last executing test programs:

4m46.283221103s ago: executing program 1 (id=2211):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x80002, 0x0)
socket(0x29, 0x2, 0x7)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x32, 0x0, &(0x7f00000000c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003001d0020"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x44, 0x33, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x17, 0x0, 0x1, [@typed={0x4, 0xad, 0x0, 0x0, @binary}, @typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x44, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "f3e57eb6d3b06a2781b340205463cfc44f0a85d23115acfbe8cfec2209239b4f56bd9ad3afea96cfecbb"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x800)

4m45.972679446s ago: executing program 1 (id=2216):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
listen(r1, 0x9)

4m45.042854132s ago: executing program 3 (id=2230):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x9, 0x32fe3cf8, 0x0, 0x11}, 0x14)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x1, 0x4) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0)
recvmmsg$unix(r2, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000003c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x7}}], 0x1, 0x40, 0x0) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
write(r3, &(0x7f0000000100)="32135a0efa2e0c4c3a4b509d11163bf281aeece904d4d31e8e2e70db53179a022b0a3ec5e864d7937793ea52d5f3b4a6e6993d84c20e16c2091a796a1c9c2898a31ccf46e04a498d7484bc874aebf750b148fee2bbda64bb6442f6cd93d3c6fd277194979df9aa5140decf5b4ec9c8f281955d49017a47eac996908d2f33ae7986ea4d340efc445d82afb1ff924621e831", 0x91) (async)
write(r0, &(0x7f0000000c40)="140000176f9f8000080000005c7f2f4411ca13c694da1ebb9102b3bc488d0ba716748e6a6b20edf8e4000000f905090fafab7530aa819cf3bc596d2c5a8500000000b99621a4c960bcceb0b19418f8acecd7a3772f6f2d45a11f070aa2abd32d40148fc3fd8c1513a8a1f04ad297c78945a525097f93bfcba72fab72917d0acbb7e973c4a261a029377ced8935e1333a360788c8302c595727db26a68cf8f9b096729872dc415a1e03d30b8cbaa820158d01c6b2a3f4b7d31e873a9b56730db10db7ccba1a41bda762590e886e54fb506f8cec3867c7064b02f9b08a4a229eff1bdaadf91ac970974bded3e8b1f0c0136269b8253c6423aa3909696cc73501f244ee6ca601040213f2d771996a0b08a386cb54bfd43ece8ae5e42b41d3430571d6ac9348fc04ca4a59d2ef7a7a3f746ddc94c1661cd8b500bba469ffd8e7b0697de9f900"/333, 0x14d) (async)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000022004106000000000000000105000000000000fc"], 0x1c}], 0x1}, 0x0)

4m45.031923252s ago: executing program 0 (id=2231):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf250ad800800c0002"], 0x114}], 0x1}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x1c}}, 0x4000091)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x44}}, 0x0)

4m44.978658057s ago: executing program 1 (id=2232):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x800, 0x9, 0x3}, 0x3c)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x10008, 0x0, 0x20000, 0xffffffff}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0xef}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x2c}}, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="78e7ec2c7cdad9b4b47380c988ca", 0xe}], 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x305980, 0x0)
write(r2, &(0x7f0000000180)="2400000f7d2c51f7001e005f0214fffffffffefff807007768a80abe937c2e000000d06c602870f9a4ef15b93dbdf176c61a2ca279a458b0be76890a18d5cee25456938f81b869da8f432e2f33e0d220523cbfa8", 0xffffffffffffff23)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @remote, 0x0, "d08ba523b041dc7d17d76a82954cd6eda3fe55b3ad28207a5d44ebcadc08fa8b", 0x80000000, 0xe, 0x7ff, 0x1d9f}, 0x3c)

4m44.771369532s ago: executing program 3 (id=2233):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = socket(0xa, 0x3, 0x3b) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f00000000c0)=0x19, 0x4) (async)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000014000192edbc7ffba5023aec9ddeb61d"], 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) (async)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfffffe1f)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x96}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

4m44.550894201s ago: executing program 3 (id=2235):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$sock_buf(r1, 0x1, 0x5, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0)

4m44.508215019s ago: executing program 0 (id=2236):
r0 = socket$inet(0x2, 0x80008, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x1010, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x28)

4m44.206472265s ago: executing program 0 (id=2239):
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'veth1_macvtap\x00', {0x5}})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x1, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000005fc0)={'filter\x00', 0x4}, 0x68)
socket(0x200000000000011, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000080)}, {&(0x7f0000000300)}, {&(0x7f0000000340)="ec8b8c4bf16ef994f0ac9e0413268a17fed4c782b831dc2fcb0a7a2eca608cceba537951dedbebcf1fd8e079f738197f0e302c13177f9568437476361dd492b7cc12db7f7b4eab907882f9b8017361", 0x4f}], 0x3, &(0x7f0000000780)=[@ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x5}]}, @cipso={0x86, 0x9, 0xffffffffffffffff, [{0x2, 0x3, '\''}]}, @ra={0x94, 0x4, 0x1}, @end]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp_prespec={0x44, 0x4, 0x22, 0x3, 0x4}, @rr={0x7, 0x17, 0x34, [@empty, @remote, @broadcast, @local, @loopback]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0xc0}}, {{&(0x7f0000000440)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000540)="1c70af8ea587ac75af7c552d37fbbdf3580d79093a6a9a07e8f255dc1996fef8b6106d55cae77722820bb28636ae8ad0f1b365dbf65946f991f633aa5020ab643fc7b3b6dae8d7db71c67dbbceace89023fe90d2da62d773bf773a5fb085843994f7638664579c4093fdb914c5542d776593d453a696ff4891f065eb3f8a50e25fcf1e", 0x83}, {&(0x7f0000000600)="7916e4e290ae3246a91b6d85f22f5043e59c207ee88e8b3dc4e80b7eaeb74d3de65ffa0ee7127ab1db5bcf0b0fe35abf8a0a0d2e91a46970051f97205d29e812595c4c6548cb38452942f5767dd2871c0216e2317703106b1e34559be5c183421321b8f4d862c2afd13b9ad86a28b7a86ed6f6d1ff5d81d152cd8806985e3f4b3a8e045f87", 0x85}, {&(0x7f00000009c0)="11322fc47dd828aac9b3752fb5406c537fdda01beafdc61237aa0e3fc67bab40b12ba9c221d0426f5f1efe20bb341b92aebc2049d4de0b0f52e6bbe6df4ba6c60ceeffb7eda5fa0c23ddfa8229e6c1f5f21a8ab1ea4fdd69c8d0109a1d6fed8b00f09b1260a35d63953981de14b2c26bdd85d754c772cd0ec50dcecd7191ec2fd9adf4f9f8427f63d3469f0713950b344fa9", 0x92}, {&(0x7f00000006c0)="cf4b0458ebd6b9b4b5be86ebd6378e6796e03b609898c61515bcdac76dcb3b55bc80fd8d4aadfaa35d76d0c673d563c645d880c6e7e1e0ccd5551718266c7dde4d572b700b2c", 0x46}, {&(0x7f0000000a80)="1e95366ba7d19164728701b1cb401dd88209467af076a91f07be1fd530f2e3280f011105d5f1193549ac67c35acc7d1dbd142ed7074eb66053db5d9266c49ceaff105b8e8899cf357b18dbaf5919aabf2b9265a020dc8664105edfe33f0889cb447eaa0168c180d14109482366f633017c2249295faf46932ca681d35a4faf60e17fe94a2804bb24ba7871b0c365763706ec83b70108682b8ad486174434644a614c3bcf393c2fbdcb130756040178c2b198931975a8afd32a573e440d1cc2e141f3c572a8d36f2131237717631018653a43bf80cd9b15cced7d7bf39652dbdb", 0xe0}, {&(0x7f0000000b80)="2d01a08efc5280451e3b13e5e2e7c7b32543f335b2ca5297aaca728fff1bff3285ab5ead2f913dc8908a1519701de37e42e95688dea259e7fbc0b352978a5e641585005a04de91c82c03c2974d981520a925", 0x52}, {&(0x7f0000000480)="47a3", 0x2}, {&(0x7f0000000c00)="a298b563e756234d85213e7d56f13fc3ddc8ad561d44b1296e5a52788f3a94a3317b6d6efcce00788b", 0x29}], 0x8}}, {{&(0x7f0000000cc0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003100)=[{&(0x7f0000000d00)="011fbf1c7c984d82", 0x8}, {&(0x7f0000000d40)="938d5579eddc876f3ef559f6030f901bb3605c896612028137f1227fef89e12277b8172d7923d8aa9aeaf38437ff6880dc0f095c180e1a3bcc1dfac23de34c1f88bd8793d1624ea9df4e3439c6360283d7330d502492224c8bfaf488b2808006f03b345a932d3f723082b6fdd2aa049d46476f2981c8125c0a188e13ebada4d1", 0x80}, {&(0x7f0000000dc0)="a81e3b36b5169e9936b1de089a336ba97522f22df933e9289e4a3fcad8f709b9b6d051ec691a02f17fc2d5c90f7151cb3050dbbdda016bdc7626a71f0d1d5f88f60cec78f3820e8beb94f578eecc7b0dc2a12cd27869ed621dcaa9bee7438d88ec82bad2cdda794006d4c10afe76b577be7721aa0c", 0x75}, {&(0x7f0000000e40)="66c99867750cae9c21232137696c843ff219000b7e94c2655dc7a43dda4a9b88c0bb9ffa8f2b0feee52335477d9a13a17c9999480db4dd5837090087e9097acd328cc1cbadff8710721d99df5c45154060b970e4c941d2e6e64217f67a4f60218e887697e403c07e3554dfb7ddc4fcaab7ed28b786f274f23562fb59c947b699fb3137f465ea8216a965b186de70126f9214646f556aa6dbea50cd0e600c54e3a65374bf498df9de514891135f1dab018bae63a4051bb7898752e51ddae695f687d29db033f9c37fccd0dfd80f5b468918890c8a07d5d084cbea429f434519b8565e23f493edff00b9204f5b63b5317eec33e31adbcac1cf72420a997426c27500b92758945cdacafdbfd125899ec558582860e5ff8a2c58c1543e247e0d76386895b2b56f65ebe6b3e2e8e2ba313bda4c9e844d50ad70c018537e88c00dd4a745ae1506b70a82ded1c20f3e94683f518271f2cc68434bb918733d58fcd8dd62c34e7af17857964bd4c2ca863470a957249e19924b455f4ae4485661efcfe77c9a40cf4a2f3e0aa16c583ba6f3b33a3ad1fa9ab7d174f3de2fb880ec53fb6ad5ac766183f813f13aac4d9f77edae418daadd56f8977d9b4902e46bdd9e591133b30b2e6995404f111cb591584d5d9d92c831d63bf77a69ec0094e33be228ea5a75c52ede9dc94a78a30720f7b5e1de506a3466be28fe977422ab4e488f4dddcfc92cfdbb11e484789fc32f74b377184237d68337cae6270b1bd87cac27f47b3b7fff486e025e122365aecc32a78c9961cd5e0da182ea73ae87dfb4614ca89359a5f65c6b90dd355c42d2264c63394dda7c06b8137c6c814155f36d1b3ac0bda51a1ad867d817df6ddd3aaaa7c58018d07cc35af8863abcf4137800a5d1d0f96a12c498a9bd5b34456d1a90d4fb027063163389dcff0c9742ab6de024b06e816dc793c647b6588565fcc897dd31683cca8f1d5a2bc4cafad77cc4431ac74ed0d01620743bfb57fcd19de19c48a29b04c821dcc3b55c0a338574180e5aa003f698c3ff263b2679901252b21ac1acf5987c6fd935844843a435c9701580040ac484a4def4b04c21dde9bdb4beae653a4e697e2cd102d7c86e0cca85e0095a496ea014d587b6308d65f3dcfbb08c076e7e93c58c8a5043d2e3de0da74d0f77c045efc0f152a18f82eb2cced73b18177e267f8d8910383652aca79e4d6c9b7225ae4e94a45f4c6f57377e002619f6baff1915ce7b00d8f10570a1c21c5e29b53bb980662f79c95d71206fd6fc5bbad60cab46089711e9562e1b4c99eca250e1cfaab5112b3a41e682ea6805baab748defbf03dfba602e8b02129dd93a2194b60fca0019090fd3825b16ce9a474a788b70a5f46e30b2c0805ba2e119f4438b1889189e09f027f2f467ac9fddafbe020edb3ec8935db7f7b01a58c0cad39f6ebd16ca45f2d05c2e97397d508268e8032f45976e62fbd68b2de76bdfcd28915d08766d0174ac96664327da8bc15cdd2e66f8db36d1ea117e30997a6588bf3793b4f1c8f459f46a27198e4b86e52d9f02f15611af2427af7aa026f60ed81d1fca65f44eefab8a45211cbaca4c6bcec120128b67e62517db2932976353577dd240eb353b991516e903370429d54f8e4e05b64e9c86de74d0fcb4d120a84f8b5da8626966503c6502a1c78b8a5e1fbf3805892faa26bcc93eb7ae68c3405b72d6e6354a94da1eb82139466a70f0d884e1e614cee047c47301950d3f4f29479aec1c4884dbb8b807d9701bb5a00ffba9c83e8e89ed2ed292cd26ff8ba9570cbdd46f708f48055c59a56e4f357f548862b0d0d6f9e059624dfc21f99211fa14c582af52ff16ae8fd636d2e32ab809c16a7134f80c3f8fde3862f27176ad4ea3cfb67d325d919f36f72637f8c1accc18a381e3884c6e37cd8f78b26abec314f7fbaea40cb5dab68e19d7fb9c7d0fb3c297cb8505b45dcc1c7c8d1dea8bc695d14cd71c69802b7cbbaccd0bb7978b3f4f0709daae69c901259f662dd61be2367c9c9ec6c6fb3e5d7831155f7ea0feee7f8aa3742689e9f3d94c9d38f4733329ac8b5aab2b387d3eca1b16ae0fe6e7c466746990e64f5f62551f91133eb60c320c37ad9721ce4f46763d3d5f072eaf2626a355c329f3cae34fcaf02f9e370139fc9ef9aa0e383efe590cd4b3a8eaf4ae11b832625e2f9328bfbc88307061d3598eaaf667e0a1faf96272207f7d1060ab415f3e0d1ff7f484de4197b72d860bd1fd04f589bd11aa487f052b565a1d168bfe62d1c558702624fdeeefd6515081769fb7113ef9539261082abe10ece80e457ddfffdde9a4243cb165a405e3075cdddc54f4d4fc73b6d279b2e3d044c41688f1af7a3e1545b7fd66cd2bfda431fd13fe869bbecc775d23f590c780bc21a1c8631c9f901cd8ab638427acb68675afd60c9f5509697579947e1e6ebaf3bec09ef76eac6d36931ea355a5444945723a3e4139b554c621e875793f22c818678b5cc15b3d64e5be552ebb463af13027d6ffb1844bb72c8f440748526cb7ba299520f934a483d9b85efac898c4821c6c2a4f21e79f67acf309b2e1e1f5cf9be152abdd70900b35c0e8be6d64082ebfcd3aa8462e7b8792fab0ad8cb8b2b36cce95067bc6438412aa3f7cdb4d2c2be103742349d3d14255a176827ea25c3e0bd1a50ad95088e838daacf4ae044cb7a2fde2230bff8e51ddff53b313e738882f9b101e474d88ede03c02940bdba55447f112ba57a82cac9ca6e4eef58c0424bf50fe16b77f6a240b3bae2bb36d43323e7f3598c311c0ab46f78e3a7c5b2248339529716dd8255abec74195110c3b5845ba5492ebcf8a15ee620fda4f23b1fbe1d1b189464b1463be8f230e15e06cf8e4fb9e08f960210460241ccd60d0a5b8922e16568a55f8724115831d53e68b602bee5241ac54dfcfbb56f72915de46d368033191c48a7885b70c565fd272f53486a7135ee28b07b2d985075efbaac30f5c6ef3604b9bf1a57a5dde00777ce750ea6d0791a4747051bc51a99889af00d515d5b186db7b353071e9ca363e06d2cda0de2b33b4cfb7688932d40f67cf84cac703a924834a0dae49d28432f5ab9f650e3a6d0e223dd746fe8b84829a3631ff715d7d111c296d851dc2cbe2dce462567441c79ecdc9be64779d9cb756717e2f1a4dc5b378c3efaa506a34409f21610550907305c662ac21cd749abb48f5dc801c5c434541650ea05ba65f75a77b21562ddfe4b010e109e0db1bb3189fdc60281985c3012598f03ddc0c87a0f40c872b2d410523f6df5f62e7baaa013cc2a07f1fec8d4aaf59c11562daf94ccf5a288c45a24173ca79de3ea7a081d09ef43b0d9c1204d4ba1fefed712fb4c2a5369cf437336ea5e497521d34be642752e334a27a7f8e01c648f7490a1b4c71314d321d414025d26e7ae3e2247b9cab1833d56eaef28908a445daed2971f041736ffd439701abef52ffd1a0a9fa7f10eaa75e0b34a441e8d466c2eaf13d0860cfc6611302e680c6e5ee6bc3279444498439236e281a4ba1ef55b1f63e23924bbca229202dfd71d1b30714cdaaa31e4728d7aa91a161aebb534f4f8d5dd008a597ed4a24722f169bee6e12aa473f955502ac9fe0a72cf59c2f7a05151b8a476686e20e9fa84f1e8713e54436346b4603fc1755bac157b372fb1b391d2a2950bc0d781ae639737e781a3a6eb07772b449708156095df72c87bededd9ccecaaf97b00aed1f083a1afd35db2350118dfc14934bee2e234e8af8fadd099433b8dcb80ede446091cdc13b55a518b3a00145625077219b2073d2e95de6009aef7ada6e1d0d685b15c2516c94abf8b47330d0ecec367f5ab28b62f78a43a44cfd88faf68dd1f848793c36e65d45b77e3b9ad69110d09c77e9b46c5c411a1fddacf1ca83505706c44c534d0070a6be3a281332f91b406df123d621f41bc0b65e9f2ed513f3c73db8cb0e70d1f82a964d18e252a2dcc9edbc81ef4132c45bf3306c1222723a650314216fcbc265eddf7cb2b8419dd8041229ec6d03964a029094a168abe6255d1da64b355c79d4a83c0791c4e598b1eaf937427cb9bfde28dac957d7e75cc591d784e842a73c69c8bfb8b881e24e73113307a4cc3c40962519005c992df1201a771c70287180d75940f14eddba197aaf5d634c1e17719417bb7a8d994e14bc7804663e61e69c633b24a73a714b7862591b046d1a960c8b849869e427f37522882bb68e2031468edd61d90b62b04ddac27373c8073dfc2e558ec29a880c07df43eddeb80f87dad725fd4359489ce2b726c5b5b7d55cf1464b94e8ac1954a668198304f3cfc573f4ec6160581e3fbfbb51d2725d0df74437ba15878b214221693edcf0a202b52621301e1bc4b15ca6ab5dd32b2e6d10ba1816e41da04403fe40012440265d3eb69e5ed03a37bfb0d3becfeebe07faf0b0c924359ad799697c86fb0e6b665918a72df1d22109ec2dea0965727fb0ddded7b76fdddb42ffe7683182b1dc56c3534f26db5c4e6ca29d2a0976d53873239b6d9b11766a1b9f99c792959597d7ca9732ac03c733ec42e3be951382625d6ae9a47b40d7f271ea08fc834f78233f8817cce8afd4aaf6e13c86c011b74e0518182b2398719491e71bbe2b1e2204408a4292a247082ec3dfea5d7f00de0d518af9e4c0d7c0ecbe34b7baf01f82db770842f09d3e0007197c0641dce773369055c64fb798385ee85215cd91b49a4bae94f3548aef39512262b253f205b5c6a40e5ef740400dcb0c8f35acfeb2221f7f7c6d8060d7500c30d33e1e3eadf248174852597754bd6f690dd2a49afc87bacd77cce8db60714e7d2a3c454573b7905ba78bdc0321213f342b5e674f0c7a93ee7ba044c596eb9093849dbf6d44ac9e495a5a9d52b66ffdb71789c287261c216ed09d6f16d819082e00384bb28bccd8149089755a87cd1e0ad49ea8506d976aa404a7526c3bf9907354387c0db7561def7bc9aef101af314324d25ca1372d27777799f0856489c0724b01956d88826f2358fbd6a95dc296c811f3a7d684671d6f37275c20e57efb5d09ad19130b24f0f50e14cd7536a7e42f0cf128ca089e0256c19b542d197143c198a0f08f05276252eb9122a918b1d3d92f699296dfe36ed52ce9351c3e836714a971ecd2c467d9f5db6eb3ccf5bffd268579a737c2b2e517dcbc4646d8b4158ea8cc8ef56d6ee5c8c4bc04a3f0e7fd6fbf4ba58422635a9211cdad0d223ce5f090d20ac52337a900fe35b85aa9b48cd59782ddc19184d3fc8810f8fc22f1a7bc68eb479176e5231b5e8166944b73f0a2987dbe47c1f733312c38b7672da9d60b37bfa70ec2ec484883dc5ec14a163c905bbd6afebf93ade042caef894d501bd4e04edcd27670a14a12e53502fccea55f0c13932b031f593abb8aa7da7191aed9abd089bb58e6c58758dca39df8d8f0e5660530698c2e63780ddafc7d4ae09ec56b92b23a8156a41b6fedbfed9eae032bdc57cb0eb20968ec957e3369b24675b3c48ce99374ed35f8ce11aa0ddc2b429bcb64620c54a0dee237cc0bf2ccfdd8792cc7568eabf8433bdd2c73df7e369d68a3755e4390b81c79bc1946f3dd410a5f22133eab3ae90869f0080eed1bed4975263dd1bce742b6256e7f968fabb6e56013b5c18bb4da9b1b4ee2874cb9915ab58f0c86441831b29be7475cc7059af01adedec331ff5252dbbd083bd8886cdd02699f0fb48855dac4e8c8a1f4addaa9c12d1b2aaeab5ddd073ae01ca6f94b07335da2d602ef97de72e882fb0e1b04fca69758c6", 0x1000}, {&(0x7f0000001e40)="34eac430e52ea78f9b83775420f653c38bca2fab48de97884b441de213e8c0a91ede42bccbfe2d7b24c298c834ea67a9cd1bb4607323775e204e2c72c45391212dc0e86c27912b490e86a76b626dfa915c6c202b328f8cd8894b48e5786d304496ecf705414199b12ce46b55915e2dad4f05d632598d50c2f736089305636af20b080bdec35fa5b11b39c9b5a91d8fa8be355226254d718201f2e612109623c0389294224b8c4fa8dc6ad9baed843d9af178d795285f01ce1f02811e01f4b2fef97758ecea4cae0309b0668462e69559e464a96a165d146e5d6ed5", 0xdb}, {&(0x7f0000001f40)="ec3156d8faa0224aa93ab040430bddbc337e59651833dc3e97a1076f1fa5334de813b33cf34e1646810ca69523569f87152b", 0x32}, {&(0x7f0000001f80)="7b9812d77e9ad3431f62e2e29b0b0ea68d6c93f5d318a70287e0d27c6e8a61a83246", 0x22}, {0x0}, {&(0x7f0000002040)="1ff83b54edd38dd3a2b76c", 0xb}], 0x9, &(0x7f00000031c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@rr={0x7, 0x7, 0xf3, [@broadcast]}, @ra={0x94, 0x4}, @generic={0x94, 0x7, "38424ea2b5"}, @ssrr={0x89, 0xf, 0x65, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_addr={0x44, 0x34, 0x68, 0x1, 0x3, [{@broadcast, 0xa}, {@rand_addr=0x64010102, 0x6}, {@loopback, 0x20}, {@empty, 0x1000}, {@broadcast, 0x3}, {@broadcast, 0x5ed}]}, @timestamp_prespec={0x44, 0x4, 0x62, 0x3, 0x3}, @timestamp_addr={0x44, 0x54, 0x4a, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0x391e}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x5}, {@broadcast, 0x8001}, {@empty, 0x940}, {@empty, 0x4}, {@remote, 0x7}, {@multicast2, 0xed4}, {@local, 0x2}]}]}}}], 0x108}}], 0x3, 0x804)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8902}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x64, r10, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x2}, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xa8, r10, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8800}, 0x4040811)
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c044}, 0x4000)

4m42.898099338s ago: executing program 1 (id=2244):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f00000000c0)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x10040000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110780000000000630123000000000095000000000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14)

4m42.807797364s ago: executing program 0 (id=2246):
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x20, <r1=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="a28283898f771bde683da0a88ae706a91a28b3dcf60ce4a6f8bb710e815989fec62d1dc8b5ea44a8b513fffd93d9ce20ebe2c36cbb4536601032b6e36243ea19aa056f9eb9698caff9573627c58eb13f628f22b5939d0dab101efe32147c2891680a18628d3e575468dfd73e70afe04ea59a125c1ff687a7fca00f1a12b54d4a53cfb8ccd30fdc3994894d65d056e303eb88fd8e52ab6c62cece6436eb4a00eab06973907729f33150e65ced5e37d146f14d274ab0f9fdc0ed29b58b4e14adf9376c86c1da2b1bc158bea9c35b4982716b7a16b9d0b2fa4b5ae02a3a1d8b5dd62b5dd9402a23"], &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x2, 0x3}, 0x10, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x2a, &(0x7f0000000cc0)="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", 0x118) (async)
setsockopt$inet6_buf(r3, 0x29, 0x2a, &(0x7f0000000cc0)="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", 0x118)
connect$l2tp6(r3, &(0x7f00000001c0)={0xa, 0x0, 0xafb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x1}, 0x20) (async)
connect$l2tp6(r3, &(0x7f00000001c0)={0xa, 0x0, 0xafb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x1}, 0x20)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000002c0007010000000000000000017c00000c0001800600060080d8000004001680"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, {0x4, @empty, 'erspan0\x00'}}, 0x1e)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000200), 0x3) (async)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000200), 0x3)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000240)=0x7, 0x4)
socket$kcm(0x21, 0x2, 0x2) (async)
r8 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}, 0x0)
connect$rxrpc(r5, 0x0, 0x0) (async)
connect$rxrpc(r5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg(r5, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
writev(r0, &(0x7f0000001300)=[{&(0x7f0000000280)="a4", 0x34000}], 0x1)
recvfrom$inet6(r0, &(0x7f0000000040)=""/188, 0xbc, 0x20, 0x0, 0x0)
close(r0)

4m42.695211382s ago: executing program 3 (id=2247):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13314}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0)

4m42.644048004s ago: executing program 3 (id=2248):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000000080)=0x7f, 0x4)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async)
listen(r0, 0xda90) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) (async)
openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket(0x2, 0x80805, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
shutdown(r4, 0x0) (async)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) (async)
setsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000000080)=0x7f, 0x4) (async)

4m42.574545052s ago: executing program 1 (id=2250):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_mreq(r0, 0x29, 0x31, 0x0, &(0x7f0000002280)) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061128c0000000000956cc78d29651818"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90)

4m42.483324974s ago: executing program 0 (id=2251):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'aegis128-generic\x00'}}}, 0xe0}}, 0x0)
sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xa, 0x2, 0x3}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r4}, 0x38)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x400, 0x0, 0x4, {0x2, 0x18, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x8004)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10)

4m42.34661593s ago: executing program 1 (id=2253):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x8, 0x4}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e000100fcffffff0000000007000000", @ANYRES32, @ANYBLOB="000000000a000200000000000000000008000900"], 0x30}}, 0x48000)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffff8, 0x0, r0}, 0x48)

4m42.310830285s ago: executing program 3 (id=2254):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) (async)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x118, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) (async)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
r8 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r9, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10008801)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

4m41.817405281s ago: executing program 32 (id=2252):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000090000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x48)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000000c0)={0x7, 'veth1_vlan\x00', {0x4}, 0x3})

4m41.774569603s ago: executing program 0 (id=2256):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0xfffc}, 0xe)

4m41.640644417s ago: executing program 33 (id=2256):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0xfffc}, 0xe)

4m41.640539187s ago: executing program 34 (id=2253):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x8, 0x4}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e000100fcffffff0000000007000000", @ANYRES32, @ANYBLOB="000000000a000200000000000000000008000900"], 0x30}}, 0x48000)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffff8, 0x0, r0}, 0x48)

4m41.635678097s ago: executing program 35 (id=2254):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) (async)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x118, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) (async)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
r8 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r9, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10008801)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

4m13.463559152s ago: executing program 7 (id=2563):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) (async)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x10) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async)
accept$phonet_pipe(r1, &(0x7f0000000280), &(0x7f00000002c0)=0x10) (async, rerun: 64)
sendto$inet(r1, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) (rerun: 64)
accept4$tipc(r1, 0x0, 0x0, 0x800)

4m13.201759196s ago: executing program 7 (id=2568):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x18) (async)
close(r6) (async)
socket(0x2, 0x5, 0x0) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x703, {0x0, 0x0, 0x0, r3, 0x40220, 0x5006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r9)
sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0xfc, r10, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x4, 0x8, @empty}]}, 0xfc}}, 0x0) (async)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NFC_CMD_SE_IO(r9, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r11, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
r12 = socket(0x10, 0x3, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000004c0)={@loopback, 0x34, r3}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r12, 0x89f8, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x8, 0x62cf, 0x3, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x0, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @local}}}}) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=<r13=>r12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r14=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000040000001b0000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000002000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r14, 0x25, r13, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

4m12.969858478s ago: executing program 7 (id=2573):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

4m12.813937019s ago: executing program 7 (id=2575):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0}) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x1}, 0x8) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r2, 0x25, 0x10, @val=@tcx={@void, @value=r5}}, 0x1c) (async)
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
listen(r6, 0x8)
listen(r6, 0x400) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000050000000120c8", @ANYRES32=r2, @ANYBLOB="14000200fc0200000000000000000000000000011400060004000000040000000400000006000000"], 0x40}, 0x1, 0x0, 0x0, 0x24008880}, 0x0) (rerun: 32)

4m12.396731596s ago: executing program 7 (id=2580):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1daa000000000000711019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xprtrdma_nomrs_err\x00', r0, 0x0, 0x800}, 0x18)

4m11.95491752s ago: executing program 7 (id=2586):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112}) (async)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xd3, 0x5, 0x80000001}, {0x6}]}) (async)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)

4m11.423303782s ago: executing program 36 (id=2586):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112}) (async)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xd3, 0x5, 0x80000001}, {0x6}]}) (async)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)

1m12.214550956s ago: executing program 9 (id=4049):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'ipvlan0\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x2e, 0x7, 0x40000000, {0xa, @tcp_ip4_spec={@local, @local, 0x4e21, 0x4e23, 0xfd}, {0x0, @broadcast, 0x8, 0x2, [0xfd]}, @hdata="6dc60e213488f696f784288b1f8212ead5c00f9eb0d4b3fb29bb59ae72b0f9996a22cccdc85af9177552bb971937c609e7e3bc37", {0x0, @remote, 0x2ce, 0x3, [0x0, 0x9]}, 0x3, 0x80}}})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040)
syz_emit_ethernet(0x0, 0x0, 0x0)

1m11.879195812s ago: executing program 9 (id=4054):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x9, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x48, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x7ff, 0x95, 0x4, 0x7}, {0xffff, 0x8, 0x1, 0x20ad}, {0x101, 0x6, 0xc, 0x7}, {0x3, 0x5, 0x3, 0x2}, {0x9, 0x70, 0xf1, 0x9}, {0xc0a, 0x8, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22040028}, 0x40040)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x34, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x6c}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000810}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m11.591566488s ago: executing program 9 (id=4060):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket(0xa, 0x2, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r3, &(0x7f0000003580)=[{{&(0x7f0000000000)=@rc={0x1f, @any, 0x9}, 0x80, 0x0}}], 0x1, 0x40040c1)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e)
getsockopt$inet6_int(r1, 0x29, 0x24, 0x0, &(0x7f000000bac0))
connect$l2tp6(r0, &(0x7f0000000f40)={0xfd, 0x0, 0x0, @empty}, 0x20)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x32600)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000940)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'wlan1\x00'}}, 0x1e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000a80)={'mangle\x00', 0x0, [0x8, 0x1, 0x6, 0x1, 0x9]}, &(0x7f00000000c0)=0x54)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="8800000004080102000000008e0000000200000106000240888400000900010073797a30000000000900010073797a30000000004c000480080002400000053608000240002de2bcad51045c2000ffff080001400000000308000240000000060800014000cc24c9b8000240000004070800014000010000080001400000000306000240000c0000fdca84442fba88fb2f8be26c180903dd747447cd9fc0da6fd2f0ffb07eba2f51f4cc61b7407024c5dc5514e0312f20546e3b575ddb4ddbee7194a451382ccda4e053"], 0x88}, 0x1, 0x0, 0x0, 0x884}, 0x88d5)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="61104e00000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @sk_skb=0x5}, 0x94)

1m11.493772845s ago: executing program 9 (id=4062):
syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc020000000000000000000000000000000200000000000004010001010031"], 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000000000000000000200500010006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x5, 0xffff0000, 0x1000, 0x2040, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0xb}, 0x50)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@remote, @rand_addr, <r6=>0x0}, &(0x7f0000000280)=0xc)
setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f00000002c0)={@rand_addr=0x64010102, @empty, r6}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000000801020000000000000000050000070900010073797a31000000002d26d0b15cd3ec7ff88a593f4b45c5690e0b03f527cb0c010ed34985b82443f174a53bfb40f960946a6981faa3feeed3ff7417a30a2191ba13fb64e4cf3280aa84a8e6fb4197fc1b4c2ef2050e9e42b05953929ba5db9ad5be1d0c61d9fa36a5922edc2c13d07864a7d2f2"], 0x20}, 0x1, 0x0, 0x0, 0x4002040}, 0x20040000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000340)={0x0, <r15=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r15}, 0xc)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000000000001410dc1b4bcfef8e6ec0000000620170000000000000000657468bc4825c48f64042f7ea4e1ba7665746830"], 0x34}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r16 = socket$rds(0x15, 0x5, 0x0)
connect$rds(r16, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080009400000000d0800064000000002080004400000001605000200940000000900010073797a30000000004a7e020073797a32bbd56fd650893d92b943c5af6c00000000140000001100010000000000000000000000000a78dd6741dac978d22833f3820600000000000000581b05ccf56df4b461ab3c3a893dcc0de32442fdec2fa9aac6fdc83f1fee1d5ace80c2be839592cd458e9c5a6b91f8c00c490a19a194392970d50a740d35983077f5e3d2d0e65e419c0145c72031ed3430f70000000000009811bbaf841db3b3104e9b45e73e455bd026cfb3655530a51e2c2633ccb03665cd7fee0099901a60cc5b723f834a1c7ef438ac3334abee94f54c8c56cf7a730fd307a402b75c48753a44c3d71cc58e4d765ad96e6b5633cdbaefd89e08d8e6d1962113fd6bc42d6f9f1400620000"], 0x94}}, 0x0)

1m11.464881534s ago: executing program 9 (id=4063):
r0 = socket(0x2d, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x2}, 0x3, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x8000, 0x7, 0xd, 0xe9}, {0x7, 0x8, 0x10, 0xa2}, {0x6, 0x30, 0x7, 0x5}, {0x0, 0x0, 0x8, 0x7}, {0x3, 0x6, 0x4, 0x3}, {0x0, 0x81, 0x17, 0x8}, {0x4, 0x8, 0x1, 0x100}]}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xb}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800)

1m11.189658361s ago: executing program 9 (id=4064):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0xffffffffffffffff}, 0xc) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x3, 0x5, 0x6})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x200, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fffffff, 0x36}}}}, [@NL80211_ATTR_IE={0x1cf, 0x2a, [@challenge={0x10, 0x1, 0xf5}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0x46, @broadcast, 0x10, @value=@device_b, 0xa592, 0x4, @broadcast, 0xfffffffc}}, @ht={0x2d, 0x1a, {0x80, 0x0, 0x6, 0x0, {0xbca4, 0x4, 0x0, 0xd, 0x0, 0x1, 0x1}, 0x400, 0x10, 0x2c}}, @measure_req={0x26, 0xcb, {0x0, 0x2, 0x60, "db0d766e628b77d367bee83bdad28437bd76f9b76a19f39c8672db32f0764ae479d8eb93a629d8710425368c3b4a5f5258df688cff63fdf960afb795092573f92c2a345088d826dcf6845ce7f56cc20540ccf52b85e6b312a3c3f79ac06f106213e85e8680c64dbed04907ed93d60b7cd5a01d68122e8c96d78989823e21dbf77b6486923b0b0490c89199a87e78d707bcfbf4028f71134c3970a09ffa83bf8f2868ec3b5d72f82ed619603f98d333662f21e669cfc0fe044eb7ef224c7e4fe9d1b079c50802767d"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x3, 0xb1, 0x66}}, @fast_bss_trans={0x37, 0xb0, {0x1, 0x5, "69ad4523c2df18e1704264973d7320bd", "1fb787060cf206b59d88a25d44265ed60c4529cb5826c0d2a06021f2714567b6", "7d5761bc4f0c89a876bea5c12a2ca2600d1652319ca2acdc438c6d5992540365", [{0x4, 0x18, "33bc9022037f97d5a8aa0e07d356fa7fb7ca7a8f1063775e"}, {0x4}, {0x2, 0x1a, "c040d774cb65d2cc166df199a53abc0c170fa3b2863170bcd128"}, {0x4, 0x6, "dce17d664ab2"}, {0x1, 0x1c, "4f37ab87ebdab8771e5e9c6dc92c27f7ed524d164f1d111f88304ef6"}]}}]}, @NL80211_ATTR_MDID={0x6}]}, 0x200}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000003c0))
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x170, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x44040}, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r1)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r6, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x2004c000) (async)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x6}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4091) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x70, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7a, 0x2e}}}}, [@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000000) (async)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x3, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x40}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040005}, 0x40000) (async)
r7 = syz_genetlink_get_family_id$team(&(0x7f0000000b40), r5) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b80)={'team0\x00', <r8=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000bc0)={'wg1\x00', <r9=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000d40)={'syztnl0\x00', &(0x7f0000000c00)={'tunl0\x00', <r10=>0x0, 0x8, 0x8, 0x6, 0x2, {{0x45, 0x4, 0x2, 0x5, 0x114, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0x4d, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@local, 0x2}, {@private=0xa010100, 0x8}, {@remote, 0x6}, {@remote, 0x1}, {@multicast1, 0x84ac40e}]}, @timestamp_addr={0x44, 0x44, 0x63, 0x1, 0x7, [{@broadcast, 0xd88}, {@multicast2, 0x3}, {@multicast2, 0x5}, {@loopback, 0xdc9}, {@multicast1, 0x7ff}, {@private=0x2, 0x400}, {@private=0xa010101, 0xfffffff3}, {@dev={0xac, 0x14, 0x14, 0x22}}]}, @timestamp_prespec={0x44, 0x24, 0x27, 0x3, 0x6, [{@multicast1}, {@remote, 0x3}, {@local, 0x61}, {@loopback, 0x712}]}, @rr={0x7, 0xf, 0x74, [@broadcast, @broadcast, @remote]}, @cipso={0x86, 0x53, 0xffffffffffffffff, [{0x6, 0x11, "ed456c9f80a323b7a61b9549fd8ef5"}, {0x0, 0x7, "6b678fdd8e"}, {0x1, 0x8, "d85c37d6a787"}, {0x7, 0xf, "5c3acc4e2c365d0768feb37e96"}, {0x0, 0x8, "f691e7ebbfb0"}, {0x1, 0xa, "3618f5697bb0f452"}, {0x5, 0xc, "23e7d1b3dfe7e92c5cdf"}]}]}}}}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000d80)={@local, @remote, <r11=>0x0}, &(0x7f0000000dc0)=0xc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000ec0)={'gre0\x00', &(0x7f0000000e00)={'sit0\x00', <r12=>0x0, 0x8000, 0x700, 0x6, 0x4, {{0x1b, 0x4, 0x1, 0xb, 0x6c, 0x67, 0x0, 0x38, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@ssrr={0x89, 0x1b, 0xf2, [@broadcast, @loopback, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x22}, @loopback]}, @generic={0x86, 0x8, "f634f5f47223"}, @timestamp_addr={0x44, 0x34, 0x75, 0x1, 0x9, [{@remote, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x2}, {@empty, 0x4}, {@multicast2, 0x2}, {@local, 0x7}, {@local, 0x8}]}]}}}}}) (async)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000f00)={<r13=>0x0, @private, @broadcast}, &(0x7f0000000f40)=0xc)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001000)={'syztnl1\x00', &(0x7f0000000f80)={'tunl0\x00', <r14=>0x0, 0x7, 0x8000, 0xfe2, 0xa9f, {{0xe, 0x4, 0x2, 0x6, 0x38, 0x66, 0x0, 0x76, 0x29, 0x0, @private=0xa010100, @remote, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x49, [@empty, @private=0xa010102]}, @noop, @rr={0x7, 0x7, 0x3d, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xb, 0x9a, [@multicast2, @multicast2]}, @end]}}}}}) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000010c0)={r1, 0x58, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r15=>0x0}}, 0x10) (async)
getpeername$packet(r1, &(0x7f0000001100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001140)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001180)={'team0\x00', <r17=>0x0})
getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000011c0)={@local, @multicast1, <r18=>0x0}, &(0x7f0000001200)=0xc) (async)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000001240)=<r19=>0x0, &(0x7f0000001280)=0x4)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001a40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001a00)={&(0x7f00000012c0)={0x704, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x190, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x704}, 0x1, 0x0, 0x0, 0x804}, 0x20000000)

1m10.623918898s ago: executing program 37 (id=4064):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0xffffffffffffffff}, 0xc) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x3, 0x5, 0x6})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x200, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fffffff, 0x36}}}}, [@NL80211_ATTR_IE={0x1cf, 0x2a, [@challenge={0x10, 0x1, 0xf5}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0x46, @broadcast, 0x10, @value=@device_b, 0xa592, 0x4, @broadcast, 0xfffffffc}}, @ht={0x2d, 0x1a, {0x80, 0x0, 0x6, 0x0, {0xbca4, 0x4, 0x0, 0xd, 0x0, 0x1, 0x1}, 0x400, 0x10, 0x2c}}, @measure_req={0x26, 0xcb, {0x0, 0x2, 0x60, "db0d766e628b77d367bee83bdad28437bd76f9b76a19f39c8672db32f0764ae479d8eb93a629d8710425368c3b4a5f5258df688cff63fdf960afb795092573f92c2a345088d826dcf6845ce7f56cc20540ccf52b85e6b312a3c3f79ac06f106213e85e8680c64dbed04907ed93d60b7cd5a01d68122e8c96d78989823e21dbf77b6486923b0b0490c89199a87e78d707bcfbf4028f71134c3970a09ffa83bf8f2868ec3b5d72f82ed619603f98d333662f21e669cfc0fe044eb7ef224c7e4fe9d1b079c50802767d"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x3, 0xb1, 0x66}}, @fast_bss_trans={0x37, 0xb0, {0x1, 0x5, "69ad4523c2df18e1704264973d7320bd", "1fb787060cf206b59d88a25d44265ed60c4529cb5826c0d2a06021f2714567b6", "7d5761bc4f0c89a876bea5c12a2ca2600d1652319ca2acdc438c6d5992540365", [{0x4, 0x18, "33bc9022037f97d5a8aa0e07d356fa7fb7ca7a8f1063775e"}, {0x4}, {0x2, 0x1a, "c040d774cb65d2cc166df199a53abc0c170fa3b2863170bcd128"}, {0x4, 0x6, "dce17d664ab2"}, {0x1, 0x1c, "4f37ab87ebdab8771e5e9c6dc92c27f7ed524d164f1d111f88304ef6"}]}}]}, @NL80211_ATTR_MDID={0x6}]}, 0x200}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000003c0))
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x170, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x44040}, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r1)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r6, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x2004c000) (async)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x6}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4091) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x70, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7a, 0x2e}}}}, [@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000000) (async)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x3, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x40}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040005}, 0x40000) (async)
r7 = syz_genetlink_get_family_id$team(&(0x7f0000000b40), r5) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b80)={'team0\x00', <r8=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000bc0)={'wg1\x00', <r9=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000d40)={'syztnl0\x00', &(0x7f0000000c00)={'tunl0\x00', <r10=>0x0, 0x8, 0x8, 0x6, 0x2, {{0x45, 0x4, 0x2, 0x5, 0x114, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0x4d, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@local, 0x2}, {@private=0xa010100, 0x8}, {@remote, 0x6}, {@remote, 0x1}, {@multicast1, 0x84ac40e}]}, @timestamp_addr={0x44, 0x44, 0x63, 0x1, 0x7, [{@broadcast, 0xd88}, {@multicast2, 0x3}, {@multicast2, 0x5}, {@loopback, 0xdc9}, {@multicast1, 0x7ff}, {@private=0x2, 0x400}, {@private=0xa010101, 0xfffffff3}, {@dev={0xac, 0x14, 0x14, 0x22}}]}, @timestamp_prespec={0x44, 0x24, 0x27, 0x3, 0x6, [{@multicast1}, {@remote, 0x3}, {@local, 0x61}, {@loopback, 0x712}]}, @rr={0x7, 0xf, 0x74, [@broadcast, @broadcast, @remote]}, @cipso={0x86, 0x53, 0xffffffffffffffff, [{0x6, 0x11, "ed456c9f80a323b7a61b9549fd8ef5"}, {0x0, 0x7, "6b678fdd8e"}, {0x1, 0x8, "d85c37d6a787"}, {0x7, 0xf, "5c3acc4e2c365d0768feb37e96"}, {0x0, 0x8, "f691e7ebbfb0"}, {0x1, 0xa, "3618f5697bb0f452"}, {0x5, 0xc, "23e7d1b3dfe7e92c5cdf"}]}]}}}}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000d80)={@local, @remote, <r11=>0x0}, &(0x7f0000000dc0)=0xc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000ec0)={'gre0\x00', &(0x7f0000000e00)={'sit0\x00', <r12=>0x0, 0x8000, 0x700, 0x6, 0x4, {{0x1b, 0x4, 0x1, 0xb, 0x6c, 0x67, 0x0, 0x38, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@ssrr={0x89, 0x1b, 0xf2, [@broadcast, @loopback, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x22}, @loopback]}, @generic={0x86, 0x8, "f634f5f47223"}, @timestamp_addr={0x44, 0x34, 0x75, 0x1, 0x9, [{@remote, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x2}, {@empty, 0x4}, {@multicast2, 0x2}, {@local, 0x7}, {@local, 0x8}]}]}}}}}) (async)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000f00)={<r13=>0x0, @private, @broadcast}, &(0x7f0000000f40)=0xc)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001000)={'syztnl1\x00', &(0x7f0000000f80)={'tunl0\x00', <r14=>0x0, 0x7, 0x8000, 0xfe2, 0xa9f, {{0xe, 0x4, 0x2, 0x6, 0x38, 0x66, 0x0, 0x76, 0x29, 0x0, @private=0xa010100, @remote, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x49, [@empty, @private=0xa010102]}, @noop, @rr={0x7, 0x7, 0x3d, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xb, 0x9a, [@multicast2, @multicast2]}, @end]}}}}}) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000010c0)={r1, 0x58, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r15=>0x0}}, 0x10) (async)
getpeername$packet(r1, &(0x7f0000001100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001140)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001180)={'team0\x00', <r17=>0x0})
getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000011c0)={@local, @multicast1, <r18=>0x0}, &(0x7f0000001200)=0xc) (async)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000001240)=<r19=>0x0, &(0x7f0000001280)=0x4)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001a40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001a00)={&(0x7f00000012c0)={0x704, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x190, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x704}, 0x1, 0x0, 0x0, 0x804}, 0x20000000)

7.054557083s ago: executing program 5 (id=4943):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x4, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40800000000000073116c00000000008510000002000000b7000000000000009500c2006a2000009500bc4dca72c25060cf59a47ba0c5b5f70dd6f3e4"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)

6.891379361s ago: executing program 5 (id=4945):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x5, 0x2, 0x7}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x1a, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="712918050000164d15efc55899616eeaf31a8cba6561bf7f666149288bf8fad53e60805c9817a508a887c86cf8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x1c}, 0x94)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @private=0xa010102}}}], 0x20}, 0x0)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x8004)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=<r9=>0x0)
bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40000)

5.763051743s ago: executing program 5 (id=4955):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000003c000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)
r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000f, 0x4fdfd44bd85a1fb4, r2, 0xa1bbb000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r1, @ANYRES64], 0x8c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)

5.570330869s ago: executing program 5 (id=4958):
r0 = socket(0x6, 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES16=r0], 0x1c}}, 0x40)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'veth0_vlan\x00', 0x1}) (async)
r1 = socket$pptp(0x18, 0x1, 0x2) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x480000, 0xfffffff8, 0x200, 0x0, 0x7fffffff}, 0x6, 0x1, 0x88, 0x3, 0x0, 0x1e, 0x19, 0xb, 0x0, 0xd47f, {0x101, 0x2, 0x3ff, 0xff, 0x4, 0x9}}}}]}, 0xff50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040884) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0x1, 0x6, 0x401, 0x20000009, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x5, 0x485e, 0x9, 0x40, 0x2, 0x7, 0x4, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0x6, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x3, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0xfffffffd, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x202, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0xff, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0x7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f780000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1000, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x20009, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x4, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000002000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14) (async)
syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/479], 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r10=>0x0})
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000079000000000000b4010000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000002065b57a2608abbebe413ec2c651104bc250592488e3ee1c6a7d5d3c116e252d60fc21c48a3129084727fe79af59285775f0e859d25ad8cba45176148cec3f5f7f4b9dbcc263d8ef3e89f70998dfffa050b8fcbdb2108bcaa1787318bd356591e5e919d08a47e23ddc8d1a3ac7801c0603157a4366aa1a578a5858"], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2469, r11, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000300), &(0x7f0000000340)=r11}, 0x20) (async)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x1}, &(0x7f0000000040)=0x28)

5.302558319s ago: executing program 5 (id=4963):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000c00078008000800000000000500010006000000050005000200000005000400e0ffffff0900020073797a310000000011000300686173683a6e65742c6e65740000000042f79225ef91568a98f5e6960123781d633f4b1222e1b129d3ddc220c2c192fae0b1d0e1a594ab4c2d6a2e448c74f8a741e31c9ebc20cdc13a686334d7698fe18708aa3c7885f2e329464d58693ecbf2d4565809f70d97df8900e9c7a66ec61734cc5bbbcb6808f001e87cf7ad619b2ca70fc4e2c05bd63223674b3b5a9bd4dec25323135580348b33cbb17fb0f9e9118e5f7def"], 0x58}}, 0x24000044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
unshare(0x40000000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r2)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010065bd7000ffdbdf252100000024002d8005000100060000000500040000ffffff0700030029000000080002000380070008000300", @ANYRES32=r3, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x80)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000000c0))
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000020202000900030073797a3100000000090001"], 0x40}, 0x1, 0x40030000000000}, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r11=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r13=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r13, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

4.623116684s ago: executing program 5 (id=4974):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0xfffffffffffffe8c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001b80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xe9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000040000000200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="010000e100"/28], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a)
r8 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4)
getsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, 0x0, &(0x7f0000000600))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r10}, 0x10)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

3.21922641s ago: executing program 2 (id=4989):
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x80)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)

2.970183199s ago: executing program 2 (id=4994):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x42, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x3, 0x0)
recvmmsg$unix(r3, 0x0, 0x0, 0x10000, 0x0)
write(r3, &(0x7f0000000100), 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000380)=0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r10, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c010000a7770d8469cd83f86d34702e3f28500bb2cbde7dc00f87e128045d903b7cef1d906790e11028b6619dd4478588f325db7f5c4eafa8f600f21210210a7f3e8e75d4b0cf8c72211c3f6b26ef43d2e221fb8dcfc32a2afd", @ANYRES16=r10, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x44040}, 0x9355722f2538bb77)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r12, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.934947122s ago: executing program 2 (id=5003):
openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r1, &(0x7f00000000c0)={0x24, @long}, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="020100000e000000140003006e657464657673696d3000000000000014001680100001800c0007000800000002000000"], 0x48}}, 0x24040800)
socket$kcm(0x29, 0x5, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4004}, 0x18)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettaction={0x3c, 0x32, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040055}, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000100)={0x5, 0x7964, 0x100000001, 0x1ee, 0xf017, 0xcf})
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0)

1.793548023s ago: executing program 6 (id=5004):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0)
r1 = socket(0x26, 0x5, 0x10003)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x3, 0x0, 0x0, @u64}]}, 0x20}}, 0x0)
write$bt_hci(r1, &(0x7f0000000100)={0x1, @read_tx_power={{0xc2d, 0x3}, {0xc8, 0x8}}}, 0x7)
shutdown(r0, 0x0)

1.744386147s ago: executing program 2 (id=5005):
recvmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)=""/254, 0xfe}, {&(0x7f0000000340)=""/119, 0x77}, {&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f0000000480)=""/235, 0xeb}], 0x5, &(0x7f0000000600)=""/238, 0xee}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000100000000000000400008510000006"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003"], 0x44}}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

1.578816985s ago: executing program 6 (id=5006):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000100)={0x1, 0x2, 0x1000, 0x1000, &(0x7f0000000240)="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", 0x98, 0x0, &(0x7f0000000040)="528cd7ab616d343976dca28d55b1a26ce822ef5cdbda66905cb40c87a634b5c0d6063858a53488dc5585e0288cdc230049712cec0881c4606c1f41fd0a6c97dfc839c4c29323706b7909e0869eb00d756ab55ac824559ca0477eb826ad5a9ca81237cfe695f811ac5fb8d0ee6c5618f2d4b5e04dd0c30cf751e81dbec77aa5e07866ad6c45851c5f973801a32cdf57857fdb2ae64a6c0593"})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, &(0x7f0000000200))
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000013c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001380)={&(0x7f0000001400)=ANY=[@ANYBLOB="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"/4888], 0x1318}, 0x1, 0x0, 0x0, 0x24000045}, 0x20008000)

1.458686188s ago: executing program 4 (id=5008):
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000fbdb760567d956e2df253a"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)=@delchain={0x38, 0x64, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfffb}, {}, {0xb, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8808}, 0x40)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', r4, 0x4, 0x6, 0x5, 0xfffffffa, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x80, 0x9, 0x2}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

1.392907913s ago: executing program 6 (id=5009):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010429bd7000fddbdf2505000000200001800d0001007564701e735c6d8d99"], 0x34}, 0x1, 0x0, 0x0, 0x4c444}, 0x4000140)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000680), r3)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce640f7b", @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf2501000000080008000000000006000a004e2100000800060000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x80)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x1, 'veth0_vlan\x00', {}, 0x8})
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0xffffffff}, 0x1c)

1.318256733s ago: executing program 2 (id=5010):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @mcast2}}}}}}, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90)
close(r0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e21, @multicast2}, 0x6c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061115c000000000006000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c)
r3 = socket(0x25, 0x1, 0x0)
connect$inet(r3, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}}, [0x9, 0x5, 0x7, 0x1, 0x4, 0x6, 0x6, 0x4, 0xc35, 0x5, 0x2, 0x0, 0xe, 0x6, 0xcec3]}, &(0x7f0000000140)=0x100)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
socket$alg(0x26, 0x5, 0x0)
connect$rose(r0, &(0x7f0000002a00)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x1, @bcast}, 0x1c)

1.10452181s ago: executing program 8 (id=5012):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00', "20000013000000f2"}, 0x38)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x683, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x6}, {0x8}]}}]}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

974.444281ms ago: executing program 4 (id=5013):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008000140000000250900010073797a30000000000900020073797a320000000014000000538b428830feea19000000000000000a"], 0x74}}, 0x0)

947.578041ms ago: executing program 8 (id=5014):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10)
bind$tipc(r1, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24004000}, 0x800)
r3 = socket(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160009000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4f}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200)=0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}, 0xfffffffe})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe0}}], 0x1, 0x20008000)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB="a42c09473a9eff6ff2ed75082c3893179054a88065f22552cb53a03c05c9e1169b5c3815d8fa4aadb5bfdead6dd2492efa79f3838b9eeab9407e7db9fec6e72f4152b72e903edad5566193cd39a017ec19c1ad79ef526bb0543305dc13d542e369dda5796b12667885e2571448d8ef8aec6cec2e8aa8e7f57f043f7ec70806ea630038084a89c06d716d078e4b23f6a2236516668d2eb58fcb1bdf41cbc601c3a2d90c72af3fbb13ed"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x800)

871.423425ms ago: executing program 4 (id=5015):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r1, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)

691.473165ms ago: executing program 8 (id=5016):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000000)=""/229, &(0x7f0000000100)=0xe5) (async)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket$igmp(0x2, 0x3, 0x2)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', <r4=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async, rerun: 64)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (rerun: 64)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000440)={0x6, 'syzkaller1\x00', {0x40}, 0x1293}) (async)
r5 = socket(0x11, 0x6, 0x4)
bind$qrtr(r5, &(0x7f0000000480)={0x2a, 0x1}, 0xc)
bind$qrtr(0xffffffffffffffff, &(0x7f00000004c0)={0x2a, 0x3, 0x4000}, 0xc) (async, rerun: 32)
sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf8, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x24}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4004040}, 0x80) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0, <r6=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000a00)=[0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0, 0xca, &(0x7f0000000a80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xa, 0x18, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff51, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @generic={0x4, 0x5, 0x3, 0xd, 0x80000001}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d80)='GPL\x00', 0xa3, 0x0, 0x0, 0x41100, 0x48, '\x00', r4, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000dc0)={0x1, 0x0, 0x5, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffff}, 0xc) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0xe, 0xe, &(0x7f0000000780)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}}, @ldst={0x951043fc8aa36c9a, 0x3, 0x0, 0x3, 0x2, 0x80, 0xffffffffffffffff}, @btf_id={0x18, 0x83c71aa588c3b349, 0x3, 0x0, 0x3}], &(0x7f0000000800)='syzkaller\x00', 0x1, 0xe0, &(0x7f0000000840)=""/224, 0x40f00, 0x4, '\x00', r4, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0xd, 0x401, 0x7ad8}, 0x10, r7, r8, 0x1, &(0x7f0000000fc0)=[r9, r10], &(0x7f0000001000)=[{0x0, 0x5, 0xf, 0x2}], 0x10, 0x100}, 0x94) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r2) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001180)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r11, 0x204, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x8800) (async)
r13 = socket(0x0, 0x1, 0xc3)
sendmsg$key(r13, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001280)={0x2, 0xf, 0x1, 0x8, 0x24, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd26}, @sadb_x_nat_t_port={0x1, 0x0, 0x4e20}, @sadb_sa={0x2, 0x1, 0x4d4, 0x7, 0x8, 0x55, 0x2, 0xc0000001}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x2}, @sadb_key={0x19, 0x9, 0x5e8, 0x0, "9f0cb9c8066a2cf087ba72d5c8cb6d9b2800a31222d8c75cff446b671bfc3a66e788db4d99c27d0cbfd28010291692e3176a21d34498c0dadec7f74f70bede0dabe57e75114d9bfd1a48abaff71cdbc6f565c32e06bda37a84e7b88d2951b63db4067b0aa6b709af80ca919091356f52143cd4dce7155fa66bd6ad46398b5fd64a056b59d78ab683cd6b1f08fd2cd27b097004a8d7a1971f93adde032f1401081b9ac75f37a2d53607733f14652c8cc2b77226d46b43ecfbc0e54f4d02"}, @sadb_x_nat_t_type={0x1}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}]}, 0x120}}, 0x4000004) (async)
setsockopt$CAN_RAW_FD_FRAMES(r13, 0x65, 0x5, &(0x7f0000001440)=0x1, 0x4)
epoll_create1(0x0)

688.641358ms ago: executing program 4 (id=5017):
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket(0x10, 0x80002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x400000000000004)
socket(0x10, 0x803, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
shutdown(r3, 0x1)
setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000780)={0x0, 0x7}, 0x8)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
recvfrom(r5, 0x0, 0x0, 0x40002062, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
r6 = socket$inet6(0xa, 0x5, 0x0)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r7, &(0x7f0000000280)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0xd0, 0x12, 0x60a, 0x0, 0x202, 0x1d8, 0x2e8, 0x2e8, 0x1d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)

529.085293ms ago: executing program 8 (id=5018):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r3, 0x1)
setsockopt(r3, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map, r2, 0x36, 0x4, 0x0, @void, @value=r2}, 0x20)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [], {0x14}}, 0x28}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)

492.218525ms ago: executing program 4 (id=5019):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000300)=0x3) (async)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000500)="00214717a70700000000030600710a5e31163ceb9d04", 0x16}], 0x1, 0x0, 0x0) (async)
write(r0, &(0x7f0000000100)="520003000100b8", 0x7) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffc, 0x0) (rerun: 64)

387.231299ms ago: executing program 6 (id=5020):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44)

263.244306ms ago: executing program 2 (id=5021):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000200000200000008000300", @ANYRES32=r2], 0x80}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f0000000180), 0x0}, 0x20)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8}]}, 0x15c}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14000000130001000000000000fdffff02"], 0x14}], 0x1}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8)
sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000cc0)={0x24, r9, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r9, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008840}, 0x24000000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000200000200000008000300", @ANYRES32=r2], 0x80}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f0000000180), 0x0}, 0x20) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8}]}, 0x15c}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14000000130001000000000000fdffff02"], 0x14}], 0x1}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) (async)
sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000cc0)={0x24, r9, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r9, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008840}, 0x24000000) (async)

238.96583ms ago: executing program 6 (id=5022):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x115, 0x115, 0xb, [@enum64={0x3, 0x3, 0x0, 0x13, 0x0, 0x3, [{0x2, 0x3, 0x3}, {0x1, 0x5, 0x7f}, {0x9, 0x8, 0xc3}]}, @datasec={0x6, 0x5, 0x0, 0xf, 0x1, [{0x3, 0x4, 0x401}, {0x4, 0x58b41b70, 0x1}, {0x3, 0x400, 0x3}, {0x4, 0xfffffff7, 0x4}, {0x4, 0x32, 0x6}], "06"}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @const={0x10, 0x0, 0x0, 0xa, 0x3}, @var={0x8, 0x0, 0x0, 0xe, 0x1, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x10, 0x1}, {0x2, 0x4}, {0x10, 0x3}, {0x10}, {0xa, 0x5}, {0xd, 0x5}, {0xf, 0x2}, {0xa, 0x5}]}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x1}]}, {0x0, [0x0, 0x30, 0x61, 0x5f, 0x61, 0x0, 0x0, 0x61, 0x2e]}}, &(0x7f0000000080)=""/129, 0x13b, 0x81, 0x0, 0x400}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x1, 0x1, 0x6, 0x5973, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, r0}, 0x94)

154.843361ms ago: executing program 4 (id=5023):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00', @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) (async)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)={0x48, r5, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x146}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040005}, 0x800)

150.218723ms ago: executing program 8 (id=5024):
r0 = socket$kcm(0x2, 0xa, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ipvlan0\x00'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
sendto(r0, 0x0, 0x0, 0x20000000, &(0x7f00000004c0)=@rc={0x1f, @none, 0xfe}, 0x80)
mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x1000002, 0x10010, r2, 0xf25b3000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)

81.841906ms ago: executing program 6 (id=5025):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000840)='notify_on_release\x00', 0x2, 0x0)
pread64(r1, &(0x7f0000000880)=""/4096, 0x1000, 0xf826)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r2=>0xffffffffffffffff, 0x8, 0x5, 0x6})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={0xfffffffffffffffc, 0x14}, 0x1, 0x0, 0x0, 0x4c005}, 0x4000050)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001900)=ANY=[@ANYBLOB="9feb010018000000000000002c00001b00000000020000000000001200000000002200000140000d00000000000000000200400000005f0000000000000000000000000000000000f421342d17f60e63d84da29b89c6256327bbae8b1f012d8667c19c3911df63b73f5867b138ffe1fb451a8e1aec6cb1798b32af13d0d653a6522afc8759e8b4192bb88eabd02f435a4fedbdba43331a478f0878c2d59be5fc895c90d41ceafa6ed64c479cd6e2a97e76f43358f641d778050a91e759a75c3c0a3ca25caafdff091ef1d806869acbefd64c0130be2c3cde747ac1c2a0785ebc1516a842249f8a71705b", @ANYRESDEC=r3, @ANYRES16=r3, @ANYBLOB="a90184a11166b0b9495db8c27f80dd57d33dd756d5026798a75861020a4b68f823955992e443555d80a0b2389d7da59af453c67cf80107d3b289630c45f3a0981467ee856de0ea485cbe144c5d4d2a934583da8cf278702a27b395d0d987c75eeb67c9f2b7b2fe0704bf3c3823e7418384d68a889a68d0d74d01c7de0601647db93dd0e62bcca1569184ea417d5b3f5957b5717e1307ea2b3277184aad9ff485120525bd5646747949d33339b942095c930f3f0f01bbaa8e47b243680f029ba1c81a3da6db03e8ce523ac3153efbdce2de5e773c83e5ebf39f1248b096a24944f3c4fb7ce581099f2c32bdfe63a9867d6f463fc26bdd7bb7908fe3ede48604c99bf39208ef3631995640596ae3ec432fcc847b04562b7b229eb7a04462d483820b2d12bc23ae965742465a99fe2d148d6946a6a58808593fcbb3a0fb925c2164b38881e7cf3f0f65e7b61b7baba6a82a2b0e22b715461b0d36f3facedb33909e15e9aa8d6c72483ca6dbaf42c75583dcc0ff020cae323d8cbd9eab8f4d412cb5dea4cd0b3c006ded41e2b809ed01eb6a4393db06db62fd94260529033db5f888374d66aaca2a03f9cbc41bcd5b1b2177d48d7131c9afb56d7ecca1deff5f7edda1c454ba1eb869032a12f5050127ebf88baf9393329c5eb681e73e9d564b8d2a0f706f52f0eeec1e5c038e3be499d836401ca4bd7b3d2163703057ab03913d619941d8acd76f604ae2fa9b7a0f5669e0d9b47bf8872d2b3be40dc65079e496624a23c588053deaab05c7099d52b31837adf282df0333b144b5ecaab88125af6d7affb41b649b93e89404aff3e8f58db13712d8c66a9d118e39e91658fcd22e512cb0af331ec500656aeeb5794eb88a63dbec3f7f90d40aef9507ddba8e304da7721992e6500390be2d70d7490df3db2009a420c50c43d41f77a5effefd8e9affd2321849e6c6aa59533a52865067483d0b11da59233b542bac6095f45523790cdf9e8028e3c8b6ba2dbb05c4c640e203b32c4cef23ef8fb705f2f0fc0766a4a5365c95bf60d3f3ef3a6c29bcf895a4e4e081ee8359db1a1e95754e3cdad81fea3c66d9fb03f0b76b37a46911ee0ceed071d951da6882fda8fd2562aa7cabf832fb165b56fb6ffc7d76a822044c55c775c1c260496df03189be4d77a03f9cf70bfba96e68600cd2dd7672ea0d6107a21fb4bac21ff9e053237778f2947aecbf29a5c91ac7fd9b3667ce9253fa443f01fbd6a7b4055e9ae79e1d0b32184ed23a9590eea9632e272c4c35f0a0dce7a3bdb7ed19bf1befaa435b71cd6c6aa52e588fa98b8cf0051ca8bbd693209aa4a5b9c60df5e92d8f02d3e14d4d092dbae1055e27b69e47cc6b78fb075ba35c49d9ff3a0ce1aa2e5b21547459d84a5206f2f5c0a7803788f090ddd199bdfcdefef2d1e738116271215e681af564706672f11ddc32462bb9ae5dd4e5e3b043a957fc50f477ad97a3aab95d3638d88268706ce99094c6946f92d18528baf22a64d168a384e18faa8df35a267e64b5457850d980d6e5301451385a0f8d8d4d895c3a17d33827a066eaa58270430dce1eed9f9e693c608d66998e592a351e12f202ebe3cd98dd20c2a2f528d71b7595e3cddfdba24c1f9c2fba434945ec6627a885cc6609e88813ceac96df6be139e0a82201971038b6a23424b78292d86021c1546033df8fa28151f68d16aae1a5edeb1c6dd3f7e576bd2808f28f673ecf02c757e64544e14a67352f1bd65a0d02e416318c968071549fc8fb32ebdf82e431225845e113fe65c84644cbc4b0557688bcf96c98f1a319515a4937ccb8bb5547ebc1cdba2f29ed0ca04ff40388804578a599cdd1092f92f7d67b6b60738af13d9d49a8536f9dbce0b5b75f22888a1aabef31cb750dd9e0774e0b60e64961ea8d713e0df4be6057d4b46d2c5278a403db8964345a020f9f009b6ada5deda7e777df0cf98d6eda15b268ce1c8b01285a81bd6eade416c9af3876be12f2a54dc4979a2f23a651630e80e69daa74d3043adec8e822c4720591f77b2eb869bde25323ed0929a3b6c5f278c12d040aa60a5052b53b411f5c8459bc494f91c47e7974f8e8305c6fcecd8c2bc387a2da2e8549011b152920dbd5d0f3ca6456472390fda3c1fdd4494e6e8a13bab7a57546504f519bc7869e71bd89f1b84b60747f87e89723609e265eff99037ee94b0bad05095e75a5a2d31856df8c536cba6cfe8fdce9d4ee73cc0b16113c26319cc0d5cd623c8fa33b9e13171ef469a5483df421481689ed249c5d46eb43e96f69c9013ec55bf3e3302bd0f1a6838e62ca01375b554785e060844e79bd37a34623379325806adf5079e31e03a0a921fba0a2b3bc1a85e58ed75168f8585ac5691838700a02090fea09a37d379422d11ef7ba026051c33a02fff5fc99a6f8e221b129accbb072118da892e01753581250872f40c41d4354a11f0fb73aa51b5f3f7869dff30f57c5c70cfebbee6abce506d0e8c794acf287e77c330963e89ea06144c1285c70a5c5c294e5810411bf38713a374da77210a5fbfb662d133edbe746620b562574d4b39033950bd5bdc10c7179b34a7c08d0b65ceae6b463bd15bb6f43157a0174f21a6085f43e5fb5d938581d7b42b9fe8494d5854f9d79df64383569f8926aaa040ff68515407797458d213c22855686b11cc19e5f55befe47d2826553817dd3fae052b269b4e07193b20fa797c285631db388a3e980dbe45560811e282ccd670ab7b103e42b4970a765265061995b9774481ddec803d50b488ffe70705f053bda276f5c01049b9a4262bc7e9ed19342907f0a1b176cf5c9bb272fdc88579b45dab2018535d866721bd972311eb6a38ba986e86e5d62c96e5159907ba4ec017374daa9abee399a5b63cd58ca02a37c805eafef664bab737dd2ed3c7ce1429ef9274ce71a58eb86d0882b790ae185ca1d5d0510ff026398008049af4ba839947e23e6e07dc6bc8457887a11b667a577a535f0efaad363c9737091ddce64cc920a994c1b73f60c276a98af99a9e9807a01cd65ae1ce415d97b152fd92ce9278eb4fc57be95b7b6354a52b38def64e35e66a8e9531fbe7fc51d97c54ecf7c6425c2f3c1ef27b7019ecf4dfba8bf124a75e4f1f7db4e612a168d5917cff051a05fb68b577849afb9aa5999aa5affa8cbb44cc1bb88f4ab7bc2d23d8885f412c451fd22e0f8ee391a0d9eebb6c7d18f4472202b698953ed2d31c03885f1aaa128b9ad9a93908ceb94f6eb406f514a7d043ec5ae77da9ea888df923d857e8276cd54ef91ec58824662fecc9022746bbda55fe14ec96bf6d19290a12fc7a3e2ead49421e324120ebaf1ce54e5871997133de686050a63148629a423f7e9bed3dfc4161d6bf884d52bd87488ace2cb151c0b3ea2b0954881a10a4b0352de12a4ff0ff54fb55d984427bad29b8787a98d77662f5f6b5842a54a1b744b06c1f7a36966585180086e475e1e349f55efe2ca123662aa56c8463ec430e003088265a1517cf579f3e77df18ed8c15b1a7a53f175a72610d24df6d89e6db8f12c1c10ae81259faf2d136ef1a88bec55854d2f1cb698276eb1aa84e26e14fe62ff6dd4f0fe5dac7cd8dc6d6d7e379ed9265fd65344fcc02df6b872588fc1a03e7b3ee0c1a9834019ed1dd4dca3432221f4f9041d530a0fe46e9c076fee3c2cbaf4bffefcc258eb3a93504ea0cf3805ac7ba2f8c1998e5f3da7cc926f70835f1fae7602be8414b05b61aeb6524d208408f050b3c0775c4475cc5a5fd0819f564675e85eac57ba0466ef97afa06d27dad42ecce9f329ca2c5254c55d9ba8c0bb53e436d251c60be453454bd50861cf72fcc518785f49e00b8e4170b342aa2792a53033bd4797a441fcf7723c3d4bec9b79b3a12c4f22cc7ec2dea10361066854d78bf3a73d19045c236890e2ad8ed4b80aa5b90b7592df8b479881332c706ea9841bd41dac80dc5a1a2fa0d23be30de44c5ea82ce73b73419d73b32ace9894c4f7f0f55027f3a4b24c856e022211391a3ae8d53e888d5ed001d475127f58651660aa7aee16e1a40731c5668a418afbdb1771bb918e41347916a31ca33cce00f83e326d4c9ae9523bfad038587e04666f9f8fffc080c2c3da5ed23b4d5eda2cb3c18d6ed32a8ecb4bd66125dca5327f6ce669ea541b52b79c52305a8d8133fdc90a9bd1afd3c8bdeb107666d3178c7615a1dbfecee68eac91e95da85f5c3106f26ae684ec58235ffe7687c646df1a1eb03e87fc48da52d647f2913ff4dd4897efed57c5462c5e171b332077e62b1cd904db5e34811ea34863c87baa362cc8021fbfcc9c5d74dbea310c5007c8914aa50dff74fe9e2fe2e386b1e376df976bc310edcec3497d6430ed3584f0a5b9a75af0df7244e7c6cf1ab585997b47a090c92a4656f984bfad2c0dfd154267ba0b45bb9badd996a5af0913b8dc4949f855895eda8445ac8fecedb151f3108a21736cd91e9e08c09196aa7f31b34390e73fa5a4eade6fc1690303dcc87ca718f1a2fc4da8bb918b26349db0ba736894cbe25e3960a668e617743ef230a27efa5cb939aa45ad9492496227fb93dd09d6449bec95c317debc53fb3e08f29814faac7db60ee2bb9a4563b468d4cad1e696c77f70652627e6a9a094573d368941e06105236b1dba41b870f68b6970f97d138eecd72de8123185472a889ca91451b297fb3bffe4d844fba655e679727c034973b8dc4a3e32324536d324df7d2320b42a83063cc38ffb126c4ae2f2ccd78852ac22fb317bd2198100ca2c3d1d157c28d57549d4cf00626e169f3974a67e496ed829b4c9d76fca86178109244359ae852c063ad5bc82b02de7022e8b24051edf23b63764ca14ee30b33549f605a0b565a12159df8dc01df74ec8d305b13e8e267057b95cf722aaa86dca3ccf7621fda91fc7bd76aa1c37f6284ced54964d46bac95db278ddb2f92e7c9b9d22cccb3588dbab0a8c24c3d75e7f16d59ddb2ee672d5d930789c508ec4d32f003f35efae8cc946eb57ce107b01fc5831aa6d9017c2145fcf2e06ef6915802ee19be0d7cd94a004017908e7e11713f4bb72fa5274ade49deda6e669c49c1f05535d0039c2e26492691ad23a7b0c980c1a1671bc17fefcc173f49488d527708366161344bdb46e8626d790af533825492ef4b9c74ca9f1d89408a06c5dd74901d145c5ad47dab97d37b33dd50ef969fb07ba08b93845f0f01627a480cc2e9117f0641015aad8867da717d60efcb400cdebce9080e756f56b4ba0368744dca57ad5d11bf3a54931b512540ad1b94f5777def5abc06af6ffa82698faf0c8c6e316fd3f48a6d7682d3537d016e5728bc5261bcfd60f5b1dc78050f46a9484416282f29d198246d715d127d8332edcb5f970e0bab29e847a6e27804cfe37f793763a4a614deb8b747c4d0a14db9b81b277a8297578e9ad11308d9ac590e7a3341251fcae0a0e4d212a9bacd06180ae275187da1e2fe6cf8a62d5f78f41b8e41ba0ef4951a0b29d78031f2d90aed641461dfbecd60f90584ca046b30ee9c2359b62ade5d8080b7ae3a52cd879e0e568032d307a44c2c9f6bb9395c875e5701a44cd8ddb84de286e63c9f72dd9b69f933878730abc3b986756fa81af22e9f090fc7f2c0b08e40da9bdcb3e401ba099f55a7cdeef7b5064627d73e57ee9c4d458d0d0619c214e5a4596fc3a7de31aab1dafc911a122446786fa1e659a02e5041626c10e1d206f8b75fd3f215fdeb5888cd2093588a3dba8a8b62ece2e1ffbddd64a7f353f56dbaf47a3412b9e2b", @ANYRES8=r3], 0x0, 0x48}, 0x28)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r6, 0x11c, 0x1, 0x0, &(0x7f0000000400))
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r7 = accept$alg(r5, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x2}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}}, 0x0)
sendmmsg$alg(r7, &(0x7f0000005fc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}], 0x1, 0x800)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r10, 0x800448d3, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100ffff00100003800c0000800800034000000002"], 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0xd78a}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/15, 0xf}], 0x1}}], 0x2, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0)

0s ago: executing program 8 (id=5026):
r0 = socket$alg(0x26, 0x5, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
accept(r0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x80800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

kernel console output (not intermixed with test programs):

96784][T16941] netlink: 'syz.8.3124': attribute type 1 has an invalid length.
[  325.152827][T16941] netlink: 'syz.8.3124': attribute type 1 has an invalid length.
[  325.202941][T16941] netlink: 'syz.8.3124': attribute type 1 has an invalid length.
[  325.214888][T16941] netlink: 'syz.8.3124': attribute type 1 has an invalid length.
[  325.233371][T16941] netlink: 'syz.8.3124': attribute type 1 has an invalid length.
[  325.242256][T16941] netlink: 'syz.8.3124': attribute type 1 has an invalid length.
[  325.250368][T16941] netlink: 'syz.8.3124': attribute type 1 has an invalid length.
[  325.798804][T16981] __nla_validate_parse: 7 callbacks suppressed
[  325.798839][T16981] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3133'.
[  325.836393][T16981] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3133'.
[  326.002891][T16971] bond4: entered promiscuous mode
[  326.008225][T16971] 8021q: adding VLAN 0 to HW filter on device bond4
[  326.331654][T16985] bond4: (slave bridge3): making interface the new active one
[  326.352046][T16985] bridge3: entered promiscuous mode
[  326.384399][T16985] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  326.542795][T16780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.553760][ T6029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.852805][T17020] validate_nla: 28 callbacks suppressed
[  326.852825][T17020] netlink: 'syz.8.3145': attribute type 1 has an invalid length.
[  326.880925][T17020] netlink: 'syz.8.3145': attribute type 4 has an invalid length.
[  326.897752][T17020] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.3145'.
[  326.953986][T17027] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3148'.
[  327.208092][T17035] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3150'.
[  327.399131][T17039] syzkaller0: refused to change device tx_queue_len
[  327.412185][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3153'.
[  327.587061][T17046] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3154'.
[  327.654077][T17015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  327.779450][T17051] IPv6: sit1: Disabled Multicast RS
[  327.786306][T17054] netlink: 'syz.5.3156': attribute type 13 has an invalid length.
[  327.874676][T17054] veth0_macvtap: left promiscuous mode
[  327.902070][T17054] macvtap0: entered allmulticast mode
[  327.953509][T17054] macvtap0: refused to change device tx_queue_len
[  327.973049][T17054] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3156'.
[  327.994312][T17054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3156'.
[  328.035883][T17054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3156'.
[  328.111107][T17054] tunl0: entered promiscuous mode
[  328.134372][T17054] netlink: 'syz.5.3156': attribute type 3 has an invalid length.
[  328.366598][T17071] team0: Device ip6gre1 is up. Set it down before adding it as a team port
[  328.472395][T17079] netlink: 'syz.6.3162': attribute type 1 has an invalid length.
[  328.490914][T17079] netlink: 'syz.6.3162': attribute type 11 has an invalid length.
[  329.193244][T17104] geneve2: entered promiscuous mode
[  329.198607][T17104] geneve2: entered allmulticast mode
[  329.223882][   T12] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  329.240580][   T12] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  329.249450][   T12] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  329.279091][T17111] nbd: socks must be embedded in a SOCK_ITEM attr
[  329.293725][   T12] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  329.424228][T17118] netlink: 'syz.8.3177': attribute type 11 has an invalid length.
[  330.433618][T17170] syzkaller0: entered promiscuous mode
[  330.439688][T17170] syzkaller0: entered allmulticast mode
[  330.459727][T17170] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  330.966617][T17195] netlink: 'syz.6.3199': attribute type 39 has an invalid length.
[  330.972376][T17197] __nla_validate_parse: 10 callbacks suppressed
[  330.972394][T17197] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3200'.
[  331.047899][T17198] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3199'.
[  331.114066][T17197] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3200'.
[  331.382504][T17210] netlink: 45 bytes leftover after parsing attributes in process `syz.9.3203'.
[  331.383786][T17216] IPVS: Error joining to the multicast group
[  331.672584][T17234] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3208'.
[  331.685743][T17234] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3208'.
[  331.701459][T17234] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3208'.
[  331.727235][T17232] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3211'.
[  331.741081][T17234] netlink: 136 bytes leftover after parsing attributes in process `syz.8.3208'.
[  331.788834][T17236] nft_compat: unsupported protocol 1
[  332.069417][T17260] netlink: 'syz.8.3218': attribute type 28 has an invalid length.
[  332.079896][T17260] netlink: 'syz.8.3218': attribute type 3 has an invalid length.
[  332.093915][T17260] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3218'.
[  332.161398][T17255] syzkaller0: entered promiscuous mode
[  332.198358][T17255] syzkaller0: entered allmulticast mode
[  332.227292][T17265] IPVS: ip_vs_add_dest(): server weight less than zero
[  332.306683][T15408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.437191][T17261] tipc: Started in network mode
[  332.444180][T17261] tipc: Node identity ac14140f, cluster identity 4711
[  332.452346][T17261] tipc: New replicast peer: 255.255.255.255
[  332.462392][T17261] tipc: Enabled bearer <udp:s>, priority 10
[  332.719860][T17289] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  334.400158][ T5883] tipc: Node number set to 2886997007
[  334.569277][T17315] tc_dump_action: action bad kind
[  334.608793][T17320] ip6gre0: Master is either lo or non-ether device
[  334.698358][T17326] netlink: 'syz.4.3238': attribute type 30 has an invalid length.
[  334.767096][T17326] bond1: option arp_missed_max: invalid value (0)
[  334.774873][T17326] bond1: option arp_missed_max: allowed values 1 - 255
[  334.788228][T17326] bond1 (unregistering): Released all slaves
[  334.844968][T17336] netlink: 'syz.6.3241': attribute type 17 has an invalid length.
[  334.925783][T17341] 8021q: VLANs not supported on ipvlan1
[  335.216142][T17352] can: request_module (can-proto-0) failed.
[  335.874171][T17403] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  335.900219][T17403] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  336.037448][T17413] __nla_validate_parse: 8 callbacks suppressed
[  336.037466][T17413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3266'.
[  336.054001][T17414] netlink: 860 bytes leftover after parsing attributes in process `syz.4.3265'.
[  336.078504][T17414] openvswitch: netlink: Flow key attr not present in new flow.
[  336.117481][T17414] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3265'.
[  336.146000][T16779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.287797][T17425] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  336.455405][T17436] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3273'.
[  336.503180][T17431] netlink: 'syz.4.3271': attribute type 10 has an invalid length.
[  336.522318][T17441] netlink: 'syz.4.3271': attribute type 10 has an invalid length.
[  336.534480][T17440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3274'.
[  336.639308][T17431] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  336.938506][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3281'.
[  337.005487][T17470] x_tables: duplicate underflow at hook 1
[  337.264179][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3289'.
[  337.291924][T17478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  337.299269][T17478] IPv6: NLM_F_CREATE should be set when creating new route
[  337.306598][T17478] IPv6: NLM_F_CREATE should be set when creating new route
[  337.315766][T17486] xt_CT: You must specify a L4 protocol and not use inversions on it
[  337.343520][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.369926][T17489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3290'.
[  337.392821][T17489] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.420673][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.430443][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.449568][T17489] netlink: 'syz.4.3290': attribute type 2 has an invalid length.
[  337.541676][T17489] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  337.570727][T17498] veth0: entered promiscuous mode
[  337.630228][T17497] veth0: left promiscuous mode
[  337.639567][T17503] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3294'.
[  337.681119][T17503] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3294'.
[  337.830134][T17508] netlink: 'syz.5.3296': attribute type 3 has an invalid length.
[  338.142518][T17522] netlink: 'syz.9.3299': attribute type 18 has an invalid length.
[  338.233805][ T3941] netdevsim netdevsim9 ªªªªªª: set [0, 0] type 1 family 0 port 8472 - 0
[  338.264838][ T3941] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  338.294874][ T3941] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  338.374135][ T3941] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  338.506534][T17530] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  339.245794][ T5883] IPVS: starting estimator thread 0...
[  339.246054][T17561] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  339.344444][T17567] IPVS: using max 25 ests per chain, 60000 per kthread
[  339.404628][T17573] xt_NFQUEUE: number of queues (27568) out of range (got 68779)
[  339.429902][T17573] netlink: 'syz.6.3315': attribute type 1 has an invalid length.
[  339.457898][T17576] xt_NFQUEUE: number of queues (27568) out of range (got 68779)
[  339.609565][T17586] x_tables: unsorted underflow at hook 3
[  339.619995][T17586] x_tables: unsorted underflow at hook 3
[  339.990113][T17603] netlink: 'syz.5.3323': attribute type 10 has an invalid length.
[  340.007250][T17605] netlink: 'syz.5.3323': attribute type 10 has an invalid length.
[  340.133863][T17589] vxcan1 speed is unknown, defaulting to 1000
[  341.167172][T17651] netlink: 'syz.9.3337': attribute type 1 has an invalid length.
[  341.349352][T17651] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  341.374811][T17665] netem: change failed
[  341.561956][T17668] ipt_REJECT: ECHOREPLY no longer supported.
[  341.860300][T17681] __nla_validate_parse: 6 callbacks suppressed
[  341.860322][T17681] netlink: 212 bytes leftover after parsing attributes in process `syz.9.3342'.
[  341.914636][ T4101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.312188][T17713] netlink: 'syz.4.3351': attribute type 30 has an invalid length.
[  342.695951][T17732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3354'.
[  342.866524][T17732] hsr_slave_1 (unregistering): left promiscuous mode
[  343.045350][T17751] openvswitch: netlink: Flow actions attr not present in new flow.
[  343.091684][T17753] netlink: 'syz.8.3361': attribute type 1 has an invalid length.
[  343.095716][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3360'.
[  343.166549][T17760] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3363'.
[  343.183174][T16352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.820909][T17750] netlink: 'syz.9.3360': attribute type 1 has an invalid length.
[  344.828774][T17750] netlink: 'syz.9.3360': attribute type 2 has an invalid length.
[  344.837663][T17753] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  344.992684][T17774] netlink: 'syz.9.3365': attribute type 1 has an invalid length.
[  345.124627][T17774] bond2: entered allmulticast mode
[  345.141627][T17774] 8021q: adding VLAN 0 to HW filter on device bond2
[  345.339344][T17795] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3371'.
[  345.363430][T17798] team0: Device ip6gre2 is up. Set it down before adding it as a team port
[  345.714851][   T80] smc: removing ib device syz2
[  345.783586][T17825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3377'.
[  345.844071][ T5964] vxcan1 speed is unknown, defaulting to 1000
[  345.877086][ T5964] syz2: Port: 1 Link DOWN
[  346.163519][T17835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3379'.
[  346.889761][T17860] bridge0: port 3(ipvlan2) entered blocking state
[  346.943353][T17860] bridge0: port 3(ipvlan2) entered disabled state
[  346.950175][T17860] ipvlan2: entered allmulticast mode
[  346.991177][T17860] bridge0: entered allmulticast mode
[  347.010268][T17860] ipvlan2: left allmulticast mode
[  347.016985][T17860] bridge0: left allmulticast mode
[  347.190290][T17870] netlink: 'syz.9.3391': attribute type 12 has an invalid length.
[  347.223771][T17870] netlink: 'syz.9.3391': attribute type 29 has an invalid length.
[  347.235055][T17870] netlink: 148 bytes leftover after parsing attributes in process `syz.9.3391'.
[  347.258426][T17870] netlink: 59 bytes leftover after parsing attributes in process `syz.9.3391'.
[  347.519030][T17883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.604648][T17881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.671304][ T3511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.703711][T17888] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  347.715663][T17881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.782812][T17890] netlink: 'syz.6.3398': attribute type 32 has an invalid length.
[  347.814479][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3398'.
[  347.831481][T17888] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3396'.
[  347.944133][T17890] bond5: option coupled_control: invalid value (22)
[  347.958836][T17890] bond5 (unregistering): Released all slaves
[  348.813124][T17912] syzkaller0: entered promiscuous mode
[  348.818646][T17912] syzkaller0: entered allmulticast mode
[  348.838843][T17928] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.3408'.
[  348.951348][ T3511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.028218][T17931] netlink: 'syz.6.3409': attribute type 28 has an invalid length.
[  349.042488][T17932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3408'.
[  349.061926][T17931] netlink: 'syz.6.3409': attribute type 3 has an invalid length.
[  349.080318][T17931] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3409'.
[  349.124566][T17933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3408'.
[  351.285289][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3414'.
[  351.401432][T17961] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3418'.
[  352.244353][T18011] netlink: 'syz.5.3435': attribute type 4 has an invalid length.
[  352.255598][T18011] __nla_validate_parse: 1 callbacks suppressed
[  352.255618][T18011] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3435'.
[  352.299396][T18021] ip6t_srh: unknown srh invflags 4000
[  352.309277][T18018] veth1_to_bridge: entered allmulticast mode
[  352.360806][T18021] openvswitch: netlink: Key type 31 is not supported
[  352.369194][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.566656][T18030] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  352.579225][T18034] openvswitch: netlink: Actions may not be safe on all matching packets
[  352.647770][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3443'.
[  352.672101][T18034] lo: entered allmulticast mode
[  352.694148][T18034] tunl0: left promiscuous mode
[  352.705265][T18034] tunl0: entered allmulticast mode
[  352.718270][T18034] gre0: entered allmulticast mode
[  352.747159][T18034] gretap0: entered allmulticast mode
[  352.782651][T18034] erspan0: entered allmulticast mode
[  352.807279][T18034] ip_vti0: entered allmulticast mode
[  352.833571][T18034] ip6_vti0: entered allmulticast mode
[  352.863993][T18034] sit0: entered allmulticast mode
[  352.886124][T18034] ip6tnl0: entered allmulticast mode
[  352.898496][T18034] ip6gre0: entered allmulticast mode
[  352.909204][T18034] syz_tun: entered allmulticast mode
[  352.931879][T18034] ip6gretap0: entered allmulticast mode
[  352.952716][T18034] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.960804][T18034] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.977485][T18048] netlink: 'syz.9.3451': attribute type 1 has an invalid length.
[  352.979816][T18034] bridge0: entered allmulticast mode
[  352.990516][T18048] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3451'.
[  353.005164][T18034] bond0: entered allmulticast mode
[  353.011748][T18034] bond_slave_0: entered allmulticast mode
[  353.017674][T18034] bond_slave_1: entered allmulticast mode
[  353.031710][T18034] team0: entered allmulticast mode
[  353.036960][T18034] team_slave_0: entered allmulticast mode
[  353.043709][T18034] team_slave_1: entered allmulticast mode
[  353.049727][T18034] geneve0: entered allmulticast mode
[  353.063308][T18034] nlmon0: entered allmulticast mode
[  353.071494][T18034] caif0: entered allmulticast mode
[  353.080039][T18034] vxcan0: entered allmulticast mode
[  353.091973][T18034] vxcan1: entered allmulticast mode
[  353.100301][T18034] veth0: entered allmulticast mode
[  353.123192][T18034] veth1: entered allmulticast mode
[  353.133023][T18034] wg0: entered allmulticast mode
[  353.142008][T18034] wg1: entered allmulticast mode
[  353.151322][T18034] wg2: entered allmulticast mode
[  353.158233][T18034] veth0_to_bridge: entered allmulticast mode
[  353.169813][T18034] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  353.187183][T18045] lo: entered promiscuous mode
[  353.198367][T18045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  353.408702][T18064] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3455'.
[  353.425349][ T6029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.599326][T18075] netlink: 'syz.5.3459': attribute type 1 has an invalid length.
[  353.763073][T18088] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3461'.
[  353.885542][T18092] delete_channel: no stack
[  353.895520][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3462'.
[  354.066057][   T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.112438][T18107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3467'.
[  354.164835][T18109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3468'.
[  354.991123][T18148] bridge: RTM_NEWNEIGH with invalid state 0x8
[  355.006638][T18149] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3476'.
[  355.045723][T18148] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3476'.
[  355.346677][T18169] netlink: 'syz.6.3484': attribute type 6 has an invalid length.
[  355.452029][T18176] netlink: 'syz.4.3486': attribute type 12 has an invalid length.
[  355.483331][T18176] netlink: 'syz.4.3486': attribute type 29 has an invalid length.
[  355.690993][T18186] 8021q: adding VLAN 0 to HW filter on device bond5
[  355.723833][T18186] netlink: 'syz.6.3489': attribute type 10 has an invalid length.
[  355.729478][T18195] raw_sendmsg: syz.5.3492 forgot to set AF_INET. Fix it!
[  355.803905][T18186] bridge0: entered promiscuous mode
[  355.809803][T18186] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  356.089288][T18222] netlink: 'syz.8.3498': attribute type 1 has an invalid length.
[  356.266630][T18228] bond2: (slave ip6gretap1): making interface the new active one
[  356.277897][T18228] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  356.520117][T18242] bridge5: port 1(veth0_to_bond) entered blocking state
[  356.580756][T18242] bridge5: port 1(veth0_to_bond) entered disabled state
[  356.588021][T18242] veth0_to_bond: entered allmulticast mode
[  356.604671][T18242] veth0_to_bond: entered promiscuous mode
[  356.634946][T18251] xfrm1: entered promiscuous mode
[  356.640219][T18251] xfrm1: entered allmulticast mode
[  356.697436][T18253] macvtap1: entered promiscuous mode
[  356.703343][T18253] macvtap1: entered allmulticast mode
[  356.712081][T18253] veth1_vlan: entered allmulticast mode
[  356.768363][T18257] macvtap2: entered promiscuous mode
[  356.776645][T18257] macvtap2: entered allmulticast mode
[  356.874116][T18264] pimreg: entered allmulticast mode
[  357.278359][T18290] syzkaller0: entered promiscuous mode
[  357.292140][T18290] syzkaller0: entered allmulticast mode
[  357.516698][T18306] IPv6: sit1: Disabled Multicast RS
[  357.690938][T18319] __nla_validate_parse: 14 callbacks suppressed
[  357.690960][T18319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3532'.
[  358.009955][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3537'.
[  358.053808][T18344] netlink: 'syz.4.3539': attribute type 39 has an invalid length.
[  358.055934][T18340] gtp0: entered promiscuous mode
[  358.071448][T18340] gtp0: entered allmulticast mode
[  358.175805][T18349] netlink: 'syz.8.3542': attribute type 2 has an invalid length.
[  358.192468][T18339] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3537'.
[  358.232792][T18349] �9: entered promiscuous mode
[  358.459571][T18363] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  358.556821][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.597545][T18371] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3549'.
[  358.716566][T18374] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  358.946246][T18400] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3556'.
[  359.181996][T15408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.226208][ T5964] IPVS: starting estimator thread 0...
[  359.243673][T18420] netlink: 'syz.4.3561': attribute type 58 has an invalid length.
[  359.255176][T18420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3561'.
[  359.275134][T18417] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3562'.
[  359.333506][T18419] IPVS: using max 28 ests per chain, 67200 per kthread
[  359.445231][T18417] hsr_slave_0 (unregistering): left promiscuous mode
[  359.731205][T18439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3566'.
[  359.742350][T18440] veth0: entered promiscuous mode
[  359.763525][T18437] veth0: left promiscuous mode
[  359.894675][T18446] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3571'.
[  359.905498][T18446] netlink: 120 bytes leftover after parsing attributes in process `syz.9.3571'.
[  360.040226][T18459] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.159944][T18463] netlink: 'syz.9.3576': attribute type 4 has an invalid length.
[  360.200813][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.280673][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.354706][T18390] udevd[18390]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  360.384654][T18390] udevd[18390]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  360.432789][T18477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.442061][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.466254][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.770969][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.796790][T18481] ipt_REJECT: ECHOREPLY no longer supported.
[  360.961247][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.070944][T18489] netlink: 'syz.4.3582': attribute type 1 has an invalid length.
[  361.120695][T18493] netlink: 'syz.6.3583': attribute type 1 has an invalid length.
[  361.129626][T18493] netlink: 'syz.6.3583': attribute type 7 has an invalid length.
[  361.138873][T18493] netlink: 'syz.6.3583': attribute type 8 has an invalid length.
[  361.184083][T18493] openvswitch: netlink: IP tunnel attribute has 190 unknown bytes.
[  362.332604][T18544] tap0: tun_chr_ioctl cmd 2148553947
[  362.578902][T18551] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  362.608085][T18551] bond3 (unregistering): Released all slaves
[  362.837204][T18562] IPVS: ip_vs_edit_dest(): server weight less than zero
[  362.925561][T18565] __nla_validate_parse: 11 callbacks suppressed
[  362.925583][T18565] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.3603'.
[  362.991439][T18568] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  363.106507][T18576] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3605'.
[  363.235888][T18581] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3606'.
[  363.359257][T18581] bond3 (unregistering): Released all slaves
[  363.449437][T18593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3609'.
[  364.005289][ T5826] Bluetooth: hci5: link tx timeout
[  364.012407][ T5826] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  364.307039][ T3538] net_ratelimit: 14 callbacks suppressed
[  364.307061][ T3538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.321081][ T3538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.470141][T18652] netlink: 232 bytes leftover after parsing attributes in process `syz.5.3628'.
[  364.486350][T18653] netlink: 'syz.9.3629': attribute type 1 has an invalid length.
[  364.570633][T18653] 8021q: adding VLAN 0 to HW filter on device bond3
[  364.621701][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.742987][T18668] ip6gre1: entered allmulticast mode
[  364.780638][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.789436][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.805235][T18668] netlink: 'syz.6.3630': attribute type 1 has an invalid length.
[  364.908207][T18674] bond6 (unregistering): Released all slaves
[  364.940797][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.949832][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.420005][T18701] veth9: entered promiscuous mode
[  365.426867][T18701] veth9: entered allmulticast mode
[  365.552647][T18705] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3644'.
[  365.663017][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.994601][T18742] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3654'.
[  366.060676][ T5826] Bluetooth: hci5: command 0x0406 tx timeout
[  366.067149][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.217599][T18762] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  366.264331][T18762] bond2 (unregistering): Released all slaves
[  366.549106][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3661'.
[  366.635373][T18782] netlink: 'syz.8.3665': attribute type 8 has an invalid length.
[  366.649325][T18782] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3665'.
[  366.673476][T18782] bond0: entered promiscuous mode
[  366.682324][T18782] ip6gretap0: entered promiscuous mode
[  366.693711][T18782] gretap0: entered promiscuous mode
[  366.702486][  T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.711000][T18782] debugfs: 'hsr1' already exists in 'hsr'
[  366.725525][T18782] Cannot create hsr debugfs directory
[  366.732341][T18782] hsr1: entered promiscuous mode
[  367.582439][T18832] xt_TCPMSS: Only works on TCP SYN packets
[  367.645479][T18842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3679'.
[  368.054154][T18861] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3689'.
[  368.142765][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  368.618039][T18904] netlink: 'syz.5.3702': attribute type 29 has an invalid length.
[  368.893131][T18921] syzkaller1: entered promiscuous mode
[  368.898714][T18921] syzkaller1: entered allmulticast mode
[  368.942228][T18920] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  369.282298][T18947] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3712'.
[  369.314804][T18950] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3712'.
[  369.327285][T18949] netlink: 'syz.9.3713': attribute type 20 has an invalid length.
[  369.356863][T18949] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3713'.
[  369.358059][T18947] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  369.522376][T18949] netlink: 'syz.9.3713': attribute type 20 has an invalid length.
[  369.541833][T18949] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3713'.
[  369.801774][T18970] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3719'.
[  369.827494][ T5908] net_ratelimit: 11 callbacks suppressed
[  369.827516][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.909474][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3723'.
[  369.929902][T18982] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3723'.
[  369.973507][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3723'.
[  369.984384][T18982] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3723'.
[  370.063307][T15408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.073769][   T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.240861][ T5826] Bluetooth: hci2: command 0x0406 tx timeout
[  370.833692][T19033] netlink: 'syz.4.3736': attribute type 63 has an invalid length.
[  370.864588][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.945952][T19038] netlink: 'syz.5.3739': attribute type 5 has an invalid length.
[  370.984454][T19038] netlink: 'syz.5.3739': attribute type 6 has an invalid length.
[  371.098594][T19051] netlink: 'syz.4.3740': attribute type 1 has an invalid length.
[  371.282135][T19056] bond6 (unregistering): Released all slaves
[  371.366546][T19059] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  371.711692][T19087] netlink: 'syz.9.3753': attribute type 12 has an invalid length.
[  371.730876][T19087] netlink: 'syz.9.3753': attribute type 29 has an invalid length.
[  371.739020][T19087] netlink: 'syz.9.3753': attribute type 2 has an invalid length.
[  371.747954][T19087] netlink: 'syz.9.3753': attribute type 3 has an invalid length.
[  371.777001][T19094] netlink: 'syz.4.3756': attribute type 30 has an invalid length.
[  371.788517][T19095] netlink: 'syz.6.3755': attribute type 1 has an invalid length.
[  371.797190][T19095] netlink: 'syz.6.3755': attribute type 4 has an invalid length.
[  371.902451][T19103] vlan1: entered promiscuous mode
[  372.194969][T19110] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.206999][T19110] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.342249][T19110] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.357183][T19110] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.392004][T19124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  372.479485][T19110] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.495142][T19110] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.697429][T19110] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.709814][T19110] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.808176][T19141] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  372.887080][ T3533] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  372.896411][ T3533] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.924802][ T3941] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  372.938884][ T3941] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.994426][ T3941] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  373.017047][ T3941] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.065644][ T3941] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  373.082032][ T3941] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.428477][T19169] netlink: 'syz.8.3781': attribute type 1 has an invalid length.
[  373.456656][T19169] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  373.458826][T19173] __nla_validate_parse: 15 callbacks suppressed
[  373.458850][T19173] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3783'.
[  373.490783][T19173] block nbd6: Unsupported socket: should be TCP or UNIX.
[  373.599307][T19180] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3784'.
[  373.689495][T19186] netlink: 'syz.5.3787': attribute type 18 has an invalid length.
[  373.703191][T19186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3787'.
[  373.719947][T19186] netlink: 'syz.5.3787': attribute type 18 has an invalid length.
[  373.731251][T19186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3787'.
[  373.826086][T19194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3790'.
[  373.979361][T19202] veth0_to_bridge: entered promiscuous mode
[  373.994383][T19203] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3793'.
[  374.081707][T19203] veth0_to_bridge: left promiscuous mode
[  374.086536][T19209] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3795'.
[  374.438956][T19237] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  374.577857][T19241] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3802'.
[  374.598140][T19241] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3802'.
[  374.685728][T19244] syzkaller0: entered promiscuous mode
[  374.702066][T19244] syzkaller0: entered allmulticast mode
[  374.765419][T19244] dvmrp0: entered allmulticast mode
[  374.772883][T19244] dvmrp0: left allmulticast mode
[  374.799888][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3806'.
[  375.182730][ T2133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.192783][T16352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.504031][T19277] netlink: 'syz.9.3814': attribute type 11 has an invalid length.
[  376.554105][T19341] tipc: Failed to remove unknown binding: 66,1,1/4269801492:670750475/670750477
[  376.562099][ T3941] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  376.575912][T19341] tipc: Failed to remove unknown binding: 66,1,1/4269801492:670750475/670750477
[  376.581129][ T3941] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  376.617425][ T3941] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  376.633706][ T3941] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  376.788429][T19355] validate_nla: 8 callbacks suppressed
[  376.788452][T19355] netlink: 'syz.6.3837': attribute type 25 has an invalid length.
[  377.427922][T19358] syz.5.3839 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  377.454184][T19358] CPU: 1 UID: 0 PID: 19358 Comm: syz.5.3839 Not tainted syzkaller #0 PREEMPT(full) 
[  377.454214][T19358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  377.454226][T19358] Call Trace:
[  377.454235][T19358]  <TASK>
[  377.454244][T19358]  dump_stack_lvl+0x189/0x250
[  377.454276][T19358]  ? __pfx_dump_stack_lvl+0x10/0x10
[  377.454299][T19358]  ? __pfx__printk+0x10/0x10
[  377.454342][T19358]  dump_header+0xd4/0x4c0
[  377.454366][T19358]  oom_kill_process+0x263/0x800
[  377.454390][T19358]  out_of_memory+0xf0c/0x12b0
[  377.454424][T19358]  ? __pfx_out_of_memory+0x10/0x10
[  377.454455][T19358]  mem_cgroup_out_of_memory+0x145/0x240
[  377.454481][T19358]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  377.454520][T19358]  ? _raw_spin_unlock+0x28/0x50
[  377.454545][T19358]  ? memcg1_oom_prepare+0x37f/0x450
[  377.454566][T19358]  try_charge_memcg+0xde4/0x1280
[  377.454607][T19358]  ? __pfx_try_charge_memcg+0x10/0x10
[  377.454651][T19358]  charge_memcg+0x9f/0x180
[  377.454672][T19358]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  377.454700][T19358]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  377.454725][T19358]  __read_swap_cache_async+0x212/0x480
[  377.454762][T19358]  swap_cluster_readahead+0x500/0x630
[  377.454794][T19358]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  377.454837][T19358]  ? get_vma_policy+0x27c/0x3c0
[  377.454863][T19358]  swapin_readahead+0x189/0xc60
[  377.454904][T19358]  ? __pfx_swapin_readahead+0x10/0x10
[  377.454931][T19358]  ? swap_table_get+0x1e/0x260
[  377.454951][T19358]  ? swap_table_get+0x1e/0x260
[  377.454969][T19358]  ? swap_table_get+0x1e/0x260
[  377.454993][T19358]  ? swap_table_get+0x216/0x260
[  377.455018][T19358]  ? swap_cache_get_folio+0x51c/0x530
[  377.455050][T19358]  do_swap_page+0x837/0x5c70
[  377.455073][T19358]  ? __lock_acquire+0x6b6/0x2cf0
[  377.455097][T19358]  ? __lock_acquire+0x6b6/0x2cf0
[  377.455130][T19358]  ? do_swap_page+0x17d/0x5c70
[  377.455153][T19358]  ? __pfx_do_swap_page+0x10/0x10
[  377.455175][T19358]  ? __lock_acquire+0x6b6/0x2cf0
[  377.455195][T19358]  ? __pfx_default_wake_function+0x10/0x10
[  377.455216][T19358]  ? ___pte_offset_map+0x1ae/0x240
[  377.455248][T19358]  ? pte_offset_map_rw_nolock+0xea/0x160
[  377.455277][T19358]  handle_mm_fault+0x1277/0x32b0
[  377.455320][T19358]  ? handle_mm_fault+0xdb/0x32b0
[  377.455357][T19358]  ? __pfx_handle_mm_fault+0x10/0x10
[  377.455380][T19358]  ? lock_vma_under_rcu+0x42c/0x4a0
[  377.455422][T19358]  ? do_user_addr_fault+0x1a8/0x1380
[  377.455446][T19358]  do_user_addr_fault+0xa7c/0x1380
[  377.455474][T19358]  ? rcu_is_watching+0x15/0xb0
[  377.455497][T19358]  ? trace_page_fault_user+0x84/0x1c0
[  377.455520][T19358]  exc_page_fault+0x82/0x100
[  377.455544][T19358]  asm_exc_page_fault+0x26/0x30
[  377.455561][T19358] RIP: 0033:0x7eff416659ec
[  377.455580][T19358] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[  377.455596][T19358] RSP: 002b:00007fff11292600 EFLAGS: 00010202
[  377.455614][T19358] RAX: 0000000000000000 RBX: 00007eff419e5fa0 RCX: 0000000000000000
[  377.455627][T19358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558662a808
[  377.455639][T19358] RBP: 00007eff419e7da0 R08: 0000000000000000 R09: 3fffffffffffffff
[  377.455651][T19358] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000005c357
[  377.455662][T19358] R13: 00007eff419e6180 R14: ffffffffffffffff R15: 00007fff11292710
[  377.455706][T19358]  </TASK>
[  377.455714][T19358] memory: usage 307200kB, limit 307200kB, failcnt 179
[  377.818838][T19358] memory+swap: usage 296464kB, limit 9007199254740988kB, failcnt 0
[  377.827521][T19358] kmem: usage 295732kB, limit 9007199254740988kB, failcnt 0
[  377.835669][T19358] Memory cgroup stats for /syz5:
[  377.836156][T19358] cache 0
[  377.844401][T19358] rss 0
[  377.847182][T19358] rss_huge 0
[  377.851241][T19358] shmem 0
[  377.854199][T19358] mapped_file 0
[  377.857668][T19358] dirty 0
[  377.861163][T19358] writeback 0
[  377.864642][T19358] workingset_refault_anon 8
[  377.869248][T19358] workingset_refault_file 0
[  377.875013][T19358] swap 188416
[  377.878327][T19358] swapcached 20480
[  377.882602][T19358] pgpgin 17211
[  377.885998][T19358] pgpgout 17206
[  377.889471][T19358] pgfault 45972
[  377.894299][T19358] pgmajfault 2
[  377.897692][T19358] inactive_anon 0
[  377.902519][T19358] active_anon 20480
[  377.906349][T19358] inactive_file 0
[  377.909990][T19358] active_file 0
[  377.913947][T19358] unevictable 0
[  377.917423][T19358] hierarchical_memory_limit 314572800
[  377.923573][T19358] hierarchical_memsw_limit 9223372036854771712
[  377.929749][T19358] total_cache 0
[  377.934014][T19358] total_rss 0
[  377.937318][T19358] total_rss_huge 0
[  377.942135][T19358] total_shmem 0
[  377.945702][T19358] total_mapped_file 0
[  377.949693][T19358] total_dirty 0
[  377.953807][T19358] total_writeback 0
[  377.957743][T19358] total_workingset_refault_anon 8
[  377.963734][T19358] total_workingset_refault_file 0
[  377.968779][T19358] total_swap 188416
[  377.973175][T19358] total_swapcached 20480
[  377.977443][T19358] total_pgpgin 17211
[  377.982215][T19358] total_pgpgout 17206
[  377.986250][T19358] total_pgfault 45972
[  377.990252][T19358] total_pgmajfault 2
[  377.996368][T19358] total_inactive_anon 0
[  378.000924][T19358] total_active_anon 20480
[  378.005378][T19358] total_inactive_file 0
[  378.009564][T19358] total_active_file 0
[  378.014371][T19358] total_unevictable 0
[  378.018386][T19358] anon_cost 0
[  378.022571][T19358] file_cost 0
[  378.025885][T19358] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3839,pid=19358,uid=0
[  378.043470][T19358] Memory cgroup out of memory: Killed process 19358 (syz.5.3839) total-vm:102224kB, anon-rss:1048kB, file-rss:22952kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  378.386530][ T1300] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  380.221925][ T3511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.943079][ T4101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.581508][ T5826] Bluetooth: hci4: command 0x0406 tx timeout
[  386.701686][T16352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.462840][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.221548][T16352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.502453][T16352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.262152][ T4101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.622189][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.463380][ T3533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.751776][ T4101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.231512][ T3533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.862022][ T4101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.345291][T16779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.621431][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.497292][ T4101] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.580405][ T4101] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.629998][ T4101] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.674610][ T4101] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.103926][ T4101] team0: Port device bridge1 removed
[  425.113446][ T3538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.307964][ T4101] bond1 (unregistering): (slave bond0): Releasing active interface
[  425.317453][ T4101] bond1 (unregistering): Released all slaves
[  425.347999][ T4101] bond0 (unregistering): Released all slaves
[  425.361658][ T4101] bond2 (unregistering): Released all slaves
[  425.471833][ T4101] bond3 (unregistering): Released all slaves
[  425.484260][ T4101] bond4 (unregistering): Released all slaves
[  425.498938][ T4101] bond5 (unregistering): Released all slaves
[  425.618940][ T4101] tipc: Left network mode
[  426.024147][ T4101] hsr_slave_0: left promiscuous mode
[  426.033742][ T4101] hsr_slave_1: left promiscuous mode
[  426.061729][ T4101] veth1_macvtap: left promiscuous mode
[  426.067595][ T4101] veth0_macvtap: left promiscuous mode
[  426.073843][ T4101] veth1_vlan: left promiscuous mode
[  426.079171][ T4101] veth0_vlan: left promiscuous mode
[  426.395509][ T2133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.541513][ T5826] Bluetooth: hci3: command 0x0406 tx timeout
[  426.713139][   T12] smc: removing ib device syû
[  428.278760][ T4101] IPVS: stop unused estimator thread 0...
[  430.224856][ T6029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.142331][ T2133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.719911][T16352] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  434.732003][T16352] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.776687][T16352] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  434.787280][T16352] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.834898][T16352] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  434.845110][T16352] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.894067][T16352] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  434.904317][T16352] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.031389][T16352] bridge_slave_0: left allmulticast mode
[  435.037450][T16352] bridge_slave_0: left promiscuous mode
[  435.043907][T16352] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.148441][T16352] bond8 (unregistering): (slave ip6gretap1): Releasing active interface
[  435.277595][T16352] bond7 (unregistering): (slave gretap1): Releasing active interface
[  435.511434][T16352] bond1 (unregistering): (slave bridge3): Releasing backup interface
[  435.673863][T16352] bond7 (unregistering): (slave bridge7): Releasing active interface
[  435.835776][T16352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  435.847038][T16352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  435.857997][T16352] bond0 (unregistering): Released all slaves
[  435.871458][T16352] bond1 (unregistering): Released all slaves
[  435.883605][T16352] bond2 (unregistering): Released all slaves
[  435.995285][T16352] bond3 (unregistering): Released all slaves
[  436.007125][T16352] bond4 (unregistering): Released all slaves
[  436.019140][T16352] bond5 (unregistering): Released all slaves
[  436.032782][T16352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.042213][T16352] bond6 (unregistering): (slave lo): Releasing backup interface
[  436.050941][T16352] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  436.065737][T16352] bond6 (unregistering): Released all slaves
[  436.096644][T16352] bond7 (unregistering): Released all slaves
[  436.108407][T16352] bond8 (unregistering): Released all slaves
[  436.224171][T16352] bond9 (unregistering): Released all slaves
[  436.835189][T16352] hsr_slave_0: left promiscuous mode
[  436.841533][T16352] hsr_slave_1: left promiscuous mode
[  436.847337][T16352] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  436.856804][T16352] batman_adv: batadv0: Removing interface: batadv_slave_0
[  436.865548][T16352] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  436.873564][T16352] batman_adv: batadv0: Removing interface: batadv_slave_1
[  436.893684][T16352] veth1_vlan: left allmulticast mode
[  436.899327][T16352] veth1_macvtap: left promiscuous mode
[  436.905437][T16352] veth0_macvtap: left promiscuous mode
[  436.911242][T16352] veth1_vlan: left promiscuous mode
[  437.395536][T16352] team0 (unregistering): Port device team_slave_1 removed
[  437.436717][T16352] team0 (unregistering): Port device team_slave_0 removed
[  437.796569][T16352] lo (unregistering): left allmulticast mode
[  438.038850][T16352] IPVS: stop unused estimator thread 0...
[  439.824869][ T1300] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  441.313861][T19412] x_tables: duplicate underflow at hook 2
[  441.395057][T19418] xt_CT: You must specify a L4 protocol and not use inversions on it
[  441.479286][T19421] netlink: 'syz.6.3854': attribute type 4 has an invalid length.
[  441.535098][T19422] SET target dimension over the limit!
[  441.611373][T19425] __nla_validate_parse: 10 callbacks suppressed
[  441.611396][T19425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3855'.
[  441.840317][T19432] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3856'.
[  441.856070][T19413] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.935896][T19432] netlink: 'syz.9.3856': attribute type 1 has an invalid length.
[  441.944452][T19432] netlink: 136 bytes leftover after parsing attributes in process `syz.9.3856'.
[  441.970964][T19432] netlink: 'syz.9.3856': attribute type 1 has an invalid length.
[  442.009952][T19413] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.047585][T19438] netlink: 'syz.4.3857': attribute type 4 has an invalid length.
[  442.093893][T19440] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3859'.
[  442.115778][T19441] netlink: 'syz.4.3857': attribute type 4 has an invalid length.
[  442.148026][T19413] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.234251][T19413] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.397171][T19452] netlink: 'syz.4.3864': attribute type 6 has an invalid length.
[  442.407277][T19452] netlink: 'syz.4.3864': attribute type 6 has an invalid length.
[  442.534922][T16780] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.589601][T13340] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.604213][T19470] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3867'.
[  442.645664][   T80] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.675990][   T80] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.829095][T19479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3869'.
[  442.970228][T19490] syzkaller0: entered promiscuous mode
[  442.976414][T19490] syzkaller0: entered allmulticast mode
[  443.393184][T19513] syzkaller1: entered promiscuous mode
[  443.399050][T19513] syzkaller1: entered allmulticast mode
[  443.421020][ T5830] Bluetooth: hci5: command 0x0406 tx timeout
[  443.487993][T19513] bond4: entered promiscuous mode
[  443.494336][T19513] bond4: entered allmulticast mode
[  443.511709][T19513] 8021q: adding VLAN 0 to HW filter on device bond4
[  443.642696][T19523] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  443.666148][T19523] syzkaller0: entered promiscuous mode
[  443.694957][T19523] syzkaller0: entered allmulticast mode
[  443.725366][T19531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3884'.
[  443.758648][T19523] tipc: Resetting bearer <eth:syzkaller0>
[  443.767156][T19523] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3883'.
[  443.806135][T19522] tipc: Resetting bearer <eth:syzkaller0>
[  443.843039][T19522] tipc: Disabling bearer <eth:syzkaller0>
[  443.869470][T19536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3885'.
[  443.879183][T19536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3885'.
[  444.298824][T19555] bridge4: entered promiscuous mode
[  444.311576][T19555] bridge4: entered allmulticast mode
[  444.326431][T19555] team0: Port device bridge4 added
[  444.338603][T19563] netlink: 'syz.5.3895': attribute type 10 has an invalid length.
[  444.361280][T19561] bridge0: entered allmulticast mode
[  444.395004][T19557] delete_channel: no stack
[  444.532776][T19563] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode
[  444.790934][T19550] tun0: tun_chr_ioctl cmd 1074025680
[  444.892303][   T80] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  444.911090][   T80] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  444.965502][   T80] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0
[  447.761235][T19637] __nla_validate_parse: 5 callbacks suppressed
[  447.761258][T19637] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3914'.
[  447.976387][T19649] netlink: 'syz.9.3920': attribute type 1 has an invalid length.
[  448.215905][T19662] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3926'.
[  448.371255][T19669] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.3929'.
[  448.557684][T19679] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3931'.
[  448.727521][T19689] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  448.732559][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3933'.
[  448.752902][T19689] bond4 (unregistering): Released all slaves
[  448.796974][T19682] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3933'.
[  448.797565][T19695] netlink: 'syz.5.3935': attribute type 4 has an invalid length.
[  448.831089][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3933'.
[  448.845087][T19682] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3933'.
[  448.890079][T19701] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  449.008706][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3938'.
[  449.023139][T19707] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3940'.
[  449.367422][T19732] xt_hashlimit: max too large, truncated to 1048576
[  449.542002][T19718] delete_channel: no stack
[  449.685124][T19745] veth0_to_bond: entered allmulticast mode
[  449.792589][T19756] wg1 speed is unknown, defaulting to 1000
[  449.828822][T19756] wg1 speed is unknown, defaulting to 1000
[  449.837265][T19756] wg1 speed is unknown, defaulting to 1000
[  449.861297][T19756] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  449.964557][T19756] wg1 speed is unknown, defaulting to 1000
[  450.017262][T19756] wg1 speed is unknown, defaulting to 1000
[  450.071679][T19756] wg1 speed is unknown, defaulting to 1000
[  450.085312][T19756] wg1 speed is unknown, defaulting to 1000
[  450.135837][T19756] wg1 speed is unknown, defaulting to 1000
[  450.159432][T19773] geneve3: entered promiscuous mode
[  450.277569][T19756] wg1 speed is unknown, defaulting to 1000
[  450.297278][T19756] wg1 speed is unknown, defaulting to 1000
[  450.312879][T19756] wg1 speed is unknown, defaulting to 1000
[  450.508504][T19788] dvmrp0: entered allmulticast mode
[  450.560622][T19799] xt_ecn: cannot match TCP bits for non-tcp packets
[  450.866852][T19812] syzkaller0: entered promiscuous mode
[  450.872673][T19812] syzkaller0: entered allmulticast mode
[  451.270219][T19820] openvswitch: netlink: IP tunnel dst address not specified
[  451.284904][T19827] openvswitch: netlink: IP tunnel dst address not specified
[  451.409256][T19830] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  451.437981][T16780] netdevsim netdevsim5 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0
[  451.461148][T16780] netdevsim netdevsim5 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0
[  451.496989][T16780] netdevsim netdevsim5 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0
[  451.696364][T19847] set match dimension is over the limit!
[  452.045554][T19872] netlink: 'syz.8.3991': attribute type 5 has an invalid length.
[  452.323920][T19893] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  452.357810][T19892] netlink: 'syz.4.3998': attribute type 1 has an invalid length.
[  452.608870][T19910] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5
[  452.677344][T19914] dvmrp1: entered allmulticast mode
[  452.874860][T19925] netlink: 'syz.4.4006': attribute type 1 has an invalid length.
[  452.891827][T19925] __nla_validate_parse: 18 callbacks suppressed
[  452.891848][T19925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4006'.
[  452.934231][T19925] netlink: 'syz.4.4006': attribute type 15 has an invalid length.
[  452.964216][T19927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  453.463854][T19955] xt_hashlimit: size too large, truncated to 1048576
[  453.497010][T19960] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  453.692705][T19969] team_slave_0: entered promiscuous mode
[  453.698794][T19969] team_slave_1: entered promiscuous mode
[  453.710082][T19969] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  453.754834][T19969] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  453.829307][T19976] netlink: 'syz.8.4021': attribute type 3 has an invalid length.
[  453.839332][T19976] netlink: 666 bytes leftover after parsing attributes in process `syz.8.4021'.
[  453.855852][T19976] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  453.937165][T19979] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4023'.
[  453.983105][T19979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  454.223317][T19996] netlink: 'syz.5.4026': attribute type 29 has an invalid length.
[  454.253501][T19996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4026'.
[  454.331720][T19999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4028'.
[  454.362008][T19999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4028'.
[  454.427226][T19996] hsr_slave_0 (unregistering): left promiscuous mode
[  454.522617][T20001] netlink: 'syz.5.4026': attribute type 29 has an invalid length.
[  454.674254][T20018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4034'.
[  454.688784][T20016] netlink: 'syz.6.4033': attribute type 3 has an invalid length.
[  454.714122][T20023] netlink: 'syz.9.4036': attribute type 1 has an invalid length.
[  454.718175][T20016] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4033'.
[  454.743660][T20023] netlink: 228 bytes leftover after parsing attributes in process `syz.9.4036'.
[  455.011476][T20041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4041'.
[  455.480233][T20064] netlink: 'syz.8.4050': attribute type 1 has an invalid length.
[  455.494132][T20064] netlink: 'syz.8.4050': attribute type 1 has an invalid length.
[  455.519164][T20064] netlink: 'syz.8.4050': attribute type 1 has an invalid length.
[  455.540754][T20064] netlink: 'syz.8.4050': attribute type 2 has an invalid length.
[  457.161262][T20126] IPVS: set_ctl: invalid protocol: 56 44.0.39.13:512
[  457.302039][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  457.324781][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  457.334007][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  457.343795][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  457.355309][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  457.371215][T20131] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  457.635148][T20146] netlink: 'syz.4.4077': attribute type 1 has an invalid length.
[  457.842745][T20146] 8021q: adding VLAN 0 to HW filter on device bond5
[  457.993904][T20155] __nla_validate_parse: 6 callbacks suppressed
[  457.993924][T20155] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4079'.
[  458.065151][T20148] bond5: (slave veth3): Enslaving as an active interface with a down link
[  458.123720][T20149] veth0_to_bond: left allmulticast mode
[  458.149229][T20149] bond5: (slave veth0_to_bond): making interface the new active one
[  458.167370][T20149] veth0_to_bond: entered promiscuous mode
[  458.167378][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  458.181405][T20149] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  458.194900][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  458.204830][T20146] bond5: entered promiscuous mode
[  458.210255][T20146] bond5: entered allmulticast mode
[  458.212703][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  458.216989][T20146] veth0_to_bond: entered allmulticast mode
[  458.231602][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  458.247257][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  458.415031][T20166] wg1 speed is unknown, defaulting to 1000
[  458.425972][T20179] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4085'.
[  458.436054][T20179] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4085'.
[  458.459438][T20179] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4085'.
[  458.482815][T20179] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4085'.
[  458.654193][T20188] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4088'.
[  459.004496][T20212] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  459.237724][T20166] chnl_net:caif_netlink_parms(): no params data found
[  459.275871][T20230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4097'.
[  459.299473][T20230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4097'.
[  459.353900][T20238] validate_nla: 1 callbacks suppressed
[  459.353921][T20238] netlink: 'syz.8.4099': attribute type 29 has an invalid length.
[  459.405701][T20238] netlink: 'syz.8.4099': attribute type 29 has an invalid length.
[  459.420021][T20238] netlink: 500 bytes leftover after parsing attributes in process `syz.8.4099'.
[  459.440110][T20238] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4099'.
[  459.468504][T20238] openvswitch: netlink: Flow key attr not present in new flow.
[  459.521211][T20166] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.538557][T20166] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.560845][T20166] bridge_slave_0: entered allmulticast mode
[  459.580003][T20166] bridge_slave_0: entered promiscuous mode
[  459.607078][T20166] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.634272][T20166] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.653237][T20166] bridge_slave_1: entered allmulticast mode
[  459.672581][T20166] bridge_slave_1: entered promiscuous mode
[  459.682933][T20254] tipc: New replicast peer: 255.255.255.255
[  459.691425][T20254] tipc: Enabled bearer <udp:s>, priority 10
[  459.809616][T20166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  459.825510][T20259] openvswitch: netlink: Flow actions attr not present in new flow.
[  459.861346][T20166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  460.065279][T20166] team0: Port device team_slave_0 added
[  460.083141][T20166] team0: Port device team_slave_1 added
[  460.146411][T20273] v: renamed from vlan0 (while UP)
[  460.230324][T20166] batman_adv: batadv0: Adding interface: batadv_slave_0
[  460.242271][T20166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  460.271063][T20166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  460.287862][T20166] batman_adv: batadv0: Adding interface: batadv_slave_1
[  460.296445][T20166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  460.327760][T20166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  460.339989][ T5830] Bluetooth: hci1: command tx timeout
[  460.594880][T20166] hsr_slave_0: entered promiscuous mode
[  460.606733][T20304] block nbd6: Unsupported socket: should be TCP or UNIX.
[  460.615880][T20166] hsr_slave_1: entered promiscuous mode
[  460.641129][T20303] block nbd6: Unsupported socket: should be TCP or UNIX.
[  460.655247][T20304] netlink: 'syz.4.4117': attribute type 1 has an invalid length.
[  461.194420][T20331] vlan0: entered promiscuous mode
[  461.200047][T20331] bridge0: entered promiscuous mode
[  461.248548][T20166] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.280003][T20166] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.293403][T20166] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  461.419047][T20166] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.453577][T20166] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.480277][T20166] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  461.616407][T20347] bond6: option xmit_hash_policy: invalid value (64)
[  461.673846][T20347] bond6 (unregistering): Released all slaves
[  461.780993][T20166] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.791729][T20166] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.802284][T20166] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  461.894732][T20166] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.940744][T20166] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.961789][T20166] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  462.257013][T20382] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  462.321546][T20166] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  462.347405][T20166] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  462.376927][T20166] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  462.382457][ T5830] Bluetooth: hci1: command tx timeout
[  462.410296][T20166] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  462.782724][T20166] 8021q: adding VLAN 0 to HW filter on device bond0
[  462.829925][T20166] 8021q: adding VLAN 0 to HW filter on device team0
[  462.880276][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.887421][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  462.980408][T16780] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.987742][T16780] bridge0: port 2(bridge_slave_1) entered forwarding state
[  463.076907][T20424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  463.199248][T20436] netlink: 'syz.4.4157': attribute type 1 has an invalid length.
[  463.241855][T20437] netlink: 'syz.4.4157': attribute type 1 has an invalid length.
[  463.310283][T20434] ip6_vti0: entered allmulticast mode
[  463.406453][T20447] __nla_validate_parse: 11 callbacks suppressed
[  463.406475][T20447] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4161'.
[  463.426980][T20438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  463.739919][T20166] 8021q: adding VLAN 0 to HW filter on device batadv0
[  463.755438][T20465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4165'.
[  463.892097][T20166] veth0_vlan: entered promiscuous mode
[  463.918536][T20166] veth1_vlan: entered promiscuous mode
[  464.040107][T20166] veth0_macvtap: entered promiscuous mode
[  464.064867][T20166] veth1_macvtap: entered promiscuous mode
[  464.146607][T20166] batman_adv: batadv0: Interface activated: batadv_slave_0
[  464.175193][T20166] batman_adv: batadv0: Interface activated: batadv_slave_1
[  464.256891][T16780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.305831][T16780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.349935][T16780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  464.363888][T16780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  464.461802][ T5830] Bluetooth: hci1: command tx timeout
[  464.583703][ T3941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.623407][ T3941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.705942][T16780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.733744][T20493] xt_hashlimit: invalid rate
[  464.741412][T16780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.752630][T20493] xt_hashlimit: invalid rate
[  464.759770][T20493] xt_hashlimit: invalid rate
[  464.767278][T20488] netlink: 'syz.6.4174': attribute type 1 has an invalid length.
[  464.804196][T20493] xt_hashlimit: invalid rate
[  464.824426][T20493] xt_hashlimit: invalid rate
[  464.853618][T20493] xt_hashlimit: invalid rate
[  464.874080][T20493] xt_hashlimit: invalid rate
[  464.892415][T20493] xt_hashlimit: invalid rate
[  464.910001][T20493] xt_hashlimit: invalid rate
[  464.936517][T20493] xt_hashlimit: invalid rate
[  464.948204][T20500] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  464.981687][T20500] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  465.169244][T20512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4184'.
[  465.295580][T20512] hsr_slave_0 (unregistering): left promiscuous mode
[  465.312046][T20515] netlink: 244 bytes leftover after parsing attributes in process `syz.8.4185'.
[  465.448199][T20524] tipc: Started in network mode
[  465.461848][T20524] tipc: Node identity e0000002, cluster identity 4711
[  465.476868][T20524] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  465.492991][T20523] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4187'.
[  465.569513][T20530] netlink: 'syz.6.4188': attribute type 1 has an invalid length.
[  465.598227][T20530] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4188'.
[  465.603872][T20528] tun0: tun_chr_ioctl cmd 2147767517
[  465.617549][T20528] tun0: tun_chr_ioctl cmd 1074025675
[  465.633879][T20528] tun0: persist disabled
[  465.806389][T20544] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4191'.
[  466.137450][T20559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4194'.
[  466.149814][T20560] netlink: 'syz.6.4195': attribute type 10 has an invalid length.
[  466.174762][T20560] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4195'.
[  466.242298][T20565] Unsupported ieee802154 address type: 0
[  466.343132][T20572] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4198'.
[  466.365484][T20560] team0: Port device geneve0 added
[  466.453059][T20564] bond5: (slave bridge5): Enslaving as an active interface with an up link
[  466.515130][T20568] macvlan2: entered promiscuous mode
[  466.522370][T20582] IPv6: addrconf: prefix option has invalid lifetime
[  466.530510][T20568] macvlan2: entered allmulticast mode
[  466.537255][T20568] bond5: entered promiscuous mode
[  466.542016][ T5830] Bluetooth: hci1: command tx timeout
[  466.544120][T20568] bridge5: entered promiscuous mode
[  466.576373][T20568] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  466.602760][T20568] bond5: left promiscuous mode
[  466.625746][T20568] bridge5: left promiscuous mode
[  466.859360][T20585] wg1 speed is unknown, defaulting to 1000
[  466.939805][T20597] can: request_module (can-proto-0) failed.
[  467.656652][T20632] netlink: 'syz.8.4214': attribute type 8 has an invalid length.
[  467.786503][T20648] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  467.800313][T20648] bond6 (unregistering): Released all slaves
[  467.934539][T20649] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  467.947844][T20649] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.961547][T20649] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  467.989301][T20649] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  468.179134][T20649] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  468.193062][T20649] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.205252][T20649] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  468.216755][T20649] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  468.235236][T20675] xt_limit: Overflow, try lower: 271964/0
[  468.242288][T20678] sit0: entered promiscuous mode
[  468.257531][T20678] netlink: 'syz.2.4228': attribute type 1 has an invalid length.
[  468.364374][T20649] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  468.376697][T20649] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.388554][T20649] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  468.405134][T20649] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  468.671378][T16779] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  468.681164][T16779] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  468.689998][T16779] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  468.699111][T16779] netdevsim netdevsim5 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  468.711439][T20691] netlink: 'syz.8.4233': attribute type 2 has an invalid length.
[  468.724165][ T3941] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  468.734023][ T3941] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  468.743157][ T3941] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  468.753512][ T3941] netdevsim netdevsim5 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  468.793376][T20691] �9: entered promiscuous mode
[  468.799178][ T3941] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  468.813126][ T3941] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  468.824248][ T3941] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  468.833533][ T3941] netdevsim netdevsim5 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  468.861096][ T3538] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  468.875718][ T3538] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  468.891280][ T3538] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  468.911919][ T3538] netdevsim netdevsim5 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  468.952431][T20698] x_tables: duplicate underflow at hook 3
[  468.959243][T20698] __nla_validate_parse: 10 callbacks suppressed
[  468.959263][T20698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4236'.
[  468.989319][T20698] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4236'.
[  469.484270][T20726] ipt_REJECT: TCP_RESET invalid for non-tcp
[  469.484864][T20727] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4247'.
[  469.501483][T20727] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4247'.
[  469.540577][T20721] nbd6: detected capacity change from 0 to 127
[  469.583314][T20734] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4250'.
[  469.585564][T20721] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4246'.
[  469.630094][ T5830] block nbd6: Receive control failed (result -104)
[  469.679174][T20736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4252'.
[  469.769387][T20738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4251'.
[  469.785724][T20742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  469.921306][T20752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4256'.
[  469.937907][T20748] wg1 speed is unknown, defaulting to 1000
[  470.172398][T20759] netlink: 'syz.2.4260': attribute type 1 has an invalid length.
[  470.180275][T20759] netlink: 'syz.2.4260': attribute type 2 has an invalid length.
[  470.378796][T20770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4263'.
[  471.201792][T20815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  471.233748][T20815] netlink: 'syz.6.4275': attribute type 8 has an invalid length.
[  471.481107][T20820] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode
[  471.499230][T20820] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode
[  472.190172][T20856] netlink: 'syz.5.4290': attribute type 22 has an invalid length.
[  472.233056][T20854] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.342823][T20856] netlink: 'syz.5.4290': attribute type 22 has an invalid length.
[  472.353687][T20854] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.458642][T20854] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.551019][T20854] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.696117][ T3538] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  472.726033][   T80] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  472.749304][ T3941] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  472.775225][ T3941] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  475.723420][T20934] netlink: 'syz.5.4306': attribute type 17 has an invalid length.
[  475.731487][T20934] __nla_validate_parse: 11 callbacks suppressed
[  475.731507][T20934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4306'.
[  475.787211][T20934] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4306'.
[  475.805042][T20934] erspan0: entered promiscuous mode
[  475.812908][T20934] gretap0: entered promiscuous mode
[  475.819804][T20934] : Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  475.860250][T20934] : Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  475.872107][T20947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4307'.
[  476.248471][T20962] xt_ecn: cannot match TCP bits for non-tcp packets
[  476.522402][T20975] syzkaller0: entered promiscuous mode
[  476.543974][T20975] syzkaller0: entered allmulticast mode
[  476.628998][T20985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4322'.
[  476.682544][T20987] team0: mtu less than device minimum
[  476.915227][T20993] syzkaller1: entered promiscuous mode
[  476.925082][T20993] syzkaller1: entered allmulticast mode
[  477.319964][T21016] syzkaller1: entered promiscuous mode
[  477.331406][T21016] syzkaller1: entered allmulticast mode
[  477.479465][T21028] bridge: RTM_NEWNEIGH with invalid state 0x8
[  477.495356][T21032] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4337'.
[  477.653293][T21041] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4342'.
[  477.679754][T21041] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4342'.
[  477.854698][T21055] IPVS: Unknown mcast interface: netdevsim0
[  477.865722][T21055] netlink: 4552 bytes leftover after parsing attributes in process `syz.6.4345'.
[  477.877054][T21055] netlink: 4552 bytes leftover after parsing attributes in process `syz.6.4345'.
[  478.110277][T21069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4350'.
[  478.125997][T21069] netlink: 'syz.4.4350': attribute type 3 has an invalid length.
[  478.301628][T21073] nbd7: detected capacity change from 0 to 127
[  478.314028][T21079] block nbd0: reconnected socket
[  478.328865][ T5830] block nbd7: Receive control failed (result -104)
[  478.363976][ T5826] block nbd0: Receive control failed (result -32)
[  478.471770][T21082] block nbd5: NBD_DISCONNECT
[  478.515955][T21085] bond0: entered allmulticast mode
[  478.533331][T21085] bond_slave_0: entered allmulticast mode
[  478.547090][T21085] bond_slave_1: entered allmulticast mode
[  478.559985][T21085] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  478.613684][T21090] openvswitch: netlink: IPv6 tunnel dst address is zero
[  478.705595][T21088] 8021q: adding VLAN 0 to HW filter on device bond4
[  478.758086][T21088] netlink: 'syz.8.4356': attribute type 10 has an invalid length.
[  478.886729][T21088] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  478.932460][T21101] bridge0: port 1(syz_tun) entered blocking state
[  478.958762][T21101] bridge0: port 1(syz_tun) entered disabled state
[  478.980085][T21101] syz_tun: entered allmulticast mode
[  479.002112][T21101] syz_tun: entered promiscuous mode
[  479.016119][T21101] bridge0: port 1(syz_tun) entered blocking state
[  479.023679][T21101] bridge0: port 1(syz_tun) entered listening state
[  479.403131][T21131] netlink: 'syz.6.4367': attribute type 5 has an invalid length.
[  479.648204][T21147] netlink: 'syz.8.4371': attribute type 3 has an invalid length.
[  479.687564][T21147] netlink: 'syz.8.4371': attribute type 3 has an invalid length.
[  480.523247][T21190] netlink: 'syz.2.4381': attribute type 7 has an invalid length.
[  480.768045][T16780] bond0 (unregistering): Released all slaves
[  480.784700][T16780] bond1 (unregistering): Released all slaves
[  480.799116][T16780] bond2 (unregistering): Released all slaves
[  480.816643][T16780] bond3 (unregistering): Released all slaves
[  480.956547][T16780] bond4 (unregistering): Released all slaves
[  480.968866][T16780] bond5 (unregistering): Released all slaves
[  480.983060][T16780] bond6 (unregistering): Released all slaves
[  480.995517][T21151] __nla_validate_parse: 13 callbacks suppressed
[  480.995533][T21151] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4372'.
[  481.012876][T21151] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4372'.
[  481.143709][T21190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4381'.
[  481.148704][T21194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  481.172688][T21190] netlink: 'syz.2.4381': attribute type 7 has an invalid length.
[  481.241596][T16780] tipc: Left network mode
[  481.241617][ T3538] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  481.295289][T21194] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4382'.
[  481.484973][ T3538] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  481.505824][ T3538] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  481.556439][ T3538] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  481.563100][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4384'.
[  481.642785][T21221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4387'.
[  481.652155][T21221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4387'.
[  481.671790][   T11] block nbd7: Connection timed out, retrying (0/1 alive)
[  481.686942][   T11] block nbd7: Connection timed out, retrying (0/1 alive)
[  481.694678][T21222] block nbd7: Dead connection, failed to find a fallback
[  481.707077][   T11] block nbd7: Connection timed out, retrying (0/1 alive)
[  481.715530][T21222] block nbd7: shutting down sockets
[  481.722755][   T11] block nbd7: Connection timed out, retrying (0/1 alive)
[  481.731488][T21222] blk_print_req_error: 138 callbacks suppressed
[  481.731509][T21222] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  481.752733][T21222] buffer_io_error: 138 callbacks suppressed
[  481.752753][T21222] Buffer I/O error on dev nbd7, logical block 0, async page read
[  481.767270][T21222] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  481.778286][T21222] Buffer I/O error on dev nbd7, logical block 3, async page read
[  481.788309][T21222] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  481.790488][T21221] gretap0: entered promiscuous mode
[  481.798333][T21222] Buffer I/O error on dev nbd7, logical block 2, async page read
[  481.812721][T21222] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  481.824061][T21222] Buffer I/O error on dev nbd7, logical block 1, async page read
[  481.835133][T19897] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  481.882131][T19897] Buffer I/O error on dev nbd7, logical block 0, async page read
[  481.890036][T19897] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  481.920935][T19897] Buffer I/O error on dev nbd7, logical block 1, async page read
[  481.928824][T19897] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  481.941436][T19897] Buffer I/O error on dev nbd7, logical block 2, async page read
[  481.949430][T19897] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  481.961724][T19897] Buffer I/O error on dev nbd7, logical block 3, async page read
[  481.969717][T19897] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  481.979485][T19897] Buffer I/O error on dev nbd7, logical block 0, async page read
[  481.987573][T19897] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  481.998087][T19897] Buffer I/O error on dev nbd7, logical block 1, async page read
[  482.007810][T19897] ldm_validate_partition_table(): Disk read failed.
[  482.013612][T21221] gretap0: left promiscuous mode
[  482.018076][T19897] Dev nbd7: unable to read RDB block 0
[  482.027198][T21225] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4389'.
[  482.072309][T19897]  nbd7: unable to read partition table
[  482.157885][T21233] sctp: [Deprecated]: syz.2.4390 (pid 21233) Use of int in maxseg socket option.
[  482.157885][T21233] Use struct sctp_assoc_value instead
[  482.190969][T19897] ldm_validate_partition_table(): Disk read failed.
[  482.198562][T19897] Dev nbd7: unable to read RDB block 0
[  482.238065][T19897]  nbd7: unable to read partition table
[  484.636955][T21278] veth0: entered promiscuous mode
[  484.664755][T21287] netlink: 'syz.8.4401': attribute type 21 has an invalid length.
[  484.729875][T21290] netlink: 'syz.5.4402': attribute type 1 has an invalid length.
[  484.911953][T21296] netlink: 'syz.4.4403': attribute type 1 has an invalid length.
[  486.625670][T21278] veth0: left promiscuous mode
[  486.632041][T21287] netlink: 'syz.8.4401': attribute type 6 has an invalid length.
[  486.642162][T21287] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4401'.
[  486.653849][T21292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4402'.
[  486.690295][T21299] bond0: Error: Cannot enslave bond to itself.
[  486.884804][T21313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4408'.
[  486.895610][T21312] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4407'.
[  486.963978][T21309] syzkaller1: entered promiscuous mode
[  486.973403][T21309] syzkaller1: entered allmulticast mode
[  487.059579][T16780] IPVS: stop unused estimator thread 0...
[  487.426012][T21341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4414'.
[  487.438046][T21341] tc_dump_action: action bad kind
[  487.550785][T21350] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4418'.
[  487.563089][T21350] netlink: 'syz.8.4418': attribute type 11 has an invalid length.
[  487.775947][T21357] : entered promiscuous mode
[  488.003115][T21373] vlan2: entered promiscuous mode
[  488.008577][T21373] bridge0: entered promiscuous mode
[  488.026896][T21376] Bluetooth: MGMT ver 1.23
[  488.208726][T21376] syzkaller0: entered promiscuous mode
[  488.220053][T21376] syzkaller0: entered allmulticast mode
[  488.238038][T21376] 0: reclassify loop, rule prio 0, protocol 800
[  488.280039][T21388] netlink: 'syz.6.4432': attribute type 15 has an invalid length.
[  488.379585][T21392] ipt_rpfilter: unknown options
[  488.387505][T21393] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4433'.
[  488.404708][T21393] openvswitch: netlink: Flow key attr not present in new flow.
[  488.684827][T21407] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4439'.
[  488.739768][T21407] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4439'.
[  488.800018][T21415] netlink: 'syz.5.4442': attribute type 1 has an invalid length.
[  488.855004][T21415] 8021q: adding VLAN 0 to HW filter on device bond6
[  488.869918][T21419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4442'.
[  488.882107][T21421] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  488.929520][T21422] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  489.017380][T21432] netlink: 'syz.2.4448': attribute type 1 has an invalid length.
[  489.197081][T21419] bond6: entered allmulticast mode
[  489.228036][T21432] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  489.452821][T21470] openvswitch: netlink: Message has 536 unknown bytes.
[  489.511479][T21470] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  489.661008][T21473] netlink: 'syz.4.4456': attribute type 10 has an invalid length.
[  489.697168][T21473] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  490.323740][T21519] x_tables: duplicate underflow at hook 1
[  490.332242][T21519] netlink: 'syz.2.4470': attribute type 32 has an invalid length.
[  490.597107][T21519] bond1: option coupled_control: invalid value (255)
[  490.624774][T21519] bond1 (unregistering): Released all slaves
[  490.658941][T21536] netlink: 'syz.8.4475': attribute type 1 has an invalid length.
[  490.879817][T21548] bond5: option all_slaves_active: invalid value (222)
[  490.888733][T21553] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  490.891425][T21548] bond5 (unregistering): Released all slaves
[  491.182847][T13999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.195804][T21554] hsr_slave_1 (unregistering): left promiscuous mode
[  491.677069][T21592] __nla_validate_parse: 141 callbacks suppressed
[  491.677091][T21592] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4493'.
[  491.706952][T21593] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4492'.
[  492.140964][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.221307][T21615] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4501'.
[  492.231842][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.584890][T21636] netlink: 'syz.2.4506': attribute type 1 has an invalid length.
[  492.592806][T21638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4507'.
[  492.622448][T21636] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4506'.
[  492.649110][T21642] netlink: 348 bytes leftover after parsing attributes in process `syz.8.4508'.
[  492.778902][T21651] netlink: 'syz.5.4511': attribute type 10 has an invalid length.
[  492.792390][T21651] team0: left allmulticast mode
[  492.797298][T21651] team_slave_0: left allmulticast mode
[  492.803011][T21651] team_slave_1: left allmulticast mode
[  492.808543][T21651] geneve0: left allmulticast mode
[  492.816318][T21651] 8021q: adding VLAN 0 to HW filter on device team0
[  492.847347][T21651] team0: entered allmulticast mode
[  492.855498][T21654] netlink: 13 bytes leftover after parsing attributes in process `syz.5.4511'.
[  492.879084][T21651] team_slave_0: entered allmulticast mode
[  492.891152][T21651] team_slave_1: entered allmulticast mode
[  492.904009][T21651] geneve0: entered allmulticast mode
[  492.968301][T21662] netlink: 'syz.8.4514': attribute type 11 has an invalid length.
[  493.004587][T21658] bond5: option packets_per_slave: invalid value (18446744073709551615)
[  493.024795][T21662] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4514'.
[  493.025437][T21666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4515'.
[  493.052671][T21658] bond5: option packets_per_slave: allowed values 0 - 65535
[  493.062196][T21658] bond5 (unregistering): Released all slaves
[  493.159106][T21666] Cannot find del_set index 4 as target
[  493.250252][T21675] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4517'.
[  493.263495][T13999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.302824][T13999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.437957][T21727] ÿÿÿÿÿÿ: renamed from macsec0 (while UP)
[  495.184712][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.190192][T21770] netlink: 'syz.8.4551': attribute type 1 has an invalid length.
[  495.304684][T21776] netlink: 'syz.5.4554': attribute type 10 has an invalid length.
[  495.342152][T13999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.536450][T21790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  495.607091][T21795] netlink: 'syz.5.4561': attribute type 12 has an invalid length.
[  495.636356][T21795] netlink: 'syz.5.4561': attribute type 29 has an invalid length.
[  495.647427][T21795] netlink: 'syz.5.4561': attribute type 1 has an invalid length.
[  495.970102][T21806] syzkaller0: entered promiscuous mode
[  495.977705][T21806] syzkaller0: entered allmulticast mode
[  496.159857][T13999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.385613][T13999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.789673][T13999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.425662][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.981430][T21832] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode
[  497.988995][T21832] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode
[  498.021943][T21840] syz_tun: entered allmulticast mode
[  498.112206][T21848] __nla_validate_parse: 9 callbacks suppressed
[  498.112230][T21848] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4573'.
[  498.224007][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.459448][T21872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4579'.
[  498.484385][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.887044][T21902] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4588'.
[  499.079564][T21908] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4589'.
[  499.281789][T21910] netlink: 'syz.2.4590': attribute type 10 has an invalid length.
[  499.396960][T21910] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  499.504758][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.534343][T21935] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4596'.
[  499.801584][T21951] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4598'.
[  499.982768][T21222] block nbd6: Possible stuck request ffff888024b80000: control (read@0,1024B). Runtime 30 seconds
[  499.994655][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.002373][T21222] block nbd6: Possible stuck request ffff888024b80200: control (read@1024,1024B). Runtime 30 seconds
[  500.005646][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.014934][T21222] block nbd6: Possible stuck request ffff888024b80400: control (read@2048,1024B). Runtime 30 seconds
[  500.035702][T21222] block nbd6: Possible stuck request ffff888024b80600: control (read@3072,1024B). Runtime 30 seconds
[  500.091141][T13340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.104570][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.114388][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.297417][T21971] netlink: 'syz.2.4605': attribute type 1 has an invalid length.
[  500.412284][T21988] syzkaller0: entered promiscuous mode
[  500.418017][T21988] syzkaller0: entered allmulticast mode
[  500.453626][T21988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  500.467628][T21987] tipc: Resetting bearer <eth:syzkaller0>
[  500.534568][T21987] tipc: Disabling bearer <eth:syzkaller0>
[  500.542301][T13999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.766399][T21998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4612'.
[  500.778362][T21996] openvswitch: netlink: Key 6 has unexpected len 10 expected 2
[  500.915017][T22005] netlink: 'syz.6.4614': attribute type 1 has an invalid length.
[  500.984678][T22005] bond6: entered promiscuous mode
[  500.996344][T22008] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4614'.
[  500.998828][T22005] 8021q: adding VLAN 0 to HW filter on device bond6
[  501.006024][T22008] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4614'.
[  501.044738][T22009] netlink: 'syz.4.4615': attribute type 7 has an invalid length.
[  501.082679][T22005] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4614'.
[  501.087419][T22009] netlink: 'syz.4.4615': attribute type 7 has an invalid length.
[  501.111810][T22015] netlink: 'syz.8.4616': attribute type 142 has an invalid length.
[  501.192760][T22008] bond6: (slave bridge8): making interface the new active one
[  501.236586][T22008] bridge8: entered promiscuous mode
[  501.248473][T22008] bond6: (slave bridge8): Enslaving as an active interface with an up link
[  501.268082][ T1300] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  501.308571][T22020] syzkaller0: entered promiscuous mode
[  501.324296][T22020] syzkaller0: entered allmulticast mode
[  501.869900][T22046] x_tables: duplicate underflow at hook 2
[  502.013776][T22051] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  502.018538][T22057] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  502.037940][T22051] bond7 (unregistering): Released all slaves
[  502.287662][T22080] netlink: 'syz.8.4635': attribute type 1 has an invalid length.
[  502.287662][T22079] netlink: 'syz.8.4635': attribute type 1 has an invalid length.
[  502.322713][T22073] netlink: 'syz.2.4633': attribute type 21 has an invalid length.
[  502.377002][T22073] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  502.402361][T22073] bond1 (unregistering): Released all slaves
[  502.494432][T22093] netlink: 'syz.6.4636': attribute type 1 has an invalid length.
[  503.738412][T22163] macvtap0: Device is already in use.
[  503.816461][T22167] __nla_validate_parse: 16 callbacks suppressed
[  503.816487][T22167] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.4655'.
[  503.916502][T22163] veth9: entered allmulticast mode
[  504.055496][T22169] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4656'.
[  504.292809][T22181] nbd: must specify at least one socket
[  504.424191][T22187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4663'.
[  504.542342][T22200] netlink: 'syz.5.4667': attribute type 1 has an invalid length.
[  504.571763][T22200] netlink: 'syz.5.4667': attribute type 4 has an invalid length.
[  504.577148][T22197] netlink: 'syz.4.4665': attribute type 1 has an invalid length.
[  504.579544][T22200] netlink: 9422 bytes leftover after parsing attributes in process `syz.5.4667'.
[  504.597164][T22197] netlink: 16179 bytes leftover after parsing attributes in process `syz.4.4665'.
[  504.655476][T22205] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.663351][T22205] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.958415][T22224] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4672'.
[  505.015331][T22228] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4672'.
[  505.030098][T22222] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  505.046814][T22222] bond1 (unregistering): Released all slaves
[  505.120741][T22234] x_tables: ip6_tables: tcp match: only valid for protocol 6
[  505.294529][T22240] netlink: 'syz.5.4679': attribute type 9 has an invalid length.
[  505.441763][T22250] netlink: 'syz.4.4683': attribute type 1 has an invalid length.
[  505.480005][T22255] netlink: 'syz.4.4683': attribute type 1 has an invalid length.
[  505.780139][T22271] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4689'.
[  505.862942][T22273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4690'.
[  505.971542][T22285] netlink: 'syz.5.4695': attribute type 1 has an invalid length.
[  506.062117][T22293] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4696'.
[  506.065417][T22285] 8021q: adding VLAN 0 to HW filter on device bond7
[  506.077643][T22293] netlink: 'syz.6.4696': attribute type 5 has an invalid length.
[  506.087291][T22293] netlink: 'syz.6.4696': attribute type 6 has an invalid length.
[  506.092980][T22292] netlink: 'syz.2.4699': attribute type 3 has an invalid length.
[  506.644696][T22323] hsr_slave_0 (unregistering): left promiscuous mode
[  507.401729][T22377] pimreg: entered allmulticast mode
[  507.592577][T22388] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode
[  507.602558][T22388] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode
[  507.646520][T22388] tipc: Resetting bearer <eth:syzkaller0>
[  507.664858][T22384] syzkaller1: entered promiscuous mode
[  507.686633][T22384] syzkaller1: entered allmulticast mode
[  508.169105][T22424] net_ratelimit: 7 callbacks suppressed
[  508.169125][T22424] openvswitch: netlink: Message has 8 unknown bytes.
[  508.252191][T22424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  508.277641][T22431] wg1 speed is unknown, defaulting to 1000
[  508.310962][ T5830] Bluetooth: hci1: command tx timeout
[  509.105987][T16352] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0
[  509.138595][T16352] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  509.582291][    C0] bridge0: port 1(syz_tun) entered learning state
[  509.692072][T22506] validate_nla: 8 callbacks suppressed
[  509.692092][T22506] netlink: 'syz.2.4761': attribute type 21 has an invalid length.
[  509.708088][T22506] IPv6: NLM_F_CREATE should be specified when creating new route
[  509.708698][T22508] __nla_validate_parse: 20 callbacks suppressed
[  509.708713][T22508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4762'.
[  509.735607][T22503] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4760'.
[  509.774683][T22514] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4763'.
[  509.977470][T22529] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4766'.
[  510.187918][T22544] netlink: 'syz.2.4770': attribute type 7 has an invalid length.
[  510.381408][ T5830] Bluetooth: hci1: command 0x0405 tx timeout
[  510.665048][T22572] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  510.868169][T22586] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4782'.
[  511.297333][T22607] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4790'.
[  511.658628][T22629] netlink: 'syz.8.4798': attribute type 1 has an invalid length.
[  512.237087][T22646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4802'.
[  512.268734][T22646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4802'.
[  512.392962][T22654] openvswitch: netlink: Tunnel attr 9 has unexpected len 1 expected 2
[  512.409950][T22652] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4807'.
[  512.482147][T22660] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  512.581139][T22663] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.4809'.
[  513.172147][T22697] Dead loop on virtual device ip6_vti0, fix it urgently!
[  513.295557][T22700] geneve3: entered promiscuous mode
[  513.485985][T22708] netlink: 'syz.2.4827': attribute type 10 has an invalid length.
[  514.201691][T22747] tap0: tun_chr_ioctl cmd 1074025678
[  514.217868][T22747] tap0: group set to 0
[  514.317003][T22747] tap0: tun_chr_ioctl cmd 2147767520
[  514.353566][T22754] openvswitch: netlink: Flow key attr not present in new flow.
[  514.678010][T22763] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  514.704098][T22763] bond1 (unregistering): Released all slaves
[  514.813650][T22776] ipt_ECN: cannot use operation on non-tcp rule
[  515.022598][T22785] sctp: [Deprecated]: syz.5.4849 (pid 22785) Use of int in max_burst socket option deprecated.
[  515.022598][T22785] Use struct sctp_assoc_value instead
[  515.066121][T22788] __nla_validate_parse: 4 callbacks suppressed
[  515.066144][T22788] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4850'.
[  515.097788][T22788] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4850'.
[  515.236821][T22800] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  515.337200][T22796] wg1 speed is unknown, defaulting to 1000
[  515.455485][T22819] xt_hashlimit: overflow, try lower: 3/0
[  515.536476][T22819] netlink: 'syz.8.4858': attribute type 5 has an invalid length.
[  515.576877][T22822] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4859'.
[  515.647752][T22822] xt_hashlimit: max too large, truncated to 1048576
[  515.716219][T22831] netlink: 'syz.4.4862': attribute type 21 has an invalid length.
[  515.793956][T22837] netlink: 'syz.4.4862': attribute type 21 has an invalid length.
[  516.018061][T22843] netlink: 'syz.4.4865': attribute type 11 has an invalid length.
[  516.061904][T22843] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.4865'.
[  516.119017][T22848] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4868'.
[  516.218564][T22854] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4867'.
[  516.317744][T22862] netlink: 'syz.4.4871': attribute type 4 has an invalid length.
[  516.362378][T22862] macvtap1: entered promiscuous mode
[  516.367991][T22862] macvtap1: entered allmulticast mode
[  516.374690][T22862] veth1_vlan: entered allmulticast mode
[  516.415723][T22862] macvtap2: entered promiscuous mode
[  516.451028][T22862] macvtap2: entered allmulticast mode
[  516.491435][T22866] syzkaller0: entered promiscuous mode
[  516.497134][T22866] syzkaller0: entered allmulticast mode
[  516.753425][T22882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4878'.
[  516.987231][T22901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4884'.
[  517.179557][T22914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4887'.
[  517.237336][T22914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4887'.
[  517.709298][T22942] syzkaller0: entered promiscuous mode
[  517.716301][T22942] syzkaller0: entered allmulticast mode
[  518.053975][T22954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  518.077160][T22957] netlink: 'syz.5.4900': attribute type 4 has an invalid length.
[  518.401894][T22977] syzkaller1: entered promiscuous mode
[  518.409080][T22977] syzkaller1: entered allmulticast mode
[  518.624832][T22993] netlink: 'syz.5.4910': attribute type 32 has an invalid length.
[  518.635718][T22995] netlink: 'syz.4.4911': attribute type 2 has an invalid length.
[  518.719920][T22993] bond8: Setting coupled_control to off (0)
[  518.830623][T23010] netlink: 'syz.2.4914': attribute type 7 has an invalid length.
[  518.881595][T23012] netlink: 'syz.5.4917': attribute type 10 has an invalid length.
[  519.014730][T23016] openvswitch: netlink: IP tunnel dst address not specified
[  519.285537][T23022] syzkaller0: entered promiscuous mode
[  519.294945][T23022] syzkaller0: entered allmulticast mode
[  519.355942][T23022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  519.369842][T23029] wg1 speed is unknown, defaulting to 1000
[  519.686627][T23046] veth1_macvtap: left promiscuous mode
[  519.694343][T23046] macsec0: entered promiscuous mode
[  519.699631][T23046] macsec0: entered allmulticast mode
[  519.817829][T23047] veth1_macvtap: entered promiscuous mode
[  519.826583][T23047] veth1_macvtap: entered allmulticast mode
[  519.835351][T23047] macsec0: left promiscuous mode
[  519.840977][T23047] macsec0: left allmulticast mode
[  519.847092][T23047] veth1_macvtap: left allmulticast mode
[  520.072720][T23071] __nla_validate_parse: 16 callbacks suppressed
[  520.072743][T23071] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.4933'.
[  520.096306][T23072] wg1 speed is unknown, defaulting to 1000
[  520.361337][T23083] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode
[  520.379399][T23083] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode
[  520.400522][T23083] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4939'.
[  520.411024][T23090] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4938'.
[  520.427876][T23083] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4939'.
[  520.543370][T23094] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  520.595419][T23094] bond5: (slave lo): Enslaving as a backup interface with an up link
[  520.637262][T23094] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  520.743677][T23072] IPVS: You probably need to specify IP address on multicast interface.
[  520.753069][T23072] IPVS: Error connecting to the multicast addr
[  521.849000][T23160] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4955'.
[  521.851648][T23157] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4953'.
[  522.016278][T23162] netlink: 1 bytes leftover after parsing attributes in process `syz.8.4956'.
[  522.077682][T23171] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4959'.
[  522.357489][T23191] netlink: 'syz.8.4964': attribute type 5 has an invalid length.
[  522.378550][T23191] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4964'.
[  522.405361][T23192] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  522.432747][T23197] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4963'.
[  522.458472][T23190] wg1 speed is unknown, defaulting to 1000
[  522.479043][T23197] netlink: 'syz.5.4963': attribute type 10 has an invalid length.
[  522.520773][T23198] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  522.580647][T23202] bridge0: left allmulticast mode
[  522.719855][T23209] syzkaller1: entered promiscuous mode
[  522.727120][T23209] syzkaller1: entered allmulticast mode
[  522.736138][T23209] IPVS: length: 178 != 24
[  523.407019][T23241] netlink: 'syz.2.4980': attribute type 3 has an invalid length.
[  523.715722][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  523.727163][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  523.737135][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  523.753396][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  523.762086][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  523.843056][T23258] netlink: zone id is out of range
[  523.916005][T23258] netlink: zone id is out of range
[  523.930528][T23258] netlink: zone id is out of range
[  523.935797][T23258] netlink: get zone limit has 4 unknown bytes
[  524.198807][T23264] bond6: Invalid ad_actor_system MAC address.
[  524.205844][T23264] bond6: option ad_actor_system: invalid value (1)
[  524.214647][T23264] bond6 (unregistering): Released all slaves
[  524.379451][T23255] wg1 speed is unknown, defaulting to 1000
[  524.446290][T23279] netlink: 'syz.2.4989': attribute type 5 has an invalid length.
[  524.629223][T23286] gtp0: entered promiscuous mode
[  524.647365][T23286] gtp0: entered allmulticast mode
[  524.725071][ T3538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  524.761832][ T3538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  524.891922][T23255] chnl_net:caif_netlink_parms(): no params data found
[  524.964729][T23303] netlink: 'syz.4.4998': attribute type 1 has an invalid length.
[  525.077656][T23310] syz.8.5001: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  525.099840][T23303] xt_l2tp: v2 tid > 0xffff: 1114244
[  525.104783][T23310] CPU: 0 UID: 0 PID: 23310 Comm: syz.8.5001 Not tainted syzkaller #0 PREEMPT(full) 
[  525.104810][T23310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  525.104821][T23310] Call Trace:
[  525.104828][T23310]  <TASK>
[  525.104837][T23310]  dump_stack_lvl+0x189/0x250
[  525.104869][T23310]  ? __pfx_dump_stack_lvl+0x10/0x10
[  525.104890][T23310]  ? __pfx__printk+0x10/0x10
[  525.104916][T23310]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  525.104938][T23310]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  525.104960][T23310]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  525.104983][T23310]  warn_alloc+0x214/0x310
[  525.105003][T23310]  ? stack_trace_save+0x9c/0xe0
[  525.105031][T23310]  ? __pfx_warn_alloc+0x10/0x10
[  525.105058][T23310]  ? kasan_save_track+0x4f/0x80
[  525.105074][T23310]  ? kasan_save_track+0x3e/0x80
[  525.105089][T23310]  ? __kasan_kmalloc+0x93/0xb0
[  525.105107][T23310]  ? __kmalloc_cache_noprof+0x3e2/0x700
[  525.105124][T23310]  ? xskq_create+0x56/0x170
[  525.105151][T23310]  ? xsk_setsockopt+0x4dc/0x8d0
[  525.105174][T23310]  ? do_sock_setsockopt+0x17c/0x1b0
[  525.105194][T23310]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  525.105213][T23310]  ? do_syscall_64+0xfa/0xf80
[  525.105247][T23310]  __vmalloc_node_range_noprof+0x134/0x16a0
[  525.105306][T23310]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  525.105333][T23310]  ? __kasan_kmalloc+0x93/0xb0
[  525.105361][T23310]  vmalloc_user_noprof+0xad/0xf0
[  525.105380][T23310]  ? xskq_create+0xbf/0x170
[  525.105408][T23310]  xskq_create+0xbf/0x170
[  525.105440][T23310]  xsk_init_queue+0xb0/0x110
[  525.105473][T23310]  xsk_setsockopt+0x4dc/0x8d0
[  525.105511][T23310]  ? __pfx_xsk_setsockopt+0x10/0x10
[  525.105542][T23310]  ? __pfx_aa_sk_perm+0x10/0x10
[  525.105569][T23310]  ? aa_sock_opt_perm+0xff/0x1a0
[  525.105600][T23310]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  525.105618][T23310]  ? __pfx_xsk_setsockopt+0x10/0x10
[  525.105645][T23310]  do_sock_setsockopt+0x17c/0x1b0
[  525.105675][T23310]  __x64_sys_setsockopt+0x13f/0x1b0
[  525.105704][T23310]  do_syscall_64+0xfa/0xf80
[  525.105726][T23310]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.105745][T23310]  ? clear_bhb_loop+0x60/0xb0
[  525.105769][T23310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.105795][T23310] RIP: 0033:0x7fe98dd8f749
[  525.105815][T23310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  525.105830][T23310] RSP: 002b:00007fe98eb78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  525.105851][T23310] RAX: ffffffffffffffda RBX: 00007fe98dfe5fa0 RCX: 00007fe98dd8f749
[  525.105865][T23310] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  525.105878][T23310] RBP: 00007fe98de13f91 R08: 0000000000000004 R09: 0000000000000000
[  525.105891][T23310] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  525.105903][T23310] R13: 00007fe98dfe6038 R14: 00007fe98dfe5fa0 R15: 00007ffea1f0c9c8
[  525.105940][T23310]  </TASK>
[  525.107077][T23310] Mem-Info:
[  525.107116][T23310] active_anon:5159 inactive_anon:0 isolated_anon:0
[  525.107116][T23310]  active_file:3336 inactive_file:40054 isolated_file:0
[  525.107116][T23310]  unevictable:768 dirty:59 writeback:0
[  525.107116][T23310]  slab_reclaimable:13537 slab_unreclaimable:120489
[  525.107116][T23310]  mapped:29329 shmem:1380 pagetables:1106
[  525.107116][T23310]  sec_pagetables:0 bounce:0
[  525.107116][T23310]  kernel_misc_reclaimable:0
[  525.107116][T23310]  free:1288289 free_pcp:16344 free_cma:0
[  525.107174][T23310] Node 0 active_anon:20636kB inactive_anon:0kB active_file:13344kB inactive_file:160012kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117316kB dirty:236kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15088kB pagetables:4260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  525.107228][T23310] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  525.107288][T23310] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  525.107352][T23310] lowmem_reserve[]: 0 2499 2501 2501 2501
[  525.107405][T23310] Node 0 DMA32 free:1263620kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20636kB inactive_anon:0kB active_file:13344kB inactive_file:160012kB unevictable:1536kB writepending:236kB zspages:0kB present:3129332kB managed:2559356kB mlocked:0kB bounce:0kB free_pcp:43788kB local_pcp:20216kB free_cma:0kB
[  525.107555][T23310] lowmem_reserve[]: 0 0 1 1 1
[  525.107606][T23310] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  525.107666][T23310] lowmem_reserve[]: 0 0 0 0 0
[  525.107782][T23310] Node 1 Normal free:3874176kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21588kB local_pcp:14308kB free_cma:0kB
[  525.107844][T23310] lowmem_reserve[]: 0
[  525.687507][T23325] __nla_validate_parse: 18 callbacks suppressed
[  525.687528][T23325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5003'.
[  525.708780][T23310]  0 0 0 0
[  525.713225][T23310] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  525.726920][T23310] Node 0 DMA32: 5951*4kB (UME) 4663*8kB (UME) 1791*16kB (UME) 1168*32kB (UE) 352*64kB (UME) 84*128kB (UME) 26*256kB (UME) 41*512kB (UME) 45*1024kB (UME) 26*2048kB (UM) 238*4096kB (UM) = 1262244kB
[  525.748657][T23310] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  525.761437][T23310] Node 1 Normal: 192*4kB (U) 42*8kB (UME) 45*16kB (UME) 89*32kB (UME) 31*64kB (UME) 7*128kB (UME) 2*256kB (M) 5*512kB (UME) 3*1024kB (UM) 1*2048kB (E) 942*4096kB (M) = 3874176kB
[  525.781897][T23310] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  525.809707][T23310] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  525.822980][ T5826] Bluetooth: hci3: command tx timeout
[  525.831738][T23310] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  525.843669][T23310] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  525.856859][T23310] 44767 total pagecache pages
[  525.862201][T23310] 0 pages in swap cache
[  525.866477][T23310] Free swap  = 124996kB
[  525.871646][T23310] Total swap = 124996kB
[  525.876087][T23310] 2097051 pages RAM
[  525.879998][T23310] 0 pages HighMem/MovableOnly
[  525.885472][T23310] 425122 pages reserved
[  525.889913][T23310] 0 pages cma reserved
[  525.961134][T23329] netlink: 'syz.2.5005': attribute type 1 has an invalid length.
[  525.962207][T23255] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.978498][T23329] netlink: 'syz.2.5005': attribute type 3 has an invalid length.
[  526.001095][T23329] netlink: 'syz.2.5005': attribute type 7 has an invalid length.
[  526.005972][T23255] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.019731][T23329] netlink: 'syz.2.5005': attribute type 8 has an invalid length.
[  526.029667][T23333] netlink: 'syz.6.5006': attribute type 1 has an invalid length.
[  526.039075][T23255] bridge_slave_0: entered allmulticast mode
[  526.051851][T23333] netlink: 208 bytes leftover after parsing attributes in process `syz.6.5006'.
[  526.060032][T23329] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5005'.
[  526.075914][T23255] bridge_slave_0: entered promiscuous mode
[  526.080992][T23329] NCSI netlink: No device for ifindex 131092
[  526.087524][T23333] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5006'.
[  526.102413][T23255] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.110234][T23255] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.119615][T23255] bridge_slave_1: entered allmulticast mode
[  526.152209][T23255] bridge_slave_1: entered promiscuous mode
[  526.308680][T23255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  526.346217][T23349] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5008'.
[  526.372706][T23255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  526.515326][T23255] team0: Port device team_slave_0 added
[  526.530893][T23255] team0: Port device team_slave_1 added
[  526.630925][T23255] batman_adv: batadv0: Adding interface: batadv_slave_0
[  526.637934][T23255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  526.674894][T23255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  526.689870][T23255] batman_adv: batadv0: Adding interface: batadv_slave_1
[  526.697554][T23255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  526.749624][T23255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  526.974611][T23255] hsr_slave_0: entered promiscuous mode
[  526.995706][T23255] hsr_slave_1: entered promiscuous mode
[  527.005974][T23255] debugfs: 'hsr0' already exists in 'hsr'
[  527.017165][T23367] SET target dimension over the limit!
[  527.020389][T23255] Cannot create hsr debugfs directory
[  527.395884][T23383] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5021'.
[  527.469878][T23383] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5021'.
[  527.498725][T23255] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  527.526803][T23255] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  527.543969][T23255] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  527.559360][T23255] netdevsim netdevsim5 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  527.586702][T23394] tc_dump_action: action bad kind
[  527.625817][T23396] : entered promiscuous mode
[  527.642938][T23388] 
[  527.645310][T23388] ======================================================
[  527.652429][T23388] WARNING: possible circular locking dependency detected
[  527.659665][T23388] syzkaller #0 Not tainted
[  527.664189][T23388] ------------------------------------------------------
[  527.671375][T23388] syz.4.5023/23388 is trying to acquire lock:
[  527.677635][T23388] ffff8880281a2238 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b4/0x450
[  527.687244][T23388] 
[  527.687244][T23388] but task is already holding lock:
[  527.694810][T23388] ffff8880281a1cf8 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: elevator_change+0x199/0x450
[  527.705179][T23388] 
[  527.705179][T23388] which lock already depends on the new lock.
[  527.705179][T23388] 
[  527.715757][T23388] 
[  527.715757][T23388] the existing dependency chain (in reverse order) is:
[  527.725212][T23388] 
[  527.725212][T23388] -> #6 (&q->q_usage_counter(io)#70){++++}-{0:0}:
[  527.733831][T23388]        blk_alloc_queue+0x52f/0x610
[  527.739214][T23388]        __blk_mq_alloc_disk+0x15c/0x340
[  527.744849][T23388]        nbd_dev_add+0x46c/0xae0
[  527.749795][T23388]        nbd_genl_connect+0x919/0x1900
[  527.755789][T23388]        genl_family_rcv_msg_doit+0x215/0x300
[  527.762035][T23388]        genl_rcv_msg+0x60e/0x790
[  527.767141][T23388]        netlink_rcv_skb+0x208/0x470
[  527.772511][T23388]        genl_rcv+0x28/0x40
[  527.777094][T23388]        netlink_unicast+0x82f/0x9e0
[  527.782375][T23388]        netlink_sendmsg+0x805/0xb30
[  527.787662][T23388]        __sock_sendmsg+0x21c/0x270
[  527.792861][T23388]        ____sys_sendmsg+0x505/0x820
[  527.798346][T23388]        ___sys_sendmsg+0x21f/0x2a0
[  527.803721][T23388]        __x64_sys_sendmsg+0x19b/0x260
[  527.809450][T23388]        do_syscall_64+0xfa/0xf80
[  527.814569][T23388]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.821064][T23388] 
[  527.821064][T23388] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  527.828536][T23388]        fs_reclaim_acquire+0x72/0x100
[  527.834080][T23388]        __kmalloc_cache_node_noprof+0x45/0x700
[  527.840335][T23388]        create_worker+0x112/0x720
[  527.845549][T23388]        workqueue_prepare_cpu+0xe4/0x170
[  527.851445][T23388]        cpuhp_invoke_callback+0x445/0x860
[  527.857432][T23388]        _cpu_up+0x2ce/0x5c0
[  527.862028][T23388]        cpu_up+0x1d2/0x220
[  527.866617][T23388]        cpuhp_bringup_mask+0xb2/0x1a0
[  527.872085][T23388]        cpuhp_bringup_cpus_parallel+0x109/0x120
[  527.878671][T23388]        bringup_nonboot_cpus+0x17/0x30
[  527.884302][T23388]        smp_init+0x32/0x110
[  527.888982][T23388]        kernel_init_freeable+0x316/0x4b0
[  527.894928][T23388]        kernel_init+0x1d/0x1d0
[  527.899777][T23388]        ret_from_fork+0x599/0xb30
[  527.905065][T23388]        ret_from_fork_asm+0x1a/0x30
[  527.910446][T23388] 
[  527.910446][T23388] -> #4 (cpu_hotplug_lock){++++}-{0:0}:
[  527.918373][T23388]        cpus_read_lock+0x42/0x160
[  527.923568][T23388]        static_key_slow_inc+0x12/0x30
[  527.929203][T23388]        nbd_genl_reconfigure+0x10d8/0x1a50
[  527.935189][T23388]        genl_family_rcv_msg_doit+0x215/0x300
[  527.941433][T23388]        genl_rcv_msg+0x60e/0x790
[  527.946547][T23388]        netlink_rcv_skb+0x208/0x470
[  527.951922][T23388]        genl_rcv+0x28/0x40
[  527.956428][T23388]        netlink_unicast+0x82f/0x9e0
[  527.961709][T23388]        netlink_sendmsg+0x805/0xb30
[  527.967004][T23388]        __sock_sendmsg+0x21c/0x270
[  527.972292][T23388]        ____sys_sendmsg+0x505/0x820
[  527.977577][T23388]        ___sys_sendmsg+0x21f/0x2a0
[  527.982776][T23388]        __x64_sys_sendmsg+0x19b/0x260
[  527.988231][T23388]        do_syscall_64+0xfa/0xf80
[  527.993252][T23388]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.999663][T23388] 
[  527.999663][T23388] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  528.007309][T23388]        __mutex_lock+0x187/0x1350
[  528.012424][T23388]        nbd_queue_rq+0x257/0xf10
[  528.017460][T23388]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  528.023724][T23388]        __blk_mq_sched_dispatch_requests+0xdac/0x1570
[  528.030690][T23388]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  528.037410][T23388]        blk_mq_run_hw_queue+0x348/0x4f0
[  528.043310][T23388]        blk_mq_dispatch_list+0xd0b/0xe00
[  528.049061][T23388]        blk_mq_flush_plug_list+0x469/0x550
[  528.055224][T23388]        __blk_flush_plug+0x3d3/0x4b0
[  528.060635][T23388]        __submit_bio+0x2d0/0x5a0
[  528.065836][T23388]        submit_bio_noacct_nocheck+0x2eb/0xa30
[  528.072434][T23388]        block_read_full_folio+0x599/0x830
[  528.078244][T23388]        filemap_read_folio+0x117/0x380
[  528.084322][T23388]        do_read_cache_folio+0x358/0x590
[  528.089951][T23388]        read_part_sector+0xb6/0x2b0
[  528.095237][T23388]        adfspart_check_ICS+0xa4/0xa50
[  528.100703][T23388]        bdev_disk_changed+0x75f/0x14b0
[  528.106434][T23388]        blkdev_get_whole+0x380/0x510
[  528.111810][T23388]        bdev_open+0x31e/0xd30
[  528.116575][T23388]        blkdev_open+0x457/0x600
[  528.121539][T23388]        do_dentry_open+0x7ce/0x1420
[  528.126912][T23388]        vfs_open+0x3b/0x340
[  528.131863][T23388]        path_openat+0x340e/0x3dd0
[  528.137070][T23388]        do_filp_open+0x1fa/0x410
[  528.142457][T23388]        do_sys_openat2+0x121/0x200
[  528.147674][T23388]        __x64_sys_openat+0x138/0x170
[  528.153162][T23388]        do_syscall_64+0xfa/0xf80
[  528.158229][T23388]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.164907][T23388] 
[  528.164907][T23388] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  528.172124][T23388]        __mutex_lock+0x187/0x1350
[  528.177409][T23388]        nbd_queue_rq+0xc8/0xf10
[  528.182445][T23388]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  528.188538][T23388]        __blk_mq_sched_dispatch_requests+0xdac/0x1570
[  528.195403][T23388]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  528.202019][T23388]        blk_mq_run_hw_queue+0x348/0x4f0
[  528.207668][T23388]        blk_mq_dispatch_list+0xd0b/0xe00
[  528.213403][T23388]        blk_mq_flush_plug_list+0x469/0x550
[  528.219328][T23388]        __blk_flush_plug+0x3d3/0x4b0
[  528.224708][T23388]        __submit_bio+0x2d0/0x5a0
[  528.229739][T23388]        submit_bio_noacct_nocheck+0x2eb/0xa30
[  528.236246][T23388]        block_read_full_folio+0x599/0x830
[  528.242232][T23388]        filemap_read_folio+0x117/0x380
[  528.247881][T23388]        do_read_cache_folio+0x358/0x590
[  528.253534][T23388]        read_part_sector+0xb6/0x2b0
[  528.259024][T23388]        adfspart_check_ICS+0xa4/0xa50
[  528.264845][T23388]        bdev_disk_changed+0x75f/0x14b0
[  528.270394][T23388]        blkdev_get_whole+0x380/0x510
[  528.275766][T23388]        bdev_open+0x31e/0xd30
[  528.280576][T23388]        blkdev_open+0x457/0x600
[  528.285513][T23388]        do_dentry_open+0x7ce/0x1420
[  528.290798][T23388]        vfs_open+0x3b/0x340
[  528.295384][T23388]        path_openat+0x340e/0x3dd0
[  528.300492][T23388]        do_filp_open+0x1fa/0x410
[  528.305522][T23388]        do_sys_openat2+0x121/0x200
[  528.310726][T23388]        __x64_sys_openat+0x138/0x170
[  528.316097][T23388]        do_syscall_64+0xfa/0xf80
[  528.321205][T23388]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.327634][T23388] 
[  528.327634][T23388] -> #1 (set->srcu){.+.+}-{0:0}:
[  528.334854][T23388]        __synchronize_srcu+0x96/0x390
[  528.340399][T23388]        elevator_switch+0x12b/0x5f0
[  528.345687][T23388]        elevator_change+0x2cd/0x450
[  528.350980][T23388]        elevator_set_default+0x1af/0x2b0
[  528.356783][T23388]        blk_register_queue+0x34e/0x3f0
[  528.362330][T23388]        __add_disk+0x677/0xd50
[  528.367183][T23388]        add_disk_fwnode+0xfc/0x480
[  528.372473][T23388]        nbd_dev_add+0x717/0xae0
[  528.377502][T23388]        nbd_init+0x168/0x1f0
[  528.382179][T23388]        do_one_initcall+0x1fb/0x820
[  528.387464][T23388]        do_initcall_level+0x104/0x190
[  528.392918][T23388]        do_initcalls+0x59/0xa0
[  528.397765][T23388]        kernel_init_freeable+0x334/0x4b0
[  528.403578][T23388]        kernel_init+0x1d/0x1d0
[  528.408531][T23388]        ret_from_fork+0x599/0xb30
[  528.413752][T23388]        ret_from_fork_asm+0x1a/0x30
[  528.419148][T23388] 
[  528.419148][T23388] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  528.427058][T23388]        __lock_acquire+0x15a6/0x2cf0
[  528.432608][T23388]        lock_acquire+0x117/0x340
[  528.437722][T23388]        __mutex_lock+0x187/0x1350
[  528.443004][T23388]        elevator_change+0x1b4/0x450
[  528.449008][T23388]        elevator_set_none+0x98/0x110
[  528.454478][T23388]        blk_mq_update_nr_hw_queues+0x5b4/0x1a80
[  528.460997][T23388]        nbd_start_device+0x17f/0xb10
[  528.466534][T23388]        nbd_genl_connect+0x1353/0x1900
[  528.472085][T23388]        genl_family_rcv_msg_doit+0x215/0x300
[  528.478150][T23388]        genl_rcv_msg+0x60e/0x790
[  528.483172][T23388]        netlink_rcv_skb+0x208/0x470
[  528.488466][T23388]        genl_rcv+0x28/0x40
[  528.492978][T23388]        netlink_unicast+0x82f/0x9e0
[  528.498263][T23388]        netlink_sendmsg+0x805/0xb30
[  528.503548][T23388]        __sock_sendmsg+0x21c/0x270
[  528.508784][T23388]        ____sys_sendmsg+0x505/0x820
[  528.514169][T23388]        ___sys_sendmsg+0x21f/0x2a0
[  528.519367][T23388]        __x64_sys_sendmsg+0x19b/0x260
[  528.524828][T23388]        do_syscall_64+0xfa/0xf80
[  528.529860][T23388]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.536282][T23388] 
[  528.536282][T23388] other info that might help us debug this:
[  528.536282][T23388] 
[  528.546504][T23388] Chain exists of:
[  528.546504][T23388]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#70
[  528.546504][T23388] 
[  528.560505][T23388]  Possible unsafe locking scenario:
[  528.560505][T23388] 
[  528.568039][T23388]        CPU0                    CPU1
[  528.573575][T23388]        ----                    ----
[  528.578940][T23388]   lock(&q->q_usage_counter(io)#70);
[  528.584413][T23388]                                lock(fs_reclaim);
[  528.591090][T23388]                                lock(&q->q_usage_counter(io)#70);
[  528.599072][T23388]   lock(&q->elevator_lock);
[  528.603762][T23388] 
[  528.603762][T23388]  *** DEADLOCK ***
[  528.603762][T23388] 
[  528.611996][T23388] 6 locks held by syz.4.5023/23388:
[  528.617276][T23388]  #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  528.625461][T23388]  #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  528.634523][T23388]  #2: ffff88807b3979d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa6/0x1a80
[  528.645930][T23388]  #3: ffff88807b3978d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb9/0x1a80
[  528.657159][T23388]  #4: ffff8880281a1cf8 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: elevator_change+0x199/0x450
[  528.667873][T23388]  #5: ffff8880281a1d30 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x199/0x450
[  528.678846][T23388] 
[  528.678846][T23388] stack backtrace:
[  528.684736][T23388] CPU: 0 UID: 0 PID: 23388 Comm: syz.4.5023 Not tainted syzkaller #0 PREEMPT(full) 
[  528.684757][T23388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  528.684766][T23388] Call Trace:
[  528.684774][T23388]  <TASK>
[  528.684782][T23388]  dump_stack_lvl+0x189/0x250
[  528.684802][T23388]  ? __pfx_dump_stack_lvl+0x10/0x10
[  528.684819][T23388]  ? __pfx__printk+0x10/0x10
[  528.684840][T23388]  ? print_lock_name+0xde/0x100
[  528.684861][T23388]  print_circular_bug+0x2e2/0x300
[  528.684880][T23388]  check_noncircular+0x12e/0x150
[  528.684900][T23388]  __lock_acquire+0x15a6/0x2cf0
[  528.684922][T23388]  ? elevator_change+0x1b4/0x450
[  528.684939][T23388]  lock_acquire+0x117/0x340
[  528.684953][T23388]  ? elevator_change+0x1b4/0x450
[  528.684971][T23388]  ? work_grab_pending+0x44f/0x990
[  528.684991][T23388]  __mutex_lock+0x187/0x1350
[  528.685006][T23388]  ? elevator_change+0x1b4/0x450
[  528.685025][T23388]  ? enable_work+0x1b9/0x2b0
[  528.685043][T23388]  ? elevator_change+0x1b4/0x450
[  528.685059][T23388]  ? enable_work+0x21a/0x2b0
[  528.685074][T23388]  ? queue_hctx+0x1e/0x240
[  528.685088][T23388]  ? __pfx___mutex_lock+0x10/0x10
[  528.685106][T23388]  ? __cancel_work_sync+0xf7/0x110
[  528.685124][T23388]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  528.685144][T23388]  elevator_change+0x1b4/0x450
[  528.685164][T23388]  elevator_set_none+0x98/0x110
[  528.685181][T23388]  ? __pfx_elevator_set_none+0x10/0x10
[  528.685200][T23388]  ? xa_load+0x1ea/0x210
[  528.685218][T23388]  blk_mq_update_nr_hw_queues+0x5b4/0x1a80
[  528.685243][T23388]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  528.685260][T23388]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  528.685284][T23388]  ? sysfs_add_file_mode_ns+0x259/0x300
[  528.685309][T23388]  nbd_start_device+0x17f/0xb10
[  528.685332][T23388]  ? device_create_file+0xf4/0x1b0
[  528.685354][T23388]  nbd_genl_connect+0x1353/0x1900
[  528.685376][T23388]  ? __pfx_nbd_genl_connect+0x10/0x10
[  528.685398][T23388]  ? rcu_is_watching+0x15/0xb0
[  528.685417][T23388]  ? __nla_parse+0x40/0x60
[  528.685433][T23388]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  528.685451][T23388]  genl_family_rcv_msg_doit+0x215/0x300
[  528.685467][T23388]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  528.685490][T23388]  ? __lock_acquire+0x6b6/0x2cf0
[  528.685507][T23388]  genl_rcv_msg+0x60e/0x790
[  528.685521][T23388]  ? __pfx_genl_rcv_msg+0x10/0x10
[  528.685534][T23388]  ? __pfx_nbd_genl_connect+0x10/0x10
[  528.685558][T23388]  netlink_rcv_skb+0x208/0x470
[  528.685576][T23388]  ? __pfx_genl_rcv_msg+0x10/0x10
[  528.685589][T23388]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  528.685611][T23388]  ? down_read+0x274/0x2e0
[  528.685627][T23388]  ? genl_rcv+0xd/0x40
[  528.685639][T23388]  genl_rcv+0x28/0x40
[  528.685650][T23388]  netlink_unicast+0x82f/0x9e0
[  528.685669][T23388]  ? __pfx_netlink_unicast+0x10/0x10
[  528.685684][T23388]  ? netlink_sendmsg+0x642/0xb30
[  528.685701][T23388]  ? skb_put+0x11b/0x210
[  528.685718][T23388]  netlink_sendmsg+0x805/0xb30
[  528.685745][T23388]  ? __pfx_netlink_sendmsg+0x10/0x10
[  528.685763][T23388]  ? aa_sock_msg_perm+0xf1/0x1b0
[  528.685782][T23388]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  528.685795][T23388]  ? __pfx_netlink_sendmsg+0x10/0x10
[  528.685813][T23388]  __sock_sendmsg+0x21c/0x270
[  528.685834][T23388]  ____sys_sendmsg+0x505/0x820
[  528.685852][T23388]  ? __pfx_____sys_sendmsg+0x10/0x10
[  528.685871][T23388]  ? import_iovec+0x74/0xa0
[  528.685889][T23388]  ___sys_sendmsg+0x21f/0x2a0
[  528.685906][T23388]  ? __pfx____sys_sendmsg+0x10/0x10
[  528.685924][T23388]  ? futex_wake+0x4b2/0x560
[  528.685950][T23388]  ? __fget_files+0x2a/0x420
[  528.685968][T23388]  ? __fget_files+0x3a0/0x420
[  528.685987][T23388]  __x64_sys_sendmsg+0x19b/0x260
[  528.686005][T23388]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  528.686027][T23388]  ? do_syscall_64+0xbe/0xf80
[  528.686043][T23388]  do_syscall_64+0xfa/0xf80
[  528.686057][T23388]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.686071][T23388]  ? clear_bhb_loop+0x60/0xb0
[  528.686087][T23388]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.686101][T23388] RIP: 0033:0x7facedf8f749
[  528.686115][T23388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  528.686128][T23388] RSP: 002b:00007faceedb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  528.686144][T23388] RAX: ffffffffffffffda RBX: 00007facee1e5fa0 RCX: 00007facedf8f749
[  528.686155][T23388] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000004
[  528.686164][T23388] RBP: 00007facee013f91 R08: 0000000000000000 R09: 0000000000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  528.686173][T23388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  528.686182][T23388] R13: 00007facee1e6038 R14: 00007facee1e5fa0 R15: 00007ffebb624498
[  528.686198][T23388]  </TASK>
[  529.242918][ T5826] Bluetooth: hci3: command tx timeout
[  529.394264][T23255] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  529.429177][ T5826] block nbd5: Receive control failed (result -32)
[  529.436190][T23255] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  529.446293][ T5826] block nbd5: Receive control failed (result -32)
[  529.455802][T23255] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  529.469475][T23255] netdevsim netdevsim5 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  529.568300][T13764] bridge0: port 1(syz_tun) entered disabled state
[  529.601995][T13764] syz_tun (unregistering): left allmulticast mode
[  529.608523][T13764] syz_tun (unregistering): left promiscuous mode
[  529.630625][T13764] bridge0: port 1(syz_tun) entered disabled state
[  529.676814][T23255] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  529.687193][T23255] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  529.710847][T23255] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  529.731048][T23255] netdevsim netdevsim5 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  529.849292][T23255] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  529.865149][T23255] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  529.876087][T23255] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  529.895147][T23255] netdevsim netdevsim5 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  529.938503][T23400] syz_tun (unregistering): left allmulticast mode
[  530.061505][T21222] block nbd6: Possible stuck request ffff888024b80000: control (read@0,1024B). Runtime 60 seconds
[  530.072584][T21222] block nbd6: Possible stuck request ffff888024b80200: control (read@1024,1024B). Runtime 60 seconds
[  530.086032][T21222] block nbd6: Possible stuck request ffff888024b80400: control (read@2048,1024B). Runtime 60 seconds
[  530.098011][T21222] block nbd6: Possible stuck request ffff888024b80600: control (read@3072,1024B). Runtime 60 seconds
[  530.122296][   T80] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  530.133786][   T80] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.173051][   T80] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  530.182905][   T80] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.243227][   T80] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  530.253140][   T80] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.283829][   T80] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  530.294325][   T80] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.346827][   T80] bridge_slave_1: left allmulticast mode
[  530.354367][   T80] bridge_slave_1: left promiscuous mode
[  530.360113][   T80] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.368603][   T80] bridge_slave_0: left allmulticast mode
[  530.374543][   T80] bridge_slave_0: left promiscuous mode
[  530.380201][   T80] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.494875][   T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  530.505237][   T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  530.515417][   T80] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  530.525585][   T80] bond0 (unregistering): Released all slaves
[  530.573491][   T80] tipc: Left network mode
[  530.857945][   T80] hsr_slave_0: left promiscuous mode
[  530.864110][   T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  530.871882][   T80] batman_adv: batadv0: Removing interface: batadv_slave_0
[  530.879930][   T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  530.887432][   T80] batman_adv: batadv0: Removing interface: batadv_slave_1
[  530.897929][   T80] veth1_vlan: left promiscuous mode
[  530.903616][   T80] veth0_vlan: left promiscuous mode
[  531.007709][   T80] team0 (unregistering): Port device team_slave_1 removed
[  531.033666][   T80] team0 (unregistering): Port device team_slave_0 removed
[  531.441848][   T80] bridge_slave_1: left allmulticast mode
[  531.447677][   T80] bridge_slave_1: left promiscuous mode
[  531.454478][   T80] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.462894][   T80] bridge_slave_0: left allmulticast mode
[  531.468694][   T80] bridge_slave_0: left promiscuous mode
[  531.474825][   T80] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.534400][   T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  531.544683][   T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  531.554192][   T80] bond0 (unregistering): Released all slaves
[  531.684236][   T80] hsr_slave_0: left promiscuous mode
[  531.689924][   T80] hsr_slave_1: left promiscuous mode
[  531.696074][   T80] batman_adv: batadv0: Removing interface: batadv_slave_0
[  531.704028][   T80] batman_adv: batadv0: Removing interface: batadv_slave_1
[  531.763845][   T80] team0 (unregistering): Port device team_slave_1 removed
[  531.786220][   T80] team0 (unregistering): Port device team_slave_0 removed
[  535.128590][ T5200] udevd[5200]: worker [19768] /devices/virtual/block/nbd6 is taking a long time