last executing test programs:

3m53.536380615s ago: executing program 2 (id=848):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x6)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'cpuacct'}, {0x2d, 'cpu'}, {0x2d, 'perf_event'}, {0x2b, 'freezer'}, {0x2d, 'cpuset'}, {0x2b, 'net_cls'}, {0x2d, 'devices'}]}, 0x3d)

3m53.395706154s ago: executing program 2 (id=852):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x701, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond_slave_1\x00', 0x4}, 0x18)
r3 = socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r6, 0x25, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x880)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r8, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x58)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
sendto$isdn(r3, &(0x7f0000000040)={0x400, 0x8, "a1ce8ba2cca03f400f164a062e2db1abd4b826b78dd8885d7c9d5dbdf18da064d2b70eacf1a5204d85696d48bece84e045c109e4"}, 0x3c, 0x880, &(0x7f0000000080)={0x22, 0x2, 0x2, 0x4, 0xd}, 0x6)

3m52.870471047s ago: executing program 2 (id=857):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020000fd", @ANYRES32=r4, @ANYBLOB="080002007f000001"], 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x48006)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8400000000000000}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r6 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

3m52.582958307s ago: executing program 2 (id=863):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000001c75000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a259a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f957400000000000000000000000000000060b5c40f3e37175303b15bbbdf266a5ff38a3a429866f9a323ae42dad9da4a566eaf0b256a3c8760b4a34320369c6a715d35b6847971ee9d6c544c76740a0c7ca83b307b7007"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x6b)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0)

3m52.366336968s ago: executing program 2 (id=867):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x20, 0x0, 0x301, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="610233"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x44, r7, 0x1, 0x0, 0x25cfdc00, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}}, 0x4000000)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f00000004c0)={0x5c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048044}, 0x20004014)
r9 = socket(0x15, 0x5, 0x9)
getsockopt(r9, 0x200000000114, 0x2713, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x142, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r11, @ANYBLOB="050000000000000000", @ANYRES32=r12, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0)
sendmsg$OSF_MSG_ADD(r9, 0x0, 0x4004001)
r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13], 0x24}, 0x1, 0x0, 0x0, 0x10040801}, 0x40000)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r14 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r14, 0x0, 0x0, 0x200408c0)
sendmsg$inet6(r14, &(0x7f0000000f00)={&(0x7f0000000500)={0xa, 0x4e22, 0x6, @remote, 0x6}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000700)="b045a4f11158217fa195fd41c5865f367501ef77266dea2df26b367904568225199620", 0x23}], 0x1}, 0x24040040)
shutdown(0xffffffffffffffff, 0x1)

3m51.313091609s ago: executing program 2 (id=877):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r5 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000080000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d616373656300f6170002800c000400010000010002800008000500feffff7f08000500", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x404c850}, 0x0)

3m36.193685039s ago: executing program 32 (id=877):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r5 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000080000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d616373656300f6170002800c000400010000010002800008000500feffff7f08000500", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x404c850}, 0x0)

2m25.366473035s ago: executing program 5 (id=1815):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x6, 0x6}, 0x50)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) (async)
sendmmsg(r2, &(0x7f000000d500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x20000004)
close(0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r4, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) (async)
sendto$inet6(r4, &(0x7f0000000300)="9552f8964b", 0x5, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) (async)
shutdown(r4, 0x1) (async)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) (async)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r3}, 0xc) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000a, 0x20010, 0xffffffffffffffff, 0x3000)
r6 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r6, &(0x7f0000000000), 0x10) (async)
bind$l2tp(r6, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) (async)
ioctl$FIBMAP(r5, 0x1, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="4600000009000000c20b8341000000e0000d0000b7a566f588a3dd66c313a66931d1ce740aa32f158c", @ANYRES32=r3, @ANYBLOB="a21700"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="01000000010000000100"/28], 0x50) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0xc, &(0x7f0000001a40), 0x4) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r3}, 0x38) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079107b00000000000500000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r8 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'gretap0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r9=>0x0, 0x7800, 0x8000, 0x9, 0x1, {{0x30, 0x4, 0x0, 0x39, 0xc0, 0x64, 0x0, 0x3, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x24}, {[@cipso={0x86, 0xa, 0x1, [{0x6, 0x4, "5488"}]}, @cipso={0x86, 0x14, 0x3, [{0x6, 0x7, "c05b0f68ea"}, {0x1, 0x7, "8ce68bf3f2"}]}, @lsrr={0x83, 0x1f, 0x49, [@loopback, @loopback, @local, @local, @local, @multicast1, @loopback]}, @noop, @cipso={0x86, 0xa, 0x2, [{0x5, 0x4, "811f"}]}, @ssrr={0x89, 0x1b, 0x57, [@loopback, @broadcast, @private=0xa010100, @private=0xa010100, @loopback, @remote]}, @generic={0x88, 0x3, '\x00'}, @ssrr={0x89, 0x23, 0x10, [@private=0xa010102, @private=0xa010102, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @empty]}, @cipso={0x86, 0x21, 0x0, [{0x1, 0x8, "68216df527d8"}, {0x5, 0x7, "8ca35e6e6f"}, {0x2, 0xc, "67d17f455c81a8d7d211"}]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000300)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3c, r9})

2m25.31198239s ago: executing program 5 (id=1818):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) (async)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000001ac0), 0x6)
recvfrom(r0, &(0x7f0000000100), 0x0, 0x40000000, &(0x7f0000000180)=@ax25={{0x3, @null, 0x4}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000100)) (async)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000100))
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5421, &(0x7f00000003c0)=0x3d49)
read$alg(r3, &(0x7f0000000140)=""/116, 0x74)
ioctl$sock_bt_hci(r2, 0x400448dc, 0x0) (async)
ioctl$sock_bt_hci(r2, 0x400448dc, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x4}}]}, 0x38}}, 0x0)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000200)="9057491669f8c9d3b9be5e905103", 0xe}, {&(0x7f0000000280)="a52164c777c8be1e7e72eab3705c8666ddeaa92568a2e6341b52fb6f948ff1c35efcd2307dedaefab5d3398703ce", 0x2e}], 0x2)
ioctl$SIOCRSGCAUSE(r7, 0x8917, 0x0) (async)
ioctl$SIOCRSGCAUSE(r7, 0x8917, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000001940)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) (async)
syz_emit_ethernet(0x2a, &(0x7f0000001940)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0xff, 0x11, 0x0, @empty, @empty}, {0x0, 0x4620, 0x10, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}, "5ca1652c"}}}}}}, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888676e640000000100020000000000000040000065000000000000000000800000"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888676e640000000100020000000000000040000065000000000000000000800000"], 0x3c}}, 0x0)

2m25.055392958s ago: executing program 5 (id=1822):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000000c0)=0xfffffff3, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4804)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x38, r4, 0x1, 0x70bd2d, 0xa2, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nr0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x38}}, 0x8804)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000300))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000130f00000027bd7000000000007f00000004000000"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESDEC, @ANYBLOB="010000000000000004001b0000000c00228059fe0080040000800600210030"], 0x28}}, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0xe, 0x0, &(0x7f0000000040)=0x48)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x8d4c}, 0x8)

2m24.902529488s ago: executing program 5 (id=1826):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
r2 = getpid()
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=<r3=>0x0)
r4 = gettid()
syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/uts\x00')
sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1548, 0x10, 0x20, 0x70bd2c, 0x25dfdbfb, {0x1e}, [@generic="b2f08ff2c4b9cacff451c4a8100451e3caebf3b94a2cd8ff1ca34cb277468d376f4d37d81796482906769b359a082e3889f46922dc70c0afb7dee0135722fdb70801b41837689d5324", @typed={0x8, 0xdd, 0x0, 0x0, @pid=r2}, @generic="0c50dcf02f9709e1fed75f39f99d89d3475eb9cf67195bad411a63fdd57b46f295f4712e6561ae3a8c330c6b047dc48f3be921d8dea0901d5388c2b6a080b24a4e7184eefac9c7396366c0918eeaf03a27fdf4497c966e5dff187cbee0c1f42543c2683087065027e84316fb68858787d39dfd2c6f73528f43613df7fd930b34b4913e23c8b7de4f0985d959efb60f655ac44667f2bc3d05b2b235a4dfdcac355450709d259277396e", @nested={0x28, 0xeb, 0x0, 0x1, [@typed={0x4, 0x125}, @typed={0x8, 0xc2, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x36}, @typed={0x14, 0x2b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @nested={0x172, 0x51, 0x0, 0x1, [@generic="02ddaf1c3a7d887ebaec8c56aa2f32035978a5321bd715f6ba", @generic, @generic="f7dc264dfcf841f85cfe83bc653c122f35f5b2d66286e9e44261529eea32d08022ee064db251af3159c31aea036bef1d0e3c4ba8502cac1d0d30017acf8838d572f198d4a59789160717083ba72de9008d2bfc077b6c29da8b91c4b19bf23b2509e95c2434f740ce9ac50228d48bdca7993a1548e7579d482c6a31cf61de0ff0b3f27858d47a", @generic="2c856c72a15a6015e4485feea67bde85187c8e79056f6aca41c7dca4bdd455eb34cf5d4273cab9b2d72a7950fb3c21b354a197f5ce65683a18bb1d99499894eba565741761c5680cf057cd2d41590c7ab9db1a71d91029787d491ecc144cf74c459046a88f53ee29cb7a233d54aacac056d182d480b0a5ce38f381d46aa4cc7e1896b1c8af00d9660b34494bb30042ac7536eb59b860cbc13d161217d67076c23af7ceb7f8ab9c82516ea1ef16fbbc8136b34a820d4dedf56e754546d9fff37cc7ff69932b367af0d5ee6e4fec891e"]}, @nested={0x128c, 0xcf, 0x0, 0x1, [@nested={0x4, 0xfe}, @generic="9ffca4e6418f401fb3fcf29bc5400d59cba433d891c54621b3ae65d03c0f092fb05819c8a00d7f385d0c73c2c942a32ce0b0e5752e4e7b8244eb02cc95b2cc0738c570aff188e72a58981421c3d33e8b3119305f6097e5f9bb945432d4171a6fbc9af9467eede55b438a078f9a330cb6b056251b84754b846d76175d8c22f896b6b09d606b3c6202d730be0ebfae872a8a9e7d2bdfe541c7e5bf8aeb906fb1b2a3db1e2f0c6b764a5dab92e5986b5257bb2cf0679ec75a0d1d4007326c3505dbb84895232ffcbcdc09870502", @nested={0x4, 0xdc}, @nested={0x4, 0x47}, @generic="ceffb38eb12d561722ea6691e5e61d8e34abaaaf859d6be670f9866e243ec6164a54d622ac327eb419514e54179b525b09b768e1b9d37c59011bd0dff69ff6489b83369ea5ae00a20356f0a2dfa7258874043a5dc3576d9f345b1c0f4fbadf4034dfde3ef29e9b282c6dbdb17d8c4de9532c23f1c95c0e54d41970cda88d0116c81c736323870a92c79115c4034e196ac8b52c61efb01854169efda1f9098dc813e67c87c85663c0735a6d72b5577132601aa488c87185b1a4db99ba4c", @generic="5fdb8eef54cb876cd03d25b7c4f811dcbf740d584da55baa25e86e4974188135278f1a175ce4b24ef9845de11b7b424d23b21658f1ff9019823ee0873760d048f0968aa5580e893befe81304e96e0e456f97afb46818388b606e9e66d3915b547a8e640b7b46db82f988cff7e4e678bee5024c81be2e83ed550868491099d106a58cc4b5cfae42f29e47f5d0d37266f6b12fae6c189684ef10534379c1ea206bf6115aa2d2f7f104a0b99a1874146649e4850bedcea06b3b25d054ff40beab00e645c8e832d7b5d9f907f10292eeaeb5c52eecaf722db7bbebe15ab6d1828777773c78", @nested={0x4, 0x133}, @nested={0x4, 0x21}, @typed={0x8, 0x21, 0x0, 0x0, @fd}, @generic="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"]}, @typed={0x6, 0x12c, 0x0, 0x0, @str='&\x00'}, @typed={0x8, 0x139, 0x0, 0x0, @pid=r4}]}, 0x1548}, 0x1, 0x0, 0x0, 0x4048010}, 0x4004081)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0)

2m24.489024444s ago: executing program 5 (id=1833):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

2m24.384681628s ago: executing program 5 (id=1837):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x78}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000040000701feffffff801400018006000600800a000008001400"/40, @ANYRESOCT=r4, @ANYRESOCT=r4], 0x30}}, 0xc000)

2m9.330739214s ago: executing program 33 (id=1837):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x78}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000040000701feffffff801400018006000600800a000008001400"/40, @ANYRESOCT=r4, @ANYRESOCT=r4], 0x30}}, 0xc000)

2m0.779281741s ago: executing program 3 (id=2176):
r0 = socket$alg(0x26, 0x5, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f0000000100))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}], 0x1, 0x44854)
recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/88, 0x58}], 0x1}, 0x0) (async)
recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/88, 0x58}], 0x1}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)

1m59.869429829s ago: executing program 3 (id=2193):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x0, 0x401, 0xffffffff, 0x2, 0x5]}, &(0x7f00000001c0)=0x54)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4040800)

1m59.584915675s ago: executing program 3 (id=2199):
read(0xffffffffffffffff, &(0x7f0000000000)=""/5, 0x5)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x1d, 0xd, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x8, 0x6, [0x7]}}, @jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x10001}, @calipso={0x7, 0x38, {0x1, 0xc, 0x4, 0x0, [0x2, 0x2, 0x1, 0xfffffffffffffffb, 0x5, 0x6]}}]}, 0x78)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000100)={0x10000, 0x10, [0x2, 0x5, 0x1, 0x6], &(0x7f00000000c0)=[0x0, 0x0]})
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140)=0x3, 0x4)
vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)="3c86fa76a0e3b8048f3433283345e6d2a66dd799cd8176e7f2717f36f5d49ca3f7c39a4390ebb7da5a422d655439c1f71d95ba", 0x33}], 0x1, 0x4)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xf7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8002}, 0x20008000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='pim6reg\x00', 0x10)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000380)={@any, 0xa4})
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000003c0)={0x40, 0x8000, 0x6, 0x5, 0x4, 0x0, [{0xff, 0x3, 0x5000000000, '\x00', 0x504}, {0x5, 0x3, 0x0, '\x00', 0x8}, {0x0, 0x3, 0xd, '\x00', 0x1000}, {0x9, 0x125cdc7b, 0x8, '\x00', 0x1402}]})
getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000004c0), &(0x7f0000000500)=0x8)
r3 = socket$inet6(0xa, 0x4, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@ipv6_getanyicast={0x14, 0x3e, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000011}, 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000680)={@private2, <r6=>0x0}, &(0x7f00000006c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)=@mpls_getroute={0xa8, 0x1a, 0x20, 0x70bd2b, 0x25dfdbfd, {0x1c, 0x14, 0x14, 0x4, 0xfd, 0x3, 0xff, 0xb, 0x1200}, [@RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x2, "3997761ddc2d77cca377cfa6700b"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}, @RTA_VIA={0x14, 0x12, {0x1f, "2f1f1e7caa3165b32bc111dc199b"}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_DST={0x8, 0x1, {0x2}}, @RTA_VIA={0x14, 0x12, {0x2a, "f5395d5bda7e5b3a142ac8f56e39"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x5}, @RTA_VIA={0x14, 0x12, {0x28, "c22c1a24998d0285d51b7668343f"}}, @RTA_VIA={0x14, 0x12, {0xa, "b5e8d5a6438464a0109ee50f7636"}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x2000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl2\x00', <r7=>r6, 0x8010, 0x80, 0x6, 0xc2, {{0x16, 0x4, 0x0, 0x3d, 0x58, 0x68, 0x0, 0x5, 0x2f, 0x0, @broadcast, @private=0xa010102, {[@rr={0x7, 0x13, 0x77, [@rand_addr=0x64010102, @remote, @broadcast, @broadcast]}, @noop, @end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0xbf, [@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0x4a, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1, 0x3}, {@empty, 0xffffb618}]}]}}}}})
sendmmsg$inet(r5, &(0x7f0000001280)=[{{&(0x7f0000000840)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000880), 0x0, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000009c0)="a5464edad1762c9e15780ca300d2d77051cfc1f642d5ba8dfd4478f80ce7ba884b3be8ada46da5048778d7dc81e5e99647400c24a9564c137498505eda486833fb92f502f5e7e2d7a60427aec83c84bcd573e61dfaef099b5fc376c4570e3d99910ae819f161b1bc02fc0b5ebb814eec93493928908a03e91b2f58636daf21a8fbe5", 0x82}, {&(0x7f0000000a80)="b8e7aa56e74d7bcaebb02b7829c71a5fbf33c6da3ecdcde8c65026463a16a570c39ba321eab6c049e4f68d4199d72d8d3ca224506b652aacfbd30b255943749a422cebba5834360b22dad4b9bade4a9b0c697ef2bf9aac1ba70abaaa0977c3ec", 0x60}, {&(0x7f0000000b00)="d45267757be8cd5b9d057912d0da800d6eb4b8e92d5d2466add66b0c35066fd146e43f8001782216b8e3db43142fd2061d71b221cec9c746aa4ce127c5976b09b6beb5bd1aeb853ea9c0e8c12d1e2fd11eac1265df06ba050daf754c5f053b00b1a125a71b09681d1bd13939865a87f3758c149ee5810a2a0a6ee15e7e33c881c6fa8c048ca99ba5040361f9e71485872371b3c962342aff0b50eb612b0f9e52359e9365e00f93d4170f0c00c4644419b219d0deda2aba333420d8fd9db6aac1790824facfff393d395830572ede7baf01982dc8450fc03dd7b3d40f09d4f4d7aeca3130787e05f5ec0642b70975c7b325542e5e525e", 0xf6}], 0x3}}, {{&(0x7f0000000c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000c80)="2eab7b1b45225dedf0cfbcadb7883d298774a3f2f1a86a0412ad558a3df7a3e7d0fe09566eae34bc", 0x28}, {&(0x7f0000000cc0)="e4033d7b2d6e65dfb8af41907c40e12679afefedec43f3aff3a094cafa4f92a3227b72d27e0fbc73d1d9274c11a5c83cdfe3bccb425dbb60a2f5aaa9b48c0e6369ac0ab0b3f89d6b82301470bcf25cf9cc64243439c1c5c63ef399ec4631e7e0edb105668d180d00fb4e35ae4bcb7140187594b8772312eb85fc6ead48428e660c1101e8a73beb1ddac7991b5ee78fa71b3dd2eda7520a85efcc7b090c99cb47227222b8df9a7dac0cf7e94994fb538610dc659a0dbd1007062e9ee09a2701db156ca36ff11f1e9b72cff94a028a3cebfdd1aef029", 0xd5}, {&(0x7f0000000dc0)="10a95925f35c1a98ac434c1c98cc509531dc8f06547b326893da45c4e04ed7df081d9da43d0f380699fed83ad0d38b573e8d7ad00f907668b32f9e4ae5ab60247964cbe89b37ebeb9e3d9b5a66e3174517681b7c9756ec981d354c4d538c7d702bbb07847177529ea8eb19c23b13a39fa023f622cbcb45f23fadc03982b9160e1ea4fede37039ca8dbf429bb9f4277837bfb0d857284dba8c9aede24965e37b912612d3b6951d821b565d499f378d4b3102c177815655e5fa046985c6f9ab1783278ac1b2688f2fd8879bb05b528180412f45824a5b29ecea91b59363d67beef5fd6591d", 0xe4}, {&(0x7f0000000ec0)="a3717207743860", 0x7}], 0x4, &(0x7f0000000f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x64, 0x0, 0x7, {[@cipso={0x86, 0x29, 0x3, [{0x1, 0x4, "c803"}, {0x6, 0x10, "f9229ec69252e63da3e419b9b7fc"}, {0x5, 0x7, "fc3e495008"}, {0x0, 0x8, "dfd895d2c62e"}]}, @timestamp_prespec={0x44, 0x14, 0xd8, 0x3, 0x4, [{@empty, 0x86f0}, {@broadcast, 0x80}]}, @timestamp={0x44, 0x14, 0x1d, 0x0, 0x0, [0x6, 0xc5d, 0x5600, 0xffffffff]}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xa0, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x1}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4536}}, @ip_retopts={{0x100, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0xbd, [@dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @multicast1, @private=0xa010101]}, @cipso={0x86, 0x1b, 0x2, [{0x1, 0x11, "e8e5d41f18062b7f984a4b78ab0919"}, {0x5, 0x4, "fed9"}]}, @timestamp_addr={0x44, 0x1c, 0x4d, 0x1, 0xe, [{@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x1000}, {@remote, 0xffffffff}]}, @cipso={0x86, 0x9, 0x3, [{0x5, 0x3, "19"}]}, @noop, @timestamp_addr={0x44, 0x44, 0x24, 0x1, 0x8, [{@private=0xa010102, 0x100}, {@multicast2, 0x62e1}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x6}, {@multicast1, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe3a}, {@remote, 0xffffff01}, {@private=0xa010100, 0x4}, {@multicast1, 0x100}]}, @timestamp={0x44, 0x1c, 0xc3, 0x0, 0x4, [0x80000001, 0x5, 0x1, 0xf, 0x1, 0x47e]}, @cipso={0x86, 0xe, 0x2, [{0x7, 0x2}, {0x7, 0x6, "6a520530"}]}, @rr={0x7, 0x1f, 0x59, [@loopback, @remote, @local, @remote, @multicast1, @loopback, @local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @rand_addr=0x64010102}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@cipso={0x86, 0x43, 0x3, [{0x6, 0x11, "fe916652569c9d3ecfa9828fe5a9bb"}, {0x5, 0xe, "f9b8840654b039c9b74aa1bd"}, {0x5, 0xd, "588cbb59a4eb18202f82bf"}, {0x6, 0x2}, {0x7, 0x5, "b806ac"}, {0x5, 0xa, "0abf4eb871231b22"}]}, @noop, @timestamp={0x44, 0x10, 0xef, 0x0, 0x8, [0x2, 0x9, 0x5]}, @lsrr={0x83, 0x1b, 0xea, [@private=0xa010100, @remote, @rand_addr=0x64010102, @remote, @local, @private=0xa010100]}]}}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@rr={0x7, 0x13, 0xff, [@multicast2, @multicast1, @broadcast, @multicast1]}, @timestamp_prespec={0x44, 0x24, 0xf3, 0x3, 0x6, [{@rand_addr=0x64010101, 0x3}, {@remote, 0x7}, {@multicast2, 0xffffc446}, {@local, 0x80000000}]}, @generic={0x86, 0xb, "1f84770afcb60496cd"}, @timestamp={0x44, 0x10, 0x50, 0x0, 0x4, [0x6, 0x1, 0x1]}, @cipso={0x86, 0x38, 0x1, [{0x1, 0x3, "cb"}, {0x7, 0x7, "1f3f44e935"}, {0x1, 0xc, "0149afc19d4123648837"}, {0x7, 0x10, "b637132fed58932862b080f5faca"}, {0x1, 0xc, "29fe20e53d8aa2ac3145"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}], 0x338}}], 0x3, 0x5)
socketpair(0x9, 0x6, 0x7fff, &(0x7f0000001340)={<r8=>0xffffffffffffffff})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0x88, r9, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x35}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x38, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff0000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x40d0}, 0x40080)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001640)={'veth1_to_team\x00', &(0x7f0000001540)=@ethtool_gstrings={0x1b, 0x4, 0xdb, "e08533f4dd501014c7fd9b4f672531ffc618f3e1899e519750e9e3b05790f2073bcb60e3b77a8df4c77d08c26983928cde4a5edd29b5789e20817ca64b6c738a348860a322a36029307a026859fdc1d23f6be6d835d29fce648f76bfe44e9a81449a93a09a92c64a3c3a46dbdb119ea4efd2a556e10d20a32ffd36f5c51b7515a9013bde22e17d07ae812dbdda51e53fd6c927e5f49c914d47f9c876c5780f6e97b235624375142bf49361ab3f70230e8b0b6c1b99c49a0522e12dab4b371192b5641cf561d6c11393a9d88189e14e255a6b4358e9aea6fcc7c7ee"}})
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7ff, '\x00', r7, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001800)={r10, &(0x7f0000001700)="82b3721cd400895bfbb12d26448bdfee83407287a825de6c53e773b668cd2b79654c269e398d01ef2e14acd48e7af692e579c906228b6f2090d3181706506307a589d8d8b1005140eef405788637de1e97f7c8769cd0f5f263d200578c710e89752f8d97f08bcedefe42df3adfff18e05cf4c82dc830ef0f1560d74829ce5daad4f0eb6159ac7cae3ce8e1bf5ee5dec8981708", &(0x7f00000017c0)=@udp6=r8, 0x6}, 0x20)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001840)={'batadv_slave_1\x00'})
socket$rds(0x15, 0x5, 0x0)

1m59.253629505s ago: executing program 3 (id=2205):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4)
r2 = getpid()
sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='CJ]', 0x3}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee01}}}], 0x20, 0x10}, 0x80)
write$cgroup_pid(r0, &(0x7f0000000400), 0x12)
recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x1f3, &(0x7f0000000240)={@broadcast, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x2}}, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "8c8d03", 0x1b9, 0x21, 0x1fe, @mcast1, @mcast1, {[@hopopts={0x6c, 0x7, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x8001}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0xd9d}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x73, 0x2, 0x4, 0x1, 0xb3, 0x8, 0x73, [@mcast2]}, @srh={0x89, 0xe, 0x4, 0x7, 0x2, 0x30, 0xfff9, [@rand_addr=' \x01\x00', @mcast1, @empty, @rand_addr=' \x01\x00', @empty, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @hopopts={0x1d, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @pad1]}, @srh={0x32, 0xa, 0x4, 0x5, 0x0, 0x60, 0x3, [@local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2]}], {{0x4e23, 0x4e23, 0x4, 0x1, 0xe, 0x0, 0x0, 0x2, 0x1, "6f99a6", 0x6, "6d6b8f"}, "d2aea9681a3bd14681c576dbf8b3aa904457b3a46831d6ba3ba875f09dd5514368dab422fd69edc4f642e319e4032ddf7b2282464f1f7e28bd5761662be476e8402df8d37959056fd57a919df0f47f85d2c8de8615e6db6a61b694b91019e3556b"}}}}}}, &(0x7f00000001c0)={0x1, 0x2, [0x2ae, 0x827, 0x349, 0xf4d]})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)=ANY=[], 0x12f4}}, 0x0)
read$alg(r5, &(0x7f0000000a00)=""/4096, 0x1000)
read$alg(r5, &(0x7f00000004c0)=""/40, 0x28)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r7, 0xf13}, 0x14}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'ip6erspan0\x00', 0x1}, 0x18)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r9)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8800)

1m58.84662146s ago: executing program 3 (id=2212):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(xcbc(camellia-generic))\x00'}, 0x58)
close(0x4)
pwrite64(r0, &(0x7f0000000000)="cb4a4b6e44b907c1354d0a7dd1373e3dd19c0a5d0d69fd8ad391cbe842adf9125ade1ad80026ce709109363d789db7c0ee1b0252626646ba08f261a42e334b529f4e05be0529f3cf18dbd21131473a637a8d2bcdde47a0d5a465f8c38e3e793acd1d6a00e6f04cc7b39a4858499392a71002cf40f0bfbdca782b754f21c1bb71c33c6f616d7bcf2861b886517c6b7ed481312680ca20527c090ec7d50376ba5bf9abded52d15ec92550a12d0bb7e8d0a066377c53d4febff70334686ffeeceeceaafb6fd562479ebb5ffcfb01a5519032f6c560c8ec87edefec04ae975c833e4246f97854d14", 0xe6, 0xa4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x845)
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0)
close(r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x13, 0x2, {{0x3, 0x3, 0x6361, 0x10e, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
r12 = socket$packet(0x11, 0x3, 0x300)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r14, {0x0, 0xd}, {0x6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2001c060}, 0x4008000)
sendto$packet(r12, &(0x7f0000000240)="800000", 0x3, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0xd8, 0x6, @broadcast}, 0x14)
r15 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
r16 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r16, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13100000000000200012800b00010062726964676500f00f00026d0c00200000000000000000002255d9be277166034cd6ab8354a649d8089c6357edc46661ab69927909374e016e0c76d7"], 0x40}}, 0x0)

1m58.154402845s ago: executing program 3 (id=2224):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @restrict]}}, 0x0, 0x32}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @restrict]}}, 0x0, 0x32}, 0x20) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) (async)

1m43.113808526s ago: executing program 34 (id=2224):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @restrict]}}, 0x0, 0x32}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @restrict]}}, 0x0, 0x32}, 0x20) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) (async)

2.631266307s ago: executing program 4 (id=3857):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x9c41, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r2, 0x3d, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0, 0xa5, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x1a, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x12, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x6, 0x0, 0x7, 0x2, 0x10}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, @fallback=0x28, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x1, 0x5, 0x3ff, 0x8000000}, 0x10, r3, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000740)=[{0x0, 0x5, 0x1, 0x1}, {0x5, 0x4, 0xa, 0x2}, {0x5, 0x5, 0x4, 0x9}, {0x0, 0x4, 0x1, 0x9}, {0x3, 0x2, 0x0, 0x5}, {0x2, 0x1, 0x9, 0x1}, {0x1, 0x4, 0x1, 0xa}], 0x10, 0x1}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x49, &(0x7f00000015c0), 0x4)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r5 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r5)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5)
sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r6, 0x26, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x50}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20000090)

2.066782337s ago: executing program 7 (id=3871):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async)
sendmmsg$sock(r1, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x81, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[@timestamping={{0x14, 0x1, 0x25, 0x80000000}}], 0x18}}], 0x1, 0x20004801) (async)
r2 = socket(0xa, 0x3, 0x8000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x30, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0x0) (async, rerun: 64)
socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x18) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x98, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x40}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x42}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x25}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1000}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x40004084}, 0x800) (async, rerun: 32)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x50, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x2, 0x10, 0x3, 0x3, 0x16}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xf}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x200, 0x0, 0x6, 0x15, 0x16, 0x1, 0x8}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x6b6, 0x5, 0x13, 0x4, 0xa, 0x4}}]}}]}, 0x80}}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x38, 0x1e, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vlan0\x00'}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x42812}, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (rerun: 32)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.time\x00', 0x0, 0x0) (async, rerun: 64)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) (async, rerun: 64)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r9=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0)

2.009126657s ago: executing program 7 (id=3873):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000420040008002900787d040008001b00"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @mcast2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="92", 0x1}], 0x1}}], 0x2, 0x4008090)
getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000300)={@multicast1, @rand_addr, @remote}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffff94}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001e00010000000000000000000600000001000007000000000800010000000000080004000500000014393ac537b4af08d8cfe21d86baa620dc1ab02bac4e2e2852af0a587a022b8ef97532c103af241a0dbb239ce47ac3b2f346d630385a730ed568749dae42b903d8b9bfe2bcadd9a5beb3450d644e9dcf82cb4b8aa7888bfecc2bac05"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e80), r3)
sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8e054)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {}, {0x7, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7f}}, @filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)
recvmsg$can_j1939(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2040)
shutdown(r1, 0x1)

1.793372005s ago: executing program 4 (id=3876):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000032c0), 0x40, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000003300)={'veth1_virt_wifi\x00', 0x2000})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000240)='GPL\x00'}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000440)=@ethtool_eeprom={0xb, 0xff, 0xaa2}})
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1, 0x81, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8011}, 0x0)

1.703153042s ago: executing program 7 (id=3877):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002d40)=@security={'security\x00', 0xe, 0x4, 0x13d8, 0xffffffff, 0x0, 0x1d8, 0xe8, 0xffffffff, 0xffffffff, 0x1308, 0x1308, 0x1308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0x1100, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0xe2, {0x8}}}, @common=@hl={{0x28}, {0x1, 0x8}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1438)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_BURST={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300010062726f6164636173fd6def9e6e6b"], 0x1ac}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000002aec000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r4)
sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x27}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r10)
r11 = socket$unix(0x1, 0x1, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8699, 0x2, 0xfffffff8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000)
ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYRES16=r4], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x10}, 0x94)
socket$l2tp6(0xa, 0x2, 0x73)

1.487154823s ago: executing program 4 (id=3880):
r0 = socket(0x10, 0x8000e, 0x2)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x202, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8002)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x11)
sendmmsg(r4, &(0x7f0000000000), 0x0, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket(0x10, 0x8000e, 0x2) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x202, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8002) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x11) (async)
sendmmsg(r4, &(0x7f0000000000), 0x0, 0x8000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)

1.369326069s ago: executing program 4 (id=3883):
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000100)=0x2be628de19587dbc)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219, 0x20b44}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x3c}}, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000000))
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000840)='hsr0\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000400"})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x274, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x5c}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x1c8, 0x84, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xfffffffe}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xffffffff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x22, 0x1, @random="0e05bcaa8081fbdf1425a7af6ed5cb0e279366c7bb0ab6228496cc7f5552"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xfffffff5}, @NL80211_BAND_LC={0x8, 0x5, 0x7fffffff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xc, 0x1, @random="eda11d04726d0e80"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x3866}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x387}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xca8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x30000000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x30a}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x400000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfc7c}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0xc}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7fff}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x7ff}, @NL80211_BAND_LC={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="38e3b7e770152719ef3fd2d51d7c115f5888261f8cac3f297aee"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="bdf3f742d2ab"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x800}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xc}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3b}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x52}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x58}]}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x74, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6f, 0x0, "62df56e74bda3633e370e8db06d2486fe8d53b5e99d360fe9612c34ec0d7ad88262371fe0ad85b1e3fcb71bd3dd8d2ddd2bf78bc6545226f8c079fe1331640db842ba0ab8894efa068252d129824f166f46bcae0bf9d6ca4b0956d387dfa01362c5fc6c635fd04637a08c2"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}]}, 0x274}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r7, 0x5452, &(0x7f0000000180)=0x401)
listen(r7, 0x0)
ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000000)=0xffffffffffffffff)
shutdown(r7, 0x0)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @mcast2, 0x3}, 0x1c)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600}, 0x21)
pread64(r10, &(0x7f0000000480)=""/27, 0x1b, 0x7)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r10, &(0x7f0000000980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000500)=ANY=[@ANYBLOB="fcdbdf25080001000200000008000100014000000800010000040900080005b6e8c644ebb1b6f25a00000000006200"/56], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x41)
r11 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmsg$alg(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="972ff7e2c6d061958a9470c123be0cf76352b6bd925feca184f483dbfa27798a79fc556538a4d8b80daec3f3b95bf7e2b0dad94b3b314eb53fce8b666635089411f55b01ad87cd608e9d9be958434480229f28b2bf573ba6ef29a5a5265b0b458bdc54e9127a580c2b6554b4e8b78d2d17288e5f497301188f815a5e6ebdc3425425cc42d22258f800620b8003d8c08b6acb7744e2f7648a7d499be4", 0x9c}, {&(0x7f00000000c0)="09aab589", 0x4}, {&(0x7f0000000240)="6b09f9f3b0e4349baf28fccebe2bad0afc306b546f7e57b4d34f2a249f28bc48d6100e80f8a6a2ebf1b7c6a8fd6af7f08a683cd1b02a976c9f691477fec59fe3f5", 0x41}, {&(0x7f00000002c0)="6c2dd8315b0fbbbe75a926a00b1f6d7bd68da67614d4afb02fb83a6bc420df5505cd89c3ff8d3f1b21f529da23b34f6c3ffa432c33e56a66235c3756ddc0aefbea10a5af93d9a8050f0514bfd595c813db914aa9f2acfb9e531a3ac6eb012e0cd2cced2be4b5d21bbb0c3d7f6251", 0x6e}, {&(0x7f0000000340)="713bd6314b4d2e04c22193912091e2b2edaf72693d0219ccb604a87832b544b304b1304e5a72dd1c18f87c4265ded319c0bcb2174afaeb0e2b8544c025cf08", 0x3f}, {&(0x7f0000000880)="84f42cac2cea331b39c6b7caee98d6f81b72192533c18d9487cd246417b65a97106778202519c314c6c03c8445c394c1561271c349847ff8e239f8cb5f5312eff3bf0ef590c6621b83fb29b94524903253c5285a0083758647dce48aad8b8b405800e24ff21483c84392ba8c2b2617fd134d178d8974697aff11a224a326a5760974be06137a9667d3ced6a7b08a5ad024ff46847e8c8697b9f578896d29f8f59f2390c3f68d64a0", 0xa8}, {&(0x7f0000000440)="2e3c33ee266461df030958f280b187ebdc0541a8bf45c87ce5c9fe82dd9f14ece6e21c622f", 0x25}, {&(0x7f0000000380)="9d04eb96220e35151514beac1428fce23a587f055add6185e179386c60a913ff344b295749473282336a3980f6c446293f55ecbbb253a44ec26bf25936ed0417ccd4dfa98a57e0b6e06f93be310360fdf67a1dd408ec93f889b9cb9f12253e7fa0af84623615de4fbedfa33152859867968f8b56a250db395ad7df57ebb07e2ad96dd4a959800d7872552aa87d375d70dee44c67", 0x94}, {&(0x7f0000000540)="d5d83b92bf26f081fcb00e1ec18ec574fd0efcaa7ecbd162783b2db130b2501020231d49c89168c13b66047e7187f13b0aa758db22c66f8e14be82432c698cee2de6f59b012950aede4f399fb304abca", 0x50}], 0x9, &(0x7f0000000680)=[@op={0x18}, @iv={0x48, 0x117, 0x2, 0x32, "c1935d44d16741e2d3ca6bbed2089707bf275c0053645925dc5f8f632d37fbc16123ecffcee311ff24645ba802a5e74a5d93"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xb8, 0x117, 0x2, 0x9d, "8765631e3448608f063627abda7a1844fb622a3a15a517a901dd2d2f67395245d097003d1c777199925d43309b416317c331217d801f493c3dbd7dcf617fb05dbcc77cde797abd23d7a060e36acf9252a5bb119b6275ab425bca88dbe0dd2a56c3a0f0e32037d8670b2c22c4f05083a3a072e0ee8516b4ec8e962ad08e68a221cad132874f02f842d1916cd4de4226c1bfadaa13eb49dc7f763039bb50"}], 0x148, 0x14}, 0x8000000)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))

1.31984001s ago: executing program 1 (id=3884):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000340)={0x10003, {{0x2, 0x800, @multicast2}}, {{0x2, 0x4e23, @loopback}}}, 0xa9) (async)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000340)={0x10003, {{0x2, 0x800, @multicast2}}, {{0x2, 0x4e23, @loopback}}}, 0xa9)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
r1 = socket$netlink(0x10, 0x3, 0x5)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x206c}, 0x1, 0x0, 0x0, 0x4800}, 0x80)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) (async)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200b5f383ca00ea6356b5000000000004"], 0x1c}], 0x1}, 0x0)

1.223660633s ago: executing program 0 (id=3887):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', <r1=>0x0, 0x10, 0x1, 0x5, 0x4, {{0x19, 0x4, 0x2, 0x3, 0x64, 0x67, 0x0, 0x7, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@end, @ssrr={0x89, 0x2b, 0x5, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @broadcast, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @empty]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xa, 0x3, 0x5, [{@loopback, 0xffffffc0}]}, @ssrr={0x89, 0x13, 0x74, [@local, @remote, @rand_addr=0x64010101, @loopback]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', r1, 0x20, 0x40, 0x8, 0x1, {{0x11, 0x4, 0x2, 0x4, 0x44, 0x68, 0x0, 0x24, 0x29, 0x0, @broadcast, @broadcast, {[@generic={0x7, 0xf, "0d4862ff2219336f21e139a3f1"}, @rr={0x7, 0xb, 0x85, [@empty, @empty]}, @lsrr={0x83, 0x13, 0x73, [@dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x31}, @broadcast, @broadcast]}]}}}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={<r3=>r0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2e}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xc5}, @NL80211_ATTR_PMK={0x14, 0xfe, "6f5ba9def31bc3156c4112061f59ee30"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000814)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'pim6reg1\x00'})
ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0)
r5 = accept4$phonet_pipe(r3, &(0x7f0000000380), &(0x7f00000003c0)=0x10, 0x80000)
getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000400), &(0x7f0000000440)=0x4)
r6 = socket$netlink(0x10, 0x3, 0x5)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/167, 0xa7, 0x0, &(0x7f0000000540)=""/17, 0x11}, &(0x7f00000005c0)=0x40)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, r4, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6c8, 0x2}}}}, [@NL80211_ATTR_OPER_CLASS={0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffc66}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29b}]]}, 0x70}, 0x1, 0x0, 0x0, 0x20000005}, 0x804)
sendmsg$kcm(r3, &(0x7f0000000c00)={&(0x7f0000000780)=@generic={0x21, "6fa1957656c16acabb9509bf5dc4ccb58c3012db1416cffea7c09c6c26da44e076798d553ebe59f489d70387303cee3e20e5b9e695fcebf9441f8171bbf312aed7c49c96d0f226cff3e4d50479d3ae91e161a4289593c4e7c52d7663bfa8e446e696203b9a95259922608190234f470015845d6a0c1faad13fcca97e2534"}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000800)="e4ad9aede3b0365429a2c007c977e6955dc9c5ff8f46fa4deae6cb24007f561d4b7dbfea162d94e3c0bc2250b886af0686a02d6f2ebb94b9d14b749acbd028125bcff8c64627d3c045e64b88ff745b81b795ee5e7bbde5df46cb03d77bdbfad71adb9d7d91474a77e25d34a981b218b5f30fc864d4dcab191dbf47f5600db6ab2e6cf3933d0711ba0159d64cbeb2f58c93", 0x91}, {&(0x7f00000008c0)="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", 0xfe}, {&(0x7f00000009c0)="28bae63f4388b442824d6b13cacfcfee6e6f87919cbae43d210e63dc6e583f499e216b2988368e454c28c985ac81b3ac307a418dca118e151409bc1341de97bfb00fd22c7b9048f07e6aed707497b790c33b7d3b3ef5", 0x56}, {&(0x7f0000000a40)="2a62054a4063ec9dbd9578f969efd047732b7c2482f95c8bae31d18e2e829205ae9ee7b0e02b68cc14b120e0483c5dbbdff8699a19ddf65b9c507e53d5db6fd9a3a67ba4f1c05e4b34ab797b9840283060bbe7", 0x53}], 0x4, &(0x7f0000000b00)=[{0xa8, 0x3a, 0x1, "eca06832fae5920bc73bd1b9abc5fb6b4a884af48743b8d27d85a181837700c993d491b7b0598ce4685633304caf1403a8843d0105719bd424d538484b4e6558e872663d1a5caf9019db997ec7a816fa444d476ef22ae900cd8acb88299d04050002294a8dd34db552957335bf38f8283e7aebea87941603c95e31b8415e011bd94e11558f584a9700d5bf719bccbf382806d51b9fd06b11"}, {0x58, 0x110, 0x2, "7302e187ac6d4895af440e6a67d641fb4f263b37651b427ddf6f7f34e2aff4163b0698f1d7a33c411d63041e3f49182392429e3b753c7a4b612512d5d59224566f480f"}], 0x100}, 0x20004911)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000c40)={{{@in=@multicast1, @in6=@private1}}, {{@in6=@private1}, 0x0, @in=@broadcast}}, &(0x7f0000000d40)=0xe8)
r9 = socket(0x25, 0x4, 0x8)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000e00)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r10, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, r11, 0x617, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40094}, 0x20008851)
ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000f00)={'veth1_to_batadv\x00', {0x2, 0x0, @dev}})
ioctl$SIOCPNENABLEPIPE(r9, 0x89ed, 0x0)
select(0x40, &(0x7f0000000f40)={0x5, 0x3, 0x7ff, 0x8, 0x3, 0x9, 0x10000, 0x3}, &(0x7f0000000f80)={0x3, 0x10000, 0x0, 0x5b1, 0x6, 0x6, 0x3, 0x6}, &(0x7f0000000fc0)={0x2, 0x5, 0x4, 0x5, 0x9, 0x7, 0xffffffffffffff81, 0x46a}, &(0x7f0000001000))
getuid()
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000001040)={r8})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000001080))
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000010c0)={0x1, 0x7}, 0x4)

1.155364537s ago: executing program 1 (id=3888):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0xa2ec8b013dc0bd73, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x5}]}, 0x14}], 0x1}, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8)
close(r1)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf7b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

1.15456065s ago: executing program 7 (id=3889):
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r1, @ANYBLOB="996e06004d4c0700540012800a000100687372004800028005000d0008000008050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRESOCT=r4], 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r1, @ANYBLOB="996e06004d4c0700540012800a000100687372004800028005000d0008000008050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRESOCT=r4], 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)

1.110722188s ago: executing program 4 (id=3890):
socket$kcm(0x2, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}]}}}]}, 0x3c}}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r4 = accept(r1, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x50)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="6ed0c83f", 0x4}], 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x38, 0x1e, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vlan0\x00'}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x42812}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f00000001c0), &(0x7f00000002c0)=@udp=r4}, 0x20)
recvmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xe, &(0x7f00000000c0), &(0x7f0000000100)=0x8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r4, 0xfffffffffffffffe, 0x2004c014)

1.076455542s ago: executing program 7 (id=3892):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x18)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @any, 0x4}, 0xa)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
shutdown(r2, 0x1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r4)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000840)
getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x21, 0x800000}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
socket(0x2b, 0x1, 0x6)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c450)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900000000040002800900010073797a31000000001400000011"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
socket$kcm(0xa, 0x3, 0x3a)
close(r5)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f00000000c0)={'wlan1\x00', @random="3aea6d189684"})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="02", 0x1}], 0x1}}], 0x1, 0x20048041)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xee)

937.734855ms ago: executing program 1 (id=3894):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f00000000c0))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000002900030400"/20, @ANYRES32=0x0, @ANYBLOB="f7e8010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=0x0, @ANYBLOB="7e0cc32e3758850de9b510165e1322e3f42a17c23d0d6f54bd645a08b0c8f16b2769b93bba4d400bb0f9eb1476aaea00191f6970408455863d07983ad4ebec232c3cf5bdc178b11bfd5aa3165169aeaa17176a8c195cfa076a75db37d5e7deadc1bc02fdfed217d79ed7a84f1fd5dd00"], 0x3c}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)={0x74, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x5c, 0x1, 0x0, 0x1, [@nested={0x58, 0x5c, 0x0, 0x1, [@generic="2dde06dd2d6fb527ff41e9716a45cce84f369c2a36346365fd7f05704d7102cd0898a0a0a91a923e7e7a7afe1ceb1d3ce47c0e7b6a133a34ed1ecb8f348616e8abb9ea", @generic="9c733c3c70c7af1225882ffac8", @nested={0x4, 0x12b}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x18)
close(r6)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r3)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000022}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r9, 0x400, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}}, 0x20000002)

868.108731ms ago: executing program 0 (id=3895):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="f7ffffff", 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff02c}, {0x80000006, 0xfc, 0x0, 0xfffffffd}]}, 0x10)

786.688153ms ago: executing program 6 (id=3896):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket(0x2, 0x6, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}}}}, &(0x7f0000000040)=0x84) (async)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async)
close(0x3) (async)
setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x1, "b567d2"}, 0x6)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) (async)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48)
r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x1, 0x0, 0x0, "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", 0x1, "2353a2ad8f792337b3610a014feea22617c1ecea"}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "e292ac39b9d3382f"}, 0xb}}]}, 0x154}}, 0x50)
getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async)
listen(0xffffffffffffffff, 0x80)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841)
recvmsg(r7, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)="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", 0x125}], 0x1}, 0x20008885) (async)
recvmsg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x1) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42c14, 0x8980}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x40000) (async)
accept$netrom(r4, 0x0, 0x0)
connect$qrtr(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

610.723933ms ago: executing program 6 (id=3897):
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f00000012c0)=r0, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x44, r4, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000ac0)={0x288, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x40}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x80}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x10c}, {0x8, 0x15, 0xec}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfbff}, {0x8, 0x15, 0xfffffffd}}, {{@pci={{0x8}, {0x8}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0xfb}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0xffff9c81}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xa}, {0x8, 0x15, 0x100}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2}}]}, 0x288}, 0x1, 0x0, 0x0, 0x8000}, 0x4000011) (async)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000ac0)={0x288, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x40}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x80}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x10c}, {0x8, 0x15, 0xec}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfbff}, {0x8, 0x15, 0xfffffffd}}, {{@pci={{0x8}, {0x8}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0xfb}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0xffff9c81}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xa}, {0x8, 0x15, 0x100}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2}}]}, 0x288}, 0x1, 0x0, 0x0, 0x8000}, 0x4000011)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf252700000008000300", @ANYRES32=r5, @ANYBLOB="04002a0006003600060000000a0006"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x84)
socket(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
sendto$inet6(r6, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160005000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)

609.664607ms ago: executing program 0 (id=3898):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c)
sendto$inet6(r0, &(0x7f0000000140)="9f", 0x1, 0x4040000, 0x0, 0x0)
recvfrom(r0, &(0x7f0000000200)=""/62, 0x3e, 0x99bcb88de02507d2, 0x0, 0x0)
gettid()
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f00000001c0)={@loopback, @dev, <r6=>0x0}, &(0x7f0000000200)=0xc)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x118, 0x12, 0x800, 0x70bd2a, 0x25dfdbfd, {0x21, 0xf3, 0xd, 0x5, {0x4e24, 0x4e20, [0xf9, 0x9a, 0x7fff, 0x3], [0x1, 0x3, 0xfffffffd, 0x7ff], r6, [0xff, 0x1]}, 0xc, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x68, 0x1, "e237a8101fec132cbf07974440ffbdd69a048241e8e4b13779eee1bc5c6e9b831e706e805ffd016a50a736978ad9e235cda4904becc6b8c4acbc89e6f579147fa68a09c30996a42a3dad28269f5ef804ad92b58193b7eec7755052c763032366e5a13e81"}, @INET_DIAG_REQ_BYTECODE={0x64, 0x1, "75f098db182fed7e005698194dcd14b8ac51c3b1108d699cd1c8f14c0309b90335c90b6e4961fadf594f7afe001b7925b0238b996c22cda6dd68689fb95b5befababbee800fe3cac7dd60bc3603acdd49269009c0f5d5c20dc8031712cde2622"}]}, 0x118}}, 0x8084)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', <r7=>0x0, 0x2f, 0x6, 0x1, 0x9, 0x22, @empty, @private2, 0x40, 0x1, 0x9ae, 0x7}})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@bridge_getlink={0x20, 0x12, 0x100, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, r7, 0x2200, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0xc40}, 0x0)

598.492211ms ago: executing program 6 (id=3899):
syz_emit_ethernet(0x23a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x204, 0x6, 0x0, @private0, @mcast2, {[@dstopts={0x81, 0xd, '\x00', [@generic={0xd3, 0x5a, "fea8cbba67df4252120184852dea175f21e8b3cc16538d059a93ee9642148a06791498df8d3bc13e0e2fbc6cb9529d747b50aaf9d579ef72432119d427555cfcb72af02414121ed9cfc6d0ebbe070ec84658a8c694918030d446"}, @generic={0x6, 0x6, "b0c50b5b1c8b"}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x1b}]}, @dstopts={0x0, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x81}]}, @routing={0x32, 0x2, 0x0, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x18}]}, @hopopts={0x49, 0x16, '\x00', [@generic={0x5, 0x21, "7386ff51899a494823d9cee16632c5ad99461dc33296bd8602867b3f2cf14349fe"}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x800}, @generic={0x8, 0x6a, "133347688ae4f0057dba42f77c01d2eeae5387d99d7724669cb82218e9a9baa06e418df3f1eee458c316ee5a48016778160b43337675276a174a791337d86bfdb3bef1feacb7595b9b8099f6a150a84d38ab8537b82e0f79ee9d2eff4fd4ec9aa06b1106c38ef87eefaf"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @srh={0x3c, 0x2, 0x4, 0x1, 0x3, 0x10, 0x9, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x32, 0xa, 0x4, 0x5, 0x24, 0x18, 0x400, [@loopback, @mcast2, @loopback, @mcast1, @dev={0xfe, 0x80, '\x00', 0x32}]}, @fragment={0x88, 0x0, 0x0, 0x1, 0x0, 0x3, 0x67}], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

542.984587ms ago: executing program 1 (id=3900):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x1e8, 0x118, 0x1e8, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x6, 0x5, 0x0, 0x9, 0x1], 0x4, 0x4}}}, @common=@set={{0x40}, {{0x1, [0x0, 0x3, 0x4], 0x4, 0x1}}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x1, 0x5}, {0x2, 0x0, 0x4}}}}, {{@ip={@local, @multicast2, 0xffffffff, 0xffffffff, 'pimreg0\x00', 'veth1\x00', {0xff}, {0xff}, 0x88, 0x0, 0x14}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x1, 0x6, 0x1, 0x1, 0x3], 0x1, 0x7}, {0x1, [0x1, 0x4, 0x1, 0x0, 0x4, 0x1], 0x6, 0x2}}}}, {{@uncond, 0x0, 0x168, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xe, 0x0, 0x0, 0x0, 'syz1\x00', 0x81}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0xce, 0x2, [0x3a, 0x2a, 0x2a, 0x3e, 0x28, 0x21, 0x23, 0x19, 0x39, 0x2d, 0x15, 0x18, 0x17, 0x4, 0x24, 0x37], 0x1, 0x1, 0x1f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, <r3=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="0700000000000000000000dd0000000000000000", @ANYRES32=r3, @ANYBLOB="0b000080976b64087c603000"], 0x24}], 0x1}, 0x84)
ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f00000003c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000500)={'team0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xac}}, 0x48004)
sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv6_getnetconf={0x44, 0x52, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x64e8678}, @NETCONFA_FORWARDING={0x8, 0x2, 0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x6}, @NETCONFA_IFINDEX={0x8, 0x1, r6}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xffffff98}]}, 0x44}, 0x1, 0x0, 0x0, 0x44080}, 0x80)
r8 = socket$key(0xf, 0x3, 0x2)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x42, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0000060000ff86dd60010100000c1100fe80000000000000000000000000000000aa4e214e21000c907801000000"], 0x0)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000002540)={0x2, 0x2}, 0x4)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}}, 0x20}, 0x1, 0x0, 0x0, 0x20044810}, 0x4040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8f7ffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x94)
sendmsg$NFNL_MSG_ACCT_NEW(r9, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006480)={0x40, 0x0, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_FILTER={0x4}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24040004)
sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xee}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8f}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x4c}}, 0x0)
listen(r0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x9)
accept$ax25(r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x30, 0x2e, 0x61]}}, 0x0, 0x29, 0x0, 0x1, 0x43}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)

542.451918ms ago: executing program 6 (id=3901):
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4044800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a3c000000120a01010000000000000000020000000900020073797a31000000000800044000000000090001"], 0x64}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4010000100001000000000000000000fc000000000000000000000000000000200100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff6fa420497d5c3a00000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c0014"], 0x1a4}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4)
close(r2)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x255fdbfd, 0x8000}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team0\x00', <r4=>0x0})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000110001"], 0xd8}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x48}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x9}}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0xb, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x4a}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x6}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x40}]}}}]}, 0x3c}}, 0x0)

382.925577ms ago: executing program 0 (id=3902):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
sendmsg(r2, &(0x7f0000000300)={&(0x7f00000003c0)=@l2={0x1f, 0xd835, @any, 0x3}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000440)="d4508e4219c03cacf8530e78395b3a2207404d98e82d8627db5cbcc8b879a45583aa52a7c5c859906d2e329399ee6dcd307b2a33ec719a4bb3ef6332f5db40989e2b995288e97bc91bae2720079b1e14c052394b6cd369b5eff568505467bcf4e5976ebf6b149ad936259b0d8adb2738c6da5af651e4e2ab51f380e7fc0196aa9116e78a19b920624a5ba9612369cb74c97ca4ca3fb4feaea00bef8073f637d86959f2250eae13f685d7066c75a70652fc34d13732bcd5ca5304d62866581eaa5004", 0xc2}, {&(0x7f0000000540)="5a66919c9f06c150c3162f0308f02e296ad2b010e884a5683e409de4c9555d1f55832d6cccf70443ca748dd8f86a754edd9f1bbfe494c35ef73463e40f141af5cbd2baabd2def800916b6733ca5ee4f7a3f1", 0x52}, {&(0x7f00000005c0)="6819eab2d027ef9a1059d051fa7f1e23d8561ffdd60a59eaf1c44225da06b7d46a19e10f0fbde142cd5ea9283075b56152dfe17cf8ef90eea6e494dff003cd716c0aba080d9ea41471283f7b2ee69acc8e9d2269ba377f58c013916a634fcfd1f67577a67d21236f78ddbda9c820220675cd71a4ac1de060dbd6da860b2561c5876361bc5e71ac46f83e8444ac5f8e2a", 0x90}, {&(0x7f0000000680)="6a733780f3f6898b5dfc9af2be360e90f51e58b3fcc1f4e2d79a54d6c2ef220e4174157226a62e0e7e68ba6827cc17e78e12d663ef6469d578f4d492fb0ded075349832ca628d1b4edeaf80068a067723d34d5017440050f379fa1725a42a5f5", 0x60}, {&(0x7f00000007c0)="e5802a5debfeb09e43d80fb039045edc3d40829b5d67f82a7cdfe4ee89b0355253a20129a1404d72b7005b34bc16d9f3a341b0d857a6927915b53412303268888543cc3f6cddb8252ee4fc525c9f3ecc3f1f31c0a5d18ce957dce9a665f42b15dff1ad5a55c5a3094257944617c6be3de1d20086dbebfad17d01648f64e574ae9c4d", 0x82}, {&(0x7f0000000700)="57f47b1086396ba9b13c4b487ab364c0564f27d388e58eff7fd11ec3e6916412edfa9c55f77bafc51d5e59cfeeb2629e253633bf8eccc0eab72ee4320ef213d8c582eb4756aaeb23a4ec052b59b0c0", 0x4f}, {&(0x7f0000000900)="b2161289f080b303db5207baa41dd32795e0827c81e43f2cb3dd1ecb377fc7e46fcf06d4150e7990310ad3ac72c1e401f3a54983a9fd14f13b86ff427cb852904c3d499a5f74503362e52e6eab053018091200854c2dca4d191ca800207f246eb93fae049fff30a4b1eb0db7ffb6f6c1515daa79920a64954c98995ec10a3f9863f70ddcfde4c80772969e032864973cf179c0f6d458351c1ab0ef4b7dab5044c12c1baeb344edd11827d39743acb6f2b2a5e81a459f73a356f06aab4d8d7fcdaadd62661ae7a1a0cd3aef5f4744b15a1d9840939f970d1e7533350ed1e040d494", 0xe1}, {&(0x7f0000000a00)="9d197f54deb1900144cc01750604b504446768d85154abebafbca0e6a5f2bd231b8fd0c2cd6507308b46f35442789d75eaadde25af224a463ee9c933b6bf3ce0ddeb5777aca6d3a856947c62d72e0515640b2dd2442dcbc78f4a5b39d7b5946b91eb712964612d2d50fb210cf9740a6082ee862696514a974424f905ab0520ee8da0764d79bf4579b40e691c6e22df1577dd3306a5", 0x95}], 0x8}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000340)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff85000000a700000095"], &(0x7f00000008c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000001c0)={0x0, 'macsec0\x00', {0x3}, 0x81})

365.170367ms ago: executing program 0 (id=3903):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x3)
r1 = socket(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x89e1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
sendmsg$can_j1939(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2, 0x2, {0x0, 0xff, 0x5}, 0xfd}, 0x18, &(0x7f00000000c0)={&(0x7f0000000400)="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", 0x110}}, 0x8000)
read(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0xb8825000)
syz_emit_ethernet(0x129, &(0x7f0000000000)=ANY=[], 0x0)

206.547563ms ago: executing program 1 (id=3904):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={<r1=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000001b40)={0x968, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xaf, 0xb}}}}, [@NL80211_ATTR_TX_RATES={0x384, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xcdf4, 0x7, 0x92, 0x8, 0x1d6, 0x5, 0xc, 0x17]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x3, 0x36, 0x48, 0x6c, 0x1b, 0x0, 0x2b, 0x0, 0x30, 0x2, 0x12, 0x9, 0x30, 0x9, 0x60, 0x60, 0x0, 0x1b, 0x24]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x1}, {0x6, 0x3}, {0x1}, {0x4, 0x5}, {0x1, 0xa}, {0x1}, {0x1, 0x3}, {0x1, 0x9}, {0x7, 0xa}, {0x3, 0x3}, {0x2, 0x8}, {0x6, 0x4}, {0x7, 0x5}, {0x2, 0x9}, {0x5, 0x7}, {0x3, 0x7}, {0x4, 0x6}, {0x0, 0x3}, {0x1, 0x2}, {0x3, 0x3}, {0x6, 0x3}, {0x2, 0x2}, {0x7, 0x4}, {0x3, 0x5}, {0x4, 0x7}, {0x5, 0x6}, {0x1}, {0x4, 0x9}, {0x5, 0xa}, {0x4, 0x6}, {0x3, 0x2}, {0x5, 0x3}, {0x7, 0x3}, {0x0, 0x3}, {0x6, 0x1}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x9}, {0x1, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x60, 0x24, 0x24, 0x4, 0xc, 0x1b, 0x48, 0x5, 0x6c, 0x48, 0x6]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x9, 0x3, 0x9, 0xc, 0x16, 0x6c, 0xd, 0x9, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x4}, {0x3}, {0x7, 0x4}, {0x2}, {0x0, 0x1}, {0x6, 0x2}, {0x7, 0x4}, {0x6, 0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x0, 0x5}, {0x6, 0x6}, {0x3, 0x5}, {0x7, 0x5}, {0x7, 0x3}, {0x6, 0x2}, {0x1, 0x6}, {0x4}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x3}, {0x0, 0x4}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xc, 0xbe, 0x2, 0x3, 0x5, 0x9]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x7}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x8}, {0x0, 0x4}, {0x4}, {0x6, 0x3}, {0x1, 0x2}, {0x7, 0x4}, {0x0, 0xa}, {0x3, 0xa}, {0x3, 0x5}, {0x6, 0x5}, {0x5, 0x8}, {0x4, 0x7}, {0x2, 0x5}, {0x2, 0x9}, {0x7}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0x4}, {0x4, 0x5}, {0x0, 0x7}, {0x2, 0x4}, {0x4, 0x1}, {0x1, 0x9}]}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x0, 0xf, 0xc, 0xff81, 0x4, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x361, 0x5, 0x1, 0x3, 0xfff, 0x5, 0x2, 0x403c]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x2, 0x101, 0xdc9b, 0x5, 0x9, 0x0, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0xbf1, 0xfc01, 0x4, 0xb6, 0x2, 0x161, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x7, 0x0, 0x80, 0xffff, 0xff, 0x9332, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xdc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x6}, {0x7, 0x6}, {0x0, 0x5}, {0x4, 0x3}, {0x6, 0x1}, {0x3, 0x6}, {0x7, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x1}, {0x5, 0x5}, {0x3, 0x2}, {0x4, 0x6}, {0x6, 0x7}, {0x5, 0x4}, {0x7, 0x2}, {0x4, 0x8}, {0x1, 0xa}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x8}, {0x3}, {0x6, 0x7}, {0x1, 0xa}, {0x5, 0x6}, {0x6, 0x8}, {0x4}, {0x1, 0xa}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0x4}, {0x7, 0x5}, {0x3, 0x1}, {0x6, 0x8}, {}, {0x2, 0x2}, {0x0, 0xa}, {0x3, 0x7}, {0x3, 0x3}, {0x0, 0x3}, {0x3, 0x2}, {0x1, 0x2}, {0x0, 0x8}, {0x2, 0x1}, {0x2, 0x8}, {0x3, 0x7}, {0x1, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x1, 0x9}, {0x0, 0x6}, {0x4, 0x8}, {0x7, 0x7}, {0x2}, {0x0, 0x8}, {0x7, 0x7}, {0x6}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfff0, 0x6, 0x1000, 0x1, 0x21a, 0x0, 0x3]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x30, 0x9, 0x6c, 0x24, 0x5, 0x1b, 0x30, 0x60, 0x48, 0x36, 0x9, 0x12, 0x12, 0x16, 0x6c, 0xb, 0x24, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xdeef, 0x4, 0x81, 0xb4, 0xfff, 0x7, 0x3, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x5, 0x80, 0x6, 0x7, 0x1, 0xf8]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x2, 0x6c, 0x5, 0x7d, 0x6a, 0xb, 0xc, 0x48, 0x16, 0x5, 0x6c, 0x1, 0x6c, 0x16, 0x1b, 0x6, 0x6c, 0xc, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x9, 0x8, 0x8, 0x6, 0x1ff, 0x7]}}]}, @NL80211_BAND_2GHZ={0x100, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x0, 0x2}, {0x1, 0x9}, {0x2, 0xa}, {0x6}, {0x4, 0x7}, {0x6, 0xa}, {0x5, 0x6}, {0x2, 0x1}, {0x1, 0x3}, {0x4, 0x2}, {0x1, 0xa}, {0x0, 0x7}, {0x6, 0x5}, {0x4}, {0x1, 0x8}, {0x5, 0x7}, {0x6, 0x4}, {0x2, 0x1}, {0x2}, {0x2, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x6, 0x1, 0x57, 0x1, 0x8, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x2, 0x8, 0x5, 0x1, 0x38d, 0x6]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x9, 0x60, 0x24, 0x18, 0xc, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x7, 0x3}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x3}, {0x6, 0x4}, {0x3, 0x8}, {0x7, 0x1}, {0x1, 0x1}, {0x7, 0x9}, {0x1, 0xa}, {0x0, 0x2}, {0x4, 0x8}, {0x1, 0x2}, {0x6, 0x9}, {0x1, 0x7}, {0x5, 0x5}, {0x4, 0xa}, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x8}, {0x5, 0x4}, {0x2, 0x8}, {0x1, 0x7}, {0x4, 0x1}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x8}, {0x0, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x7}, {0x2, 0xa}, {0x3, 0x6}, {0x4, 0x5}, {}, {0x1, 0x8}, {0x7, 0x3}, {0x3, 0x5}, {0x2, 0x3}, {0x4, 0x9}, {0x6, 0x3}, {0x3, 0x3}, {0x3, 0x5}, {0x4, 0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x1}, {0x1, 0x7}, {0x7, 0x8}, {0x2, 0x9}, {0x5, 0x1}, {0x3, 0x3}, {0x5, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x6}, {0x6, 0x9}, {0x5, 0x1}, {0x0, 0x6}, {0x6, 0x7}, {0x4, 0x5}, {0x6}, {0x0, 0xa}, {0x3, 0x7}, {0x1, 0x4}, {0x0, 0x2}, {0x7, 0xa}, {0x7, 0x2}, {0x2, 0x6}, {0x4, 0x6}, {0x1, 0x9}, {0x2, 0x2}, {0x0, 0x9}, {0x6, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x9}, {0x0, 0x2}, {0x4, 0x9}, {0x3, 0x8}, {0x3, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x3, 0x4}, {0x7, 0x4}, {0x4, 0x1}, {0x3}, {0x6, 0x6}, {0x1, 0x7}, {0x1}, {0x6, 0x5}, {0x3, 0x7}, {0x7, 0x2}, {0x4, 0x9}, {0x6, 0x1}, {0x0, 0xa}, {0x7}, {0x6, 0x8}, {0x1, 0x7}, {0x7, 0x8}, {0x3, 0x9}, {0x6, 0x1}, {0x4, 0x9}, {0x4, 0xa}, {0x6, 0x4}, {0x7, 0x7}, {0x6, 0x2}, {0x1, 0x1}, {0x5, 0xa}, {0x6, 0x2}, {0x0, 0x2}, {0x4, 0x8}, {0x3, 0x7}, {0x1, 0xa}, {0x4, 0x8}, {0x6, 0x4}, {0x2, 0x4}, {0x1, 0x5}, {0x1, 0x9}, {0x0, 0x5}, {0x6, 0x3}, {}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x7}, {0x7, 0xa}, {0x1, 0x1b}, {0x7, 0x4}, {0x4, 0x3}, {0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x3, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x2c0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe31, 0x2, 0x9000, 0x1ff, 0x4, 0x1ff, 0x7, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xe, 0x9, 0x1, 0xbbc9, 0x6, 0x14dc, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x4, 0x2, 0x2, 0x3, 0x5, 0x8]}}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0x5}, {0x5, 0x1}, {0x0, 0x4}, {0x3, 0xa}, {0x0, 0x9}, {0x2, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x2}, {0x7, 0x5}, {0x2, 0xa}, {0x0, 0x2}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x5}, {0x2, 0x2}, {0x3, 0x5}, {0x6, 0x8}, {0x1, 0x5}, {0x2}, {}, {0x6}, {0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0x19}, {0x1}, {0x7, 0x2}, {0x2, 0x5}, {0x1, 0x5}, {0x7, 0xa}, {0x4, 0x7}, {0x4}, {0x6, 0x5}, {0x7, 0x4}, {0x3, 0x9}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfbff, 0x800, 0x80, 0x8000, 0x8, 0x6, 0xca2, 0x400]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x7}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x6, 0x1}, {0x3, 0x3}, {0x1, 0x1}, {0x0, 0x9}, {0x0, 0xa}, {0x3, 0x8}, {0x7, 0x6}, {0x5, 0x4}, {0x4, 0x7}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x7}, {0x3, 0x2}, {0x0, 0xa}, {0x0, 0x3}, {0x5, 0x6}, {0x6, 0x4}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x5}, {0x1, 0x9}, {0x6, 0x3}, {0x2, 0x4}, {0x5, 0x2}, {0x7}, {0x7, 0x4}, {0x6, 0xa}, {0x1, 0x7}, {0x6, 0x8}, {0x3, 0x7}, {0x3}, {0x3, 0x6}, {0x0, 0x7}, {0x4}, {0x6, 0x1}, {0x5, 0x6}, {0x2, 0x6}, {0x1, 0x1}, {0x7, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x2}, {0x0, 0x1}, {0x7, 0x1}, {0x4, 0x6}, {0x7, 0x2}, {0x2, 0xa}, {0x4, 0x3}, {0x6, 0x3}, {0x7, 0x8}, {0x3, 0x7}, {0x2, 0x7}, {0x7, 0xa}, {0x7, 0x3}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3, 0x2, 0x60, 0x60, 0xb, 0x5, 0x1b, 0x4, 0x30, 0x6, 0x12, 0x2, 0x1b, 0x5, 0x30, 0x0, 0x4, 0x4]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x6, 0x5}, {0x2, 0x6}, {0x1, 0x2}, {0x0, 0x1}, {0x7, 0xa}, {0x3, 0x9}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x7, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x4, 0x4}, {}, {0x4, 0x7}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x4, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x5, 0xa}, {0x6, 0x3}, {0x5, 0x8}, {0x5, 0xa}, {0x7, 0x7}, {0x2, 0x6}, {0x1, 0x5}, {0x1, 0xa}, {}, {0x1, 0x7}, {0x0, 0x1}, {0x0, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x7}, {0x3}, {0x3}, {0x5, 0x5}, {0x5, 0x6}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x5, 0x6}, {0x2, 0x9}, {0x3, 0x1}, {0x2, 0x4}, {0x1, 0x7}, {0x7, 0x4}, {0x2, 0x3}, {0x3, 0x6}, {0x1, 0x5}, {0x7}, {0x2, 0x2}, {0x4, 0x7}, {0x1}, {0x3, 0x7}, {0x5, 0x1}, {0x6, 0x3}, {0x5, 0x8}, {0x1, 0x5}, {0x0, 0x8}, {0x7}, {0x4, 0x5}, {0x5, 0x6}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x2}, {0x3}, {0x6, 0x4}, {0x3, 0xa}, {0x5, 0x2}, {0x3, 0x1}, {0x6, 0x6}, {0x3, 0x1}, {0x2, 0x7}, {0x4, 0x8}, {0x3, 0x1}, {0x7, 0x1}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x3, 0xa}, {0x7, 0x1}, {0x0, 0x5}, {0x4, 0x9}, {0x4, 0x7}, {0x2, 0x1}, {0x3, 0x4}]}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x3}, {0x3, 0x6}, {0x3, 0x3}, {0x3, 0xa}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x4, 0x9}, {0x2, 0x4}, {0x5, 0x4}, {0x0, 0x1}, {0x2, 0x4}, {0x7, 0x1}, {0x7, 0x5}, {0x5, 0x1}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x7}, {0x3}, {0x7, 0x3}, {0x3, 0x8}, {0x4, 0x6}, {0x3, 0x4}, {0x7, 0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x5}, {0x7, 0x8}, {0x1}, {0x3, 0x9}, {0x6, 0x6}, {0x3, 0x1}, {0x1, 0x4}, {0x4, 0x9}, {0x3, 0x5}, {0x1, 0x5}, {0x2, 0x1}, {0x6, 0x7}, {0x7, 0x8}, {0x4, 0x1}, {0x3, 0x7}, {0x4, 0x1}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0x9}, {0x1, 0x5}, {0x7, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x67, 0x800, 0x8, 0x6, 0x200, 0x2, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x800, 0x3ff, 0xb, 0x6, 0x8, 0x3]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x8}, {0x0, 0x2}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x7}, {0x1, 0x8}, {0x7, 0x6}, {0x2, 0x4}, {0x1, 0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x1, 0x4}, {0x3, 0x6}, {}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x6}, {0x5, 0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0xc}, {0x2, 0x1}, {0x0, 0xa}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x3}, {0x6, 0xa}, {0x5, 0x5}, {0x1, 0x7}, {0x2, 0x8}, {0x5, 0xa}, {0x0, 0x6}, {0x2}, {0x1, 0x5}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x9}, {0x4, 0x2}, {0x5, 0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x7, 0xa}, {0x5, 0x2}, {0x5, 0xa}, {0x1, 0xa}, {0x0, 0x7}, {0x4}, {0x0, 0x3}, {0x1, 0x3}, {0x5, 0x7}, {0x4, 0x9}, {0x1, 0x2}, {0x6, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x71, 0x3, 0x0, 0x12, 0x30, 0x48, 0x1b, 0xb, 0x6, 0x2451d16a4e7c3e26, 0x6c, 0x30, 0x48, 0x6c, 0xb, 0x12, 0xc, 0xc, 0x60, 0x30, 0x24, 0x1]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x7d, 0xc, 0x30, 0x2, 0x6c, 0x1, 0x3, 0x12, 0x2b1586be2857bccf, 0x5d, 0x1b, 0x6c, 0x1b, 0x1, 0x4, 0xc, 0x24, 0x48, 0x48, 0x2, 0x43, 0x2, 0x12, 0x18, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x3, 0x851c, 0x3, 0xfff9, 0x8, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x110, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfffa, 0x1, 0x4, 0x3, 0x2, 0x518, 0x8]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x3}, {0x6, 0xa}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x8}, {0x7, 0x3}, {0x1, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x4}, {0x5, 0x2}, {0x0, 0x1}, {0x1, 0x7}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0x3}, {0x1, 0x5}, {0x5, 0x8}, {0x5, 0x7}, {0x7, 0x6}, {0x6, 0xa}, {0x0, 0x4}, {0x7, 0x2}, {0x3, 0x6}, {0x2, 0x1}, {0x1, 0x5}, {0x6, 0x8}, {0x2, 0x5}, {0x2, 0x2}, {0x4}, {0x5, 0x4}, {0x3, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x7}, {0x5, 0x5}, {0x2, 0x1}, {0x0, 0x9}, {0x6, 0x4}, {0x4, 0x3}, {0x5, 0x6}, {0x7}, {0x4, 0x8}, {0x4, 0x4}, {0x1, 0x1}, {0x3, 0x7}, {0x7, 0x6}, {0x6, 0x6}, {0x7, 0x5}, {0x0, 0x5}, {0x6, 0x9}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x5}, {0x4}, {0x4, 0x4}, {0x7}, {}, {0x6, 0x3}, {}, {0x2, 0x7}, {0x7, 0x4}, {0x1, 0xa}, {0x1, 0x7}, {0x3, 0xd}, {0x3, 0x2}, {0x5, 0x7}, {0x2, 0x4}, {0x7}, {0x5, 0x7}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x5}, {0x6, 0xa}, {0x5, 0xa}, {0x2, 0xa}, {0x7, 0x5}, {0x7, 0x2}, {0x2, 0x4}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0xa}, {0x3, 0x4}, {0x1}, {0x2, 0x3}, {0x6, 0x8}, {0x4, 0x8}, {0x6, 0x3}, {0x3, 0x2}, {0x3, 0x4}, {0x1, 0x4}, {0x2, 0x2}, {0x2, 0x3}, {0x3, 0x1}, {0x0, 0x7}, {0x1, 0x8}, {0x6, 0x6}, {0x5, 0x5}, {0x4, 0x6}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x3}, {0x7, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x6, 0x8, 0xfffe, 0x9, 0x8, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x8, 0xd, 0x81, 0x5, 0x8, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1, 0x6c, 0x30, 0x48, 0x5, 0xb, 0xc, 0x12, 0xc, 0x16, 0x16, 0x3b, 0x12, 0xc, 0x60, 0xc, 0x60, 0x5, 0x30, 0x9, 0xc, 0x0, 0x24, 0x1b, 0x36, 0x1, 0x5, 0x5, 0x36]}]}]}, @NL80211_ATTR_TX_RATES={0x1ec, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x88, 0x5, 0x1, 0x4c, 0xb, 0x1b, 0x36, 0x1, 0x6, 0x2, 0x3, 0x60, 0xd, 0x12, 0x36, 0x0, 0x48, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x6c, 0x1b, 0x2, 0x36, 0x16, 0x60, 0x16, 0x9]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x6}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0x8}, {0x0, 0x7}, {0x5, 0x1}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffb, 0xbd2, 0x800, 0x81, 0x3, 0x5, 0xfffb]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x401, 0x8, 0x5, 0x2, 0xfff3, 0x5, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x9, 0x6, 0x0, 0x4, 0x0, 0x7, 0xa]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x4, 0x2, 0x60, 0x3d, 0xc, 0x1, 0x5, 0x6, 0x36, 0x3, 0x2, 0x48, 0x9, 0x3, 0x6c, 0x4, 0x3, 0xc, 0x36, 0x9, 0x12, 0x1, 0x6c, 0x5, 0x18, 0x30, 0x9, 0x48, 0x60]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x4, 0x6}, {0x1}, {0x6, 0x9}, {0x6, 0x1}, {0x3, 0x1}, {0x5, 0x5}, {0x0, 0x9}, {0x3, 0x4}, {0x2, 0x1}, {0x2}, {0x4, 0x6}, {0x5, 0x8}, {0x0, 0x7}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x6}, {0x7, 0x6}, {0x2, 0x4}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x6}, {0x5, 0x7}, {0x2, 0xa}, {0x7, 0x3}, {0x1, 0xa}, {0x5}, {}, {0x6, 0x4}, {0x1, 0xa}, {0x4, 0x3}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x5}, {0x4, 0x6}, {0x0, 0x3}, {0x0, 0x6}, {0x3, 0x3}, {0x2, 0x4}, {0x2, 0x1}, {0x6, 0x9}, {0x2, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x1, 0x5}, {}, {0x4, 0x6}, {0x4, 0x4}, {0x3, 0x1}, {0x2, 0x6}, {0x1}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x6, 0x3}, {0x7, 0x6}, {0x2, 0x8}, {0x1, 0x4}, {0x7, 0x4}, {0x7, 0x4}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x7fff, 0x2, 0x9, 0x7, 0x3, 0x8000, 0x86d]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0x4e, 0x4, 0x6c, 0x1b, 0x16, 0x6, 0x2, 0x16, 0x30, 0x36, 0x5, 0x1, 0xe, 0x2, 0x6, 0x5, 0x4, 0x1b, 0x3, 0x4b]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x10, 0x5, 0x7, 0x6a, 0x1, 0x7fff, 0x8001]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x4, 0x8000, 0x4, 0x3aac, 0x401, 0x9, 0x7]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x2, 0x7}, {0x1}, {0x5, 0x3}, {0x1, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x4}, {0x0, 0xa}, {0x7}, {0x7, 0x7}, {0x2, 0x5}, {0x1, 0x1}, {0x6, 0x8}, {0x5, 0x2}, {0x1, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x7, 0x4}, {0x7, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x1}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0x1}, {0x7}, {0x2, 0x4}, {0x6, 0x6}, {0x1, 0x3}, {0x5, 0x5}, {0x0, 0xa}, {0x3, 0x6}, {0x7, 0x8}, {0x4, 0x3}, {0x7, 0x4}, {0x0, 0xa}, {0x5, 0x1}, {0x7, 0x5}, {0x6, 0x5}, {0x0, 0x3}, {0x7, 0x6}, {0x1}, {0x0, 0x5}, {0x2, 0x6}, {0x6}, {0x3, 0x3}, {0x2, 0xa}, {0x5}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x0, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x129f, 0xfff8, 0x401, 0x5, 0x629, 0x3, 0xfffb, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x968}, 0x1, 0x0, 0x0, 0x48084}, 0x40844) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x0) (async, rerun: 64)
connect$802154_dgram(r1, 0x0, 0x0) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x380000, 0x7fff, 0xf32, 0x0, 0x1}, 0x48)
r3 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1f5e978e34f7cd375c000000005b436329eef819c2391d78d9f70871b36c24957109dbfa806a90529dbf96ae23934fe6c8d34345", 0x34}, {&(0x7f0000000040)="ece600", 0x3}], 0x2, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040) (async, rerun: 32)
r4 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
recvmmsg(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x34000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0)

137.068267ms ago: executing program 4 (id=3905):
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000500)={<r1=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x4000804)
bind$packet(r1, &(0x7f00000000c0)={0x11, 0x4, r2, 0x1, 0x16, 0x6, @multicast}, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
gettid()
getuid()
getgid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={<r5=>0x0, <r6=>0x0, <r7=>0x0}, &(0x7f00000003c0)=0xc)
r8 = syz_open_procfs$namespace(r5, &(0x7f0000001780)='ns/ipc\x00')
r9 = getpid()
sendmmsg$unix(r4, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r9, r6}}}, @rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0)
getgid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380))
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r12 = accept$alg(r11, 0x0, 0x0)
sendmmsg$alg(r12, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="d27e096c28b61f97670f283a7de80ecc00bacc33bd8a94d2dc0db0cc", 0x1c}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x4004041)
recvmmsg(r12, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000340)=""/15, 0xf}], 0x2}, 0xd}], 0x1, 0x40010120, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, <r13=>0x0}, &(0x7f0000000040)=0xc)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r13}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc)

136.190816ms ago: executing program 6 (id=3906):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff}, 0x6)
write(r0, &(0x7f0000000040)="05000000010001", 0x7)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

135.816596ms ago: executing program 7 (id=3907):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0xf8, 0x40, 0x1, 0x7bffc, 0x4, {0xfd}, [@nested={0x4, 0x48}, @nested={0x20, 0x3ffd, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@nested={0x4, 0xf}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@private1}]}]}, @generic="22acbe66ca523d6908a4cb7dc195fc73e87951682c0ffe2899654a1129bafa4dbd76cdd5250fbcd00b35469e9f63a5628446846ae3ad24f2bb1a25fd49d67fbd622d176d588a6cc094ab93a097f1e9a8717d7ef2d654deb05e8e984a6bdd8e6f9216e1388efaa5fc6d8a7fe59021c32b6e862ad01b63def0d5692c2f96409aaea23d26646dac75ffe708e494963904eb98fedd59bc3a9314703045873a907bd750fe5dc55be608b4314744441975e4cd925a2ff73e208bbc7b59e92b67ce"]}, 0xf8}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000240)=ANY=[], 0x144}}, 0x800)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800dd8d00000000000000000200000000000006000000040600150001000000180016801400e9e2b62cfe00000000000000000000003000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x220000c5}, 0x8000)

90.753524ms ago: executing program 0 (id=3908):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a006da800000000000000001c000040"], 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94)

51.365461ms ago: executing program 6 (id=3909):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x2}, @func_proto={0x0, 0x0, 0x0, 0x9, 0x4}, @ptr={0x3, 0x0, 0x0, 0x4}, @func={0x0, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x16, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="f5af24bd7000000000000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0)

0s ago: executing program 1 (id=3910):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="65870f0082762422fda30250a90d70fa926e000000008f7c", 0x30)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x3c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24080850}, 0xc010)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10)
sendmmsg(r5, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001040)="e7337703a4", 0x5}], 0x1}}], 0x1, 0x4c818)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

kernel console output (not intermixed with test programs):

 control failed (result -32)
[  239.068558][T13064] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.135406][T13088] __nla_validate_parse: 12 callbacks suppressed
[  239.135418][T13088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1975'.
[  239.150781][T13064] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.281724][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1977'.
[  239.388420][T13064] vlan2: left allmulticast mode
[  239.393676][T13064] bond4: left allmulticast mode
[  239.415775][T13064] bond6: left promiscuous mode
[  239.431704][T13064] ip6gre1: left promiscuous mode
[  239.446041][T13064] ip6gre1: left allmulticast mode
[  239.716054][T13085] 8021q: adding VLAN 0 to HW filter on device bond8
[  239.730131][T13082] syzkaller1: entered promiscuous mode
[  239.737136][T13082] syzkaller1: entered allmulticast mode
[  239.755728][T13088] bond8: (slave geneve2): making interface the new active one
[  239.765057][T13088] bond8: (slave geneve2): Enslaving as an active interface with an up link
[  239.790884][T13091] bond4: option xmit_hash_policy: invalid value (64)
[  239.799755][T13091] bond4 (unregistering): Released all slaves
[  239.818443][ T2121] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  239.827396][ T2121] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.908171][ T2995] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  239.910895][T13109] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1980'.
[  239.939126][ T2995] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.975214][ T2995] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  239.997194][ T2995] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  240.023069][ T2995] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  240.032250][ T2995] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  240.122512][T13115] bond4: option lp_interval: invalid value (0)
[  240.132324][T13115] bond4: option lp_interval: allowed values 1 - 2147483647
[  240.148279][T13115] bond4 (unregistering): Released all slaves
[  240.149734][T13124] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.163981][ T5153] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  240.201112][T13129] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) !
[  240.650817][T13158] netlink: 'syz.0.1995': attribute type 10 has an invalid length.
[  240.661102][T13158] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1995'.
[  240.672168][T13158] team0: entered promiscuous mode
[  240.689302][T13158] team_slave_0: entered promiscuous mode
[  240.695205][T13158] team_slave_1: entered promiscuous mode
[  240.732813][T13158] 8021q: adding VLAN 0 to HW filter on device team0
[  240.759071][T13158] bond0: (slave team0): Releasing backup interface
[  240.792734][T13158] bridge0: port 2(team0) entered blocking state
[  240.801846][T13158] bridge0: port 2(team0) entered disabled state
[  240.818234][T13158] team0: entered allmulticast mode
[  240.823412][T13168] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1996'.
[  240.823439][T13168] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1996'.
[  240.850571][T13168] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1996'.
[  240.860700][T13158] team_slave_0: entered allmulticast mode
[  240.866528][T13158] team_slave_1: entered allmulticast mode
[  242.456603][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2006'.
[  242.514758][T13205] dummy0: entered allmulticast mode
[  242.543494][T13208] sctp: [Deprecated]: syz.4.2008 (pid 13208) Use of int in maxseg socket option.
[  242.543494][T13208] Use struct sctp_assoc_value instead
[  242.700458][T13219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2013'.
[  242.721628][T13221] netlink: 'syz.4.2012': attribute type 1 has an invalid length.
[  242.851037][T13231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.935153][T13235] syzkaller0: entered promiscuous mode
[  242.941367][T13235] syzkaller0: entered allmulticast mode
[  242.952540][T13235] 0: reclassify loop, rule prio 0, protocol 800
[  242.987426][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  242.995461][    C1] lec:lec_tx_timeout: lec0
[  243.000747][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  243.056938][T13246] gre0: entered promiscuous mode
[  243.062046][T13246] gre0: entered allmulticast mode
[  243.071294][T13246] netlink: 'syz.1.2022': attribute type 10 has an invalid length.
[  243.231461][T13253] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2025'.
[  243.242357][T13255] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.255721][T13256] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.440030][T13267] netlink: 'syz.3.2030': attribute type 4 has an invalid length.
[  243.478160][T13267] netlink: 'syz.3.2030': attribute type 4 has an invalid length.
[  243.785240][T13290] netlink: 'syz.3.2036': attribute type 29 has an invalid length.
[  243.856287][T13290] netlink: 'syz.3.2036': attribute type 29 has an invalid length.
[  244.541976][T13336] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  244.585460][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  244.607492][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  244.615739][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  244.624367][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  244.633888][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  244.644158][T13340] batadv1: entered allmulticast mode
[  245.354797][T13338] wg1 speed is unknown, defaulting to 1000
[  245.692967][T13338] chnl_net:caif_netlink_parms(): no params data found
[  245.698720][T13395] __nla_validate_parse: 5 callbacks suppressed
[  245.698737][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2067'.
[  245.826171][T13395] team0: entered promiscuous mode
[  245.832444][T13395] team0: entered allmulticast mode
[  245.965257][T13406] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  245.979565][T13338] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.001330][T13338] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.018111][T13338] bridge_slave_0: entered allmulticast mode
[  246.039462][T13338] bridge_slave_0: entered promiscuous mode
[  246.071953][T13338] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.082455][T13338] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.090321][T13338] bridge_slave_1: entered allmulticast mode
[  246.100197][T13338] bridge_slave_1: entered promiscuous mode
[  246.172818][T13338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.254465][T13338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.331920][T13338] team0: Port device team_slave_0 added
[  246.350736][T13338] team0: Port device team_slave_1 added
[  246.472223][T13437] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2078'.
[  246.561133][T13338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.580420][T13338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  246.616913][T13338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.648497][T13338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.655493][T13338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  246.686670][T13443] netlink: 'syz.4.2079': attribute type 1 has an invalid length.
[  246.696508][T13338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.721277][ T5838] Bluetooth: hci6: command tx timeout
[  246.794132][T13447] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  246.959731][T13338] hsr_slave_0: entered promiscuous mode
[  246.987224][T13338] hsr_slave_1: entered promiscuous mode
[  246.993834][T13338] debugfs: 'hsr0' already exists in 'hsr'
[  247.009101][T13338] Cannot create hsr debugfs directory
[  247.059392][T13466] netlink: 'syz.4.2085': attribute type 1 has an invalid length.
[  247.679735][T13507] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2097'.
[  247.694550][T13507] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2097'.
[  247.704117][T13507] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2097'.
[  247.784910][T13338] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  247.810916][T13338] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  247.822882][T13338] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  247.857776][T13338] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  247.886041][T13519] ip6t_REJECT: ECHOREPLY is not supported
[  248.016735][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  248.024780][    C1] lec:lec_tx_timeout: lec0
[  248.029444][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  248.161012][T13338] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.175048][T13539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2105'.
[  248.192950][T13539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2105'.
[  248.213400][T13338] 8021q: adding VLAN 0 to HW filter on device team0
[  248.228335][T11613] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.235507][T11613] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.277690][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.284887][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.320485][T13543] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2107'.
[  248.376268][T13338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  248.391377][T13338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  248.533517][T13559] netlink: 'syz.1.2110': attribute type 1 has an invalid length.
[  248.722054][T13573] netlink: 'syz.1.2114': attribute type 3 has an invalid length.
[  248.807703][ T5838] Bluetooth: hci6: command tx timeout
[  248.824784][T13338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.962584][T13588] syzkaller0: entered promiscuous mode
[  248.968744][T13588] syzkaller0: entered allmulticast mode
[  248.977069][T13588] 0: reclassify loop, rule prio 0, protocol 800
[  249.051874][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2121'.
[  249.091921][   T30] audit: type=1800 audit(1766253225.734:3): pid=13597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2120" name="memory.events" dev="tmpfs" ino=2439 res=0 errno=0
[  249.432767][T13338] veth0_vlan: entered promiscuous mode
[  249.483948][T13338] veth1_vlan: entered promiscuous mode
[  249.578955][T13338] veth0_macvtap: entered promiscuous mode
[  249.602849][T13338] veth1_macvtap: entered promiscuous mode
[  249.641550][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2127'.
[  249.645776][T13338] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.669432][T13338] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.770114][ T3825] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.788965][ T3825] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.822637][ T3825] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.834719][ T3825] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.004067][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.020344][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.064058][T11613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.087487][T11613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.309796][T13641] xt_CT: No such helper "snmp_trap"
[  250.466964][T13654] 8021q: VLANs not supported on ip6tnl0
[  250.473146][T13655] netlink: 'syz.1.2137': attribute type 5 has an invalid length.
[  250.532727][T13658] netlink: 'syz.0.2139': attribute type 1 has an invalid length.
[  250.544624][T13658] netlink: 'syz.0.2139': attribute type 2 has an invalid length.
[  250.553126][T13658] netlink: 'syz.0.2139': attribute type 1 has an invalid length.
[  250.886876][ T5153] Bluetooth: hci6: command tx timeout
[  250.942804][T13671] netlink: 'syz.0.2144': attribute type 33 has an invalid length.
[  250.985268][T13671] bond11: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  250.999008][T13671] bond11 (unregistering): Released all slaves
[  251.388638][T13686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  251.620041][T13693] veth1_vlan (unregistering): left allmulticast mode
[  251.655058][T13704] netlink: 'syz.3.2152': attribute type 1 has an invalid length.
[  251.663336][T13704] netlink: 'syz.3.2152': attribute type 2 has an invalid length.
[  251.672683][T13704] __nla_validate_parse: 3 callbacks suppressed
[  251.672698][T13704] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2152'.
[  251.972923][T13709] tipc: Started in network mode
[  251.987117][T13709] tipc: Node identity 3e500ed46ed3, cluster identity 4711
[  251.997944][T13709] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.040261][T13709] tipc: Resetting bearer <eth:syzkaller0>
[  252.072945][T13708] tipc: Disabling bearer <eth:syzkaller0>
[  252.118067][T13726] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  252.181372][T13730] netlink: 'syz.3.2162': attribute type 4 has an invalid length.
[  252.360712][T13741] vlan0: entered allmulticast mode
[  252.366512][T13741] hsr0: entered allmulticast mode
[  252.384645][T13741] hsr_slave_1: entered allmulticast mode
[  252.760224][T13778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2175'.
[  252.774492][T13773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2174'.
[  252.957850][ T5153] Bluetooth: hci6: command 0x0419 tx timeout
[  252.991339][T13790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2179'.
[  253.036842][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  253.044938][    C1] lec:lec_tx_timeout: lec0
[  253.049730][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  253.050010][T13790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2179'.
[  253.078937][T13790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2179'.
[  253.094232][T13790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2179'.
[  253.258292][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2183'.
[  253.365261][T13810] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2183'.
[  253.376495][T13810] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2183'.
[  253.414141][T13810] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  253.552142][T13817] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  253.588904][T13817] team1: entered promiscuous mode
[  253.594101][T13817] team1: entered allmulticast mode
[  254.068433][T13855] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  254.880717][T13911] netem: invalid attributes len -9
[  254.885879][T13911] netem: change failed
[  254.908508][T13911] bridge9: entered promiscuous mode
[  254.913768][T13911] bridge9: entered allmulticast mode
[  255.037539][ T5153] Bluetooth: hci6: command 0x0419 tx timeout
[  255.208284][T13933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.317763][T13942] syzkaller0: entered promiscuous mode
[  255.323284][T13942] syzkaller0: entered allmulticast mode
[  255.760148][ T1300] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  255.769727][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  256.802189][T14015] __nla_validate_parse: 11 callbacks suppressed
[  256.802209][T14015] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2241'.
[  256.971108][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2246'.
[  257.031131][T14037] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001
[  257.131476][T14043] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2249'.
[  257.371554][T14055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2255'.
[  257.606003][T14071] bridge_slave_0: invalid flags given to default FDB implementation
[  257.691577][T14079] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2262'.
[  257.705135][T14079] xt_policy: neither incoming nor outgoing policy selected
[  257.761554][T14086] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2265'.
[  257.843389][T14090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2266'.
[  257.853444][T14090] block nbd2: Unsupported socket: should be TCP or UNIX.
[  257.868217][T14090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2266'.
[  258.056747][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  258.064873][    C1] lec:lec_tx_timeout: lec0
[  258.069510][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  258.135163][T14102] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.176284][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2271'.
[  258.260991][T14111] validate_nla: 1 callbacks suppressed
[  258.261009][T14111] netlink: 'syz.6.2272': attribute type 64 has an invalid length.
[  258.284274][T14111] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2272'.
[  258.352688][T14115] netlink: 'syz.0.2274': attribute type 21 has an invalid length.
[  258.367101][T14115] netlink: 'syz.0.2274': attribute type 4 has an invalid length.
[  258.383261][T14115] netlink: 'syz.0.2274': attribute type 5 has an invalid length.
[  258.411620][T14119] blkio.reset_stats is deprecated
[  258.459354][T14121] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  258.491394][T14121] bond11 (unregistering): Released all slaves
[  258.649683][T14132] bond11: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  258.671208][T14132] bond11 (unregistering): Released all slaves
[  258.704967][T14139] openvswitch: netlink: IP tunnel dst address not specified
[  258.714786][T14139] netlink: 'syz.0.2281': attribute type 12 has an invalid length.
[  259.466509][T14191] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  259.490933][T14191] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.523659][T14193] syzkaller0: entered promiscuous mode
[  259.529321][T14193] syzkaller0: entered allmulticast mode
[  259.616670][T14195] netlink: 'syz.0.2302': attribute type 7 has an invalid length.
[  260.191945][T14239] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  260.251058][T14234] can: request_module (can-proto-0) failed.
[  260.286950][T14241] syzkaller0: entered promiscuous mode
[  260.292437][T14241] syzkaller0: entered allmulticast mode
[  260.455364][T14247] netlink: 'syz.4.2320': attribute type 1 has an invalid length.
[  260.708350][T14268] siw: device registration error -23
[  260.753408][T14272] C: renamed from lo
[  260.798507][T14272] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  260.817442][T14278] netlink: 'syz.6.2330': attribute type 1 has an invalid length.
[  261.185929][T14299] netlink: 'syz.0.2335': attribute type 1 has an invalid length.
[  261.251377][T14299] syzkaller0: entered promiscuous mode
[  261.257216][T14299] syzkaller0: entered allmulticast mode
[  261.266561][T14299] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.276440][T14298] tipc: Resetting bearer <eth:syzkaller0>
[  261.318946][T14298] tipc: Disabling bearer <eth:syzkaller0>
[  261.340552][T14307] ip6tnl0: mtu less than device minimum
[  261.894274][T14333] syzkaller0: entered promiscuous mode
[  261.900639][T14333] syzkaller0: entered allmulticast mode
[  262.376514][T14368] syzkaller0: entered promiscuous mode
[  262.384589][T14368] syzkaller0: entered allmulticast mode
[  262.438507][T14373] __nla_validate_parse: 32 callbacks suppressed
[  262.438525][T14373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2353'.
[  262.454947][T14373] netlink: 'syz.4.2353': attribute type 5 has an invalid length.
[  262.463309][T14373] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2353'.
[  262.485736][T14374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2353'.
[  262.499870][T14374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2353'.
[  262.565169][T14382] netlink: 'syz.4.2356': attribute type 11 has an invalid length.
[  262.574566][T14382] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2356'.
[  262.933591][T14405] syzkaller0: entered promiscuous mode
[  262.954939][T14405] syzkaller0: entered allmulticast mode
[  263.002284][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2367'.
[  263.076804][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  263.084908][    C1] lec:lec_tx_timeout: lec0
[  263.089561][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  263.445062][T14426] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2371'.
[  263.538634][T14439] validate_nla: 2 callbacks suppressed
[  263.538647][T14439] netlink: 'syz.6.2374': attribute type 1 has an invalid length.
[  263.552483][T14439] netlink: 16179 bytes leftover after parsing attributes in process `syz.6.2374'.
[  263.640880][T14441] delete_channel: no stack
[  263.645492][T14441] delete_channel: no stack
[  264.134425][T14473] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  264.195018][T14481] team0: Device gtp2 is up. Set it down before adding it as a team port
[  264.205968][T14484] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2390'.
[  264.233686][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'.
[  264.593032][T14500] netlink: 'syz.6.2394': attribute type 1 has an invalid length.
[  264.868421][T14510] syzkaller0: entered promiscuous mode
[  264.874088][T14510] syzkaller0: entered allmulticast mode
[  265.164570][T14521] openvswitch: netlink: Message has -2 unknown bytes.
[  265.262690][T14524] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  265.344264][T14535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.370771][T14535] vlan0: entered promiscuous mode
[  265.375860][T14535] hsr0: entered promiscuous mode
[  265.495818][T14544] netlink: 'syz.0.2410': attribute type 1 has an invalid length.
[  265.503107][T14545] gretap2: entered allmulticast mode
[  265.704346][T14566] netlink: 'syz.1.2414': attribute type 1 has an invalid length.
[  265.728666][T14555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  265.758116][T14556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  265.941492][T14581] xt_CT: You must specify a L4 protocol and not use inversions on it
[  266.174456][T14589] netlink: 'syz.0.2420': attribute type 11 has an invalid length.
[  266.894387][T14624] vlan2: entered allmulticast mode
[  266.919023][T14625] vlan2: entered allmulticast mode
[  267.032726][T14630] chnl_net:caif_netlink_parms(): no params data found
[  267.111063][T14634] netlink: 'syz.1.2434': attribute type 9 has an invalid length.
[  267.192520][T14638] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.200623][T14638] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.411631][T14645] xt_CT: You must specify a L4 protocol and not use inversions on it
[  267.716430][T14673] netlink: 'syz.1.2444': attribute type 2 has an invalid length.
[  267.728146][T14673] netlink: 'syz.1.2444': attribute type 1 has an invalid length.
[  268.096822][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  268.104916][    C1] lec:lec_tx_timeout: lec0
[  268.109507][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  268.506222][T14688] xt_TCPMSS: Only works on TCP SYN packets
[  269.007924][T14699] netlink: 'syz.4.2452': attribute type 21 has an invalid length.
[  269.036278][T14699] netlink: 'syz.4.2452': attribute type 6 has an invalid length.
[  269.054171][T14702] __nla_validate_parse: 15 callbacks suppressed
[  269.054188][T14702] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2453'.
[  269.067106][T14699] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2452'.
[  269.107303][T14702] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2453'.
[  269.129837][T14702] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2453'.
[  269.147445][T14702] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2453'.
[  269.161287][T14703] xt_CT: No such helper "snmp_trap"
[  269.171898][T14702] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2453'.
[  269.182467][T14706] : renamed from hsr0 (while UP)
[  269.197600][T14702] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2453'.
[  269.217181][T14702] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2453'.
[  269.247386][T14702] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2453'.
[  269.263285][T14702] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2453'.
[  270.108690][T14770] dvmrp0: entered allmulticast mode
[  270.134134][T14774] dvmrp0: left allmulticast mode
[  270.869179][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  270.891726][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  270.911392][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  270.920320][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  270.928684][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  271.088522][T14836] syzkaller0: entered promiscuous mode
[  271.108040][T14836] syzkaller0: entered allmulticast mode
[  271.294256][T14841] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  271.308496][ T3825] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  271.336577][ T3825] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  271.404122][ T3825] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  271.422925][T14826] wg1 speed is unknown, defaulting to 1000
[  271.433074][ T3825] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  271.697143][T14870] netlink: 'syz.4.2501': attribute type 2 has an invalid length.
[  271.759511][T14870] syzkaller1: entered promiscuous mode
[  271.765042][T14870] syzkaller1: entered allmulticast mode
[  271.886650][T14826] chnl_net:caif_netlink_parms(): no params data found
[  272.079649][T14826] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.088299][T14826] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.095719][T14826] bridge_slave_0: entered allmulticast mode
[  272.104821][T14826] bridge_slave_0: entered promiscuous mode
[  272.114941][T14826] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.122751][T14826] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.130725][T14826] bridge_slave_1: entered allmulticast mode
[  272.139397][T14826] bridge_slave_1: entered promiscuous mode
[  272.244413][T14826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.262530][T14826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  272.318900][T14895] sctp: [Deprecated]: syz.1.2508 (pid 14895) Use of int in max_burst socket option deprecated.
[  272.318900][T14895] Use struct sctp_assoc_value instead
[  272.432957][T14826] team0: Port device team_slave_0 added
[  272.534548][T14826] team0: Port device team_slave_1 added
[  272.736908][T14913] team0: left promiscuous mode
[  272.747582][T14913] team0: left allmulticast mode
[  272.761210][T14913] 8021q: adding VLAN 0 to HW filter on device team0
[  272.772313][T14913] team0: Cannot enslave team device to itself
[  272.782242][T14826] batman_adv: batadv0: Adding interface: batadv_slave_0
[  272.798098][T14826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  272.814224][T14919] Cannot find add_set index 0 as target
[  272.825641][T14826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  272.872502][T14922] netlink: 'syz.4.2516': attribute type 3 has an invalid length.
[  272.886134][T14826] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.899380][T14826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  272.910433][T14925] netlink: 'syz.0.2515': attribute type 1 has an invalid length.
[  272.943987][T14826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.957528][ T5838] Bluetooth: hci7: command tx timeout
[  272.976601][T14929] netlink: 'syz.1.2517': attribute type 6 has an invalid length.
[  272.989527][T14925] xt_cgroup: invalid path, errno=-2
[  273.199033][ T5838] Bluetooth: hci4: command 0x0406 tx timeout
[  273.208816][T14826] hsr_slave_0: entered promiscuous mode
[  273.238160][T14826] hsr_slave_1: entered promiscuous mode
[  273.265622][T14826] debugfs: 'hsr0' already exists in 'hsr'
[  273.291169][T14826] Cannot create hsr debugfs directory
[  273.330195][T14954] netlink: 'syz.6.2523': attribute type 1 has an invalid length.
[  273.452973][T14954] bond3: entered promiscuous mode
[  273.458658][T14954] 8021q: adding VLAN 0 to HW filter on device bond3
[  273.472940][T14957] netlink: 'syz.4.2524': attribute type 1 has an invalid length.
[  273.541696][T14954] bond3: (slave bridge1): making interface the new active one
[  273.551061][T14954] bridge1: entered promiscuous mode
[  273.561833][T14954] bridge1: left promiscuous mode
[  273.995549][T14993] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  274.084556][T15000] __nla_validate_parse: 102 callbacks suppressed
[  274.084575][T15000] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2534'.
[  274.109152][T14826] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  274.154390][T15002] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2535'.
[  274.158420][T14826] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  274.166064][T15002] openvswitch: netlink: Flow actions attr not present in new flow.
[  274.198318][T15006] netlink: 'syz.6.2536': attribute type 1 has an invalid length.
[  274.220680][T14826] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  274.308802][T15006] 8021q: adding VLAN 0 to HW filter on device bond4
[  274.316878][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6210 ms
[  274.324898][    C1] lec:lec_tx_timeout: lec0
[  274.330120][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  274.347186][T14826] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  274.456214][T15030] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2542'.
[  274.469117][T15025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2540'.
[  274.517735][T15025] syzkaller1: entered promiscuous mode
[  274.523244][T15025] syzkaller1: entered allmulticast mode
[  274.532104][T15025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2540'.
[  274.635686][T15035] netlink: 'syz.0.2544': attribute type 1 has an invalid length.
[  274.647949][T14826] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.665285][T15038] Cannot find add_set index 0 as target
[  274.723484][T14826] 8021q: adding VLAN 0 to HW filter on device team0
[  274.776402][T15041] bond11: option lp_interval: invalid value (0)
[  274.784196][T15041] bond11: option lp_interval: allowed values 1 - 2147483647
[  274.795148][T15041] bond11 (unregistering): Released all slaves
[  274.838925][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.846134][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.923235][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.930440][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.944116][T15049] netlink: 'syz.6.2550': attribute type 1 has an invalid length.
[  274.954084][T15049] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.959553][T15051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2549'.
[  275.037487][ T5153] Bluetooth: hci7: command tx timeout
[  275.369703][T14826] 8021q: adding VLAN 0 to HW filter on device batadv0
[  275.446435][T15071] syzkaller0: entered promiscuous mode
[  275.464078][T15071] syzkaller0: entered allmulticast mode
[  275.704384][T15085] netlink: 'syz.0.2560': attribute type 1 has an invalid length.
[  275.868674][T15090] SET target dimension over the limit!
[  276.038538][T15097] x_tables: duplicate underflow at hook 2
[  276.062416][T14826] veth0_vlan: entered promiscuous mode
[  276.116425][T14826] veth1_vlan: entered promiscuous mode
[  276.140265][T15101] syzkaller0: entered promiscuous mode
[  276.159754][T15101] syzkaller0: entered allmulticast mode
[  276.308361][T14826] veth0_macvtap: entered promiscuous mode
[  276.330622][T14826] veth1_macvtap: entered promiscuous mode
[  276.388155][T14826] batman_adv: batadv0: Interface activated: batadv_slave_0
[  276.464487][T15117] netlink: 'syz.1.2570': attribute type 1 has an invalid length.
[  276.470777][T14826] batman_adv: batadv0: Interface activated: batadv_slave_1
[  276.526265][T15117] 8021q: adding VLAN 0 to HW filter on device bond8
[  276.543230][ T3825] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.562126][ T3825] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.623672][T15124] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  276.646849][ T3825] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.663940][ T3825] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.884051][ T2124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.913554][ T2124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.054966][ T3825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.071560][ T3825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.124913][ T5153] Bluetooth: hci7: command tx timeout
[  277.393095][T15166] netlink: 'syz.1.2584': attribute type 1 has an invalid length.
[  277.393127][T15167] wg2: entered allmulticast mode
[  277.423728][T15166] netlink: 'syz.1.2584': attribute type 1 has an invalid length.
[  277.442950][T15166] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.2584'.
[  278.095506][T15218] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  278.177866][T15222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2600'.
[  278.221106][T15222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2600'.
[  278.293982][T15231] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2602'.
[  278.361250][T15236] netlink: 'syz.0.2604': attribute type 1 has an invalid length.
[  278.445285][T15236] 8021q: adding VLAN 0 to HW filter on device bond12
[  278.454083][T15241] gre0: entered promiscuous mode
[  278.463218][T15241] gre0: entered allmulticast mode
[  278.800226][ T5838] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  278.811646][ T5838] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  278.811768][T15260] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  278.830612][ T5838] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  278.839990][ T5838] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  278.847886][ T5838] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  279.197213][ T5153] Bluetooth: hci7: command tx timeout
[  279.279963][T15261] wg1 speed is unknown, defaulting to 1000
[  279.287939][T15277] __nla_validate_parse: 1 callbacks suppressed
[  279.287956][T15277] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2617'.
[  279.323961][T15277] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  279.334966][T15277] gretap1: entered promiscuous mode
[  279.340639][T15277] gretap1: entered allmulticast mode
[  279.565137][T15289] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2619'.
[  279.591451][T15289] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2619'.
[  279.664633][T15295] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2619'.
[  279.724719][T15261] chnl_net:caif_netlink_parms(): no params data found
[  279.782442][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2621'.
[  279.792521][T15299] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2621'.
[  279.893755][T15261] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.901492][T15261] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.909571][T15261] bridge_slave_0: entered allmulticast mode
[  279.917116][T15261] bridge_slave_0: entered promiscuous mode
[  279.940111][ T6048] team0: left allmulticast mode
[  279.945369][ T6048] team_slave_0: left allmulticast mode
[  279.952417][ T6048] team_slave_1: left allmulticast mode
[  279.960777][ T6048] bridge0: port 2(team0) entered disabled state
[  279.972382][ T6048] bridge_slave_0: left allmulticast mode
[  279.980490][ T6048] bridge_slave_0: left promiscuous mode
[  279.986373][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.076711][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms
[  280.084809][    C1] lec:lec_tx_timeout: lec0
[  280.090654][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  280.135377][T15314] netlink: 'syz.1.2625': attribute type 1 has an invalid length.
[  280.392521][ T6048] bridge0 (unregistering): left allmulticast mode
[  280.467675][ T6048] bond2 (unregistering): (slave bridge1): Releasing backup interface
[  280.492755][T15321] netlink: 'syz.6.2627': attribute type 1 has an invalid length.
[  280.528350][ T6048] bond5 (unregistering): (slave bridge2): Releasing backup interface
[  280.876995][ T5153] Bluetooth: hci8: command tx timeout
[  281.051725][ T6048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  281.061787][ T6048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  281.073550][ T6048] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  281.082906][ T6048] bond0 (unregistering): Released all slaves
[  281.181871][ T6048] bond1 (unregistering): (slave C): Removing an active aggregator
[  281.191059][ T6048] bond1 (unregistering): (slave C): Releasing backup interface
[  281.201459][ T6048] bond1 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed
[  281.212781][ T6048] bond1 (unregistering): Released all slaves
[  281.225684][ T6048] bond2 (unregistering): Released all slaves
[  281.238596][ T6048] bond3 (unregistering): Released all slaves
[  281.347187][ T6048] bond4 (unregistering): Released all slaves
[  281.366507][ T6048] bond5 (unregistering): Released all slaves
[  281.468465][ T6048] bond6 (unregistering): Released all slaves
[  281.488001][ T6048] bond7 (unregistering): Released all slaves
[  281.589716][ T6048] bond8 (unregistering): Released all slaves
[  281.602614][ T6048] bond9 (unregistering): Released all slaves
[  281.616196][ T6048] bond10 (unregistering): Released all slaves
[  281.629442][ T6048] bond11 (unregistering): Released all slaves
[  281.731460][ T6048] bond12 (unregistering): Released all slaves
[  281.743639][T15261] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.752014][T15261] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.760711][T15261] bridge_slave_1: entered allmulticast mode
[  281.768248][T15261] bridge_slave_1: entered promiscuous mode
[  281.788230][T15314] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  281.815466][T15322] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  281.828396][T15321] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  282.012076][T15336] netlink: 'syz.1.2631': attribute type 1 has an invalid length.
[  282.033372][ T6048] tipc: Disabling bearer <udp:syz2>
[  282.057248][ T6048] tipc: Left network mode
[  282.065987][T15261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  282.126188][T15261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  282.149918][ T6048] IPVS: stopping master sync thread 11838 ...
[  282.362199][T15261] team0: Port device team_slave_0 added
[  282.401388][T15261] team0: Port device team_slave_1 added
[  282.618750][T15371] netlink: 'syz.4.2638': attribute type 15 has an invalid length.
[  282.761328][T15261] batman_adv: batadv0: Adding interface: batadv_slave_0
[  282.779482][T15261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  282.821092][T15261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.969172][ T5153] Bluetooth: hci8: command tx timeout
[  284.206465][T15261] batman_adv: batadv0: Adding interface: batadv_slave_1
[  284.215325][T15261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  284.244744][T15261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  284.431629][T15404] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2647'.
[  284.504101][T15403] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  284.668885][T15423] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2652'.
[  284.698038][T15411] syzkaller0: entered promiscuous mode
[  284.706922][T15411] syzkaller0: entered allmulticast mode
[  284.725045][T15422] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  284.761796][T15261] hsr_slave_0: entered promiscuous mode
[  284.772563][T15261] hsr_slave_1: entered promiscuous mode
[  284.783069][T15261] debugfs: 'hsr0' already exists in 'hsr'
[  284.789423][T15261] Cannot create hsr debugfs directory
[  284.799172][T15428] netlink: 'syz.4.2653': attribute type 1 has an invalid length.
[  284.801403][T15427] netlink: 'syz.4.2653': attribute type 1 has an invalid length.
[  284.851104][T15428] 8021q: adding VLAN 0 to HW filter on device bond11
[  284.890154][T15432] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2654'.
[  284.910977][T15432] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2654'.
[  284.920468][T15430] bond11: (slave veth7): Enslaving as an active interface with a down link
[  284.931306][T15403] tipc: Resetting bearer <eth:syzkaller0>
[  284.957717][T15402] tipc: Resetting bearer <eth:syzkaller0>
[  284.978454][T15402] tipc: Disabling bearer <eth:syzkaller0>
[  285.041039][ T5153] Bluetooth: hci8: command tx timeout
[  285.065902][T15437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2655'.
[  285.154835][T15435] netlink: 'syz.7.2654': attribute type 1 has an invalid length.
[  285.313091][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2656'.
[  285.330851][ T6048] hsr_slave_0: left promiscuous mode
[  285.348397][ T6048] hsr_slave_1: left promiscuous mode
[  285.363762][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_0
[  285.378489][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_1
[  285.423166][T15457] netlink: 'syz.4.2661': attribute type 30 has an invalid length.
[  285.768498][ T6048] team_slave_1 (unregistering): left promiscuous mode
[  285.779634][ T6048] team0 (unregistering): Port device team_slave_1 removed
[  285.791430][T15467] IPVS: ip_vs_add_dest(): server weight less than zero
[  285.835721][ T6048] team_slave_0 (unregistering): left promiscuous mode
[  285.843791][ T6048] team0 (unregistering): Port device team_slave_0 removed
[  285.917076][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms
[  285.925103][    C1] lec:lec_tx_timeout: lec0
[  285.930056][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  286.162277][T15473] nftables ruleset with unbound chain
[  286.176139][T15473] netlink: 'syz.6.2664': attribute type 1 has an invalid length.
[  286.268394][T15457] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  286.378244][T15479] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2666'.
[  286.382633][T15475] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  286.510495][T15475] syzkaller0: entered promiscuous mode
[  286.516092][T15475] syzkaller0: entered allmulticast mode
[  286.558211][T15475] tipc: Resetting bearer <eth:syzkaller0>
[  286.571315][T15474] tipc: Resetting bearer <eth:syzkaller0>
[  286.624591][T15474] tipc: Disabling bearer <eth:syzkaller0>
[  286.802813][T15503] syzkaller0: entered allmulticast mode
[  286.871631][ T6048] IPVS: stop unused estimator thread 0...
[  287.010252][T15516] netlink: 'syz.6.2677': attribute type 2 has an invalid length.
[  287.107853][T15519] netlink: 848 bytes leftover after parsing attributes in process `syz.6.2680'.
[  287.120322][ T5153] Bluetooth: hci8: command tx timeout
[  287.134511][T15519] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  287.189515][T15525] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2679'.
[  287.388572][T15538] bridge_slave_0: left allmulticast mode
[  287.394265][T15538] bridge_slave_0: left promiscuous mode
[  287.415968][T15543] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  287.429149][T15538] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.484415][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2687'.
[  287.509881][T15538] bridge_slave_1: left allmulticast mode
[  287.515557][T15538] bridge_slave_1: left promiscuous mode
[  287.529730][T15538] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.545334][T15538] bond0: (slave bond_slave_0): Releasing backup interface
[  287.561693][T15538] bond0: (slave bond_slave_1): Releasing backup interface
[  287.585540][T15538] team0: Port device team_slave_0 removed
[  287.616190][T15538] team0: Port device team_slave_1 removed
[  287.625609][T15538] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  287.633967][T15538] batman_adv: batadv0: Removing interface: batadv_slave_0
[  287.644219][T15538] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  287.654367][T15538] batman_adv: batadv0: Removing interface: batadv_slave_1
[  287.664413][T15538] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  287.714063][T15261] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  287.751245][T15261] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  287.781669][T15261] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  287.809620][T15261] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  288.072503][T15261] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.143977][T15261] 8021q: adding VLAN 0 to HW filter on device team0
[  288.180739][ T1940] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.187973][ T1940] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.214511][T11611] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.221795][T11611] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.690267][T15261] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.785057][T15261] veth0_vlan: entered promiscuous mode
[  288.826412][T15261] veth1_vlan: entered promiscuous mode
[  288.921475][T15261] veth0_macvtap: entered promiscuous mode
[  288.955699][T15261] veth1_macvtap: entered promiscuous mode
[  288.993582][T15261] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.011307][T15261] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.053741][T11611] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.075752][T11611] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.096657][T11611] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.107725][T11611] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.120948][T15628] openvswitch: netlink: Flow key attr not present in new flow.
[  289.283098][T11611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.316978][T11611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.393063][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.408616][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.485416][T15651] : entered promiscuous mode
[  289.583079][T15649] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  289.615861][ T8337] IPVS: starting estimator thread 0...
[  289.717199][T15663] IPVS: using max 31 ests per chain, 74400 per kthread
[  289.785591][T15675] __nla_validate_parse: 9 callbacks suppressed
[  289.785607][T15675] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2717'.
[  289.821830][T15678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  289.873401][T15677] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  290.104801][T15697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2721'.
[  290.127609][T15700] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2722'.
[  290.249375][T15714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2724'.
[  290.283897][T15709] netlink: 'syz.6.2723': attribute type 3 has an invalid length.
[  290.424483][T15729] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2727'.
[  290.481186][T15723] bond12: (slave bridge6): Enslaving as an active interface with an up link
[  290.560609][T15714] macvlan0: entered promiscuous mode
[  290.579337][T15714] macvlan0: entered allmulticast mode
[  290.585669][T15714] bond12: entered promiscuous mode
[  290.604355][T15714] bridge6: entered promiscuous mode
[  290.613538][T15714] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  290.622658][T15714] bond12: left promiscuous mode
[  290.628683][T15714] bridge6: left promiscuous mode
[  290.714897][T15738] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  290.823133][T15749] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2733'.
[  290.936786][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  290.944822][    C1] lec:lec_tx_timeout: lec0
[  290.949577][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  291.224823][T15775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2742'.
[  291.423722][T15793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.464807][T15796] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2749'.
[  291.488849][T15793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.545237][T15793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.607315][T15806] sctp: [Deprecated]: syz.0.2751 (pid 15806) Use of int in maxseg socket option.
[  291.607315][T15806] Use struct sctp_assoc_value instead
[  291.642553][T15810] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2747'.
[  291.664174][T15810] 8021q: VLANs not supported on ip6_vti0
[  291.699383][T15815] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.805507][T15815] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.875612][T15815] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.961938][T15815] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.979042][T15830] netlink: 'syz.7.2759': attribute type 1 has an invalid length.
[  291.987008][T15833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.988990][T15834] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.005836][T15830] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2759'.
[  292.119205][ T3825] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.147227][ T3825] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.172548][ T3825] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.208881][ T3825] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.287441][T15846] netlink: 'syz.1.2764': attribute type 8 has an invalid length.
[  292.332624][   T30] audit: type=1800 audit(1766253268.984:4): pid=15846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2764" name="memory.events" dev="tmpfs" ino=2979 res=0 errno=0
[  292.578414][T15857] netlink: 'syz.7.2769': attribute type 2 has an invalid length.
[  292.694616][T15865] veth0_to_bond: entered allmulticast mode
[  293.002281][T15895] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  293.129336][T15890] netlink: 'syz.1.2779': attribute type 2 has an invalid length.
[  293.389053][T15917] : entered promiscuous mode
[  293.472483][T15928] Bluetooth: MGMT ver 1.23
[  293.498863][T15928] Bluetooth: hci1: too big key_count value 32778
[  293.574968][T15938] xt_TCPMSS: Only works on TCP SYN packets
[  293.637600][T15942] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  293.716572][T15942] bond6: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  293.802714][T15959] xt_l2tp: missing protocol rule (udp|l2tpip)
[  294.260513][T15997] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  294.641862][T16019] sch_tbf: burst 127 is lower than device vlan0 mtu (1514) !
[  294.721727][T16021] IPv6: addrconf: prefix option has invalid lifetime
[  294.811678][T16019] xt_CT: No such helper "syz1"
[  294.914451][T16033] netlink: 'syz.1.2819': attribute type 1 has an invalid length.
[  295.016415][T16033] 8021q: adding VLAN 0 to HW filter on device bond9
[  295.076923][T16040] bond9: (slave veth7): Enslaving as an active interface with a down link
[  295.143621][T16037] __nla_validate_parse: 12 callbacks suppressed
[  295.143641][T16037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2820'.
[  295.300183][T16040] syzkaller0: entered promiscuous mode
[  295.315588][T16040] syzkaller0: entered allmulticast mode
[  295.538405][T16066] netlink: 'syz.4.2826': attribute type 4 has an invalid length.
[  295.956713][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  295.964843][    C1] lec:lec_tx_timeout: lec0
[  295.969864][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  296.114297][T16107] bond1: entered promiscuous mode
[  296.123997][T16107] bond1: entered allmulticast mode
[  296.130199][T16107] 8021q: adding VLAN 0 to HW filter on device bond1
[  296.170747][T16114] netlink: 'syz.4.2835': attribute type 1 has an invalid length.
[  296.198712][T16114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2835'.
[  296.212491][T16117] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2837'.
[  296.249816][T16113] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2836'.
[  296.260983][T16113] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2836'.
[  296.375551][T16122] gre0: entered promiscuous mode
[  296.390892][T16122] gre0: entered allmulticast mode
[  296.400311][T16128] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2840'.
[  296.523095][T16133] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2841'.
[  296.541475][T16135] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2842'.
[  296.563498][T16135] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2842'.
[  296.724670][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2845'.
[  296.747708][T16149] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  298.948056][T16218] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  299.085114][T16232] netlink: 'syz.1.2871': attribute type 1 has an invalid length.
[  299.185893][T16232] 8021q: adding VLAN 0 to HW filter on device bond10
[  299.226514][T16234] bond10: (slave geneve3): making interface the new active one
[  299.239062][T16234] bond10: (slave geneve3): Enslaving as an active interface with an up link
[  299.520771][T16267] netlink: 'syz.6.2879': attribute type 11 has an invalid length.
[  299.842799][T16282] sctp: [Deprecated]: syz.1.2883 (pid 16282) Use of int in max_burst socket option deprecated.
[  299.842799][T16282] Use struct sctp_assoc_value instead
[  299.965278][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  299.977095][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  299.985688][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  299.994815][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  300.015508][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  300.270771][T16291] __nla_validate_parse: 5 callbacks suppressed
[  300.270789][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2886'.
[  300.422520][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2889'.
[  300.447722][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2889'.
[  300.500036][T16283] wg1 speed is unknown, defaulting to 1000
[  300.532237][T16304] netlink: 'syz.6.2890': attribute type 1 has an invalid length.
[  300.639829][T16304] bond7 (unregistering): Released all slaves
[  300.766314][ T2970] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.823851][T16317] netlink: 'syz.7.2894': attribute type 39 has an invalid length.
[  300.910130][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2896'.
[  300.933395][ T2970] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.976724][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  300.984749][    C1] lec:lec_tx_timeout: lec0
[  300.989503][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  301.039087][T16334] bond0: entered promiscuous mode
[  301.044160][T16334] bond_slave_0: entered promiscuous mode
[  301.053881][T16334] bond_slave_1: entered promiscuous mode
[  301.061737][T16334] batadv0: entered promiscuous mode
[  301.068005][T16334] debugfs: 'hsr0' already exists in 'hsr'
[  301.073772][T16334] Cannot create hsr debugfs directory
[  301.080182][T16334] 8021q: adding VLAN 0 to HW filter on device hsr0
[  301.090034][T16334] bond0: left promiscuous mode
[  301.094831][T16334] bond_slave_0: left promiscuous mode
[  301.100565][T16334] bond_slave_1: left promiscuous mode
[  301.109105][T16334] batadv0: left promiscuous mode
[  301.144726][ T2970] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.166408][T16330] dvmrp0: entered allmulticast mode
[  301.184864][T16283] chnl_net:caif_netlink_parms(): no params data found
[  301.268863][ T2970] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.461210][T16338] syzkaller0: entered promiscuous mode
[  301.469665][T16338] syzkaller0: entered allmulticast mode
[  301.481128][T16283] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.497046][T16283] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.504440][T16283] bridge_slave_0: entered allmulticast mode
[  301.512822][T16283] bridge_slave_0: entered promiscuous mode
[  302.091642][ T5838] Bluetooth: hci3: command tx timeout
[  302.915830][T16283] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.923212][T16283] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.930742][T16283] bridge_slave_1: entered allmulticast mode
[  302.938553][T16283] bridge_slave_1: entered promiscuous mode
[  302.946024][ T5837] wg1 speed is unknown, defaulting to 1000
[  302.965023][ T5837] syz2: Port: 1 Link DOWN
[  303.076642][T16283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.162454][T16283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.268422][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2905'.
[  303.294782][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2907'.
[  303.305036][T16376] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2905'.
[  303.316228][T16283] team0: Port device team_slave_0 added
[  303.363122][T16374] tipc: Started in network mode
[  303.368444][T16374] tipc: Node identity ac14140f, cluster identity 4711
[  303.375507][T16374] tipc: New replicast peer: 255.255.255.255
[  303.383043][T16374] tipc: Enabled bearer <udp:syz2>, priority 10
[  303.400612][T16283] team0: Port device team_slave_1 added
[  303.480488][ T2970] bridge_slave_1: left allmulticast mode
[  303.490801][ T2970] bridge_slave_1: left promiscuous mode
[  303.496605][ T2970] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.508275][T16383] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2908'.
[  303.523906][ T2970] bridge_slave_0: left allmulticast mode
[  303.547636][ T2970] bridge_slave_0: left promiscuous mode
[  303.557184][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.874720][T16409] netlink: 'syz.6.2914': attribute type 27 has an invalid length.
[  303.907680][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2910'.
[  303.938872][T16413] sctp: [Deprecated]: syz.7.2915 (pid 16413) Use of struct sctp_assoc_value in delayed_ack socket option.
[  303.938872][T16413] Use struct sctp_sack_info instead
[  304.120537][ T2970] bond5 (unregistering): (slave gretap1): Releasing active interface
[  304.146643][ T2970] bond7 (unregistering): (slave gretap2): Releasing active interface
[  304.158740][ T5838] Bluetooth: hci3: command tx timeout
[  304.208182][ T2970] bond8 (unregistering): (slave geneve2): Releasing active interface
[  304.627476][ T2970] bond12 (unregistering): (slave bridge6): Releasing backup interface
[  304.680556][ T2970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  304.694932][ T2970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  304.706463][ T2970] bond0 (unregistering): Released all slaves
[  304.816599][ T2970] bond1 (unregistering): Released all slaves
[  304.914660][ T2970] bond2 (unregistering): Released all slaves
[  304.929232][ T2970] bond3 (unregistering): Released all slaves
[  304.941786][ T2970] bond4 (unregistering): Released all slaves
[  304.955779][ T2970] bond5 (unregistering): Released all slaves
[  305.072160][ T2970] bond6 (unregistering): Released all slaves
[  305.173217][ T2970] bond7 (unregistering): Released all slaves
[  305.278600][ T2970] bond8 (unregistering): Released all slaves
[  305.291537][ T2970] bond9 (unregistering): Released all slaves
[  305.303729][ T2970] bond10 (unregistering): Released all slaves
[  305.405277][ T2970] bond11 (unregistering): (slave veth7): Releasing active interface
[  305.415094][ T2970] bond11 (unregistering): Released all slaves
[  305.428276][ T2970] bond12 (unregistering): Released all slaves
[  305.459951][T16389] netem: incorrect ge model size
[  305.465320][T16389] netem: change failed
[  305.492855][T16399] veth3: entered promiscuous mode
[  305.499117][T16399] veth3: entered allmulticast mode
[  305.668966][  T129] tipc: Node number set to 2886997007
[  305.679558][T16283] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.691501][T16283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.724891][T16437] netlink: 'syz.6.2916': attribute type 1 has an invalid length.
[  305.756243][T16283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.801315][ T5958] syû: Port: 1 Link DOWN
[  305.805826][ T2970] : left promiscuous mode
[  305.879188][T16283] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.891522][T16442] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2920'.
[  305.901622][T16283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.943926][T16283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.958046][ T2970] tipc: Left network mode
[  305.973821][T16442] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2920'.
[  305.996707][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  306.004776][    C1] lec:lec_tx_timeout: lec0
[  306.009900][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  306.064221][T16447] netlink: 'syz.6.2923': attribute type 22 has an invalid length.
[  306.068036][T16448] xt_limit: Overflow, try lower: 271964/0
[  306.078234][T16447] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2923'.
[  306.135080][T16448] sch_fq: defrate 0 ignored.
[  306.147261][T16447] netlink: 'syz.6.2923': attribute type 22 has an invalid length.
[  306.168945][T16447] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2923'.
[  306.188799][T16283] hsr_slave_0: entered promiscuous mode
[  306.195792][T16283] hsr_slave_1: entered promiscuous mode
[  306.215165][T16283] debugfs: 'hsr0' already exists in 'hsr'
[  306.223033][T16283] Cannot create hsr debugfs directory
[  306.235500][   T36] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  306.246403][   T36] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  306.252236][ T5838] Bluetooth: hci3: command tx timeout
[  306.319611][T16457] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  306.348568][T16457] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  306.362281][   T36] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  306.376226][T16465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2928'.
[  306.390762][   T36] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  307.093875][T16511] vxcan1: tx drop: invalid da for name 0x0000000000000006
[  307.121173][T16506] syzkaller0: entered promiscuous mode
[  307.148022][T16506] syzkaller0: entered allmulticast mode
[  307.248268][T16511] syzkaller0: entered promiscuous mode
[  307.253932][T16511] syzkaller0: entered allmulticast mode
[  307.855610][T16528] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2944'.
[  308.327197][ T5838] Bluetooth: hci3: command tx timeout
[  308.894188][T16529] : entered promiscuous mode
[  309.145906][T16542] sctp: [Deprecated]: syz.1.2946 (pid 16542) Use of int in max_burst socket option deprecated.
[  309.145906][T16542] Use struct sctp_assoc_value instead
[  309.203627][T16535] sctp: [Deprecated]: syz.1.2946 (pid 16535) Use of int in max_burst socket option deprecated.
[  309.203627][T16535] Use struct sctp_assoc_value instead
[  309.221298][ T2970] hsr_slave_0: left promiscuous mode
[  309.240142][ T2970] hsr_slave_1: left promiscuous mode
[  309.246230][ T2970] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.263971][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.273984][ T2970] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  309.289153][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.375263][ T2970] veth0_macvtap: left promiscuous mode
[  310.251387][ T2124] smc: removing ib device syû
[  310.648851][T16283] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  310.694274][T16283] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  310.729393][T16582] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20000
[  310.809732][T16283] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  310.833003][T16589] openvswitch: netlink: IP tunnel dst address not specified
[  310.897481][T16283] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  311.019035][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  311.027110][    C1] lec:lec_tx_timeout: lec0
[  311.035621][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  311.108720][T16598] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2956'.
[  311.368428][T16595] syzkaller1: entered promiscuous mode
[  311.384896][T16595] syzkaller1: entered allmulticast mode
[  311.445542][T16614] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2960'.
[  311.473919][T16611] netlink: 'syz.6.2959': attribute type 5 has an invalid length.
[  311.558753][T16618] IPv4: Oversized IP packet from 127.202.26.0
[  311.797691][T16283] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.863413][T16283] 8021q: adding VLAN 0 to HW filter on device team0
[  311.899527][T16055] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.906756][T16055] bridge0: port 1(bridge_slave_0) entered forwarding state
[  311.982510][T16055] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.989743][T16055] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.018262][T16635] x_tables: unsorted entry at hook 3
[  312.375918][T16650] netem: incorrect ge model size
[  312.394399][T16650] netem: change failed
[  312.994183][T16283] 8021q: adding VLAN 0 to HW filter on device batadv0
[  313.085512][T16679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2979'.
[  313.100115][T16679] x_tables: unsorted entry at hook 1
[  313.158894][T16681] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2980'.
[  313.369117][T16681] bond2 (unregistering): Released all slaves
[  313.404894][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2983'.
[  313.437496][T16693] netlink: 'syz.6.2982': attribute type 3 has an invalid length.
[  313.445267][T16693] netlink: 'syz.6.2982': attribute type 1 has an invalid length.
[  313.461291][T16693] netlink: 212 bytes leftover after parsing attributes in process `syz.6.2982'.
[  313.476443][T16696] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2984'.
[  313.481908][T16693] NCSI netlink: No device for ifindex 813332851
[  313.580897][ T2970] IPVS: stop unused estimator thread 0...
[  313.944577][T16718] netlink: 'syz.0.2988': attribute type 1 has an invalid length.
[  314.003880][T16718] veth1_macvtap: left promiscuous mode
[  314.199142][T16729] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2993'.
[  314.208067][T16283] veth0_vlan: entered promiscuous mode
[  314.227019][T16729] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2993'.
[  314.248282][T16283] veth1_vlan: entered promiscuous mode
[  314.313522][T16729] bond7: option mode: invalid value (133)
[  314.341493][T16729] bond7 (unregistering): Released all slaves
[  314.520015][T16283] veth0_macvtap: entered promiscuous mode
[  314.573609][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3000'.
[  314.602608][T16283] veth1_macvtap: entered promiscuous mode
[  314.655136][T16283] batman_adv: batadv0: Interface activated: batadv_slave_0
[  314.681744][T16283] batman_adv: batadv0: Interface activated: batadv_slave_1
[  314.705157][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.744408][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.780477][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.791936][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.968204][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.004318][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.012398][T16768] netlink: 'syz.1.3007': attribute type 3 has an invalid length.
[  315.092400][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.108312][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.127527][T16782] syzkaller0: entered promiscuous mode
[  315.134078][T16782] syzkaller0: entered allmulticast mode
[  315.401562][T16802] netlink: 'syz.0.3016': attribute type 11 has an invalid length.
[  315.851693][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  315.861362][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  315.871700][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  315.881737][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  315.890047][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  316.014333][T16812] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.021836][T16812] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.046735][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  316.054884][    C1] lec:lec_tx_timeout: lec0
[  316.059642][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  316.272558][T16812] bridge_slave_0: left allmulticast mode
[  316.281512][T16812] bridge_slave_0: left promiscuous mode
[  316.287776][T16812] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.318157][T16812] bridge_slave_1: left allmulticast mode
[  316.323844][T16812] bridge_slave_1: left promiscuous mode
[  316.335688][T16812] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.362543][T16812] bond0: (slave bond_slave_0): Releasing backup interface
[  316.393353][T16812] bond0: (slave bond_slave_1): Releasing backup interface
[  316.423766][T16812] team0: Port device team_slave_0 removed
[  316.457384][T16812] team0: Port device team_slave_1 removed
[  316.475682][T16812] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.498400][T16812] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.516537][T16812] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  316.540841][T16812] batman_adv: batadv0: Removing interface: batadv_slave_1
[  316.583776][T16812] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  316.726649][T16828] __nla_validate_parse: 2 callbacks suppressed
[  316.744175][T16828] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3025'.
[  316.786939][T16833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3026'.
[  316.796358][T16833] netlink: 'syz.4.3026': attribute type 8 has an invalid length.
[  316.808394][T16833] Bluetooth: MGMT ver 1.23
[  316.836538][T16828] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3025'.
[  316.867479][T16835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3026'.
[  316.881773][T16833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3026'.
[  316.895169][T16833] netlink: 'syz.4.3026': attribute type 8 has an invalid length.
[  317.206256][T16818] chnl_net:caif_netlink_parms(): no params data found
[  317.214120][ T1300] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  317.223322][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  317.251556][T16861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3032'.
[  317.257748][T16858] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.357560][ T5838] Bluetooth: hci3: command tx timeout
[  317.522569][   T30] audit: type=1107 audit(1766253294.174:5): pid=16871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  317.641609][T16818] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.753577][T16818] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.762721][T16818] bridge_slave_0: entered allmulticast mode
[  317.771106][T16818] bridge_slave_0: entered promiscuous mode
[  317.853591][T16818] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.863435][T16818] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.871741][T16818] bridge_slave_1: entered allmulticast mode
[  317.879989][T16818] bridge_slave_1: entered promiscuous mode
[  317.920408][ T5838] Bluetooth: hci4: command tx timeout
[  318.000823][T16818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.020942][T16818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.101627][T16818] team0: Port device team_slave_0 added
[  318.126143][T16818] team0: Port device team_slave_1 added
[  318.261955][T16818] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.281520][T16818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  318.312400][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3045'.
[  318.385430][T16818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.412366][T16818] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.442378][T16818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  318.472797][T16916] netlink: 'syz.0.3048': attribute type 1 has an invalid length.
[  318.485357][T16916] netlink: 'syz.0.3048': attribute type 7 has an invalid length.
[  318.493674][T16818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.526623][T16916] netlink: 'syz.0.3048': attribute type 8 has an invalid length.
[  318.538370][T16916] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3048'.
[  318.572111][T16916] NCSI netlink: No device for ifindex 65584
[  318.677288][T16926] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3047'.
[  318.741155][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3047'.
[  318.852918][T16818] hsr_slave_0: entered promiscuous mode
[  318.869569][T16818] hsr_slave_1: entered promiscuous mode
[  318.886308][T16818] debugfs: 'hsr0' already exists in 'hsr'
[  318.903122][T16818] Cannot create hsr debugfs directory
[  319.432331][T16818] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.451128][T16818] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  319.549941][T16818] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.563483][T16818] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  319.654247][T16818] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.669421][T16818] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  319.700101][T16973] batadv_slave_1: entered promiscuous mode
[  319.709621][T16972] batadv_slave_1: left promiscuous mode
[  319.763152][T16818] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.775787][T16818] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  319.996956][ T5838] Bluetooth: hci4: command tx timeout
[  320.190006][T16818] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  320.203322][T16818] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  320.243128][T16818] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  320.282169][T17008] netlink: 'syz.4.3070': attribute type 6 has an invalid length.
[  320.303223][T16818] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  320.525887][T17025] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.565423][T17028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  320.650816][T17033] IPVS: length: 8 != 1152
[  320.679173][T17025] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.784890][T17035] x_tables: unsorted entry at hook 2
[  320.807159][T17025] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.865709][T17039] bond1: invalid ARP target 0.0.0.0 specified for addition
[  320.873149][T17039] bond1: option arp_ip_target: invalid value (0)
[  320.899132][T17039] bond1 (unregistering): Released all slaves
[  320.954498][T17025] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.019310][T16818] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.066710][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  321.074773][    C1] lec:lec_tx_timeout: lec0
[  321.079660][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  321.082378][T16818] 8021q: adding VLAN 0 to HW filter on device team0
[  321.145923][T11611] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.153160][T11611] bridge0: port 1(bridge_slave_0) entered forwarding state
[  321.172590][T11611] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.179839][T11611] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.188419][T17058] netlink: 'syz.6.3085': attribute type 11 has an invalid length.
[  321.276186][T11611] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.353416][   T36] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.377840][T17068] team0: Device ip6gre1 is up. Set it down before adding it as a team port
[  321.442717][T16055] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.471400][T11611] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.763005][T17090] __nla_validate_parse: 9 callbacks suppressed
[  321.763022][T17090] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3096'.
[  321.804559][T17090] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3096'.
[  321.960039][T16818] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.045501][T16818] veth0_vlan: entered promiscuous mode
[  322.074150][T16818] veth1_vlan: entered promiscuous mode
[  322.087752][ T5838] Bluetooth: hci4: command tx timeout
[  322.143357][T16818] veth0_macvtap: entered promiscuous mode
[  322.175435][T16818] veth1_macvtap: entered promiscuous mode
[  322.226226][T16818] batman_adv: batadv0: Interface activated: batadv_slave_0
[  322.284532][T16818] batman_adv: batadv0: Interface activated: batadv_slave_1
[  322.335793][T17124] ip6gre1: entered allmulticast mode
[  322.377360][ T3423] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.386180][ T3423] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.414656][ T3423] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.429799][ T3423] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.478193][T17130] macvtap1: entered allmulticast mode
[  322.483759][T17130] veth0_macvtap: entered allmulticast mode
[  322.630799][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.632187][T17135] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3112'.
[  322.653209][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.669464][T17135] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3112'.
[  322.722630][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.735062][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.768071][T17142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3113'.
[  322.800192][T17142] bridge0: port 3(geneve2) entered blocking state
[  322.807987][T17142] bridge0: port 3(geneve2) entered disabled state
[  322.815114][T17142] geneve2: entered allmulticast mode
[  322.827243][T17142] geneve2: entered promiscuous mode
[  322.894726][T17146] netlink: 248 bytes leftover after parsing attributes in process `syz.7.3114'.
[  323.029031][T17153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3019'.
[  323.080619][T17153] geneve2: entered promiscuous mode
[  323.335891][T17174] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3121'.
[  323.373106][T17175] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3122'.
[  323.501400][T17181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3124'.
[  323.593887][T17180] bond2 (unregistering): Released all slaves
[  323.696503][T17188] bond0: entered promiscuous mode
[  323.730236][T17188] bond0: left promiscuous mode
[  323.842346][T17185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.986420][T17208] ieee802154 phy0 wpan0: encryption failed: -22
[  324.033789][T17185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.167194][ T5838] Bluetooth: hci4: command tx timeout
[  324.421853][T17229] xt_TPROXY: Can be used only with -p tcp or -p udp
[  324.593995][T17185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.610874][T17241] netlink: 'syz.7.3142': attribute type 9 has an invalid length.
[  324.620204][T17241] netlink: 'syz.7.3142': attribute type 11 has an invalid length.
[  324.628250][T17241] netlink: 'syz.7.3142': attribute type 12 has an invalid length.
[  324.750619][T17185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.977725][ T6048] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.029355][T11611] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.071858][T11611] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.106315][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.682568][ T3423] syzkaller0: tun_net_xmit 76
[  325.689046][ T3423] syzkaller0: tun_net_xmit 48
[  325.707024][ T5958] syzkaller0: tun_net_xmit 76
[  325.873231][   T10] syzkaller0: tun_net_xmit 76
[  325.937272][   T10] syzkaller0: tun_net_xmit 76
[  326.086777][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  326.094862][    C1] lec:lec_tx_timeout: lec0
[  326.099507][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  326.534753][T17333] netlink: 'syz.6.3167': attribute type 10 has an invalid length.
[  327.603104][T17333] team0: entered promiscuous mode
[  327.626957][T17333] team_slave_0: entered promiscuous mode
[  327.637562][T17333] team_slave_1: entered promiscuous mode
[  327.654304][T17333] bridge0: port 3(team0) entered blocking state
[  327.677563][T17333] bridge0: port 3(team0) entered disabled state
[  327.684087][T17333] team0: entered allmulticast mode
[  327.699516][T17333] team_slave_0: entered allmulticast mode
[  327.705284][T17333] team_slave_1: entered allmulticast mode
[  327.762100][T17333] bridge0: port 3(team0) entered blocking state
[  327.768553][T17333] bridge0: port 3(team0) entered forwarding state
[  328.216062][T17367] __nla_validate_parse: 10 callbacks suppressed
[  328.216082][T17367] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3179'.
[  328.232963][T17367] netlink: 672 bytes leftover after parsing attributes in process `syz.6.3179'.
[  328.243110][T17367] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3179'.
[  328.287383][T17367] ip6gre1: entered allmulticast mode
[  328.303958][T17367] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3179'.
[  328.347705][T17371] v: renamed from vlan0 (while UP)
[  328.364694][T17371] netlink: 'syz.4.3181': attribute type 10 has an invalid length.
[  328.376194][T17371] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  328.405881][T17371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  328.813115][T17397] netlink: 'syz.0.3189': attribute type 1 has an invalid length.
[  328.840953][T17403] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3192'.
[  328.880777][T17397] veth7: entered promiscuous mode
[  328.910051][T17397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3189'.
[  329.108502][T17413] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3195'.
[  329.280869][T17429] netlink: 'syz.4.3201': attribute type 8 has an invalid length.
[  329.308660][T17430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3200'.
[  329.693789][T17445] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3206'.
[  329.740543][T17445] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3206'.
[  330.117744][T17475] xt_cgroup: invalid path, errno=-2
[  330.550163][T17506] hsr_slave_0: left promiscuous mode
[  330.576756][T17506] hsr_slave_1: left promiscuous mode
[  330.671278][T17510] tc_dump_action: action bad kind
[  331.095994][T17525] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  331.165848][T17525] bond1 (unregistering): Released all slaves
[  331.272274][T17524] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  331.320311][T17544] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  331.917287][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms
[  331.925441][    C1] lec:lec_tx_timeout: lec0
[  331.930262][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  332.054713][T17587] netlink: 'syz.1.3247': attribute type 62 has an invalid length.
[  332.171805][T17595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  332.230929][T17595] syzkaller0: entered promiscuous mode
[  332.254668][T17595] syzkaller0: entered allmulticast mode
[  332.397709][ T5838] Bluetooth: hci4: command tx timeout
[  332.653176][T17628] bond1: invalid ARP target 0.0.0.0 specified for addition
[  332.666796][T17628] bond1: option arp_ip_target: invalid value (0)
[  332.677765][T17628] bond1 (unregistering): Released all slaves
[  332.706568][T17627] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  332.785341][T17627] syzkaller0: entered promiscuous mode
[  332.796150][T17627] syzkaller0: entered allmulticast mode
[  332.809595][T17627] 0: reclassify loop, rule prio 0, protocol 800
[  332.819226][T17627] sch_fq: defrate 0 ignored.
[  333.375905][T17653] __nla_validate_parse: 11 callbacks suppressed
[  333.375925][T17653] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3264'.
[  333.545766][T17671] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  333.567912][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3268'.
[  333.629905][T17677] TCP: TCP_TX_DELAY enabled
[  334.147549][T17696] netlink: 'syz.4.3279': attribute type 63 has an invalid length.
[  334.198218][T17695] netlink: 'syz.4.3279': attribute type 63 has an invalid length.
[  334.419968][T17699] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3280'.
[  334.557799][T17696] netlink: 'syz.4.3279': attribute type 63 has an invalid length.
[  334.568466][T17696] netlink: 'syz.4.3279': attribute type 63 has an invalid length.
[  334.597024][T17696] netlink: 'syz.4.3279': attribute type 63 has an invalid length.
[  334.605265][T17696] netlink: 'syz.4.3279': attribute type 63 has an invalid length.
[  334.613485][T17696] netlink: 'syz.4.3279': attribute type 63 has an invalid length.
[  334.625373][T17696] netlink: 'syz.4.3279': attribute type 63 has an invalid length.
[  334.672086][T17696] netlink: 'syz.4.3279': attribute type 63 has an invalid length.
[  334.871942][T17717] bridge1: entered promiscuous mode
[  334.896519][T17717] bridge1: entered allmulticast mode
[  335.134435][T17731] syzkaller1: entered promiscuous mode
[  335.150234][T17731] syzkaller1: entered allmulticast mode
[  335.151423][T17733] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.3292'.
[  335.368673][T17742] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3293'.
[  336.004987][T17755] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3296'.
[  336.037654][T17758] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3296'.
[  336.055058][T17758] netem: invalid attributes len -24
[  336.077710][T17758] netem: change failed
[  336.118374][   T10] IPVS: starting estimator thread 0...
[  336.124620][T17762] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  336.173632][T17768] syzkaller0: entered promiscuous mode
[  336.186327][T17768] syzkaller0: entered allmulticast mode
[  336.212345][T17764] IPVS: using max 32 ests per chain, 76800 per kthread
[  336.230474][T17768] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  336.240834][T17769] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  336.290682][T17767] tipc: Resetting bearer <eth:syzkaller0>
[  336.350607][T17767] tipc: Disabling bearer <eth:syzkaller0>
[  336.415679][T17784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3304'.
[  336.588082][T17794] IPVS: length: 168 != 24
[  336.596077][T17794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3307'.
[  336.639392][T17796] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3308'.
[  336.708028][T17796] xt_time: invalid argument - start or stop time greater than 23:59:59
[  336.946701][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  336.955199][    C1] lec:lec_tx_timeout: lec0
[  336.960382][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  337.114498][T17835] validate_nla: 58 callbacks suppressed
[  337.114515][T17835] netlink: 'syz.4.3321': attribute type 32 has an invalid length.
[  337.185203][T17835] bond1: Setting coupled_control to off (0)
[  337.269554][T17843] netlink: 'syz.6.3322': attribute type 2 has an invalid length.
[  337.284919][T17845] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  337.518901][T17854] bond2: entered promiscuous mode
[  337.550222][T17854] bond2: entered allmulticast mode
[  337.555730][T17854] 8021q: adding VLAN 0 to HW filter on device bond2
[  337.634411][T17867] pimreg3: entered allmulticast mode
[  337.908678][T17890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  337.915998][T17890] IPv6: NLM_F_CREATE should be set when creating new route
[  337.923276][T17890] IPv6: NLM_F_CREATE should be set when creating new route
[  338.447865][T17927] __nla_validate_parse: 3 callbacks suppressed
[  338.447883][T17927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3343'.
[  338.875827][T17956] wireguard0: entered promiscuous mode
[  338.904993][T17956] wireguard0: entered allmulticast mode
[  338.929275][T17956] team0: Port device wireguard0 added
[  338.934987][T17955] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3352'.
[  339.002090][T17963] netlink: 'syz.0.3355': attribute type 3 has an invalid length.
[  339.140254][T17974] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3359'.
[  339.216997][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3360'.
[  339.247448][T17976] netlink: 'syz.0.3360': attribute type 10 has an invalid length.
[  339.279219][T17976] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  339.403021][T17990] Cannot find add_set index 2 as target
[  339.409191][T17987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.514208][T17987] syzkaller0: entered promiscuous mode
[  339.548603][T17987] syzkaller0: entered allmulticast mode
[  339.574437][T17987] tipc: Resetting bearer <eth:syzkaller0>
[  339.588658][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3370'.
[  339.619943][T17986] tipc: Resetting bearer <eth:syzkaller0>
[  341.028781][T17986] tipc: Disabling bearer <eth:syzkaller0>
[  341.046672][T18009] veth0_macvtap: left promiscuous mode
[  341.112861][    T9] tipc: Node number set to 1350766292
[  341.212171][T18024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3376'.
[  341.223473][T18024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3376'.
[  341.399735][T18037] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.502068][  T129] IPVS: starting estimator thread 0...
[  341.539448][T18045] syzkaller0: entered promiscuous mode
[  341.544961][T18045] syzkaller0: entered allmulticast mode
[  341.554250][T18045] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3383'.
[  341.606999][T18047] IPVS: using max 33 ests per chain, 79200 per kthread
[  341.976915][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  341.984980][    C1] lec:lec_tx_timeout: lec0
[  341.990737][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  342.008335][T18080] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3389'.
[  342.040069][T18080] netlink: 'syz.6.3389': attribute type 12 has an invalid length.
[  342.056905][T18080] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3389'.
[  342.203029][T18096] netlink: 'syz.7.3392': attribute type 3 has an invalid length.
[  344.171591][T18132] __nla_validate_parse: 4 callbacks suppressed
[  344.171607][T18132] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3404'.
[  344.319747][T18142] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3407'.
[  344.511908][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3409'.
[  344.533176][T18162] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3413'.
[  344.534835][T18153] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  344.564197][T18162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3413'.
[  344.614804][T18168] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3415'.
[  344.632277][T18152] ipt_REJECT: ECHOREPLY no longer supported.
[  344.711268][T18167] netlink: 'syz.1.3411': attribute type 11 has an invalid length.
[  344.719873][T18167] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3411'.
[  345.255151][T18186] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  345.263809][T18186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3419'.
[  345.295149][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3420'.
[  345.529887][T18208] syzkaller1: entered promiscuous mode
[  345.535647][T18208] syzkaller1: entered allmulticast mode
[  345.544532][T18192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3421'.
[  345.978393][T18228] netlink: 'syz.7.3432': attribute type 4 has an invalid length.
[  346.746192][T18268] mac80211_hwsim hwsim44 ÿ
: renamed from wlan1 (while UP)
[  346.864320][T18285] netlink: 'syz.0.3448': attribute type 58 has an invalid length.
[  347.006936][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  347.015051][    C1] lec:lec_tx_timeout: lec0
[  347.020066][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  347.420397][T18311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  347.446538][T18317] netlink: 'syz.0.3457': attribute type 33 has an invalid length.
[  348.065463][T18357] x_tables: duplicate underflow at hook 1
[  348.791653][T18404] 8021q: VLANs not supported on ipvlan1
[  348.942648][T18416] vlan2: entered promiscuous mode
[  348.958812][T18416] geneve1: entered promiscuous mode
[  348.967627][T18416] vlan2: entered allmulticast mode
[  348.973092][T18416] geneve1: entered allmulticast mode
[  349.323779][T18431] bond0: entered allmulticast mode
[  349.361357][T18431] bond_slave_0: entered allmulticast mode
[  349.390944][T18431] bond_slave_1: entered allmulticast mode
[  349.406626][T18441] __nla_validate_parse: 17 callbacks suppressed
[  349.423313][T18441] netlink: 388 bytes leftover after parsing attributes in process `syz.6.3493'.
[  349.794230][T18464] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3500'.
[  349.955013][T18480] netlink: 'syz.1.3506': attribute type 2 has an invalid length.
[  349.963388][T18480] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3506'.
[  350.061018][T18486] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3504'.
[  350.095652][T18486] bond0: entered promiscuous mode
[  350.149377][T18491] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3509'.
[  350.153402][T18486] ip6gretap0: entered promiscuous mode
[  350.170911][T18492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3508'.
[  350.173306][T18486] hsr1: entered promiscuous mode
[  350.203489][T18492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3508'.
[  350.236068][T18490] bridge_slave_0: left allmulticast mode
[  350.244928][T18490] bridge_slave_0: left promiscuous mode
[  350.259317][T18497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3508'.
[  350.267494][T18490] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.301678][T18490] bridge_slave_1: left allmulticast mode
[  350.320587][T18490] bridge_slave_1: left promiscuous mode
[  350.339763][T18490] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.361989][T18490] bond0: (slave bond_slave_0): Releasing backup interface
[  350.377056][T18490] bond0: (slave bond_slave_1): Releasing backup interface
[  350.392285][T18490] team0: Port device team_slave_0 removed
[  350.404438][T18490] team0: Port device team_slave_1 removed
[  350.412013][T18490] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.420987][T18490] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.434245][T18490] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.446601][T18490] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.454371][T18513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3508'.
[  350.465643][T18515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3512'.
[  350.663964][ T3825] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  350.710296][T11611] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  350.737941][T11611] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  350.760055][T11611] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  350.803339][T18528] x_tables: duplicate underflow at hook 2
[  350.810327][T18529] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20003
[  351.188737][T18564] netlink: 'syz.6.3526': attribute type 6 has an invalid length.
[  351.220687][T18564] netlink: 'syz.6.3526': attribute type 6 has an invalid length.
[  351.233876][T18568] netlink: 'syz.1.3527': attribute type 10 has an invalid length.
[  351.275489][T18568] team0: entered promiscuous mode
[  351.283664][T18568] bridge0: port 1(team0) entered blocking state
[  351.290794][T18568] bridge0: port 1(team0) entered disabled state
[  351.298068][T18568] team0: entered allmulticast mode
[  351.314571][T18571] tipc: Started in network mode
[  351.323627][T18571] tipc: Node identity de12f565f405, cluster identity 4711
[  351.343926][T18571] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  351.370678][T18577] netlink: 'syz.7.3532': attribute type 22 has an invalid length.
[  351.383602][T18571] syzkaller0: entered allmulticast mode
[  351.415060][T18571] tipc: Resetting bearer <eth:syzkaller0>
[  351.455834][T18569] tipc: Resetting bearer <eth:syzkaller0>
[  351.482077][T18569] tipc: Disabling bearer <eth:syzkaller0>
[  351.530920][T18584] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  351.596203][T18587] SET target dimension over the limit!
[  351.747829][T18599] openvswitch: netlink: Missing key (keys=40, expected=100)
[  352.027081][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  352.035150][    C1] lec:lec_tx_timeout: lec0
[  352.047090][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  352.411100][T18641] --map-set only usable from mangle table
[  353.258904][T18682] netlink: 'syz.1.3563': attribute type 1 has an invalid length.
[  353.267062][T18682] netlink: 'syz.1.3563': attribute type 1 has an invalid length.
[  353.343008][T18687] bond0: entered promiscuous mode
[  353.357321][T18687] bond_slave_0: entered promiscuous mode
[  353.366268][T18687] bond_slave_1: entered promiscuous mode
[  353.377484][T18687] bond0: left promiscuous mode
[  353.383931][T18687] bond_slave_0: left promiscuous mode
[  353.397110][T18687] bond_slave_1: left promiscuous mode
[  353.658467][T18707] netlink: 'syz.4.3571': attribute type 7 has an invalid length.
[  354.028775][T18731] netlink: 'syz.7.3576': attribute type 3 has an invalid length.
[  354.115416][T18737] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20002
[  354.180762][T18743] netlink: 'syz.6.3581': attribute type 5 has an invalid length.
[  354.589591][T18737] bond1: left promiscuous mode
[  354.594385][T18737] bond1: left allmulticast mode
[  354.610073][T18737] veth3: left promiscuous mode
[  354.614861][T18737] veth3: left allmulticast mode
[  354.627655][T18737] veth7: left promiscuous mode
[  354.649530][T10762] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.666029][T18748] delete_channel: no stack
[  354.679789][T10762] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.720373][T10762] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.730003][T10762] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  354.785198][T18772] netlink: 'syz.6.3586': attribute type 26 has an invalid length.
[  354.819342][T18777] __nla_validate_parse: 28 callbacks suppressed
[  354.819361][T18777] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3588'.
[  354.834957][T18772] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3586'.
[  354.859687][T18772] netlink: 'syz.6.3586': attribute type 26 has an invalid length.
[  354.889330][T18772] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3586'.
[  354.924101][T18777] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.088003][T18777] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.121903][ T5153] Bluetooth: hci5: command 0x0406 tx timeout
[  355.203884][T18777] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.293968][T18777] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.438574][T18813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3599'.
[  355.441586][T18811] vlan2: entered promiscuous mode
[  355.452669][T18811] bridge0: entered promiscuous mode
[  355.473371][T18816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3599'.
[  355.489792][ T2124] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.539334][ T2124] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.585315][T16055] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.629779][T10762] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.807235][T18834] netlink: 'syz.1.3605': attribute type 83 has an invalid length.
[  355.813849][T18831] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  355.938047][T18841] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3607'.
[  355.976007][T18850] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  355.992876][T18841] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3607'.
[  356.015575][T18850] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  356.045469][T18852] veth0: entered promiscuous mode
[  356.065365][T18852] ieee802154 phy0 wpan0: encryption failed: -22
[  356.110516][T18852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3611'.
[  356.450692][T18871] : entered promiscuous mode
[  356.524914][T18884] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.560490][T18873] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  356.801494][T18900] syzkaller0: entered promiscuous mode
[  356.825846][T18900] syzkaller0: entered allmulticast mode
[  356.863537][T18900] netlink: 'syz.6.3627': attribute type 10 has an invalid length.
[  356.883829][T18900] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3627'.
[  356.903921][T18900] dummy0: entered promiscuous mode
[  356.931047][T18900] bridge0: port 4(dummy0) entered blocking state
[  356.959885][T18900] bridge0: port 4(dummy0) entered disabled state
[  356.966607][T18900] dummy0: entered allmulticast mode
[  356.987346][T18900] bridge0: port 4(dummy0) entered blocking state
[  356.993878][T18900] bridge0: port 4(dummy0) entered forwarding state
[  357.023938][T18914] netlink: 'syz.7.3632': attribute type 2 has an invalid length.
[  357.056737][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  357.064765][    C1] lec:lec_tx_timeout: lec0
[  357.069916][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  357.094267][T18920] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  357.193039][T18927] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3634'.
[  357.968501][T18958] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  358.001489][ T5838] block nbd2: Receive control failed (result -1)
[  358.646585][T19013] validate_nla: 1 callbacks suppressed
[  358.646603][T19013] netlink: 'syz.4.3658': attribute type 1 has an invalid length.
[  359.179287][T19033] tipc: Started in network mode
[  359.187108][T19033] tipc: Node identity fae028d179b7, cluster identity 4711
[  359.214098][T19033] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.270970][T19033] tipc: Disabling bearer <eth:syzkaller0>
[  359.346713][T19040] delete_channel: no stack
[  359.632202][T19072] openvswitch: netlink: Key 32 has unexpected len 4 expected 2
[  360.117659][T19118] netlink: 'syz.7.3682': attribute type 1 has an invalid length.
[  360.126237][T19119] __nla_validate_parse: 10 callbacks suppressed
[  360.126255][T19119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3683'.
[  360.149934][T19119] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  360.182085][T19127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3683'.
[  360.195638][T19127] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  360.247677][T19134] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3688'.
[  360.271791][T19122] IPv6: NLM_F_CREATE should be specified when creating new route
[  360.296546][T19122] netlink: 'syz.1.3685': attribute type 6 has an invalid length.
[  360.340008][T19132] bond3: (slave ip6gretap1): making interface the new active one
[  360.354788][T19132] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  360.359349][T19131] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3685'.
[  360.417733][T19122] netlink: 'syz.1.3685': attribute type 6 has an invalid length.
[  360.427548][T19131] nbd: couldn't find a device at index 0
[  360.509833][T19144] netlink: 'syz.7.3691': attribute type 29 has an invalid length.
[  360.521077][T19144] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3691'.
[  360.608035][T19156] netlink: 'syz.6.3694': attribute type 10 has an invalid length.
[  360.636065][T19159] xt_socket: unknown flags 0x50
[  360.658861][T19156] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3694'.
[  360.697598][T19157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3694'.
[  360.770813][T19164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  360.825150][T19156] geneve0: entered promiscuous mode
[  360.834478][T19156] geneve0: entered allmulticast mode
[  360.843564][T19156] team0: Port device geneve0 added
[  361.141599][T19196] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.3708'.
[  361.182187][T19193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3707'.
[  361.456178][T19215] macsec0: entered promiscuous mode
[  361.484262][T19218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3714'.
[  361.493464][T19215] macsec0: entered allmulticast mode
[  361.520238][T19215] veth1_macvtap: entered allmulticast mode
[  361.527015][T19215] veth1_macvtap: entered promiscuous mode
[  361.533060][T19215] macsec0: left promiscuous mode
[  361.547290][T19215] veth1_macvtap: left promiscuous mode
[  361.557202][T19215] macsec0: left allmulticast mode
[  361.562332][T19215] veth1_macvtap: left allmulticast mode
[  361.592354][T19215] netlink: 'syz.0.3713': attribute type 3 has an invalid length.
[  361.700281][T19221] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.735052][T19221] bond0: left allmulticast mode
[  361.753779][T19221] bond_slave_0: left allmulticast mode
[  361.762072][T19221] bond_slave_1: left allmulticast mode
[  361.940017][T19239] ieee802154 phy0 wpan0: encryption failed: -22
[  361.973459][T19249] netlink: 'syz.6.3724': attribute type 4 has an invalid length.
[  362.015534][T19249] netlink: 'syz.6.3724': attribute type 4 has an invalid length.
[  362.076990][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  362.085124][    C1] lec:lec_tx_timeout: lec0
[  362.089688][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  362.182236][T19256] syzkaller0: entered promiscuous mode
[  362.191026][T19256] syzkaller0: entered allmulticast mode
[  362.302975][T19271] netlink: 'syz.6.3732': attribute type 24 has an invalid length.
[  362.429388][T19273] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) !
[  362.638464][T19287] bond2: option lp_interval: invalid value (0)
[  362.646446][T19287] bond2: option lp_interval: allowed values 1 - 2147483647
[  362.669011][T19287] bond2 (unregistering): Released all slaves
[  363.510480][T19342] bond8 (unregistering): Released all slaves
[  363.568117][T19350] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  363.592807][T19344] xt_ecn: cannot match TCP bits for non-tcp packets
[  363.605073][T19344] x_tables: duplicate underflow at hook 3
[  363.680637][T19360] validate_nla: 1 callbacks suppressed
[  363.680654][T19360] netlink: 'syz.0.3759': attribute type 6 has an invalid length.
[  363.716033][T19355] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.969391][T19375] netlink: 'syz.0.3765': attribute type 29 has an invalid length.
[  363.988828][T19375] netlink: 'syz.0.3765': attribute type 29 has an invalid length.
[  364.074709][T19385] netlink: 'syz.0.3765': attribute type 29 has an invalid length.
[  364.097780][T19385] netlink: 'syz.0.3765': attribute type 29 has an invalid length.
[  364.163757][T19385] netlink: 'syz.0.3765': attribute type 29 has an invalid length.
[  364.205712][T19385] netlink: 'syz.0.3765': attribute type 29 has an invalid length.
[  364.469194][T19404] "syz.0.3776" (19404) uses obsolete ecb(arc4) skcipher
[  364.497378][T19406] "syz.0.3776" (19406) uses obsolete ecb(arc4) skcipher
[  364.655009][T19379] lo: entered promiscuous mode
[  364.677039][T19379] lo: entered allmulticast mode
[  364.834937][T19426] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  364.959116][T19423] hsr_slave_0 (unregistering): left promiscuous mode
[  365.020652][T19435] tipc: Started in network mode
[  365.034501][T19435] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711
[  365.051804][T19435] tipc: Enabled bearer <udp:syz1>, priority 10
[  365.213312][T19446] IPv6: addrconf: prefix option has invalid lifetime
[  365.680986][T19469] __nla_validate_parse: 14 callbacks suppressed
[  365.681004][T19469] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3795'.
[  365.773076][T19478] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3798'.
[  365.864688][T19482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3794'.
[  365.893536][T19484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3799'.
[  366.177102][ T8338] tipc: Node number set to 4269801492
[  366.214354][T19500] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode
[  366.223161][T19500] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode
[  366.232179][T19500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  366.652430][T19511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3807'.
[  366.677572][T19512] ip6gre2: entered allmulticast mode
[  366.773685][T19525] netlink: 'syz.0.3812': attribute type 9 has an invalid length.
[  366.815584][T19513] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  367.096950][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  367.105038][    C1] lec:lec_tx_timeout: lec0
[  367.109977][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  367.129962][T19549] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3818'.
[  367.179627][T19550] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3818'.
[  367.209726][T19556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3818'.
[  367.225688][T19558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3814'.
[  367.226886][T19550] netlink: 43 bytes leftover after parsing attributes in process `syz.6.3818'.
[  367.254683][T19550] netlink: 'syz.6.3818': attribute type 6 has an invalid length.
[  367.265228][T19550] netlink: 'syz.6.3818': attribute type 5 has an invalid length.
[  367.307852][ T2121] netdevsim netdevsim6 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0
[  367.333547][ T2121] netdevsim netdevsim6 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0
[  367.359279][ T6048] netdevsim netdevsim6 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0
[  367.381488][ T6048] netdevsim netdevsim6 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0
[  367.502185][T19564] syzkaller0: entered promiscuous mode
[  367.508742][T19564] syzkaller0: entered allmulticast mode
[  367.590271][T19572] syzkaller0: entered promiscuous mode
[  367.597387][T19572] syzkaller0: entered allmulticast mode
[  367.607951][T19572] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  368.091084][T10762] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x18
[  368.104140][T19600] openvswitch: netlink: Actions may not be safe on all matching packets
[  369.621166][T19614] bridge3: entered promiscuous mode
[  369.626453][T19614] bridge3: entered allmulticast mode
[  370.346357][T19662] validate_nla: 1 callbacks suppressed
[  370.346376][T19662] netlink: 'syz.7.3844': attribute type 1 has an invalid length.
[  370.482270][ T5153] Bluetooth: hci6: command 0x0419 tx timeout
[  370.505538][T19662] bond4: entered promiscuous mode
[  370.511215][T19662] 8021q: adding VLAN 0 to HW filter on device bond4
[  370.550083][T19662] bond4: (slave bridge5): making interface the new active one
[  370.558307][T19662] bridge5: entered promiscuous mode
[  370.564991][T19662] bond4: (slave bridge5): Enslaving as an active interface with an up link
[  370.683114][T19681] netlink: 'syz.6.3848': attribute type 11 has an invalid length.
[  370.691705][T19681] __nla_validate_parse: 34 callbacks suppressed
[  370.691721][T19681] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3848'.
[  371.009758][T19711] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3859'.
[  371.019363][T19711] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3859'.
[  371.035482][T19711] netlink: 'syz.0.3859': attribute type 1 has an invalid length.
[  371.088993][T19716] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3860'.
[  371.123678][T19711] veth9: entered promiscuous mode
[  371.258227][T19727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3862'.
[  371.347703][T19733] netlink: 'syz.7.3865': attribute type 24 has an invalid length.
[  371.403368][T19737] vxcan1: tx address claim with different name
[  371.611847][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3873'.
[  371.654505][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3873'.
[  371.729865][T19764] netlink: 'syz.1.3875': attribute type 32 has an invalid length.
[  371.740683][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3875'.
[  371.772589][T19741] IPVS: dh: SCTP 172.20.20.187:0 - no destination available
[  371.824931][T19764] bond1: option coupled_control: invalid value (52)
[  371.861724][T19764] bond1 (unregistering): Released all slaves
[  371.877019][T19771] x_tables: duplicate underflow at hook 2
[  371.907721][T19771] netlink: 248 bytes leftover after parsing attributes in process `syz.7.3877'.
[  372.013360][T19771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  372.031322][T19771] syzkaller0: entered promiscuous mode
[  372.048131][T19771] syzkaller0: entered allmulticast mode
[  372.136006][T19771] tipc: Resetting bearer <eth:syzkaller0>
[  372.164705][T19784] team0: No ports can be present during mode change
[  372.172582][T19770] tipc: Resetting bearer <eth:syzkaller0>
[  372.234061][T19770] tipc: Disabling bearer <eth:syzkaller0>
[  372.344904][T19793] bridge3: entered allmulticast mode
[  372.351612][T19791] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  372.453408][T19802] gre1: entered promiscuous mode
[  372.467380][T19802] gre1: entered allmulticast mode
[  372.523770][T19809] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  372.559832][T19813] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  372.661608][T19822] netlink: zone id is out of range
[  372.669823][T19822] netlink: zone id is out of range
[  372.675038][T19822] netlink: zone id is out of range
[  372.682442][T19822] netlink: zone id is out of range
[  372.701644][T19822] netlink: zone id is out of range
[  372.707422][T19822] netlink: zone id is out of range
[  372.729968][T19827] netlink: 'syz.0.3895': attribute type 1 has an invalid length.
[  372.763876][T19827] 8021q: adding VLAN 0 to HW filter on device bond2
[  372.808634][T19827] bond2: (slave gretap1): making interface the new active one
[  372.831081][T19827] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  372.873777][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3894'.
[  372.876741][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms
[  372.890734][    C1] lec:lec_tx_timeout: lec0
[  372.896144][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  373.105776][T19848] 8021q: adding VLAN 0 to HW filter on device batadv2
[  373.118740][T19848] batadv2: entered promiscuous mode
[  373.124446][T19848] batadv2: entered allmulticast mode
[  373.132065][T19848] team0: Port device batadv2 added
[  373.168355][T19849] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  373.208809][T19849] bond1 (unregistering): Released all slaves
[  373.521752][   T31] INFO: task syz.5.1837:12624 blocked for more than 143 seconds.
[  373.539541][   T31]       Not tainted syzkaller #0
[  373.544613][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  373.554026][   T31] task:syz.5.1837      state:D stack:25608 pid:12624 tgid:12623 ppid:10119  task_flags:0x400140 flags:0x00080002
[  373.566420][   T31] Call Trace:
[  373.570314][   T31]  <TASK>
[  373.573275][   T31]  __schedule+0x14bc/0x5000
[  373.578456][   T31]  ? __pfx___schedule+0x10/0x10
[  373.583374][   T31]  ? schedule+0x91/0x360
[  373.587926][   T31]  schedule+0x165/0x360
[  373.592107][   T31]  schedule_preempt_disabled+0x13/0x30
[  373.598581][   T31]  __mutex_lock+0x7e6/0x1350
[  373.603212][   T31]  ? __mutex_lock+0x5bb/0x1350
[  373.608542][   T50] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  373.618301][   T50] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  373.627583][   T31]  ? nfsd_nl_threads_set_doit+0x2cb/0x960
[  373.633182][T19876] netlink: 'syz.6.3909': attribute type 33 has an invalid length.
[  373.633615][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  373.646580][   T31]  ? net_generic+0x1e/0x240
[  373.651720][   T31]  ? net_generic+0x1e/0x240
[  373.656593][   T31]  ? net_generic+0x1e/0x240
[  373.661947][   T31]  ? net_generic+0x1e/0x240
[  373.666591][   T31]  nfsd_nl_threads_set_doit+0x2cb/0x960
[  373.672612][   T31]  genl_family_rcv_msg_doit+0x215/0x300
[  373.678627][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  373.684882][   T31]  ? bpf_lsm_capable+0x9/0x20
[  373.689864][   T31]  ? security_capable+0x7e/0x2e0
[  373.693344][T19876] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  373.694983][   T31]  genl_rcv_msg+0x60e/0x790
[  373.710255][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  373.715673][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  373.723248][   T31]  netlink_rcv_skb+0x208/0x470
[  373.728685][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  373.734315][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  373.740213][   T31]  ? down_read+0x274/0x2e0
[  373.744772][   T31]  ? genl_rcv+0xd/0x40
[  373.749095][   T31]  genl_rcv+0x28/0x40
[  373.753195][   T31]  netlink_unicast+0x82f/0x9e0
[  373.758637][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  373.764055][   T31]  ? netlink_sendmsg+0x642/0xb30
[  373.769325][   T31]  ? skb_put+0x11b/0x210
[  373.773689][   T31]  netlink_sendmsg+0x805/0xb30
[  373.778714][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  373.788191][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  373.793898][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  373.806854][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  373.817218][   T31]  __sock_sendmsg+0x21c/0x270
[  373.826430][   T31]  ____sys_sendmsg+0x505/0x820
[  373.833485][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  373.842390][   T31]  ? import_iovec+0x74/0xa0
[  373.847440][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  373.852211][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  373.857527][   T31]  ? futex_wake+0x4b2/0x560
[  373.862060][   T31]  ? __fget_files+0x2a/0x420
[  373.866720][   T31]  ? __fget_files+0x3a0/0x420
[  373.872300][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  373.877558][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  373.883058][   T31]  ? do_syscall_64+0xbe/0xf80
[  373.887906][   T31]  do_syscall_64+0xfa/0xf80
[  373.892424][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.898798][   T31]  ? clear_bhb_loop+0x60/0xb0
[  373.903492][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.909708][   T31] RIP: 0033:0x7fe0b718f749
[  373.914139][   T31] RSP: 002b:00007fe0b53f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  373.923174][   T31] RAX: ffffffffffffffda RBX: 00007fe0b73e5fa0 RCX: 00007fe0b718f749
[  373.931305][   T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 000000000000000b
[  373.939594][   T31] RBP: 00007fe0b7213f91 R08: 0000000000000000 R09: 0000000000000000
[  373.947862][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  373.955831][   T31] R13: 00007fe0b73e6038 R14: 00007fe0b73e5fa0 R15: 00007ffd9eabec68
[  373.963936][   T31]  </TASK>
[  373.967315][   T31] 
[  373.967315][   T31] Showing all locks held in the system:
[  373.975096][   T31] 1 lock held by khungtaskd/31:
[  373.980030][T19876] bond8 (unregistering): Released all slaves
[  373.986439][   T31]  #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  373.996443][   T31] 1 lock held by klogd/5192:
[  374.001981][   T31]  #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  374.025281][   T31] 2 locks held by getty/5596:
[  374.030285][   T31]  #0: ffff888034c3f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  374.040117][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460
[  374.050513][   T31] 3 locks held by kworker/u9:2/5838:
[  374.055817][   T31]  #0: ffff888057449948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  374.067308][   T31]  #1: ffffc900040efb80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  374.080011][   T31]  #2: ffff8880303e8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[  374.089919][   T31] 2 locks held by syz.2.877/9297:
[  374.094946][   T31]  #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  374.103466][   T31]  #1: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660
[  374.113728][   T31] 3 locks held by kworker/u8:19/10762:
[  374.120049][   T31]  #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  374.132206][   T31]  #1: ffffc9000217fb80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  374.144233][   T31]  #2: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  374.153587][   T31] 2 locks held by syz.5.1837/12624:
[  374.159898][   T31]  #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  374.168177][   T31]  #1: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960
[  374.178300][   T31] 3 locks held by syz.3.2224/13954:
[  374.183490][   T31]  #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  374.191965][   T31]  #1: ffff8880332236f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  374.202501][   T31]  #2: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290
[  374.213041][   T31] 3 locks held by syz.6.3909/19876:
[  374.218597][   T31]  #0: ffffffff8f825648 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  374.228470][   T31]  #1: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90
[  374.237843][   T31]  #2: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  374.249404][   T31] 1 lock held by syz.1.3910/19878:
[  374.254548][   T31]  #0: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0
[  374.263962][   T31] 1 lock held by syz.1.3910/19880:
[  374.269123][   T31]  #0: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b20
[  374.278656][   T31] 2 locks held by syz.1.3910/19882:
[  374.283970][   T31]  #0: ffffffff8f2f5d28 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5ee/0x790
[  374.293492][   T31]  #1: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xd0/0x650
[  374.303142][   T31] 
[  374.346783][   T31] =============================================
[  374.346783][   T31] 
[  374.362758][   T31] NMI backtrace for cpu 1
[  374.362781][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  374.362800][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  374.362809][   T31] Call Trace:
[  374.362816][   T31]  <TASK>
[  374.362824][   T31]  dump_stack_lvl+0x189/0x250
[  374.362850][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  374.362870][   T31]  ? __pfx__printk+0x10/0x10
[  374.362905][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  374.362930][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  374.362953][   T31]  ? __pfx__printk+0x10/0x10
[  374.362977][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  374.363003][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  374.363028][   T31]  sys_info+0x135/0x170
[  374.363045][   T31]  watchdog+0xf95/0xfe0
[  374.363072][   T31]  ? watchdog+0x20a/0xfe0
[  374.363100][   T31]  kthread+0x711/0x8a0
[  374.363125][   T31]  ? __pfx_watchdog+0x10/0x10
[  374.363144][   T31]  ? __pfx_kthread+0x10/0x10
[  374.363172][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  374.363195][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  374.363208][   T31]  ? __pfx_kthread+0x10/0x10
[  374.363228][   T31]  ret_from_fork+0x599/0xb30
[  374.363247][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  374.363274][   T31]  ? __switch_to_asm+0x39/0x70
[  374.363293][   T31]  ? __switch_to_asm+0x33/0x70
[  374.363312][   T31]  ? __pfx_kthread+0x10/0x10
[  374.363333][   T31]  ret_from_fork_asm+0x1a/0x30
[  374.363370][   T31]  </TASK>
[  374.363380][   T31] Sending NMI from CPU 1 to CPUs 0:
[  374.514753][    C0] NMI backtrace for cpu 0
[  374.514770][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  374.514787][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  374.514797][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  374.514817][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 <e9> c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  374.514830][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6
[  374.514844][    C0] RAX: e2ed39de65dbf300 RBX: ffffffff81978fda RCX: e2ed39de65dbf300
[  374.514856][    C0] RDX: 0000000000000001 RSI: ffffffff8d7925e3 RDI: ffffffff8bc08360
[  374.514866][    C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db
[  374.514877][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822070
[  374.514888][    C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000
[  374.514898][    C0] FS:  0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000
[  374.514910][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  374.514921][    C0] CR2: 00007fe7667b7198 CR3: 00000000661c4000 CR4: 00000000003526f0
[  374.514935][    C0] Call Trace:
[  374.514943][    C0]  <TASK>
[  374.514949][    C0]  default_idle+0x13/0x20
[  374.514966][    C0]  default_idle_call+0x73/0xb0
[  374.514984][    C0]  do_idle+0x1ea/0x520
[  374.515001][    C0]  ? irqentry_exit+0x5ba/0x660
[  374.515018][    C0]  ? __pfx_do_idle+0x10/0x10
[  374.515042][    C0]  cpu_startup_entry+0x44/0x60
[  374.515058][    C0]  rest_init+0x2de/0x300
[  374.515077][    C0]  start_kernel+0x3a7/0x400
[  374.515094][    C0]  x86_64_start_reservations+0x24/0x30
[  374.515113][    C0]  x86_64_start_kernel+0x143/0x1c0
[  374.515131][    C0]  common_startup_64+0x13e/0x147
[  374.515158][    C0]  </TASK>
[  374.700329][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  374.707203][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  374.716316][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  374.726366][   T31] Call Trace:
[  374.729632][   T31]  <TASK>
[  374.732554][   T31]  dump_stack_lvl+0x99/0x250
[  374.737154][   T31]  ? __asan_memcpy+0x40/0x70
[  374.741731][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  374.746919][   T31]  ? __pfx__printk+0x10/0x10
[  374.751513][   T31]  vpanic+0x237/0x6d0
[  374.755486][   T31]  ? __pfx_vpanic+0x10/0x10
[  374.759979][   T31]  ? preempt_schedule_common+0x83/0xd0
[  374.765438][   T31]  panic+0xb9/0xc0
[  374.769153][   T31]  ? __pfx_panic+0x10/0x10
[  374.773567][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  374.778929][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  374.785075][   T31]  watchdog+0xfdf/0xfe0
[  374.789228][   T31]  ? watchdog+0x20a/0xfe0
[  374.793553][   T31]  kthread+0x711/0x8a0
[  374.797615][   T31]  ? __pfx_watchdog+0x10/0x10
[  374.802280][   T31]  ? __pfx_kthread+0x10/0x10
[  374.806864][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  374.812069][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  374.817258][   T31]  ? __pfx_kthread+0x10/0x10
[  374.821835][   T31]  ret_from_fork+0x599/0xb30
[  374.826413][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  374.831516][   T31]  ? __switch_to_asm+0x39/0x70
[  374.836266][   T31]  ? __switch_to_asm+0x33/0x70
[  374.841016][   T31]  ? __pfx_kthread+0x10/0x10
[  374.845594][   T31]  ret_from_fork_asm+0x1a/0x30
[  374.850360][   T31]  </TASK>
[  374.853721][   T31] Kernel Offset: disabled
[  374.858036][   T31] Rebooting in 86400 seconds..