318] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  595.488818][T25335] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5247'.
[  595.707312][T25346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  595.748989][T25346] openvswitch: netlink: Multiple metadata blocks provided
[  595.849262][T25361] netlink: 'syz.3.5254': attribute type 62 has an invalid length.
[  595.977515][T25363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5255'.
[  596.019894][T25363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5255'.
[  596.096828][T25370] ªªªªª»: renamed from gre0
[  596.257236][T25376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5260'.
[  596.293918][T25376] netlink: 'syz.4.5260': attribute type 4 has an invalid length.
[  596.305079][T25376] netlink: 193176 bytes leftover after parsing attributes in process `syz.4.5260'.
[  596.454152][T25388] syzkaller0: entered promiscuous mode
[  596.473243][T25388] syzkaller0: entered allmulticast mode
[  596.515207][T25395] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5267'.
[  596.581484][T25388] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  596.607755][T25387] tipc: Resetting bearer <eth:syzkaller0>
[  596.691162][T25387] tipc: Disabling bearer <eth:syzkaller0>
[  596.744470][T25407] x_tables: duplicate underflow at hook 2
[  596.837862][T25418] netlink: 'syz.0.5274': attribute type 2 has an invalid length.
[  596.870539][T25418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5274'.
[  597.021863][T25419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5273'.
[  597.391576][T25454] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  597.569847][T25458] C: entered allmulticast mode
[  597.582453][T25458] C: left allmulticast mode
[  597.751194][T25447] ip6_vti0 speed is unknown, defaulting to 1000
[  597.797851][T25471] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode
[  597.809854][T25469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5289'.
[  598.163429][T25489] xt_l2tp: v2 doesn't support IP mode
[  598.189726][T25487] netlink: 'syz.4.5296': attribute type 33 has an invalid length.
[  598.318456][T25499] openvswitch: netlink: nsh attr 255 is out of range max 3
[  598.610963][T25518] netlink: 'syz.3.5306': attribute type 10 has an invalid length.
[  598.627534][T25521] netlink: 'syz.2.5307': attribute type 1 has an invalid length.
[  598.896346][T25529] vlan2: entered allmulticast mode
[  598.903008][T25529] netdevsim netdevsim5 netdevsim1: entered allmulticast mode
[  599.332085][T25549] __nla_validate_parse: 3 callbacks suppressed
[  599.332105][T25549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5317'.
[  599.366656][T25549] netlink: 'syz.4.5317': attribute type 9 has an invalid length.
[  599.404401][T25553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5317'.
[  599.426224][T25553] nbd: must specify a size in bytes for the device
[  599.434907][T25554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5319'.
[  599.436724][T25549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5317'.
[  599.533400][T25559] xt_TCPMSS: Only works on TCP SYN packets
[  599.668131][T25570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5325'.
[  599.805648][T25574] netlink: 'syz.4.5326': attribute type 7 has an invalid length.
[  599.904684][T25579] netlink: 'syz.0.5328': attribute type 1 has an invalid length.
[  599.933554][T25579] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5328'.
[  599.982820][T25584] block nbd2: NBD_DISCONNECT
[  600.010513][T25590] nbd: device at index 2 is going down
[  600.027492][T25591] smc: net device team0 applied user defined pnetid SYZ2
[  600.145221][T25596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5335'.
[  600.155506][T25593] 8021q: VLANs not supported on wg1
[  600.298938][T25608] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5339'.
[  600.322032][T25606] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  600.502010][T25616] netlink: 'syz.2.5341': attribute type 11 has an invalid length.
[  600.539559][T25616] netlink: 'syz.2.5341': attribute type 4 has an invalid length.
[  600.555171][T25624] syzkaller0: entered promiscuous mode
[  600.559832][T25616] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.5341'.
[  600.573944][T25624] syzkaller0: entered allmulticast mode
[  600.581750][T25621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5344'.
[  600.998364][T25639] netlink: 'syz.2.5350': attribute type 1 has an invalid length.
[  601.213792][T25649] syzkaller0: entered promiscuous mode
[  601.220099][T25649] syzkaller0: entered allmulticast mode
[  601.310996][T25656] netlink: 'syz.5.5356': attribute type 1 has an invalid length.
[  601.361751][T25656] 8021q: adding VLAN 0 to HW filter on device bond1
[  601.414994][T25656] 8021q: adding VLAN 0 to HW filter on device bond1
[  601.463342][T25656] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  601.493106][T25656] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  601.680656][T25679] netlink: 'syz.2.5361': attribute type 3 has an invalid length.
[  601.867059][T25690] bridge4: entered promiscuous mode
[  601.877361][T25690] bridge4: entered allmulticast mode
[  601.887635][T25690] team0: Port device bridge4 added
[  602.101132][T25703] netlink: 'syz.4.5367': attribute type 10 has an invalid length.
[  602.113101][T25703] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  604.394219][T25660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  604.618414][T25717] __nla_validate_parse: 1 callbacks suppressed
[  604.618434][T25717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5371'.
[  604.652618][T25713] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5372'.
[  604.667127][T25713] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5372'.
[  604.703932][T25724] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5373'.
[  604.713270][T25713] dvmrp0: entered allmulticast mode
[  604.745192][T25724] IPv6: NLM_F_REPLACE set, but no existing node found!
[  604.751216][T25728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5374'.
[  604.801152][T25735] netlink: 'syz.0.5375': attribute type 24 has an invalid length.
[  604.907343][T25745] netlink: 'syz.0.5378': attribute type 4 has an invalid length.
[  604.943570][T25746] netlink: 'syz.4.5376': attribute type 21 has an invalid length.
[  604.973228][T25746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5376'.
[  604.986465][T25750] netlink: 'syz.0.5380': attribute type 29 has an invalid length.
[  605.300398][T25764] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5385'.
[  605.312841][T25764] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5385'.
[  605.314565][T25765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5384'.
[  605.696890][T25783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5393'.
[  605.733167][T25787] dvmrp1: entered allmulticast mode
[  605.958686][T25798] x_tables: duplicate underflow at hook 1
[  605.965610][T25803] x_tables: duplicate underflow at hook 1
[  606.107506][T25815] netlink: 'syz.4.5398': attribute type 1 has an invalid length.
[  606.151457][T25819] netlink: 'syz.2.5402': attribute type 21 has an invalid length.
[  606.210396][T25819] netlink: 'syz.2.5402': attribute type 5 has an invalid length.
[  606.829023][T25862] syzkaller0: entered promiscuous mode
[  606.861622][T25862] syzkaller0: entered allmulticast mode
[  607.351715][T25894] netlink: 'syz.5.5424': attribute type 11 has an invalid length.
[  607.388793][T25894] netlink: 'syz.5.5424': attribute type 11 has an invalid length.
[  607.455423][T25898] erspan1: entered allmulticast mode
[  607.534828][T25907] xt_l2tp: invalid flags combination: 0
[  607.667262][T25903] netlink: 'syz.3.5428': attribute type 7 has an invalid length.
[  607.706865][T25903] netlink: 'syz.3.5428': attribute type 6 has an invalid length.
[  607.716766][T25904] netlink: 'syz.3.5428': attribute type 6 has an invalid length.
[  607.727946][T25903] netlink: 'syz.3.5428': attribute type 6 has an invalid length.
[  607.750020][T25904] netlink: 'syz.3.5428': attribute type 6 has an invalid length.
[  608.002291][T25928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  608.574508][T25971] 8021q: VLANs not supported on lo
[  608.721170][T25980] netlink: 'syz.5.5450': attribute type 1 has an invalid length.
[  608.797027][T25989] gretap1: entered promiscuous mode
[  608.827950][T25989] bond2: (slave gretap1): making interface the new active one
[  608.843303][T25989] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  609.000501][T25996] netlink: 'syz.4.5453': attribute type 1 has an invalid length.
[  609.212425][T26010] sctp: [Deprecated]: syz.0.5458 (pid 26010) Use of int in max_burst socket option deprecated.
[  609.212425][T26010] Use struct sctp_assoc_value instead
[  609.762244][T26044] __nla_validate_parse: 18 callbacks suppressed
[  609.762264][T26044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5464'.
[  609.797349][T26047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5465'.
[  610.123027][T26055] IPVS: set_ctl: invalid protocol: 4288 0.32.0.0:58368
[  610.627438][T26075] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5469'.
[  610.769002][T26078] xt_hashlimit: size too large, truncated to 1048576
[  612.544219][T26070] vlan2: entered promiscuous mode
[  612.573536][T26070] vlan2: entered allmulticast mode
[  612.579983][T26070] hsr_slave_1: entered allmulticast mode
[  612.601392][T26075] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5469'.
[  612.684860][T26086] validate_nla: 1 callbacks suppressed
[  612.684882][T26086] netlink: 'syz.4.5473': attribute type 1 has an invalid length.
[  612.752230][T26086] bond6 (unregistering): Released all slaves
[  612.790292][T26097] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5473'.
[  612.843364][T26105] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  612.888832][T26086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5473'.
[  612.908677][T26107] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  613.367968][T26132] netlink: 'syz.5.5486': attribute type 9 has an invalid length.
[  613.451201][T26137] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  613.834487][T26150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5489'.
[  613.967444][   T30] audit: type=1107 audit(1770850939.884:10): pid=26152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='\>Ì/éÒŒ2ûT:vTô©YGbò•+öÍçÙõ\gbiS±‹0­=;àŸ]
ñŽŒ×Mþ¼_Eš?M
kwA„1Š©¿Á²ûë¥ëÓfdÓÀr'D”pó²ï§�I±çìVD]ŸÅNL£'
[  615.595528][T26097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  615.854645][T26170] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5496'.
[  615.864197][T26170] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5496'.
[  615.875562][T26170] netlink: 'syz.0.5496': attribute type 5 has an invalid length.
[  615.884199][T26170] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5496'.
[  616.132798][T26184] netlink: 'syz.5.5498': attribute type 1 has an invalid length.
[  616.166041][T26184] netlink: 'syz.5.5498': attribute type 1 has an invalid length.
[  616.209094][T26190] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5501'.
[  616.283553][T26194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5503'.
[  616.313341][T26194] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  616.451653][T26194] batman_adv: batadv0: Removing interface: batadv_slave_1
[  616.687501][T26223] sock: sock_set_timeout: `syz.3.5507' (pid 26223) tries to set negative timeout
[  617.400123][T26273] netlink: 'syz.2.5521': attribute type 9 has an invalid length.
[  617.432090][T26271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5519'.
[  617.502897][T26271] netlink: 'syz.3.5519': attribute type 3 has an invalid length.
[  617.511013][T26271] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5519'.
[  617.536750][T26271] netlink: 'syz.3.5519': attribute type 1 has an invalid length.
[  617.670551][T26282] macsec1: entered promiscuous mode
[  617.927013][T26292] syzkaller0: entered promiscuous mode
[  617.945483][T26292] syzkaller0: entered allmulticast mode
[  617.953501][T26307] sctp: [Deprecated]: syz.4.5531 (pid 26307) Use of int in max_burst socket option.
[  617.953501][T26307] Use struct sctp_assoc_value instead
[  617.955001][T26288] syzkaller1: entered promiscuous mode
[  617.977259][T26288] syzkaller1: entered allmulticast mode
[  617.986116][T26311] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5532'.
[  618.125801][T26316] netlink: 'syz.4.5533': attribute type 1 has an invalid length.
[  618.135097][T26316] netlink: 'syz.4.5533': attribute type 3 has an invalid length.
[  618.148137][T26316] netlink: 'syz.4.5533': attribute type 7 has an invalid length.
[  618.172668][T26316] netlink: 'syz.4.5533': attribute type 8 has an invalid length.
[  618.190329][T26316] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5533'.
[  618.207495][T26316] NCSI netlink: No device for ifindex 131092
[  619.193257][    C0] vxcan1: j1939_tp_rxtimer: 0xffff8880583e4800: rx timeout, send abort
[  619.205845][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880583e4800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  620.811518][T26339] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5538'.
[  620.811894][T26335] netlink: 'syz.4.5536': attribute type 17 has an invalid length.
[  620.860517][T26335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5536'.
[  620.886880][T26335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5536'.
[  620.994600][T26353] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5542'.
[  621.201270][T26370] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5547'.
[  621.216940][T26372] netlink: 'syz.5.5548': attribute type 10 has an invalid length.
[  621.274323][T26372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5548'.
[  621.516888][T26396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5555'.
[  621.556463][T26396] bond16: entered promiscuous mode
[  621.562832][T26396] bond16: entered allmulticast mode
[  621.563038][T26401] netlink: 'syz.3.5554': attribute type 1 has an invalid length.
[  621.570033][T26396] 8021q: adding VLAN 0 to HW filter on device bond16
[  621.582166][T26405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5556'.
[  621.601852][T26397] macvlan3: entered promiscuous mode
[  621.607269][T26397] macvlan3: entered allmulticast mode
[  621.614948][T26397] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  621.689995][T26396] macvlan3: entered promiscuous mode
[  621.695953][T26396] macvlan3: entered allmulticast mode
[  621.703249][T26396] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  621.816195][T26413] netlink: 'syz.4.5559': attribute type 1 has an invalid length.
[  621.938593][T26418] bond6: (slave ip6gretap1): making interface the new active one
[  621.951915][T26422] netlink: 'syz.3.5561': attribute type 1 has an invalid length.
[  621.992563][T26418] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link
[  622.082310][T26422] bond5: option miimon: invalid value (18446744073709551585)
[  622.126323][T26422] bond5: option miimon: allowed values 0 - 2147483647
[  622.147005][T26432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5565'.
[  622.159135][T26422] bond5 (unregistering): Released all slaves
[  622.396792][T26454] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5569'.
[  622.520285][T26467] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5571'.
[  622.784657][T26486] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  622.796142][T26486] bond3 (unregistering): Released all slaves
[  625.138560][T26433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  625.531796][T26534] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  625.728620][T26545] bridge0: entered promiscuous mode
[  625.738252][T26545] macsec5: entered promiscuous mode
[  625.745765][T26545] macsec5: entered allmulticast mode
[  625.752781][T26545] bridge0: entered allmulticast mode
[  625.763765][T26545] bridge0: port 2(macsec5) entered blocking state
[  625.796203][T26545] bridge0: port 2(macsec5) entered disabled state
[  625.834437][T26545] bridge0: left allmulticast mode
[  625.859991][T26545] bridge0: left promiscuous mode
[  625.953070][T26556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  626.043555][T26562] sctp: [Deprecated]: syz.4.5594 (pid 26562) Use of int in max_burst socket option deprecated.
[  626.043555][T26562] Use struct sctp_assoc_value instead
[  626.093678][T26568] Cannot find del_set index 4 as target
[  626.263776][T26579] __nla_validate_parse: 7 callbacks suppressed
[  626.263797][T26579] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5598'.
[  626.611179][T26594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  626.702911][T26594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5604'.
[  626.704933][T26604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5606'.
[  626.745679][T26606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5607'.
[  626.827539][T26610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5608'.
[  626.840465][T26604] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  626.875998][T26610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  627.041156][T26624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5610'.
[  627.061747][T26624] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5610'.
[  627.323691][T26641] netlink: 'syz.5.5616': attribute type 4 has an invalid length.
[  627.363800][T26647] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5617'.
[  627.633324][T26663] netlink: 'syz.5.5622': attribute type 1 has an invalid length.
[  627.647996][T26665] syzkaller0: entered promiscuous mode
[  627.661965][T26665] syzkaller0: entered allmulticast mode
[  627.695239][T26665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5623'.
[  627.796960][T26670] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5624'.
[  628.738483][T26724] netlink: 'syz.3.5636': attribute type 1 has an invalid length.
[  628.806089][T26724] bond5: (slave bridge8): making interface the new active one
[  628.815010][T26724] bond5: (slave bridge8): Enslaving as an active interface with an up link
[  630.385652][ T1301] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  645.757661][T10504] bridge_slave_0: left allmulticast mode
[  645.764010][T10504] bridge_slave_0: left promiscuous mode
[  645.770564][T10504] bridge0: port 1(bridge_slave_0) entered disabled state
[  646.148998][T10504] bond10 (unregistering): (slave erspan1): Releasing active interface
[  646.157982][T10504] erspan1 (unregistering): left promiscuous mode
[  646.200486][T10504] bond8 (unregistering): (slave gretap2): Releasing active interface
[  646.222035][T10504] bond12 (unregistering): (slave gretap3): Releasing active interface
[  646.280999][T10504] dvmrp6 (unregistering): left allmulticast mode
[  646.893657][T10504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  646.905602][T10504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  646.917684][T10504] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  646.928061][T10504] bond0 (unregistering): Released all slaves
[  647.071665][T10504] bond1 (unregistering): Released all slaves
[  647.084767][T10504] bond2 (unregistering): Released all slaves
[  647.222628][T10504] bond3 (unregistering): Released all slaves
[  647.370277][T10504] bond4 (unregistering): (slave veth3): Releasing backup interface
[  647.381503][T10504] bond4 (unregistering): Released all slaves
[  647.394093][T10504] bond5 (unregistering): Released all slaves
[  647.550259][T10504] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface
[  647.563545][T10504] bond6 (unregistering): (slave bond7): Releasing active interface
[  647.572735][T10504] bond6 (unregistering): Released all slaves
[  647.726460][T10504] bond7 (unregistering): Released all slaves
[  647.739118][T10504] bond8 (unregistering): Released all slaves
[  647.901326][T10504] bond9 (unregistering): (slave veth5): Releasing active interface
[  647.911211][T10504] bond9 (unregistering): Released all slaves
[  648.057940][T10504] bond10 (unregistering): Released all slaves
[  648.217873][T10504] bond11 (unregistering): Released all slaves
[  648.376680][T10504] bond12 (unregistering): Released all slaves
[  648.556040][T10504] bond13 (unregistering): Released all slaves
[  648.724530][T10504] bond14 (unregistering): Released all slaves
[  648.971194][T10504] tipc: Disabling bearer <eth:veth0_to_team>
[  648.987075][T10504] tipc: Left network mode
[  649.677856][T10504] hsr_slave_0: left promiscuous mode
[  649.703271][T10504] hsr_slave_1: left promiscuous mode
[  649.709088][T10504] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  649.716846][T10504] batman_adv: batadv0: Removing interface: batadv_slave_0
[  649.727153][T10504] veth1_macvtap: left promiscuous mode
[  649.732942][T10504] veth0_macvtap: left promiscuous mode
[  649.740246][T10504] veth1_vlan: left promiscuous mode
[  650.992850][T10504] IPVS: stop unused estimator thread 0...
[  671.340764][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  689.929387][T26745] netlink: 'syz.5.5639': attribute type 2 has an invalid length.
[  689.963450][T26748] batadv1: entered allmulticast mode
[  690.073980][ T5827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  690.084619][ T5827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  690.094583][ T5827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  690.106074][ T5827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  690.115532][ T5827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  690.167984][T26758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  690.462594][T26776] __nla_validate_parse: 2 callbacks suppressed
[  690.462616][T26776] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5647'.
[  690.647092][T26753] ip6_vti0 speed is unknown, defaulting to 1000
[  690.792277][T26798] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5651'.
[  691.166440][T26813] geneve2: entered promiscuous mode
[  691.187049][T10498] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  691.209881][T10498] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  691.218638][T10498] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  691.232324][T10498] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  691.494226][T26816] netlink: set zone limit has 4 unknown bytes
[  691.527400][T26839] x_tables: duplicate entry at hook 2
[  691.624571][T26753] chnl_net:caif_netlink_parms(): no params data found
[  691.742487][T26753] bridge0: port 1(bridge_slave_0) entered blocking state
[  691.770503][T26753] bridge0: port 1(bridge_slave_0) entered disabled state
[  691.777859][T26753] bridge_slave_0: entered allmulticast mode
[  691.788685][T26753] bridge_slave_0: entered promiscuous mode
[  691.798766][T26753] bridge0: port 2(bridge_slave_1) entered blocking state
[  691.807281][T26753] bridge0: port 2(bridge_slave_1) entered disabled state
[  691.822645][ T1301] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  691.823810][T26753] bridge_slave_1: entered allmulticast mode
[  691.841284][T26753] bridge_slave_1: entered promiscuous mode
[  691.938847][T26753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  691.967170][T26753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  692.079779][T26753] team0: Port device team_slave_0 added
[  692.113161][T26753] team0: Port device team_slave_1 added
[  692.219793][ T5827] Bluetooth: hci6: command tx timeout
[  692.237176][T26753] batman_adv: batadv0: Adding interface: batadv_slave_0
[  692.269331][T26753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  692.300677][T26753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  692.343968][T26753] batman_adv: batadv0: Adding interface: batadv_slave_1
[  692.357148][T26753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  692.396814][T26753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  692.416763][T26878] IPv6: sit4: Disabled Multicast RS
[  692.481562][T26888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5674'.
[  692.494287][T26883] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5674'.
[  692.512918][T26883] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5674'.
[  692.557312][T26893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5678'.
[  692.664306][T26753] hsr_slave_0: entered promiscuous mode
[  692.699993][T26753] hsr_slave_1: entered promiscuous mode
[  692.753173][T26753] debugfs: 'hsr0' already exists in 'hsr'
[  692.758964][T26753] Cannot create hsr debugfs directory
[  692.765872][T26886] ip6_vti0 speed is unknown, defaulting to 1000
[  692.767735][T26902] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[  692.792662][T26902] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[  693.058273][T26913] bond12: entered promiscuous mode
[  693.064237][T26913] bond12: entered allmulticast mode
[  693.070570][T26913] 8021q: adding VLAN 0 to HW filter on device bond12
[  693.516201][T26927] only policy match revision 0 supported
[  693.516244][T26927] unable to load match
[  693.894508][T26947] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5691'.
[  693.918848][T26753] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  694.160211][T26753] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  694.299757][ T5827] Bluetooth: hci6: command tx timeout
[  694.332345][T26753] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  694.410849][T26753] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  694.500845][T26972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5697'.
[  694.548970][T26972] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  694.672994][T26753] 8021q: adding VLAN 0 to HW filter on device bond0
[  694.723039][T26753] 8021q: adding VLAN 0 to HW filter on device team0
[  694.757059][T10504] bridge0: port 1(bridge_slave_0) entered blocking state
[  694.764568][T10504] bridge0: port 1(bridge_slave_0) entered forwarding state
[  694.836651][T10498] bridge0: port 2(bridge_slave_1) entered blocking state
[  694.843919][T10498] bridge0: port 2(bridge_slave_1) entered forwarding state
[  694.898951][T26985] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5702'.
[  695.133580][T27000] xt_l2tp: v2 doesn't support IP mode
[  695.155348][T27000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5704'.
[  695.255095][T26988] wireguard0: entered promiscuous mode
[  695.263609][T26988] wireguard0: entered allmulticast mode
[  695.498456][T27014] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  695.522583][T27009] tipc: New replicast peer: 255.255.255.255
[  695.553890][T27009] tipc: Enabled bearer <udp:syz2>, priority 10
[  695.721878][T27034] netlink: 'syz.2.5713': attribute type 27 has an invalid length.
[  695.843742][T26753] 8021q: adding VLAN 0 to HW filter on device batadv0
[  695.905822][T27042] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  695.974858][T27048] bond17 (unregistering): Released all slaves
[  695.981597][T27051] openvswitch: netlink: Flow actions attr not present in new flow.
[  696.233765][T27064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  696.380800][ T5827] Bluetooth: hci6: command tx timeout
[  696.476935][T27072] syzkaller0: entered promiscuous mode
[  696.484869][T27072] syzkaller0: entered allmulticast mode
[  696.517903][T26753] veth0_vlan: entered promiscuous mode
[  696.757113][T26753] veth1_vlan: entered promiscuous mode
[  696.785720][   T24] tipc: Node number set to 1699204659
[  696.888140][T27105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5732'.
[  697.582645][T27119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5735'.
[  697.640559][T27120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5735'.
[  698.461227][ T5827] Bluetooth: hci6: command tx timeout
[  698.864328][T27115] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  699.066538][T26753] veth0_macvtap: entered promiscuous mode
[  699.102690][T26753] veth1_macvtap: entered promiscuous mode
[  699.146433][T26753] batman_adv: batadv0: Interface activated: batadv_slave_0
[  699.149379][T27139] ksmbd: Unknown IPC event: 3, ignore.
[  699.182764][T26753] batman_adv: batadv0: Interface activated: batadv_slave_1
[  699.204707][T27136] syzkaller0: entered promiscuous mode
[  699.222339][T27136] syzkaller0: entered allmulticast mode
[  699.256114][ T1318] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  699.303594][ T1318] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  699.341961][ T1318] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  699.351566][ T1318] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  699.415461][T27150] netlink: 'syz.0.5744': attribute type 1 has an invalid length.
[  699.423779][T27151] netlink: 'syz.0.5744': attribute type 1 has an invalid length.
[  699.543678][T27154] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  699.656221][T10523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  699.687800][T10523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  699.754172][T27161] netlink: 'syz.3.5748': attribute type 3 has an invalid length.
[  699.767708][T10524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  699.781590][T27158] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5745'.
[  699.789981][T10524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  699.795817][T27158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5745'.
[  699.842440][T27158] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5745'.
[  699.857198][T27170] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5749'.
[  699.877303][T27158] netlink: 'syz.0.5745': attribute type 2 has an invalid length.
[  699.886577][T27158] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5745'.
[  699.890737][T27174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5750'.
[  700.349002][T27200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5756'.
[  700.371712][T27199] veth7: entered allmulticast mode
[  700.524350][T27210] syzkaller1: entered promiscuous mode
[  700.531090][T27210] syzkaller1: entered allmulticast mode
[  700.594065][T27215] netlink: 'syz.2.5758': attribute type 21 has an invalid length.
[  701.016013][T27235] ip6gre1: entered promiscuous mode
[  701.022750][T27235] ip6gre1: entered allmulticast mode
[  701.035439][T27233] gre0: entered promiscuous mode
[  701.041569][T27233] gre0: entered allmulticast mode
[  701.268322][T27249] gre0: left promiscuous mode
[  701.287702][T27249] gre0: left allmulticast mode
[  701.321470][T27250] rdma_rxe: rxe_newlink: failed to add ip6_vti0
[  701.396744][T27258] netlink: 'syz.6.5772': attribute type 1 has an invalid length.
[  701.528035][T27267] netlink: 'syz.3.5774': attribute type 13 has an invalid length.
[  701.886204][T27284] netlink: 'syz.6.5780': attribute type 5 has an invalid length.
[  701.915793][T27285] 8021q: VLANs not supported on ip6tnl0
[  701.960818][T10498] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  702.004197][T10498] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  702.032092][T10498] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  702.046656][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  702.058533][ T5842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  702.075730][ T5842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  702.084181][T10498] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  702.096153][ T5842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  702.105189][ T5842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  702.137030][T27291] netlink: 'syz.0.5781': attribute type 1 has an invalid length.
[  702.375267][T27294] syzkaller0: entered promiscuous mode
[  702.382462][T27294] syzkaller0: entered allmulticast mode
[  704.142386][ T5827] Bluetooth: hci7: command tx timeout
[  704.335051][T27304] pimreg3: entered allmulticast mode
[  704.341414][T27303] smc: net device wlan0 applied user defined pnetid SYZ0
[  704.381094][T27288] ip6_vti0 speed is unknown, defaulting to 1000
[  704.562698][T21802] IPVS: starting estimator thread 0...
[  704.576144][T27318] __nla_validate_parse: 9 callbacks suppressed
[  704.576162][T27318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5789'.
[  704.680401][T27319] IPVS: using max 34 ests per chain, 81600 per kthread
[  704.755851][T27318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5789'.
[  704.787711][T27318] bridge_slave_1: entered allmulticast mode
[  704.832924][T27334] syzkaller1: entered allmulticast mode
[  705.091292][   T24] IPVS: starting estimator thread 0...
[  705.100453][T27355] IPVS: lblcr: FWM 3 0x00000003 - no destination available
[  705.188337][T27359] IPVS: using max 31 ests per chain, 74400 per kthread
[  705.221935][T27365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5797'.
[  705.283051][T27368] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  705.374811][T27376] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  705.398186][T27288] chnl_net:caif_netlink_parms(): no params data found
[  705.430866][T27376] delete_channel: no stack
[  705.603767][T27288] bridge0: port 1(bridge_slave_0) entered blocking state
[  705.607558][T27391] x_tables: duplicate underflow at hook 3
[  705.611815][T27288] bridge0: port 1(bridge_slave_0) entered disabled state
[  705.612163][T27288] bridge_slave_0: entered allmulticast mode
[  705.613887][T27288] bridge_slave_0: entered promiscuous mode
[  705.661550][T27288] bridge0: port 2(bridge_slave_1) entered blocking state
[  705.679376][T27288] bridge0: port 2(bridge_slave_1) entered disabled state
[  705.686706][T27288] bridge_slave_1: entered allmulticast mode
[  705.710867][T27288] bridge_slave_1: entered promiscuous mode
[  705.766442][T27288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  705.802148][T27401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5807'.
[  705.803572][T27288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  705.873989][T27288] team0: Port device team_slave_0 added
[  705.905745][T27288] team0: Port device team_slave_1 added
[  706.001333][T27415] netlink: 'syz.0.5810': attribute type 83 has an invalid length.
[  706.047161][T27413] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5809'.
[  706.111878][T27288] batman_adv: batadv0: Adding interface: batadv_slave_0
[  706.118862][T27288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  706.189802][T27421] l2tp_ppp: sess 2/0: no socket in recv
[  706.212902][T27288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  706.221184][ T5827] Bluetooth: hci7: command tx timeout
[  706.233333][T27288] batman_adv: batadv0: Adding interface: batadv_slave_1
[  706.242406][T27288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  706.270900][T27288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  706.345832][T27288] hsr_slave_0: entered promiscuous mode
[  706.355709][T27288] hsr_slave_1: entered promiscuous mode
[  706.367705][T27288] debugfs: 'hsr0' already exists in 'hsr'
[  706.374740][T27288] Cannot create hsr debugfs directory
[  706.410262][T27432] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5817'.
[  706.798025][T27447] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  706.928547][T27288] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  707.027191][T27450] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5824'.
[  707.050906][T27288] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  707.062437][T27452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5825'.
[  707.185709][T27288] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  707.279139][T27288] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  707.653359][T27485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  707.691758][T27288] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  707.756293][T27288] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  707.810336][T27288] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  707.846238][T27288] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  707.856968][T27498] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5840'.
[  708.140761][T27527] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5843'.
[  708.218732][T27288] 8021q: adding VLAN 0 to HW filter on device bond0
[  708.300760][ T5827] Bluetooth: hci7: command tx timeout
[  708.350492][T27288] 8021q: adding VLAN 0 to HW filter on device team0
[  708.498776][T10512] bridge0: port 1(bridge_slave_0) entered blocking state
[  708.505985][T10512] bridge0: port 1(bridge_slave_0) entered forwarding state
[  708.549040][T10523] bridge0: port 2(bridge_slave_1) entered blocking state
[  708.556267][T10523] bridge0: port 2(bridge_slave_1) entered forwarding state
[  709.156015][T27288] 8021q: adding VLAN 0 to HW filter on device batadv0
[  709.350535][T27288] veth0_vlan: entered promiscuous mode
[  709.386671][T27288] veth1_vlan: entered promiscuous mode
[  709.466382][T27288] veth0_macvtap: entered promiscuous mode
[  709.512472][T27288] veth1_macvtap: entered promiscuous mode
[  709.565465][T27288] batman_adv: batadv0: Interface activated: batadv_slave_0
[  709.612241][T27288] batman_adv: batadv0: Interface activated: batadv_slave_1
[  709.644137][T10523] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  709.675879][T10523] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  709.714458][T27613] __nla_validate_parse: 6 callbacks suppressed
[  709.714474][T27613] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5870'.
[  709.738220][T10523] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  709.753725][T10523] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  709.777602][T27614] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.5868'.
[  709.778236][T27619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5870'.
[  709.916553][T10523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.939482][T10523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  710.056748][T10499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  710.083246][T10499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  710.190965][T27636] bridge_slave_0: left allmulticast mode
[  710.202293][T27636] bridge0: port 1(bridge_slave_0) entered disabled state
[  710.237506][T27636] bond0: (slave bridge_slave_1): Releasing backup interface
[  710.263862][T27636] bond0: (slave bond_slave_0): Releasing backup interface
[  710.294629][T27636] bond0: (slave bond_slave_1): Releasing backup interface
[  710.371997][T27636] team0: Port device team_slave_0 removed
[  710.382524][ T5827] Bluetooth: hci7: command tx timeout
[  710.514209][T27636] team0: Port device team_slave_1 removed
[  710.616334][T27636] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  710.866754][T27677] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5880'.
[  710.881660][T27681] netlink: 'syz.0.5882': attribute type 2 has an invalid length.
[  710.895459][T27677] macsec0: entered promiscuous mode
[  710.938849][T27677] netlink: 'syz.2.5880': attribute type 1 has an invalid length.
[  710.970482][T27677] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5880'.
[  711.206496][T27701] gre0: entered promiscuous mode
[  711.230859][T27701] gre0: entered allmulticast mode
[  711.325865][T27707] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5890'.
[  711.542698][T27721] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  711.579645][T27721] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  711.960505][T27736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5899'.
[  711.981887][T27742] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5901'.
[  712.174890][T27740] ip6_vti0 speed is unknown, defaulting to 1000
[  712.240326][T27743] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5901'.
[  712.253525][T27742] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5901'.
[  712.433453][T27749] syzkaller0: entered promiscuous mode
[  712.440654][T27749] syzkaller0: entered allmulticast mode
[  712.653698][T27757] netlink: 'syz.2.5906': attribute type 5 has an invalid length.
[  712.700976][T27757] geneve4: entered promiscuous mode
[  712.708222][T27760] netlink: 'syz.2.5906': attribute type 1 has an invalid length.
[  712.716200][T27757] geneve4: entered allmulticast mode
[  712.745120][T10499] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  712.778296][T10499] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  712.876292][T10512] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  712.894860][T10512] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  713.073765][T27772] syzkaller0: entered promiscuous mode
[  713.079642][T27772] syzkaller0: entered allmulticast mode
[  715.260912][T27794] __nla_validate_parse: 5 callbacks suppressed
[  715.260929][T27794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5919'.
[  715.320511][T27794] netlink: 'syz.0.5919': attribute type 15 has an invalid length.
[  715.516404][T27802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5921'.
[  716.018677][T27840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5929'.
[  716.098728][T27840] bond17: entered promiscuous mode
[  716.112884][T27840] 8021q: adding VLAN 0 to HW filter on device bond17
[  716.144762][T27840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5929'.
[  716.203823][T27840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5929'.
[  716.230272][T27840] bond17: (slave xfrm1): refused to change device type
[  716.260816][T27856] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5933'.
[  716.272072][T27856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5933'.
[  716.283222][T27856] netlink: 31 bytes leftover after parsing attributes in process `syz.5.5933'.
[  716.294490][T27856] netlink: 'syz.5.5933': attribute type 3 has an invalid length.
[  716.304882][T27856] netlink: 'syz.5.5933': attribute type 2 has an invalid length.
[  716.314269][T27856] netlink: 31 bytes leftover after parsing attributes in process `syz.5.5933'.
[  716.442948][ T1318] tipc: Subscription rejected, illegal request
[  716.936452][T27892] xt_ecn: cannot match TCP bits for non-tcp packets
[  717.212023][T27913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5951'.
[  717.321515][T27902] bridge0: port 2(bridge_slave_1) entered disabled state
[  717.329048][T27902] bridge0: port 1(bridge_slave_0) entered disabled state
[  717.626418][T27902] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  717.653898][T27902] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  718.031888][T27898] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  718.099682][T10498] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  718.152475][T10498] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  718.169983][T10498] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  718.242829][T10498] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  718.282344][T27928] macvtap1: entered promiscuous mode
[  718.288305][T27928] macvtap1: entered allmulticast mode
[  718.294409][T27928] veth1_vlan: entered allmulticast mode
[  718.348761][T27933] xt_hashlimit: size too large, truncated to 1048576
[  718.396072][T27932] macvtap2: entered promiscuous mode
[  718.429875][T27932] macvtap2: entered allmulticast mode
[  718.494642][T27936] syzkaller0: entered promiscuous mode
[  718.501955][T27936] syzkaller0: entered allmulticast mode
[  718.771758][T27955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  718.779040][T27955] IPv6: NLM_F_CREATE should be set when creating new route
[  718.786333][T27955] IPv6: NLM_F_CREATE should be set when creating new route
[  719.164438][T27982] bond4: entered promiscuous mode
[  719.169968][T27982] bond4: entered allmulticast mode
[  719.175536][T27982] 8021q: adding VLAN 0 to HW filter on device bond4
[  720.296753][T28022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  720.547878][T28050] __nla_validate_parse: 8 callbacks suppressed
[  720.547898][T28050] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5986'.
[  720.584644][T28042] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5985'.
[  720.617765][T28053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5987'.
[  720.831124][T28062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5990'.
[  721.308891][T28082] veth1: entered promiscuous mode
[  721.336706][T28082] veth1: entered allmulticast mode
[  721.502077][T28092] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6000'.
[  721.602035][T28091] veth1_vlan: left allmulticast mode
[  721.628026][T10512] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  721.637994][T10512] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  721.682400][T10512] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  721.691784][T10512] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  722.165074][T28125] netlink: 'syz.0.6011': attribute type 12 has an invalid length.
[  722.453581][T28145] can: request_module (can-proto-3) failed.
[  722.644942][T28160] syzkaller0: entered promiscuous mode
[  722.664726][T28160] syzkaller0: entered allmulticast mode
[  722.761644][T28171] netlink: 'syz.6.6020': attribute type 1 has an invalid length.
[  722.770590][T28171] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.6020'.
[  723.405873][T28204] netlink: 'syz.3.6031': attribute type 10 has an invalid length.
[  723.420811][T28204] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6031'.
[  723.437318][T28207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6032'.
[  723.451353][T28210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6031'.
[  723.497406][T28214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6034'.
[  723.562169][T28214] only policy match revision 0 supported
[  723.562189][T28214] unable to load match
[  723.623071][T28216] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  723.643457][T28216] bond6 (unregistering): Released all slaves
[  724.456784][T28281] syzkaller0: entered promiscuous mode
[  724.464995][T28281] syzkaller0: entered allmulticast mode
[  724.805649][T28292] netlink: 'syz.5.6058': attribute type 75 has an invalid length.
[  724.840394][T28292] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  724.855841][T28292] bond6 (unregistering): Released all slaves
[  726.853059][T28240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  727.025623][T28323] netlink: 'syz.6.6066': attribute type 10 has an invalid length.
[  727.045811][T28323] bridge0: port 3(team0) entered blocking state
[  727.075581][T28323] bridge0: port 3(team0) entered disabled state
[  727.105316][T28323] team0: entered allmulticast mode
[  727.118605][T28323] team_slave_0: entered allmulticast mode
[  727.135992][T28323] team_slave_1: entered allmulticast mode
[  727.153445][T28323] team0: entered promiscuous mode
[  727.163906][T28323] team_slave_0: entered promiscuous mode
[  727.175373][T28323] team_slave_1: entered promiscuous mode
[  727.215215][T28323] bridge0: port 3(team0) entered blocking state
[  727.221786][T28323] bridge0: port 3(team0) entered forwarding state
[  727.565576][T28357] __nla_validate_parse: 9 callbacks suppressed
[  727.565593][T28357] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6076'.
[  727.584262][T28357] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6076'.
[  728.168081][T28381] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  728.200819][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  728.212596][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  728.224276][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  728.237843][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  728.248580][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  728.258431][T28385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6082'.
[  728.268892][T28385] openvswitch: netlink: Flow key attr not present in new flow.
[  728.412552][T28357] bridge0: port 3(team0) entered disabled state
[  728.419016][T28357] bridge0: port 2(bridge_slave_1) entered disabled state
[  728.426698][T28357] bridge0: port 1(bridge_slave_0) entered disabled state
[  728.974759][T28357] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  729.014172][T28357] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  729.504431][T10512] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  729.525889][T10512] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  729.574904][T10503] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  729.600970][T10503] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  729.620541][T10503] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  729.638268][T10503] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  729.678247][T10503] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  729.699774][T10503] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  729.871792][T28420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6091'.
[  730.109036][T28380] ip6_vti0 speed is unknown, defaulting to 1000
[  730.297476][T28440] Cannot find add_set index 0 as target
[  730.303429][ T5842] Bluetooth: hci5: command tx timeout
[  730.480511][T28448] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6102'.
[  730.506642][T28380] chnl_net:caif_netlink_parms(): no params data found
[  730.629089][T28455] netlink: zone id is out of range
[  730.633769][T28380] bridge0: port 1(bridge_slave_0) entered blocking state
[  730.635573][T28455] netlink: zone id is out of range
[  730.642941][T28380] bridge0: port 1(bridge_slave_0) entered disabled state
[  730.647747][T28455] netlink: zone id is out of range
[  730.660684][T28380] bridge_slave_0: entered allmulticast mode
[  730.667289][T28455] netlink: zone id is out of range
[  730.668972][T28380] bridge_slave_0: entered promiscuous mode
[  730.683563][T28380] bridge0: port 2(bridge_slave_1) entered blocking state
[  730.691351][T28380] bridge0: port 2(bridge_slave_1) entered disabled state
[  730.713880][T28455] netlink: zone id is out of range
[  730.718205][T28380] bridge_slave_1: entered allmulticast mode
[  730.728151][T28455] netlink: zone id is out of range
[  730.735006][T28455] netlink: zone id is out of range
[  730.751593][T28455] netlink: zone id is out of range
[  730.751794][T28380] bridge_slave_1: entered promiscuous mode
[  730.756742][T28455] netlink: zone id is out of range
[  730.818761][T28462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6104'.
[  730.867511][T28380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  730.880705][T28380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  730.975830][T28470] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6106'.
[  731.062075][T28380] team0: Port device team_slave_0 added
[  731.083517][T28380] team0: Port device team_slave_1 added
[  731.252426][T28380] batman_adv: batadv0: Adding interface: batadv_slave_0
[  731.268492][T28380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  731.321692][T28493] netlink: 'syz.3.6114': attribute type 6 has an invalid length.
[  731.326086][T28380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  731.346592][T28380] batman_adv: batadv0: Adding interface: batadv_slave_1
[  731.356470][T28380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  731.383925][T28380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  731.401048][T28499] netlink: 'syz.6.6115': attribute type 2 has an invalid length.
[  731.552124][T28380] hsr_slave_0: entered promiscuous mode
[  731.568221][T28380] hsr_slave_1: entered promiscuous mode
[  731.591176][T28380] debugfs: 'hsr0' already exists in 'hsr'
[  731.597019][T28380] Cannot create hsr debugfs directory
[  731.742320][T28521] netlink: 6 bytes leftover after parsing attributes in process `syz.6.6121'.
[  731.865098][T28525] xt_hashlimit: size too large, truncated to 1048576
[  731.898351][T28523] veth1_vlan: entered allmulticast mode
[  732.140569][T28545] netlink: 'syz.0.6126': attribute type 28 has an invalid length.
[  732.179344][T28545] netlink: 'syz.0.6126': attribute type 3 has an invalid length.
[  732.187114][T28545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6126'.
[  732.323828][T28555] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  732.362734][T28380] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  732.380346][ T5827] Bluetooth: hci5: command tx timeout
[  732.386383][T28380] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.397662][T28380] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  732.543377][T28380] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  732.566366][T28380] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.585800][T28380] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  732.683980][T28380] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  732.710672][T28380] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.735408][T28380] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  732.870864][T28579] bond6: Removing last ns target with arp_interval on
[  732.976313][T28586] block nbd6: not configured, cannot reconfigure
[  733.000249][T28586] netlink: 'syz.6.6138': attribute type 10 has an invalid length.
[  733.052349][T28380] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  733.073083][T28380] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.097233][T28380] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  733.500597][T28380] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  733.528638][T28617] xt_l2tp: missing protocol rule (udp|l2tpip)
[  733.565469][T28380] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  733.626487][T28380] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  733.648953][T28380] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  733.656019][T28621] netlink: 'syz.5.6149': attribute type 33 has an invalid length.
[  733.656042][T28621] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6149'.
[  733.707977][T28624] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6149'.
[  733.787693][T28573] ip6_vti0 speed is unknown, defaulting to 1000
[  733.926747][T28380] 8021q: adding VLAN 0 to HW filter on device bond0
[  733.953860][T28380] 8021q: adding VLAN 0 to HW filter on device team0
[  733.966914][T10504] bridge0: port 1(bridge_slave_0) entered blocking state
[  733.974059][T10504] bridge0: port 1(bridge_slave_0) entered forwarding state
[  734.018762][T10504] bridge0: port 2(bridge_slave_1) entered blocking state
[  734.025905][T10504] bridge0: port 2(bridge_slave_1) entered forwarding state
[  734.357974][T28380] 8021q: adding VLAN 0 to HW filter on device batadv0
[  734.432214][T28380] veth0_vlan: entered promiscuous mode
[  734.443615][T28380] veth1_vlan: entered promiscuous mode
[  734.460314][ T5827] Bluetooth: hci5: command 0x040f tx timeout
[  734.485429][T28380] veth0_macvtap: entered promiscuous mode
[  734.497847][T28380] veth1_macvtap: entered promiscuous mode
[  734.523975][T28380] batman_adv: batadv0: Interface activated: batadv_slave_0
[  734.541447][T28380] batman_adv: batadv0: Interface activated: batadv_slave_1
[  734.560845][T10507] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  734.571563][T10507] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  734.593951][T10507] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  734.628285][T10507] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  734.673940][T28497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  734.688114][T28497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  734.713180][T28497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  734.721612][T28497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  736.540865][ T5827] Bluetooth: hci5: command 0x040f tx timeout
[  738.620695][ T5827] Bluetooth: hci5: command 0x040f tx timeout
[  740.700323][ T5827] Bluetooth: hci5: command 0x040f tx timeout
[  753.264762][ T1301] net_ratelimit: 134 callbacks suppressed
[  753.264783][ T1301] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  759.020073][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  759.351391][T28640] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6155'.
[  759.368450][T28640] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6155'.
[  759.436618][T28649] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  759.686033][T28671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6161'.
[  759.705096][T28671] netlink: 50 bytes leftover after parsing attributes in process `syz.2.6161'.
[  759.721759][T28671] netlink: 50 bytes leftover after parsing attributes in process `syz.2.6161'.
[  759.867643][T28681] netlink: 'syz.2.6165': attribute type 1 has an invalid length.
[  760.051606][T28695] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6167'.
[  760.185017][T28697] syzkaller0: entered promiscuous mode
[  760.193396][T28697] syzkaller0: entered allmulticast mode
[  760.293242][T28711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6174'.
[  760.530359][T28711] netlink: 'syz.2.6174': attribute type 1 has an invalid length.
[  760.538205][T28711] netlink: 'syz.2.6174': attribute type 2 has an invalid length.
[  760.822823][T28736] netlink: 'syz.5.6178': attribute type 1 has an invalid length.
[  761.599671][T28744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6179'.
[  761.652746][T28745] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6179'.
[  762.615340][T28726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  762.639131][T28736] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  762.803712][T28753] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6181'.
[  762.837155][T28753] openvswitch: netlink: Flow key attr not present in new flow.
[  763.237578][T28777] pim6reg: entered allmulticast mode
[  763.295003][T28785] bond1: Unable to set down delay as MII monitoring is disabled
[  763.316153][T28785] bond1 (unregistering): Released all slaves
[  763.525361][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  763.540456][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  763.548741][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  763.562277][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  763.573365][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  764.085724][T28817] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  764.202207][T28794] ip6_vti0 speed is unknown, defaulting to 1000
[  764.203763][T28830] sctp: [Deprecated]: syz.5.6206 (pid 28830) Use of int in max_burst socket option.
[  764.203763][T28830] Use struct sctp_assoc_value instead
[  764.311004][T28832] netlink: 'syz.6.6205': attribute type 1 has an invalid length.
[  764.511979][T28838] bond1: (slave gretap1): making interface the new active one
[  764.550874][T28838] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  764.598757][T28846] __nla_validate_parse: 5 callbacks suppressed
[  764.598774][T28846] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6210'.
[  764.640040][T28846] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  764.763073][T28794] chnl_net:caif_netlink_parms(): no params data found
[  764.798050][T28840] erspan0: entered promiscuous mode
[  764.804296][T28840] erspan0: entered allmulticast mode
[  764.858294][T28854] bridge0: port 1(bridge_slave_0) entered disabled state
[  764.947622][T28794] bridge0: port 1(bridge_slave_0) entered blocking state
[  764.960787][T28794] bridge0: port 1(bridge_slave_0) entered disabled state
[  764.969814][T28794] bridge_slave_0: entered allmulticast mode
[  764.977884][T28794] bridge_slave_0: entered promiscuous mode
[  765.031205][T28862] gtp0: entered promiscuous mode
[  765.036233][T28862] gtp0: entered allmulticast mode
[  765.045328][T28794] bridge0: port 2(bridge_slave_1) entered blocking state
[  765.055630][T28794] bridge0: port 2(bridge_slave_1) entered disabled state
[  765.067659][T28794] bridge_slave_1: entered allmulticast mode
[  765.082243][T28794] bridge_slave_1: entered promiscuous mode
[  765.094557][T28864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  765.111042][T28865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  765.144811][T28870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6215'.
[  765.216648][T28874] netlink: 'syz.2.6216': attribute type 33 has an invalid length.
[  765.258338][T28794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  765.292643][T28794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  765.315546][T28880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6216'.
[  765.387409][T28884] netlink: 'syz.6.6218': attribute type 24 has an invalid length.
[  765.445408][T28886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6219'.
[  765.457874][T28794] team0: Port device team_slave_0 added
[  765.523937][T28794] team0: Port device team_slave_1 added
[  765.604967][T28893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6222'.
[  765.624878][T28895] netlink: 'syz.5.6223': attribute type 1 has an invalid length.
[  765.670257][ T5827] Bluetooth: hci3: command tx timeout
[  765.684158][T28794] batman_adv: batadv0: Adding interface: batadv_slave_0
[  765.703913][T28794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  765.782965][T28794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  765.861459][T28794] batman_adv: batadv0: Adding interface: batadv_slave_1
[  765.870459][T28794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  765.928717][T28794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  765.958421][T28898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6224'.
[  765.975610][T28898] pim6reg: left allmulticast mode
[  766.158495][T28794] hsr_slave_0: entered promiscuous mode
[  766.195159][T28928] netlink: 'syz.2.6231': attribute type 3 has an invalid length.
[  766.204087][T28928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6231'.
[  766.221726][T28794] hsr_slave_1: entered promiscuous mode
[  766.228197][T28794] debugfs: 'hsr0' already exists in 'hsr'
[  766.258382][T28794] Cannot create hsr debugfs directory
[  766.273225][T28933] xt_ecn: cannot match TCP bits for non-tcp packets
[  766.282936][T28934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6234'.
[  766.293662][T28928] syzkaller0: entered promiscuous mode
[  766.299160][T28928] syzkaller0: entered allmulticast mode
[  766.377740][T28939] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.6233'.
[  766.415775][T28943] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6235'.
[  766.688021][T28954] netlink: 'syz.3.6238': attribute type 142 has an invalid length.
[  767.013233][T28977] SET target dimension over the limit!
[  767.122803][T28986] netlink: 'syz.5.6248': attribute type 1 has an invalid length.
[  767.175607][T28986] bond9: entered promiscuous mode
[  767.190509][T28986] bond9: entered allmulticast mode
[  767.197631][T28986] 8021q: adding VLAN 0 to HW filter on device bond9
[  767.311190][T28987] netlink: 'syz.6.6249': attribute type 12 has an invalid length.
[  767.386350][T28987] syzkaller0: entered promiscuous mode
[  767.394306][T28987] syzkaller0: entered allmulticast mode
[  767.749856][ T5827] Bluetooth: hci3: command tx timeout
[  769.535950][T28794] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  769.585884][T28794] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  769.784300][T28794] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  769.810061][T28794] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  769.820124][ T5827] Bluetooth: hci3: command tx timeout
[  769.946651][T29050] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  770.127096][T28794] 8021q: adding VLAN 0 to HW filter on device bond0
[  770.187668][T28794] 8021q: adding VLAN 0 to HW filter on device team0
[  770.215336][T28497] bridge0: port 1(bridge_slave_0) entered blocking state
[  770.222651][T28497] bridge0: port 1(bridge_slave_0) entered forwarding state
[  770.277227][T10507] bridge0: port 2(bridge_slave_1) entered blocking state
[  770.284453][T10507] bridge0: port 2(bridge_slave_1) entered forwarding state
[  770.302583][T29058] __nla_validate_parse: 8 callbacks suppressed
[  770.302606][T29058] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6267'.
[  770.426903][T29036] ip6_vti0 speed is unknown, defaulting to 1000
[  770.702286][T29070] syzkaller0: entered promiscuous mode
[  770.707865][T29070] syzkaller0: entered allmulticast mode
[  770.937765][T28794] 8021q: adding VLAN 0 to HW filter on device batadv0
[  771.066929][T29086] netlink: 'syz.6.6273': attribute type 1 has an invalid length.
[  771.111716][T29090] netlink: 'syz.5.6275': attribute type 83 has an invalid length.
[  771.135341][T29086] gretap2: entered promiscuous mode
[  771.148078][T29086] bond2: (slave gretap2): making interface the new active one
[  771.160647][T29086] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  771.297440][T28794] veth0_vlan: entered promiscuous mode
[  771.313130][T29105] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6279'.
[  771.337238][T28794] veth1_vlan: entered promiscuous mode
[  771.443856][T28794] veth0_macvtap: entered promiscuous mode
[  771.467496][T28794] veth1_macvtap: entered promiscuous mode
[  771.514475][T28794] batman_adv: batadv0: Interface activated: batadv_slave_0
[  771.544460][T28794] batman_adv: batadv0: Interface activated: batadv_slave_1
[  771.605724][T10504] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  771.624313][T10504] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  771.652829][T10504] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  771.684366][T10504] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  771.844003][T29130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6285'.
[  771.901601][ T5827] Bluetooth: hci3: command tx timeout
[  772.074965][T29133] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6286'.
[  772.155030][T29135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6287'.
[  772.164621][T10523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  772.181665][T10523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  772.262081][T10523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  772.280949][T10523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  772.435668][T29149] tipc: Started in network mode
[  772.449729][T29149] tipc: Node identity 428a98c803a3, cluster identity 4711
[  772.457185][T29149] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  772.583314][T29158] netlink: 'syz.3.6294': attribute type 7 has an invalid length.
[  772.624564][T29158] netlink: 'syz.3.6294': attribute type 7 has an invalid length.
[  772.624988][T10507] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  772.644305][T29162] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  772.733746][T29172] netlink: 'syz.0.6297': attribute type 11 has an invalid length.
[  772.743540][T29172] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6297'.
[  772.764726][T29150] syzkaller0: entered promiscuous mode
[  772.770471][T29150] syzkaller0: entered allmulticast mode
[  772.776591][T29150] tipc: Resetting bearer <eth:syzkaller0>
[  772.793279][T10507] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  772.805248][T29165] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  772.848921][T29180] netlink: 440 bytes leftover after parsing attributes in process `syz.0.6298'.
[  772.861761][T29147] tipc: Resetting bearer <eth:syzkaller0>
[  772.882769][T29180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6298'.
[  772.986331][T29190] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6298'.
[  773.021857][T29192] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6301'.
[  774.382140][   T31] INFO: task syz.4.5619:26651 blocked for more than 143 seconds.
[  774.391891][   T31]       Not tainted syzkaller #0
[  774.396835][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  774.407984][   T31] task:syz.4.5619      state:D stack:25688 pid:26651 tgid:26650 ppid:17742  task_flags:0x400140 flags:0x00080002
[  774.420703][   T31] Call Trace:
[  774.424002][   T31]  <TASK>
[  774.426947][   T31]  __schedule+0x14ea/0x5050
[  774.431944][   T31]  ? preempt_schedule_notrace+0x57/0x90
[  774.438056][   T31]  ? __pfx___schedule+0x10/0x10
[  774.443275][   T31]  ? schedule+0x90/0x360
[  774.447531][   T31]  schedule+0x164/0x360
[  774.452034][   T31]  schedule_preempt_disabled+0x13/0x30
[  774.457627][   T31]  __mutex_lock+0x7fe/0x1300
[  774.462333][   T31]  ? __mutex_lock+0x5ac/0x1300
[  774.467117][   T31]  ? nfsd_nl_threads_set_doit+0x2cb/0x960
[  774.472969][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  774.478012][   T31]  ? net_generic+0x1e/0x240
[  774.483025][   T31]  ? net_generic+0x1e/0x240
[  774.487551][   T31]  ? net_generic+0x1e/0x240
[  774.492321][   T31]  ? net_generic+0x1e/0x240
[  774.496871][   T31]  nfsd_nl_threads_set_doit+0x2cb/0x960
[  774.502541][   T31]  genl_family_rcv_msg_doit+0x22a/0x330
[  774.508116][   T31]  ? __asan_memcpy+0x40/0x70
[  774.513056][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  774.519133][   T31]  ? bpf_lsm_capable+0x9/0x20
[  774.523936][   T31]  ? security_capable+0x7e/0x2c0
[  774.528893][   T31]  genl_rcv_msg+0x61c/0x7a0
[  774.533460][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  774.538505][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  774.544993][   T31]  netlink_rcv_skb+0x232/0x4b0
[  774.549879][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  774.554926][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  774.560502][   T31]  ? genl_rcv+0x19/0x40
[  774.564791][   T31]  ? down_read+0x272/0x2e0
[  774.569628][   T31]  ? genl_rcv+0xd/0x40
[  774.573711][   T31]  genl_rcv+0x28/0x40
[  774.577702][   T31]  netlink_unicast+0x80f/0x9b0
[  774.582609][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  774.587917][   T31]  ? __alloc_skb+0x193/0x390
[  774.592599][   T31]  ? netlink_sendmsg+0x650/0xb40
[  774.597546][   T31]  ? skb_put+0x11b/0x210
[  774.602190][   T31]  netlink_sendmsg+0x813/0xb40
[  774.606967][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  774.612336][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  774.617507][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  774.623249][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  774.628547][   T31]  ____sys_sendmsg+0xa68/0xad0
[  774.633668][   T31]  ? __might_fault+0xaf/0x130
[  774.638463][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  774.643952][   T31]  ? import_iovec+0x73/0xa0
[  774.648484][   T31]  ___sys_sendmsg+0x2a5/0x360
[  774.653250][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  774.658212][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  774.663939][   T31]  ? futex_wake+0x4ac/0x580
[  774.668462][   T31]  ? __fget_files+0x2a/0x420
[  774.673217][   T31]  ? __fget_files+0x3a0/0x420
[  774.677918][   T31]  __x64_sys_sendmsg+0x1bd/0x2a0
[  774.682976][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  774.688468][   T31]  ? rcu_is_watching+0x15/0xb0
[  774.693543][   T31]  do_syscall_64+0xe2/0xf80
[  774.698062][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.706908][   T31]  ? trace_irq_disable+0x37/0x100
[  774.712123][   T31]  ? clear_bhb_loop+0x60/0xb0
[  774.716828][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.723039][   T31] RIP: 0033:0x7f4c3519bf79
[  774.727629][   T31] RSP: 002b:00007f4c35fd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  774.736094][   T31] RAX: ffffffffffffffda RBX: 00007f4c35415fa0 RCX: 00007f4c3519bf79
[  774.744130][   T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000009
[  774.752418][   T31] RBP: 00007f4c352327e0 R08: 0000000000000000 R09: 0000000000000000
[  774.760569][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  774.768557][   T31] R13: 00007f4c35416038 R14: 00007f4c35415fa0 R15: 00007ffd4816fb08
[  774.776626][   T31]  </TASK>
[  774.780642][   T31] 
[  774.780642][   T31] Showing all locks held in the system:
[  774.788375][   T31] 1 lock held by khungtaskd/31:
[  774.801912][   T31]  #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  774.812137][   T31] 1 lock held by klogd/5183:
[  774.816736][   T31]  #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  774.826845][   T31] 2 locks held by getty/5585:
[  774.831586][   T31]  #0: ffff88814db560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  774.841648][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  774.851848][   T31] 3 locks held by kworker/u8:33/10507:
[  774.857313][   T31]  #0: ffff88814e95f148 ((wq_completion)udp_tunnel_nic){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  774.870666][   T31]  #1: ffffc9001c4b7bc0 ((work_completion)(&utn->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  774.882387][   T31]  #2: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: udp_tunnel_nic_device_sync_work+0x29/0xa10
[  774.893093][   T31] 3 locks held by kworker/1:11/21808:
[  774.898480][   T31]  #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  774.909849][   T31]  #1: ffffc900030e7bc0 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  774.921664][   T31]  #2: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: bpf_prog_dev_bound_destroy+0x29/0x400
[  774.931951][   T31] 2 locks held by syz.1.4879/23922:
[  774.937165][   T31]  #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  774.945700][   T31]  #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0
[  774.956181][   T31] 2 locks held by syz.4.5619/26651:
[  774.961457][   T31]  #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  774.970010][   T31]  #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960
[  774.980295][   T31] 3 locks held by kworker/1:13/27916:
[  774.985671][   T31]  #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  774.996862][   T31]  #1: ffffc9000b377bc0 ((work_completion)(&tn->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  775.008906][   T31]  #2: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: tipc_net_finalize_work+0x1e/0x90
[  775.018685][   T31] 3 locks held by kworker/u8:7/28497:
[  775.024528][   T31]  #0: ffff88814d266148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  775.036797][   T31]  #1: ffffc9000e8efbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  775.049972][   T31]  #2: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0
[  775.059825][   T31] 2 locks held by syz.5.6291/29147:
[  775.065039][   T31]  #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  775.074319][   T31]  #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  775.085555][   T31] 1 lock held by syz.6.6293/29159:
[  775.091113][   T31]  #0: ffff888092b4b100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_rfkill+0x63/0x280
[  775.103360][   T31] 4 locks held by syz.6.6293/29160:
[  775.108576][   T31]  #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  775.116953][   T31]  #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  775.126220][   T31]  #2: ffff888092b4b100 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3f/0x350
[  775.135078][   T31]  #3: ffff888062780350 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdd0
[  775.144371][   T31] 1 lock held by syz.0.6298/29180:
[  775.149843][   T31]  #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  775.158942][   T31] 1 lock held by syz.2.6299/29182:
[  775.164196][   T31]  #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0
[  775.173768][   T31] 1 lock held by syz.3.6301/29192:
[  775.178869][   T31]  #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  775.188942][   T31] 
[  775.200205][   T31] =============================================
[  775.200205][   T31] 
[  775.208705][   T31] NMI backtrace for cpu 1
[  775.208727][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  775.208746][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  775.208755][   T31] Call Trace:
[  775.208763][   T31]  <TASK>
[  775.208771][   T31]  dump_stack_lvl+0xe8/0x150
[  775.208794][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  775.208818][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  775.208843][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  775.208866][   T31]  sys_info+0x135/0x170
[  775.208882][   T31]  watchdog+0xf90/0xfe0
[  775.208899][   T31]  ? watchdog+0x209/0xfe0
[  775.208918][   T31]  kthread+0x726/0x8b0
[  775.208934][   T31]  ? __pfx_watchdog+0x10/0x10
[  775.208947][   T31]  ? __pfx_kthread+0x10/0x10
[  775.208963][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  775.208975][   T31]  ? __pfx_kthread+0x10/0x10
[  775.208989][   T31]  ret_from_fork+0x51b/0xa40
[  775.209004][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  775.209015][   T31]  ? __switch_to+0xc82/0x1410
[  775.209034][   T31]  ? __pfx_kthread+0x10/0x10
[  775.209049][   T31]  ret_from_fork_asm+0x1a/0x30
[  775.209075][   T31]  </TASK>
[  775.209084][   T31] Sending NMI from CPU 1 to CPUs 0:
[  775.330061][    C0] NMI backtrace for cpu 0
[  775.330079][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  775.330095][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  775.330105][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70
[  775.330126][    C0] Code: 8b 3d c4 3e 33 0c 48 89 de 5b e9 63 c5 5c 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d a8 38 2e 11 65 8b 15 c9 38 2e 11 81 e2 00 01 ff 00 74
[  775.330138][    C0] RSP: 0018:ffffc90000007b80 EFLAGS: 00000202
[  775.330152][    C0] RAX: ffffffff89a1c15c RBX: 0000000000000000 RCX: ffffffff8e2953c0
[  775.330163][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  775.330172][    C0] RBP: ffffc900161a3658 R08: 0000000000000003 R09: 0000000000000004
[  775.330181][    C0] R10: dffffc0000000000 R11: fffff52000000f74 R12: dffffc0000000000
[  775.330191][    C0] R13: 0000000000000001 R14: ffffc900161a3670 R15: 0000000000000000
[  775.330201][    C0] FS:  0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000
[  775.330213][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  775.330223][    C0] CR2: 000000110c2a0660 CR3: 0000000075a88000 CR4: 00000000003526f0
[  775.330236][    C0] Call Trace:
[  775.330243][    C0]  <IRQ>
[  775.330249][    C0]  pie_calculate_probability+0x43c/0x7e0
[  775.330277][    C0]  fq_pie_timer+0x288/0x5b0
[  775.330295][    C0]  ? fq_pie_timer+0x4d/0x5b0
[  775.330315][    C0]  call_timer_fn+0x192/0x5a0
[  775.330334][    C0]  ? __pfx_fq_pie_timer+0x10/0x10
[  775.330351][    C0]  ? call_timer_fn+0xd4/0x5a0
[  775.330369][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  775.330390][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  775.330404][    C0]  ? __pfx_fq_pie_timer+0x10/0x10
[  775.330423][    C0]  __run_timer_base+0x652/0x8b0
[  775.330440][    C0]  ? ktime_get+0x45/0x200
[  775.330460][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  775.330479][    C0]  ? sched_clock_cpu+0x74/0x440
[  775.330501][    C0]  run_timer_softirq+0xb7/0x170
[  775.330518][    C0]  handle_softirqs+0x22a/0x7c0
[  775.330533][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  775.330549][    C0]  __irq_exit_rcu+0x5f/0x150
[  775.330562][    C0]  irq_exit_rcu+0x9/0x30
[  775.330574][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  775.330589][    C0]  </IRQ>
[  775.330593][    C0]  <TASK>
[  775.330599][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  775.330615][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  775.330629][    C0] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 59 12 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  775.330641][    C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000246
[  775.330653][    C0] RAX: 00000000003284c9 RBX: ffffffff8199570d RCX: 0000000080000001
[  775.330663][    C0] RDX: 0000000000000001 RSI: ffffffff8dcc9c4d RDI: ffffffff8c073a00
[  775.330672][    C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db
[  775.330683][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef1d70
[  775.330694][    C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000
[  775.330705][    C0]  ? do_idle+0x1bd/0x500
[  775.330722][    C0]  default_idle+0x9/0x20
[  775.330737][    C0]  default_idle_call+0x72/0xb0
[  775.330752][    C0]  do_idle+0x1bd/0x500
[  775.330764][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  775.330780][    C0]  ? __pfx_do_idle+0x10/0x10
[  775.330803][    C0]  cpu_startup_entry+0x43/0x60
[  775.330816][    C0]  rest_init+0x2de/0x300
[  775.330833][    C0]  start_kernel+0x380/0x3d0
[  775.330853][    C0]  x86_64_start_reservations+0x24/0x30
[  775.330869][    C0]  x86_64_start_kernel+0x143/0x1c0
[  775.330884][    C0]  common_startup_64+0x13e/0x147
[  775.330908][    C0]  </TASK>
[  775.640201][T29160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  775.640726][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  775.640744][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  775.640763][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  775.640774][   T31] Call Trace:
[  775.640782][   T31]  <TASK>
[  775.640791][   T31]  vpanic+0x1e0/0x670
[  775.640819][   T31]  panic+0xc5/0xd0
[  775.640838][   T31]  ? __pfx_panic+0x10/0x10
[  775.640858][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  775.640887][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  775.640913][   T31]  watchdog+0xfda/0xfe0
[  775.640936][   T31]  ? watchdog+0x209/0xfe0
[  775.640960][   T31]  kthread+0x726/0x8b0
[  775.640981][   T31]  ? __pfx_watchdog+0x10/0x10
[  775.640998][   T31]  ? __pfx_kthread+0x10/0x10
[  775.641019][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  775.641035][   T31]  ? __pfx_kthread+0x10/0x10
[  775.641055][   T31]  ret_from_fork+0x51b/0xa40
[  775.641074][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  775.641088][   T31]  ? __switch_to+0xc82/0x1410
[  775.641114][   T31]  ? __pfx_kthread+0x10/0x10
[  775.641133][   T31]  ret_from_fork_asm+0x1a/0x30
[  775.641168][   T31]  </TASK>
[  775.645113][   T31] Kernel Offset: disabled