last executing test programs:

1m54.758038515s ago: executing program 4 (id=7241):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000090)

1m53.549579249s ago: executing program 4 (id=7249):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf4e)
writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[], 0x124}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)

1m52.417150664s ago: executing program 4 (id=7255):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x402, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff7fff, 0x38}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x8}, @device_b, @broadcast, @basic={{0x0, 0x0, 0x0, 0x0, 0x7}, {0x6, 0x4a}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x7}}}]}, 0x78}}, 0x4004080)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9e}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x17b}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x929}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xde4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000085}, 0x40004804)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x8010)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r2, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r1, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}}, 0x4000050)
r3 = socket$netlink(0x10, 0x3, 0xa)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0)
sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x12c, r4, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x52}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@mesh_id={0x72, 0x6}, @ssid={0x0, 0x4, @random="7749db35"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x7, 0x4, @device_a, 0x0, @value=@device_b, 0x3ff, 0x3}}, @gcr_ga={0xbd, 0x6}, @cf={0x4, 0x6, {0x7, 0xd, 0x6, 0xef2d}}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x6, 0x0, {0x8, 0xb, 0x0, 0xd}, 0x800, 0x4, 0x9}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x6, 0x22}}, @gcr_ga={0xbd, 0x6, @device_b}, @fast_bss_trans={0x37, 0x75, {0x5, 0x1, "ad09aa49100045f4d4415eebcd6d88b9", "f71e09b1321ed57d3f393081288e7bfdf0613cf4a7ce7721729403ff87e58020", "d7183f145db6f3dddb3b2781d631fadea7c6ee30542bd8a3582a2c5c25a8b1f2", [{0x4, 0x21, "a98b144f18692c4f6dd6ffe26fbc5285edc3746bb2c6841229088dffc06741452d"}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="aeac72f32c1a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x12c}, 0x1, 0x0, 0x0, 0x11}, 0x40)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r3)
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r5, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffe01, 0x42}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x88c1)
ioctl$XFS_IOC_FSGETXATTRA(r3, 0x801c582d, &(0x7f00000009c0))
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r0)
sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000b80)={'wg1\x00', <r7=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=@dellinkprop={0x60, 0x6d, 0x20, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x4100, 0x10}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x2}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x18f41}, @IFLA_EVENT={0x8, 0x2c, 0x7}, @IFLA_EXT_MASK={0x8, 0x1d, 0x43f0a92b}, @IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_WEIGHT={0x8, 0xf, 0x10001}, @IFLA_TXQLEN={0x8, 0xd, 0xfffffffd}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x40e}]}, 0x60}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00), r3)
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x50)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001180)={{<r9=>r0, &(0x7f0000000e00)='devlink\x00', 0x4000, &(0x7f0000000e40)={@align, {0x6, 0xd, 0x9, 0x8}}, 0x1, &(0x7f0000000e80)={@_ha_fsid}, &(0x7f0000000ec0)=0x1}, 0x2, &(0x7f0000001140)=[{0x2, 0x5, &(0x7f0000000f00)='devlink\x00', &(0x7f0000000f40)="9b27e8d7b4661cce6bda72cf64435b17cc6d009796025c00d4c528be222f376536ae49a2d3b7b724981258cdaed8573c7ee1b76838d784d53d145a79bf11a6327ce24d3a3759f28d45b8ed2e50c6bb6f04584ecbb1b58f2c0bbbadf31e5e9012ccd06b87466d94681aa37e99a2f65b13db4556e2ad867b7d647ea802627be27ea6a8497b8c3dee0e6b2f206634e7e36cabbf5a166407b2ee7e5d1a53dde30d22699852e623aa7cb130065b3a3cbd34a3acc17fd7f80ec71329b239b54a3d862446187b0758c445d80afa07b40735244cc8d44aca05792ec8374b8992ee26668f4d455326ea712dd44337", 0xea, 0x1a}, {0x1, 0x4, &(0x7f0000001040)='}\x00', &(0x7f0000001080)="4073154dfa04fd9796ec9e585162e9f0bb38e7eddee06915e9c60275a605de45c2aaa524b58b7def6e0b4cd2267a768d0dfb5041f2a01e55fe1ce20a31d875656cd2adebab97452d69424f614c4d981e615f0629af34ae0bfa83a2176c8c16f92bd5e8cc684389b691a2fb3763e716803775e2bd72e96937642a6f7d2a34474468bc11fe8d277b82b9f542ef57eec4c5ad70059124029b656d5522d6523bf954", 0xa0, 0x18}]})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r5, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0xd}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x400c5)
sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)={0xc0, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000001480), &(0x7f00000014c0)=0x4)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r10, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x60, r5, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'bond0\x00'}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xee4}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xffff}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x80}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xb}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xd}]}, 0x60}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
pipe(&(0x7f0000001640)={<r11=>0xffffffffffffffff})
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r3)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r11, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xa8, r12, 0x204, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000e081}, 0x4008050)
write$nbd(0xffffffffffffffff, &(0x7f0000001840)={0x67446698, 0x0, 0x4, 0x2, 0x1, "c8f279a3c4450e8f5b31ddf9c708d7e38f71c6310c381c7aa16f2a41c23c4cb57092b4534dfafeef54740436e29a0ebb97418e4af1d4d8610aaae7954c0c2e95219c50"}, 0x53)

1m51.250161269s ago: executing program 4 (id=7266):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x5, 0x2) (async)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', <r4=>0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x11, r6, 0x4000) (async)
setsockopt$sock_attach_bpf(r5, 0x1, 0x54, &(0x7f0000000080), 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x4, 0x2, 0x3}}]}, 0x38}}, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="660a0000000000006911750000000000850000001a00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)

1m51.01040385s ago: executing program 4 (id=7270):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newroute={0x12, 0x1a, 0x1, 0x0, 0x200000, {0x2, 0x20, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x4}}, 0x1c}}, 0x20000000)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x98, 0x0, 0x130, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xfffffffffffffcb0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_emit_ethernet(0x3a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xfffe, 0x2}}}}}, 0x0)

1m50.420914148s ago: executing program 4 (id=7277):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x6b) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x6b)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x29, 0x43, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000e80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000900)={0x1ac, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) (async)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000e80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000900)={0x1ac, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}]}, 0x38}}, 0x4000800)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x30, 0x140f, 0x1, 0x70bd26, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x4021) (async)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x30, 0x140f, 0x1, 0x70bd26, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x4021)
getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000002c0), &(0x7f0000000340)=0x8)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0) (async)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0xb, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xa6}]}}]}, 0x3c}}, 0x44080)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r10=>0x0})
r11 = accept4(r7, &(0x7f00000007c0)=@tipc=@id, &(0x7f0000000840)=0x80, 0x40c00)
sendto$packet(r11, &(0x7f0000000880)="d0254fbcc0c5727bb33154ca4601481a351a7bd2d8234b6da771c20a521664f684303f840b4c71639cbebbec4e1c1671d6180a4205f39267765d03e9f31a804bcbede6158b3579777c56037aacc9ef7dc3c48c2329a2741f581074", 0x5b, 0x10, 0x0, 0x0) (async)
sendto$packet(r11, &(0x7f0000000880)="d0254fbcc0c5727bb33154ca4601481a351a7bd2d8234b6da771c20a521664f684303f840b4c71639cbebbec4e1c1671d6180a4205f39267765d03e9f31a804bcbede6158b3579777c56037aacc9ef7dc3c48c2329a2741f581074", 0x5b, 0x10, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400bb45", @ANYRES16=r9, @ANYBLOB="00082abd7000fddbdf251400000008000300", @ANYRES32=r10, @ANYBLOB="0800010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x400c811) (async)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400bb45", @ANYRES16=r9, @ANYBLOB="00082abd7000fddbdf251400000008000300", @ANYRES32=r10, @ANYBLOB="0800010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x400c811)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000010005b0400000000fbdbdf257a000000", @ANYRES32=0x0, @ANYBLOB="00000200000000001c0012800b00010062726964676500000c0002800800080081000000"], 0x3c}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000006c0000042cbd7000fddbdf2500000000", @ANYRES32=r13, @ANYBLOB="41050000109500000a0002000180c200000000000200110009000000140035006e657464657673696d3008000000000008002600a0060000140012800b0001006c6f7770616e000004000280140003007665746830055e57cadb4a2f7de6c3e1"], 0x78}}, 0x0) (async)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000006c0000042cbd7000fddbdf2500000000", @ANYRES32=r13, @ANYBLOB="41050000109500000a0002000180c200000000000200110009000000140035006e657464657673696d3008000000000008002600a0060000140012800b0001006c6f7770616e000004000280140003007665746830055e57cadb4a2f7de6c3e1"], 0x78}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r14 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', <r15=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r14, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r15, 0x4, 0x8, 0x1, 0xd, 0x70, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x10, 0xb45, 0x8}})

1m34.363013051s ago: executing program 32 (id=7277):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x6b) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000001c75000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a259a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f957400000000000000000000000000000060b5c40f3e37175303b15bbbdf266a5ff38a3a429866f9a323ae42dad9da4a566eaf0b256a3c8760b4a34320369c6a715d35b6847971ee9d6c544c76740a0c7ca83b307b7007"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x6b)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x29, 0x43, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000e80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000900)={0x1ac, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) (async)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000e80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000900)={0x1ac, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}]}, 0x38}}, 0x4000800)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x30, 0x140f, 0x1, 0x70bd26, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x4021) (async)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x30, 0x140f, 0x1, 0x70bd26, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x4021)
getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000002c0), &(0x7f0000000340)=0x8)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0) (async)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0xb, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xa6}]}}]}, 0x3c}}, 0x44080)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r10=>0x0})
r11 = accept4(r7, &(0x7f00000007c0)=@tipc=@id, &(0x7f0000000840)=0x80, 0x40c00)
sendto$packet(r11, &(0x7f0000000880)="d0254fbcc0c5727bb33154ca4601481a351a7bd2d8234b6da771c20a521664f684303f840b4c71639cbebbec4e1c1671d6180a4205f39267765d03e9f31a804bcbede6158b3579777c56037aacc9ef7dc3c48c2329a2741f581074", 0x5b, 0x10, 0x0, 0x0) (async)
sendto$packet(r11, &(0x7f0000000880)="d0254fbcc0c5727bb33154ca4601481a351a7bd2d8234b6da771c20a521664f684303f840b4c71639cbebbec4e1c1671d6180a4205f39267765d03e9f31a804bcbede6158b3579777c56037aacc9ef7dc3c48c2329a2741f581074", 0x5b, 0x10, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400bb45", @ANYRES16=r9, @ANYBLOB="00082abd7000fddbdf251400000008000300", @ANYRES32=r10, @ANYBLOB="0800010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x400c811) (async)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400bb45", @ANYRES16=r9, @ANYBLOB="00082abd7000fddbdf251400000008000300", @ANYRES32=r10, @ANYBLOB="0800010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x400c811)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000010005b0400000000fbdbdf257a000000", @ANYRES32=0x0, @ANYBLOB="00000200000000001c0012800b00010062726964676500000c0002800800080081000000"], 0x3c}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000006c0000042cbd7000fddbdf2500000000", @ANYRES32=r13, @ANYBLOB="41050000109500000a0002000180c200000000000200110009000000140035006e657464657673696d3008000000000008002600a0060000140012800b0001006c6f7770616e000004000280140003007665746830055e57cadb4a2f7de6c3e1"], 0x78}}, 0x0) (async)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000006c0000042cbd7000fddbdf2500000000", @ANYRES32=r13, @ANYBLOB="41050000109500000a0002000180c200000000000200110009000000140035006e657464657673696d3008000000000008002600a0060000140012800b0001006c6f7770616e000004000280140003007665746830055e57cadb4a2f7de6c3e1"], 0x78}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r14 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', <r15=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r14, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r15, 0x4, 0x8, 0x1, 0xd, 0x70, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x10, 0xb45, 0x8}})

51.273714782s ago: executing program 2 (id=7504):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x8, 0x3, "d61418f3"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}]}]}], {0x14}}, 0xd0}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd25, 0x25dfdbfb, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000)

49.986093558s ago: executing program 1 (id=7508):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0xf2, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006c6d6d6974000000240002800c00024000000000800000010c00014000000000000000080800054000000001140000001100010000000000000000000000000a"], 0xe8}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0xf2, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006c6d6d6974000000240002800c00024000000000800000010c00014000000000000000080800054000000001140000001100010000000000000000000000000a"], 0xe8}}, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) (async)

49.252757991s ago: executing program 0 (id=7510):
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x100, &(0x7f0000000040)={@_ha_fsid={[0x68ce, 0x4]}, {0x3437, 0x3, 0x6, 0x1}}, 0x80000001, &(0x7f0000000080), &(0x7f00000000c0)=0x6})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000140)={0x4, 0x3, {0x400, @usage=0xa, 0x0, 0x9, 0x8, 0x6, 0x1, 0x9, 0x4ca, @struct={0x2, 0x1}, 0x6, 0x2, [0x6, 0x6, 0x4bef, 0x0, 0xfffffffffffffffb, 0x2]}, {0xfffffffffffffff7, @struct={0x8}, <r1=>0x0, 0x1, 0xf, 0xffffffff, 0x6, 0x40f0, 0xa2, @usage=0x3, 0x2, 0x0, [0xc7, 0x8, 0xfffffffffffffffb, 0xb3, 0x5, 0xe]}, {0x8, @usage=0x1, 0x0, 0x2, 0x9, 0x6, 0x7, 0x0, 0xf, @usage=0x4, 0x4, 0x8, [0x9d, 0x9, 0x6, 0x9, 0x4, 0x2]}, {0x80000000, 0x4, 0xc}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000540)={r1, 0x2, 0x1, 0x1})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'gre0\x00', <r2=>0x0, 0x8000, 0x8000, 0x8, 0x7, {{0xb, 0x4, 0x0, 0x10, 0x2c, 0x68, 0x0, 0x80, 0x4, 0x0, @empty, @loopback, {[@ssrr={0x89, 0x17, 0x2d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @loopback, @empty]}]}}}}})
r3 = getuid()
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@local, @in=@rand_addr=0x64010101, 0x4e20, 0x7173, 0x4e24, 0x0, 0x2, 0x2fd000755e943912, 0x20, 0x3c, r2, r3}, {0x8184, 0x3, 0x7fffffff, 0x6949, 0x1, 0x8, 0x1, 0xb}, {0x3, 0xfff, 0x0, 0x8}, 0x2, 0x6e6bb4, 0x0, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x33}, 0xa, @in=@empty, 0x3505, 0x1, 0x2, 0xf7, 0x5, 0x1, 0x9}}, 0xe8)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000c40)={@sco={0x1f, @none}, {&(0x7f0000000b00)=""/194, 0xc2}, &(0x7f0000000c00)}, 0xa0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, &(0x7f0000000d00), {[{{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x32, 0x2, 0xa0, 0x8, 0xfd, @local, @mcast2, @remote, [0xff000000, 0xffffff00, 0xff0000ff, 0xffffff00], [0xff000000, 0xffffffff, 0x0, 0xffffffff], [0xff, 0xffffff00, 0xffffff00, 0xff], 0x2001, 0x2008}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8001, 0x3, 0x6, '\x00', {0x3c6d}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001100)=@o_path={&(0x7f00000010c0)='./file0\x00', 0x0, 0x0, r0}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r0, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0], <r5=>0x0, 0xac, &(0x7f0000001400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000001500)}}, 0x10)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001680)={0xffffffffffffffff, 0x1, 0x10}, 0xc)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xb, 0x11, &(0x7f0000001140)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r4}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x52e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000001200)='GPL\x00', 0x6, 0x95, &(0x7f0000001240)=""/149, 0x41000, 0x58, '\x00', 0x0, @fallback=0x23, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001300)={0x3, 0x0, 0x7, 0x2}, 0x10, r5, r0, 0x4, &(0x7f00000016c0)=[r6, r0, r0, r0, r0], &(0x7f0000001700)=[{0x2, 0x5, 0x1, 0x5}, {0x4, 0x1, 0x6, 0xc}, {0x2, 0x2, 0xf, 0x3}, {0x3, 0x1, 0x5, 0x8}], 0x10, 0x4}, 0x94)
ioctl$XFS_IOC_FSGEOMETRY_V1(r7, 0x80705864, &(0x7f0000001800))
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001900)={'ip6_vti0\x00', &(0x7f0000001880)={'syztnl2\x00', r2, 0x29, 0x9, 0xaf, 0x1, 0x8, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x20, 0x0, 0x4, 0xe}})
setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000001940), 0x4)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
sendmsg$nl_generic(r0, &(0x7f0000001bc0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b80)={&(0x7f00000019c0)={0x1b4, 0x41, 0x400, 0x70bd26, 0x25dfdbfd, {0x1e}, [@nested={0x8c, 0x11, 0x0, 0x1, [@typed={0xa, 0x4b, 0x0, 0x0, @str='\xff\xff\xff\xff\xff\xff'}, @generic="7510ced70ed8dbe813dd9a4e807e71ed222c9b30fc3741f5925bb0ebdfb942f50d3db7582dd0086c6865b9817e4503517c57c56e7e81a9431e884f9d187c012a90124754501cedc5284d3ec483ee19c3dd862498167297a4a3ae2964decd241c0c3837f872210a1715834b2e2ac4da128ae96933446e823b6ecf0d70"]}, @typed={0x8, 0x136, 0x0, 0x0, @u32=0x101}, @nested={0x104, 0x159, 0x0, 0x1, [@nested={0x4, 0x112}, @generic="6f87e76410806c8b3e5cb5865403c51e40ffc2ff09fbed653994ed74380e68c34edd4c3665d625e403660c1c458ae6249972b4039079516e98b039c04a2012d7d57595609f81eb8271d9359eac23583f30af6178c99d50fce4c9a9654b323ab517ff0e9e491f31c980aee8de9c54a757d827ca30abcf7c94d4e2e887ee590acd727a2ce82bbf1f9cc63ee781e803e8fd7dec7d7f85f227098a2d8feca22d42ce166545c151a8d23b108713ee966020e25359dd15446546d829e74b4cf16b80921645eaab3a175be06972c7bc104ec89b49e19e842a1ffe778c519c162546e8665fb4c59fce4d3261890c78da43ec6df8", @typed={0x8, 0xea, 0x0, 0x0, @fd=r8}, @nested={0x4, 0x43}]}, @typed={0x8, 0x11a, 0x0, 0x0, @fd=r7}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x2040}, 0x10)
ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r6, 0x40106e8c, &(0x7f0000001c00)=[0xf99, 0x100])
close(r8)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001c40)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001c80), 0x4)
connect$unix(r0, &(0x7f0000001cc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000001d40))
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001d80)='cubic', 0x5)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001dc0)={'ip6erspan0\x00', 0x2000})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'syztnl2\x00', <r9=>r2, 0x29, 0x0, 0x2, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x17}, 0x80, 0x8000, 0x7}})
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001ec0)={{{@in=@multicast1, @in6=@loopback, 0x4e21, 0x1, 0x4e23, 0x101, 0x2, 0x80, 0x80, 0x2f, r9, r3}, {0x9, 0x6, 0x0, 0x3, 0x3d, 0x9, 0xc9, 0x7}, {0x6, 0x8, 0x0, 0x7}, 0x72, 0x6e6bb6, 0x0, 0x0, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3506, 0x2, 0x0, 0x4, 0x0, 0x8, 0x400}}, 0xe8)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000001fc0))
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x70, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x2c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8000}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5}]}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_LABELS_MASK={0x14, 0x17, [0x2, 0x9, 0x7, 0x4]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)

49.032884351s ago: executing program 2 (id=7511):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), r0)
sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40008}, 0x4080)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r5, 0x40786e88, &(0x7f0000000340)={{&(0x7f0000000040)=[{0x96c, 0x4, 0x1ff, {0x6, 0x8}, 0x0, 0x9, 0x2}, {0x5, 0x1, 0x7, {0x8, 0x7ab}, 0x8, 0x4, 0x3}], 0x2, 0x40, 0x5, 0xd0}, {&(0x7f0000000180)=[{0x4f, 0x1}, {0x2, 0x2}, {0x40, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x7, 0x3}, {0x5, 0x800}, {0x2, 0x8}, {0x1, 0x4}, {0x400, 0x3ff}], 0xa, 0x10, 0x9, 0x4}, {&(0x7f0000000240)=[0x7, 0x6, 0x8000000000000001], 0x3, 0x8, 0x6, 0x8}, {&(0x7f0000000280)=[{0x800, 0x100, 0x0, 0x9, 0x380000}, {0xb, 0xd6, 0x8000000000000000, 0x1000000000, 0x3}], 0x2, 0x28, 0xd711, 0x240000000}, {&(0x7f0000000300)=[0x93d, 0x53d, 0x6, 0x1c7], 0x4, 0x8, 0x3ff, 0xffffffffffffffff}})
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r5)
sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, 0x112, 0x40000}, [@IFLA_ADDRESS={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4042)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r8, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x11, 0x80, @udp='udp:syz1\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x0)

48.973130451s ago: executing program 3 (id=7512):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00060000000000010000000000000058"}}}]}, 0x48}}, 0x20008080)
syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0208004503005c00000000002f907800000000e000000124808100000000001000080010000000000086dd080088be00002102100000000100000000000000080022eb00000000200000000200000000000000000000000800695800000000"], 0x0)

48.893679927s ago: executing program 1 (id=7513):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff]}}, 0x94)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$kcm(0x10, 0x2, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8)
sendto$inet6(r6, &(0x7f0000000080)="28a616", 0x3, 0x40500c1, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @loopback, 0x879}, 0x1c)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x74, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x45}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd254cdc}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040}, 0x4810)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000000a0601010000000000000000070000090900020073797a3100000000050001000700000002a309"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28)
syz_emit_ethernet(0x7c, &(0x7f00000000c0)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fbff00", 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x892f, [0x4]}, {}, {}, {0xa888}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2a}}}}}}}}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x11, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x8d6cc313c7cb82c1}, 0x0)
setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0)

48.554540055s ago: executing program 0 (id=7514):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000200)='\xaa\xaa\xaa\xaa\xaa', 0x88000, &(0x7f0000000240)={@_ha_fsid={[0x80000001, 0x3]}, {0x6, 0x9, 0x7, 0x8000000000000000}}, 0x2, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x7ff})
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000340)=0xfffffffd, 0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a0800451400740265000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8404000090780000080a0000000f0000093bfe12f989ff8e2363647e77cecf58436e63ed131279e6f44d530dc1a2bbb526931e89c384020403002205000459131247000600000000000000000008000000000000"], 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f00000000c0)=0x10)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000003c0))
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f00000010c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xb7, 0x2}, @generic={0x7b, 0xa, 0x2, 0xfff8}, @generic={0x7b, 0xa, 0x2, 0xfff0}, @generic={0x7b, 0xa, 0x2, 0xffe8}, @generic={0x7b, 0xa, 0x2, 0xffe0}, @generic={0x7b, 0xa, 0x2, 0xffd8}, @generic={0x7b, 0xa, 0x2, 0xffd0}, @generic={0x7b, 0xa, 0x2, 0xffc8}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x1}, @generic={0x63, 0xa, 0x2, 0xffc4}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffcc}, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffd0}, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r5, 0x0, 0x36, 0x0, &(0x7f0000002280)="001122334455001122334456080045000028000000004006f8ce0a0000010a00000200500050000000000000000050022000b82b0000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f00000000c0), 0x4)
setsockopt$sock_attach_bpf(r4, 0x1, 0x24, &(0x7f0000000000), 0x4)
syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008600007428dd00283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fe8800000000000000000000000000010002122b472e41e24b11f34b608816e5"], 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0xc010}, 0x8080)

48.125644641s ago: executing program 3 (id=7515):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$inet(r2, &(0x7f0000002b00)=[{{0x0, 0x2a0, &(0x7f00000014c0)=[{0x0, 0x2a0}], 0x1}}], 0x400000000000358, 0x40844)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@migrate={0xbc, 0x21, 0x1, 0xffffffff, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in6=@mcast2, @in=@local, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0x0, 0x4e20, 0x4e20, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0)

47.861286875s ago: executing program 2 (id=7516):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=<r1=>r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r2=>0x0, 0x1, 0xffff, 0xd69, 0xa56, 0x800}, &(0x7f0000000180)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r6, 0x11, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r9=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, 0x50010, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={<r10=>r2, 0x8001, 0xf08, 0x7, 0x6}, &(0x7f00000000c0)=0x14)
r11 = socket(0x1e, 0x805, 0x0)
connect$tipc(r11, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10)
connect$tipc(r11, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10)
close(r11)
bind$xdp(r11, &(0x7f0000000240)={0x2c, 0x8, r9, 0x33}, 0x10)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r12, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r10, &(0x7f0000000140)=0x4)
ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f00000003c0)={r4, &(0x7f0000000280)='ns/net\x00', 0x200000, &(0x7f00000002c0)={@_ha_fsid={[0x1ae4, 0x7]}, {0x9, 0x0, 0xfffffffe, 0xfffffffffffffe00}}, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x2})
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_PKTINFO(r13, 0x29, 0x4b, 0x0, 0x6)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0xec33a000)
write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x10, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

47.269196913s ago: executing program 1 (id=7517):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f00000001c0))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

47.099135121s ago: executing program 3 (id=7518):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, r1, 0x11, 0x70bd21, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x404c0c4}, 0x800)

46.761451972s ago: executing program 0 (id=7519):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff340001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xde}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd013}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2c}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4840)

46.759543393s ago: executing program 2 (id=7520):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x474c}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x6}]}}]}, 0x70}}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="b7f221b6f4ff1c0757fba2ed83bc0080ba872059155ff904825ea68b5d6b16e69ec4e5a40df2af3c9ebfe885602cef519bd00e9f0bd508598a360c2dcef2a2273a35a1712fe54977538c6595f4349d7b4c1df93f71d562e22241a5af0fb98ebf32e3e02bccbc089b196e0a1bc824d76f7e9628acc398f0cd5608b793db2e44b005d4193cc7a2be71d9d700"/152, 0xd8143bcfe9627c8f)
r6 = accept$alg(r3, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r7, 0x0, 0xe, 0x0, &(0x7f000000eb40))
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="077000000000000000000000000000000000000058e559584f940901f556b75c826b158bcc614ee8b6e0984208a21e5983ebbc3bbb89ef5e4f9292352e68305e3e7c765f1d25a449508ddde9acfa0524343d21b7edadbf38c025754351cfe9ac4c31531fd8e403683b84d11bc220f8ae5f49ae6f30a17d3d709f1d688387aab096e424b4da2cc8a3694b0000000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="05000000030000000300"/28], 0x50)
ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r9, 0x40106e8c, &(0x7f0000000200)=[0x9, 0x280])
socket$inet6(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.stat\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r10}, &(0x7f0000000080), &(0x7f0000000240)=r12}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="b9ff03076804268c989e140088a8", 0x0, 0x4ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r13 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), r4)
sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x80, r13, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf1}]}, 0x80}, 0x1, 0x0, 0x0, 0x44}, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000280)={r8, r6, 0x7, 0xbb, &(0x7f0000000140)="a6df3f45e52834774efad6fe886ab5f2d1eea72be18b5b73a18e5c6550ba86dcf98de98b83b839101c34875832cc0e6afc240e3f9a72944ad90482618c261b8eabf0caa0b6102ddbdc3d817f3ccf4e26da8bcbb78bef9b63514c022a4289d71b924ee585812cf21ca1b7a9a75ff0b4998d38f9ef1a8000282a77cabbca26cf360097f9cf452aa0145974662fcc53aad9c720f3e4ab448b41354bb45af33fd8b78b48325cd99a978270f7129e22017166e312297f32da2ee6911304", 0x4, 0x4, 0x5, 0xaec0, 0x2, 0x1, 0x3, 'syz0\x00'})
setsockopt$inet_int(r8, 0x0, 0x13, &(0x7f0000d10ffc), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6)

46.40851817s ago: executing program 3 (id=7521):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00'], 0x24}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4)
sendmmsg$inet6(r1, &(0x7f0000001b40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000340)="d5", 0x1}], 0x1}}], 0x1, 0x40)

46.245180087s ago: executing program 1 (id=7522):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000006c0)=@framed, 0x0, 0x5}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450)
sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x25, 0x101, 0x70bd27, 0x25dfdbfc, {0x1a}, [@typed={0x4, 0x167, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008840}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
socket$netlink(0x10, 0x3, 0xc)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000380)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="71050200"], 0x13)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000200), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x5, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6e8b02d66efc80bb"}}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8080)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r8)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r9)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000140)=0x7ff, 0x4)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4040, 0x820}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x10, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40050}, 0x0)

45.529640551s ago: executing program 0 (id=7523):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0, 0x2f, 0x88, 0x8, 0x5, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x7, 0x10, 0x1000}})
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', r1, r2, 0x1, 0x2, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

45.477372282s ago: executing program 3 (id=7524):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xcc08, 0x4408}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

44.89262719s ago: executing program 2 (id=7525):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', <r1=>0x0}) (async)
socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000100000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) (async)
listen(r3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0) (async)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x118, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf3, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "58d5c080bbdd"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_REORDER={0xc}]}}}]}, 0x118}}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000840)={'gretap0\x00', &(0x7f0000000100)={'sit0\x00', <r7=>r1, 0x8000, 0x40, 0xfffffffb, 0xffff8000, {{0x6, 0x4, 0x3, 0x5, 0x18, 0x64, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@noop]}}}}})
connect$can_bcm(r4, &(0x7f0000000940)={0x1d, r7}, 0x10) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @mcast2, 0x3}}, 0x0, 0x0, 0x20, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
sendto$inet6(r3, &(0x7f0000000440)="d991a33f2fa310dd48728a4a2a61c853cc919b1717a2665a5d2ab7e2d98ce25a4a4a0ca1c0f5e08a4384b0a033d5f164d98a102d77a0c206ad4035609a53827c5117336390460a84021befe8b54c93e3dd14fbd6daeb0f71c6c505f9929b4b7d43bce48e2bba72022b1f821cf0933000ac542a1a2d896b26606181b096f5df852edb10bf38c840887d3a88c73b61f77897f0f0e132837961d96faaa5abbef6a415daeec03dc00e9896cec77f1f02016ceec154378b86b5a21e07b359d325a3de64746ffeaf7ef7a46428075e3fe2d7a2c20f47756cfaf9", 0xd7, 0x0, &(0x7f0000000700)={0xa, 0x4e24, 0x4, @mcast1, 0x1}, 0x1c) (async)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1800"/12], 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async)
close(r10) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0xc, &(0x7f00000007c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @exit, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffd}, @ldst={0x3, 0x2, 0x2, 0xb, 0x7, 0x30, 0x8}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x1e00, 0x8, '\x00', r1, 0x0, r9, 0x8, &(0x7f00000002c0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x19448, r10, 0x2, &(0x7f0000000740)=[0x1], &(0x7f0000000780)=[{0x0, 0x5, 0xb, 0x2}, {0x4, 0x4, 0xe, 0x9}], 0x10, 0x9}, 0x94)

44.612305237s ago: executing program 0 (id=7526):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @alu={0x4, 0x1, 0xc, 0x6, 0xb, 0x100, 0xfffffffffffffffc}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400000}}]}, &(0x7f0000000140)='syzkaller\x00', 0x20ac, 0xa1, &(0x7f00000002c0)=""/161, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xb, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000400)=[{0x0, 0x9, 0x8, 0x5}, {0x5, 0x1, 0x4, 0x6}, {0x3, 0x4, 0x4, 0xa}, {0xf, 0x5, 0x4, 0x4}, {0x0, 0x2, 0x7, 0x4}], 0x10, 0x6}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200000038000480340001800a0001006c696d6974000000240002800c000140000000000000000908000540000000000c00024000000005000000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4085}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20844}, 0x20000081)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103261aca39bb8d945c1a4049fec0b100002bc7f5133c01bfc70000000002004000d7b3618d66c2ffeac8cf700962abadc12624a7a6eb599f54e9cfb397e37d4efb50b2f108d59091aab5dc8054b9fd3a49bacaf6d136f9383b9d20b8952e"], 0x20}, 0x1, 0x0, 0x0, 0x13}, 0x20040814)
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @alu={0x4, 0x1, 0xc, 0x6, 0xb, 0x100, 0xfffffffffffffffc}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400000}}]}, &(0x7f0000000140)='syzkaller\x00', 0x20ac, 0xa1, &(0x7f00000002c0)=""/161, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xb, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000400)=[{0x0, 0x9, 0x8, 0x5}, {0x5, 0x1, 0x4, 0x6}, {0x3, 0x4, 0x4, 0xa}, {0xf, 0x5, 0x4, 0x4}, {0x0, 0x2, 0x7, 0x4}], 0x10, 0x6}, 0x94) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200000038000480340001800a0001006c696d6974000000240002800c000140000000000000000908000540000000000c00024000000005000000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4085}, 0x0) (async)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20844}, 0x20000081) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103261aca39bb8d945c1a4049fec0b100002bc7f5133c01bfc70000000002004000d7b3618d66c2ffeac8cf700962abadc12624a7a6eb599f54e9cfb397e37d4efb50b2f108d59091aab5dc8054b9fd3a49bacaf6d136f9383b9d20b8952e"], 0x20}, 0x1, 0x0, 0x0, 0x13}, 0x20040814) (async)
close(r0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90) (async)

43.254697133s ago: executing program 1 (id=7527):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000ba880b70000000000000000000000000000000000002f00ea"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90)

39.363673655s ago: executing program 3 (id=7528):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x30, 0x61]}}, 0x0, 0x40, 0x0, 0x1, 0x7fffffff}, 0x20) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (rerun: 32)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000200)=""/51, 0x33}], 0x2}}], 0x1, 0x2001, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x43c, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x8ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x3, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x800, 0x7f, 0x9, 0x2, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x8, 0x10, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @mcast2, 0x20, 0xba08, 0xfffffc00, 0x1000}}) (async)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
accept$alg(r0, 0x0, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r6=>0x0}) (async)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000440)={@broadcast, @random="5aeadd61229e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000480", 0x38, 0x3a, 0xff, @empty, @mcast2, {[], @time_exceed={0x4, 0x2, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], "af34000000000000"}}}}}}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) (rerun: 64)
sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c0000001900000229bd7000fddbdf25800014010003c803003e000008000500e000000108000300", @ANYBLOB="f1c9b33329", @ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x804) (async)
setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000240)={0x7fffffff, {{0xa, 0x4e23, 0x2, @private2, 0x3}}}, 0x88)

37.865389934s ago: executing program 0 (id=7529):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000002500), r1)
sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002a00)={0x24, r2, 0x4789b0b68dee7cc9, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x18) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x4000001, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x1, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xd, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc0, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x1000004, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x5, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x101, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r5, &(0x7f0000000080)={0x2, @short}, 0x14) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x74, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r8, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x3c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0xff}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}, @IFLA_BRPORT_PROTECT={0x5}, @IFLA_BRPORT_MODE={0x5}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x1}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2)

34.81923125s ago: executing program 2 (id=7530):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42}, 0x48) (async)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000140)={{0x2, 0x4e23, @remote}, {0x301, @multicast}, 0x20, {0x2, 0x4e23, @multicast1}, 'geneve1\x00'}) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r3, 0x6, 0x25, 0x0, &(0x7f0000000240)) (async)
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000000080)=""/83, &(0x7f0000000100)=0x53)

28.62348191s ago: executing program 1 (id=7531):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="f51cd12150816a2ba4e93c70d3ab9251d011a119c0a0bd", 0x17}, {&(0x7f0000000040)="2321fd251640680e0722dcaec284fae45fd5c283cf1e6d3b3b46f5a735d1f8a711b14865707257c158e9896d6e557bcc1920", 0x32}, {&(0x7f00000000c0)="f1a9ad35b3c771d20c8ea152002a996f8c88bff86701c572467ace190c1da1c009582d76f18b3625117011524ad108dd524159b94751ab47cc11603d5cca6d554b49a98ce552f6dc0c2a01655dfff2a25398d3bbf8e56a3fd9adab0c7cf8a4d04e9c4a6b5e69864481d1e0c219af659b40615364169058b44f717f790262b7b5ebd274811ad58a44c5ffa35a38c569fe06f9180cd0267aea3b493f05798af2dfda0e9580895e1ff02e94afed108d57d4ade0b7c74a69c5cf7cdb98f8422ebef7f66e554f9c", 0xc5}, {&(0x7f00000022c0)="ccd14d667a379245ad18210cb3811662cb41bda64c221f5f63940ed5484fbf6549b540935a8c38ecf7df4ab5089365e6108ad6619cd32997b49d57c62c2fd744254689a2a959d26c0478baa9da5d908117af89ee2b42ae2025f6311003dd31feb466264a7eb16aaf4b5e4164cc2360d494fe5551c4802172ec1a128154cb8bae8a5a8b598bb9bf66c61cca42df91fee89ab2dd65ea553acb6a5f3f6e1fd790b803bed568f99a152da6a470a1efcbdfa5f7ac7d97d135d040bc5b472953e62971399b839fa7c7d999e5d60a69dabd13", 0xcf}], 0x4, 0x0, 0x0, 0x400c080}], 0x1, 0x8080)
recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)=""/211, 0xd3}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000640)=""/35, 0x23}], 0x3}, 0x5}], 0x1, 0x2001, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf250ad800800c0002"], 0x114}], 0x1}, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x1, 'vlan1\x00', {}, 0xb})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'tunl0\x00', &(0x7f0000000a00)={'gretap0\x00', 0x0, 0x1, 0x1, 0x7, 0x2, {{0x16, 0x4, 0x2, 0x2e, 0x58, 0x65, 0x0, 0x5, 0x4, 0x0, @local, @remote, {[@noop, @cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "cd1f54bac6f4a26042f581b6a659"}]}, @timestamp_prespec={0x44, 0x2c, 0xb5, 0x3, 0x4, [{@multicast2, 0xfffffffc}, {@multicast2, 0x7}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x5}, {@loopback, 0x1}]}]}}}}})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe1, '\x00', 0x0, r4, 0x1, 0x5}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r6 = openat$cgroup_ro(r3, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000cc0)={r2, &(0x7f0000000bc0)='@@.-\x00', 0x20000, &(0x7f0000000c00)={@align=0x10000, {0x8, 0x6, 0x8, 0x9}}, 0x6, &(0x7f0000000c40)={@_ha_fsid}, &(0x7f0000000c80)=0x1})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x44e, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50)

20.280506001s ago: executing program 33 (id=7528):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x30, 0x61]}}, 0x0, 0x40, 0x0, 0x1, 0x7fffffff}, 0x20) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (rerun: 32)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000200)=""/51, 0x33}], 0x2}}], 0x1, 0x2001, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x43c, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x8ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x3, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x800, 0x7f, 0x9, 0x2, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x8, 0x10, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @mcast2, 0x20, 0xba08, 0xfffffc00, 0x1000}}) (async)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
accept$alg(r0, 0x0, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r6=>0x0}) (async)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000440)={@broadcast, @random="5aeadd61229e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000480", 0x38, 0x3a, 0xff, @empty, @mcast2, {[], @time_exceed={0x4, 0x2, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], "af34000000000000"}}}}}}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) (rerun: 64)
sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c0000001900000229bd7000fddbdf25800014010003c803003e000008000500e000000108000300", @ANYBLOB="f1c9b33329", @ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x804) (async)
setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000240)={0x7fffffff, {{0xa, 0x4e23, 0x2, @private2, 0x3}}}, 0x88)

14.74371856s ago: executing program 34 (id=7529):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000002500), r1)
sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002a00)={0x24, r2, 0x4789b0b68dee7cc9, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x18) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x4000001, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x1, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xd, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc0, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x1000004, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x5, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x101, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r5, &(0x7f0000000080)={0x2, @short}, 0x14) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x74, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r8, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x3c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0xff}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}, @IFLA_BRPORT_PROTECT={0x5}, @IFLA_BRPORT_MODE={0x5}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x1}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2)

5.104477532s ago: executing program 35 (id=7530):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42}, 0x48) (async)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000140)={{0x2, 0x4e23, @remote}, {0x301, @multicast}, 0x20, {0x2, 0x4e23, @multicast1}, 'geneve1\x00'}) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r3, 0x6, 0x25, 0x0, &(0x7f0000000240)) (async)
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000000080)=""/83, &(0x7f0000000100)=0x53)

0s ago: executing program 36 (id=7531):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="f51cd12150816a2ba4e93c70d3ab9251d011a119c0a0bd", 0x17}, {&(0x7f0000000040)="2321fd251640680e0722dcaec284fae45fd5c283cf1e6d3b3b46f5a735d1f8a711b14865707257c158e9896d6e557bcc1920", 0x32}, {&(0x7f00000000c0)="f1a9ad35b3c771d20c8ea152002a996f8c88bff86701c572467ace190c1da1c009582d76f18b3625117011524ad108dd524159b94751ab47cc11603d5cca6d554b49a98ce552f6dc0c2a01655dfff2a25398d3bbf8e56a3fd9adab0c7cf8a4d04e9c4a6b5e69864481d1e0c219af659b40615364169058b44f717f790262b7b5ebd274811ad58a44c5ffa35a38c569fe06f9180cd0267aea3b493f05798af2dfda0e9580895e1ff02e94afed108d57d4ade0b7c74a69c5cf7cdb98f8422ebef7f66e554f9c", 0xc5}, {&(0x7f00000022c0)="ccd14d667a379245ad18210cb3811662cb41bda64c221f5f63940ed5484fbf6549b540935a8c38ecf7df4ab5089365e6108ad6619cd32997b49d57c62c2fd744254689a2a959d26c0478baa9da5d908117af89ee2b42ae2025f6311003dd31feb466264a7eb16aaf4b5e4164cc2360d494fe5551c4802172ec1a128154cb8bae8a5a8b598bb9bf66c61cca42df91fee89ab2dd65ea553acb6a5f3f6e1fd790b803bed568f99a152da6a470a1efcbdfa5f7ac7d97d135d040bc5b472953e62971399b839fa7c7d999e5d60a69dabd13", 0xcf}], 0x4, 0x0, 0x0, 0x400c080}], 0x1, 0x8080)
recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)=""/211, 0xd3}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000640)=""/35, 0x23}], 0x3}, 0x5}], 0x1, 0x2001, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf250ad800800c0002"], 0x114}], 0x1}, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x1, 'vlan1\x00', {}, 0xb})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'tunl0\x00', &(0x7f0000000a00)={'gretap0\x00', 0x0, 0x1, 0x1, 0x7, 0x2, {{0x16, 0x4, 0x2, 0x2e, 0x58, 0x65, 0x0, 0x5, 0x4, 0x0, @local, @remote, {[@noop, @cipso={0x86, 0x16, 0x0, [{0x0, 0x10, "cd1f54bac6f4a26042f581b6a659"}]}, @timestamp_prespec={0x44, 0x2c, 0xb5, 0x3, 0x4, [{@multicast2, 0xfffffffc}, {@multicast2, 0x7}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x5}, {@loopback, 0x1}]}]}}}}})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe1, '\x00', 0x0, r4, 0x1, 0x5}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r6 = openat$cgroup_ro(r3, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000cc0)={r2, &(0x7f0000000bc0)='@@.-\x00', 0x20000, &(0x7f0000000c00)={@align=0x10000, {0x8, 0x6, 0x8, 0x9}}, 0x6, &(0x7f0000000c40)={@_ha_fsid}, &(0x7f0000000c80)=0x1})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x44e, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50)

kernel console output (not intermixed with test programs):

[  728.341988][T28760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6036'.
[  728.381340][T28760] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6036'.
[  728.449310][T28760] gretap1: entered promiscuous mode
[  728.456651][T28760] gretap1: entered allmulticast mode
[  728.494473][T28763] syzkaller1: entered promiscuous mode
[  728.501089][T28763] syzkaller1: entered allmulticast mode
[  728.623510][T28712] wg1 speed is unknown, defaulting to 1000
[  728.770406][T28780] dvmrp0: left allmulticast mode
[  728.775608][T28780] wg2: left allmulticast mode
[  728.782309][T28780] syz_tun: left allmulticast mode
[  728.854034][T28781] macsec0: entered promiscuous mode
[  728.871783][T28781] macsec0: entered allmulticast mode
[  728.885269][T28780] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20004
[  728.892807][T28781] veth1_macvtap: entered allmulticast mode
[  728.904553][ T7682] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  728.933784][T28784] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6041'.
[  729.063021][T28788] 8021q: adding VLAN 0 to HW filter on device bond3
[  729.074221][T28791] syzkaller1: entered promiscuous mode
[  729.087849][T28791] syzkaller1: entered allmulticast mode
[  729.141670][T28791] net_ratelimit: 16 callbacks suppressed
[  729.141971][T28791] openvswitch: netlink: Flow actions attr not present in new flow.
[  729.318254][ T5612] Bluetooth: hci5: command tx timeout
[  729.515015][T28769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  729.885810][T28827] netlink: 'syz.1.6052': attribute type 1 has an invalid length.
[  729.949546][T28712] bridge0: port 1(bridge_slave_0) entered blocking state
[  729.967634][T28712] bridge0: port 1(bridge_slave_0) entered disabled state
[  729.987033][T28712] bridge_slave_0: entered allmulticast mode
[  729.995361][T28712] bridge_slave_0: entered promiscuous mode
[  730.073247][T28833] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0
[  730.113379][T28712] bridge0: port 2(bridge_slave_1) entered blocking state
[  730.134865][T28712] bridge0: port 2(bridge_slave_1) entered disabled state
[  730.144040][T28712] bridge_slave_1: entered allmulticast mode
[  730.153813][T28712] bridge_slave_1: entered promiscuous mode
[  730.162287][T28834] tipc: Enabling <eth:lo> not permitted
[  730.168514][T28834] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  730.365895][T28712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  730.398180][T28712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  730.481021][T28712] team0: Port device team_slave_0 added
[  730.491711][T28712] team0: Port device team_slave_1 added
[  730.561838][T28856] __nla_validate_parse: 2 callbacks suppressed
[  730.561859][T28856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6061'.
[  730.583932][T28712] batman_adv: batadv0: Adding interface: batadv_slave_0
[  730.593820][T28712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  730.627255][T28712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  730.787437][T28856] 8021q: adding VLAN 0 to HW filter on device bond4
[  730.803134][T28869] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6064'.
[  730.809999][T28712] batman_adv: batadv0: Adding interface: batadv_slave_1
[  730.821740][T28712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  730.863355][T28712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  731.062191][T28875] netlink: 'syz.1.6065': attribute type 1 has an invalid length.
[  731.089273][T28712] hsr_slave_0: entered promiscuous mode
[  731.109154][T28712] hsr_slave_1: entered promiscuous mode
[  731.118528][T28712] debugfs: 'hsr0' already exists in 'hsr'
[  731.124841][T28712] Cannot create hsr debugfs directory
[  731.168654][T28884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6067'.
[  731.210258][T28875] bond1: entered promiscuous mode
[  731.217730][T28875] 8021q: adding VLAN 0 to HW filter on device bond1
[  731.287254][T28891] netlink: 'syz.0.6069': attribute type 1 has an invalid length.
[  731.308004][T28883] macvtap1: entered allmulticast mode
[  731.368272][T28883] bond1: (slave bridge1): making interface the new active one
[  731.375865][T28883] bridge1: entered promiscuous mode
[  731.383637][T28883] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  731.397020][ T5612] Bluetooth: hci5: command tx timeout
[  731.470673][T28875] macvtap2: entered allmulticast mode
[  731.838793][T28911] 8021q: adding VLAN 0 to HW filter on device .`
[  731.861312][T28916] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6077'.
[  731.864176][T28911] 8021q: adding VLAN 0 to HW filter on device batadv0
[  731.939143][T28911] veth0_to_team: entered promiscuous mode
[  731.955472][T28911] 8021q: adding VLAN 0 to HW filter on device 

[  731.970094][T28911] A link change request failed with some changes committed already. Interface dvmrp1 may have been left with an inconsistent configuration, please check.
[  732.142750][T28927] netlink: 'syz.1.6078': attribute type 1 has an invalid length.
[  732.177996][T28927] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6078'.
[  732.218785][T28928] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  732.223657][T28927] netlink: 'syz.1.6078': attribute type 1 has an invalid length.
[  733.082194][T28937] pim6reg: entered allmulticast mode
[  733.212955][T28947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6082'.
[  733.224312][T28947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6082'.
[  733.465539][T28712] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  733.487139][ T5612] Bluetooth: hci5: command tx timeout
[  733.515973][T28959] Bluetooth: MGMT ver 1.23
[  733.535076][T28712] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.822041][T28980] netlink: 'syz.1.6090': attribute type 1 has an invalid length.
[  733.845105][T28712] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  733.856876][T28712] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.876273][T28981] netlink: 'syz.1.6090': attribute type 10 has an invalid length.
[  733.966962][T28980] 8021q: adding VLAN 0 to HW filter on device bond2
[  734.100118][T28712] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  734.114691][T28712] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.324558][T28712] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  734.340300][T28995] xt_hashlimit: invalid interval
[  734.350880][T28996] netlink: 'syz.2.6094': attribute type 21 has an invalid length.
[  734.356191][T28712] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.359766][T28996] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6094'.
[  734.434727][T28996] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6094'.
[  734.470588][T29003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6094'.
[  734.570340][T29003] bond0: entered promiscuous mode
[  734.575440][T29003] bond9: entered promiscuous mode
[  734.601121][T29003] bond0: left promiscuous mode
[  734.609371][T29003] bond9: left promiscuous mode
[  734.649250][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  735.315870][T29004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  735.355667][T28712] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  735.400326][T28712] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  735.435796][T28712] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  735.492499][T28712] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  735.538665][T28712] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  735.558273][ T5612] Bluetooth: hci5: command tx timeout
[  735.577752][T28712] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  735.648097][T29039] 8021q: adding VLAN 0 to HW filter on device bond3
[  735.657398][T28712] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  735.707808][T28712] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  735.842588][T29047] __nla_validate_parse: 3 callbacks suppressed
[  735.842608][T29047] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6105'.
[  736.112948][T29076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6109'.
[  736.147136][T29077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6108'.
[  736.162272][T29075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6109'.
[  736.180286][T29077] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6108'.
[  736.223876][T29077] gretap1: entered promiscuous mode
[  736.229551][T29077] gretap1: entered allmulticast mode
[  736.513802][T29095] netlink: 'syz.2.6114': attribute type 10 has an invalid length.
[  736.552493][T29095] syz_tun: entered promiscuous mode
[  736.582062][T29095] syz_tun: entered allmulticast mode
[  736.588620][T29095] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  736.628420][T28712] 8021q: adding VLAN 0 to HW filter on device bond0
[  736.721403][T28712] 8021q: adding VLAN 0 to HW filter on device team0
[  736.812249][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  736.819549][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  736.837138][T29103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6117'.
[  736.930330][ T7682] bridge0: port 2(bridge_slave_1) entered blocking state
[  736.937585][ T7682] bridge0: port 2(bridge_slave_1) entered forwarding state
[  737.053625][T29115] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6120'.
[  737.131673][T28712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  737.168927][T29120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6122'.
[  737.380682][T29130] netlink: 'syz.3.6125': attribute type 21 has an invalid length.
[  737.414336][T29130] IPv6: NLM_F_CREATE should be specified when creating new route
[  737.422390][T29133] netlink: 'syz.0.6126': attribute type 32 has an invalid length.
[  737.422418][T29133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6126'.
[  737.460708][T29133] bond7: Setting coupled_control to off (0)
[  737.491854][T29130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  737.499271][T29130] IPv6: NLM_F_CREATE should be set when creating new route
[  737.506573][T29130] IPv6: NLM_F_CREATE should be set when creating new route
[  737.513871][T29130] IPv6: NLM_F_CREATE should be set when creating new route
[  737.527035][T29130] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.6125'.
[  738.435814][T29161] tunl0: entered promiscuous mode
[  738.487991][T29161] netlink: 'syz.3.6132': attribute type 3 has an invalid length.
[  738.562038][T29183] netlink: 'syz.2.6135': attribute type 6 has an invalid length.
[  738.594301][T29183] netlink: 'syz.2.6135': attribute type 5 has an invalid length.
[  738.825159][T28712] 8021q: adding VLAN 0 to HW filter on device batadv0
[  739.040842][T29200] netlink: 'syz.3.6140': attribute type 11 has an invalid length.
[  739.080590][T29200] netlink: 'syz.3.6140': attribute type 11 has an invalid length.
[  739.637870][T29228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  739.726388][T29234] netlink: 'syz.1.6148': attribute type 5 has an invalid length.
[  739.739701][T28712] veth0_vlan: entered promiscuous mode
[  739.813706][T28712] veth1_vlan: entered promiscuous mode
[  739.864372][T29239] team0: Mode changed to "loadbalance"
[  739.964661][T29246] veth1_to_bond: entered allmulticast mode
[  739.994769][T29246] veth1_to_bond: entered promiscuous mode
[  740.048622][T29246] veth1_to_bond (unregistering): left allmulticast mode
[  740.067128][T29246] veth1_to_bond (unregistering): left promiscuous mode
[  740.103330][T29250] netlink: 'syz.2.6153': attribute type 32 has an invalid length.
[  740.200214][T28712] veth0_macvtap: entered promiscuous mode
[  740.267938][T28712] veth1_macvtap: entered promiscuous mode
[  740.344754][T28712] batman_adv: batadv0: Interface activated: batadv_slave_0
[  740.394554][T28712] batman_adv: batadv0: Interface activated: batadv_slave_1
[  740.618165][ T7680] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  740.718991][ T1115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  740.749932][ T1115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  740.988864][ T7674] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  740.995069][ T7673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  741.008021][ T7673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  741.041021][ T7674] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  741.094358][T29283] __nla_validate_parse: 13 callbacks suppressed
[  741.094381][T29283] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6162'.
[  741.204822][T29293] netlink: 'syz.2.6164': attribute type 1 has an invalid length.
[  741.420749][T29297] xt_NFQUEUE: number of total queues is 0
[  741.626904][T29308] bond12: entered promiscuous mode
[  741.632218][T29308] bond12: entered allmulticast mode
[  741.739445][T29277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  741.782176][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  741.791501][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  742.087234][T29321] veth0: Caught tx_queue_len zero misconfig
[  742.273971][T29330] sock: sock_set_timeout: `syz.0.6173' (pid 29330) tries to set negative timeout
[  742.933653][T29359] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  742.972757][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  743.005733][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  743.015440][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  743.038644][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  743.057940][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  743.277669][T29377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6184'.
[  743.311354][T29377] openvswitch: netlink: Missing key (keys=c0, expected=480)
[  743.375836][T29377] openvswitch: netlink: Duplicate or invalid key (type 0).
[  743.493492][T29379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6185'.
[  743.591858][T29379] veth0_macvtap: left promiscuous mode
[  743.980600][ T7680] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  744.032145][ T7680] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  744.132787][T29409] nbd: socks must be embedded in a SOCK_ITEM attr
[  744.269338][T29414] netlink: 'syz.0.6194': attribute type 1 has an invalid length.
[  744.375037][T29414] erspan2: entered allmulticast mode
[  744.562804][ T7680] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  744.595966][ T7680] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  744.748424][T29354] wg1 speed is unknown, defaulting to 1000
[  744.804953][ T7680] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  744.837381][ T7680] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  745.134448][ T7680] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  745.159807][ T5612] Bluetooth: hci3: command tx timeout
[  745.216427][ T7680] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  745.708742][T29462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6205'.
[  746.084591][T29478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6211'.
[  746.339730][T29483] netlink: 'syz.0.6212': attribute type 4 has an invalid length.
[  746.400372][ T7680] bridge_slave_1: left allmulticast mode
[  746.420706][ T7680] bridge_slave_1: left promiscuous mode
[  746.428403][ T7680] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.444172][ T7680] bridge_slave_0: left allmulticast mode
[  746.451223][ T7680] bridge_slave_0: left promiscuous mode
[  746.458774][ T7680] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.460555][T29489] netlink: 'syz.2.6214': attribute type 5 has an invalid length.
[  746.510248][ T7680] pim6reg: left allmulticast mode
[  746.511100][T29489] netlink: 'syz.2.6214': attribute type 9 has an invalid length.
[  746.560277][T29489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6214'.
[  746.788083][ T7680] bond3 (unregistering): (slave ip6gre1): Releasing backup interface
[  746.796800][ T7680] ip6gre1 (unregistering): left promiscuous mode
[  746.988016][T29491] IPv6: addrconf: prefix option has invalid lifetime
[  746.994856][T29491] IPv6: addrconf: prefix option has invalid lifetime
[  747.236819][ T5612] Bluetooth: hci3: command tx timeout
[  747.244973][ T7680] bond5 (unregistering): (slave geneve2): Releasing active interface
[  747.477528][ T7680] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  747.487495][ T7680] bond_slave_0: left promiscuous mode
[  747.496620][ T7680] 
 (unregistering): (slave bond2): Releasing backup interface
[  747.504935][ T7680] bond2 (unregistering): left promiscuous mode
[  747.517114][ T7680] 
 (unregistering): (slave team0): Releasing backup interface
[  747.525833][ T7680] team0: left promiscuous mode
[  747.532876][ T7680] team_slave_0: left promiscuous mode
[  747.541617][ T7680] team_slave_1: left promiscuous mode
[  747.550496][ T7680] 
 (unregistering): Released all slaves
[  747.568937][ T7680] bond1 (unregistering): Released all slaves
[  747.591777][ T7680] bond2 (unregistering): Released all slaves
[  747.616393][ T7680] bond3 (unregistering): Released all slaves
[  747.653903][ T7680] bond4 (unregistering): Released all slaves
[  747.692035][ T7680] bond5 (unregistering): Released all slaves
[  747.717930][ T7680] bond0 (unregistering): Released all slaves
[  747.744440][ T7680] bond6 (unregistering): Released all slaves
[  747.774993][ T7680] bond7 (unregistering): Released all slaves
[  747.802409][ T7680] bond8 (unregistering): Released all slaves
[  747.839204][T29486] netlink: 'syz.1.6213': attribute type 7 has an invalid length.
[  748.181457][T29504] netlink: 'syz.2.6218': attribute type 39 has an invalid length.
[  748.560062][ T7680] IPVS: stopping backup sync thread 19642 ...
[  748.647782][T29526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6222'.
[  748.906126][T29534] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6224'.
[  749.318379][ T5612] Bluetooth: hci3: command tx timeout
[  749.371079][T29553] netlink: 'syz.1.6229': attribute type 10 has an invalid length.
[  749.745497][T29553] team0: Device veth0_macvtap failed to register rx_handler
[  749.748401][T29555] netlink: 192 bytes leftover after parsing attributes in process `syz.4.6226'.
[  749.804232][T29566] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6228'.
[  749.827822][T29560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6229'.
[  749.856654][T29566] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6228'.
[  749.950406][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1
[  750.004541][T29354] bridge0: port 1(bridge_slave_0) entered blocking state
[  750.032817][T29354] bridge0: port 1(bridge_slave_0) entered disabled state
[  750.063357][T29354] bridge_slave_0: entered allmulticast mode
[  750.111991][T29354] bridge_slave_0: entered promiscuous mode
[  750.127677][T29354] bridge0: port 2(bridge_slave_1) entered blocking state
[  750.135126][T29354] bridge0: port 2(bridge_slave_1) entered disabled state
[  750.144174][T29354] bridge_slave_1: entered allmulticast mode
[  750.173743][T29354] bridge_slave_1: entered promiscuous mode
[  750.445522][T29581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  750.771329][T29354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  750.943849][T29354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  751.175800][T29605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6239'.
[  751.210308][T29354] team0: Port device team_slave_0 added
[  751.258830][T29603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  751.268716][T29602] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6238'.
[  751.344631][T29354] team0: Port device team_slave_1 added
[  751.396965][ T5612] Bluetooth: hci3: command tx timeout
[  751.646870][T29354] batman_adv: batadv0: Adding interface: batadv_slave_0
[  751.653878][T29354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  751.728247][T29617] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  751.793713][T29628] netlink: 'syz.0.6244': attribute type 39 has an invalid length.
[  751.794842][T29354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  751.921161][T29354] batman_adv: batadv0: Adding interface: batadv_slave_1
[  751.964382][T29354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  752.091937][T29354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  752.173834][T29644] xt_hashlimit: size too large, truncated to 1048576
[  752.268381][T29645] openvswitch: netlink: IP tunnel attribute has 5405 unknown bytes.
[  752.323656][T29645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6249'.
[  752.725196][T29354] hsr_slave_0: entered promiscuous mode
[  752.770848][T29354] hsr_slave_1: entered promiscuous mode
[  752.801426][T29354] debugfs: 'hsr0' already exists in 'hsr'
[  752.830125][T29354] Cannot create hsr debugfs directory
[  752.873648][T29659] syzkaller0: entered promiscuous mode
[  752.908450][T29659] syzkaller0: entered allmulticast mode
[  753.034054][T29662] ip6gre2: entered allmulticast mode
[  753.236547][ T7680] hsr_slave_0: left promiscuous mode
[  753.269694][ T7680] hsr_slave_1: left promiscuous mode
[  753.332020][ T7680] veth1_macvtap: left allmulticast mode
[  753.348939][ T7680] veth1_macvtap: left promiscuous mode
[  753.364114][ T7680] veth1_vlan: left promiscuous mode
[  754.203618][ T7680] team0 (unregistering): Port device team_slave_1 removed
[  754.241679][ T7680] team0 (unregistering): Port device team_slave_0 removed
[  754.482013][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3
[  754.982464][T29702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6262'.
[  755.142610][ T7680] IPVS: stop unused estimator thread 0...
[  755.264877][T29712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6268'.
[  755.282703][T29709] netlink: 'syz.1.6266': attribute type 213 has an invalid length.
[  755.311180][T29712] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6268'.
[  755.468489][T29712] gretap1: entered promiscuous mode
[  755.473861][T29712] gretap1: entered allmulticast mode
[  755.518541][ T7679] nci: nci_rsp_packet: unsupported rsp opcode 0xf00
[  755.659607][T29732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6270'.
[  755.699382][T29730] bond0: (slave syz_tun): Releasing backup interface
[  755.744322][T29730] syz_tun: left allmulticast mode
[  755.804148][T29730] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  755.825442][T29741] bridge0: port 1(veth0) entered blocking state
[  755.835371][T29739] netlink: zone id is out of range
[  755.855635][T29741] bridge0: port 1(veth0) entered disabled state
[  755.862862][T29739] netlink: zone id is out of range
[  755.875074][T29739] netlink: zone id is out of range
[  755.879330][T29741] veth0: entered allmulticast mode
[  755.922732][T29741] veth0: entered promiscuous mode
[  755.931780][T29739] netlink: zone id is out of range
[  755.942562][T29741] bridge0: port 1(veth0) entered blocking state
[  755.949045][T29741] bridge0: port 1(veth0) entered forwarding state
[  755.949325][T29739] netlink: zone id is out of range
[  755.961047][T29739] netlink: zone id is out of range
[  755.968735][T29739] netlink: zone id is out of range
[  755.975279][T29739] netlink: zone id is out of range
[  755.984836][T29732] No such timeout policy "s"
[  756.100806][T29716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  756.122719][T29724] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6268'.
[  756.151439][T29724] nbd: illegal input index -8454144
[  756.506700][T29753] xt_CT: You must specify a L4 protocol and not use inversions on it
[  756.563129][T29756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6274'.
[  757.181986][T29354] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  757.243609][T29354] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  757.280878][T29354] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  757.360357][T29354] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  757.399832][T29795] netlink: 'syz.1.6286': attribute type 39 has an invalid length.
[  757.452026][T29354] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  757.513574][T29354] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  757.547754][T29354] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  757.577720][T29806] Bluetooth: MGMT ver 1.23
[  757.597353][T29354] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  757.635457][T29795] netlink: 'syz.1.6286': attribute type 39 has an invalid length.
[  757.695740][T29795] netlink: 'syz.1.6286': attribute type 39 has an invalid length.
[  757.733799][T29795] netlink: 'syz.1.6286': attribute type 39 has an invalid length.
[  757.777380][T29795] netlink: 'syz.1.6286': attribute type 39 has an invalid length.
[  757.831902][T29795] netlink: 'syz.1.6286': attribute type 39 has an invalid length.
[  757.878428][T29795] netlink: 'syz.1.6286': attribute type 39 has an invalid length.
[  757.916801][T29795] netlink: 'syz.1.6286': attribute type 39 has an invalid length.
[  757.923036][T29819] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6290'.
[  757.949621][T29795] netlink: 'syz.1.6286': attribute type 39 has an invalid length.
[  758.067961][T29354] 8021q: adding VLAN 0 to HW filter on device bond0
[  758.172014][T29354] 8021q: adding VLAN 0 to HW filter on device team0
[  758.227231][ T7679] bridge0: port 1(bridge_slave_0) entered blocking state
[  758.234562][ T7679] bridge0: port 1(bridge_slave_0) entered forwarding state
[  758.303041][ T7679] bridge0: port 2(bridge_slave_1) entered blocking state
[  758.310295][ T7679] bridge0: port 2(bridge_slave_1) entered forwarding state
[  758.384218][T29830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6295'.
[  758.469163][T29841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6295'.
[  758.501533][T29841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6295'.
[  758.564757][T29841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6295'.
[  758.625724][T29841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6295'.
[  758.768549][T29853] netlink: 'syz.0.6299': attribute type 11 has an invalid length.
[  758.811559][T29853] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6299'.
[  759.055266][T29852] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6300'.
[  759.534580][T29886] xt_CT: No such helper "snmp"
[  765.042508][T29898] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  765.275182][T29923] net_ratelimit: 5 callbacks suppressed
[  765.275204][T29923] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  765.278079][T29925] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  765.378115][T29928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6314'.
[  765.634140][T29941] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6318'.
[  765.660580][T29941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6318'.
[  765.900017][T29948] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6318'.
[  766.003469][T29961] validate_nla: 27 callbacks suppressed
[  766.003494][T29961] netlink: 'syz.0.6321': attribute type 12 has an invalid length.
[  766.068213][T29354] 8021q: adding VLAN 0 to HW filter on device batadv0
[  766.192214][T29967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6323'.
[  766.241324][T29969] syzkaller0: entered promiscuous mode
[  766.267230][T29969] syzkaller0: entered allmulticast mode
[  766.369120][T29975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6325'.
[  766.452052][T29981] xt_CT: You must specify a L4 protocol and not use inversions on it
[  766.473605][T29354] veth0_vlan: entered promiscuous mode
[  766.582857][T29354] veth1_vlan: entered promiscuous mode
[  766.685030][T29354] veth0_macvtap: entered promiscuous mode
[  766.703047][T29354] veth1_macvtap: entered promiscuous mode
[  766.784171][T29354] batman_adv: batadv0: Interface activated: batadv_slave_0
[  766.865180][T29354] batman_adv: batadv0: Interface activated: batadv_slave_1
[  767.242960][ T7682] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  767.287909][ T7682] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  767.431211][ T7673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  767.465531][ T7673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  767.580306][   T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  767.622211][   T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  767.669837][ T7679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  767.686459][T30030] bond0: (slave ip6gre0): Error: Device can not be enslaved while up
[  767.695559][T30032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6338'.
[  767.707781][ T7679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  768.473893][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  768.490126][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  768.500252][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  768.526979][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  768.549715][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  768.797956][T30060] netlink: 'syz.1.6347': attribute type 1 has an invalid length.
[  768.826097][T30060] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6347'.
[  768.872841][T30060] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[  768.991562][T30065] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  769.571504][T30075] veth0_macvtap: entered promiscuous mode
[  769.595672][T30075] gretap1: left promiscuous mode
[  769.849454][T30089] bridge_slave_1: left allmulticast mode
[  769.883947][T30089] bridge_slave_1: left promiscuous mode
[  769.931516][T30089] bridge0: port 2(bridge_slave_1) entered disabled state
[  770.032929][T30089] bridge_slave_0: left allmulticast mode
[  770.093342][T30089] bridge_slave_0: left promiscuous mode
[  770.149359][T30089] bridge0: port 1(bridge_slave_0) entered disabled state
[  770.443856][T30050] wg1 speed is unknown, defaulting to 1000
[  770.596555][ T5613] Bluetooth: hci1: command tx timeout
[  770.956057][T30050] bridge0: port 1(bridge_slave_0) entered blocking state
[  770.963302][T30050] bridge0: port 1(bridge_slave_0) entered disabled state
[  770.972041][T30050] bridge_slave_0: entered allmulticast mode
[  770.980537][T30050] bridge_slave_0: entered promiscuous mode
[  770.990353][T30050] bridge0: port 2(bridge_slave_1) entered blocking state
[  770.999685][T30050] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.007451][T30050] bridge_slave_1: entered allmulticast mode
[  771.014910][T30050] bridge_slave_1: entered promiscuous mode
[  771.054528][T30050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  771.067470][T30050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  771.107028][T30050] team0: Port device team_slave_0 added
[  771.115724][T30050] team0: Port device team_slave_1 added
[  771.143569][T30050] batman_adv: batadv0: Adding interface: batadv_slave_0
[  771.150605][T30050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  771.177993][T30050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  771.191252][T30050] batman_adv: batadv0: Adding interface: batadv_slave_1
[  771.198668][T30050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  771.225065][T30050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  771.289249][T30050] hsr_slave_0: entered promiscuous mode
[  771.295894][T30050] hsr_slave_1: entered promiscuous mode
[  771.303234][T30050] debugfs: 'hsr0' already exists in 'hsr'
[  771.309621][T30050] Cannot create hsr debugfs directory
[  771.504342][T30050] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  771.514972][T30050] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.634599][T30050] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  771.650718][T30050] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.748439][T30050] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  771.758904][T30050] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.831313][T30050] netdevsim netdevsim2 
 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  771.841338][T30050] netdevsim netdevsim2 
 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.676728][ T5613] Bluetooth: hci1: command tx timeout
[  772.696585][T30101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  772.795860][T30050] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  772.834039][T30050] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  772.875000][T30050] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  772.905108][T30050] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  772.939318][T30050] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  772.950033][T30150] netlink: 'syz.0.6363': attribute type 4 has an invalid length.
[  772.978190][T30050] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  773.014691][T30050] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  773.056953][T30050] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  773.552094][T30050] 8021q: adding VLAN 0 to HW filter on device bond0
[  773.666288][T30050] 8021q: adding VLAN 0 to HW filter on device team0
[  773.739582][ T7679] bridge0: port 1(bridge_slave_0) entered blocking state
[  773.746996][ T7679] bridge0: port 1(bridge_slave_0) entered forwarding state
[  773.829107][ T7680] bridge0: port 2(bridge_slave_1) entered blocking state
[  773.836356][ T7680] bridge0: port 2(bridge_slave_1) entered forwarding state
[  773.850372][T30189] netlink: 'syz.3.6371': attribute type 32 has an invalid length.
[  773.865529][T30189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6371'.
[  773.964718][T30189] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  774.392301][T30211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6376'.
[  774.445809][T30213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  774.495287][T30211] netlink: 'syz.1.6376': attribute type 5 has an invalid length.
[  774.519212][T30211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6376'.
[  774.559096][T30219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6378'.
[  774.767913][ T5613] Bluetooth: hci1: command tx timeout
[  774.904236][T30233] netlink: 'syz.3.6380': attribute type 2 has an invalid length.
[  774.967166][T30239] vcan1: entered promiscuous mode
[  774.972369][T30239] vcan1: entered allmulticast mode
[  775.207922][T30050] 8021q: adding VLAN 0 to HW filter on device batadv0
[  775.270776][T30050] veth0_vlan: entered promiscuous mode
[  775.289924][T30050] veth1_vlan: entered promiscuous mode
[  775.379720][T30050] veth0_macvtap: entered promiscuous mode
[  775.390612][T30050] veth1_macvtap: entered promiscuous mode
[  775.417422][T30050] batman_adv: batadv0: Interface activated: batadv_slave_0
[  775.435861][T30050] batman_adv: batadv0: Interface activated: batadv_slave_1
[  775.480413][ T7680] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  775.490683][ T7680] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  775.559649][ T7680] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  775.572637][T30228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  775.614463][ T7680] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  775.854574][T30257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6386'.
[  775.919311][T30257] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  775.975587][T30257] batman_adv: batadv0: Removing interface: batadv_slave_1
[  775.997743][T29273] IPVS: starting estimator thread 0...
[  776.055281][T30267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6388'.
[  776.106896][T30270] IPVS: using max 26 ests per chain, 62400 per kthread
[  776.122271][ T7679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  776.139616][ T7679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  776.310651][T30274] syzkaller0: entered promiscuous mode
[  776.316815][T30274] syzkaller0: entered allmulticast mode
[  776.324592][ T7679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  776.346030][ T7679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  776.842427][ T5613] Bluetooth: hci1: command tx timeout
[  777.336228][T30301] netlink: 'syz.0.6398': attribute type 10 has an invalid length.
[  777.475258][T30305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6398'.
[  781.360955][T30283] dvmrp0: entered allmulticast mode
[  781.372391][T30301] team0: Device veth0_macvtap failed to register rx_handler
[  781.404912][T30305] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  781.738950][T30319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  782.316643][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  782.334984][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  782.350057][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  782.366425][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  782.379266][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  782.955092][T30362] netlink: 'syz.3.6410': attribute type 5 has an invalid length.
[  783.273874][T30372] netlink: 'syz.2.6413': attribute type 23 has an invalid length.
[  783.563788][T30383] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.6414'.
[  783.692902][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  783.708805][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  783.725589][T30387] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6417'.
[  783.755207][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  784.052810][T30400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6420'.
[  784.092019][T30400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6420'.
[  784.182044][T30406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  784.251541][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  784.311372][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.343016][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  784.436351][ T5613] Bluetooth: hci4: command tx timeout
[  784.534093][T30341] wg1 speed is unknown, defaulting to 1000
[  784.680426][   T35] .`: (slave netdevsim1): Releasing backup interface
[  784.769638][T30416] netlink: 'syz.3.6423': attribute type 23 has an invalid length.
[  784.816332][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  784.871339][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.905735][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  785.063671][T30421] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  785.394536][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  785.435899][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.485077][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  785.594616][T30432] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[  785.657127][T30432] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[  785.862504][T30451] netlink: 768 bytes leftover after parsing attributes in process `syz.4.6429'.
[  785.924967][T30451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6429'.
[  786.029112][T30455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6429'.
[  786.128342][T30451] 8021q: adding VLAN 0 to HW filter on device bond1
[  786.485907][T30468] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode
[  786.517897][ T5613] Bluetooth: hci4: command tx timeout
[  786.876966][T30487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  786.884293][T30487] IPv6: NLM_F_CREATE should be set when creating new route
[  787.381934][T30510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6439'.
[  787.443561][T30510] openvswitch: netlink: Message has 4 unknown bytes.
[  787.484396][T30518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6440'.
[  787.500882][T30514] bond2: entered promiscuous mode
[  787.506144][T30514] bond2: entered allmulticast mode
[  787.547131][T30520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6442'.
[  787.741686][   T35] dvmrp8: left allmulticast mode
[  788.596224][ T5613] Bluetooth: hci4: command tx timeout
[  788.645403][   T35] .` (unregistering): Released all slaves
[  788.660581][   T35] bond1 (unregistering): Released all slaves
[  788.683491][   T35] 
 (unregistering): Released all slaves
[  788.720388][   T35] bond0 (unregistering): Released all slaves
[  788.769762][   T35] bond2 (unregistering): (slave veth7): Releasing backup interface
[  788.780560][   T35] bond2 (unregistering): Released all slaves
[  788.813701][   T35] bond3 (unregistering): Released all slaves
[  788.837320][   T35] bond4 (unregistering): Released all slaves
[  788.860643][   T35] bond5 (unregistering): Released all slaves
[  788.891313][   T35] bond6 (unregistering): Released all slaves
[  788.913674][   T35] bond7 (unregistering): Released all slaves
[  789.110598][T15352] wg1 speed is unknown, defaulting to 1000
[  789.149882][T15352] syz2: Port: 1 Link DOWN
[  789.354986][T15351] wg1 speed is unknown, defaulting to 1000
[  789.360557][   T35] tipc: Disabling bearer <eth:ipvlan1>
[  789.415423][   T35] tipc: Left network mode
[  790.144499][T30578] xt_socket: unknown flags 0xe4
[  790.154482][T30341] bridge0: port 1(bridge_slave_0) entered blocking state
[  790.189423][T30341] bridge0: port 1(bridge_slave_0) entered disabled state
[  790.218501][T30341] bridge_slave_0: entered allmulticast mode
[  790.272465][T30341] bridge_slave_0: entered promiscuous mode
[  790.314794][T30341] bridge0: port 2(bridge_slave_1) entered blocking state
[  790.333408][T30583] __nla_validate_parse: 1 callbacks suppressed
[  790.333426][T30583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6458'.
[  790.335873][T30341] bridge0: port 2(bridge_slave_1) entered disabled state
[  790.369873][T30341] bridge_slave_1: entered allmulticast mode
[  790.401257][T30341] bridge_slave_1: entered promiscuous mode
[  790.676559][ T5613] Bluetooth: hci4: command tx timeout
[  791.339713][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1
[  791.691266][T30341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  791.755818][T30341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  792.011165][T30627] netlink: 'syz.1.6464': attribute type 1 has an invalid length.
[  792.163945][T30627] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6464'.
[  792.209919][T30636] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6467'.
[  792.294462][T30341] team0: Port device team_slave_0 added
[  792.323281][T30624] netlink: 'syz.1.6464': attribute type 29 has an invalid length.
[  792.341477][T30341] team0: Port device team_slave_1 added
[  792.364372][T30624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6464'.
[  792.367246][T30632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6464'.
[  792.498690][T30627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6464'.
[  792.629686][T30341] batman_adv: batadv0: Adding interface: batadv_slave_0
[  792.644461][T30341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  792.671433][T30341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  792.750368][T30658] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  792.874204][T30624] bond0: (slave bond_slave_1): Releasing backup interface
[  792.912490][T30341] batman_adv: batadv0: Adding interface: batadv_slave_1
[  792.928009][T30341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  792.956850][T30341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  793.124227][T30674] openvswitch: netlink: IPv4 frag type 13 is out of range max 2
[  793.250938][T30679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6475'.
[  793.709721][T30341] hsr_slave_0: entered promiscuous mode
[  793.734424][T30341] hsr_slave_1: entered promiscuous mode
[  793.763894][T30341] debugfs: 'hsr0' already exists in 'hsr'
[  793.783871][T30341] Cannot create hsr debugfs directory
[  794.032796][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2
[  794.503028][T30728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6485'.
[  794.612494][T30736] netlink: 5688 bytes leftover after parsing attributes in process `syz.2.6486'.
[  794.884203][   T35] hsr_slave_0: left promiscuous mode
[  794.898219][   T35] hsr_slave_1: left promiscuous mode
[  794.916661][T30748] IPv6: NLM_F_CREATE should be specified when creating new route
[  794.931821][   T35] veth0_to_team: left promiscuous mode
[  794.948475][T30748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6489'.
[  794.950714][   T35] veth1_vlan: left promiscuous mode
[  794.984566][   T35] veth0_vlan: left promiscuous mode
[  795.202095][T30763] netdevsim netdevsim2: Direct firmware load for ÿ failed with error -2
[  795.240613][T30763] netdevsim netdevsim2: Falling back to sysfs fallback for: ÿ
[  796.171268][ T7673] smc: removing ib device syz2
[  796.354444][ T7673] smbdirect: ib_dev[syz2] removed
[  796.545696][T30744] netlink: 'syz.1.6490': attribute type 11 has an invalid length.
[  796.551355][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3
[  796.867417][T30777] xt_nfacct: accounting object `' does not exist
[  796.927408][T30774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6494'.
[  797.264380][T30787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6496'.
[  797.335358][T30790] netlink: 'syz.1.6498': attribute type 16 has an invalid length.
[  797.377734][T30790] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.6498'.
[  797.418920][T30781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6496'.
[  798.314939][T30817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6504'.
[  799.571397][T30839] tunl0: entered promiscuous mode
[  799.623164][T30839] netlink: 'syz.2.6507': attribute type 4 has an invalid length.
[  799.658649][T30839] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6507'.
[  799.993404][T30852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6509'.
[  800.011347][T30854] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6510'.
[  800.034718][T30854] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6510'.
[  801.051763][T30341] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  801.101581][T30341] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  801.120549][T30341] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  801.169326][T30341] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  801.199029][T30341] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  801.241337][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.270574][T30341] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  801.433286][T30341] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  801.473011][T30341] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  801.735568][T30905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.746681][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.806770][T30905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.817711][ T3285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.847568][T30910] netlink: 'syz.2.6518': attribute type 2 has an invalid length.
[  801.866189][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.871887][T30341] 8021q: adding VLAN 0 to HW filter on device bond0
[  801.890775][T30910] netlink: 'syz.2.6518': attribute type 2 has an invalid length.
[  801.954962][T30905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.958732][T30341] 8021q: adding VLAN 0 to HW filter on device team0
[  801.965591][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.984207][T15351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.076530][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state
[  802.083763][ T7674] bridge0: port 1(bridge_slave_0) entered forwarding state
[  802.163465][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state
[  802.170807][ T7674] bridge0: port 2(bridge_slave_1) entered forwarding state
[  802.280996][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.940944][T30941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6524'.
[  802.944965][   T35] IPVS: stop unused estimator thread 0...
[  803.596670][T29273] IPVS: starting estimator thread 0...
[  803.612134][T30966] netlink: 'syz.4.6531': attribute type 1 has an invalid length.
[  803.631807][T30966] netlink: 'syz.4.6531': attribute type 4 has an invalid length.
[  803.650515][T30966] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.6531'.
[  803.706115][T30967] IPVS: using max 30 ests per chain, 72000 per kthread
[  804.008626][T30341] 8021q: adding VLAN 0 to HW filter on device batadv0
[  804.073354][T30985] x_tables: duplicate underflow at hook 1
[  804.243856][T30341] veth0_vlan: entered promiscuous mode
[  804.272962][T30341] veth1_vlan: entered promiscuous mode
[  804.653750][T30341] veth0_macvtap: entered promiscuous mode
[  804.725822][T30341] veth1_macvtap: entered promiscuous mode
[  804.813318][T31012] netlink: 'syz.1.6542': attribute type 13 has an invalid length.
[  804.853225][T31012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6542'.
[  804.863260][T31013] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6541'.
[  804.907028][T31014] netlink: 'syz.1.6542': attribute type 13 has an invalid length.
[  804.938374][T31014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6542'.
[  804.955880][T30341] batman_adv: batadv0: Interface activated: batadv_slave_0
[  805.003293][T31014] netlink: 'syz.1.6542': attribute type 13 has an invalid length.
[  805.024637][T30341] batman_adv: batadv0: Interface activated: batadv_slave_1
[  805.051119][T31012] netlink: 'syz.1.6542': attribute type 13 has an invalid length.
[  805.077960][T31014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6542'.
[  805.139346][T31012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6542'.
[  805.180348][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  805.236681][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  805.273605][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  805.386107][ T7682] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  805.412887][T31031] netlink: 'syz.1.6546': attribute type 58 has an invalid length.
[  805.424206][ T7682] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  805.435822][T31033] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6547'.
[  805.445442][T31031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6546'.
[  805.459244][T31033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6547'.
[  805.496592][ T7673] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  805.549722][ T7673] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  805.693187][ T7673] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  805.778826][T31041] syz_tun: entered promiscuous mode
[  805.975921][ T3285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  806.013704][ T3285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  806.252919][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  806.282456][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  806.416217][    C1] net_ratelimit: 23 callbacks suppressed
[  806.416240][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.433090][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.449310][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.500435][T31074] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  806.651631][T31049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.736918][T31049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.976298][T31099] TCP: TCP_TX_DELAY enabled
[  807.103286][T31106] syz.4.6565: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  807.190212][T31106] CPU: 0 UID: 0 PID: 31106 Comm: syz.4.6565 Not tainted syzkaller #0 PREEMPT(full) 
[  807.190244][T31106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  807.190257][T31106] Call Trace:
[  807.190265][T31106]  <TASK>
[  807.190274][T31106]  dump_stack_lvl+0xe8/0x150
[  807.190316][T31106]  warn_alloc+0x24c/0x270
[  807.190346][T31106]  ? stack_depot_save_flags+0x33/0x800
[  807.190375][T31106]  ? __pfx_warn_alloc+0x10/0x10
[  807.190401][T31106]  ? kasan_save_track+0x3e/0x80
[  807.190421][T31106]  ? __kasan_kmalloc+0x93/0xb0
[  807.190445][T31106]  ? xsk_setsockopt+0x52a/0x960
[  807.190469][T31106]  ? do_sock_setsockopt+0x17c/0x1b0
[  807.190501][T31106]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  807.190529][T31106]  ? do_syscall_64+0x174/0x580
[  807.190554][T31106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.190584][T31106]  __vmalloc_node_range_noprof+0x12c/0x1730
[  807.190639][T31106]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  807.190668][T31106]  ? __kasan_kmalloc+0x93/0xb0
[  807.190696][T31106]  ? __kmalloc_cache_noprof+0x32d/0x660
[  807.190721][T31106]  ? __kmalloc_cache_noprof+0x150/0x660
[  807.190750][T31106]  vmalloc_user_noprof+0xad/0xe0
[  807.190774][T31106]  ? xskq_create+0xbf/0x170
[  807.190798][T31106]  xskq_create+0xbf/0x170
[  807.190824][T31106]  xsk_init_queue+0x8a/0xe0
[  807.190849][T31106]  xsk_setsockopt+0x52a/0x960
[  807.190870][T31106]  ? __fget_files+0x2a/0x420
[  807.190899][T31106]  ? __pfx_xsk_setsockopt+0x10/0x10
[  807.190920][T31106]  ? __pfx_aa_sk_perm+0x10/0x10
[  807.190955][T31106]  ? aa_sock_opt_perm+0xff/0x1a0
[  807.190989][T31106]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  807.191010][T31106]  ? __pfx_xsk_setsockopt+0x10/0x10
[  807.191034][T31106]  do_sock_setsockopt+0x17c/0x1b0
[  807.191083][T31106]  __x64_sys_setsockopt+0x13d/0x1b0
[  807.191117][T31106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.191139][T31106]  do_syscall_64+0x174/0x580
[  807.191163][T31106]  ? trace_irq_disable+0x3b/0x140
[  807.191188][T31106]  ? clear_bhb_loop+0x70/0xc0
[  807.191214][T31106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.191234][T31106] RIP: 0033:0x7f6c3379e0d9
[  807.191254][T31106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  807.191271][T31106] RSP: 002b:00007f6c3469c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  807.191294][T31106] RAX: ffffffffffffffda RBX: 00007f6c33a25fa0 RCX: 00007f6c3379e0d9
[  807.191308][T31106] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  807.191320][T31106] RBP: 00007f6c33835024 R08: 0000000000000004 R09: 0000000000000000
[  807.191332][T31106] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  807.191343][T31106] R13: 00007f6c33a26038 R14: 00007f6c33a25fa0 R15: 00007ffc6c37c1a8
[  807.191377][T31106]  </TASK>
[  807.194389][T31106] Mem-Info:
[  807.222261][T31107] netlink: 'syz.4.6565': attribute type 8 has an invalid length.
[  807.360781][T31106] active_anon:6181 inactive_anon:0 isolated_anon:0
[  807.360781][T31106]  active_file:5 inactive_file:43112 isolated_file:0
[  807.360781][T31106]  unevictable:0 dirty:61 writeback:0
[  807.360781][T31106]  slab_reclaimable:12352 slab_unreclaimable:125544
[  807.360781][T31106]  mapped:29390 shmem:526 pagetables:1333
[  807.360781][T31106]  sec_pagetables:0 bounce:0
[  807.360781][T31106]  kernel_misc_reclaimable:0
[  807.360781][T31106]  free:1291008 free_pcp:10268 free_cma:0
[  807.397307][T15351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  807.545903][T18711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  807.690588][T31107] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.698509][T31107] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.741230][T31130] netlink: Conntrack attr has 1 unknown bytes
[  807.749440][T31130] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  807.770562][T31106] Node 0 active_anon:24824kB inactive_anon:0kB active_file:20kB inactive_file:172236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117560kB dirty:240kB writeback:0kB shmem:2104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15320kB pagetables:5076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  807.917661][T31106] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  807.982619][T31106] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  808.072643][T31140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  808.091548][T31106] lowmem_reserve[]: 0 2488 2489 2489 2489
[  808.125885][T31106] Node 0 DMA32 free:1206804kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25092kB inactive_anon:0kB active_file:20kB inactive_file:172236kB unevictable:0kB writepending:240kB zspages:0kB present:3129332kB managed:2548696kB mlocked:0kB bounce:0kB free_pcp:40440kB local_pcp:20684kB free_cma:0kB
[  808.181720][T31142] ip6tnl1: entered allmulticast mode
[  808.212580][T31140] __nla_validate_parse: 7 callbacks suppressed
[  808.212602][T31140] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6573'.
[  808.220320][T31106] lowmem_reserve[]: 0 0 0 0 0
[  808.254425][T31106] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  808.282072][T31147] x_tables: duplicate underflow at hook 1
[  808.325669][T31106] lowmem_reserve[]: 0 0 0 0 0
[  808.331284][T31140] veth0_to_bond: default FDB implementation only supports local addresses
[  808.348535][T31106] Node 1 Normal free:3941164kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  808.372283][T31147] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  808.392743][T31106] lowmem_reserve[]: 0 0 0 0 0
[  808.442065][T31106] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  808.456782][T31106] Node 0 DMA32: 783*4kB (UM) 623*8kB (UME) 296*16kB (UME) 301*32kB (UME) 139*64kB (UM) 37*128kB (UME) 33*256kB (UME) 10*512kB (UME) 4*1024kB (UME) 3*2048kB (UM) 280*4096kB (UM) = 1206804kB
[  808.523977][T31106] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  808.556811][T31106] Node 1 Normal: 1*4kB (U) 1*8kB (M) 4*16kB (UM) 5*32kB (UM) 7*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3941164kB
[  808.579655][T31158] team0 (unregistering): Port device team_slave_0 removed
[  808.594730][T31106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  808.632738][T31158] team0 (unregistering): Port device team_slave_1 removed
[  808.634605][T31106] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  808.668598][T31106] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  808.682077][T31147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6575'.
[  808.707338][T31147] bridge0: port 2(bridge_slave_1) entered disabled state
[  808.729285][T31106] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  808.763840][T31106] 43640 total pagecache pages
[  808.775131][T31106] 0 pages in swap cache
[  808.781474][T31106] Free swap  = 124996kB
[  808.823673][T31106] Total swap = 124996kB
[  808.846855][T31106] 2097051 pages RAM
[  808.858958][T31106] 0 pages HighMem/MovableOnly
[  808.871095][T31106] 428196 pages reserved
[  808.906678][T31106] 0 pages cma reserved
[  809.180146][T31179] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6582'.
[  809.212137][T31178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6583'.
[  809.618830][ T3285] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  809.646257][T31209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6587'.
[  810.139616][T31236] netlink: 'syz.1.6595': attribute type 21 has an invalid length.
[  810.232509][T31236] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6595'.
[  810.605212][T31254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6599'.
[  810.770518][T31269] netlink: 'syz.3.6603': attribute type 1 has an invalid length.
[  810.852318][T31269] netlink: 'syz.3.6603': attribute type 1 has an invalid length.
[  810.895669][T31277] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6604'.
[  810.916695][T31278] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6602'.
[  810.959455][T31282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6605'.
[  811.034581][T31279] veth0: entered promiscuous mode
[  811.067922][T31266] veth0: left promiscuous mode
[  811.220236][T31294] netlink: 'syz.2.6607': attribute type 1 has an invalid length.
[  811.405169][T31294] 8021q: adding VLAN 0 to HW filter on device bond1
[  811.611089][T31308] bond1: (slave gretap1): making interface the new active one
[  811.636670][ T5725] net_ratelimit: 51 callbacks suppressed
[  811.636691][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.652094][T31308] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  811.788789][T31265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.814624][T31265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.177364][T31335] netlink: 'syz.4.6617': attribute type 1 has an invalid length.
[  812.379165][T31342] nbd: must specify at least one socket
[  812.677803][T18711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.881449][T31368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.892852][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.271417][T31385] __nla_validate_parse: 4 callbacks suppressed
[  813.271439][T31385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6633'.
[  813.273425][T31384] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  813.288714][T31388] sctp: [Deprecated]: syz.3.6635 (pid 31388) Use of struct sctp_assoc_value in delayed_ack socket option.
[  813.288714][T31388] Use struct sctp_sack_info instead
[  813.353708][T31390] netlink: 'syz.1.6636': attribute type 6 has an invalid length.
[  813.477114][T15349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.546649][T31399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  813.655836][T31409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6638'.
[  813.714711][T31410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6639'.
[  813.736623][T18711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.778839][T31414] hsr0: entered allmulticast mode
[  813.784266][T31414] hsr_slave_0: entered allmulticast mode
[  813.805868][T31414] hsr_slave_1: entered allmulticast mode
[  813.815110][T31400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  813.831625][T31414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6641'.
[  813.872601][T31400] xt_hashlimit: size too large, truncated to 1048576
[  814.075282][T31420] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6642'.
[  814.146609][T31420] netlink: 'syz.1.6642': attribute type 1 has an invalid length.
[  814.249932][T31432] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6644'.
[  814.308696][T31434] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6646'.
[  814.431923][T31440] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6648'.
[  814.597789][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.718869][T31449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6652'.
[  814.754010][T31449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6652'.
[  814.823915][T31460] IPVS: Unknown mcast interface: vcan0
[  814.844457][T31454] syzkaller0: entered promiscuous mode
[  814.857723][T31454] syzkaller0: entered allmulticast mode
[  816.622716][T15349] IPVS: starting estimator thread 0...
[  816.736754][T31515] IPVS: using max 37 ests per chain, 88800 per kthread
[  816.837148][ T5725] net_ratelimit: 3 callbacks suppressed
[  816.837168][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.916971][ T5612] Bluetooth: hci4: command 0x0405 tx timeout
[  817.232497][T31536] bond2: Unable to set up delay as MII monitoring is disabled
[  817.251849][T31536] bond2 (unregistering): Released all slaves
[  817.342377][T31537] syzkaller0: entered promiscuous mode
[  817.357006][T31537] syzkaller0: entered allmulticast mode
[  817.645358][T15353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.884290][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.559332][T31606] netlink: 'syz.4.6700': attribute type 24 has an invalid length.
[  818.917144][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.928057][T31627] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  818.972004][T31627] netlink: 'syz.1.6707': attribute type 1 has an invalid length.
[  818.994812][T31627] __nla_validate_parse: 8 callbacks suppressed
[  818.994834][T31627] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6707'.
[  819.097606][T15349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.193509][T31638] bridge0: port 1(bridge_slave_0) entered disabled state
[  819.258968][T31638] bridge_slave_0 (unregistering): left allmulticast mode
[  819.285402][T31638] bridge_slave_0 (unregistering): left promiscuous mode
[  819.299063][T31638] bridge0: port 1(bridge_slave_0) entered disabled state
[  819.306664][T31646] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6715'.
[  819.406135][T31647] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6713'.
[  819.427629][T31650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6715'.
[  819.448854][T31652] openvswitch: netlink: IPv4 tunnel dst address is zero
[  819.474291][T31652] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  819.513850][T31652] netlink: 'syz.2.6716': attribute type 2 has an invalid length.
[  819.523859][T31653] netlink: 'syz.4.6715': attribute type 1 has an invalid length.
[  819.543259][T31650] openvswitch: netlink: Message has 4 unknown bytes.
[  819.543507][T31652] : entered promiscuous mode
[  819.605533][T31654] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6716'.
[  819.627499][T31653] netlink: 'syz.4.6715': attribute type 3 has an invalid length.
[  819.687349][T31653] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6715'.
[  819.957386][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.193806][T31678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6722'.
[  820.232707][T31678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6722'.
[  820.597546][T31694] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  820.642286][T31705] netlink: 768 bytes leftover after parsing attributes in process `syz.0.6730'.
[  821.318526][   T29] audit: type=1800 audit(1786296695.438:17): pid=31733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6740" name="memory.events" dev="tmpfs" ino=487 res=0 errno=0
[  821.353943][T31734] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6739'.
[  821.404807][T31734] netlink: 'syz.0.6739': attribute type 83 has an invalid length.
[  821.591816][T31744] erspan0: entered promiscuous mode
[  821.620001][T31744] erspan0: entered allmulticast mode
[  822.037078][T18711] net_ratelimit: 3 callbacks suppressed
[  822.037098][T18711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.064856][T31761] 8021q: adding VLAN 0 to HW filter on device bond4
[  822.180897][T31768] macsec1: entered promiscuous mode
[  822.189956][T31768] bridge0: entered promiscuous mode
[  822.200401][T31768] macsec1: entered allmulticast mode
[  822.208828][T31768] bridge0: entered allmulticast mode
[  822.215037][T31768] bridge0: port 3(macsec1) entered blocking state
[  822.224202][T31768] bridge0: port 3(macsec1) entered disabled state
[  822.242386][T31768] bridge0: left allmulticast mode
[  822.256280][T31768] bridge0: left promiscuous mode
[  822.546450][T31789] Cannot find set identified by id 65534 to match
[  822.554376][T31786] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002
[  822.585902][T31789] xt_nfacct: accounting object `' does not exist
[  822.723089][T31791] syzkaller1: entered promiscuous mode
[  822.750604][T31791] syzkaller1: entered allmulticast mode
[  823.012740][T31801] bridge0: port 2(bridge_slave_1) entered blocking state
[  823.021772][T31801] bridge0: port 2(bridge_slave_1) entered forwarding state
[  823.029726][T31801] bridge0: port 1(bridge_slave_0) entered blocking state
[  823.037023][T31801] bridge0: port 1(bridge_slave_0) entered forwarding state
[  823.077796][T18711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.170636][T15349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.188217][T31801] bond2: left promiscuous mode
[  823.194465][T31801] 8021q: adding VLAN 0 to HW filter on device bond2
[  823.202811][T15349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.207863][T31801] 8021q: adding VLAN 0 to HW filter on device bond3
[  823.222166][T31817] netlink: 'syz.0.6766': attribute type 1 has an invalid length.
[  823.256714][T15349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.286524][T15349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.299811][T31818] xt_hashlimit: size too large, truncated to 1048576
[  823.332308][T18711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.360694][T18711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.402057][T31807] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  823.619356][T31826] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  823.676912][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.688283][T31826] netlink: 'syz.1.6771': attribute type 3 has an invalid length.
[  824.155451][T31854] __nla_validate_parse: 4 callbacks suppressed
[  824.155472][T31854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6779'.
[  824.321956][T31860] syz_tun: entered promiscuous mode
[  824.395500][T31865] tls_set_device_offload_rx: netdev not found
[  824.523248][T31870] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6785'.
[  824.874013][T31888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6789'.
[  825.300227][T31905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6791'.
[  825.353201][T31905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6791'.
[  825.452384][T31911] netlink: 'syz.1.6796': attribute type 27 has an invalid length.
[  825.529140][T31916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6797'.
[  825.861951][T31924] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6800'.
[  826.281879][T31940] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  826.338166][T31940] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  826.745259][T31957] netlink: 'syz.2.6808': attribute type 1 has an invalid length.
[  826.944281][T31963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6811'.
[  827.044394][T31963] bond2: entered promiscuous mode
[  827.050246][T31963] bond2: entered allmulticast mode
[  827.087390][T31969] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  827.241449][T31973] 
: renamed from bond0 (while UP)
[  827.920489][T32002] netlink: 'syz.0.6822': attribute type 9 has an invalid length.
[  827.938117][T32002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6822'.
[  828.028689][T32002] netlink: 'syz.0.6822': attribute type 9 has an invalid length.
[  828.043802][ T7679] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  828.085654][ T7679] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  828.086751][T32002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6822'.
[  828.127149][   T35] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  828.150048][   T35] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  828.947057][T32036] netdevsim netdevsim1: Direct firmware load for . failed with error -2
[  828.971157][T32036] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  829.451407][T32049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6836'.
[  829.620428][T32056] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6839'.
[  829.683078][T32060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6841'.
[  829.805332][T32060] dvmrp0: entered allmulticast mode
[  830.033587][T32070] netlink: 'syz.2.6847': attribute type 1 has an invalid length.
[  830.483878][T32096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6850'.
[  830.879873][T32113] bridge1: entered promiscuous mode
[  830.903176][T32113] bridge1: entered allmulticast mode
[  831.051939][T32114] lo: entered allmulticast mode
[  831.091843][T32114] tunl0: entered allmulticast mode
[  831.138060][T32114] gre0: entered allmulticast mode
[  831.239943][T32114] gretap0: entered allmulticast mode
[  831.290674][T32114] erspan0: entered allmulticast mode
[  831.329517][T32114] ip_vti0: entered allmulticast mode
[  831.350616][T32114] ip6_vti0: entered allmulticast mode
[  831.362148][T32114] sit0: entered allmulticast mode
[  831.384131][T32114] ip6tnl0: entered allmulticast mode
[  831.405340][T32114] ip6gre0: entered allmulticast mode
[  831.437964][T32114] syz_tun: entered allmulticast mode
[  831.461923][T32134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  832.221694][T32163] netlink: 'syz.3.6865': attribute type 5 has an invalid length.
[  832.582093][T32184] netlink: 'syz.2.6870': attribute type 11 has an invalid length.
[  832.611247][T32184] netlink: 'syz.2.6870': attribute type 11 has an invalid length.
[  832.632086][T32184] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6870'.
[  833.045018][T32200] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6876'.
[  833.480303][T32215] xt_hashlimit: size too large, truncated to 1048576
[  833.565901][T32218] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.6883'.
[  833.795791][T32235] net_ratelimit: 4 callbacks suppressed
[  833.795813][T32235] openvswitch: netlink: IPv4 frag type 32 is out of range max 2
[  834.751725][T32263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6890'.
[  835.070338][T32273] netlink: 'syz.1.6891': attribute type 21 has an invalid length.
[  835.092500][T32273] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6891'.
[  835.153989][T32273] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6891'.
[  835.215543][T32274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  835.397844][T32283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6894'.
[  835.426420][T32283] netlink: 50 bytes leftover after parsing attributes in process `syz.1.6894'.
[  835.449328][T32283] netlink: 50 bytes leftover after parsing attributes in process `syz.1.6894'.
[  835.681616][T32298] netlink: 'syz.0.6898': attribute type 1 has an invalid length.
[  835.930454][T32309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6900'.
[  835.950305][T32309] bridge0: port 2(bridge_slave_1) entered disabled state
[  837.395471][T32365] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  837.584420][T32369] netlink: 'syz.4.6916': attribute type 21 has an invalid length.
[  837.619120][T32369] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6916'.
[  837.662698][T32369] netlink: 'syz.4.6916': attribute type 18 has an invalid length.
[  837.662901][T32371] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  837.722953][T32369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6916'.
[  837.783288][T32371] vxcan1: tx drop: invalid sa for name 0x0000000000000001
[  837.877742][ T7679] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  837.886909][T32381] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  837.939875][ T7679] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  837.978928][ T7679] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  838.023613][ T7679] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  838.160390][T32398] netlink: 388 bytes leftover after parsing attributes in process `syz.2.6924'.
[  838.182919][T32398] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  838.212356][T32392] Unsupported ieee802154 address type: 0
[  838.259928][T32401] netlink: 'syz.2.6924': attribute type 15 has an invalid length.
[  838.285205][T32401] netlink: 'syz.2.6924': attribute type 3 has an invalid length.
[  838.456706][T32408] syzkaller1: entered allmulticast mode
[  839.422658][T32448] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  839.461800][T32450] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  839.790411][T32464] netlink: 'syz.1.6944': attribute type 1 has an invalid length.
[  839.824894][T32464] __nla_validate_parse: 3 callbacks suppressed
[  839.824914][T32464] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6944'.
[  839.899587][T32465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6944'.
[  840.059534][T32469] netlink: 'syz.2.6946': attribute type 21 has an invalid length.
[  840.268592][T32469] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  840.304994][T32469] bond3 (unregistering): Released all slaves
[  840.369651][T32479] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  840.607114][T32486] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  840.637981][T32488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6952'.
[  840.668863][T32488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6952'.
[  840.683718][T32488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6952'.
[  840.730429][T32495] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6955'.
[  840.864700][T32486] bond6: option resend_igmp: invalid value (32767)
[  840.933785][T32486] bond6: option resend_igmp: allowed values 0 - 255
[  840.959973][T32486] bond6 (unregistering): Released all slaves
[  841.013819][T32502] vxcan1: tx drop: invalid sa for name 0x0000000000000001
[  841.086887][T32488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6952'.
[  841.112713][T32488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6952'.
[  841.153434][T32488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6952'.
[  841.214818][T32488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6952'.
[  841.625468][T32529] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  841.672266][T32529] tipc: Invalid UDP bearer configuration
[  841.672333][T32529] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  841.990479][T32536] netlink: 'syz.3.6968': attribute type 10 has an invalid length.
[  842.028356][T32536] syz_tun: entered promiscuous mode
[  842.098610][T32536] 
: (slave syz_tun): Enslaving as an active interface with an up link
[  842.121673][T32546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  842.727647][T32567] xt_connbytes: Forcing CT accounting to be enabled
[  842.787338][T32572] xt_CT: You must specify a L4 protocol and not use inversions on it
[  843.199263][T32585] veth0: entered promiscuous mode
[  843.233375][T32581] can: request_module (can-proto-0) failed.
[  843.529410][T32583] veth0: left promiscuous mode
[  843.683129][T32561] Cannot find del_set index 4 as target
[  843.742855][T32603] netlink: 'syz.3.6984': attribute type 1 has an invalid length.
[  843.782782][T32603] netlink: 'syz.3.6984': attribute type 11 has an invalid length.
[  843.812337][T32608] IPv6: Can't replace route, no match found
[  843.838179][T32607] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  843.863544][T32608] bond0: option ad_select: unable to set because the bond device is up
[  844.226525][T32624] nbd: couldn't find a device at index 0
[  844.273880][T32624] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  845.022725][T32656] __nla_validate_parse: 15 callbacks suppressed
[  845.022749][T32656] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7000'.
[  845.102693][T32658] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7000'.
[  845.151560][T32656] netlink: 'syz.4.7000': attribute type 32 has an invalid length.
[  845.193293][T32656] netlink: 500 bytes leftover after parsing attributes in process `syz.4.7000'.
[  845.233953][T32664] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[  845.667884][T32673] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7004'.
[  845.715102][T32682] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  845.829743][T32705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7007'.
[  845.968169][T32690] 8021q: adding VLAN 0 to HW filter on device bond6
[  846.139274][T32694] bridge0: port 1(bridge_slave_0) entered disabled state
[  846.183735][T32694] bridge0: port 2(bridge_slave_1) entered disabled state
[  846.727372][T32731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7013'.
[  846.784532][T32731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7013'.
[  847.038134][T32741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7018'.
[  847.080609][T32747] netlink: 'syz.2.7020': attribute type 19 has an invalid length.
[  847.301810][T32757] netlink: 'syz.1.7022': attribute type 83 has an invalid length.
[  847.666122][  T306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7027'.
[  847.691990][  T306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7027'.
[  847.754007][  T310] xt_NFQUEUE: number of total queues is 0
[  847.814948][  T310] xt_NFQUEUE: number of total queues is 0
[  848.053462][  T324] netlink: 'syz.3.7030': attribute type 1 has an invalid length.
[  848.136876][  T324] bond0: entered promiscuous mode
[  848.144671][  T324] 8021q: adding VLAN 0 to HW filter on device bond0
[  848.160651][  T332] netlink: 'syz.4.7031': attribute type 2 has an invalid length.
[  848.168247][  T330] openvswitch: netlink: IP tunnel dst address not specified
[  849.924388][  T388] syzkaller1: entered promiscuous mode
[  849.953187][  T388] syzkaller1: entered allmulticast mode
[  849.997024][  T388] ip6t_srh: unknown srh invflags 4000
[  850.055087][  T395] __nla_validate_parse: 5 callbacks suppressed
[  850.055111][  T395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7053'.
[  850.283026][  T395] 8021q: adding VLAN 0 to HW filter on device bond3
[  850.333807][  T395] bond0: (slave bond3): Enslaving as an active interface with an up link
[  850.833101][  T414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7058'.
[  851.008477][  T421] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7059'.
[  851.037631][  T414] bond4: (slave bond_slave_1): Device is not our slave
[  851.057812][  T414] bond4: option active_slave: invalid value (bond_slave_1)
[  851.090648][  T429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7059'.
[  851.118171][  T414] bond4 (unregistering): Released all slaves
[  851.180538][  T432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7061'.
[  851.843557][  T467] veth1_to_bond: entered allmulticast mode
[  851.877391][ T5612] Bluetooth: hci5: command 0x0406 tx timeout
[  851.899638][  T467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7071'.
[  852.040335][  T466] veth1_to_bond: left allmulticast mode
[  852.255621][  T470] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7072'.
[  852.287139][  T470] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7072'.
[  852.690092][  T489] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  852.745261][  T497] x_tables: unsorted underflow at hook 3
[  852.929498][  T513] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7082'.
[  853.410646][  T535] Cannot find set identified by id 0 to match
[  853.431304][  T534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7087'.
[  853.869905][  T553] xt_hashlimit: size too large, truncated to 1048576
[  853.907630][  T557] netlink: 'syz.0.7091': attribute type 2 has an invalid length.
[  854.407873][T32684] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  854.446626][T32684] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  854.482586][T32684] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  854.546654][T32684] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  854.960715][  T601] netlink: 'syz.2.7104': attribute type 1 has an invalid length.
[  855.090289][  T613] __nla_validate_parse: 5 callbacks suppressed
[  855.090311][  T613] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7107'.
[  855.291877][  T615] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  855.679619][  T637] netlink: 'syz.4.7113': attribute type 1 has an invalid length.
[  855.725467][  T637] netlink: 'syz.4.7113': attribute type 3 has an invalid length.
[  855.756332][  T637] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7113'.
[  855.787911][  T642] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7118'.
[  855.884923][  T647] openvswitch: netlink: IP tunnel attribute has 5405 unknown bytes.
[  855.910388][  T649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7120'.
[  855.952681][  T652] netlink: 'syz.2.7121': attribute type 7 has an invalid length.
[  855.970479][  T655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7122'.
[  855.984788][  T652] netlink: 'syz.2.7121': attribute type 1 has an invalid length.
[  856.191145][  T658] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  856.229735][  T658] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  856.263922][  T658] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  856.350020][  T658] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  856.733110][T32693] smbdirect: ib_dev[syz2] removed
[  857.112025][  T691] netlink: 'syz.1.7133': attribute type 8 has an invalid length.
[  857.281301][  T691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  857.468616][  T711] netlink: 'syz.3.7137': attribute type 2 has an invalid length.
[  857.992078][  T735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7144'.
[  858.018891][  T735] netlink: 'syz.1.7144': attribute type 2 has an invalid length.
[  858.304011][  T746] team0: Device ipvlan0 failed to register rx_handler
[  858.528568][  T754] Cannot find map_set index 2 as target
[  858.644853][  T756] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7151'.
[  858.974019][  T772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7155'.
[  859.056268][  T772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7155'.
[  859.280462][  T787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7159'.
[  859.342179][  T787] unsupported nla_type 216
[  859.606406][  T801] team0: No ports can be present during mode change
[  859.871016][  T809] netlink: 'syz.0.7166': attribute type 32 has an invalid length.
[  860.058492][  T809] bond3: option coupled_control: invalid value (192)
[  860.094522][  T809] bond3 (unregistering): Released all slaves
[  860.433501][  T828] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  860.466610][  T835] __nla_validate_parse: 3 callbacks suppressed
[  860.466627][  T835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7175'.
[  860.508775][  T836] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7175'.
[  860.519049][  T835] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7175'.
[  860.533968][  T831] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7171'.
[  860.548816][  T831] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7171'.
[  860.697780][  T845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7177'.
[  860.740394][  T845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7177'.
[  860.767900][  T845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7177'.
[  861.173739][  T859] xt_cgroup: path and classid specified
[  861.207122][  T859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7182'.
[  861.271279][  T864] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  861.291886][  T864] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  861.310448][  T864] gretap2: entered promiscuous mode
[  861.348554][  T864] gretap2: entered allmulticast mode
[  861.360524][  T867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7184'.
[  861.936628][  T880] netlink: 'syz.4.7189': attribute type 1 has an invalid length.
[  862.007841][  T871] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6)
[  862.071267][  T871] bond1 (unregistering): Released all slaves
[  862.528010][ T5613] block nbd4: Receive control failed (result -32)
[  863.775679][  T935] openvswitch: netlink: Multiple metadata blocks provided
[  864.002859][T29274] IPVS: starting estimator thread 0...
[  864.147511][  T944] IPVS: using max 27 ests per chain, 64800 per kthread
[  865.229405][T30052] block nbd6: Receive control failed (result -32)
[  865.231331][ T5612] block nbd5: Receive control failed (result -32)
[  865.245766][ T5613] block nbd5: Receive control failed (result -32)
[  865.257346][ T4927] block nbd6: Receive control failed (result -32)
[  865.635795][  T988] netlink: NAT attribute type 0 has unexpected length (1 != 0)
[  865.703638][  T988] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  865.738443][  T990] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  865.844512][  T988] __nla_validate_parse: 6 callbacks suppressed
[  865.844533][  T988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7214'.
[  865.923217][  T998] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7213'.
[  866.025308][  T988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7214'.
[  866.424004][ T1011] veth3: entered promiscuous mode
[  866.455381][ T1011] veth3: entered allmulticast mode
[  867.527241][ T1029] openvswitch: netlink: Missing key (keys=c0, expected=500)
[  867.750018][ T1040] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7223'.
[  867.859746][ T1042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7224'.
[  867.882406][ T1042] netlink: 'syz.4.7224': attribute type 30 has an invalid length.
[  868.095290][ T1049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7223'.
[  868.475442][ T1063] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7227'.
[  869.244082][ T1090] xt_l2tp: invalid flags combination: 8
[  869.288081][ T1091] veth1_to_bond: entered allmulticast mode
[  869.541867][ T1091] veth1_to_bond: left allmulticast mode
[  870.182149][ T1111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7237'.
[  870.306592][ T1114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7237'.
[  871.929168][ T1149] netlink: 232 bytes leftover after parsing attributes in process `syz.0.7247'.
[  871.952542][ T1153] netlink: 'syz.3.7248': attribute type 1 has an invalid length.
[  871.994463][ T1158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7251'.
[  871.998415][ T1149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7247'.
[  872.055271][ T1161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7247'.
[  872.082986][ T1163] sctp: [Deprecated]: syz.3.7248 (pid 1163) Use of int in maxseg socket option.
[  872.082986][ T1163] Use struct sctp_assoc_value instead
[  872.107406][ T1164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7251'.
[  872.135784][ T1166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7248'.
[  872.281121][ T1168] erspan0: entered promiscuous mode
[  872.309913][ T1168] erspan0: left allmulticast mode
[  872.334381][ T1168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7252'.
[  873.521133][ T1190] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7258'.
[  873.574215][ T1190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7258'.
[  873.852264][ T1201] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7261'.
[  874.461509][ T1225] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  875.518609][ T1263] netlink: 'syz.4.7277': attribute type 2 has an invalid length.
[  875.696449][ T1279] ip_tables: iptables: counters copy to user failed while replacing table
[  876.402349][ T1288] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  877.013818][ T1302] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  877.400276][ T1311] __nla_validate_parse: 3 callbacks suppressed
[  877.400306][ T1311] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7288'.
[  877.476859][ T5612] Bluetooth: hci3: command 0x0406 tx timeout
[  877.523209][ T1314] --map-set only usable from mangle table
[  877.690785][ T1254] infiniband syz2: set active
[  877.699601][ T1317] syzkaller0: entered promiscuous mode
[  877.705533][ T1317] syzkaller0: entered allmulticast mode
[  877.736973][ T1254] infiniband syz2: added bridge_slave_0
[  877.761780][ T1254] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  877.817744][ T1254] infiniband syz2: Couldn't open port 1
[  877.856272][ T1254] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  877.919154][ T1254] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  878.028872][ T1323] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7293'.
[  878.102628][ T1254] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  878.425305][ T1254] RDS/IB: syz2: added
[  878.450350][ T1254] smc: adding ib device syz2 with port count 1
[  878.471348][ T1254] smc:    ib device syz2 port 1 has no pnetid
[  879.875402][ T1355] openvswitch: netlink: IP tunnel dst address not specified
[  879.921915][ T1355] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  880.123886][ T1347] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  880.726651][ T1372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7308'.
[  880.771367][ T1371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7307'.
[  881.231808][ T1387] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7311'.
[  881.382629][ T1394] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  881.683534][ T1392] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  882.028347][ T1406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7315'.
[  882.662573][ T1426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7319'.
[  883.134365][ T1436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7322'.
[  883.719086][ T1447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7324'.
[  883.946351][ T1447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7324'.
[  884.044381][ T1447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7324'.
[  885.310609][ T1473] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  885.817796][ T5273] veth0_vlan: left promiscuous mode
[  886.043098][T29273] veth0_vlan: entered promiscuous mode
[  886.463615][ T1504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7334'.
[  887.034272][ T1509] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7336'.
[  887.304708][ T1514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7336'.
[  887.333333][ T1514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7336'.
[  887.407821][ T1514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7336'.
[  888.041092][ T1531] netlink: 'syz.3.7340': attribute type 3 has an invalid length.
[  888.492729][ T1534] __nla_validate_parse: 2 callbacks suppressed
[  888.492751][ T1534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7341'.
[  888.550314][ T1534] openvswitch: netlink: Message has 4 unknown bytes.
[  889.009211][ T1549] netlink: 'syz.0.7344': attribute type 2 has an invalid length.
[  889.542563][ T1559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7348'.
[  890.213161][ T1549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  890.315661][ T1549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  890.690714][ T1556] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  890.786605][T32686] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  890.894201][T32686] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  890.976589][T32691] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  891.031082][T32691] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  891.107751][T32691] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  891.153711][T32691] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  891.218506][T32691] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  891.268732][T32691] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  891.312078][ T1590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7354'.
[  891.411953][ T1590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7354'.
[  891.422871][T32686] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  891.451292][T32686] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  891.461437][T32686] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  891.514422][T32686] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  891.836617][ T4927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  891.873083][ T4927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  892.014742][ T1608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7359'.
[  892.027222][ T4927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  892.040148][ T4927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  892.055209][ T4927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  892.389296][ T1612] block nbd0: Unsupported socket: should be TCP or UNIX.
[  892.590245][ T1612] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7360'.
[  892.847672][ T4927] Bluetooth: hci1: command 0x0406 tx timeout
[  893.180553][ T1636] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  894.118117][ T5613] Bluetooth: hci2: command tx timeout
[  894.368025][T15351] IPVS: starting estimator thread 0...
[  894.384372][ T1660] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  894.547635][ T1661] IPVS: using max 27 ests per chain, 64800 per kthread
[  894.714828][ T1652] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7368'.
[  894.852867][ T1665] netlink: 'syz.2.7371': attribute type 3 has an invalid length.
[  894.911576][ T1665] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7371'.
[  895.265098][ T1680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7374'.
[  895.733691][ T1691] tipc: Started in network mode
[  895.769038][ T1691] tipc: Node identity ac14140f, cluster identity 4711
[  895.804532][ T1691] tipc: New replicast peer: 255.255.255.255
[  895.867779][ T1691] tipc: Enabled bearer <udp:syz2>, priority 10
[  896.165319][ T1704] netlink: 'syz.0.7379': attribute type 27 has an invalid length.
[  896.211116][ T5613] Bluetooth: hci2: command tx timeout
[  896.272966][ T1704] netlink: 'syz.0.7379': attribute type 5 has an invalid length.
[  896.372681][ T1705] nbd: socks must be embedded in a SOCK_ITEM attr
[  896.413979][ T1704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7379'.
[  897.116490][T29273] tipc: Node number set to 2886997007
[  897.584141][ T1741] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7387'.
[  897.617648][ T1741] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7387'.
[  897.656171][ T1741] netlink: 31 bytes leftover after parsing attributes in process `syz.2.7387'.
[  897.692974][ T1750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7387'.
[  897.758168][ T1747] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  898.276380][ T5613] Bluetooth: hci2: command tx timeout
[  898.335378][ T1760] netlink: 'syz.3.7389': attribute type 32 has an invalid length.
[  898.366968][ T1760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7389'.
[  898.414709][ T1761] netlink: 'syz.2.7390': attribute type 5 has an invalid length.
[  898.520183][ T1762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7390'.
[  898.587503][ T1760] bond1: option coupled_control: invalid value (100)
[  898.623158][ T1760] bond1 (unregistering): Released all slaves
[  898.850909][ T1745] syzkaller1: entered promiscuous mode
[  898.914822][ T1745] syzkaller1: entered allmulticast mode
[  899.555815][ T1784] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  900.357181][ T5613] Bluetooth: hci2: command tx timeout
[  900.484289][ T1808] __nla_validate_parse: 2 callbacks suppressed
[  900.484309][ T1808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7397'.
[  901.401140][ T1831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7402'.
[  902.030259][ T1837] netlink: ct family unspecified
[  902.051054][ T1839] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.7404'.
[  902.138521][ T1600] bridge0: port 1(bridge_slave_0) entered blocking state
[  902.181183][ T1600] bridge0: port 1(bridge_slave_0) entered disabled state
[  902.232621][ T1600] bridge_slave_0: entered allmulticast mode
[  902.293901][ T1600] bridge_slave_0: entered promiscuous mode
[  902.344626][ T1600] bridge0: port 2(bridge_slave_1) entered blocking state
[  902.426187][ T1600] bridge0: port 2(bridge_slave_1) entered disabled state
[  902.495288][ T1600] bridge_slave_1: entered allmulticast mode
[  902.587777][ T1600] bridge_slave_1: entered promiscuous mode
[  902.988541][ T1600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  903.029545][ T1853] netlink: 'syz.2.7400': attribute type 2 has an invalid length.
[  903.151308][ T1600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  903.197161][ T1821] netlink: 'syz.2.7400': attribute type 2 has an invalid length.
[  903.309007][ T1821] netlink: 67 bytes leftover after parsing attributes in process `syz.2.7400'.
[  903.637434][ T1600] team0: Port device team_slave_0 added
[  903.695611][ T1600] team0: Port device team_slave_1 added
[  903.787581][ T1860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7408'.
[  904.111779][ T1600] batman_adv: batadv0: Adding interface: batadv_slave_0
[  904.159251][ T1600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  904.311066][ T1600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  904.733492][ T1870] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  904.799492][ T1600] batman_adv: batadv0: Adding interface: batadv_slave_1
[  904.820732][ T1600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  904.922502][ T1600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  905.497294][ T1886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7413'.
[  905.850913][ T1891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7416'.
[  906.039759][ T7680] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  906.110795][ T7680] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.423531][ T1904] netlink: 'syz.3.7416': attribute type 1 has an invalid length.
[  906.482987][ T1886] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  906.512230][ T1904] netlink: 756 bytes leftover after parsing attributes in process `syz.3.7416'.
[  906.862448][ T1600] hsr_slave_0: entered promiscuous mode
[  906.929384][ T1600] hsr_slave_1: entered promiscuous mode
[  907.022997][ T1600] debugfs: 'hsr0' already exists in 'hsr'
[  907.072651][ T1600] Cannot create hsr debugfs directory
[  907.511009][ T7680] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  907.552649][ T7680] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  907.595661][ T1915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7421'.
[  907.857047][ T1927] netlink: 260 bytes leftover after parsing attributes in process `syz.3.7423'.
[  907.973708][ T1923] bridge2: entered promiscuous mode
[  907.995764][ T1923] bridge2: entered allmulticast mode
[  908.450531][ T7680] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  908.541936][ T7680] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  909.175844][ T1950] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7429'.
[  909.278427][ T1955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7431'.
[  909.314454][ T7680] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  909.366119][ T7680] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  909.529645][ T1960] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  909.612184][ T1961] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7434'.
[  909.669766][ T1962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7432'.
[  909.761713][ T1961] nbd: illegal input index 65508
[  910.317743][ T1971] netlink: 324 bytes leftover after parsing attributes in process `syz.0.7436'.
[  911.598291][ T1994] netlink: 'syz.2.7443': attribute type 1 has an invalid length.
[  911.799932][ T2001] __nla_validate_parse: 1 callbacks suppressed
[  911.799970][ T2001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7445'.
[  911.936961][ T2001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7445'.
[  912.317410][ T2010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7447'.
[  912.349736][ T2010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7447'.
[  912.389755][ T1991] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.669573][ T7680] bridge_slave_1: left allmulticast mode
[  912.692729][ T7680] bridge_slave_1: left promiscuous mode
[  912.712283][ T7680] bridge0: port 2(bridge_slave_1) entered disabled state
[  912.729241][ T7680] bridge_slave_0: left allmulticast mode
[  912.746479][ T7680] bridge_slave_0: left promiscuous mode
[  912.766425][ T7680] bridge0: port 1(bridge_slave_0) entered disabled state
[  914.720614][ T7680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  914.762058][ T7680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  914.790311][ T7680] bond0 (unregistering): Released all slaves
[  914.805551][ T7680] bond1 (unregistering): Released all slaves
[  914.875382][ T7680] bond2 (unregistering): Released all slaves
[  914.900495][ T7680] bond3 (unregistering): Released all slaves
[  914.943429][ T7680] bond4 (unregistering): Released all slaves
[  915.021596][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1
[  915.352088][ T1991] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  915.652646][ T1600] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  915.727562][ T1600] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  915.761704][ T1600] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  915.827234][ T1600] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  916.135270][ T1600] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  916.241658][ T1600] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  916.500358][ T1991] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  916.798641][ T1600] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  916.852347][ T1600] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  917.112271][ T1991] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.240389][ T2088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7460'.
[  917.379578][ T2089] netlink: 9328 bytes leftover after parsing attributes in process `syz.0.7459'.
[  919.654469][ T2110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7464'.
[  919.867263][T32675] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  920.076403][T32679] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  920.132972][ T2113] xt_hashlimit: size too large, truncated to 1048576
[  920.201945][ T2118] netlink: 'syz.1.7467': attribute type 15 has an invalid length.
[  920.240867][ T2114] netlink: 'syz.0.7466': attribute type 12 has an invalid length.
[  920.797338][T32675] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  922.008634][ T2149] xt_hashlimit: invalid interval
[  922.058856][T32699] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  922.231162][ T2132] netlink: 404 bytes leftover after parsing attributes in process `syz.1.7468'.
[  922.306081][ T2132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7468'.
[  922.436976][ T2132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7468'.
[  922.606012][ T2132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7468'.
[  922.789372][ T1600] 8021q: adding VLAN 0 to HW filter on device bond0
[  923.166277][ T2148] bond1: option fail_over_mac: invalid value (16)
[  923.299034][ T2148] bond1 (unregistering): Released all slaves
[  923.559505][ T2170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  923.566859][ T2170] IPv6: NLM_F_CREATE should be set when creating new route
[  923.574160][ T2170] IPv6: NLM_F_CREATE should be set when creating new route
[  923.634531][ T7680] hsr_slave_0: left promiscuous mode
[  923.682457][ T7680] hsr_slave_1: left promiscuous mode
[  923.727284][ T7680] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  923.793313][ T7680] batman_adv: batadv0: Removing interface: batadv_slave_0
[  924.028722][ T7680] veth0_macvtap: left promiscuous mode
[  924.103126][ T7680] veth1_macvtap: left promiscuous mode
[  924.159116][ T7680] veth1_vlan: left promiscuous mode
[  924.224479][ T7680] veth0_vlan: left promiscuous mode
[  925.164382][ T2182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  925.200503][ T7680] team0 (unregistering): Port device team_slave_1 removed
[  925.242460][ T7680] team0 (unregistering): Port device team_slave_0 removed
[  925.543830][   T35] smc: removing ib device syz2
[  925.933776][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2
[  926.142137][ T2027] syz2: Port: 1 Link DOWN
[  926.457545][   T35] smbdirect: ib_dev[syz2] removed
[  926.768639][ T1600] 8021q: adding VLAN 0 to HW filter on device team0
[  926.975407][ T2199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7482'.
[  927.334391][ T2198] vcan0: entered promiscuous mode
[  927.372884][ T2198] vcan0: entered allmulticast mode
[  927.814447][T32679] bridge0: port 1(bridge_slave_0) entered blocking state
[  927.821875][T32679] bridge0: port 1(bridge_slave_0) entered forwarding state
[  928.363461][ T2208] block nbd0: Unsupported socket: should be TCP or UNIX.
[  928.465781][T32679] bridge0: port 2(bridge_slave_1) entered blocking state
[  928.473214][T32679] bridge0: port 2(bridge_slave_1) entered forwarding state
[  930.868704][ T2243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7491'.
[  931.068094][ T2247] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7492'.
[  931.109891][ T2249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  931.724075][ T2260] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7494'.
[  933.791525][ T2304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7502'.
[  934.591512][ T2311] netlink: 'syz.2.7504': attribute type 13 has an invalid length.
[  934.699299][ T2311] veth1_macvtap: left promiscuous mode
[  934.846733][ T2311] macsec0: entered allmulticast mode
[  934.901474][ T2316] netlink: 'syz.2.7504': attribute type 12 has an invalid length.
[  935.141547][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3
[  935.332091][ T1600] 8021q: adding VLAN 0 to HW filter on device batadv0
[  935.999368][ T2318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7507'.
[  937.087238][ T2344] netlink: 170676 bytes leftover after parsing attributes in process `syz.1.7513'.
[  937.167430][ T2344] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16)
[  937.248956][ T2344] openvswitch: netlink: Message has 512 unknown bytes.
[  938.571157][ T2373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7517'.
[  939.007907][ T1600] veth0_vlan: entered promiscuous mode
[  939.255406][ T1600] veth1_vlan: entered promiscuous mode
[  939.413574][ T2380] netlink: 'syz.2.7520': attribute type 2 has an invalid length.
[  939.674581][ T2376] IPVS: Scheduler module ip_vs_sip not found
[  939.724509][ T2392] Cannot find del_set index 3 as target
[  940.537020][ T2400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7524'.
[  945.038067][    C1] sched: DL replenish lagged too much
[  947.101786][ T1600] veth0_macvtap: entered promiscuous mode
[  953.188329][ T1600] veth1_macvtap: entered promiscuous mode
[ 1001.576802][ T4927] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1001.916412][ T4927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1001.957871][ T4927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1002.147337][ T4927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1002.216279][ T4927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1004.405955][ T5613] Bluetooth: hci5: Opcode 0x0c16 failed: -110
[ 1006.121494][ T4927] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1007.116619][ T2443] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[ 1014.999134][ T4927] Bluetooth: hci7: Opcode 0x0c03 failed: -110
[ 1015.249967][ T4927] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1016.658652][ T4927] Bluetooth: hci4: command 0x0405 tx timeout
[ 1017.087619][ T2449] Bluetooth: hci7: Opcode 0x0c03 failed: -110
[ 1018.357918][T30052] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1018.372625][T30052] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1018.691303][T30052] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1019.256358][T30052] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1019.674020][T30052] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1019.807680][ T4927] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[ 1019.977887][T30052] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1020.586471][ T4927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1023.702315][T30052] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1023.726858][T30052] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1023.739323][T30052] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1023.751357][T30052] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1026.698107][T30052] Bluetooth: hci9: Opcode 0x0c03 failed: -110
[ 1026.756688][T30052] Bluetooth: hci8: command tx timeout
[ 1028.840413][T30052] Bluetooth: hci8: command tx timeout
[ 1030.076106][ T5613] Bluetooth: hci6: command tx timeout
[ 1031.082466][ T5613] Bluetooth: hci8: command tx timeout
[ 1031.607319][ T5613] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1031.703851][ T2463] Bluetooth: hci9: Opcode 0x0c03 failed: -110
[ 1032.117083][ T5613] Bluetooth: hci6: command tx timeout
[ 1033.166401][ T5613] Bluetooth: hci8: command tx timeout
[ 1034.225698][ T5613] Bluetooth: hci6: command tx timeout
[ 1036.315936][T30052] Bluetooth: hci6: command tx timeout
[ 1074.897547][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1075.096424][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1075.296348][  T973] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1075.496837][  T973] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1075.527924][  T973] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1079.480762][  T973] Bluetooth: hci2: command tx timeout
[ 1081.617860][  T973] Bluetooth: hci2: command tx timeout
[ 1083.640605][  T973] Bluetooth: hci2: command tx timeout
[ 1084.915967][ T7680] unregister_netdevice: waiting for bridge_slave_0 to become free. Usage count = 2
[ 1084.926219][ T7680] ref_tracker: netdev@ffff8880261fe700 has 1/1 users at
[ 1084.926219][ T7680]      ib_device_set_netdev+0x31f/0x6d0
[ 1084.926219][ T7680]      rxe_register_device+0x1bb/0x350
[ 1084.926219][ T7680]      rxe_net_add+0x81/0x110
[ 1084.926219][ T7680]      rxe_newlink+0xf4/0x1c0
[ 1084.926219][ T7680]      nldev_newlink+0x5bc/0x650
[ 1084.926219][ T7680]      rdma_nl_rcv+0x6ef/0xa40
[ 1084.926219][ T7680]      netlink_unicast+0x7bb/0x940
[ 1084.926219][ T7680]      netlink_sendmsg+0x813/0xb40
[ 1084.926219][ T7680]      sock_sendmsg_nosec+0x13a/0x180
[ 1084.926219][ T7680]      ____sys_sendmsg+0x54e/0x850
[ 1084.926219][ T7680]      ___sys_sendmsg+0x2a5/0x360
[ 1084.926219][ T7680]      __x64_sys_sendmsg+0x1b1/0x290
[ 1084.926219][ T7680]      do_syscall_64+0x174/0x580
[ 1084.926219][ T7680]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1084.926219][ T7680] 
[ 1086.815939][  T973] Bluetooth: hci2: command tx timeout