last executing test programs:

3.841462278s ago: executing program 0 (id=1084):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000300000000000000000042416abbb29c8a4a9bf80f9a00000020000000"], 0x50)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x1409, 0x100, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008010}, 0x8000)
close(r0)
r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000440)={{0x2, 0x4e24, @loopback}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0xe, {0x2, 0x4e22, @multicast1}, 'veth1_vlan\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x40, r3, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x40}}, 0x20000000)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x118, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffd}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {0x80000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c, 0x17, {0x0, 0xfffffffe, 0x0, 0xfffffffd}}, @mark={0xc, 0x15, {0x35075d, 0x7d}}]}, 0x118}}, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=<r9=>0x0, &(0x7f00000000c0)=0x4)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r11)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r12, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0)
r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTDEF(r10, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x38, r13, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\xef!\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x24}, 0x94)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000100)={r9, 0x1, 0x6}, 0x10)

3.594767362s ago: executing program 0 (id=1088):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRESHEX=r0, @ANYBLOB="0c000500d32a3c99a8772efb0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000000)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd70000000000a0100000008110800ac1e0001080007006401010105000100000000000800020005000000"], 0x34}, 0x1, 0x2000000}, 0x0) (async)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd70000000000a0100000008110800ac1e0001080007006401010105000100000000000800020005000000"], 0x34}, 0x1, 0x2000000}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) (async)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x44, r4, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000640)={<r7=>0x0, 0xc01}, &(0x7f0000000680)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000006c0)={r7, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x0, 0x401, 0x66, 0x3, 0xfffffff0}, &(0x7f00000007c0)=0x98)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r8=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r8, 0x25, 0x8, @void}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "90ae46fcfe49b0d5eb03000000000000640000000000000000000800", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="20082abd7000fddbdf254100000008000300", @ANYRES32=r11, @ANYBLOB="08002700030000000800a0000300000008009f000100000005001901080000000800a000050000000c77bed7826136bbdd8271900263060000005f51290317a455"], 0x44}, 0x1, 0x0, 0x0, 0x31}, 0x40000) (async)
sendmsg$NL80211_CMD_SET_CHANNEL(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="20082abd7000fddbdf254100000008000300", @ANYRES32=r11, @ANYBLOB="08002700030000000800a0000300000008009f000100000005001901080000000800a000050000000c77bed7826136bbdd8271900263060000005f51290317a455"], 0x44}, 0x1, 0x0, 0x0, 0x31}, 0x40000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r9) (async)
r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r9)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r12, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000001)
r13 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) (async)
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0)
syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20016626b63491b6917000286dd60fc414a00303c00fc000000000000000000000000000000fe8000000000000000000000000000aa2f040402e5700800fc010000000000000000000000000000fc00"/102], 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0x80}, &(0x7f0000000400)=0x8) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x66, &(0x7f00000003c0)={<r14=>0x0, 0x80}, &(0x7f0000000400)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000440)={r14, 0xfffd, 0x5, 0x800, 0x7f, 0x4}, &(0x7f0000000480)=0x14)
sendmmsg(r13, &(0x7f0000000000), 0x400000000000235, 0x0)

3.317899051s ago: executing program 0 (id=1093):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r1, @ANYBLOB="0000000000de000000000000005d18864bc378a775a074aa720784070045c91447c0348f419cbdb2b719", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)

3.206133861s ago: executing program 0 (id=1096):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'batadv0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x700}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xb, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth1_to_batadv\x00', <r11=>0x0})
r12 = socket$kcm(0x11, 0x3, 0x0)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r13)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r14 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f40)=""/4089, 0x1a, 0xff9, 0x8}, 0x20)
setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r12, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r15, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5)
r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r17=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r16, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r17}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xf6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48001)

2.505886973s ago: executing program 0 (id=1103):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r1, 0x29, 0x33, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0)

2.269100686s ago: executing program 0 (id=1107):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040)
r6 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r7 = socket(0x10, 0x803, 0x8)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r8, 0x40047451, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
close(0x3)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000000140)={r9, 0xa3, 0x7fffffff})
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x22, 0x0, &(0x7f0000000100))
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdc01, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x404c080)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c31b0000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="8633085f9f916e0c6753fa27e50918ac6f792e163881f34d2b6476d5401922d17ea914b1309b4eca981f18a251dc23d6016a2c03a3c33f08cc2d412be997ca8c6b621360b65612ba1b18498b0cd7475845a9fd47f7f2eee1e5", @ANYRES32=r13, @ANYRES16], 0x4c}}, 0x884)

1.943577024s ago: executing program 2 (id=1115):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket(0x18, 0x1, 0x1)
getsockopt$inet_int(r3, 0x111, 0x32, 0x0, &(0x7f0000000380))
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="75016a009cdc58"], 0xdd12}, {&(0x7f00000002c0)={0x80, 0x12, 0x2, 0x70bd27, 0x25dfdbfd, "", [@generic="278b7b3f06d46bd7c8ce8161f8b77a17d58f1425b569e24653e0132c752e47e9c246f1836058ca4bd2a7ce212df52762c6be241d84da2af2cbc561c28d48740c1f1a57167231ec30167aef1122c4f323e59183ada7af6019652c55b66163bec7630323c05599fb7daaefa3f3d55d6206"]}, 0x80}], 0x2, 0x0, 0x0, 0x200488c7}, 0x4048820)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x1, 0x7, 0x5}, 0x14}}, 0x0)

1.761062383s ago: executing program 2 (id=1117):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff9e, &(0x7f0000000140)={&(0x7f00000013c0)={0x24, r3, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000014006700000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0093fc121b687ee1f6b65e89c8fb0b99ec0928d8107d2f8a1cf735def14d9964926bb775b3aeff556e51908d56f691693441098e973d72628ccf732fcc93ce9ef31e6085e1eb499ab59eed00"], 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f0000000000)={r5})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x1c, 0x9}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, r7, 0x4}, 0x38)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r8, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r9, 0x89f5, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000280)={@broadcast, 0x0, 0x0, 0x30, 0x0, [{@dev}, {@dev}, {@multicast2}]}})
accept4$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @null}, [@remote, @rose, @remote, @null, @remote, @default, @rose]}, &(0x7f00000001c0)=0x48, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910442000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)

1.603426904s ago: executing program 2 (id=1120):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/114, 0x72}], 0x2}, 0x562a}], 0x1, 0x10000, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0)
sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x9, 0x2}, 0xfffffd91}}, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x1, 0x0, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x66, 0x0, 0xe, 0x4, 0x0, @multicast1, @local}}}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x2a8, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x27c, 0x3, 0x0, 0x1, [{0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x250, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe5, 0x1, "d485b64fa51fd23e44d235dbb553da19ea0789f663e573def33e9df27ce2efd209fe437759e93fbe27521bff515ae5d97e5703911c12dbf4ada212fc1f9f3283f352ef58bd70824a10b596ca709d6e1c2e01cee3faa81f9bccdc4ebc3dc695ca4b8a77987c573ca8230703c792a3cebd7f0a85cb0a60e3e06bd2a0429289930f1beb4f13c40a27a442051eae1f593edd38ab911b82506e2cbd282c716b7b901ef0145a79aadca02cba6600d30236b604bd5843a28ce50560857236f14bd4c776295a797b74073567113a93e9207860aba4f03416d0463ef49917740c4a2b7a772c"}, @NFTA_DATA_VALUE={0x19, 0x1, "8126138d9d482ed4f6077984cb0e103bd0c1f552a3"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4c, 0x1, "1d51f8d5d592beaa38f22f1a52d45a9950f896cd58805a6837daec082d2b34cead53c4fdc0d2764fe52ddc5e50cb70ad49acfda84efe70e8f2fb63dc941820ded8a4ed096008aa6b"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x3c, 0x1, "71cee83c4f934273f79b04a600f8dc15db34d6d8118db82618505ddd6b4e5ebafd26eb694ddc91da1d7ec6932c8debb9efe98322adcf3730"}, @NFTA_DATA_VALUE={0x31, 0x1, "05b414c806dbe05b1244a86db2728c63ff4cfc36e7a1c28227bedc5d68ba0e226e2154829da12d4ac4a640dd19"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8400000000000000}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x32c}}, 0x0)

1.487085409s ago: executing program 1 (id=1122):
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="210329bd7000a7dbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4)
recvmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000400)=""/4083, 0xff3}], 0x2}, 0x8}], 0x4, 0x180, 0x0)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0xa, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x2008840)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48104}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xf4}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x4c}}, 0x0)

1.402069067s ago: executing program 3 (id=1123):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x23}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x8884)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, 0x0, 0x4dce4ca1856657f0, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8840}, 0x20008000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r4=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=<r5=>0x0, &(0x7f0000000400)=0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', <r6=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000480)={@multicast2, @multicast1, <r7=>0x0}, &(0x7f00000004c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vxcan1\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x104, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x13667d358be60848}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x368a0f9989419dac}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000880)={<r9=>0xffffffffffffffff, 0x0, 0x3})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'netpci0\x00', <r10=>0x0})
setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000000900)={r10, 0x1, 0x6}, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r11, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r12, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x3, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x5)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000b80)={'wlan1\x00'})
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r9)
sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r13, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x55db, 0x29}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000081}, 0x800)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r9)
sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000001000)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x13c, r14, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf55}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "f8e3f4ed04c25560e027686522c8818e8ce9a1f1efc82bd8"}}, @TIPC_NLA_NODE_ID={0x8c, 0x3, "f1b4a0d5a76be5362ac96b099fde98d36fcf96a19af30062b806c96a5495aad2eb3f767b73ea87a3394a4a3626388970f56e3100fa1194daf5e17645e835786da33ec42a737fcebf04e822b77e3a18ecdb43436dc816a98e6ecd12a69d42208e2835facc062765a4dd7315fc244e8cc6721515af93297c6dc953c7f7e3cd63215569983982219846"}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4)
getsockopt$MRT6(r9, 0x29, 0xce, &(0x7f0000001040), &(0x7f0000001080)=0x4)
r15 = accept4(r2, &(0x7f00000010c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001140)=0x80, 0x100000)
setsockopt$packet_tx_ring(r15, 0x107, 0xd, &(0x7f0000001180)=@req={0xd, 0xa, 0x8, 0xd}, 0x10)

1.335299715s ago: executing program 2 (id=1124):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc080)
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = socket$inet(0xa, 0x801, 0x0)
listen(r1, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2, @mcast2, {[@routing={0x29}]}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[], 0x44}}, 0x0)
close(0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="130000005600010000"], 0x18}}, 0x0)

1.285656309s ago: executing program 4 (id=1125):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x300, 0x10001}}}}}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000040)={'wlan0\x00'})
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1d, 0x7, 0x8, 0x8, 0x5, r1}, 0x50)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
listen(r2, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @mcast2, 0x3}}, 0x0, 0x0, 0x20, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

1.176198428s ago: executing program 2 (id=1126):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x7}]}}}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x7}]}}}]}, 0x3c}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async)

1.014847458s ago: executing program 3 (id=1127):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4)
bind$can_raw(r1, &(0x7f00000001c0), 0x10)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0x4})
close(0x3)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0)
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x3, 0x3, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048085}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, 0x0, &(0x7f00000001c0))
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060086dd"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

949.328504ms ago: executing program 4 (id=1128):
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000002c0)={0x8, 'veth1_virt_wifi\x00', {'netdevsim0\x00'}, 0x2})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x10)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280))
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0xffffffffffffff83)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x3a)
getsockopt$MRT6(r3, 0x29, 0xce, 0x0, &(0x7f0000000040))
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000408000b40000000002c0004802800018008000100667764001c000280080002400000000a080003400000000808000140000000170900010073797a3000"], 0xc8}}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x5)
syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}}, 0x0)
syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6002841500540600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="50c200009078"], 0x0)
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@call={0x85, 0x0, 0x0, 0xc3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

947.693103ms ago: executing program 1 (id=1129):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x4, @none, 0x0, 0x1}, 0xe) (async)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) (async, rerun: 32)
r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r8=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000001300)={r8, 0x6e2}, &(0x7f0000001340)=0x8) (async)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x4000013, r5, 0x215eb000)
ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c1e000010000108000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="804001000000010004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0) (async)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

877.061477ms ago: executing program 2 (id=1130):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000280))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%ps    \x00'}, 0x20)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2, 0x3}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x3b00, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x27, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$alg(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x820)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES8=r8, @ANYRESDEC=r8], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4008849)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

835.77532ms ago: executing program 4 (id=1131):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) (async, rerun: 64)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0xd1383000) (rerun: 64)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) (async, rerun: 64)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) (rerun: 64)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000) (async)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) (async)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) (async)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) (async, rerun: 64)
mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x2000) (async, rerun: 64)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x80, @loopback}, 0x10) (async)
sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x18, 0x810}, 0x4000000) (async)
syz_emit_ethernet(0xc0, &(0x7f0000000200)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0xff], "3cd82179bd79ab622de46af1c48f6c2ef9555b7238b243cabb4baf3da8643df8fe82f7f4b042ce1723394c04808c9ca7482fe3a0f5d974c921e4fb9e8954c606630e9fac40d56e544b6411558885f2c35a2d740a674b5118"}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x2}}}}}}}}, 0x0)

781.68369ms ago: executing program 3 (id=1132):
syz_emit_ethernet(0x46, &(0x7f0000000900)=ANY=[@ANYBLOB="e1e730d8640abbbbbbbbbbbb86dd60ea0c000010880001fe8000000000000000000000000000aa00000000001090780200001100"/70], 0x0)
accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="244789a8b8ab12810528000008", @ANYRES16=r2, @ANYBLOB="110000000000ffffffff0f00000008000300", @ANYRES32=r1, @ANYBLOB="0500370001000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xf88ce2e0571bc7ea}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "000200"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x9, 0x8}, 0x20)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000001840), 0x4)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x3}]}, 0x14}], 0x1}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)

639.730148ms ago: executing program 1 (id=1133):
socket(0x2, 0x3, 0x100000001) (async)
r0 = socket(0x2, 0x3, 0x100000001)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000100)={r3, 0xa11c}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r3, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}]}, &(0x7f0000000140)=0x10)
setsockopt(r0, 0xff, 0x1, &(0x7f0000000100)='O', 0x1)
recvmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/190, 0xbe}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000003c0)=""/104, 0x68}], 0x3}, 0x100) (async)
recvmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/190, 0xbe}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000003c0)=""/104, 0x68}], 0x3}, 0x100)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000000c40)=""/4113, 0x1011}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x80, 0x0) (async)
recvmmsg$unix(r4, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000000c40)=""/4113, 0x1011}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x80, 0x0)
write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)

621.479218ms ago: executing program 4 (id=1134):
socket$inet_sctp(0x2, 0x1, 0x84) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00') (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x355c32cef104cbbc}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r1, 0x0, 0x0)

436.952737ms ago: executing program 1 (id=1135):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async, rerun: 32)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106) (async, rerun: 32)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async, rerun: 64)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x64}, {0x6}]}, 0x10) (rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1b, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x70, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000780)={&(0x7f00000001c0), 0xc, &(0x7f0000000740)={&(0x7f00000005c0)=@mpls_getroute={0x16c, 0x1a, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x80, 0x10, 0x8, 0x0, 0x2, 0xff, 0x1, 0x100}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}, @RTA_DST={0x8, 0x1, {0x8001}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x15}, @RTA_NEWDST={0x84, 0x13, [{0x323, 0x0, 0x1}, {0x7}, {0x9, 0x0, 0x1}, {0x9}, {0x9}, {0xb, 0x0, 0x1}, {0x5}, {0x1c, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7}, {0x2}, {0xf}, {0x7fff8, 0x0, 0x1}, {0xffff}, {0x3}, {0x1}, {0x2}, {0x4}, {0x2, 0x0, 0x1}, {0x8}, {0x7, 0x0, 0x1}, {0x7}, {0xa9d0}, {0x835, 0x0, 0x1}, {0xffff8}, {0x6, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0xfffff, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9b0}, {0xff, 0x0, 0x1}, {0x6, 0x0, 0x1}]}, @RTA_VIA={0x14, 0x12, {0x18, "6e046e52edd4ae5ab4fe666963a2"}}, @RTA_NEWDST={0x84, 0x13, [{0x8, 0x0, 0x1}, {0x10}, {0x6}, {0x9}, {0x1}, {0x6}, {0xb}, {0xff801}, {0x2, 0x0, 0x1}, {0x80}, {0x3, 0x0, 0x1}, {0x1}, {0x7}, {0x9, 0x0, 0x1}, {0x8}, {0x0, 0x0, 0x1}, {0x306c, 0x0, 0x1}, {0xa}, {0xffeff}, {0x9, 0x0, 0x1}, {0xffffd, 0x0, 0x1}, {0x9}, {0x3}, {0x1, 0x0, 0x1}, {0x4}, {0x1ff, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x4ea9, 0x0, 0x1}, {0x6}, {0x8, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x5}]}, @RTA_OIF={0x8, 0x4, r5}, @RTA_DST={0x8, 0x1, {0x10}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x20, 0x8}}]}, 0x16c}}, 0x4000000) (async)
sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4015}, 0x4000000) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x40c5) (async)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

436.09878ms ago: executing program 3 (id=1136):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0xde20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

10.914393ms ago: executing program 4 (id=1137):
syz_emit_ethernet(0x15d, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "0d5515", 0x127, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}, @srh={0x0, 0x6, 0x4, 0x3, 0xf7, 0x30, 0xffff, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x73, 0x2, 0x4, 0x1, 0x0, 0x10, 0x6, [@remote]}], {{}, {0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x7, 0x1, 0x1, 0x2, 0x2, 0x4}, 0x1, {0xfffffffe}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x8, 0x2, 0x0, 0x1, 0x2, 0x5a}, 0x2, {0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "1e35af1e23be8ca949ecc3e35f2b432e67ea54d9fbc3a0a828edb7ea026f21cfd787f8a484821011a6e0e79a88c5438b8e62271dfef316e4589039f55dee30103f311fa4858f0bdc0b35bd04ffd43b3071727c665980235357f6ad86917654ec53d1c0c749b6df7e3dc0e8d817da167bb333d1"}}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f00000003c0)="58f6", 0x2, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x9}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x3, 0x0, 0x3}, 0xe)
shutdown(r2, 0x1)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4)
recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffff0000}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}]}}}]}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x48046}, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02020000000000000055c9000000000002200100180c0000000002003a3e33e3"], 0x20}}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x8, 0x62cf, 0x3, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x0, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @local}}}})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000104000000000000060000000000", @ANYRES32=r5, @ANYBLOB="0000000080010000280012800b00010067656e65766500001800028014000700ff020000000000000000000000000001"], 0x48}, 0x1, 0x2, 0x0, 0x8000}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xf}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180080001006c6f67001400028006000140000000000600a0f2000900000900010073797a30000000000900020073797a3200000000140000001100010000"], 0x78}}, 0x0)

8.05303ms ago: executing program 1 (id=1138):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000140)={0x0, 'macvtap0\x00', 0x4}, 0x18)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4)
sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820)
pipe(&(0x7f00000007c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000540)=[{&(0x7f0000000580)='-', 0x1}], 0x1, 0x1)
close(r4)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
splice(r3, 0x0, r4, 0x0, 0xfffd, 0xa)
sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="31b00b", 0x3}, {&(0x7f0000000400)="4146718261d511ab873b3a1c335d8a5dcca7355788712f35fcb5f01d06a43eb7041f8560342c8a5b224b15e1852704ddbba57d88fbb03f950117fd0134e28a52122656f26455eaeeef8ae243e62257b4df39a18072edca7c39f5388d979658da3c1393565ccd83166b57434696522fdc8f37abc2a11677efc50646c92be4e62c70b0a48649b8dad402f1e8fd86373526a04290de76b66265eb54dd4c31d6d7df1dce689d18e064da999d1300224aed416c8c530fe0bde7d72b169563f867e1628adfcc002a2c6d912c6683526a0d04aa6847d4bdf814c454c63d04f2973723d8b65d30d6007c1a809d2f476572fd55304da1935949e3d864941b27710436c9f3284057", 0x103}], 0x2, &(0x7f0000000280)=[{0x98, 0x108, 0x0, "09fb0d8dccc1d7aff94a030432213d2e86bdb701c85b72949ef51ef7b3f6ec2b92bb4701d4bccae4f15ecbef7e151bfb44363993be97f7ffa5cf17d7539a03ba80034d7a5869000ca43b76c5eab499c2044fcba9475f03306cd53e9c7f93ca8b92504f3c9664e4dd7ae03e541fd5e2707889ecc932e49578eee91059953f6a56b0c2cfccc1d3"}], 0x98}, 0x800)
close(0x3)

7.278829ms ago: executing program 3 (id=1139):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001680)={{<r2=>0xffffffffffffffff, &(0x7f0000001480)='802.15.4 MAC\x00', 0x10000, &(0x7f00000014c0)={@_ha_fsid={[0x8, 0x2]}, {0x9, 0x2720, 0x7f, 0x1}}, 0x6, &(0x7f0000001500)={@_ha_fsid}, &(0x7f0000001540)}, {[0x0, 0xa0000000, 0x2]}, 0x1, 0xcf, &(0x7f0000001580)=""/207})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001840)={'tunl0\x00', &(0x7f0000001740)={'gretap0\x00', <r3=>0x0, 0x7800, 0x8000, 0xa1, 0xa0, {{0x2c, 0x4, 0x0, 0x3, 0xb0, 0x66, 0x0, 0x12, 0x29, 0x0, @rand_addr=0x64010102, @multicast2, {[@generic={0x82, 0x11, "c34e634765705bbb1e255fbfcd0081"}, @ssrr={0x89, 0x13, 0x99, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @private=0xa010101]}, @noop, @rr={0x7, 0x23, 0x7d, [@local, @remote, @empty, @multicast2, @loopback, @multicast2, @private=0xa010100, @broadcast]}, @generic={0x44, 0x2}, @ssrr={0x89, 0x17, 0xb7, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x39}, @loopback]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0x23, [@multicast1, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @generic={0x88, 0x7, "cd5400dda9"}, @generic={0x94, 0x11, "fec313910bd17e5d694e83abf73021"}]}}}}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0)=0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'batadv_slave_1\x00', <r5=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001a00)={'syztnl2\x00', &(0x7f0000001940)={'tunl0\x00', <r6=>0x0, 0x1, 0x10, 0x7, 0x0, {{0x27, 0x4, 0x3, 0x6, 0x9c, 0x67, 0x0, 0x6, 0x2f, 0x0, @remote, @empty, {[@generic={0x86, 0x5, "dbe6fe"}, @timestamp={0x44, 0x18, 0x60, 0x0, 0x5, [0xab, 0x2, 0x101, 0x3, 0xd]}, @cipso={0x86, 0x57, 0xffffffffffffffff, [{0x6, 0x12, "7f6378861ebc2366731f4cb21e90f955"}, {0x6, 0x7, "52febf0008"}, {0x0, 0xf, "e0b49167639b415abaa0d6ebba"}, {0x0, 0xd, "9b01f85cbca7ce75a25dce"}, {0x0, 0xb, "f67c7e626c0a276185"}, {0x2, 0x11, "41f46d110697ac7e4d4260ec66297d"}]}, @ssrr={0x89, 0xf, 0x8d, [@multicast2, @remote, @local]}, @end, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000001b00)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x54, 0x0, 0x302, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20000010)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe80000b0000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b80), r2)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x24, r8, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x0)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
recvfrom$rose(r9, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r7, 0x5fa3dbc996777dbd, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=<r10=>0x0)
sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000000240)={0x10f4, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffffffff}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x9}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}, @NFC_ATTR_VENDOR_DATA={0x1004, 0x1f, "07ee33f4e132398d8f0a997ba06d4dce783f5b4ae7d7ae9b1346f1428489f6a74f9c16769b6143f3e3833d6e341a49efcff21ad3ece0cf500960d21256989eb8f609c1b39ba64e53a5f4117210d8cbb02babdc8f712e9924f81e0ea08fbbc98b75e673f490b00e59b2e807518ff6da6854a2307debd67fc9cc1f9619d895cd5558dd3a658da456c100de7e558337fe4fa296d464d7e069fa44789b8ef21d8eb184a254fd11e8b9108d1439f69bc280a0ee516c09145bdb61da776921e74e0ba216b021c4e64443faaeb75091843fc4216b3f1cfd295aa9af9d51a339a0c5083c74cfe256abeabf21b15355b364c192dd1d9dcca30ee50525e3cadfb88fee109316f6c5a71b3c30f7c541fffc88297f99ce1d238c79f8f568a22d1304482c91a44d8d17d5e236d11301d4dff8e8102afce94f4665cbacc892a0711ff2f30917f4deb4085e3a2199664498018b82a0f75817862b38d3ae089c5d38d6e64fe4d6cfaa77109d825c886f8f90e3e913ad3b2bde298adf4f4eceb53e14da2ea025f5b1cff0437e659ce752b11fe1ae2c54902839928c0f65f1329e7118e47126f7edd01851fc6a27dfecff07a9bfc784a774ab4502556ac397caba3d57e5ded25b98b532b446d3514b753898fb0808abffa00fec924df238ecb20dd09893fa92470201530076c91cffbad7f991e635d31bf0e4185055c3f0fd00b4ca16248abdbf556d5560a1bfd6c1ec7f61e1723113fcb8d1cf33b94ec698b422c99066051f687f683dea16d919bebf45c33de53cfa08a9e3799755f6da5571e6a1cf69b806dd6a83420951f430e7282f6a5d35f4af5bf355629d4822bc3a2f650c98ba8006c698fe464b7a0c6b0d3b97a7f7b376539db24f0e05c2f87431f89bb681d267730a548bc7f4a026409241b1387b820e49ea14c4a3e9c4305f35ecf0b384323746ca0c8632fa4627b6b345d893838bf44af2a7187cf5e06d99c004e41e15494e824d33e991b8f6e51ad2f07da244a874d4adc4ed57633232aad01442572e14e09e7855f8ec26f7da978eaeb3eb4eee16329096a59828654ea985fafe50951fd95262cc75866c4e67abaa0e8ec8030cbf4c3d5f43bec26ab61bb122c7f6cb035a7f1f9ecf82f1f7a0930a9263da1a22ea44e389eba859e84033c36d5d966677860203441db35bed00e199762239f682ce7a98ba88210ead60d9360c0cfa4916c5e2bfef0a4c2845645fec32f4a70b9543aa865f671c69d7f4046075dec5bafcfba3e54100dc26dba52e4645fa709579ba789e073ddb0e5a6bd30825e223586e751861def379ac48fe52f89b3189b40fb5d83d22240d5d331ad5be50a3106969dad920c251908c9263ca2130937501ff5dfbbe7811131b974633e8872f917d73499aca5e93de9be298ce9123c56138dc40342ea18e8b78365dccc92c20cbd0c0150e2061aff694928c2d968401a70f5da381c70d1177dbd711fe76644ce5ade1df1be5f392f80495bb0190e9bac3fed3ae591f2f8a61d0e42f8d451763fb6e15b43146e5ddec1e230440ed9b67ee7d9c4aa1f3e75c6e091fdefee24d40395e80408dcf060fe9c3ce8321c6b56eee6c7a29c19b91be3d05760bfd130ffc850d11b4ab2aef9d523343f1b3c3a5381caaf7f6034cc9ba97311cb6faa02ce6cada4e7f98e22249472c028a52fb388f40584c1ed00cb74090c2cf0439815ea7ca4435167b713c697087699e271155f79ac3e0bd778b6fd05752850795c3bde614486973674f493f05b341d7d97599c0aa138cbd33ae8e027da2cc41cebb82d64a9470220b41b4d489d1a0ec1112a1bfa357c40a08b639dda4d7022c4d317ba317f15ddff1b4b19fca6ec1f1e4eff307908e22b68cdfd24bf62b373f8c16d240e9d7de7227af181bb159ab7bbe3bf903b2ea844845c8eb7e05516dcc893aecebfc0e57eead6e686dc9bc70cb880d701643461ecd7eed13c4d25379ea35448dab39f1c7f949606a14b035a50a159076ea17a7f75598341597f63a7376b420213c9f9330f9fa486a7c168432fd4f70c366dd4da8c818526b4458f48ddbc05f0832d8561e2fdebf160368d6272ef16b7605b35f88e09cdad958d3477c6eff9def1ab196be83a2b88b4bf733f7b34ddabd2d7b8e03e1126e8d244d5f1f14e0fe57bc181989a51e11a107afc6a11f3a69ec0c8b594948602d66c132bcec76ab61b6b2290d319e2aca07c96a373acd4d7dc5f0a5174f599e69c5c4bb61b4f4d96b1e848404d7bc80eb73b1e6d8c405d1b0dc3479c51813a0c93da394e7b67745ea5bc5d372009369a677e21398dd9a620e3c93fa59b2d8b6ba80df49a0ce6e41ec5956c4252539b3717f0cc9670f7b7a1ffe50a90da0211978eacce5946432502df372582d5c289b7e1101b5193eb363508810ba3cded2ece1a5d885356330df9db0fcc45e8d35981e6254072778aea276cdf79f5280dfca707e5408dfe124420167fb12c414330b8c782b8c16392f32a5d60bc5a88dc2d06c73237d13e9f15479c08707ca0d9bc434b8d55150ea7110188d971565375ab1d65232ca7ecbdaa09811b651c170c4ba9d97d6499b5b1387005850750acaa92a9a9b5f1bef3ecf900a63d9390e8ab7a9e8a9cb78fd398e69732cc99811c20b6b0fedf054b31992c0548726c8e9e82454559ec77535d4c78ae7aafe1c987c0849a2841bb916c42accddb253855839a48c67594a4e0a92b25e34f4e9e4e6dbb21886bc763800a79b914d5fe828887fc7d031949b25900f236e4930a55ddd75a1f087fd175322e6c8ee4f3b841e112a8b40554e6f95f501eb3d50b4f442e32b0c22ace234a78011adf22f2107e8664cc93f35842f89aee9f6b4b8eb7fa30a1aad6821236e66ff8cee5053e2769ff6a2870b3be88aa8af11396117e09ed4b09225ee2f7911cade2babd1194b66ee3394151ac7d9bb08f1acbc46179dc516d9a20d9f93f66a1ec60a5bb0771b0ae7348e6d62b5e6929312a38caa4e38df683cef9d26370cf72a97111a8cc13044e221b6e11d0c169cb7f5d254fcad61138011324951bb16d08461ab7f294099d40b4d36a7d3516bee53f3e312a891ce576bd5b2d70d522b14ac02ff6b1e7cb978eebca25c9d8b37a34efd06794c6d81d9ae419b1f910ed52883dc08550ec90e04185d70de47686910af31bd48d72ae336ded1eae146c035970f636442d896a6781a671cde7da2b8ac9cb7fb8bcdf180cb14888765412a0169c3ede03923a82b44acff32b62b7a23d888a4b3f03ed8639cb27dc88f68b0136ec00be0f1d71213a4fc62e52b4350838038428dce219f10ebb86e135f85991be19bea16efbdae13b08a2a0cad9917bf828057f63c008782e1b375f75ed9d5d963a67d04f8066ad540a975d7b3d2de0c5e47150922321a5845a91a7c67b76f3fe11b82d073ec0e64b2d4f0d5ece6e891606cdf75328081910fded6f760426eb187de92c3731c0b6b0765f68c5bbfb71da411e59168df4a465189b0c70e6b8b7c8b56688fc6ced39349c29765f0752fd54a5d58a4923cb8c82a9c9566b981cb842326745c8926897d698e187577489f0a83a2a116c377cc808b5ef51a35653a18f1ad43528dd82cdaa85494505897d5c627fad3114f83544e882122a1233d289176fb6f6da140795d82aedd0909e4b71fa964c1f61d418b065587286e08d726842b014af080fe43a6f952053853950ac8a48f85e1cba7a92db6baa4d774cfbc8625820c45478fe2fd22d855fc0299c1608113b7b6650fe609aaf03c9bc6e34bf0d63d73c0da3c7e8046793e2f962f902b47d2c73e168a8ad37a8b77fe7580dc53af27763a26aa9c8c78436c4359162800449a821f6dc155ebd3445593b292ccae483c23ff1d2a0f8f29733f91e41a8228348028bc8c742fe6145bf5e0b7ab8c0059ac09d7cdd2d58dd478d33d390aedbad7170986041bf5e0e93f41f083c974b4b786a10d354031456f480152b7c19cdd67eeb3bd9ffa5a0688eaefb4e2666cfe4a0302281f18915866e69101e88ba73941a7b9b844cb24af3c5398be4fc9194f2f0dc803cfb4e70320bda407ecab90d321e2fcd5bd727e0fbb81da6a797e96748c9270bf0573d3edd9b6ed5a03eef2950fca35fd841ff37faf9fa0e465b2ad30208cf3a88d78228b050dd667df1666cb2919cb41e2794d6939b58d9eb5304a71c632e8b6fcc59d3a5da59825978c3f5fd3071db33aad2d7e3fed3acb1d2eef8ca7c29e7a25d8979594491c0965919f2bf55d4546323882553943efa748545a6343b6519ca89ad8e1bb0531e1c6a03cec6c39213b584e63e46baa6f347fa8bb749869da7da30f87fd46dfcb9db03ae618c69c170aec808682cf200f0fbd423e2734cf7d7a8b738ea4c81f4fdf29113cb75ca2a79464d7e0bbf5fb4d4b82b410ca60b60343decd498e3e54c90f06efd49cf1d0238b7b9b35736216d8d96c26c4818065358aaeea4d27634fd232024f44bd6e60a3bf4259c15c0ffc5711982c8068917e37d73dfd7d752d8ca8aac81cd25794e18211e9197e78132d7bde3f069b92cc73094b3f262046bb3eede133c0f8ef014b13b45ea6f354f5027d0df4541265e1df4d64431daa4f5694ea3d65df8e709f5e7804890ce14185d1e4e2ecb0817568681e2083b0b8c9cf777386d6d97fa1360bf56826336d526d3203a662a3f3ec13e27347e5f4dbdc28d8eec84aa8a9000e1b89483ff8fb5a419b727d2f7ce92f54ea9c3534fc0faff50eb1f42a3f6b72a85d8b09eeba5aa2ffbd00068ab5119664657975673a64b534c83887566f6ee7e16a3c075ed4ad33cd7f444dd87aa38b2392de59cbace1a4bb64698f9b08042b6f3422d48408f0d5115304b4996f4e8ec17189c3d8d3b22843a0fd409d3f66c1104a367ba361adbac9c64af874e26c01645ce452c5d11c9f36b834688acfd9bc74c948c7bebe35dbc896a9675fc9358582720b18273293cd0be25c80fce6e9222f16dcd184369c59eff6794ff0130faffd9207067cac98e74f5c39c4f8537caa8f33a9009ad11af27f5c1529b6204b45d41fc2f12dc46dcbf705579b33a102c6f43096aef513721ac963a40bf73a3450c2ac95ae20d78d90a45ea5d70fcfa7de8d9a31cf6db75148f2e5b5fa4984a3ae28faf934a3c69c15a7319fc7a7c7a27ecf85a1d2c4cb1fd060a3fdb82f12e30751bce7e017e6d2f312981cf487bf936a283a9ccbd9522fb0c4cb7426d2d93038faedaead4713acb9f561322dc5d527aa306905ee9ab98fa72390ec7ff4ad0ac677148d1548edefec0f92d550e7487e5dd288e860eefa447fb60e92a08e4e505921a953f7b20be5992b9ac8abb7a387a3e626314d71e98ea2c963f4f5ad7c4f7aa066ee1acf02abcae597a1426cc26aa3907fa3f11ffb25ab14ca3b78ca94e5481d987fe927ba17d6306d3d48e9af104c91e7d32097201963cd74134cef4606e4a64295d9cc9f62c8afb4a00aea86abd4ae3bb01fbb021913618940928890451047abbbb480258121c0666b8bd4c826d9b91d62206711190948abd7016a9ab4b56143cd87c69fa747a94e6c4760d812f222da0427d81341138f84164c7171eee854c56fd0c7e80124bf76c09e663d4cd99586f79d68a1b5ac77f568bde3d76b8b0faade6d28ff6ec4705c1742ee6395eb30b41bece9f620bc6b54dfaecb8bd4a2f0b0e1b40ccf9f00e3209e2da89379c08d447ed800a3e1f7ec2f4e611a053249146fe90a212411d243c6a39134133e5fc5d6e2917b7dbc74902f901524d8c3cfff75d269c23c9b5c634832c548a3515912"}, @NFC_ATTR_VENDOR_DATA={0x9a, 0x1f, "e06cd9d49c121e3592bf9cfffa532bed25452af50f32d96835fa8314190f69f851bf2803901df935a867b6412ccc53e968709a4d39e5043bd443f1ac55859a17007ed58f22ac1f0efaf87b0f90e5d5dd100fa0460aa36d60a8e6f7f1c29a39b971ab4d5a64829528d59eb88925fe66a3e571345c251c194f7b838594dc871930f40a747109230aec74d38fba9b6304b75ddd17bc0f85"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}, @NFC_ATTR_VENDOR_DATA={0x18, 0x1f, "4754d26be6a7189433d3bcea32558849676e5ff5"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x10f4}, 0x1, 0x0, 0x0, 0xc000}, 0x24000004)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_MGMT(r11, &(0x7f0000001440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, r12, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7f}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x4001)

6.063795ms ago: executing program 1 (id=1140):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
unshare(0x6020400)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000050000000200000004", @ANYRES64=r2], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$kcm(0x21, 0x2, 0x2)
sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fedbdf250500000008000400e7bf000040000180060001000200000008000800090000000600010002000000060002002c00000014000300fc020000000000000000000000000001080008001e5000003400018014000300200100000000000000000000000000010c0007000700000020000000070006006e710000060004004e22000040f39c7556a9ef000000000000008feec26354c76681060f4105d0a4a0c50e0cd2422f895b1ee43a8313aa5cb7c55efb78fdd70c67b94fcb41e840f1ac18493b31ff2426251a66ea4edcfecf847ebab66a8c6e4fbb6234"], 0x90}, 0x1, 0x0, 0x0, 0x40841}, 0x24004810)
ioctl$SIOCSIFHWADDR(r6, 0x8b07, &(0x7f0000000240)={'wlan1\x00', @random="8dffffffebff"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bc000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3800000010000108fe82cea730eecd34000f489ed372cc020000006717cd9ade82ee3f9000000cdd0c23a04f98ca6d21bd41422443ee518e4ca74d6d3fade59404a645e39eacb3b16533d42029443f8693eee3004e9c8292cc1ec7bd34c7de603f27000000000000000000b575870249f467601c77e4efe1199dc9e205b01f70b990eb71232de8622756edcffc0f705a7390e4fcd982025de65cecf960033a1b357a788672fc4738e467b684d29c3a54d55da0eb95e5eae98b4d55bf3237a2568dca3d121fc19d8689ef219c05ff297f2c8fb7b41e5b5a", @ANYRES32=r0, @ANYBLOB="000000000000000008001b000000000010001a800c002d800500080001000000", @ANYBLOB="032dd4cf9ce380db50197fb6d8afe57fd7a3c2f8f7f18b26f72554f9caa4bad0f0cef6f57136b1ed3a2fb215c9610815389e4853b90b3870f4580369beaa8ee275673f10289d23913303000000fd04f1441656199a8ab5d4d125ed294e21ddea28e13e488b616b76792186298d31ff8d5c626ab989f4f0f138a736c2573d33361885087344883b134f78b54e812db94e46325773b8acb0c1f2b496d9f7062089b2f714f3a1641cbcfcd2a398987e121c72a0c26a6cf0b09040532cc0f5b58c1d4bb6b24ee69db871fd78c2205e3d3249ffebf0601d9a65e219233d118dfffdf20e3e"], 0x38}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff0000000071104b000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x100, 0x8070bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x6, "ffebda75b06950415dc7d0f6ec9eb560"}}}]}, 0x44}}, 0x20000000)
socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r10 = accept$alg(r9, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
recvmmsg(r10, &(0x7f0000006100), 0x49f, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
syz_init_net_socket$ax25(0x3, 0x5, 0x0)

5.221203ms ago: executing program 3 (id=1141):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010102}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x54}}, 0x0) (async)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x118, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xb5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x19}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xa}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) (async)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xa}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x6c9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x20008810)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040), 0x10)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000005100001040000040000000000000000000565ead74dbfdaadd66cb76416f1ff9750329b1262094ee346c3d7c7c5adf150dd6fee153d115c38540d657482262a1d7aea84c9f066b63578624486bcebc11b08d95dff86957d7f70845c6dd98590da44f4db666fe5", @ANYRES32=0x0, @ANYRES16=r4], 0x44}}, 0x0)

0s ago: executing program 4 (id=1142):
r0 = socket(0x2, 0x3, 0x6)
bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x7, 0x28, 0x68, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x6}}}}, 0x36)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts.
[   76.495069][ T5813] cgroup: Unknown subsys name 'net'
[   76.609092][ T5813] cgroup: Unknown subsys name 'cpuset'
[   76.618752][ T5813] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   78.271237][ T5813] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   80.285018][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   80.294198][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   80.305015][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   80.315172][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   80.323607][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   80.437567][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   80.446186][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   80.453886][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   80.462374][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   80.470321][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   80.505592][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   80.516431][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   80.524007][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   80.538968][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   80.546866][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   80.574649][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   80.583178][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   80.595801][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   80.605645][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   80.617419][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   80.628661][ T5147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   80.636904][ T5147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   80.644653][ T5147] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   80.652987][ T5147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   80.661605][ T5147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   81.055442][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   81.272401][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   81.302687][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   81.439196][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.447653][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.455263][ T5825] bridge_slave_0: entered allmulticast mode
[   81.463631][ T5825] bridge_slave_0: entered promiscuous mode
[   81.510077][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.517567][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.524833][ T5825] bridge_slave_1: entered allmulticast mode
[   81.532052][ T5825] bridge_slave_1: entered promiscuous mode
[   81.545544][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   81.616300][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   81.660368][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.667594][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.674744][ T5831] bridge_slave_0: entered allmulticast mode
[   81.682373][ T5831] bridge_slave_0: entered promiscuous mode
[   81.716308][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.725720][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.732910][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.740407][ T5831] bridge_slave_1: entered allmulticast mode
[   81.747779][ T5831] bridge_slave_1: entered promiscuous mode
[   81.772431][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.779856][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.787155][ T5835] bridge_slave_0: entered allmulticast mode
[   81.794460][ T5835] bridge_slave_0: entered promiscuous mode
[   81.804291][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.859970][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.867721][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.875012][ T5835] bridge_slave_1: entered allmulticast mode
[   81.882222][ T5835] bridge_slave_1: entered promiscuous mode
[   81.891698][ T5825] team0: Port device team_slave_0 added
[   81.936440][ T5825] team0: Port device team_slave_1 added
[   81.955049][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.994598][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.007667][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.022981][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.030432][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.037704][ T5836] bridge_slave_0: entered allmulticast mode
[   82.045318][ T5836] bridge_slave_0: entered promiscuous mode
[   82.069927][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.101123][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.108520][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.115876][ T5836] bridge_slave_1: entered allmulticast mode
[   82.123162][ T5836] bridge_slave_1: entered promiscuous mode
[   82.131132][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.138314][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.164447][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.220633][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.227797][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.254248][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.278091][ T5831] team0: Port device team_slave_0 added
[   82.283890][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.291646][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.299570][ T5833] bridge_slave_0: entered allmulticast mode
[   82.306881][ T5833] bridge_slave_0: entered promiscuous mode
[   82.334348][ T5835] team0: Port device team_slave_0 added
[   82.341928][ T5831] team0: Port device team_slave_1 added
[   82.348101][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.355688][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.362856][ T5833] bridge_slave_1: entered allmulticast mode
[   82.370546][ T5833] bridge_slave_1: entered promiscuous mode
[   82.380166][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.392641][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.404584][ T5835] team0: Port device team_slave_1 added
[   82.408335][ T5828] Bluetooth: hci0: command tx timeout
[   82.514958][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.527072][ T5836] team0: Port device team_slave_0 added
[   82.533398][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.540555][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.566577][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.577202][ T5828] Bluetooth: hci1: command tx timeout
[   82.583117][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.590408][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.616886][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.628714][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.635992][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.645451][ T5828] Bluetooth: hci2: command tx timeout
[   82.667816][ T5147] Bluetooth: hci3: command tx timeout
[   82.668290][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.686883][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.709211][ T5836] team0: Port device team_slave_1 added
[   82.722822][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.730056][ T5828] Bluetooth: hci4: command tx timeout
[   82.735633][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.735668][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.779813][ T5825] hsr_slave_0: entered promiscuous mode
[   82.786880][ T5825] hsr_slave_1: entered promiscuous mode
[   82.815180][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.822206][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.848254][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.880444][ T5833] team0: Port device team_slave_0 added
[   82.888844][ T5833] team0: Port device team_slave_1 added
[   82.895832][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.902800][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.929197][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.020042][ T5835] hsr_slave_0: entered promiscuous mode
[   83.026746][ T5835] hsr_slave_1: entered promiscuous mode
[   83.033003][ T5835] debugfs: 'hsr0' already exists in 'hsr'
[   83.039246][ T5835] Cannot create hsr debugfs directory
[   83.064595][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.071913][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.098393][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.118052][ T5831] hsr_slave_0: entered promiscuous mode
[   83.124450][ T5831] hsr_slave_1: entered promiscuous mode
[   83.130898][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   83.136786][ T5831] Cannot create hsr debugfs directory
[   83.173668][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.180860][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.207653][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.284173][ T5836] hsr_slave_0: entered promiscuous mode
[   83.294312][ T5836] hsr_slave_1: entered promiscuous mode
[   83.301005][ T5836] debugfs: 'hsr0' already exists in 'hsr'
[   83.307007][ T5836] Cannot create hsr debugfs directory
[   83.497392][ T5833] hsr_slave_0: entered promiscuous mode
[   83.503798][ T5833] hsr_slave_1: entered promiscuous mode
[   83.510339][ T5833] debugfs: 'hsr0' already exists in 'hsr'
[   83.516211][ T5833] Cannot create hsr debugfs directory
[   83.852104][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   83.863562][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.871838][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   83.881354][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   83.889541][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.900152][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.933398][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   83.943063][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.008672][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   84.019477][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   84.028706][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   84.039007][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   84.048013][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   84.058979][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   84.070631][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   84.080532][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.186763][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   84.199496][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   84.225901][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   84.237531][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   84.262985][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   84.272691][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   84.281575][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   84.292357][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.362465][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.417139][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   84.431939][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   84.440415][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   84.450250][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   84.459423][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   84.469545][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   84.480664][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.493979][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   84.500951][ T5828] Bluetooth: hci0: command tx timeout
[   84.506943][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   84.517852][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.559114][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   84.582209][  T135] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.589661][  T135] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.600322][  T135] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.607460][  T135] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.645172][ T5828] Bluetooth: hci1: command tx timeout
[   84.662901][  T159] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.670141][  T159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.680492][  T159] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.687678][  T159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.728236][ T5828] Bluetooth: hci2: command tx timeout
[   84.733687][ T5828] Bluetooth: hci3: command tx timeout
[   84.751828][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   84.762402][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   84.772541][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   84.782957][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   84.792676][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   84.803336][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   84.810627][ T5828] Bluetooth: hci4: command tx timeout
[   84.826296][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   84.836279][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.898293][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.999160][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   85.048897][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.056227][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.089747][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.096972][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.228468][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.301701][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   85.318962][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.372861][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.380139][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.407406][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.414691][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.497745][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.552544][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.599355][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   85.630049][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.637294][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.682084][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.692402][ T5825] veth0_vlan: entered promiscuous mode
[   85.710750][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.717993][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.774406][ T5825] veth1_vlan: entered promiscuous mode
[   85.901457][ T5825] veth0_macvtap: entered promiscuous mode
[   85.951784][ T5825] veth1_macvtap: entered promiscuous mode
[   85.969250][ T5835] veth0_vlan: entered promiscuous mode
[   86.038316][ T5835] veth1_vlan: entered promiscuous mode
[   86.090866][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.130577][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.153868][ T1116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.178825][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.191026][ T1116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.212771][ T1116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.222393][ T1116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.356381][ T5831] veth0_vlan: entered promiscuous mode
[   86.391673][ T5835] veth0_macvtap: entered promiscuous mode
[   86.403077][ T5835] veth1_macvtap: entered promiscuous mode
[   86.435665][ T5831] veth1_vlan: entered promiscuous mode
[   86.468265][  T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.478985][  T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.488069][ T5836] veth0_vlan: entered promiscuous mode
[   86.507838][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.538415][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.551287][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.565624][ T5828] Bluetooth: hci0: command tx timeout
[   86.587798][ T5836] veth1_vlan: entered promiscuous mode
[   86.599786][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.608320][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.621138][  T135] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.642479][  T135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.653248][  T135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.677770][ T5831] veth0_macvtap: entered promiscuous mode
[   86.693573][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.715963][ T5831] veth1_macvtap: entered promiscuous mode
[   86.725293][ T5828] Bluetooth: hci1: command tx timeout
[   86.770176][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   86.807281][ T5828] Bluetooth: hci3: command tx timeout
[   86.812748][ T5828] Bluetooth: hci2: command tx timeout
[   86.834314][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.847317][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.865932][ T5836] veth0_macvtap: entered promiscuous mode
[   86.885391][ T5828] Bluetooth: hci4: command tx timeout
[   86.922702][ T5836] veth1_macvtap: entered promiscuous mode
[   86.956422][ T1116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.986051][ T1116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.061212][ T1116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.067599][ T5942] Zero length message leads to an empty skb
[   87.072254][ T5833] veth0_vlan: entered promiscuous mode
[   87.098344][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   87.111046][ T1116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.129129][ T5833] veth1_vlan: entered promiscuous mode
[   87.145264][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.153131][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.231635][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.332546][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.405615][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.413515][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.516247][ T1163] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.573302][ T1163] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.576222][ T5948] netlink: 'syz.0.8': attribute type 4 has an invalid length.
[   87.591374][ T5948] netlink: 240 bytes leftover after parsing attributes in process `syz.0.8'.
[   87.598828][ T1163] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.631609][ T1163] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.656152][ T5833] veth0_macvtap: entered promiscuous mode
[   87.681552][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.699212][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.754274][ T5833] veth1_macvtap: entered promiscuous mode
[   87.793495][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.806520][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.877567][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.912369][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.928029][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.991493][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.049329][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.059234][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.072891][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.080734][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.110032][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.160332][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.544515][ T5978] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.645255][ T5828] Bluetooth: hci0: command tx timeout
[   88.663608][  T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.687526][  T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.805538][ T5828] Bluetooth: hci1: command tx timeout
[   88.885982][ T5147] Bluetooth: hci3: command tx timeout
[   88.891474][ T5828] Bluetooth: hci2: command tx timeout
[   88.966181][ T5828] Bluetooth: hci4: command tx timeout
[   89.062862][ T5989] warning: `syz.2.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   89.185718][  T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.224051][  T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.325697][ T5997] syzkaller0: entered promiscuous mode
[   89.336482][ T5997] syzkaller0: entered allmulticast mode
[   89.483745][ T6011] bridge_slave_0: left allmulticast mode
[   89.501583][ T6011] bridge_slave_0: left promiscuous mode
[   89.535982][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.615813][ T6019] sctp: [Deprecated]: syz.2.27 (pid 6019) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.615813][ T6019] Use struct sctp_sack_info instead
[   89.671644][ T6011] bridge_slave_1: left allmulticast mode
[   89.729466][ T6011] bridge_slave_1: left promiscuous mode
[   89.790182][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.859062][ T6011] bond0: (slave bond_slave_0): Releasing backup interface
[   89.937925][ T6011] bond0: (slave bond_slave_1): Releasing backup interface
[   89.973943][ T6011] team0: Port device team_slave_0 removed
[   90.000837][ T6011] team0: Port device team_slave_1 removed
[   90.013409][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.028454][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.039961][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.050091][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.064296][ T6011] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   90.513460][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'.
[   90.664994][ T6056] netlink: 60 bytes leftover after parsing attributes in process `syz.3.35'.
[   90.695366][ T6056] unsupported nlmsg_type 40
[   90.880104][ T6053] netlink: 'syz.1.34': attribute type 12 has an invalid length.
[   90.888417][ T6067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'.
[   90.949558][ T6065] trusted_key: syz.3.38 sent an empty control message without MSG_MORE.
[   91.083277][ T6068] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[   91.106318][ T6069] macvlan2: entered promiscuous mode
[   91.111676][ T6069] macvlan2: entered allmulticast mode
[   91.480934][ T6090] netlink: 56 bytes leftover after parsing attributes in process `syz.2.45'.
[   91.941125][    T9] cfg80211: failed to load regulatory.db
[   92.079530][ T6120] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   92.104266][ T6120] syz.3.54 uses obsolete (PF_INET,SOCK_PACKET)
[   92.116281][ T6118] netlink: 204 bytes leftover after parsing attributes in process `syz.0.55'.
[   92.221869][ T6126] veth0: entered promiscuous mode
[   92.281463][ T6123] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[   92.306318][ T6124] veth0: left promiscuous mode
[   92.373085][ T6129] netlink: 'syz.0.58': attribute type 4 has an invalid length.
[   92.631478][ T6138] bond1 (unregistering): Released all slaves
[   92.682271][ T6132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.59'.
[   92.712816][ T6143] IPv6: sit1: Disabled Multicast RS
[   92.881009][ T6143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.62'.
[   93.246698][ T6172] netlink: 'syz.1.66': attribute type 10 has an invalid length.
[   93.279166][ T6172] team0: Port device dummy0 added
[   93.465219][ T6178] Driver unsupported XDP return value 0 on prog  (id 15) dev N/A, expect packet loss!
[   93.612928][ T6188] netlink: 'syz.3.71': attribute type 1 has an invalid length.
[   93.635050][ T6188] netlink: 224 bytes leftover after parsing attributes in process `syz.3.71'.
[   93.875774][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'.
[   93.902769][ T6200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.74'.
[   94.309257][ T6219] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.78'.
[   94.330183][ T6222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.80'.
[   94.337840][ T6219] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   94.359598][ T6222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.80'.
[   94.802385][ T6245] nft_compat: unsupported protocol 0
[   94.881255][ T6247] netlink: 'syz.1.85': attribute type 1 has an invalid length.
[   94.895865][ T6247] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.85'.
[   94.992205][ T6256] netlink: 'syz.4.89': attribute type 61 has an invalid length.
[   95.381867][ T6267] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   95.448025][ T6276] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.507821][ T6276] x_tables: duplicate underflow at hook 2
[   95.829153][ T6292] syzkaller0: entered promiscuous mode
[   95.834905][ T6292] syzkaller0: entered allmulticast mode
[   95.908317][ T6292] netlink: 'syz.4.101': attribute type 61 has an invalid length.
[   96.379952][ T6321] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[   96.397914][ T6319] netlink: 'syz.4.107': attribute type 16 has an invalid length.
[   97.130958][ T6355] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[   97.358716][ T6394] __nla_validate_parse: 7 callbacks suppressed
[   97.358738][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.115'.
[   97.702993][ T6355] bond1 (unregistering): Released all slaves
[   97.916178][ T6402] syzkaller0: entered promiscuous mode
[   97.925841][ T6402] syzkaller0: entered allmulticast mode
[   98.069646][ T6397] tipc: Started in network mode
[   98.074584][ T6397] tipc: Node identity 8e42777e6a43, cluster identity 4711
[   98.096687][ T6397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.129748][ T6414] sch_fq: defrate 0 ignored.
[   98.145699][ T6396] tipc: Resetting bearer <eth:syzkaller0>
[   98.281521][ T6396] tipc: Disabling bearer <eth:syzkaller0>
[   98.587343][ T6429] netlink: 'syz.3.122': attribute type 1 has an invalid length.
[   98.638321][ T6429] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.721493][ T6435] bond1: (slave veth3): Enslaving as an active interface with a down link
[   98.748150][ T6429] bond1: (slave dummy0): making interface the new active one
[   98.812174][ T6429] dummy0: entered promiscuous mode
[   98.817865][ T6435] netlink: 14 bytes leftover after parsing attributes in process `syz.3.122'.
[   98.851960][ T6429] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   98.873988][ T6437] syzkaller1: entered promiscuous mode
[   98.889491][ T6437] syzkaller1: entered allmulticast mode
[   99.008101][ T6435] bond1: (slave dummy0): Releasing active interface
[   99.017437][ T6435] dummy0 (unregistering): left promiscuous mode
[   99.037239][ T6441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.126'.
[   99.049301][ T6455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.129'.
[   99.071740][ T6441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.126'.
[   99.353543][ T6467] syzkaller1: entered promiscuous mode
[   99.368908][ T6467] syzkaller1: entered allmulticast mode
[   99.503111][ T6470] netlink: 'syz.4.134': attribute type 17 has an invalid length.
[   99.514515][ T6472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.562784][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'.
[   99.574737][ T6470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.134'.
[   99.617308][ T6474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.635180][ T6472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.694059][ T6471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.473565][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.149'.
[  100.546650][ T6530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.150'.
[  100.554069][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.149'.
[  100.776257][ T6536] block nbd0: not configured, cannot reconfigure
[  100.913139][ T6544] syzkaller0: entered promiscuous mode
[  100.928823][ T6544] syzkaller0: entered allmulticast mode
[  132.888173][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  143.050203][ T6599] netlink: 192 bytes leftover after parsing attributes in process `syz.3.167'.
[  143.136128][ T6610] vlan2: entered allmulticast mode
[  143.141319][ T6610] bond0: entered allmulticast mode
[  143.188763][ T6605] netlink: 14 bytes leftover after parsing attributes in process `syz.4.168'.
[  143.232573][ T6610] bond_slave_0: entered allmulticast mode
[  143.254062][ T6610] bond_slave_1: entered allmulticast mode
[  143.301949][ T6605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.302709][ T6619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.171'.
[  143.322769][ T6605] bond_slave_0: left allmulticast mode
[  143.344454][ T6605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.376477][ T6605] bond_slave_1: left allmulticast mode
[  143.383716][ T6605] bond0 (unregistering): Released all slaves
[  143.545594][ T6632] netlink: 'syz.4.172': attribute type 2 has an invalid length.
[  143.554219][ T6632] netlink: 'syz.4.172': attribute type 1 has an invalid length.
[  143.583327][ T6633] netlink: 'syz.1.171': attribute type 1 has an invalid length.
[  143.671018][ T6637] syzkaller0: entered allmulticast mode
[  143.838885][ T6642] IPv6: NLM_F_CREATE should be specified when creating new route
[  144.043015][ T6651] syzkaller0: entered promiscuous mode
[  144.048740][ T6651] syzkaller0: entered allmulticast mode
[  145.135896][ T6661] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  145.172881][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'.
[  145.496592][ T6675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.186'.
[  145.498911][ T6676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.186'.
[  145.532907][ T6676] netlink: 'syz.3.186': attribute type 1 has an invalid length.
[  145.620025][ T6678] bond2: (slave geneve2): making interface the new active one
[  145.628326][ T6678] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  145.638450][ T6381] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  145.648263][ T6381] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  145.657358][ T6381] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  145.666384][ T6381] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  146.287944][ T6619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  146.617658][ T6685] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  146.673964][ T6693] pimreg: entered allmulticast mode
[  147.231558][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.198'.
[  147.251038][ T6722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.198'.
[  147.423555][ T6736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.198'.
[  147.673245][ T6748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.833737][ T6757] netlink: 84 bytes leftover after parsing attributes in process `syz.4.206'.
[  147.953342][ T6759] netlink: 'syz.4.206': attribute type 12 has an invalid length.
[  148.202915][ T6769] delete_channel: no stack
[  148.366527][ T6777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.214'.
[  148.406559][ T6778] netlink: 184 bytes leftover after parsing attributes in process `syz.2.215'.
[  148.526975][ T6783] netlink: 'syz.4.217': attribute type 1 has an invalid length.
[  148.566899][ T6785] netlink: 76 bytes leftover after parsing attributes in process `syz.1.216'.
[  148.584682][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.217'.
[  148.640105][ T6788] netlink: 88 bytes leftover after parsing attributes in process `syz.0.219'.
[  148.683603][ T6792] netlink: 104 bytes leftover after parsing attributes in process `syz.2.218'.
[  148.889826][ T6797] netlink: 'syz.3.220': attribute type 11 has an invalid length.
[  148.920857][ T6794] syzkaller0: entered promiscuous mode
[  148.931653][ T6794] syzkaller0: entered allmulticast mode
[  149.072146][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'.
[  149.120406][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'.
[  149.148903][ T6806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.222'.
[  149.180153][ T6805] netlink: 'syz.4.223': attribute type 1 has an invalid length.
[  150.443823][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'.
[  150.460242][ T6824] ip6t_srh: unknown srh invflags 4000
[  151.150846][ T6853] netlink: 'syz.3.239': attribute type 3 has an invalid length.
[  151.615179][ T6875] netdevsim netdevsim4: Direct firmware load for .. @ failed with error -2
[  151.652655][ T6875] netdevsim netdevsim4: Falling back to sysfs fallback for: .. @
[  151.989807][ T6896] netlink: 'syz.2.254': attribute type 1 has an invalid length.
[  152.048131][ T6903] netlink: 'syz.1.256': attribute type 1 has an invalid length.
[  152.056790][ T6895] can: request_module (can-proto-0) failed.
[  152.256479][ T6912] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  152.272214][ T6906] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  152.313258][ T6906] bond1 (unregistering): Released all slaves
[  152.393028][ T1163] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  152.445285][ T1163] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  152.454067][ T1163] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  152.494847][ T1163] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  152.641357][ T6923] bond0: entered promiscuous mode
[  152.657125][ T6923] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.690001][ T6930] sock: sock_timestamping_bind_phc: sock not bind to device
[  152.746117][ T6924] bridge2: entered promiscuous mode
[  152.752236][ T6924] bond0: (slave bridge2): Enslaving as an active interface with an up link
[  155.785299][ T6934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  155.805915][ T6961] netlink: 'syz.1.269': attribute type 11 has an invalid length.
[  155.826639][ T6961] __nla_validate_parse: 14 callbacks suppressed
[  155.826659][ T6961] netlink: 224 bytes leftover after parsing attributes in process `syz.1.269'.
[  156.063141][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'.
[  156.267603][ T6995] netlink: 'syz.4.279': attribute type 1 has an invalid length.
[  156.401533][ T7008] netlink: 'syz.3.278': attribute type 20 has an invalid length.
[  156.423850][ T7008] IPv6: NLM_F_CREATE should be specified when creating new route
[  156.505481][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.282'.
[  157.093895][ T7042] netlink: 'syz.4.291': attribute type 21 has an invalid length.
[  157.170018][ T7048] bridge1: the hash_elasticity option has been deprecated and is always 16
[  157.751316][ T7060] infiniband syz1: set down
[  157.757107][ T7060] infiniband syz1: added ipvlan1
[  157.822986][ T7060] RDS/IB: syz1: added
[  157.841382][ T7060] smc: adding ib device syz1 with port count 1
[  157.890138][ T7060] smc:    ib device syz1 port 1 has no pnetid
[  157.981220][ T7085] netlink: 76 bytes leftover after parsing attributes in process `syz.3.304'.
[  158.043050][ T7085] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  158.132418][ T7089] tipc: Started in network mode
[  158.137988][ T7089] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  158.145759][ T7089] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  158.188646][ T7090] vlan2: entered allmulticast mode
[  158.193876][ T7090] bond0: entered allmulticast mode
[  158.224388][ T7096] netlink: 14 bytes leftover after parsing attributes in process `syz.3.308'.
[  158.227846][ T7090] bond_slave_0: entered allmulticast mode
[  158.254960][ T7090] bond_slave_1: entered allmulticast mode
[  158.370068][ T7096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.425061][ T7096] bond_slave_0: left allmulticast mode
[  158.449294][ T7096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.466247][ T7096] bond_slave_1: left allmulticast mode
[  158.487331][ T7096] bond0 (unregistering): Released all slaves
[  158.598272][ T7112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.310'.
[  158.601996][ T7107] syzkaller1: entered promiscuous mode
[  158.665227][ T7107] syzkaller1: entered allmulticast mode
[  158.838492][ T7116] netlink: 'syz.2.311': attribute type 4 has an invalid length.
[  159.030744][ T7133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.318'.
[  159.279626][ T7142] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[  159.292154][ T5921] tipc: Node number set to 10136234
[  159.351508][ T7147] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  159.397344][ T7146] netlink: 340 bytes leftover after parsing attributes in process `syz.3.323'.
[  159.410860][ T7147] team0: Device macvlan2 is already an upper device of the team interface
[  159.533047][ T7158] netlink: 'syz.3.326': attribute type 1 has an invalid length.
[  159.617528][ T7162] netlink: 232 bytes leftover after parsing attributes in process `syz.0.328'.
[  159.665703][ T7162] netlink: 232 bytes leftover after parsing attributes in process `syz.0.328'.
[  159.939829][ T7176] syzkaller0: entered promiscuous mode
[  159.948396][ T7176] syzkaller0: entered allmulticast mode
[  160.533899][ T7190] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  160.917371][ T7205] __nla_validate_parse: 5 callbacks suppressed
[  160.917392][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'.
[  161.025870][ T7209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  161.221439][ T7222] Cannot find add_set index 2 as target
[  161.382273][ T7228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.427955][ T7231] Bluetooth: MGMT ver 1.23
[  161.728637][ T7238] netlink: 'syz.0.355': attribute type 1 has an invalid length.
[  161.789907][ T7242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.357'.
[  161.811078][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'.
[  161.866295][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'.
[  161.900475][ T7242] netlink: 'syz.2.357': attribute type 30 has an invalid length.
[  162.526273][ T7273] netlink: 'syz.1.365': attribute type 1 has an invalid length.
[  162.534372][ T7273] netlink: 96 bytes leftover after parsing attributes in process `syz.1.365'.
[  162.545161][ T7273] netlink: 1 bytes leftover after parsing attributes in process `syz.1.365'.
[  162.554127][ T7273] netlink: 'syz.1.365': attribute type 1 has an invalid length.
[  162.562532][ T7273] netlink: 'syz.1.365': attribute type 8 has an invalid length.
[  162.571643][ T7273] netlink: 606 bytes leftover after parsing attributes in process `syz.1.365'.
[  162.582829][ T7273] netlink: 'syz.1.365': attribute type 21 has an invalid length.
[  162.599917][ T7273] IPv6: NLM_F_CREATE should be specified when creating new route
[  162.832341][ T7277] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  163.234585][ T7285] Bluetooth: MGMT ver 1.23
[  163.457393][ T7289] block nbd0: not configured, cannot reconfigure
[  163.507549][ T7293] netlink: 272 bytes leftover after parsing attributes in process `syz.4.374'.
[  163.944043][ T7312] netlink: set zone limit has 4 unknown bytes
[  164.020905][ T7314] netlink: set zone limit has 4 unknown bytes
[  164.132617][ T5964] IPVS: starting estimator thread 0...
[  164.147366][ T7329] IPVS: nq: FWM 3 0x00000003 - no destination available
[  164.178883][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'.
[  164.240501][ T7338] ieee802154 phy1 wpan1: encryption failed: -22
[  164.255641][ T7331] IPVS: using max 27 ests per chain, 64800 per kthread
[  164.282690][ T7332] bond2: option fail_over_mac: invalid value (16)
[  164.297644][ T7332] bond2 (unregistering): Released all slaves
[  164.396867][ T7348] ieee802154 phy1 wpan1: encryption failed: -22
[  164.431464][ T7333] syzkaller0: entered promiscuous mode
[  164.437324][ T7333] syzkaller0: entered allmulticast mode
[  164.642887][ T7357] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.389'.
[  166.102192][ T7393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  166.179035][ T7397] Can't find ip_set type has`:net,port
[  166.317112][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.401'.
[  166.400989][ T7417] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.412454][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'.
[  166.446534][ T7415] tap0: tun_chr_ioctl cmd 1074025676
[  166.451910][ T7415] tap0: owner set to 0
[  166.461692][ T7418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.716867][ T7431] netlink: 10 bytes leftover after parsing attributes in process `syz.0.409'.
[  166.844382][ T7437] netlink: 148 bytes leftover after parsing attributes in process `syz.2.411'.
[  166.869474][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'.
[  166.941039][ T7443] ipt_REJECT: TCP_RESET invalid for non-tcp
[  167.020751][ T7445] Cannot find add_set index 0 as target
[  167.146042][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'.
[  167.208196][ T7451] netlink: 144 bytes leftover after parsing attributes in process `syz.4.416'.
[  167.525058][ T7471] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  168.007036][ T7487] netlink: 'syz.3.425': attribute type 10 has an invalid length.
[  168.047661][ T7487] team0: Device vxcan1 is of different type
[  168.257975][ T7499] netlink: 'syz.3.429': attribute type 1 has an invalid length.
[  168.367636][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.430'.
[  168.463017][ T7506] netlink: 'syz.1.430': attribute type 1 has an invalid length.
[  168.615646][ T7516] bond2: (slave gretap1): making interface the new active one
[  168.624340][ T7516] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  169.189867][ T7553] netlink: 'syz.3.446': attribute type 10 has an invalid length.
[  169.200313][ T7553] team0: Device vxcan1 is of different type
[  169.299593][ T7559] netlink: 'syz.4.448': attribute type 2 has an invalid length.
[  169.336272][ T7561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.447'.
[  169.345427][ T7559] netlink: 'syz.4.448': attribute type 2 has an invalid length.
[  169.418924][ T7567] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  169.439255][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'.
[  169.462492][ T7567] netlink: 'syz.3.450': attribute type 1 has an invalid length.
[  169.498282][ T7567] netlink: 'syz.3.450': attribute type 2 has an invalid length.
[  169.549090][ T7567] netlink: 'syz.3.450': attribute type 2 has an invalid length.
[  169.594066][ T7567] netlink: 'syz.3.450': attribute type 2 has an invalid length.
[  169.998772][ T7597] IPVS: set_ctl: invalid protocol: 92 172.30.1.3:20002
[  170.900428][ T7626] NCSI netlink: No device for ifindex 0
[  171.353980][ T7649] bridge4: entered promiscuous mode
[  171.359852][ T7649] bridge4: entered allmulticast mode
[  171.435088][ T7649] bond1: (slave bridge4): Enslaving as an active interface with an up link
[  171.627733][ T7663] syzkaller0: entered promiscuous mode
[  171.641506][ T7663] syzkaller0: entered allmulticast mode
[  171.829495][ T7680] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  171.906298][ T7680] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  171.919822][ T7680] bond1: (slave ip6gre1): making interface the new active one
[  171.928370][ T7680] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  171.989756][ T7688] __nla_validate_parse: 75 callbacks suppressed
[  171.989776][ T7688] netlink: 240 bytes leftover after parsing attributes in process `syz.1.485'.
[  172.286376][ T7702] 8021q: adding VLAN 0 to HW filter on device bond3
[  172.321036][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'.
[  172.336080][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'.
[  172.402536][ T7706] bond4: option all_slaves_active: invalid value (222)
[  172.426403][ T7706] bond4 (unregistering): Released all slaves
[  172.524153][ T7702] bond3: (slave veth0_to_bond): making interface the new active one
[  172.534457][ T7702] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  172.697464][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'.
[  172.727206][ T7722] xt_hashlimit: size too large, truncated to 1048576
[  172.791703][ T7720] bond2: option coupled_control: invalid value (192)
[  172.806330][ T7720] bond2 (unregistering): Released all slaves
[  173.740215][ T7759] validate_nla: 73 callbacks suppressed
[  173.740244][ T7759] netlink: 'syz.1.500': attribute type 3 has an invalid length.
[  173.761854][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'.
[  173.774198][ T7762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.501'.
[  173.809383][ T1151] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  173.825071][ T7762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.501'.
[  173.838889][ T1151] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  173.862894][ T1151] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  173.874016][ T1151] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.651794][ T7667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  174.665745][ T7768] netlink: 220 bytes leftover after parsing attributes in process `syz.2.502'.
[  174.843046][ T7776] openvswitch: netlink: Duplicate or invalid key (type 0).
[  174.877555][ T7776] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.128857][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'.
[  175.240659][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'.
[  175.648403][ T7824] netlink: 'syz.3.513': attribute type 1 has an invalid length.
[  176.938671][ T7900] openvswitch: netlink: Duplicate or invalid key (type 0).
[  176.947335][ T7905] netlink: 'syz.3.531': attribute type 8 has an invalid length.
[  176.968835][ T7900] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.164569][ T7900] x_tables: ip_tables: icmp match: only valid for protocol 1
[  177.466974][ T7930] netlink: 'syz.4.537': attribute type 21 has an invalid length.
[  177.517126][ T7930] __nla_validate_parse: 11 callbacks suppressed
[  177.517149][ T7930] netlink: 156 bytes leftover after parsing attributes in process `syz.4.537'.
[  177.942542][ T7948] netlink: 92 bytes leftover after parsing attributes in process `syz.4.541'.
[  177.954036][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.541'.
[  178.452192][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'.
[  178.488225][ T7967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.547'.
[  178.615890][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'.
[  179.380327][ T7870] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  179.390092][ T7910] netlink: 'syz.1.534': attribute type 9 has an invalid length.
[  179.608598][ T8003] netlink: 32 bytes leftover after parsing attributes in process `syz.0.556'.
[  179.720910][ T8005] syzkaller1: entered promiscuous mode
[  179.748358][ T8005] syzkaller1: entered allmulticast mode
[  180.181434][ T8028] xt_TCPMSS: Only works on TCP SYN packets
[  180.278828][ T8034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'.
[  180.333951][ T8034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'.
[  180.537619][ T8057] netlink: 'syz.1.565': attribute type 3 has an invalid length.
[  180.546385][ T8057] netlink: 'syz.1.565': attribute type 1 has an invalid length.
[  180.556921][ T8057] netlink: 212 bytes leftover after parsing attributes in process `syz.1.565'.
[  180.576722][ T8057] NCSI netlink: No device for ifindex 813332851
[  180.664459][ T8055] syzkaller0: entered promiscuous mode
[  180.681862][ T8055] syzkaller0: entered allmulticast mode
[  181.256915][ T5964] IPVS: starting estimator thread 0...
[  181.303469][ T8097] ip6erspan1: entered allmulticast mode
[  181.340772][   T30] audit: type=1107 audit(1776049484.004:2): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  181.358138][ T8096] IPVS: using max 30 ests per chain, 72000 per kthread
[  181.909941][ T8132] syzkaller1: entered promiscuous mode
[  181.922405][ T8132] syzkaller1: entered allmulticast mode
[  182.097858][ T8145] x_tables: duplicate underflow at hook 1
[  182.139001][ T8145] ipt_ECN: cannot use operation on non-tcp rule
[  182.307542][ T8158] netlink: 'syz.3.592': attribute type 16 has an invalid length.
[  182.315676][ T8158] netlink: 'syz.3.592': attribute type 3 has an invalid length.
[  183.719932][ T8240] __nla_validate_parse: 7 callbacks suppressed
[  183.719954][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.615'.
[  183.950858][ T8253] tipc: Started in network mode
[  183.956571][ T8253] tipc: Node identity ac14140f, cluster identity 4711
[  183.964191][ T8253] tipc: New replicast peer: 172.20.20.187
[  183.978092][ T8253] tipc: Enabled bearer <udp:syz2>, priority 10
[  184.026417][ T8253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.620'.
[  184.125323][ T1163] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  184.184380][ T1163] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  184.258132][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.621'.
[  184.325592][ T1163] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  184.334416][ T1163] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  184.601212][ T8266] bond2 (unregistering): Released all slaves
[  184.939801][ T8293] syzkaller0: entered promiscuous mode
[  184.948154][ T8293] syzkaller0: entered allmulticast mode
[  185.056440][   T24] tipc: Node number set to 2886997007
[  185.220294][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'.
[  185.244333][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'.
[  185.303142][ T8314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'.
[  185.323178][ T8314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'.
[  185.411042][ T8313] ipvlan2: entered allmulticast mode
[  185.438234][ T8313] syz_tun: entered allmulticast mode
[  185.591921][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'.
[  185.601791][ T8321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.635'.
[  185.619213][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'.
[  185.788434][ T8332] netlink: 'syz.3.638': attribute type 11 has an invalid length.
[  185.827189][ T8333] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component
[  185.839920][ T8332] netlink: 'syz.3.638': attribute type 11 has an invalid length.
[  185.960859][ T8336] netlink: 'syz.2.640': attribute type 16 has an invalid length.
[  185.988852][ T8336] netlink: 'syz.2.640': attribute type 17 has an invalid length.
[  186.296203][ T8336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  186.758968][ T8372] tipc: Enabled bearer <eth:vlan0>, priority 24
[  187.137417][ T8387] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  187.888150][ T5917] tipc: Node number set to 3825301374
[  188.025403][ T8433] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0
[  188.116559][ T8436] gre2: entered promiscuous mode
[  188.390122][ T8450] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  189.428970][ T8476] __nla_validate_parse: 6 callbacks suppressed
[  189.428991][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'.
[  190.047237][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'.
[  190.435782][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'.
[  190.461708][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'.
[  190.480677][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'.
[  190.633873][ T8545] openvswitch: netlink: Flow actions attr not present in new flow.
[  190.777189][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.701'.
[  190.920777][ T8550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.701'.
[  191.021926][ T8564] netlink: 144 bytes leftover after parsing attributes in process `syz.2.705'.
[  191.222258][ T8576] netlink: 36 bytes leftover after parsing attributes in process `syz.0.706'.
[  191.259586][ T6700] udevd[6700]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  191.278042][ T8565] syzkaller0: entered promiscuous mode
[  191.284090][ T8565] syzkaller0: entered allmulticast mode
[  191.327075][ T8581] netlink: 'syz.4.710': attribute type 11 has an invalid length.
[  191.491457][ T8586] netlink: 'syz.1.712': attribute type 1 has an invalid length.
[  191.500168][ T8586] netlink: 228 bytes leftover after parsing attributes in process `syz.1.712'.
[  191.710223][ T8595] netlink: 'syz.1.714': attribute type 10 has an invalid length.
[  192.656823][ T8577] netlink: 'syz.2.709': attribute type 1 has an invalid length.
[  192.664905][ T8577] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.855359][ T8599] Cannot find add_set index 2 as target
[  193.054143][ T8617] netlink: 'syz.1.721': attribute type 33 has an invalid length.
[  193.105937][ T8617] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  193.129183][ T8617] bond4 (unregistering): Released all slaves
[  193.226702][ T8629] netlink: 'syz.0.722': attribute type 1 has an invalid length.
[  193.281344][ T8628] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20003
[  193.594329][ T8642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  193.601904][ T8642] IPv6: NLM_F_CREATE should be set when creating new route
[  194.057262][ T8663] netlink: 'syz.4.730': attribute type 1 has an invalid length.
[  194.196017][ T8672] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  194.382056][ T8661] tipc: Started in network mode
[  194.387520][ T8661] tipc: Node identity 4, cluster identity 4711
[  194.393734][ T8661] tipc: Node number set to 4
[  194.399253][ T8680] IPv6: NLM_F_REPLACE set, but no existing node found!
[  194.428717][ T8676] xt_hashlimit: size too large, truncated to 1048576
[  195.115060][ T8717] __nla_validate_parse: 6 callbacks suppressed
[  195.115092][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'.
[  195.208344][ T5828] block nbd0: Receive control failed (result -32)
[  195.377881][ T8723] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.742'.
[  196.017056][ T8754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.750'.
[  196.107425][ T8768] x_tables: duplicate entry at hook 2
[  196.216558][ T8772] veth0: entered promiscuous mode
[  196.318267][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'.
[  196.582789][ T8770] veth0: left promiscuous mode
[  197.067723][ T8819] ip6tnl1: entered promiscuous mode
[  197.098101][ T8814] netlink: 'syz.1.763': attribute type 1 has an invalid length.
[  197.279768][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'.
[  197.492784][ T8835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.543737][ T8844] netlink: 216 bytes leftover after parsing attributes in process `syz.1.768'.
[  197.561136][ T8839] syzkaller0: entered promiscuous mode
[  197.567478][ T8844] netlink: 'syz.1.768': attribute type 2 has an invalid length.
[  197.575815][ T8839] syzkaller0: entered allmulticast mode
[  197.581563][ T8844] netlink: 'syz.1.768': attribute type 1 has an invalid length.
[  197.620391][ T8846] syzkaller0: MTU too low for tipc bearer
[  197.631343][ T8846] tipc: Disabling bearer <eth:syzkaller0>
[  197.937732][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'.
[  197.967348][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'.
[  197.983300][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'.
[  198.050165][ T8866] netlink: 'syz.0.773': attribute type 1 has an invalid length.
[  198.350542][ T8895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.778'.
[  198.400663][ T8897] syz.3.778 uses old SIOCAX25GETINFO
[  198.986297][ T8930] openvswitch: netlink: Key type 30 is not supported
[  199.032837][ T8934] openvswitch: netlink: Key type 30 is not supported
[  199.926616][ T8973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  200.198682][ T8989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.307117][ T8993] vcan0: tx drop: invalid da for name 0x0000400000000000
[  200.319676][ T8996] openvswitch: netlink: Missing key (keys=40, expected=80)
[  200.351875][ T8999] openvswitch: netlink: Missing key (keys=40, expected=80)
[  200.525476][ T9010] __nla_validate_parse: 7 callbacks suppressed
[  200.525494][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'.
[  200.525496][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'.
[  200.525525][ T9009] netlink: 'syz.0.802': attribute type 6 has an invalid length.
[  200.580648][ T9010] netlink: 'syz.0.802': attribute type 6 has an invalid length.
[  200.622170][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'.
[  200.658765][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'.
[  200.680350][ T9009] netlink: 'syz.0.802': attribute type 6 has an invalid length.
[  200.702664][ T9010] netlink: 'syz.0.802': attribute type 6 has an invalid length.
[  200.904616][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'.
[  200.990707][ T9035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.805'.
[  201.364137][ T9046] wireguard0: entered promiscuous mode
[  201.493589][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.809'.
[  201.568816][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.809'.
[  202.143773][ T9077] netlink: 'syz.3.810': attribute type 21 has an invalid length.
[  202.151927][ T9077] netlink: 152 bytes leftover after parsing attributes in process `syz.3.810'.
[  202.804863][ T5828] Bluetooth: hci4: command tx timeout
[  203.768764][ T9023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  204.022632][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'.
[  204.108747][ T9084] hsr_slave_0: left promiscuous mode
[  204.128117][ T9084] hsr_slave_1: left promiscuous mode
[  204.146409][ T9087] netlink: 'syz.4.811': attribute type 10 has an invalid length.
[  204.194152][ T9096] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  204.273274][ T9108] netlink: 'syz.1.816': attribute type 1 has an invalid length.
[  204.318774][ T9093] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  204.341595][ T9093] bond2: (slave lo): Enslaving as an active interface with an up link
[  204.362506][ T9108] netlink: 'syz.1.816': attribute type 1 has an invalid length.
[  204.371345][ T9108] netlink: 'syz.1.816': attribute type 1 has an invalid length.
[  204.380028][ T9108] netlink: 'syz.1.816': attribute type 1 has an invalid length.
[  204.389798][ T9108] netlink: 'syz.1.816': attribute type 1 has an invalid length.
[  204.409607][ T9093] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  204.425811][ T9108] netlink: 'syz.1.816': attribute type 1 has an invalid length.
[  204.454104][ T9108] netlink: 'syz.1.816': attribute type 1 has an invalid length.
[  204.505110][ T9108] netlink: 'syz.1.816': attribute type 1 has an invalid length.
[  205.156076][ T9139] tipc: Failed to obtain node identity
[  205.162145][ T9139] tipc: Enabling of bearer <ib:gretap0> rejected, failed to enable media
[  205.529309][ T9163] bridge_slave_1: left allmulticast mode
[  205.558142][ T9163] bridge_slave_1: left promiscuous mode
[  205.586402][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.619523][ T9163] bridge_slave_0: left allmulticast mode
[  205.637449][ T9163] bridge_slave_0: left promiscuous mode
[  205.653333][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.703640][ T9163] tipc: Disabling bearer <eth:vlan0>
[  205.713821][ T9175] __nla_validate_parse: 198 callbacks suppressed
[  205.713841][ T9175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.828'.
[  206.359245][ T9206] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  206.620060][ T9215] veth0_macvtap: left promiscuous mode
[  206.649735][ T5837] Bluetooth: hci3: command 0x0406 tx timeout
[  206.656403][ T5837] Bluetooth: hci2: command 0x0406 tx timeout
[  206.662537][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[  206.722434][ T9224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.837'.
[  206.767997][ T9224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.837'.
[  206.867635][ T9228] Bluetooth: MGMT ver 1.23
[  206.948978][ T9231] netlink: 348 bytes leftover after parsing attributes in process `syz.2.838'.
[  207.109251][ T9240] can: request_module (can-proto-0) failed.
[  207.306691][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'.
[  207.383810][ T9259] validate_nla: 58 callbacks suppressed
[  207.383832][ T9259] netlink: 'syz.4.845': attribute type 61 has an invalid length.
[  207.427679][ T9258] netlink: 256 bytes leftover after parsing attributes in process `syz.4.845'.
[  207.493469][ T9267] netlink: 76 bytes leftover after parsing attributes in process `syz.2.847'.
[  207.526094][ T9268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.847'.
[  207.652356][ T9277] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  207.976598][ T9287] bond3: Unable to set up delay as MII monitoring is disabled
[  208.035140][ T9287] bond3 (unregistering): Released all slaves
[  208.396815][ T9317] bond4: entered allmulticast mode
[  208.414118][ T9322] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.857'.
[  208.481132][ T9322] netlink: Unknown conntrack attr (type=2304, max=9)
[  208.732107][ T9322] bridge0: entered promiscuous mode
[  208.755109][ T9322] bridge0: entered allmulticast mode
[  208.829489][ T9322] bond4: (slave bridge0): Enslaving as an active interface with an up link
[  209.001082][ T9343] syzkaller0: entered promiscuous mode
[  209.006812][ T9343] syzkaller0: entered allmulticast mode
[  209.103714][ T9350] netlink: 'syz.1.862': attribute type 39 has an invalid length.
[  209.438626][ T9365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.870'.
[  210.040813][ T9400] team0: Cannot enslave team device to itself
[  210.051273][ T9401] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  210.127015][ T9401] netlink: 'syz.0.881': attribute type 21 has an invalid length.
[  210.156311][ T9401] netlink: 'syz.0.881': attribute type 21 has an invalid length.
[  210.576298][ T9425] netlink: 'syz.1.887': attribute type 5 has an invalid length.
[  210.965903][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  211.153342][ T9458] siw: device registration error -23
[  211.387195][ T9468] sctp: [Deprecated]: syz.2.898 (pid 9468) Use of struct sctp_assoc_value in delayed_ack socket option.
[  211.387195][ T9468] Use struct sctp_sack_info instead
[  211.631552][ T9476] __nla_validate_parse: 4 callbacks suppressed
[  211.631572][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.901'.
[  211.663294][ T9476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.901'.
[  212.018753][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.736224][ T9485] netlink: 'syz.2.902': attribute type 1 has an invalid length.
[  212.746089][ T9485] netlink: 'syz.2.902': attribute type 1 has an invalid length.
[  212.759805][ T9485] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.902'.
[  212.804398][ T9490] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  212.815563][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.837908][ T9485] netlink: 'syz.2.902': attribute type 1 has an invalid length.
[  212.864417][ T5921] IPVS: starting estimator thread 0...
[  212.930746][ T9495] nftables ruleset with unbound set
[  212.946222][ T9495] sctp: [Deprecated]: syz.4.904 (pid 9495) Use of struct sctp_assoc_value in delayed_ack socket option.
[  212.946222][ T9495] Use struct sctp_sack_info instead
[  212.963116][ T9492] IPVS: using max 27 ests per chain, 64800 per kthread
[  212.973060][ T9485] 8021q: adding VLAN 0 to HW filter on device bond5
[  213.037556][ T9500] bond5: (slave geneve2): making interface the new active one
[  213.050961][ T9500] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  213.060369][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  213.133014][ T9508] 8021q: adding VLAN 0 to HW filter on device batadv1
[  213.236703][ T9505] netlink: 'syz.0.907': attribute type 1 has an invalid length.
[  213.266143][ T9505] netlink: 'syz.0.907': attribute type 3 has an invalid length.
[  213.279689][ T9512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.909'.
[  213.307618][ T9505] netlink: 224 bytes leftover after parsing attributes in process `syz.0.907'.
[  213.635779][ T9533] set match dimension is over the limit!
[  213.788410][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'.
[  213.965975][ T9550] netlink: 84 bytes leftover after parsing attributes in process `syz.3.919'.
[  214.085034][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.180794][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.426928][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'.
[  214.579382][ T9587] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  214.649459][ T9592] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  214.665619][ T9592] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  214.819380][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.828119][ T5964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.863303][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.018412][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'.
[  215.027949][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'.
[  215.233632][ T9622] xt_hashlimit: size too large, truncated to 1048576
[  216.168147][ T5921] net_ratelimit: 4 callbacks suppressed
[  216.168167][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.257172][ T9655] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.264942][ T9655] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.359620][ T9655] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.380386][ T9655] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.477882][ T9655] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  216.529663][ T9655] gre2: left promiscuous mode
[  216.581134][ T6383] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  216.590676][ T6383] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.614361][ T6383] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  216.639710][ T6383] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  216.664685][ T6383] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.685833][ T6383] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  216.754748][ T9686] nbd: must specify at least one socket
[  216.760863][ T6383] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  216.803306][ T6383] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.823436][ T6383] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  216.843077][ T6383] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  216.906181][ T6383] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.932529][ T6383] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  217.048180][ T9696] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  217.065493][ T9696] bond4: (slave lo): Enslaving as an active interface with an up link
[  217.079083][ T9696] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  217.095111][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  217.453203][ T9718] sctp: [Deprecated]: syz.0.964 (pid 9718) Use of int in maxseg socket option.
[  217.453203][ T9718] Use struct sctp_assoc_value instead
[  217.525063][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  217.534749][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  217.814646][ T9699] __nla_validate_parse: 8 callbacks suppressed
[  217.814668][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.961'.
[  217.896586][ T9699] netlink: 'syz.1.961': attribute type 64 has an invalid length.
[  217.949553][ T9699] netlink: 5 bytes leftover after parsing attributes in process `syz.1.961'.
[  218.085016][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.512661][ T9758] netlink: 76 bytes leftover after parsing attributes in process `syz.1.974'.
[  218.534118][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.974'.
[  218.568446][ T9763] netlink: 'syz.1.974': attribute type 3 has an invalid length.
[  218.759300][ T9769] netlink: 'syz.1.978': attribute type 1 has an invalid length.
[  218.814502][ T9768] syzkaller1: entered promiscuous mode
[  218.821436][ T9768] syzkaller1: entered allmulticast mode
[  218.847548][ T9769] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address
[  218.857892][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'.
[  218.876276][ T9777] netlink: 'syz.1.978': attribute type 13 has an invalid length.
[  218.886625][ T9769] bond5: (slave vxcan5): Error -95 calling set_mac_address
[  218.980776][ T9777] gretap0: refused to change device tx_queue_len
[  218.989315][ T9777] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  219.328219][ T9794] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.987'.
[  219.347506][ T9794] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  219.486271][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.979'.
[  219.580354][ T9810] xt_bpf: check failed: parse error
[  219.607120][ T9810] smc: removing ib device syz1
[  219.804185][ T9818] netlink: 'syz.1.993': attribute type 1 has an invalid length.
[  219.851152][ T9821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.993'.
[  220.223017][ T9828] netlink: 156 bytes leftover after parsing attributes in process `syz.0.994'.
[  220.269959][ T9828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.994'.
[  220.995124][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.324916][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.406908][ T9873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  222.244958][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.280835][ T9918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  222.516590][ T9922] netlink: 'syz.1.1020': attribute type 1 has an invalid length.
[  223.687398][T10001] netlink: 'syz.4.1044': attribute type 4 has an invalid length.
[  223.762523][T10012] __nla_validate_parse: 9 callbacks suppressed
[  223.762545][T10012] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1045'.
[  224.010879][T10024] erspan0: entered allmulticast mode
[  224.102421][T10026] C: renamed from lo
[  224.109742][T10026] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  224.407659][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.439320][T10041] x_tables: duplicate underflow at hook 3
[  224.651808][T10052] netlink: 'syz.0.1059': attribute type 1 has an invalid length.
[  224.756049][ T5899] IPVS: starting estimator thread 0...
[  224.763000][T10052] bond2: entered promiscuous mode
[  224.787603][T10052] bond2: entered allmulticast mode
[  224.813688][T10052] 8021q: adding VLAN 0 to HW filter on device bond2
[  224.835803][T10052] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1059'.
[  224.846045][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1059'.
[  224.855114][T10057] IPVS: using max 34 ests per chain, 81600 per kthread
[  224.863355][T10059] netlink: 'syz.1.1060': attribute type 9 has an invalid length.
[  224.897227][T10055] macvlan3: entered promiscuous mode
[  224.903011][T10055] macvlan3: entered allmulticast mode
[  224.911659][T10055] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  224.918993][T10059] IPVS: set_ctl: invalid protocol: 44 172.30.4.2:20002
[  225.046143][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.300516][T10076] netlink: 'syz.3.1063': attribute type 4 has an invalid length.
[  225.967915][T10105] netlink: 'syz.2.1075': attribute type 9 has an invalid length.
[  225.977379][T10105] netlink: 'syz.2.1075': attribute type 11 has an invalid length.
[  225.986980][T10105] netlink: 'syz.2.1075': attribute type 12 has an invalid length.
[  226.105180][T10111] netlink: 'syz.4.1076': attribute type 12 has an invalid length.
[  226.128322][T10111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1076'.
[  226.169713][ T6383] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  226.186154][ T6383] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  226.206582][ T6383] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  226.231840][ T6383] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  226.297424][T10117] xt_TPROXY: Can be used only with -p tcp or -p udp
[  226.487757][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1083'.
[  226.505770][T10125] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1083'.
[  226.585979][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1085'.
[  226.694197][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1085'.
[  226.855515][T10147] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1089'.
[  226.876277][T10150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  227.057229][T10158] netlink: 'syz.4.1095': attribute type 39 has an invalid length.
[  227.174206][T10171] xt_ecn: cannot match TCP bits for non-tcp packets
[  227.190157][T10166] netlink: 'syz.1.1097': attribute type 2 has an invalid length.
[  227.207930][T10163] tipc: Failed to remove unknown binding: 66,0,0/3825301374:933391938/933391939
[  227.230340][T10163] tipc: Failed to remove unknown binding: 66,0,0/3825301374:933391938/933391939
[  227.402571][T10180] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1098'.
[  227.496939][T10167] syzkaller1: entered promiscuous mode
[  227.511198][T10167] syzkaller1: entered allmulticast mode
[  227.740118][T10197] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  227.871467][T10206] sit3: entered promiscuous mode
[  227.887467][T10206] sit3: entered allmulticast mode
[  227.910628][T10208] bridge1: the hash_elasticity option has been deprecated and is always 16
[  228.199936][T10219] bond6: entered promiscuous mode
[  228.225021][T10219] bond6: entered allmulticast mode
[  228.396871][T10223] bond3: (slave gretap1): making interface the new active one
[  228.435405][T10242] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  228.436733][T10223] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  228.643394][T10248] bridge2: the hash_elasticity option has been deprecated and is always 16
[  228.874405][T10218] infiniband syz0: set active
[  228.893456][T10218] infiniband syz0: added veth0_vlan
[  229.012502][T10259] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  229.057826][T10259] bond6 (unregistering): Released all slaves
[  229.079935][T10218] RDS/IB: syz0: added
[  229.084051][T10218] smc: adding ib device syz0 with port count 1
[  229.115384][T10218] smc:    ib device syz0 port 1 has no pnetid
[  229.219498][T10275] bond7: Unable to set down delay as MII monitoring is disabled
[  229.239563][T10275] bond7 (unregistering): Released all slaves
[  229.351846][T10281] __nla_validate_parse: 8 callbacks suppressed
[  229.351868][T10281] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1127'.
[  229.374855][T10281] openvswitch: netlink: Missing key (keys=40, expected=100)
[  229.558266][T10291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1132'.
[  229.598506][T10299] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1130'.
[  230.231619][T10331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1141'.
[  230.292261][T10331] ------------[ cut here ]------------
[  230.298074][T10331] !rwb
[  230.298100][T10331] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x18a/0x220, CPU#0: syz.3.1141/10331
[  230.311699][T10331] Modules linked in:
[  230.316098][T10331] CPU: 0 UID: 0 PID: 10331 Comm: syz.3.1141 Not tainted syzkaller #0 PREEMPT(full) 
[  230.325796][T10331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  230.336314][T10331] RIP: 0010:wbt_init_enable_default+0x18a/0x220
[  230.342614][T10331] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 9d b7 24 fd eb 18 e8 96 b7 24 fd eb 0d e8 8f b7 24 fd 4c 89 ff e8 b7 ee 82 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[  230.362405][T10331] RSP: 0018:ffffc90003576e30 EFLAGS: 00010282
[  230.369154][T10331] RAX: cbb91a12eb902e00 RBX: 1ffff1100f3d0784 RCX: 0000000000000046
[  230.377277][T10331] RDX: 0000000000000006 RSI: ffffffff8defc602 RDI: ffffffff8c27d580
[  230.385336][T10331] RBP: dffffc0000000000 R08: ffffffff9011deb7 R09: 1ffffffff2023bd6
[  230.393361][T10331] R10: dffffc0000000000 R11: fffffbfff2023bd7 R12: ffff888079e83c20
[  230.402098][T10331] R13: 0000000000000000 R14: ffff888029c4c000 R15: ffff888079e83c00
[  230.410470][T10331] FS:  00007f5db2a3a6c0(0000) GS:ffff888125454000(0000) knlGS:0000000000000000
[  230.419955][T10331] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  230.426928][T10331] CR2: 000000110c289529 CR3: 00000000549fe000 CR4: 00000000003526f0
[  230.435020][T10331] Call Trace:
[  230.438341][T10331]  <TASK>
[  230.438431][T10328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1140'.
[  230.441322][T10331]  blk_register_queue+0x382/0x430
[  230.455793][T10331]  __add_disk+0x677/0xd50
[  230.460197][T10331]  ? down_read+0x272/0x2e0
[  230.464669][T10331]  add_disk_fwnode+0xfb/0x480
[  230.469508][T10331]  nbd_dev_add+0x72c/0xb50
[  230.473994][T10331]  ? __pfx_nbd_dev_add+0x10/0x10
[  230.479090][T10331]  ? bpf_lsm_capable+0x9/0x20
[  230.483861][T10331]  ? security_capable+0x7e/0x2c0
[  230.489324][T10331]  ? radix_tree_lookup+0x25c/0x290
[  230.494505][T10331]  nbd_genl_connect+0x962/0x1cf0
[  230.499647][T10331]  ? __pfx_nbd_genl_connect+0x10/0x10
[  230.505133][T10331]  ? rcu_is_watching+0x15/0xb0
[  230.509955][T10331]  ? trace_kmalloc+0x2a/0x110
[  230.515097][T10331]  ? __nla_parse+0x40/0x60
[  230.519588][T10331]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  230.526236][T10331]  genl_family_rcv_msg_doit+0x22a/0x330
[  230.531940][T10331]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  230.538194][T10331]  ? __lock_acquire+0x6b5/0x2cf0
[  230.543198][T10331]  genl_rcv_msg+0x61c/0x7a0
[  230.548149][T10331]  ? __pfx_genl_rcv_msg+0x10/0x10
[  230.553237][T10331]  ? __pfx_nbd_genl_connect+0x10/0x10
[  230.558821][T10331]  ? __lock_acquire+0x6b5/0x2cf0
[  230.563825][T10331]  netlink_rcv_skb+0x232/0x4b0
[  230.568896][T10331]  ? __pfx_genl_rcv_msg+0x10/0x10
[  230.573989][T10331]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  230.579788][T10331]  ? down_read+0x272/0x2e0
[  230.584314][T10331]  ? genl_rcv+0xd/0x40
[  230.588531][T10331]  genl_rcv+0x28/0x40
[  230.592639][T10331]  netlink_unicast+0x80f/0x9b0
[  230.597537][T10331]  ? __pfx_netlink_unicast+0x10/0x10
[  230.602977][T10331]  ? netlink_sendmsg+0x650/0xb40
[  230.608355][T10331]  ? skb_put+0x11b/0x210
[  230.612667][T10331]  netlink_sendmsg+0x813/0xb40
[  230.617581][T10331]  ? __pfx_netlink_sendmsg+0x10/0x10
[  230.622935][T10331]  ? aa_sock_msg_perm+0xf1/0x1b0
[  230.628039][T10331]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  230.633390][T10331]  ____sys_sendmsg+0x972/0x9f0
[  230.638647][T10331]  ? __pfx_____sys_sendmsg+0x10/0x10
[  230.644004][T10331]  ? import_iovec+0x73/0xa0
[  230.648746][T10331]  ___sys_sendmsg+0x2a5/0x360
[  230.653489][T10331]  ? __pfx____sys_sendmsg+0x10/0x10
[  230.658815][T10331]  ? futex_wake+0x4ac/0x580
[  230.663423][T10331]  ? __fget_files+0x2a/0x420
[  230.668494][T10331]  ? __fget_files+0x3a0/0x420
[  230.673233][T10331]  __x64_sys_sendmsg+0x1bd/0x2a0
[  230.678320][T10331]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  230.683847][T10331]  ? rcu_is_watching+0x15/0xb0
[  230.688779][T10331]  do_syscall_64+0x14d/0xf80
[  230.693422][T10331]  ? trace_irq_disable+0x3b/0x150
[  230.698904][T10331]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.705048][T10331]  ? clear_bhb_loop+0x40/0x90
[  230.709772][T10331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.715788][T10331] RIP: 0033:0x7f5db1b9c819
[  230.720268][T10331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  230.740460][T10331] RSP: 002b:00007f5db2a3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  230.749034][T10331] RAX: ffffffffffffffda RBX: 00007f5db1e16090 RCX: 00007f5db1b9c819
[  230.757166][T10331] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006
[  230.765547][T10331] RBP: 00007f5db1c32c91 R08: 0000000000000000 R09: 0000000000000000
[  230.773573][T10331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  230.781657][T10331] R13: 00007f5db1e16128 R14: 00007f5db1e16090 R15: 00007ffedfccc048
[  230.789821][T10331]  </TASK>
[  230.792917][T10331] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  230.800231][T10331] CPU: 0 UID: 0 PID: 10331 Comm: syz.3.1141 Not tainted syzkaller #0 PREEMPT(full) 
[  230.809639][T10331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  230.819733][T10331] Call Trace:
[  230.823064][T10331]  <TASK>
[  230.826029][T10331]  vpanic+0x56c/0xa60
[  230.830063][T10331]  ? __pfx__printk+0x10/0x10
[  230.834724][T10331]  ? __pfx_vpanic+0x10/0x10
[  230.839352][T10331]  ? is_bpf_text_address+0x292/0x2b0
[  230.844685][T10331]  ? is_bpf_text_address+0x26/0x2b0
[  230.849934][T10331]  panic+0xc5/0xd0
[  230.853706][T10331]  ? __pfx_panic+0x10/0x10
[  230.858190][T10331]  __warn+0x315/0x4f0
[  230.862231][T10331]  ? wbt_init_enable_default+0x18a/0x220
[  230.867925][T10331]  ? wbt_init_enable_default+0x18a/0x220
[  230.873601][T10331]  __report_bug+0x29a/0x540
[  230.878156][T10331]  ? netlink_rcv_skb+0x232/0x4b0
[  230.883129][T10331]  ? genl_rcv+0x28/0x40
[  230.887328][T10331]  ? netlink_unicast+0x80f/0x9b0
[  230.892310][T10331]  ? wbt_init_enable_default+0x18a/0x220
[  230.897984][T10331]  ? __pfx___report_bug+0x10/0x10
[  230.903074][T10331]  ? wbt_init_enable_default+0x18a/0x220
[  230.908752][T10331]  report_bug+0x16a/0x220
[  230.913128][T10331]  ? wbt_init_enable_default+0x18a/0x220
[  230.918789][T10331]  ? wbt_init_enable_default+0x18c/0x220
[  230.924454][T10331]  handle_bug+0x9c/0x200
[  230.928723][T10331]  exc_invalid_op+0x1a/0x50
[  230.933246][T10331]  asm_exc_invalid_op+0x1a/0x20
[  230.938124][T10331] RIP: 0010:wbt_init_enable_default+0x18a/0x220
[  230.944392][T10331] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 9d b7 24 fd eb 18 e8 96 b7 24 fd eb 0d e8 8f b7 24 fd 4c 89 ff e8 b7 ee 82 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[  230.964115][T10331] RSP: 0018:ffffc90003576e30 EFLAGS: 00010282
[  230.970225][T10331] RAX: cbb91a12eb902e00 RBX: 1ffff1100f3d0784 RCX: 0000000000000046
[  230.978238][T10331] RDX: 0000000000000006 RSI: ffffffff8defc602 RDI: ffffffff8c27d580
[  230.986243][T10331] RBP: dffffc0000000000 R08: ffffffff9011deb7 R09: 1ffffffff2023bd6
[  230.994248][T10331] R10: dffffc0000000000 R11: fffffbfff2023bd7 R12: ffff888079e83c20
[  231.002256][T10331] R13: 0000000000000000 R14: ffff888029c4c000 R15: ffff888079e83c00
[  231.010284][T10331]  blk_register_queue+0x382/0x430
[  231.015355][T10331]  __add_disk+0x677/0xd50
[  231.019722][T10331]  ? down_read+0x272/0x2e0
[  231.024349][T10331]  add_disk_fwnode+0xfb/0x480
[  231.029084][T10331]  nbd_dev_add+0x72c/0xb50
[  231.033549][T10331]  ? __pfx_nbd_dev_add+0x10/0x10
[  231.038546][T10331]  ? bpf_lsm_capable+0x9/0x20
[  231.043261][T10331]  ? security_capable+0x7e/0x2c0
[  231.048236][T10331]  ? radix_tree_lookup+0x25c/0x290
[  231.053386][T10331]  nbd_genl_connect+0x962/0x1cf0
[  231.058365][T10331]  ? __pfx_nbd_genl_connect+0x10/0x10
[  231.063909][T10331]  ? rcu_is_watching+0x15/0xb0
[  231.068710][T10331]  ? trace_kmalloc+0x2a/0x110
[  231.073418][T10331]  ? __nla_parse+0x40/0x60
[  231.077867][T10331]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  231.084232][T10331]  genl_family_rcv_msg_doit+0x22a/0x330
[  231.089842][T10331]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  231.095965][T10331]  ? __lock_acquire+0x6b5/0x2cf0
[  231.100948][T10331]  genl_rcv_msg+0x61c/0x7a0
[  231.105497][T10331]  ? __pfx_genl_rcv_msg+0x10/0x10
[  231.110558][T10331]  ? __pfx_nbd_genl_connect+0x10/0x10
[  231.115957][T10331]  ? __lock_acquire+0x6b5/0x2cf0
[  231.120940][T10331]  netlink_rcv_skb+0x232/0x4b0
[  231.125734][T10331]  ? __pfx_genl_rcv_msg+0x10/0x10
[  231.130792][T10331]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  231.136122][T10331]  ? down_read+0x272/0x2e0
[  231.140561][T10331]  ? genl_rcv+0xd/0x40
[  231.144661][T10331]  genl_rcv+0x28/0x40
[  231.148672][T10331]  netlink_unicast+0x80f/0x9b0
[  231.153496][T10331]  ? __pfx_netlink_unicast+0x10/0x10
[  231.158922][T10331]  ? netlink_sendmsg+0x650/0xb40
[  231.163904][T10331]  ? skb_put+0x11b/0x210
[  231.168192][T10331]  netlink_sendmsg+0x813/0xb40
[  231.173024][T10331]  ? __pfx_netlink_sendmsg+0x10/0x10
[  231.178346][T10331]  ? aa_sock_msg_perm+0xf1/0x1b0
[  231.183328][T10331]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  231.188644][T10331]  ____sys_sendmsg+0x972/0x9f0
[  231.193445][T10331]  ? __pfx_____sys_sendmsg+0x10/0x10
[  231.198773][T10331]  ? import_iovec+0x73/0xa0
[  231.203312][T10331]  ___sys_sendmsg+0x2a5/0x360
[  231.208035][T10331]  ? __pfx____sys_sendmsg+0x10/0x10
[  231.213364][T10331]  ? futex_wake+0x4ac/0x580
[  231.217967][T10331]  ? __fget_files+0x2a/0x420
[  231.222595][T10331]  ? __fget_files+0x3a0/0x420
[  231.227317][T10331]  __x64_sys_sendmsg+0x1bd/0x2a0
[  231.232321][T10331]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  231.237838][T10331]  ? rcu_is_watching+0x15/0xb0
[  231.242675][T10331]  do_syscall_64+0x14d/0xf80
[  231.247306][T10331]  ? trace_irq_disable+0x3b/0x150
[  231.252370][T10331]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.258549][T10331]  ? clear_bhb_loop+0x40/0x90
[  231.263258][T10331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.269188][T10331] RIP: 0033:0x7f5db1b9c819
[  231.273627][T10331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  231.293273][T10331] RSP: 002b:00007f5db2a3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  231.301721][T10331] RAX: ffffffffffffffda RBX: 00007f5db1e16090 RCX: 00007f5db1b9c819
[  231.309746][T10331] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006
[  231.317751][T10331] RBP: 00007f5db1c32c91 R08: 0000000000000000 R09: 0000000000000000
[  231.325754][T10331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  231.333748][T10331] R13: 00007f5db1e16128 R14: 00007f5db1e16090 R15: 00007ffedfccc048
[  231.341762][T10331]  </TASK>
[  231.345392][T10331] Kernel Offset: disabled
[  231.349754][T10331] Rebooting in 86400 seconds..