last executing test programs:

5m56.623774655s ago: executing program 32 (id=842):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x30, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2}}}}}}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x5f)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r3=>0x0})
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="2b0326bd7000fbdbdf25120000008800048024000780080001000000000008000300010000000800030098402b1208000100100000000900"], 0xec}, 0x1, 0x0, 0x0, 0x24004050}, 0x50)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}})

2m19.091517215s ago: executing program 0 (id=3952):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async)
r1 = socket$tipc(0x1e, 0x5, 0x0) (async)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000300)=""/103, 0x120000, 0x800, 0x1, 0x2}, 0x20) (async)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'pim6reg1\x00'}) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r8)
sendmsg$NFC_CMD_DISABLE_SE(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r9, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010) (async)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4080000000000006110800000000000a60000000000000095000000000000002708bf5d6df57e4036e97f802a67fdc2ee21b92ca9f507707dd754479a8dcf28b7ce595ab47e7a5396f780ee222b42395b5664f0c435febc86e01cd2cf1190b290320885b36f24493454294552dfaa3a17a7462612e5f8980fd439b09ee96e4c0ca8581e36cc8acfdfdd08b7856e8cf498d2d7ff6abd"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xc, 0xffff}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x5}, 0x10)
r10 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

2m18.82365677s ago: executing program 0 (id=3957):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xb, 0xfc, 0x0, 0x1, 0x0, 0x20, 0x0, 0x0, 0x2], 0x0, [0x4008, 0x4, 0x2, 0x2, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$ieee802154(0x0, r4) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0}) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040)

2m18.66323765s ago: executing program 0 (id=3962):
syz_emit_ethernet(0x2e, &(0x7f0000000a00)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x1, 0x6, 0x20, 0x66, 0x0, 0x7, 0x1, 0x0, @remote, @private=0xa010100, {[@generic={0x82, 0x2}]}}, @echo_reply={0x0, 0x0, 0x0, 0x66, 0x4}}}}}, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x494, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x388, 0x1, [@m_ctinfo={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x90, 0x4, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="7d04a5219f97"}]}, {0x5, 0x6, "cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0xffffffffffffffff, 0x0, 0xefb}, @loopback, @empty, 0xffffff00, 0x800}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x8, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x357a, 0x9, 0x7, 0x101, 0x5}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5f2, 0x40, 0x5, 0x1, 0x1}, @broadcast, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x20000000, 0x7, 0x59c3}, @loopback, @loopback, 0xff}}]}, {0x85, 0x6, "eef24a41a52f4314740d880a9749ccbff0e34c74cfcac1e63977a597552daff459d49bffeac63ea994857207934fd2d00f52f25f0f3d8c80b3a218a170d8b1961a361663d049269537cb537e3789e52bb3db1eec99b6cdd8dd022491e57495f8bd3687340df10a1e43f1a2790d3910c094f2c7203385622c8498933c3e883b83b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x7c, 0xc, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x5, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc00}]}, {0x8, 0x6, "2ff4fb63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x12}}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4004801}, 0x48004)

2m18.391545129s ago: executing program 0 (id=3968):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080), 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB    \x00'}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x0, 0x0)
preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r4, <r7=>0xffffffffffffffff}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000200)=""/157, 0x9d}], 0x4}, 0x2000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}]}}]}, 0x3c}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r13, 0x88, 0x1, &(0x7f0000000080), 0x4)
setsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000000240), 0x4)
sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x58, r11, 0x100, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3f, 0xf}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x48040)

2m18.345924307s ago: executing program 0 (id=3970):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0x10}, 0x94) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff}) (async)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x9, 0xffff}}}}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c}]}}]}, 0x70}}, 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26}, 0x10)
r5 = socket(0x10, 0x3, 0x0) (async)
r6 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32)
r7 = socket(0x2, 0x80805, 0x0) (rerun: 32)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r8=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000040)={r8, 0x2, 0x10}, &(0x7f0000000240)=0xc) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000380)={r8, 0xac, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x1, @remote, 0x81}, @in6={0xa, 0x4e23, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x208}, @in6={0xa, 0x4e23, 0x7fff, @private0, 0x3}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x6, @empty, 0x1000}, @in6={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, &(0x7f00000003c0)=0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async)
r9 = socket$kcm(0x2, 0x922000000001, 0x106) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 64)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64)
r11 = openat$cgroup_procs(r10, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r11, &(0x7f0000000c40), 0x12)
sendmsg$inet(r9, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x200488d5)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa0}}, 0x14}}, 0x0)

2m18.159121506s ago: executing program 0 (id=3975):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x18, 0x1404, 0x1, 0x70bd29, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000088}, 0x24000018)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e011006a001c000000000000000000000008000000", @ANYRES64=r0], 0x38}, 0x0)

2m3.113014382s ago: executing program 33 (id=3975):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x18, 0x1404, 0x1, 0x70bd29, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000088}, 0x24000018)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e011006a001c000000000000000000000008000000", @ANYRES64=r0], 0x38}, 0x0)

2m2.628913977s ago: executing program 5 (id=4217):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) (async, rerun: 32)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106) (rerun: 32)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r2, 0x891c, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
write$cgroup_int(r4, &(0x7f0000001480)=0x80000000003, 0x12)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x88}}, 0x0) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-160-generic)\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$inet(r6, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000040)="b569", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2005c001) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'pim6reg1\x00', &(0x7f0000000c40)=@ethtool_per_queue_op={0x4b, 0xe, [0xf7b, 0xfffffffa, 0x10, 0x0, 0x5, 0xffffffff, 0x5, 0xe, 0x3, 0x2fd92c3c, 0xfffffffe, 0x7ff, 0xf53, 0x6, 0xffffffff, 0x7f, 0x7ff, 0x6a51, 0x7, 0x10, 0x4, 0x3, 0xfffffff9, 0x2, 0xc0000, 0xffffffff, 0x1, 0x6dce, 0x0, 0xffff3ed2, 0x0, 0x1, 0x8, 0x7, 0xb, 0xa, 0x2, 0x8, 0x2, 0xa, 0x3, 0xfffffff9, 0xf, 0xffffffff, 0x4, 0x9, 0xe5, 0x10000, 0x7, 0x3, 0x4, 0x8, 0x8, 0xfff, 0x7, 0x100, 0xe387, 0x6, 0x0, 0x9, 0xfffffffd, 0x9b, 0x40, 0x2, 0xfffffffa, 0x7d, 0x4, 0x5, 0x6, 0x2, 0x0, 0x0, 0x820, 0x2000, 0x3, 0x8, 0x3, 0xfffffffd, 0x5, 0x3, 0xfffffffb, 0x0, 0x9, 0x7fffffff, 0x7ff, 0x7, 0xc7, 0xfa, 0xb2, 0x0, 0x232, 0x5, 0x1, 0x0, 0xfdf1, 0x2, 0x289, 0xffff, 0x1, 0x1, 0x3, 0x3, 0x4, 0x4, 0x5, 0x5, 0xc, 0x98, 0x4, 0x6, 0x3b00, 0x3, 0x9, 0x6, 0x2, 0x40, 0x8, 0x80000001, 0xfe000000, 0x7, 0x1, 0x4, 0x8, 0x10, 0x7, 0x1, 0xfa2, 0x3], "6048520ef6c4cf48cd221ec9e335950d52a96d1e691fc0363229412823530d91ecec8765b874e41dd24a737ba2b2bcc728262ccbec83ba1105d6a710c4d9113587caf95f6ab8d109b0265a2d063e09b3b176814616b2c62d47bcb35949e6a538ef8ad2ad84137d3db43dc39c07c91c2dbe59b7f5abd517598256060068c30c5686a3846698edae4b9aebed41274da2b5bd04aebcb24835e1ee4479198c"}})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d0016430a07000000000000950aca9d9944273606bfb9d59ae97005cb617f9ff9753a0d1a7fc28c2e92469f2beb86e3057d9930cdeef102166bb1bb3575b6133640e216c95b7cb192e2472480bb58bce3662238060e494cb6e660d439857c9fd5d4adf3e5691b87b51c921d301c80a1263797336ed2a424852b2fb962bf9effe3c5462d329eacb73abd6256c04f892b66991cc7c46a04dd01697ef03be4595d6d79b738042193c9f6ac10fffa8f6469e40454b95992c358853056aa4e0b1888ef075a1628dc31893a0b24c7b812e191eed2aebfdbe94a8e4d508832e11effebe9320fe0b2", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async)
sendmsg$sock(r0, &(0x7f0000000180)={&(0x7f0000001280)=@phonet={0x23, 0x5, 0x1, 0x5}, 0x80, &(0x7f0000000100)=[{&(0x7f0000001300)="53bd7bd3542d90504e38d70a8a11666ffc71bfa4f8648af731ab5041d5fb518b6cc533d9a9acddc5e54a326b7b0695098afb6f042f0aa606b0b21707e19b54c6c3376e4e2b1e255b4bd6c1fa4c79c5a04750e2471ae5245c691b23bd26a8369345ef8e8abb6ec4f7bc6d5280d7cb89e627df62f5a925", 0x76}, {&(0x7f0000001380)="98d1705e6726c5c2e74e729385b10036dd70d203582cc50432430f05cd6ad2f2a57d9d2b646a9c39017b9e3830ec04d4c6ec1b909550d849772417c1905ed0ff96e0e1a1efbf66a7f8542fab8db40aa2e4c176", 0x53}, {&(0x7f0000001400)="bf1e133ca765a86e20d787999dd58c3a3487866bc9903b8460febcbbc823fabd36c0f122a0f2d8f3be11072c8e25e396fa4401ced364e16bbb764af318a3e322f735193be7c79b5f56ed26dac95948ad05216f255e89", 0x56}, {&(0x7f0000001880)="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", 0x1000}], 0x4, &(0x7f00000015c0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0xa8}, 0x20000001) (async)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f7ff1f400100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async, rerun: 64)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000014c0)=[{{0x0, 0x0, 0x1, 0x1}, {0x4, 0x1}}, {{0x2, 0x1, 0x1}, {0x3, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x4, 0x1}}, {{0x1, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x38) (rerun: 64)

2m2.384324792s ago: executing program 5 (id=4220):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f5000000"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r2=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040004}, 0x2004802)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x3374, 0x6, r7}, &(0x7f0000000300)=0x10) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x100, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0xec, 0x1, [@m_csum={0xe8, 0x3ffd, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0x9f, 0x6, "b257b5fa5efeb6e0229ef4681bae5de0b3718f6662e70d449d6449548e7d3774328e746ae276ff1c88bf357ca32392129a3649f77d5cd0226f96e86eab81d90ab4a9cbc1365e5d4e2b962ca5367e2019acadf3770fdddb502678194929a1aa80d39218cd34e53ee3adb255b166437c611262635e88c4bc8f7243c09f0ebe878c9fbaa353cd61d24ea18ae8e7b3e9bcdc28ce72d2da709c5f5cdfb3"}, {0xc}, {0xc}}}]}]}, 0x100}}, 0x0)

2m2.17930338s ago: executing program 5 (id=4223):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "2f11e7ef8e766bc851286d7b851917a8c4428e9e9e091293cae490c16826a3c85a205f678852b43a06c61d63ba42373a00bb7c1ad7f1758c6b2ce8b1f597542c5b20d1abf3d9cba06aa296695acaa0facffbd68f6cafc22503df4d5c27c256f0b4f6c49fa2d43becd9c27d04488658cebd38947517a7ab12195f2e5a26fccf5baa41dc0bb3b777019eabb057c0db7069c109a9f969da3d7fa87b35f7cad005636d9e278b22a111b90dda70832b9773e6c964339bb3c4185e0ceb9a1cf08e553c244fba9bf1f098ed541e3501b56b576e78f951702b8be38082aacc094274456d93eff9f781adecbc6401bb5575b1d0d0dbf948cc15c194fb002ddc28f42b06"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x3}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x2}, {0x0, 0x0, 0x0, 0x3}}, 0x0, 0x5dfe}, [@lastused={0xc, 0xf, 0xfffffffffffffffd}]}, 0x104}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x1000000, [{0x0, 0x2, 0x2}]}]}}, 0x0, 0x4a}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8fe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newaddr={0x18, 0x14, 0x1, 0x70bd25}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x4048010)

2m2.133058819s ago: executing program 5 (id=4225):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="17090000001a00000000010000000500070000000000080009000000000014002000ff06000000000000000000000000000108000a00000000000600020001000000140007f4fed18b9f73cfbb0c2fb3efd51f0000000000000000000000ffffffffffffbbd3adbbf74aa628a7934597a578647d817ae5f7460d8c5562502800554c479de0363758632d40b4275a47b5cc666a45a152b463d9558250a3"], 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0xac, r10, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2008}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0xac, r10, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2008}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x1)
sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x98, r10, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x44944)
close(r7) (async)
close(r7)
r11 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="100000000000000000000000070000001400000000000000100100000a"], 0x28}, 0x0) (async)
sendmsg$inet(r11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="100000000000000000000000070000001400000000000000100100000a"], 0x28}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$nl_route(0x10, 0x3, 0x0) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x2, 0x1000, 0x5, 0x5, 0xfffffe0000000000}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
r16 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r16, &(0x7f0000000080)="ba46b10734", 0x5, 0x40, &(0x7f00000001c0)={0x11, 0xf7, r15, 0x1, 0xd8, 0x6, @multicast}, 0x14) (async)
sendto$packet(r16, &(0x7f0000000080)="ba46b10734", 0x5, 0x40, &(0x7f00000001c0)={0x11, 0xf7, r15, 0x1, 0xd8, 0x6, @multicast}, 0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2}]}}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0xffff, 0x0, 0x0, 0x0]}}, {{0x19, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c}, {0x4}}, {{0x1c}, {0x4}}]}]}, 0x148}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2}]}}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0xffff, 0x0, 0x0, 0x0]}}, {{0x19, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c}, {0x4}}, {{0x1c}, {0x4}}]}]}, 0x148}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRES64=r5], 0x0)

2m1.878063292s ago: executing program 5 (id=4228):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4000}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x36}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x8]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x43}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x40)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x2c, r6, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}}, 0x4000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$unix(0x1, 0x5, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r8)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r11=>0x0})
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @mcast2}}}}}}, 0x0)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r12, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90)
sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x24, r10, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x64, r6, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5c}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x24000002)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@bridge_setlink={0x50, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r1, 0x940, 0x22265}, [@IFLA_LINKINFO={0x30, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x401}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x1}}]}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x8014)

2m1.710279514s ago: executing program 5 (id=4231):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x3, 0x1)
syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff8000181100fc000800000000000000000000000000ff02000000000000000000000000000100004e22001890780300"/78], 0x0)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x200000}, 0xc)
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe45}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x40000d0}, 0x40)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x40)
r6 = socket(0x1d, 0x2, 0x6)
r7 = epoll_create(0x9660)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100))
close(r6)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write(r8, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
pipe(&(0x7f0000000500)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r9, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0)
pread64(r5, &(0x7f0000001840)=""/4096, 0x1003, 0x1)
syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604fdcbb00000000000000000000000000fe8000000000000000000000000000aa8700000000000000000005"], 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r11, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4)
sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x1c, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@generic="750ec696b5"]}, 0x1c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x20, 0x0, 0x0, 0xa}, {0xf, 0x20000000, 0x20005, 0x8, 0x3, 0xfffffffffffffffa, 0x0, 0x5}, {0x2, 0xfffffffffffffffc, 0xfffffffffffffffb}, 0xc24, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x101}}, 0xe8)
connect$inet6(r10, &(0x7f0000000240)={0xa, 0x12, 0x4, @empty, 0x2}, 0x1c)

1m49.790554522s ago: executing program 2 (id=4405):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x842}, 0x10) (async, rerun: 32)
r2 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfff7fffd, 0x2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b04000000000000000002000045364e554b63c30e6599e390a1002800048024000180090001006d6574610000000014000280080002400000001e08000140000000000900010073797a30000000000900020073797a3200000014000000110001"], 0x7c}}, 0x0) (async)
r4 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x440d4)

1m49.639613981s ago: executing program 1 (id=4408):
syz_emit_ethernet(0x46, &(0x7f0000000f00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x15, 0xd}}}}}}, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x2, 0x20000000, 0x3)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90)
sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="02", 0x1}], 0x1}}], 0x1, 0x20048041)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={r3, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000140)=0x84)

1m49.572943441s ago: executing program 1 (id=4409):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x4, 0x0, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x21, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x9a, 0x5, 0x3, 0x5, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ldst={0x0, 0x2, 0x3, 0x4, 0x2, 0x40}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_128={{0x303}, "d669bcb85477f37c", "ee723be93c59a60647cdba6cf2d5de6d", "c27b60ef", "d6d601348f2ef4ec"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "78cb6e6d9d2574d4"}, 0x28)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r7=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r7, 0x5}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000004c0)={r7, @in={{0x2, 0x4e21, @remote}}, [0x9, 0x7ff, 0x29e1, 0x0, 0x7, 0x9, 0xfffffffffffffff7, 0xc8, 0x7, 0x3ff, 0x2, 0x7ff, 0x8, 0xffffffff00000001, 0x6]}, &(0x7f0000000300)=0x100)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4)

1m49.515507877s ago: executing program 3 (id=4411):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040005, 0x0, 0x0, 0x41100, 0x18}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r0=>0x0})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r1, 0x8b1a, &(0x7f0000000040))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r4=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={<r5=>0x0}, &(0x7f00000001c0)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)=<r6=>0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={<r7=>0x0}, &(0x7f00000002c0)=0xc)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r3, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x17}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x5b}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x74}}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008080)

1m49.491896007s ago: executing program 2 (id=4412):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x508, 0x98, 0x208, 0x208, 0x3a0, 0x208, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001100)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0xb}, 0x90) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0xb0}}, 0x0)

1m49.447205446s ago: executing program 3 (id=4413):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x24000481}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

1m49.383501113s ago: executing program 1 (id=4414):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) (async)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) (async)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@getqdisc={0x40, 0x26, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff1, 0xffff}, {0xd, 0x10}, {0xfff2, 0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20040044)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x4, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffffffffffc6e, &(0x7f00000000c0)={&(0x7f0000002740)=@delchain={0x125c, 0x65, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xa}, {0x6, 0xc}, {0xfffa, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1220, 0x2, [@TCA_MATCHALL_ACT={0x1214, 0x2, [@m_skbedit={0x1048, 0x17, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x3, 0x3, {0xfff2, 0x4}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0xdc, 0x8, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8b6a, 0x80000000, 0x5, 0x5, 0x2}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffff8, 0x5, 0x200, 0xa5}, 0x44}}]}, {0x75, 0x6, "d3299d80548a65375ef436eb2752d1b3c56bcefa396a3b12b9ce393442e47314d54dddba491f3fb825cdfc1264c75774f4e546afee60f4c41a9b2b339f12e6640035154a9e8e4d86ae11b180b87319ee7bd0f1e5033c4aa5bc69fdfc64b6ffd247dfe2e018b28e7d09c3bad17d5f5f4981"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0xec, 0x3, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x4, 0x8, 0x869, 0x7}, @multicast1, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x889, 0x0, 0x6, 0x3, 0x6a3}, @empty, @local}}]}, {0x72, 0x6, "b5b3c3d9476d18fa34aaf23ef1e0e576245ef623ddff2bd0da98d67ca0ffc78c555cfb9d907a8a0068aa7900eec0a32cbc00fc2e8c137f567308a200841215f26755ad12ddf8b2c300537241bcf201feda4f1e648aa4c3c1b523c83d32374e019e68eaa452796477f063c8f67028"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x125c}}, 0x4080) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m49.376620662s ago: executing program 3 (id=4416):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000020000e6850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000020000e6850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx}, 0x40) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx}, 0x40)
syz_emit_ethernet(0x11, &(0x7f0000001b00)=ANY=[], 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xf4d77a7054c865f3}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x74, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x37}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) (async)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xf4d77a7054c865f3}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x74, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x37}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', <r7=>0x0, 0x4, 0x8, 0x2, 0x9, 0x51, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x700, 0x94b, 0x800}})
sendmsg$FOU_CMD_GET(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4c801)

1m49.36741175s ago: executing program 2 (id=4417):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000028002800000004000000010000000200000b02f849000000000600000f020000001ba400610000000000000000000000000f000000000000"], &(0x7f0000000300)=""/2, 0x44, 0x2, 0x1}, 0x20)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000000c0), 0x3f, 0x0)
ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000100))
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x108}}, 0x4000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000028002800000004000000010000000200000b02f849000000000600000f020000001ba400610000000000000000000000000f000000000000"], &(0x7f0000000300)=""/2, 0x44, 0x2, 0x1}, 0x20) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
accept4(r0, 0x0, 0x0, 0x800) (async)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
sendmmsg$unix(r3, &(0x7f00000000c0), 0x3f, 0x0) (async)
ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000100)) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x108}}, 0x4000) (async)

1m49.243665226s ago: executing program 2 (id=4419):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @rand_addr=0x64010102}}}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xec, 0x18, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x94, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x160}}, 0x0)

1m49.230309521s ago: executing program 3 (id=4421):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0x9, 0x8, 0x6, 0x0, 0x70bd2d, 0x5, [@sadb_lifetime={0x4, 0x3, 0x80, 0x7, 0x8, 0x6ebb}]}, 0x30}}, 0x4040800)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x4, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r4)
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, r3}, 0x94)

1m49.203178426s ago: executing program 1 (id=4422):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0xc7, 0xffe1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c)

1m49.127486436s ago: executing program 2 (id=4423):
syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x24, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}, @mptcp=@ack={0x1e, 0xd, 0x6, 0x4, "151885a52ceba75166"}]}}}}}}}}, 0x0)

1m49.097942263s ago: executing program 3 (id=4424):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000001000180000001800000004000000020016000000000c0200ef00000000000000000d0000000000005f00"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x90) (async)
r1 = socket(0x23, 0x5, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
sendfile(r5, r5, 0x0, 0xa) (async)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, 0x0, &(0x7f0000000040))
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r10}, &(0x7f0000000a00), &(0x7f0000000a40)=r9}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r10}, &(0x7f0000000880), &(0x7f00000008c0)=r9}, 0x20) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', <r11=>0x0, 0x4, 0x81, 0xf9, 0x5e, 0x41, @loopback, @mcast2, 0x10, 0x10, 0x7643, 0x7}})
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="0000000240f6dc69b0a54a77f90de1e95f5cac83e600"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x7, 0x8}, 0xc) (async)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2000000014ca0100", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000050000000400"/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='rpcgss_svc_seqno_bad\x00', r3, 0x0, 0x6}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x25, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3d09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0xfffffffffffffffc, 0x529b, 0x0, 0x0, 0x41000, 0x40, '\x00', r11, 0x0, r0, 0x8, &(0x7f0000000500)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x9, 0x1000, 0xf19}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[r12, r13, r14], &(0x7f0000000680)=[{0x1, 0x3, 0x8, 0xa}, {0x5, 0x1, 0xf}, {0x2, 0x1, 0x4, 0xb}, {0x4, 0x2, 0xd, 0xc}], 0x10, 0x5}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000611183000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94)

1m49.09660051s ago: executing program 1 (id=4425):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000002c0)='%pS    \x00'}, 0x20)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'lo\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xb, &(0x7f0000000500)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @jmp={0x5, 0x0, 0x4, 0x8, 0x9, 0x20, 0xfffffffffffffff1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x32}], &(0x7f0000000580)='GPL\x00', 0x10001, 0x8, &(0x7f00000005c0)=""/8, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x1, 0x7f, 0x4457}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000006c0)=[{0x1, 0x5, 0x7, 0x9}, {0x0, 0x5, 0x9, 0xb}], 0x10, 0x7fff}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0x1, <r4=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)='%ps    \x00'}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%ps    \x00'}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0xf, &(0x7f0000000380)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x8, 0x8, 0xb, 0x30, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000400)='GPL\x00', 0x81, 0x0, 0x0, 0x41100, 0x91, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0xc, 0xd078, 0x8000}, 0x10, 0xb3f7, r3, 0x3, &(0x7f00000008c0)=[r4, r5], &(0x7f0000000900)=[{0x2, 0x5, 0x4, 0xa}, {0x0, 0x1, 0x3, 0x4}, {0x4, 0x1, 0xf, 0x2}], 0x10, 0x5}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0xf, &(0x7f0000000380)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x0, 0x8, 0x8, 0xb, 0x30, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000400)='GPL\x00', 0x81, 0x0, 0x0, 0x41100, 0x91, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0xc, 0xd078, 0x8000}, 0x10, 0xb3f7, r3, 0x3, &(0x7f00000008c0)=[r4, r5], &(0x7f0000000900)=[{0x2, 0x5, 0x4, 0xa}, {0x0, 0x1, 0x3, 0x4}, {0x4, 0x1, 0xf, 0x2}], 0x10, 0x5}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (async)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, <r9=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r9, 0x4) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r9, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b40)=@generic={&(0x7f0000000b00)='./file0\x00', 0x0, 0x8}, 0x18) (async)
r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b40)=@generic={&(0x7f0000000b00)='./file0\x00', 0x0, 0x8}, 0x18)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0x0, 0x39d7, 0x10}, 0xc)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x81, 0x0, r1, 0x5, '\x00', r2, r1, 0x2, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x14, 0x5, &(0x7f0000000a00)=@raw=[@ldst={0x2, 0x0, 0x704a5617e03b828d, 0x8, 0x0, 0x78, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000a40)='GPL\x00', 0x80, 0x0, 0x0, 0x40f00, 0x63, '\x00', r2, @fallback, r7, 0x8, &(0x7f0000000a80)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x3, 0x266, 0x8}, 0x10, r9, r10, 0x0, &(0x7f0000000c40)=[r11, r12, r7, r7, r0], 0x0, 0x10, 0x7fff}, 0x94)
sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc4daf16278aea8df}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xe0, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x50}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xaef}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1371}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000040}, 0x20048015)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x0)

1m48.835189174s ago: executing program 1 (id=4427):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff0200000000000000000000000000010420"], 0xfdef)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r6, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x20000084)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)
write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff0200000000000000000000000000010420"], 0xfdef) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r6, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x20000084) (async)

1m48.831209269s ago: executing program 3 (id=4429):
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000901000000000000000000000000010800054046ac9c05cb6d69a073797a31000000000c000480080001400051fe"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000006c0)=0x13, 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x13, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000037c00000400fc80a72601"], 0x26c0}}, 0x4010)
sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r6)
ioctl$sock_inet_SIOCSARP(r5, 0x8954, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @random="996386d83c53"}, 0x0, {0x2, 0x4e21, @private}, 'lo\x00'})
pselect6(0x40, &(0x7f0000000a80)={0x100000001, 0x1, 0x0, 0x100000000, 0x6, 0x4, 0x3, 0xfffffffffffffffd}, &(0x7f00000003c0)={0x80, 0x100000a, 0x100000002dd6, 0x800, 0x1000000000f, 0x100000000007fff, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x1, &(0x7f0000000080)={[0xfffffffffffffffa]}, 0x8)

1m48.472550581s ago: executing program 34 (id=4427):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff0200000000000000000000000000010420"], 0xfdef)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r6, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x20000084)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)
write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff0200000000000000000000000000010420"], 0xfdef) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r6, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x20000084) (async)

1m48.464293329s ago: executing program 2 (id=4431):
r0 = socket$tipc(0x1e, 0x5, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000680)={0x0, @bcast, @bpq0, 0x86, 'syz1\x00', @null, 0x0, 0xa, [@null, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98)
bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(r0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x58, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x11}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}}, 0x0)
sendmsg$tipc(r0, &(0x7f0000000040)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x10)
accept4(r0, 0x0, 0x0, 0x80800)
socket$tipc(0x1e, 0x5, 0x0) (async)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000680)={0x0, @bcast, @bpq0, 0x86, 'syz1\x00', @null, 0x0, 0xa, [@null, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) (async)
bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) (async)
listen(r0, 0x0) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x58, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x11}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}}, 0x0) (async)
sendmsg$tipc(r0, &(0x7f0000000040)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x10) (async)
accept4(r0, 0x0, 0x0, 0x80800) (async)

1m48.321404034s ago: executing program 35 (id=4431):
r0 = socket$tipc(0x1e, 0x5, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000680)={0x0, @bcast, @bpq0, 0x86, 'syz1\x00', @null, 0x0, 0xa, [@null, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98)
bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(r0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x58, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x11}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}}, 0x0)
sendmsg$tipc(r0, &(0x7f0000000040)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x10)
accept4(r0, 0x0, 0x0, 0x80800)
socket$tipc(0x1e, 0x5, 0x0) (async)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000680)={0x0, @bcast, @bpq0, 0x86, 'syz1\x00', @null, 0x0, 0xa, [@null, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) (async)
bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) (async)
listen(r0, 0x0) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x58, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x11}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}}, 0x0) (async)
sendmsg$tipc(r0, &(0x7f0000000040)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x10) (async)
accept4(r0, 0x0, 0x0, 0x80800) (async)

1m48.274908077s ago: executing program 36 (id=4429):
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000901000000000000000000000000010800054046ac9c05cb6d69a073797a31000000000c000480080001400051fe"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000006c0)=0x13, 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x13, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000037c00000400fc80a72601"], 0x26c0}}, 0x4010)
sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r6)
ioctl$sock_inet_SIOCSARP(r5, 0x8954, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @random="996386d83c53"}, 0x0, {0x2, 0x4e21, @private}, 'lo\x00'})
pselect6(0x40, &(0x7f0000000a80)={0x100000001, 0x1, 0x0, 0x100000000, 0x6, 0x4, 0x3, 0xfffffffffffffffd}, &(0x7f00000003c0)={0x80, 0x100000a, 0x100000002dd6, 0x800, 0x1000000000f, 0x100000000007fff, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x1, &(0x7f0000000080)={[0xfffffffffffffffa]}, 0x8)

1m46.656129364s ago: executing program 37 (id=4231):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x3, 0x1)
syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff8000181100fc000800000000000000000000000000ff02000000000000000000000000000100004e22001890780300"/78], 0x0)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x200000}, 0xc)
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe45}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x40000d0}, 0x40)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x40)
r6 = socket(0x1d, 0x2, 0x6)
r7 = epoll_create(0x9660)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100))
close(r6)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write(r8, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
pipe(&(0x7f0000000500)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r9, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0)
pread64(r5, &(0x7f0000001840)=""/4096, 0x1003, 0x1)
syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604fdcbb00000000000000000000000000fe8000000000000000000000000000aa8700000000000000000005"], 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r11, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4)
sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x1c, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@generic="750ec696b5"]}, 0x1c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x20, 0x0, 0x0, 0xa}, {0xf, 0x20000000, 0x20005, 0x8, 0x3, 0xfffffffffffffffa, 0x0, 0x5}, {0x2, 0xfffffffffffffffc, 0xfffffffffffffffb}, 0xc24, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x101}}, 0xe8)
connect$inet6(r10, &(0x7f0000000240)={0xa, 0x12, 0x4, @empty, 0x2}, 0x1c)

1.741230023s ago: executing program 4 (id=5316):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240008000000900010073797a300000000009b6b5977a3a04020073797a32000000001400058008000240000000030800014000006006140000001100010000000000000000000000000a"], 0xa0}}, 0x4c000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x2, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x59)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x324)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x5e, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004010)
recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x10001)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x40012100)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000180)=0x6, 0x4)

1.424400006s ago: executing program 7 (id=5320):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000e6dc4eb59d6669b2a825bff254351a22bcca1c13cf308b5310329da636094cf00600000000000000505292fec9de24fe", @ANYRES32=r3, @ANYBLOB="46000400000000002400128009000100626f6e64000000001400028005000100040000000500150001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

1.287501247s ago: executing program 7 (id=5322):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x19, 0x0, &(0x7f0000000000))

1.189789959s ago: executing program 7 (id=5325):
syz_emit_ethernet(0x52, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x300, r3, 0x1, 0x70bd30, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac12}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b84bd39}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4943}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13f8}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x453b901f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x225b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb153}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e90}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5667eb04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a9c80f5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36e4aa7c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65fce720}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cbb869d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3ca}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b4c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d5e3dd7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e377aec}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4527eb06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef96}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x186c4b4e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x396f4927}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34fabad6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3540b8f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2375ca75}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa383}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55c33975}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x392a9887}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3fe4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x74, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x133e5667}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f1cdca2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3132}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45781ef2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef65}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f3e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13fd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ba1799a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42c748d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22c89626}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf643}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x124, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a6938de}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40000004}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x626ff7f9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40230659}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19eeca9d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32d8361e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d8d2b68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d37b4db}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ba1b6de}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ce25253}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x256e79a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x725995e2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53705966}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6444fe84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c68e8a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fa766de}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6918ebbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}]}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)="7816", 0x2}], 0x1}}], 0x1, 0x20040020)
syz_genetlink_get_family_id$team(&(0x7f0000000200), r1)
r4 = socket$tipc(0x1e, 0x5, 0x0)
connect$tipc(r4, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
bind$tipc(r4, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001)
close(r5)
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)
recvmmsg(r6, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0x1a83}], 0x2, 0x100, 0x0)
sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000d00)=ANY=[@ANYBLOB="340000001100010027bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004)

1.153384885s ago: executing program 7 (id=5326):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x1, 0x0, 0x0) (async)
socketpair(0x1d, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0})
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}}, 0x40008095) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'P#\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)

910.541901ms ago: executing program 9 (id=5330):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) (async)
sendto$inet(r0, &(0x7f0000000200)="00ead7", 0x3, 0x4000080, 0x0, 0x0) (async)
r1 = socket$inet(0x2, 0x6, 0x9)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x228, 0x2d0, 0xffffffff, 0xd8, 0x170, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0xff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)

843.617488ms ago: executing program 8 (id=5331):
r0 = socket(0x1f, 0x5, 0x6)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getnexthop={0x1c, 0x6a, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x81)
r1 = socket(0x2, 0x80805, 0x0)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000000)={0x0, 0x0})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r4, 0x7, 0x5, 0x1}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r6 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c)

761.087551ms ago: executing program 8 (id=5333):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000006800010e030000000000008000000000000000000c000200010000000600000008000500647bc67f623c90b4db23ea3b0a4db8ced6fa3030bf841da5b1ab815383e85c6fbf941d4e0decea6976736d0cd89173f192", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x40000)
r4 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPOEIOCSFWD(r4, 0x40047459, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000006800010e030000000000008000000000000000000c000200010000000600000008000500647bc67f623c90b4db23ea3b0a4db8ced6fa3030bf841da5b1ab815383e85c6fbf941d4e0decea6976736d0cd89173f192", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x40000) (async)
socket$pppoe(0x18, 0x1, 0x0) (async)
ioctl$PPPOEIOCSFWD(r4, 0x40047459, 0x0) (async)

754.409922ms ago: executing program 6 (id=5334):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet(0x2, 0x1, 0x1)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000480)={0x0, @initdev, @remote}, &(0x7f00000004c0)=0xc)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, <r4=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r4, 0x4)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, r2, 0x16, 0x0, @val=@target_btf_id=r4}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000380)={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, @private2, 0x8, 0x8001, 0x9, 0x500, 0x1ff, 0x40000080})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000000200))
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

711.410866ms ago: executing program 4 (id=5335):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0)
ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000040)=0x1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1000}) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000000c0)={0x2, 0x16, 0xa, 0x5, 0x218, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_sec_ctx={0x201, 0x18, 0x5, 0x5, 0x1000, "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"}, @sadb_ident={0x2, 0xb, 0x6, 0x0, 0x81}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x4050, @private2, 0x9}, @in={0x2, 0x4e22, @private=0xa010100}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x26, 0x8, 0xf5, 0x0, 0xa0000000}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e21, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x8, @remote, 0xc9}}, @sadb_ident={0x2, 0xb, 0x7, 0x0, 0x400}]}, 0x10c0}}, 0xc084) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001200)={'veth1_to_bond\x00', <r2=>0x0}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001240)={0x2, 0x4, 0xfe, 0x9, 0x57, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x4d3, 0x15, 0xc6, 0x9b, 0x2}, @sadb_key={0x1b, 0x9, 0x670, 0x0, "9d67f469da8a1185170641a904c7cf698d227ae39e7445ffe22a1d09389b5be3babd91c375c066a4d188fad4e182861b709a6cd54bd326bafe0a4c5013c8556e16785fdcd9f4df7a8a87e77f45c4d8cfa345858d273b27e7db3f2cde0c64fe874e421758c4a4ec7847135cbc0402a8a128e179071cda731ba7bfa6a195ec3cf3ccc392b34cc549e36a508b6ffe71ea4475e0e884383ebc9c3ce4eafd7ebfc2ccadcd45a4792b723ce5dc784bfbc2b318f5e8b1e1350dca409ed911a427a944cf426cca68cd7339a5f3a5f2d4d157"}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x21, 0x0, 0x10}, @sadb_x_sec_ctx={0x1b, 0x18, 0x9, 0x90, 0xcb, "28357effa3f29360e6457d764b9dc365bc0a3b020295fd78b93f569ade5833ae93eaebb38c6d1aef28f4e6f802a0c693ef8bfa2593c8ad36d4ec06bb12ff05c9caa114099daabc9876ef3d0eec218ea9db4b4da299e6529a1b0e11ff4d20e25fe60d76f33288c3f87496ae86342e44db03130b887451d26b21bd284b3aca758bd1e54f08c1ef04781455dcd9f6104ffecb736d38ea6eb2abc81d97595af8a094deaf5b32473fbb70fd29c2876c4dc6304ef6c81ca616539f89c24ef4f0ba0945707f4727c60b5ce1ed85f2"}, @sadb_x_policy={0x8, 0x12, 0x2, 0x4, 0x0, 0x0, 0x3, {0x6, 0x2b, 0x81, 0x1, 0x0, 0xffff, 0x0, @in6=@mcast2, @in6=@private1}}, @sadb_key={0x6, 0x8, 0x120, 0x0, "36c68175b7d0768dc58d52a38cc9105ed0d4d37c9d4f9d2333642740549a6e38f396b567"}, @sadb_x_filter={0x5, 0x1a, @in=@local, @in=@private=0xa010102, 0x14, 0xa149be741d71ee4a, 0x14}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x21, 0x10, 0x14}]}, 0x2b8}}, 0x4001) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001600)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x40, r5, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x59}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x40010)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TRIM(r7, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x10, 0x3f6, 0x20, 0x70bd26, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40001}, 0x8080) (async)
ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000001800))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r8) (async)
r9 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001880)=<r10=>0x0)
connect$nfc_raw(r9, &(0x7f00000018c0)={0x27, r10, 0xffffffffffffffff, 0x2}, 0x10) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001900)={'wlan0\x00'}) (rerun: 64)
sendto(r1, &(0x7f0000001940)="09197f809128f5266aaebbd8d5bb3ed90602a3b5a416f520c165925516f91450f4b3097c6804da31abd205db17b867c51a8380052583b7c543642acfa1a535f16b62c8adbd8b7ad808b8427b1218342f399cde7ded5f5e6a94aa0f9ba26f78ee04748f93794171356cc3646d949f481a3bf06c4bb1c7bd98026d72a2b241824f28234eac0d105570dae6c9348547003b48ebb714cfa95accc50f8d0e0e17f8bbb9fddd97e0aa0f469f78404f2d6f4e16cffcdbe49b583f6cfcae440688fb0fbbb05f8ea8ea24d8b3d21c84", 0xcb, 0xb0, &(0x7f0000001a40)=@nfc={0x27, r10, 0x0, 0x1}, 0x80) (async)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r11, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x40, 0x1405, 0x2, 0x70bd29, 0x25dfdbfd, "", [{{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040080}, 0x40)
sendmsg$nl_route(r3, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)=@ipmr_delroute={0x68, 0x19, 0x200, 0x70bd2a, 0x25dfdbfb, {0x80, 0x10, 0x0, 0x5, 0xfc, 0x4, 0x0, 0x9, 0x200}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_SRC={0x8, 0x2, @multicast1}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8}}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MARK={0x8, 0x10, 0x7f13}, @RTA_TABLE={0x8, 0xf, 0x10001}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @private=0xa010101}}, @RTA_DST={0x8, 0x1, @remote}]}, 0x68}}, 0x4000000) (async)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) (async)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d40), r8)
sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f0000001e80)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d80)={0x94, r12, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4000000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff052}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x400c1}, 0x20008020)
r13 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000001ec0), &(0x7f0000001f00)=0x10, 0x800)
getsockopt$PNPIPE_HANDLE(r13, 0x113, 0x3, &(0x7f0000001f40), &(0x7f0000001f80)=0x4)

691.546535ms ago: executing program 9 (id=5336):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'vlan1\x00', &(0x7f0000000040)=@ethtool_cmd={0x10, 0x2, 0x17f9, 0x7, 0x8, 0xc4, 0x1, 0x5, 0x9, 0x8, 0x3f4d3730, 0x8, 0x3, 0x4, 0x1, 0x7, [0x8000, 0x8]}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001000800"], 0x58}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r1], 0x44}}, 0x8000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, @in={0x2, 0x0, @multicast2}], 0x2c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001480)={0x0, 0x1c, &(0x7f00000012c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f00000014c0)=0x10)
r4 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r5, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0)

657.554755ms ago: executing program 4 (id=5337):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000011002901000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a8008000680040005"], 0x44}}, 0x0)
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = socket(0xa, 0x3, 0x3a)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1)
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x1a4, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0x88, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x32, 0x5, "c0608ce72411893395eccd4b515b7bd20f57ca45ac381d37bc517a85a0d533c11a9d9ee9ed3d1109c9e7804818fd"}, @ETHTOOL_A_BITSET_MASK={0x47, 0x5, "fede03fd9a81362ed0ad00a4eb61a7db09b1d73ee4e4d2bdce8cbf4ed6ecb12d7c61da318059bc4e803d0b5721a2d7d3850948cb5ce4f18c7ba8b53e4c3ec032451c19"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}]}, @ETHTOOL_A_WOL_MODES={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x9, 0x4, "eea50bc6d4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xf4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffc00000}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x76f869b0}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x52}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'k\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@!\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',\x13}-\x00'}]}]}]}]}, 0x1a4}}, 0x480c5)
ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac14140008000800"], 0x2c}}, 0x0)
sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

535.59553ms ago: executing program 8 (id=5338):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bd000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)

533.287204ms ago: executing program 9 (id=5339):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0xb, 0x4, 0xf)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bind$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x339)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100)
bind$isdn_base(r1, &(0x7f0000000040)={0x22, 0x5, 0x4, 0x40, 0x6}, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x4)
sendmsg$netlink(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0)
r5 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080))

520.536965ms ago: executing program 4 (id=5340):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0)
close(r0)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000000000007311be00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x1, 0xb7, 0x7, 0x3}, {0x6, 0xb, 0x6, 0xffffffff}]}, 0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r2, &(0x7f0000000a40)={&(0x7f0000000180)=@in6={0xa, 0x4e24, 0x80000000, @local, 0x201}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000001c0)="6d8bc4d173f72d79677814a93c1235e072370e6f624e88d8bd914e6a078e1b7520a2dad77d07ab917c305606e2ec6f5a6f492b7558076ca86b110cb248", 0x3d}, {&(0x7f0000000200)="0e8cba429872016d9c8a5fa582152f893074c829eca52aaaa6ad111b4a8f61cfaa33980313e32c2452674d2ddad4d93fada221726fcb253af6016b20bcea6310533a5541cbfcbf35c6b392a22520dc608e09df08cf26dc2c4a1a01ea4a0f7d1343f9056fad1220ca35b8466bba2db7c6ad642b332a932f775c01ce7695f7b5dc3f4c5823e00a5c78517cf46fd83a635cad38594c3c11fa0ff1c58d2389301ba1f3cf5a51bf4edbcf6fe3442b6570999255b3a2568c219bc83d07964e383c2f47272bfa4eb26afb319812f7ae9cc98dec2420be9258", 0xd5}, {&(0x7f0000000500)="b452949fff7fff5a2f0e7fe766d529b455af2be5df0ff87f4c42ecc3958421f8c1832fde0d662db22a56d90f5c8b0fd33ff97ef02105e122eaff4bf7dcd103d8fa61c7ab5ca8ac04f82b7b434ca5ec69ed38a3620e5a1d226e3d409a75c48c5933a3bb93a743c2937e41fa409c419ac7d852577a437d50440999212704600d4355160d2b5a4fd9faad0df57dd326734bdd9138aa", 0x94}, {&(0x7f00000006c0)="9bfa8a447c0e9f275b7658fa9b28a6a54fb643bfbe2b43c74b1ff332a1947373dbafeb6b2d03af5e4ec388885bf943d9efc0b5adf22dadbda8b9aa1b9cfe3685e6c9915497aa0701c24d49043d2b728b79e56396d2e6fea94991efd76d84c2c2725e9fc5f919ac2f7f0089df809b60556168f0fb293aaa231568800be626b91e7bdf1e71190ca7efcb8d87f6064fc4766b20e17e7bf643504b60865b2377326f118d90e21d3ae8aec980d900545c18434eaeafd1beef0a4a6a510f0b04bd92891e3c079ade91d57daafb3ca2aaf029d03dc54815bda22155", 0xd8}, {&(0x7f00000007c0)="a99d7f169d32ddaab7534708e905d9e404a053fe535ed0c3dbb99a06cdaaceb5bb904089d90a6f7636e123fdd11af9eeac8239367f82cf938d575f3bc47ac2c486d46f02e653f2d8b62e89507dbe4c8b14ef8bf884c715052c372ac2e52501562bae7bd5a368f8a0be7d1909d907c2ba9466ac7c49c8e0ce0101aacad2377b93b5bf6be33838de1096c1", 0x8a}, {&(0x7f0000000300)="064b5f656c643a9f02beb6c2a503762480fbf5f8b7bbfebd0399c23d373b34b914daf6a39417425a124b39703067e8775eaed2b35b77e856cb1ec2370b9d920b8e53f7d4945fa779963c88de9488351a47dc77879c1dea05676e6d41291eb59effbde6ae0a83bcecb82cbbee00b4bb89d25a272282", 0x75}, {&(0x7f0000000880)="1c80b20caa42c31a178cb968b703adc9c888b7b913df57dc29ff57d426a634213d5d1bbbb88a9ddec80b95601738ed8dd135ebb983860f67bf529c50bbdd5658eec00f2d031cec94f71d7d572e1732966495ed18526f24185510a405576cdb3c8d60372d319737063b3b0e8185fd55d05176ed1e92a48d55b699fb64691785184352244a0fa1d2264990752edd651032ef7c9dcec1042d6195f97d00fae0d8154fed2ae4c55562c4", 0xa8}, {&(0x7f0000000940)="50f1fa95ee7eb947b46ae4f8dd73bff693a2ca9c2823a39fd11a3869aac4a8b30fdfce02623c2eb5941e0947dc9c7d2a6458562119d7350181f841b7b41ad0bbf822fd734b6e5869977bd442cb0780c8ccd5c3a238cbd79dd4fba8a486175a502d72462f53c8fefe2d03ed920f7b9ee8dce0e972be57596ad4f3fc8e215d02ffab313eea", 0x84}], 0x8, &(0x7f0000000a00)=[@authinfo={0x18, 0x84, 0x6, {0x4}}], 0x18, 0x4000000}, 0x20000001)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000100)) (async)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000100))
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r3, &(0x7f0000000140)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14) (async)
bind$802154_raw(r3, &(0x7f0000000140)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14)

493.294069ms ago: executing program 6 (id=5341):
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x0)

379.391794ms ago: executing program 4 (id=5342):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
r7 = openat$cgroup_pressure(r6, &(0x7f0000000ac0)='memory.pressure\x00', 0x2, 0x0)
preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0)

378.656291ms ago: executing program 8 (id=5343):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) (async)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r3 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={<r4=>r3})
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x11d, 0xf, 0x0, &(0x7f0000000240))
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x2, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48)

378.375862ms ago: executing program 6 (id=5344):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x10}]}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES16=r1, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r4, 0x72b}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

364.926248ms ago: executing program 9 (id=5345):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
r1 = socket(0xa, 0x2400000001, 0x0)
getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000e80)=ANY=[@ANYBLOB="cc020000210a01"], 0x2cc}}, 0x800)

319.605313ms ago: executing program 6 (id=5346):
socketpair(0x5, 0x3, 0x10000, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r1=>0x0, @loopback, @dev}, &(0x7f0000000080)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, <r2=>0x0}, &(0x7f0000000100)=0xc)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0x36}, @in6=@private1, 0x4e22, 0x0, 0x4e24, 0x401, 0xa, 0x20, 0x20, 0x32, r1, r2}, {0x48, 0x7, 0x9, 0x3, 0x1, 0x3, 0x7, 0x4}, {0x3, 0x3, 0x0, 0xe}, 0x3, 0x0, 0x6e7c76194eb7b13a, 0x0, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x3c}, 0xa, @in=@multicast1, 0x3500, 0x2, 0x0, 0xcf, 0xff, 0x90, 0x5}}, 0xe8)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/net\x00')
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)

243.588247ms ago: executing program 7 (id=5347):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, 0x0)
writev(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e600", 0x4}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cdeae62faa71a5f2383e963aba417592d7a84958b0378e15fa25bca4ceabb5", 0x7e}], 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x401c5820, &(0x7f0000000080))

242.832942ms ago: executing program 9 (id=5348):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) (async)
close(r4)
recvmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000)
shutdown(r2, 0x1) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000008627d4d381b12dea0000000003000000000100000003000000020000000000000000000002"], 0x0, 0x4a}, 0x28) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0}) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x90, r9, 0x101, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xffff6dc0}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x57cf}], @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SSID={0x13, 0x34, @random="f3e064d41056930caefca98d4a25d2"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x3, 0x0, 0x0, {0x8, 0x9, 0x0, 0x9, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x6, 0xb373, 0xf}}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0)
r11 = socket(0x18, 0x800, 0xfdb9)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r11, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="c82f25bd7010fbdbdf257600000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4008000) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0)

240.753048ms ago: executing program 4 (id=5349):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x500, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)=@newtaction={0x6c, 0x30, 0x83d79f1e8021ba05, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @rand_addr, @multicast2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500fefffcffffff85100000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8}, 0x94)

145.566636ms ago: executing program 7 (id=5350):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x2, 0x70bd29, 0x100002, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xe}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0)

143.32839ms ago: executing program 8 (id=5351):
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89b0, &(0x7f0000000080)={'ip_vti0\x00', 0x100})

126.53295ms ago: executing program 6 (id=5352):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELRULE={0x248, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x214, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x174, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x164, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_BITWISE_XOR={0x158, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x76, 0x1, "7cf6e8436304f5c057ce60a4f730a35e6639b9ae6fb76cbd53a06f57e1f6e117ee7a32dc58d5e6e00b40246170feafe9abdfacf6cbc81f0a6e5b4edca354af091ab32e00022edaf18da41b10af7ce190977658a48289d1417aa52991d78c8bbb8322133735d9fdf0666932e040a96393edeb"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x99, 0x1, "c228a49f6e8e275ffe17974bb273a4b3016abd518b4b499a240a6981846745dd94b25bf4adbd4b9c881dcad645c4d1588ccd1fa1feb11d60586add34714af3d197db391255c24005a86bb6f28e98806dc383d6e9e598abdbdcc059d3113a5418ea89469a921c519f50cfcc67b4396bbd1e91358eeff8795814e5b1a833f1077b2e190410f24d1166c6750636738ae2d7fa8880f9b5"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}}}, {0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x40, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}]}], {0x14}}, 0x270}}, 0x0)

35.500613ms ago: executing program 9 (id=5353):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000380)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x15)
splice(r1, 0x0, r5, 0x0, 0x80, 0x4)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40)
read(r1, &(0x7f0000000240)=""/233, 0xe9)
write(r3, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff, 0x5}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x8d, 0x14, {{'sm3\x00'}, 0x208, 0x0, "a8841ff973ad4a7ffa45a84ae2540cfadba6d51b9b26bae4ce7c99365983d06d1ccd6bb6054247be71e404b434ebca103d267b7b4d5886028daf42a66adf39ff27"}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)

19.249816ms ago: executing program 6 (id=5354):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000000000000100000400000000010000000400000003180000002e5f2e"], 0x0, 0x35}, 0x20)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private0}, 0xb5)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0})
ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000200))

0s ago: executing program 8 (id=5355):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x28, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000080), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) (async)
syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c200000050a24dd5cde0080045000028000000000002907800040000ffffffff12009078e000000200e7ba000000000000000000"], 0x0)

kernel console output (not intermixed with test programs):

 family 0 port 6081 - 0
[  405.049707][   T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.191603][T18694] netlink: 'syz.0.3760': attribute type 3 has an invalid length.
[  405.191710][T18696] __nla_validate_parse: 1 callbacks suppressed
[  405.191723][T18696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3761'.
[  405.218588][T18694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3760'.
[  405.317485][T18694] wlan0 speed is unknown, defaulting to 1000
[  405.394619][T18702] xt_CONNSECMARK: invalid mode: 0
[  405.919222][T18720] netlink: 'syz.2.3769': attribute type 33 has an invalid length.
[  406.118663][T18733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3774'.
[  406.145090][T18736] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3776'.
[  406.176957][T18737] netlink: 'syz.3.3776': attribute type 1 has an invalid length.
[  406.193696][T18733] vlan2: entered allmulticast mode
[  406.199548][T18733] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode
[  406.210100][T18736] 8021q: VLANs not supported on sit0
[  406.688023][T18757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3781'.
[  406.807330][T18770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3784'.
[  406.963796][   T60] IPVS: stop unused estimator thread 0...
[  407.038678][T18792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3789'.
[  407.038678][T18789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3789'.
[  407.262431][   T50] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  407.272528][T18798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  407.343192][T18820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3796'.
[  407.600000][T18825] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  407.943977][T18853] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  408.007884][T18853] bond10 (unregistering): Released all slaves
[  408.079602][T18863] kthread_run failed with err -4
[  408.194521][T18878] sit0: entered promiscuous mode
[  408.228852][T18878] netlink: 'syz.2.3808': attribute type 1 has an invalid length.
[  408.251101][T18878] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3808'.
[  408.403168][T18897] IPv6: sit1: Disabled Multicast RS
[  408.431995][T18897] sit1: entered allmulticast mode
[  409.213176][  T939] IPVS: starting estimator thread 0...
[  409.418964][T18957] IPVS: using max 30 ests per chain, 72000 per kthread
[  409.818161][T18986] SET target dimension over the limit!
[  409.830130][T18992] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  410.024792][T19004] bridge2: entered promiscuous mode
[  410.077980][T19004] bridge2: entered allmulticast mode
[  410.549914][T19044] __nla_validate_parse: 42 callbacks suppressed
[  410.549932][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3855'.
[  410.593704][T19047] macsec1: entered promiscuous mode
[  411.252146][T19077] netlink: 'syz.1.3863': attribute type 1 has an invalid length.
[  411.262164][T19077] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  411.393873][T19082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3864'.
[  411.416105][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  411.425540][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  411.434350][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  411.443037][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  411.451077][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  411.491738][T19083] wlan0 speed is unknown, defaulting to 1000
[  411.761001][T19061] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  411.950276][T19110] xt_hashlimit: size too large, truncated to 1048576
[  411.995072][T19114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3873'.
[  412.162828][T19122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3875'.
[  412.192265][T19120] Bluetooth: MGMT ver 1.23
[  412.352109][T19128] netlink: 'syz.3.3875': attribute type 1 has an invalid length.
[  412.356852][T19130] netlink: 'syz.1.3877': attribute type 1 has an invalid length.
[  412.366291][T19083] chnl_net:caif_netlink_parms(): no params data found
[  412.611532][T19130] veth5: entered promiscuous mode
[  412.644215][T19144] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3879'.
[  412.645584][T19134] netlink: 'syz.1.3877': attribute type 1 has an invalid length.
[  412.662926][T19134] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3877'.
[  412.715293][T19103] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  412.857087][T19083] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.874717][T19083] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.882268][T19083] bridge_slave_0: entered allmulticast mode
[  412.890466][T19083] bridge_slave_0: entered promiscuous mode
[  412.914264][T19083] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.926393][T19083] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.933662][T19083] bridge_slave_1: entered allmulticast mode
[  412.949538][T19083] bridge_slave_1: entered promiscuous mode
[  412.986525][ T5827] Bluetooth: hci0: command 0x080f tx timeout
[  412.993826][T19154] Bluetooth: hci0: Opcode 0x0c20 failed: -110
[  413.008056][T19083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  413.020199][T19155] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  413.067668][T19083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  413.079053][T19162] syzkaller0: entered promiscuous mode
[  413.088343][T19162] syzkaller0: entered allmulticast mode
[  413.116268][T19155] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  413.162389][T19083] team0: Port device team_slave_0 added
[  413.175314][T19155] tipc: Resetting bearer <eth:syzkaller0>
[  413.184538][T19083] team0: Port device team_slave_1 added
[  413.209148][T19155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3883'.
[  413.218200][T19155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3883'.
[  413.301784][T19083] batman_adv: batadv0: Adding interface: batadv_slave_0
[  413.322394][T19083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  413.350325][T19083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  413.367399][T19179] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3890'.
[  413.378289][T19083] batman_adv: batadv0: Adding interface: batadv_slave_1
[  413.385249][T19083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  413.412361][T19083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  413.432259][T19153] tipc: Resetting bearer <eth:syzkaller0>
[  413.461805][T19153] tipc: Disabling bearer <eth:syzkaller0>
[  413.546123][ T5827] Bluetooth: hci3: command tx timeout
[  413.559223][T19083] hsr_slave_0: entered promiscuous mode
[  413.566839][T19083] hsr_slave_1: entered promiscuous mode
[  413.573383][T19083] debugfs: 'hsr0' already exists in 'hsr'
[  413.580060][T19083] Cannot create hsr debugfs directory
[  413.753625][T19193] Cannot find del_set index 0 as target
[  413.789275][T19193] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.3896'.
[  413.808355][T19196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.873890][T19083] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.966881][T19083] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.055188][T19083] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.135518][ T5880] IPVS: starting estimator thread 0...
[  414.159005][T19210] Cannot find add_set index 0 as target
[  414.171897][T19083] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.226230][T19212] IPVS: using max 29 ests per chain, 69600 per kthread
[  414.465538][T19083] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  414.481325][T19083] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  414.548489][T19083] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  414.584465][T19083] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  414.640579][T19235] netlink: 'syz.3.3914': attribute type 11 has an invalid length.
[  414.885425][T19083] 8021q: adding VLAN 0 to HW filter on device bond0
[  414.949938][T19083] 8021q: adding VLAN 0 to HW filter on device team0
[  414.973012][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.980281][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  415.015074][T19267] Cannot find del_set index 0 as target
[  415.029465][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.036675][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  415.071750][ T5827] Bluetooth: hci0: command 0x080f tx timeout
[  415.077976][T19265] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  415.085042][T19265] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  415.192929][T19270] xt_hashlimit: size too large, truncated to 1048576
[  415.634843][T19083] 8021q: adding VLAN 0 to HW filter on device batadv0
[  415.647943][ T5827] Bluetooth: hci3: command tx timeout
[  415.768710][T19265] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  415.776746][T19265] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  415.801295][T19265] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  415.812637][T19265] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  415.949932][T19265] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  415.969399][T19265] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  416.059755][T19265] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  416.065877][T19265] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  416.144596][T19298] delete_channel: no stack
[  416.161793][T19083] veth0_vlan: entered promiscuous mode
[  416.204467][T19083] veth1_vlan: entered promiscuous mode
[  416.283560][T19083] veth0_macvtap: entered promiscuous mode
[  416.307570][T19083] veth1_macvtap: entered promiscuous mode
[  416.363548][T19083] batman_adv: batadv0: Interface activated: batadv_slave_0
[  416.381176][T19083] batman_adv: batadv0: Interface activated: batadv_slave_1
[  416.398867][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  416.417882][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  416.470232][T19325] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  416.483318][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  416.507187][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.675357][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.693098][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.708532][T19340] __nla_validate_parse: 16 callbacks suppressed
[  416.708548][T19340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3936'.
[  416.737282][T19342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3938'.
[  416.740076][  T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.767060][  T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.852601][T19349] netlink: 'syz.3.3940': attribute type 3 has an invalid length.
[  416.860677][T19349] netlink: 'syz.3.3940': attribute type 1 has an invalid length.
[  416.869657][T19349] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3940'.
[  416.994599][T19359] netlink: 'syz.5.3857': attribute type 13 has an invalid length.
[  417.012486][T19359] netlink: 'syz.5.3857': attribute type 17 has an invalid length.
[  417.123157][T19359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  417.372786][T19377] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3949'.
[  417.507072][T19391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3952'.
[  417.540604][T19394] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3953'.
[  417.876251][T19418] x_tables: duplicate underflow at hook 2
[  417.953465][T19420] netlink: 'syz.0.3962': attribute type 11 has an invalid length.
[  417.969359][T19420] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.3962'.
[  418.011323][T19428] tipc: Started in network mode
[  418.016320][T19428] tipc: Node identity b6efa1b63c8a, cluster identity 4711
[  418.023581][T19428] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  418.038800][T19428] syzkaller0: entered promiscuous mode
[  418.044431][T19428] syzkaller0: entered allmulticast mode
[  418.047775][T19423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3964'.
[  418.056122][T19428] tipc: Resetting bearer <eth:syzkaller0>
[  418.064712][T19428] syzkaller0: tun_net_xmit 90
[  418.084015][T19428] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3965'.
[  418.175029][T19435] IPVS: lc: FWM 3 0x00000003 - no destination available
[  418.182225][ T5939] IPVS: starting estimator thread 0...
[  418.190595][T19435] IPVS: lc: FWM 3 0x00000003 - no destination available
[  418.199435][T19435] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3967'.
[  418.205819][    C1] syzkaller0: tun_net_xmit 90
[  418.229395][T19427] tipc: Resetting bearer <eth:syzkaller0>
[  418.255000][T19427] tipc: Disabling bearer <eth:syzkaller0>
[  418.277113][T19438] IPVS: using max 40 ests per chain, 96000 per kthread
[  418.581139][T19461] netlink: 'syz.2.3978': attribute type 83 has an invalid length.
[  418.726365][T19476] syzkaller0: entered promiscuous mode
[  418.737475][T19476] syzkaller0: entered allmulticast mode
[  418.869967][T19481] netlink: 'syz.1.3981': attribute type 4 has an invalid length.
[  418.887359][T19481] netlink: 'syz.1.3981': attribute type 4 has an invalid length.
[  421.027479][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.036737][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.338225][T19570] netlink: 'syz.5.4010': attribute type 10 has an invalid length.
[  421.378917][T19570] team0: Device ipvlan1 failed to register rx_handler
[  421.400835][T19575] netlink: 'syz.1.4012': attribute type 30 has an invalid length.
[  421.458011][T19575] bond5: option arp_missed_max: invalid value (0)
[  421.468788][T19575] bond5: option arp_missed_max: allowed values 1 - 255
[  421.488775][T19575] bond5 (unregistering): Released all slaves
[  421.543387][T19587] sctp: [Deprecated]: syz.5.4014 (pid 19587) Use of struct sctp_assoc_value in delayed_ack socket option.
[  421.543387][T19587] Use struct sctp_sack_info instead
[  421.621571][T19587] tc_dump_action: action bad kind
[  421.831130][T19609] IPVS: set_ctl: invalid protocol: 94 10.1.1.1:20001
[  422.139113][T19634] netlink: 'syz.3.4024': attribute type 75 has an invalid length.
[  422.233272][T19642] netlink: 'syz.5.4026': attribute type 1 has an invalid length.
[  422.302726][T19649] __nla_validate_parse: 21 callbacks suppressed
[  422.302744][T19649] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4026'.
[  422.336027][T19649] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4026'.
[  422.345009][T19649] netlink: 'syz.5.4026': attribute type 5 has an invalid length.
[  422.367260][T19649] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4026'.
[  422.435910][T19655] nbd: must specify at least one socket
[  422.491867][T19657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4034'.
[  422.510621][T19657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4034'.
[  423.373642][T19683] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4042'.
[  423.524738][T19692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4044'.
[  423.542097][T19696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4044'.
[  423.564366][T19693] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4043'.
[  423.598415][T19693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4043'.
[  423.841165][T19709] netlink: 'syz.2.4049': attribute type 24 has an invalid length.
[  423.919721][T19718] xt_ecn: cannot match TCP bits for non-tcp packets
[  424.072934][T19732] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  424.393286][T19750] syzkaller0: entered promiscuous mode
[  424.404647][T19750] syzkaller0: entered allmulticast mode
[  425.145060][T19803] syz.2.4083: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  425.175939][T19803] CPU: 1 UID: 0 PID: 19803 Comm: syz.2.4083 Not tainted syzkaller #0 PREEMPT(full) 
[  425.175968][T19803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  425.175982][T19803] Call Trace:
[  425.175989][T19803]  <TASK>
[  425.175997][T19803]  dump_stack_lvl+0x189/0x250
[  425.176031][T19803]  ? __pfx_dump_stack_lvl+0x10/0x10
[  425.176059][T19803]  ? __pfx__printk+0x10/0x10
[  425.176086][T19803]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  425.176112][T19803]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  425.176139][T19803]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  425.176167][T19803]  warn_alloc+0x214/0x310
[  425.176193][T19803]  ? stack_depot_save_flags+0x40/0x860
[  425.176223][T19803]  ? __pfx_warn_alloc+0x10/0x10
[  425.176250][T19803]  ? kasan_save_track+0x3e/0x80
[  425.176272][T19803]  ? __kasan_kmalloc+0x93/0xb0
[  425.176297][T19803]  ? xsk_setsockopt+0x4dc/0x8d0
[  425.176317][T19803]  ? do_sock_setsockopt+0x17c/0x1b0
[  425.176334][T19803]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  425.176350][T19803]  ? do_syscall_64+0xfa/0xfa0
[  425.176372][T19803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.176401][T19803]  __vmalloc_node_range_noprof+0x125/0x12d0
[  425.176456][T19803]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  425.176483][T19803]  ? __kasan_kmalloc+0x93/0xb0
[  425.176512][T19803]  vmalloc_user_noprof+0xad/0xf0
[  425.176535][T19803]  ? xskq_create+0xbf/0x170
[  425.176558][T19803]  xskq_create+0xbf/0x170
[  425.176582][T19803]  xsk_init_queue+0xb0/0x110
[  425.176607][T19803]  xsk_setsockopt+0x4dc/0x8d0
[  425.176630][T19803]  ? __pfx_xsk_setsockopt+0x10/0x10
[  425.176654][T19803]  ? __pfx_aa_sk_perm+0x10/0x10
[  425.176680][T19803]  ? aa_sock_opt_perm+0xff/0x1b0
[  425.176708][T19803]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  425.176725][T19803]  ? __pfx_xsk_setsockopt+0x10/0x10
[  425.176747][T19803]  do_sock_setsockopt+0x17c/0x1b0
[  425.176771][T19803]  __x64_sys_setsockopt+0x13f/0x1b0
[  425.176794][T19803]  do_syscall_64+0xfa/0xfa0
[  425.176815][T19803]  ? lockdep_hardirqs_on+0x9c/0x150
[  425.176839][T19803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.176857][T19803]  ? clear_bhb_loop+0x60/0xb0
[  425.176880][T19803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.176905][T19803] RIP: 0033:0x7f025698f6c9
[  425.176922][T19803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  425.176938][T19803] RSP: 002b:00007f0257904038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  425.176959][T19803] RAX: ffffffffffffffda RBX: 00007f0256be5fa0 RCX: 00007f025698f6c9
[  425.176972][T19803] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  425.176984][T19803] RBP: 00007f0256a11f91 R08: 0000000000000004 R09: 0000000000000000
[  425.176996][T19803] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  425.177007][T19803] R13: 00007f0256be6038 R14: 00007f0256be5fa0 R15: 00007ffca0a6db58
[  425.177040][T19803]  </TASK>
[  425.177129][T19803] Mem-Info:
[  425.506070][T19803] active_anon:3995 inactive_anon:0 isolated_anon:0
[  425.506070][T19803]  active_file:3205 inactive_file:40011 isolated_file:0
[  425.506070][T19803]  unevictable:768 dirty:81 writeback:0
[  425.506070][T19803]  slab_reclaimable:12836 slab_unreclaimable:140512
[  425.506070][T19803]  mapped:29053 shmem:1407 pagetables:1070
[  425.506070][T19803]  sec_pagetables:0 bounce:0
[  425.506070][T19803]  kernel_misc_reclaimable:0
[  425.506070][T19803]  free:1271955 free_pcp:12933 free_cma:0
[  425.577977][T19803] Node 0 active_anon:15980kB inactive_anon:0kB active_file:12820kB inactive_file:159844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116212kB dirty:320kB writeback:0kB shmem:4092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14660kB pagetables:3948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  425.617366][T19803] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  425.648357][T19803] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  425.739465][T19803] lowmem_reserve[]: 0 2505 2505 2505 2505
[  425.745272][T19803] Node 0 DMA32 free:1160836kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15880kB inactive_anon:0kB active_file:12820kB inactive_file:159844kB unevictable:1536kB writepending:320kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:34564kB local_pcp:24028kB free_cma:0kB
[  425.838349][T19803] lowmem_reserve[]: 0 0 0 0 0
[  425.843110][T19803] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  425.883870][T19803] lowmem_reserve[]: 0 0 0 0 0
[  425.889307][T19803] Node 1 Normal free:3893820kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16932kB local_pcp:7076kB free_cma:0kB
[  425.926929][T19827] bridge_slave_1: left allmulticast mode
[  425.932972][T19803] lowmem_reserve[]: 0 0 0 0 0
[  425.940313][T19827] bridge_slave_1: left promiscuous mode
[  425.956109][T19827] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.970786][T19803] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  425.986282][T19827] bridge_slave_0: left allmulticast mode
[  425.989589][T19803] Node 0 DMA32: 1*4kB (U) 2*8kB (UM) 188*16kB (M) 126*32kB (ME) 31*64kB (ME) 7*128kB (UME) 10*256kB (UME) 11*512kB (UM) 59*1024kB (UME) 6*2048kB (UME) 256*4096kB (UM) = 1139412kB
[  426.003931][T19827] bridge_slave_0: left promiscuous mode
[  426.011856][T19803] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  426.026044][T19827] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.041591][T19803] Node 1 Normal: 211*4kB (UE) 54*8kB (UME) 42*16kB (UME) 159*32kB (UME) 41*64kB (UME) 7*128kB (UME) 3*256kB (UM) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3893820kB
[  426.060350][T19803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  426.070321][T19803] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  426.080738][T19803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  426.092377][T19803] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  426.102064][T19803] 44621 total pagecache pages
[  426.107738][T19803] 0 pages in swap cache
[  426.112254][T19803] Free swap  = 124996kB
[  426.117674][T19803] Total swap = 124996kB
[  426.122003][T19803] 2097051 pages RAM
[  426.126104][T19803] 0 pages HighMem/MovableOnly
[  426.130867][T19803] 424119 pages reserved
[  426.135144][T19803] 0 pages cma reserved
[  426.603532][T19832] 8021q: adding VLAN 0 to HW filter on device bond1
[  426.612877][T19832] bond0: (slave bond1): Enslaving as an active interface with an up link
[  426.849046][T19855] bond2: Removing last arp target with arp_interval on
[  427.286173][T19883] xt_hashlimit: size too large, truncated to 1048576
[  427.711375][T19892] netlink: 'syz.3.4107': attribute type 1 has an invalid length.
[  427.719332][T19892] __nla_validate_parse: 10 callbacks suppressed
[  427.719346][T19892] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4107'.
[  428.574458][T19945] netlink: 'syz.1.4126': attribute type 2 has an invalid length.
[  428.591648][T19945] �9: entered promiscuous mode
[  428.724311][T19954] tipc: Invalid UDP bearer configuration
[  428.724365][T19954] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  429.012712][T19971] openvswitch: netlink: nsh attribute has 65492 unknown bytes.
[  429.020504][T19971] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.485716][T19995] xt_CT: No such helper "syz1"
[  429.807537][T20009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  429.825551][T20009] syzkaller0: entered promiscuous mode
[  429.831294][T20009] syzkaller0: entered allmulticast mode
[  430.142109][T20027] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.611989][T20008] tipc: Resetting bearer <eth:syzkaller0>
[  430.644436][T20008] tipc: Disabling bearer <eth:syzkaller0>
[  430.699599][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.709941][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.797464][T20049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4157'.
[  430.864360][T20051] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4158'.
[  431.487185][T20096] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4171'.
[  431.497975][T20096] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  431.590173][T20102] IPVS: length: 176 != 8
[  431.811995][T20119] netlink: 'syz.1.4181': attribute type 6 has an invalid length.
[  431.998016][T20126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4183'.
[  432.018826][T20130] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4184'.
[  432.059200][T20130] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.067425][T20130] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.082936][T20130] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4184'.
[  432.092111][T20133] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  432.103239][ T2990] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  432.112545][ T2990] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  432.126321][ T2990] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  432.135277][ T2990] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  432.923591][T20163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4193'.
[  432.933730][T20163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4193'.
[  433.041860][T20171] netlink: 'syz.5.4193': attribute type 1 has an invalid length.
[  433.052038][T20171] nbd: error processing sock list
[  433.052045][T20168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4195'.
[  433.052122][T20168] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4195'.
[  433.062204][T20171] block nbd4: shutting down sockets
[  433.244155][T20179] veth1_macvtap: left promiscuous mode
[  433.251216][T20179] macsec0: entered promiscuous mode
[  433.256526][T20179] macsec0: entered allmulticast mode
[  433.296880][T20191] netlink: 6 bytes leftover after parsing attributes in process `syz.5.4202'.
[  433.379900][T20200] tipc: Cannot configure node identity twice
[  433.607906][T20211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4209'.
[  433.665244][T20221] openvswitch: netlink: Message has 16 unknown bytes.
[  433.694475][ T5880] IPVS: starting estimator thread 0...
[  433.706279][T20211] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  433.797276][T20222] IPVS: using max 26 ests per chain, 62400 per kthread
[  433.955267][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  433.966656][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  433.978719][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  433.988354][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  433.996568][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  434.335681][T20255] "syz.1.4221" (20255) uses obsolete ecb(arc4) skcipher
[  434.485627][T20272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4226'.
[  434.688545][T20233] chnl_net:caif_netlink_parms(): no params data found
[  434.782392][T20281] netlink: 'syz.5.4228': attribute type 1 has an invalid length.
[  434.810349][T20286] syzkaller0: entered promiscuous mode
[  434.816020][T20286] syzkaller0: entered allmulticast mode
[  434.907782][T20233] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.935324][T20233] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.943910][T20233] bridge_slave_0: entered allmulticast mode
[  434.953037][T20233] bridge_slave_0: entered promiscuous mode
[  434.973428][T20233] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.982899][T20233] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.996049][T20233] bridge_slave_1: entered allmulticast mode
[  435.008934][T20233] bridge_slave_1: entered promiscuous mode
[  435.072997][T20302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4231'.
[  435.110359][T20233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  435.126474][T20305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4234'.
[  435.131957][T20233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  435.144575][T20305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4234'.
[  435.214788][T20233] team0: Port device team_slave_0 added
[  435.224481][T20233] team0: Port device team_slave_1 added
[  435.367312][T20233] batman_adv: batadv0: Adding interface: batadv_slave_0
[  435.377098][T20233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  435.407665][T20233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  435.420717][T20233] batman_adv: batadv0: Adding interface: batadv_slave_1
[  435.423025][T20312] netlink: 'syz.1.4237': attribute type 1 has an invalid length.
[  435.428838][T20233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  435.463189][T20233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  435.567093][T20312] 8021q: adding VLAN 0 to HW filter on device bond5
[  435.629205][T20321] bond5: (slave veth7): Enslaving as an active interface with a down link
[  435.645616][T20312] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  435.737106][T20321] bond5: (slave veth9): Enslaving as an active interface with a down link
[  435.760107][T20233] hsr_slave_0: entered promiscuous mode
[  435.768654][T20233] hsr_slave_1: entered promiscuous mode
[  435.775193][T20233] debugfs: 'hsr0' already exists in 'hsr'
[  435.781418][T20233] Cannot create hsr debugfs directory
[  435.844533][T20331] C: renamed from lo (while UP)
[  436.026359][ T5827] Bluetooth: hci5: command tx timeout
[  436.112834][T20344] bridge0: port 1(ipvlan0) entered blocking state
[  436.121222][T20344] bridge0: port 1(ipvlan0) entered disabled state
[  436.128828][T20344] ipvlan0: entered allmulticast mode
[  436.134152][T20344] bridge0: entered allmulticast mode
[  436.141206][T20344] ipvlan0: left allmulticast mode
[  436.146580][T20344] bridge0: left allmulticast mode
[  436.320039][T20358] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  436.702326][T20233] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  436.753880][T20233] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  436.787611][T20233] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  436.812197][T20233] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  436.819171][T20372] netlink: 'syz.3.4255': attribute type 10 has an invalid length.
[  436.858450][T20372] syz_tun: entered promiscuous mode
[  436.879833][T20372] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  436.944841][T20385] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  437.045444][T20233] 8021q: adding VLAN 0 to HW filter on device bond0
[  437.080628][T20233] 8021q: adding VLAN 0 to HW filter on device team0
[  437.112134][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.119320][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  437.171418][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.178628][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  437.191802][T20398] syzkaller1: entered promiscuous mode
[  437.201724][T20398] syzkaller1: entered allmulticast mode
[  437.614814][T20233] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.002275][T20440] netlink: 'syz.2.4273': attribute type 26 has an invalid length.
[  438.050358][T20442] netlink: 'syz.1.4274': attribute type 63 has an invalid length.
[  438.067002][T20442] netlink: 'syz.1.4274': attribute type 63 has an invalid length.
[  438.081240][T20444] __nla_validate_parse: 10 callbacks suppressed
[  438.081256][T20444] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4275'.
[  438.105491][T20233] veth0_vlan: entered promiscuous mode
[  438.111559][ T5827] Bluetooth: hci5: command tx timeout
[  438.173125][T20233] veth1_vlan: entered promiscuous mode
[  438.284738][T20233] veth0_macvtap: entered promiscuous mode
[  438.312905][T20233] veth1_macvtap: entered promiscuous mode
[  438.339031][T20233] batman_adv: batadv0: Interface activated: batadv_slave_0
[  438.361436][T20233] batman_adv: batadv0: Interface activated: batadv_slave_1
[  438.380884][   T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.450856][   T60] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.470205][   T60] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.485319][   T60] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.658621][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.678903][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.731881][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.752032][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.940845][T20488] openvswitch: netlink: Flow key attribute not present in set flow.
[  438.942221][T20487] openvswitch: netlink: Flow key attribute not present in set flow.
[  439.092150][T20496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4294'.
[  439.141075][T20496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4294'.
[  439.141090][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  439.161072][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  439.183955][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  439.202563][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  439.261189][T20499] bond6: option arp_all_targets: invalid value (18446744073709551613)
[  439.273426][T20499] bond6 (unregistering): Released all slaves
[  439.352308][T20500] bond6: option arp_all_targets: invalid value (18446744073709551613)
[  439.362955][T20500] bond6 (unregistering): Released all slaves
[  439.460104][T20516] netlink: 'syz.3.4299': attribute type 4 has an invalid length.
[  439.525330][T20518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4300'.
[  439.554310][T20518] netlink: 'syz.2.4300': attribute type 3 has an invalid length.
[  439.636917][T20526] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4301'.
[  439.714241][T20528] ip6gre1: entered allmulticast mode
[  440.144702][T20554] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  440.159448][T20541] syz_tun: left promiscuous mode
[  440.186356][ T5827] Bluetooth: hci5: command tx timeout
[  440.627635][T20541] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  440.651278][T20582] netlink: 'syz.6.4314': attribute type 1 has an invalid length.
[  440.684002][T20541] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  440.702085][T20587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4316'.
[  440.772845][T20541] macsec0: left promiscuous mode
[  440.875171][T20551] netlink: 'syz.3.4307': attribute type 1 has an invalid length.
[  440.906120][T20582] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4314'.
[  440.929758][   T60] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  440.950380][   T60] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  440.968880][   T60] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  441.007527][   T60] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  441.019199][   T60] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.047401][   T60] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  441.066483][   T60] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  441.075609][   T60] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.116074][   T60] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  441.266126][   T60] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  441.285224][   T60] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.318923][   T60] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  441.519183][T20596] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  441.837923][T20596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4318'.
[  441.879062][T20603] 
: renamed from bridge_slave_0
[  442.100929][T20606] netlink: 'syz.6.4321': attribute type 4 has an invalid length.
[  442.105082][T20607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4322'.
[  442.254408][T20618] xt_ipcomp: unknown flags 1D
[  442.266268][ T5827] Bluetooth: hci5: command tx timeout
[  442.276978][T20620] syzkaller0: entered promiscuous mode
[  442.287467][T20618] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4326'.
[  442.305915][T20620] syzkaller0: entered allmulticast mode
[  442.338981][T20620] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  442.356251][T20616] tipc: Resetting bearer <eth:syzkaller0>
[  442.459304][T20616] tipc: Disabling bearer <eth:syzkaller0>
[  442.554773][T20640] netlink: 'syz.2.4330': attribute type 21 has an invalid length.
[  442.582818][T20640] netlink: 'syz.2.4330': attribute type 1 has an invalid length.
[  442.979687][T20671] sock: sock_set_timeout: `syz.1.4338' (pid 20671) tries to set negative timeout
[  442.992246][T20671] delete_channel: no stack
[  443.124496][T20681] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  443.136409][T20681] __nla_validate_parse: 1 callbacks suppressed
[  443.136426][T20681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4341'.
[  443.214426][T20689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4341'.
[  443.223872][T20689] nbd: device at index 64 is going down
[  443.271198][T20691] netlink: 'syz.2.4343': attribute type 1 has an invalid length.
[  443.399224][T20698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4346'.
[  443.542260][T20710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4348'.
[  443.569983][T20710] netlink: 'syz.2.4348': attribute type 1 has an invalid length.
[  443.574550][T20714] netlink: 400 bytes leftover after parsing attributes in process `syz.1.4349'.
[  443.585880][T20710] netlink: 'syz.2.4348': attribute type 7 has an invalid length.
[  443.601591][T20710] netlink: 'syz.2.4348': attribute type 8 has an invalid length.
[  443.609972][T20710] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4348'.
[  443.616280][T20714] netlink: 400 bytes leftover after parsing attributes in process `syz.1.4349'.
[  443.619216][T20710] NCSI netlink: No device for ifindex 65584
[  443.770514][T20726] macsec0: entered promiscuous mode
[  443.778321][T20726] macsec0: entered allmulticast mode
[  443.837377][T20729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4350'.
[  444.030186][T20741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4355'.
[  444.053492][T20741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4355'.
[  444.571384][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  444.580550][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  444.602805][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  444.627666][T20787] hsr0 speed is unknown, defaulting to 1000
[  444.633811][T20787] hsr0 speed is unknown, defaulting to 1000
[  444.643052][T20787] hsr0 speed is unknown, defaulting to 1000
[  444.670443][T20787] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  444.710709][T20787] hsr0 speed is unknown, defaulting to 1000
[  444.720801][T20787] hsr0 speed is unknown, defaulting to 1000
[  444.729314][T20787] hsr0 speed is unknown, defaulting to 1000
[  444.739570][T20787] hsr0 speed is unknown, defaulting to 1000
[  444.749522][T20787] hsr0 speed is unknown, defaulting to 1000
[  444.758602][T20787] hsr0 speed is unknown, defaulting to 1000
[  444.767335][T20787] hsr0 speed is unknown, defaulting to 1000
[  444.775400][T20787] hsr0 speed is unknown, defaulting to 1000
[  444.775426][T20797] openvswitch: netlink: Missing key (keys=40, expected=100)
[  444.784101][T20787] hsr0 speed is unknown, defaulting to 1000
[  444.797766][T20787] hsr0 speed is unknown, defaulting to 1000
[  445.009692][T20812] tipc: Started in network mode
[  445.014730][T20812] tipc: Node identity 72cb6cfd53bf, cluster identity 4711
[  445.024410][T20812] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  445.035103][T20812] syzkaller0: entered promiscuous mode
[  445.056467][T20812] syzkaller0: entered allmulticast mode
[  445.085337][T20812] tipc: Resetting bearer <eth:syzkaller0>
[  445.113030][T20811] tipc: Resetting bearer <eth:syzkaller0>
[  445.135546][T20811] tipc: Disabling bearer <eth:syzkaller0>
[  445.284989][T20821] bridge: RTM_NEWNEIGH with invalid state 0x8
[  445.299605][T20819] netlink: 'syz.3.4380': attribute type 29 has an invalid length.
[  445.469469][T20831] netlink: 'syz.2.4383': attribute type 1 has an invalid length.
[  445.509002][T20831] gretap1: entered promiscuous mode
[  445.893729][T20866] netlink: 'syz.2.4393': attribute type 1 has an invalid length.
[  445.936156][T20866] bond3: (slave gretap1): making interface the new active one
[  445.947265][T20866] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  446.013653][T20874] geneve3: entered promiscuous mode
[  446.019583][T20874] geneve3: entered allmulticast mode
[  446.032267][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  446.042338][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  446.052743][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  446.062044][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  446.381555][T20895] FAULT_INJECTION: forcing a failure.
[  446.381555][T20895] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  446.428193][T20895] CPU: 1 UID: 0 PID: 20895 Comm: syz.2.4401 Not tainted syzkaller #0 PREEMPT(full) 
[  446.428220][T20895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  446.428230][T20895] Call Trace:
[  446.428238][T20895]  <TASK>
[  446.428245][T20895]  dump_stack_lvl+0x189/0x250
[  446.428271][T20895]  ? __pfx____ratelimit+0x10/0x10
[  446.428294][T20895]  ? __pfx_dump_stack_lvl+0x10/0x10
[  446.428316][T20895]  ? __pfx__printk+0x10/0x10
[  446.428346][T20895]  should_fail_ex+0x414/0x560
[  446.428376][T20895]  _copy_to_user+0x31/0xb0
[  446.428400][T20895]  simple_read_from_buffer+0xe1/0x170
[  446.428429][T20895]  proc_fail_nth_read+0x1b3/0x220
[  446.428454][T20895]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  446.428478][T20895]  ? rw_verify_area+0x2a6/0x4d0
[  446.428499][T20895]  ? __lock_acquire+0xab9/0xd20
[  446.428514][T20895]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  446.428536][T20895]  vfs_read+0x200/0xa30
[  446.428557][T20895]  ? fdget_pos+0x247/0x320
[  446.428578][T20895]  ? __pfx___mutex_lock+0x10/0x10
[  446.428602][T20895]  ? __pfx_vfs_read+0x10/0x10
[  446.428625][T20895]  ? __fget_files+0x2a/0x420
[  446.428646][T20895]  ? __fget_files+0x3a0/0x420
[  446.428661][T20895]  ? __fget_files+0x2a/0x420
[  446.428687][T20895]  ksys_read+0x145/0x250
[  446.428712][T20895]  ? __pfx_ksys_read+0x10/0x10
[  446.428737][T20895]  ? do_syscall_64+0xbe/0xfa0
[  446.428764][T20895]  do_syscall_64+0xfa/0xfa0
[  446.428785][T20895]  ? lockdep_hardirqs_on+0x9c/0x150
[  446.428807][T20895]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.428824][T20895]  ? clear_bhb_loop+0x60/0xb0
[  446.428845][T20895]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.428861][T20895] RIP: 0033:0x7f025698e0dc
[  446.428884][T20895] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  446.428898][T20895] RSP: 002b:00007f02578e3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  446.428918][T20895] RAX: ffffffffffffffda RBX: 00007f0256be6090 RCX: 00007f025698e0dc
[  446.428930][T20895] RDX: 000000000000000f RSI: 00007f02578e30a0 RDI: 0000000000000004
[  446.428941][T20895] RBP: 00007f02578e3090 R08: 0000000000000000 R09: 0000000000000000
[  446.428952][T20895] R10: 0000000020000041 R11: 0000000000000246 R12: 0000000000000001
[  446.428962][T20895] R13: 00007f0256be6128 R14: 00007f0256be6090 R15: 00007ffca0a6db58
[  446.428994][T20895]  </TASK>
[  446.911180][T20911] team0: Device vti0 is of different type
[  447.041882][T20925] netlink: 'syz.6.4410': attribute type 11 has an invalid length.
[  447.369419][T20954] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.389475][T20954] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.407070][T20959] netlink: 'syz.6.4420': attribute type 16 has an invalid length.
[  447.426202][T20959] netlink: 'syz.6.4420': attribute type 17 has an invalid length.
[  447.597806][T20959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  447.622948][T20960] syz_tun (unregistering): left allmulticast mode
[  447.634791][T20960] bond0: (slave syz_tun): Releasing backup interface
[  447.729139][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  447.775843][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  447.937770][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  447.966030][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  448.110641][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  448.135923][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  448.676328][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  448.689232][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  448.710908][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  448.723887][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  448.731823][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  448.833282][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  448.855157][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  448.872095][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  448.887912][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  448.897539][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  448.963511][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  448.975627][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  448.987163][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  449.000836][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  449.009246][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  449.096633][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  449.107917][   T12] bond0 (unregistering): Released all slaves
[  449.120960][   T12] bond1 (unregistering): Released all slaves
[  449.133607][   T12] bond2 (unregistering): (slave bond3): Releasing backup interface
[  449.142773][   T12] bond2 (unregistering): Released all slaves
[  449.238144][   T12] bond3 (unregistering): Released all slaves
[  449.250473][   T12] bond4 (unregistering): Released all slaves
[  449.342966][   T12] bond5 (unregistering): (slave veth7): Releasing active interface
[  449.354271][   T12] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface
[  449.366164][   T12] bond5 (unregistering): (slave veth9): Releasing active interface
[  449.375459][   T12] bond5 (unregistering): Released all slaves
[  449.482978][   T12] : left promiscuous mode
[  449.576942][   T12] �9: left promiscuous mode
[  449.600035][T20996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  449.607133][T20997] syzkaller0: entered promiscuous mode
[  449.612619][T20997] syzkaller0: entered allmulticast mode
[  449.620566][T20996] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.632086][T20996] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.656786][T20996] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.670173][   T12] tipc: Left network mode
[  449.686293][T20996] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.714275][T20979] hsr0 speed is unknown, defaulting to 1000
[  449.720500][T20996] tipc: Resetting bearer <eth:syzkaller0>
[  449.737109][T20996] tipc: Disabling bearer <eth:syzkaller0>
[  450.116305][T20986] hsr0 speed is unknown, defaulting to 1000
[  450.442492][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  450.467436][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  450.495254][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  450.506265][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  450.513875][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  450.593443][T21020] netlink: 'syz.6.4446': attribute type 29 has an invalid length.
[  450.698668][T20979] chnl_net:caif_netlink_parms(): no params data found
[  450.818204][T21024] __nla_validate_parse: 25 callbacks suppressed
[  450.818222][T21024] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4447'.
[  450.838359][ T5827] Bluetooth: hci1: command tx timeout
[  450.846568][T20988] hsr0 speed is unknown, defaulting to 1000
[  450.902385][T21025] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4447'.
[  450.922600][T21024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4447'.
[  450.986799][ T5827] Bluetooth: hci2: command tx timeout
[  451.050695][T21016] hsr0 speed is unknown, defaulting to 1000
[  451.067314][ T5827] Bluetooth: hci4: command tx timeout
[  451.084683][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4448'.
[  451.114726][T20986] chnl_net:caif_netlink_parms(): no params data found
[  451.168261][T20979] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.175391][T20979] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.183144][T20979] bridge_slave_0: entered allmulticast mode
[  451.190529][T20979] bridge_slave_0: entered promiscuous mode
[  451.200015][T20979] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.207331][T20979] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.214556][T20979] bridge_slave_1: entered allmulticast mode
[  451.223893][T20979] bridge_slave_1: entered promiscuous mode
[  451.382038][T20979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  451.409236][T21041] netlink: 'syz.6.4451': attribute type 10 has an invalid length.
[  451.427989][T20979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  451.461121][T21041] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.469368][T21041] bridge_slave_1: left allmulticast mode
[  451.475028][T21041] bridge_slave_1: left promiscuous mode
[  451.481052][T21041] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.493181][T21041] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  451.564562][T20979] team0: Port device team_slave_0 added
[  451.670994][T20979] team0: Port device team_slave_1 added
[  451.697839][T20986] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.705050][T20986] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.713381][T20986] bridge_slave_0: entered allmulticast mode
[  451.723921][T20986] bridge_slave_0: entered promiscuous mode
[  451.749438][T21050] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4453'.
[  451.759605][T21050] netlink: 'syz.6.4453': attribute type 10 has an invalid length.
[  451.770142][T21050] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4453'.
[  451.787831][T20986] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.795209][T20986] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.802813][T20986] bridge_slave_1: entered allmulticast mode
[  451.812242][T20986] bridge_slave_1: entered promiscuous mode
[  451.831782][T21050] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  451.839103][T21050] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  451.847904][T21050] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  451.894354][T20979] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.901598][T20979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.929368][T20979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.974949][T21016] chnl_net:caif_netlink_parms(): no params data found
[  451.994494][T20979] batman_adv: batadv0: Adding interface: batadv_slave_1
[  452.001906][T20979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  452.047712][T20979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  452.089386][T20986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  452.099712][T20988] chnl_net:caif_netlink_parms(): no params data found
[  452.118715][T20986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  452.235016][T20979] hsr_slave_0: entered promiscuous mode
[  452.241545][T20979] hsr_slave_1: entered promiscuous mode
[  452.250351][T20979] debugfs: 'hsr0' already exists in 'hsr'
[  452.256630][T20979] Cannot create hsr debugfs directory
[  452.327715][T20986] team0: Port device team_slave_0 added
[  452.330581][T21074] netlink: 'syz.6.4457': attribute type 2 has an invalid length.
[  452.340807][T20986] team0: Port device team_slave_1 added
[  452.489083][T21016] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.498054][T21016] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.505272][T21016] bridge_slave_0: entered allmulticast mode
[  452.512996][T21016] bridge_slave_0: entered promiscuous mode
[  452.533675][T20988] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.541262][T20988] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.548905][T20988] bridge_slave_0: entered allmulticast mode
[  452.556906][T20988] bridge_slave_0: entered promiscuous mode
[  452.566647][T20988] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.573751][T20988] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.581323][T20988] bridge_slave_1: entered allmulticast mode
[  452.588694][T20988] bridge_slave_1: entered promiscuous mode
[  452.596350][ T5827] Bluetooth: hci6: command tx timeout
[  452.596692][T20986] batman_adv: batadv0: Adding interface: batadv_slave_0
[  452.609221][T20986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  452.635276][T20986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  452.646798][T21016] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.654016][T21016] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.661438][T21016] bridge_slave_1: entered allmulticast mode
[  452.668716][T21016] bridge_slave_1: entered promiscuous mode
[  452.701470][T20986] batman_adv: batadv0: Adding interface: batadv_slave_1
[  452.708585][T20986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  452.736434][T20986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  452.819232][T20988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  452.833219][T21016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  452.850984][T21083] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  452.898113][T20988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  452.918025][ T5827] Bluetooth: hci1: command tx timeout
[  452.934065][T21016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  452.999981][T20986] hsr_slave_0: entered promiscuous mode
[  453.007198][T20986] hsr_slave_1: entered promiscuous mode
[  453.013300][T20986] debugfs: 'hsr0' already exists in 'hsr'
[  453.019430][T20986] Cannot create hsr debugfs directory
[  453.027483][T20988] team0: Port device team_slave_0 added
[  453.057396][T20988] team0: Port device team_slave_1 added
[  453.065182][T21016] team0: Port device team_slave_0 added
[  453.076133][ T5827] Bluetooth: hci2: command tx timeout
[  453.122572][T21016] team0: Port device team_slave_1 added
[  453.146353][ T5827] Bluetooth: hci4: command tx timeout
[  453.154448][T20988] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.161621][T20988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.188326][T20988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.201653][T20988] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.209458][T20988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.236215][T20988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.289037][T21016] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.296763][T21016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.324661][T21016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.337501][T21016] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.344445][T21016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.370518][T21016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.518648][T20988] hsr_slave_0: entered promiscuous mode
[  453.525034][T20988] hsr_slave_1: entered promiscuous mode
[  453.532001][T20988] debugfs: 'hsr0' already exists in 'hsr'
[  453.538111][T20988] Cannot create hsr debugfs directory
[  453.557253][T21016] hsr_slave_0: entered promiscuous mode
[  453.563595][T21016] hsr_slave_1: entered promiscuous mode
[  453.569991][T21016] debugfs: 'hsr0' already exists in 'hsr'
[  453.575704][T21016] Cannot create hsr debugfs directory
[  453.611626][T20979] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  453.660267][T20979] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  453.683493][T20979] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  453.725003][T20979] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  453.826265][T21090] netlink: 'syz.6.4461': attribute type 2 has an invalid length.
[  453.956399][T20986] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  453.993006][T21016] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.016375][T20986] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  454.032582][T20986] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  454.046907][T20986] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  454.072247][T21016] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.139095][T21016] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.205204][T21016] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.242140][T20979] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.277808][T20979] 8021q: adding VLAN 0 to HW filter on device team0
[  454.301871][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.309059][ T5940] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.339481][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.346647][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  454.363807][T20986] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.424550][T20986] 8021q: adding VLAN 0 to HW filter on device team0
[  454.464784][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.472017][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.487024][T21016] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  454.510876][T21016] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  454.526341][  T149] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.533446][  T149] bridge0: port 2(bridge_slave_1) entered forwarding state
[  454.554937][T21016] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  454.568035][T21016] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  454.650284][T20988] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  454.667625][ T5827] Bluetooth: hci6: command tx timeout
[  454.694853][T20988] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  454.715367][T20988] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  454.733489][T20988] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  454.987931][ T5827] Bluetooth: hci1: command tx timeout
[  455.109147][T20979] 8021q: adding VLAN 0 to HW filter on device batadv0
[  455.149644][ T5827] Bluetooth: hci2: command tx timeout
[  455.150017][T21016] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.227707][ T5827] Bluetooth: hci4: command tx timeout
[  455.262465][T20988] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.308323][T21016] 8021q: adding VLAN 0 to HW filter on device team0
[  455.322342][T20986] 8021q: adding VLAN 0 to HW filter on device batadv0
[  455.347035][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.354225][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.373602][T21134] syz.6.4465 uses old SIOCAX25GETINFO
[  455.480171][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.487352][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.514534][T20988] 8021q: adding VLAN 0 to HW filter on device team0
[  455.583243][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.590421][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.651701][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.658885][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.810997][T20979] veth0_vlan: entered promiscuous mode
[  455.874216][T20979] veth1_vlan: entered promiscuous mode
[  456.001155][T20986] veth0_vlan: entered promiscuous mode
[  456.015483][T20979] veth0_macvtap: entered promiscuous mode
[  456.035418][T20986] veth1_vlan: entered promiscuous mode
[  456.063542][T20979] veth1_macvtap: entered promiscuous mode
[  456.122033][T21016] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.150812][T20979] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.170679][T20986] veth0_macvtap: entered promiscuous mode
[  456.208282][T20979] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.220785][T20986] veth1_macvtap: entered promiscuous mode
[  456.264333][ T5940] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.280936][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.292528][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.310069][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.323342][T20986] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.354432][T20986] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.402449][T20988] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.410129][   T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.422832][   T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.457174][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.471037][   T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.563911][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.599595][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.732639][ T2990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.750992][ T5827] Bluetooth: hci6: command tx timeout
[  456.761594][ T2990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.848210][T21016] veth0_vlan: entered promiscuous mode
[  456.856204][ T5940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.870249][ T5940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.942695][T21016] veth1_vlan: entered promiscuous mode
[  457.004466][ T5940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.029474][ T5940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.045452][T21180] bridge0: port 2(ipvlan2) entered blocking state
[  457.053089][T21180] bridge0: port 2(ipvlan2) entered disabled state
[  457.060322][T21180] ipvlan2: entered allmulticast mode
[  457.065639][T21180] bridge0: entered allmulticast mode
[  457.067880][ T5827] Bluetooth: hci1: command tx timeout
[  457.080256][T21180] ipvlan2: left allmulticast mode
[  457.085307][T21180] bridge0: left allmulticast mode
[  457.120782][T20988] veth0_vlan: entered promiscuous mode
[  457.159012][T21016] veth0_macvtap: entered promiscuous mode
[  457.189829][T20988] veth1_vlan: entered promiscuous mode
[  457.218904][T21016] veth1_macvtap: entered promiscuous mode
[  457.227176][ T5827] Bluetooth: hci2: command tx timeout
[  457.291013][T21016] batman_adv: batadv0: Interface activated: batadv_slave_0
[  457.309705][ T5827] Bluetooth: hci4: command tx timeout
[  457.334163][T21185] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4472'.
[  457.349047][T21016] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.375264][ T8851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.501190][ T8851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.519872][ T8851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.584157][ T8851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.647900][T20988] veth0_macvtap: entered promiscuous mode
[  457.675567][T21207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4476'.
[  457.708854][T21208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4476'.
[  457.712221][T20988] veth1_macvtap: entered promiscuous mode
[  457.833846][T21214] netlink: 'syz.7.4478': attribute type 10 has an invalid length.
[  457.874296][T20988] batman_adv: batadv0: Interface activated: batadv_slave_0
[  457.890352][T21219] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4478'.
[  457.899617][T21219] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4478'.
[  457.905614][T21214] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  457.926386][ T5940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.945421][ T5940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.960962][T20988] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.991699][T21222] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4479'.
[  458.030539][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.078492][ T2990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.090002][ T2990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.098852][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.160057][T21221] syzkaller0: entered promiscuous mode
[  458.165557][T21221] syzkaller0: entered allmulticast mode
[  458.183235][ T2990] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.202082][T21226] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4481'.
[  458.247865][T21229] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.255606][T21229] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.310102][T21229] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  458.483097][T21239] netlink: 'syz.7.4483': attribute type 32 has an invalid length.
[  458.826537][ T5827] Bluetooth: hci6: command tx timeout
[  459.974955][ T2990] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.155410][T21255] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4484'.
[  460.168123][T21257] x_tables: duplicate underflow at hook 1
[  460.197043][T21257] IPVS: set_ctl: invalid protocol: 4 172.30.1.8:20001
[  460.198500][T21255] 8021q: adding VLAN 0 to HW filter on device team0
[  460.271901][T21268] xt_NFQUEUE: number of total queues is 0
[  460.298954][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.318266][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.424236][T21273] tap0: tun_chr_ioctl cmd 1074025678
[  460.431164][T21273] tap0: group set to 0
[  460.442971][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.466968][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.646378][T21284] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4493'.
[  460.797663][T21297] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4495'.
[  460.815100][T21292] pim6reg1: entered promiscuous mode
[  460.839919][T21292] pim6reg1: entered allmulticast mode
[  460.885437][T21298] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  461.078733][T21308] syzkaller0: entered promiscuous mode
[  461.084240][T21308] syzkaller0: entered allmulticast mode
[  461.116019][   T30] audit: type=1804 audit(1763105001.578:6): pid=21308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.4499" name="/newroot/1/cgroup.controllers" dev="tmpfs" ino=23 res=1 errno=0
[  461.150339][   T30] audit: type=1800 audit(1763105001.588:7): pid=21308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4499" name="cgroup.controllers" dev="tmpfs" ino=23 res=0 errno=0
[  461.225427][T21315] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.261443][T21317] tipc: Started in network mode
[  461.268244][T21317] tipc: Node identity 5651d8ebc567, cluster identity 4711
[  461.276619][T21317] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  461.292739][T21307] tipc: Resetting bearer <eth:syzkaller0>
[  461.329132][T21307] tipc: Disabling bearer <eth:syzkaller0>
[  461.399709][T21315] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.525524][T21315] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.617079][T21331] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  461.651861][T21331] bond1 (unregistering): Released all slaves
[  461.742184][T21315] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.921533][ T2990] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  461.965659][ T2990] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.031100][   T50] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.085344][  T149] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.104675][T21365] vxcan1: tx address claim with dlc 0
[  462.236437][T21375] syz.7.4517: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  462.269585][T21375] CPU: 1 UID: 0 PID: 21375 Comm: syz.7.4517 Not tainted syzkaller #0 PREEMPT(full) 
[  462.269612][T21375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  462.269622][T21375] Call Trace:
[  462.269630][T21375]  <TASK>
[  462.269637][T21375]  dump_stack_lvl+0x189/0x250
[  462.269668][T21375]  ? __pfx_dump_stack_lvl+0x10/0x10
[  462.269691][T21375]  ? __pfx__printk+0x10/0x10
[  462.269709][T21375]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  462.269733][T21375]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  462.269758][T21375]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  462.269784][T21375]  warn_alloc+0x214/0x310
[  462.269808][T21375]  ? stack_depot_save_flags+0x40/0x860
[  462.269838][T21375]  ? __pfx_warn_alloc+0x10/0x10
[  462.269863][T21375]  ? kasan_save_track+0x3e/0x80
[  462.269884][T21375]  ? __kasan_kmalloc+0x93/0xb0
[  462.269908][T21375]  ? xsk_setsockopt+0x4dc/0x8d0
[  462.269927][T21375]  ? do_sock_setsockopt+0x17c/0x1b0
[  462.269943][T21375]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  462.269967][T21375]  ? do_syscall_64+0xfa/0xfa0
[  462.269987][T21375]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.270015][T21375]  __vmalloc_node_range_noprof+0x125/0x12d0
[  462.270071][T21375]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  462.270105][T21375]  ? __kasan_kmalloc+0x93/0xb0
[  462.270134][T21375]  vmalloc_user_noprof+0xad/0xf0
[  462.270158][T21375]  ? xskq_create+0xbf/0x170
[  462.270180][T21375]  xskq_create+0xbf/0x170
[  462.270204][T21375]  xsk_init_queue+0xb0/0x110
[  462.270227][T21375]  xsk_setsockopt+0x4dc/0x8d0
[  462.270251][T21375]  ? __pfx_xsk_setsockopt+0x10/0x10
[  462.270275][T21375]  ? __pfx_aa_sk_perm+0x10/0x10
[  462.270299][T21375]  ? aa_sock_opt_perm+0xff/0x1b0
[  462.270327][T21375]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  462.270344][T21375]  ? __pfx_xsk_setsockopt+0x10/0x10
[  462.270366][T21375]  do_sock_setsockopt+0x17c/0x1b0
[  462.270389][T21375]  __x64_sys_setsockopt+0x13f/0x1b0
[  462.270413][T21375]  do_syscall_64+0xfa/0xfa0
[  462.270434][T21375]  ? lockdep_hardirqs_on+0x9c/0x150
[  462.270456][T21375]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.270473][T21375]  ? clear_bhb_loop+0x60/0xb0
[  462.270495][T21375]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.270511][T21375] RIP: 0033:0x7f4b07d8f6c9
[  462.270527][T21375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  462.270542][T21375] RSP: 002b:00007f4b05ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  462.270561][T21375] RAX: ffffffffffffffda RBX: 00007f4b07fe5fa0 RCX: 00007f4b07d8f6c9
[  462.270574][T21375] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  462.270585][T21375] RBP: 00007f4b07e11f91 R08: 0000000000000004 R09: 0000000000000000
[  462.270595][T21375] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  462.270606][T21375] R13: 00007f4b07fe6038 R14: 00007f4b07fe5fa0 R15: 00007ffd3d0f99f8
[  462.270639][T21375]  </TASK>
[  462.270646][T21375] Mem-Info:
[  462.575589][T21375] active_anon:4580 inactive_anon:0 isolated_anon:0
[  462.575589][T21375]  active_file:3466 inactive_file:40036 isolated_file:0
[  462.575589][T21375]  unevictable:768 dirty:158 writeback:0
[  462.575589][T21375]  slab_reclaimable:13465 slab_unreclaimable:157960
[  462.575589][T21375]  mapped:43387 shmem:1357 pagetables:1102
[  462.575589][T21375]  sec_pagetables:0 bounce:0
[  462.575589][T21375]  kernel_misc_reclaimable:0
[  462.575589][T21375]  free:1243670 free_pcp:9867 free_cma:0
[  462.622620][T21375] Node 0 active_anon:18320kB inactive_anon:0kB active_file:13864kB inactive_file:159944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:173548kB dirty:628kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17052kB pagetables:4276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  462.658075][T21375] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  462.688734][T21375] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  462.718898][T21375] lowmem_reserve[]: 0 2505 2505 2505 2505
[  462.724647][T21375] Node 0 DMA32 free:1064964kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18320kB inactive_anon:0kB active_file:13864kB inactive_file:159944kB unevictable:1536kB writepending:628kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:22948kB local_pcp:8356kB free_cma:0kB
[  462.761990][T21375] lowmem_reserve[]: 0 0 0 0 0
[  462.766868][T21375] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  462.796972][T21375] lowmem_reserve[]: 0 0 0 0 0
[  462.801905][T21375] Node 1 Normal free:3894356kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16336kB local_pcp:6768kB free_cma:0kB
[  462.837836][T21375] lowmem_reserve[]: 0 0 0 0 0
[  462.842581][T21375] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  462.855243][T21375] Node 0 DMA32: 687*4kB (UM) 357*8kB (UM) 292*16kB (M) 153*32kB (UME) 35*64kB (M) 8*128kB (UME) 8*256kB (M) 8*512kB (UME) 6*1024kB (UM) 3*2048kB (U) 251*4096kB (UM) = 1064964kB
[  462.873211][T21375] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  462.884698][T21375] Node 1 Normal: 81*4kB (UE) 54*8kB (UME) 42*16kB (UME) 176*32kB (UME) 47*64kB (UME) 8*128kB (UME) 3*256kB (UM) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3894356kB
[  462.902881][T21375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  462.912741][T21375] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  462.922279][T21375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  462.932118][T21375] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  462.943638][T21375] 44856 total pagecache pages
[  462.948364][T21375] 0 pages in swap cache
[  462.952518][T21375] Free swap  = 124996kB
[  462.956899][T21375] Total swap = 124996kB
[  462.961042][T21375] 2097051 pages RAM
[  462.964827][T21375] 0 pages HighMem/MovableOnly
[  462.969538][T21375] 424119 pages reserved
[  462.973672][T21375] 0 pages cma reserved
[  463.774422][T21446] __nla_validate_parse: 6 callbacks suppressed
[  463.774435][T21446] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4533'.
[  464.278422][T21464] xt_TCPMSS: Only works on TCP SYN packets
[  464.351438][T21469] netlink: 'syz.6.4540': attribute type 11 has an invalid length.
[  464.360374][T21469] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4540'.
[  464.407158][T21471] syzkaller0: entered promiscuous mode
[  464.416699][T21471] syzkaller0: entered allmulticast mode
[  464.480975][T21478] tipc: Started in network mode
[  464.494045][T21478] tipc: Node identity 3ae4dca54d1a, cluster identity 4711
[  464.501803][T21478] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  464.511479][T21481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4544'.
[  464.536854][T21478] syzkaller0: entered promiscuous mode
[  464.542622][T21481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4544'.
[  464.551729][T21478] syzkaller0: entered allmulticast mode
[  464.563421][ T2990] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  464.573470][ T2990] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  464.585240][T21478] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  464.631418][ T2990] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  464.649389][ T2990] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  464.702537][T21474] tipc: Resetting bearer <eth:syzkaller0>
[  464.717269][T21491] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  464.771904][T21474] tipc: Disabling bearer <eth:syzkaller0>
[  464.839511][T21498] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4548'.
[  464.909963][T21502] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4550'.
[  464.931562][T21505] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4551'.
[  464.947225][T21502] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4550'.
[  464.972679][T21500] netdevsim netdevsim8 netdevsim0: entered promiscuous mode
[  465.083656][T21512] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4553'.
[  465.094390][T21512] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4553'.
[  467.031956][T21553] netlink: 'syz.4.4564': attribute type 1 has an invalid length.
[  468.679483][T21572] x_tables: duplicate underflow at hook 2
[  468.904407][T21591] netlink: 'syz.8.4573': attribute type 12 has an invalid length.
[  468.921591][T21591] __nla_validate_parse: 2 callbacks suppressed
[  468.921610][T21591] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4573'.
[  469.068281][T21598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4575'.
[  469.142817][T21603] Cannot find del_set index 0 as target
[  469.179203][T21603] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4578'.
[  469.193437][T21603] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4578'.
[  469.219420][T21603] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4578'.
[  469.271546][T21603] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4578'.
[  469.295431][T21614] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4581'.
[  469.325204][T21603] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4578'.
[  469.400662][T21603] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4578'.
[  469.428910][T21622] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4584'.
[  469.608430][T21633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  469.954690][T21645] xt_hashlimit: size too large, truncated to 1048576
[  470.339188][T21659] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20003
[  470.370775][T21666] IPv6: NLM_F_CREATE should be specified when creating new route
[  470.409141][T21666] netlink: 'syz.6.4600': attribute type 2 has an invalid length.
[  470.447082][T21666] netlink: 'syz.6.4600': attribute type 11 has an invalid length.
[  470.504900][T21672] netlink: 'syz.7.4604': attribute type 23 has an invalid length.
[  470.738563][T21689] veth1_to_bond: entered allmulticast mode
[  470.762082][T21689] vlan1: entered allmulticast mode
[  470.770873][T21689] veth0_vlan: entered allmulticast mode
[  470.968247][T21694] bond0: (slave bond_slave_1): Releasing backup interface
[  471.004209][T21694] veth1_to_bond (unregistering): left allmulticast mode
[  471.088306][T21697] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  471.102119][T21703] bridge_slave_0: left allmulticast mode
[  471.117054][T21703] bridge_slave_0: left promiscuous mode
[  471.124358][T21713] netlink: 'syz.8.4616': attribute type 32 has an invalid length.
[  471.130367][T21703] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.161448][T21703] bridge_slave_1: left allmulticast mode
[  471.168804][T21703] bridge_slave_1: left promiscuous mode
[  471.174849][T21703] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.193742][T21703] bond0: (slave bond_slave_0): Releasing backup interface
[  471.209267][T21703] bond0: (slave bond_slave_1): Releasing backup interface
[  471.228767][T21703] team0: Port device team_slave_0 removed
[  471.244754][T21703] team0: Port device team_slave_1 removed
[  471.251965][T21703] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  471.259735][T21703] batman_adv: batadv0: Removing interface: batadv_slave_0
[  471.268469][T21703] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  471.276626][T21703] batman_adv: batadv0: Removing interface: batadv_slave_1
[  471.285268][T21703] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  471.305221][T21688] tipc: Resetting bearer <eth:syzkaller0>
[  472.363500][T21730] netlink: 'syz.4.4620': attribute type 21 has an invalid length.
[  472.947216][T21688] tipc: Disabling bearer <eth:syzkaller0>
[  472.957543][T21713] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  472.981301][ T9935] tipc: Node number set to 561278205
[  473.725045][T21773] netlink: zone id is out of range
[  473.734173][T21773] netlink: set zone limit has 4 unknown bytes
[  473.919160][T21781] : entered promiscuous mode
[  473.964885][T21788] netlink: 'syz.9.4638': attribute type 2 has an invalid length.
[  474.163991][T21795] __nla_validate_parse: 75 callbacks suppressed
[  474.164009][T21795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4641'.
[  474.321601][T21805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  474.352597][T21805] syzkaller0: entered promiscuous mode
[  474.369108][T21805] syzkaller0: entered allmulticast mode
[  474.520446][T21816] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4650'.
[  474.558461][T21793] tipc: Resetting bearer <eth:syzkaller0>
[  474.607978][T21793] tipc: Disabling bearer <eth:syzkaller0>
[  474.760219][T21833] dvmrp0: entered allmulticast mode
[  474.850474][ T9925] IPVS: starting estimator thread 0...
[  474.890970][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4659'.
[  474.943665][T21848] tipc: Enabled bearer <udp:s>, priority 10
[  474.949266][T21842] IPVS: using max 30 ests per chain, 72000 per kthread
[  475.004668][T21851] Can't find ip_set type hash:ip,port�net
[  475.031590][T21858] netlink: 'syz.6.4662': attribute type 4 has an invalid length.
[  475.050087][T21855] policy can only be matched on NF_INET_PRE_ROUTING
[  475.050108][T21855] unable to load match
[  475.081198][T21858] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  475.093841][T21858] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  475.102613][T21858] gretap1: entered promiscuous mode
[  475.108269][T21858] gretap1: entered allmulticast mode
[  475.207632][T21863] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  475.214446][T21863] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  475.254903][T21866] netlink: 348 bytes leftover after parsing attributes in process `syz.6.4664'.
[  475.338287][T21869] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4666'.
[  475.870553][T21907] pimreg3: entered allmulticast mode
[  476.065581][   T24] tipc: Node number set to 2469845227
[  476.135059][T21922] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4682'.
[  476.183510][T21925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4684'.
[  476.205958][T21925] netlink: 'syz.6.4684': attribute type 1 has an invalid length.
[  476.268271][T21925] bond1: (slave ip6gretap1): making interface the new active one
[  476.277562][T21925] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  476.285399][T21925] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  476.314316][T21925] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  476.437867][T21931] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4686'.
[  476.448852][T21933] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4688'.
[  476.547966][T21938] netlink: 576 bytes leftover after parsing attributes in process `syz.7.4689'.
[  478.545423][T21979] bridge: RTM_NEWNEIGH with invalid ether address
[  478.949368][T22014] tc_dump_action: action bad kind
[  479.053382][T22022] openvswitch: netlink: Key type 202 is out of range max 32
[  479.313288][T22036] __nla_validate_parse: 5 callbacks suppressed
[  479.313305][T22036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4717'.
[  479.349710][T22036] syzkaller0: entered promiscuous mode
[  479.404360][T22036] syzkaller0: entered allmulticast mode
[  479.547399][T22039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4718'.
[  479.621503][T22042] netlink: 'syz.7.4719': attribute type 39 has an invalid length.
[  479.882014][ T5940] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  479.891552][T22057] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.900759][ T5940] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  480.020963][ T5940] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  480.051164][ T5940] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  480.194733][T22072] netlink: 'syz.7.4730': attribute type 1 has an invalid length.
[  480.263829][T22072] 8021q: adding VLAN 0 to HW filter on device bond3
[  480.322527][T22081] netlink: 'syz.6.4731': attribute type 1 has an invalid length.
[  480.339915][T22081] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4731'.
[  480.388939][T22072] netlink: 'syz.7.4730': attribute type 1 has an invalid length.
[  480.458054][T22078] bond4: option lacp_active: invalid value (4)
[  480.476819][T22078] bond4 (unregistering): Released all slaves
[  480.505325][T22101] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4736'.
[  480.578150][T22072] 8021q: adding VLAN 0 to HW filter on device bond4
[  480.585553][T22095] bond4: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  480.601815][T22098] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4733'.
[  480.623591][T22108] netlink: 'syz.6.4737': attribute type 1 has an invalid length.
[  480.658013][T22108] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  480.751836][T22108] syzkaller0: entered promiscuous mode
[  480.770797][T22108] syzkaller0: entered allmulticast mode
[  480.809018][T22108] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4737'.
[  480.862039][T22118] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4737'.
[  480.887015][T22108] xfrm1: entered promiscuous mode
[  480.899323][T22108] xfrm1: entered allmulticast mode
[  480.932445][T22107] tipc: Resetting bearer <eth:syzkaller0>
[  480.999903][T22133] netlink: 'syz.8.4745': attribute type 1 has an invalid length.
[  481.009871][T22107] tipc: Disabling bearer <eth:syzkaller0>
[  481.022595][T22137] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4746'.
[  481.032146][T22131] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4744'.
[  481.068430][T22133] 8021q: adding VLAN 0 to HW filter on device bond1
[  481.090657][T22140] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4746'.
[  481.114125][T22134] bond1: (slave gretap1): making interface the new active one
[  481.126644][T22134] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  481.342888][T22151] netlink: 'syz.8.4752': attribute type 10 has an invalid length.
[  481.400078][T22155] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  481.562599][T22151] veth1_macvtap: left promiscuous mode
[  481.620567][T22157] 8021q: VLANs not supported on ip6tnl0
[  481.744988][T22166] syzkaller0: entered promiscuous mode
[  481.768757][T22166] syzkaller0: entered allmulticast mode
[  481.860109][T22173] xt_cgroup: invalid path, errno=-2
[  481.863548][T22179] pimreg: entered allmulticast mode
[  482.016494][T22187] netlink: 'syz.6.4762': attribute type 39 has an invalid length.
[  482.896063][T22247] netlink: 'syz.8.4777': attribute type 13 has an invalid length.
[  482.923265][T22247] netlink: 'syz.8.4777': attribute type 17 has an invalid length.
[  483.082357][T22247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  483.182513][T22258] 8021q: adding VLAN 0 to HW filter on device bond2
[  483.192060][T22258] bond1: (slave bond2): making interface the new active one
[  483.200287][T22258] bond1: (slave bond2): Enslaving as an active interface with an up link
[  483.225536][T22261] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  483.238888][T22261] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  483.768433][T22308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  484.266096][ T5829] Bluetooth: hci6: command 0x0405 tx timeout
[  484.298184][T22341] openvswitch: netlink: Flow actions attr not present in new flow.
[  484.344429][T22349] __nla_validate_parse: 12 callbacks suppressed
[  484.344448][T22349] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4807'.
[  484.566767][T22356] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4810'.
[  484.581795][T22356] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  484.592374][T22356] batman_adv: batadv0: Removing interface: batadv_slave_0
[  484.598547][T22364] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4812'.
[  484.611503][T22356] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  484.619787][T22356] batman_adv: batadv0: Removing interface: batadv_slave_1
[  484.695307][T22369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4814'.
[  484.707923][T22369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4814'.
[  484.771649][T22372] syzkaller0: entered promiscuous mode
[  484.782682][T22372] syzkaller0: entered allmulticast mode
[  484.828497][T22379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4817'.
[  484.969027][T22383] netlink: 596 bytes leftover after parsing attributes in process `syz.7.4819'.
[  485.118436][T22395] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4823'.
[  485.128284][T22397] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4824'.
[  485.137287][T22395] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4823'.
[  485.163672][T22395] validate_nla: 3 callbacks suppressed
[  485.163688][T22395] netlink: 'syz.6.4823': attribute type 5 has an invalid length.
[  485.230702][T22403] sctp: [Deprecated]: syz.7.4825 (pid 22403) Use of int in max_burst socket option.
[  485.230702][T22403] Use struct sctp_assoc_value instead
[  485.268614][T22403] x_tables: duplicate underflow at hook 1
[  485.282494][T22403] x_tables: duplicate underflow at hook 1
[  485.317672][T22403] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20003
[  485.483774][T22420] xt_policy: too many policy elements
[  485.528603][T22423] netlink: 'syz.4.4833': attribute type 64 has an invalid length.
[  485.568621][T22423] delete_channel: no stack
[  485.902879][T22452] bridge_slave_0: left allmulticast mode
[  485.909960][T22452] bridge_slave_0: left promiscuous mode
[  485.915783][T22452] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.967733][T22452] bridge_slave_1: left allmulticast mode
[  485.975707][T22452] bridge_slave_1: left promiscuous mode
[  485.999413][T22452] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.027495][T22452] bond0: (slave bond_slave_0): Releasing backup interface
[  486.073344][T22452] team0: Port device team_slave_0 removed
[  486.091650][T22452] team0: Port device team_slave_1 removed
[  486.099404][T22452] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  486.111320][T22452] batman_adv: batadv0: Removing interface: batadv_slave_0
[  486.127467][T22452] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  486.136861][T22452] batman_adv: batadv0: Removing interface: batadv_slave_1
[  486.145965][T22452] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  486.175109][T22463] team0: Mode changed to "roundrobin"
[  486.525416][T22495] syzkaller1: entered promiscuous mode
[  486.532654][T22495] syzkaller1: entered allmulticast mode
[  487.147118][T22538] syzkaller0: entered promiscuous mode
[  487.153852][T22538] syzkaller0: entered allmulticast mode
[  487.760331][T22578] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.901498][T22578] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.940539][T22591] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  487.988618][T22578] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.107488][T22599] netlink: 'syz.9.4880': attribute type 1 has an invalid length.
[  488.119623][T22578] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.449632][   T50] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  488.511694][   T50] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  488.533027][T11816] IPVS: starting estimator thread 0...
[  488.563716][   T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  488.629407][   T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  488.646539][T22632] IPVS: using max 32 ests per chain, 76800 per kthread
[  488.840610][T22643] gretap2: entered promiscuous mode
[  489.014215][T22665] netlink: 'syz.8.4898': attribute type 3 has an invalid length.
[  489.079235][T22668] netlink: 'syz.7.4899': attribute type 18 has an invalid length.
[  489.107580][T22668] netlink: 'syz.7.4899': attribute type 18 has an invalid length.
[  489.112271][T22677] netlink: 'syz.9.4901': attribute type 4 has an invalid length.
[  489.139061][T22677] netlink: 'syz.9.4901': attribute type 83 has an invalid length.
[  489.288210][T22689] xfrm2: entered promiscuous mode
[  489.293476][T22689] xfrm2: entered allmulticast mode
[  489.347970][T22692] __nla_validate_parse: 24 callbacks suppressed
[  489.347987][T22692] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4904'.
[  489.556533][T22698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4906'.
[  489.615713][T22703] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4907'.
[  489.626702][T22703] block nbd4: Unsupported socket: should be TCP or UNIX.
[  489.676103][T22703] netlink: 'syz.8.4907': attribute type 8 has an invalid length.
[  489.862047][T22715] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4911'.
[  490.054871][T22731] netlink: 'syz.8.4916': attribute type 1 has an invalid length.
[  490.115289][T22730] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4916'.
[  490.257060][T22737] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6
[  490.568381][T22763] validate_nla: 1 callbacks suppressed
[  490.568398][T22763] netlink: 'syz.4.4924': attribute type 4 has an invalid length.
[  490.583791][T22763] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4924'.
[  490.627944][T22763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4924'.
[  490.709029][T22768] bridge_slave_0: left allmulticast mode
[  490.726020][T22768] bridge_slave_0: left promiscuous mode
[  490.740715][T22768] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.815043][T22768] bond0: (slave bridge_slave_1): Releasing backup interface
[  490.859911][T22768] bond0: (slave bond_slave_0): Releasing backup interface
[  490.878278][T22781] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4930'.
[  490.895327][T22781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4930'.
[  490.935983][T22781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4930'.
[  490.947925][T22768] bond0: (slave bond_slave_1): Releasing backup interface
[  491.043808][T22768] team0: Port device team_slave_0 removed
[  491.179405][T22768] team0: Port device team_slave_1 removed
[  491.247719][T22768] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  491.314598][T22768] batman_adv: batadv0: Removing interface: batadv_slave_0
[  491.397063][T22768] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  491.443891][T22768] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.472278][T22768] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  491.568832][T22782] syzkaller0: entered promiscuous mode
[  491.574694][T22782] syzkaller0: entered allmulticast mode
[  491.583414][T22776] kthread_run failed with err -4
[  493.543568][T22830] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  495.375679][T22853] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  495.394478][T22853] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  495.404446][T22858] __nla_validate_parse: 1 callbacks suppressed
[  495.404462][T22858] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4940'.
[  495.405003][T22853] netdevsim netdevsim7: Falling back to sysfs fallback for: .
[  495.709897][T22892] syzkaller0: entered promiscuous mode
[  495.716221][T22892] syzkaller0: entered allmulticast mode
[  495.762836][T22885] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4948'.
[  496.380350][T22931] xt_TCPMSS: Only works on TCP SYN packets
[  496.459019][T22937] syzkaller0: entered promiscuous mode
[  496.464524][T22937] syzkaller0: entered allmulticast mode
[  496.476197][T22937] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4963'.
[  496.590202][T22943] syzkaller0: entered promiscuous mode
[  496.597256][T22943] syzkaller0: entered allmulticast mode
[  496.639876][T22946] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4965'.
[  496.650997][T22946] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4965'.
[  496.757103][T22952] bridge0: port 1(syz_tun) entered blocking state
[  496.763950][T22952] bridge0: port 1(syz_tun) entered disabled state
[  496.771451][T22952] syz_tun: entered allmulticast mode
[  496.781793][T22952] syz_tun: entered promiscuous mode
[  496.790253][T22952] bridge0: port 1(syz_tun) entered blocking state
[  496.796989][T22952] bridge0: port 1(syz_tun) entered forwarding state
[  496.890620][T22960] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4970'.
[  496.927769][T22963] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4970'.
[  497.087752][T22970] netlink: 'syz.6.4972': attribute type 13 has an invalid length.
[  497.210574][T22970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  497.392200][T22976] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4973'.
[  497.552809][T22989] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4975'.
[  497.676086][T22995] tipc: Started in network mode
[  497.681692][T22995] tipc: Node identity 0000000000000000ffff, cluster identity 4711
[  497.702857][T23000] netlink: 'syz.8.4983': attribute type 33 has an invalid length.
[  497.712496][T23005] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4981'.
[  497.799548][T23003] bond3: option resend_igmp: invalid value (32767)
[  497.820252][T23003] bond3: option resend_igmp: allowed values 0 - 255
[  497.843557][T23003] bond3 (unregistering): Released all slaves
[  497.934425][T22999] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  498.293323][T23030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  498.399473][T23046] x_tables: unsorted entry at hook 3
[  498.599818][T23062] 8021q: VLANs not supported on vcan0
[  498.681540][T23064] wg1: entered promiscuous mode
[  498.687151][T23064] wg1: entered allmulticast mode
[  528.474780][T23071] __nla_validate_parse: 4 callbacks suppressed
[  528.474796][T23071] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5005'.
[  528.969332][T23098] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5012'.
[  529.096287][T23071] hsr0 speed is unknown, defaulting to 1000
[  529.103620][T23107] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  529.212698][T23112] netlink: 'syz.7.5019': attribute type 1 has an invalid length.
[  529.263641][T23112] 8021q: adding VLAN 0 to HW filter on device bond5
[  529.327206][T23118] 8021q: adding VLAN 0 to HW filter on device bond5
[  529.338383][T23118] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  529.358803][T23118] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  529.434803][T23112] veth5: entered promiscuous mode
[  529.454797][T23112] bond5: (slave veth5): Enslaving as an active interface with a down link
[  529.474599][T23126] vlan0: entered allmulticast mode
[  529.480555][T23126] bond5: entered allmulticast mode
[  529.505435][T23129] tipc: New replicast peer: 255.255.255.255
[  529.512456][T23129] tipc: Enabled bearer <udp:syz2>, priority 10
[  529.525629][T23130] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5023'.
[  529.822996][T23151] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5030'.
[  529.832449][T23152] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  529.852887][T23151] netlink: 260 bytes leftover after parsing attributes in process `syz.9.5030'.
[  529.853867][T23152] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.5029'.
[  529.879098][T23152] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.5029'.
[  529.918501][T23151] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.5030'.
[  530.636705][T23207] bond6: invalid ARP target 0.0.0.0 specified for addition
[  530.644067][T23207] bond6: option arp_ip_target: invalid value (0)
[  530.659481][T23207] bond6 (unregistering): Released all slaves
[  530.661170][T23212] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  530.676769][T23212] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  530.691216][T23212] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  530.812426][T23221] syzkaller0: entered promiscuous mode
[  530.818784][T23221] syzkaller0: entered allmulticast mode
[  532.892583][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5060'.
[  532.916696][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5060'.
[  532.956744][T23268] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  533.002006][T23281] netlink: 'syz.8.5064': attribute type 16 has an invalid length.
[  533.014335][T23279] netlink: 'syz.4.5065': attribute type 2 has an invalid length.
[  533.024798][T23281] netlink: 'syz.8.5064': attribute type 3 has an invalid length.
[  533.039326][T23286] netlink: 'syz.9.5066': attribute type 1 has an invalid length.
[  533.047714][T23286] netlink: 'syz.9.5066': attribute type 1 has an invalid length.
[  533.106247][T23279] nbd: socks must be embedded in a SOCK_ITEM attr
[  533.294872][T23292] syzkaller0: entered promiscuous mode
[  533.301562][T23292] syzkaller0: entered allmulticast mode
[  533.320298][   T30] audit: type=1107 audit(1763105073.778:8): pid=23303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='_ً�5����%��U�A����٠�0�{������w�� �6��7��'
[  537.305411][T23384] syzkaller0: entered promiscuous mode
[  537.326510][T23384] syzkaller0: entered allmulticast mode
[  537.336969][T23401] __nla_validate_parse: 5 callbacks suppressed
[  537.336985][T23401] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5100'.
[  537.349803][T23403] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  537.413628][T23401] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5100'.
[  537.462660][T23409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5104'.
[  539.382369][T23455] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5111'.
[  539.448326][T23456] Cannot find add_set index 1 as target
[  539.465001][T23456] SET target dimension over the limit!
[  539.507243][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5115'.
[  539.707984][T23479] netlink: 'syz.8.5119': attribute type 21 has an invalid length.
[  539.713068][T23481] netlink: 'syz.7.5118': attribute type 10 has an invalid length.
[  539.718401][T23479] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5119'.
[  539.743143][T23481] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  540.095657][T23452] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  540.102457][T23452] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  540.141222][T23452] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  540.148130][T23452] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  540.161048][T23452] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  540.167134][T23452] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  540.180298][T23452] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  540.187020][T23452] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  540.197747][T23452] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  540.203663][T23452] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  540.535620][T23493] syzkaller0: entered promiscuous mode
[  540.547261][T23497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5123'.
[  540.557287][T23493] syzkaller0: entered allmulticast mode
[  540.571714][T23497] bond0: entered promiscuous mode
[  540.578228][T23497] bond_slave_0: entered promiscuous mode
[  540.584087][T23497] bond_slave_1: entered promiscuous mode
[  540.595375][T23497] batadv0: entered promiscuous mode
[  540.606675][T23497] debugfs: 'hsr1' already exists in 'hsr'
[  540.612579][T23497] Cannot create hsr debugfs directory
[  540.619902][T23498] syzkaller0: entered promiscuous mode
[  540.625421][T23498] syzkaller0: entered allmulticast mode
[  540.663940][T23506] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5127'.
[  540.747952][T23512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5128'.
[  540.776939][T23511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5128'.
[  542.304911][T23495] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  542.333548][T23515] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  542.337735][T23519] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  542.523318][T23547] __nla_validate_parse: 1 callbacks suppressed
[  542.523335][T23547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5138'.
[  542.639069][T23554] syzkaller0: entered promiscuous mode
[  542.665050][T23554] syzkaller0: entered allmulticast mode
[  542.681217][T23558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5140'.
[  542.755386][T23554] netlink: 'syz.9.5139': attribute type 1 has an invalid length.
[  542.840946][T23565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  542.869561][T23574] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5146'.
[  542.998053][T23579] syzkaller0: entered promiscuous mode
[  543.003864][T23579] syzkaller0: entered allmulticast mode
[  543.011711][T23553] tipc: Resetting bearer <eth:syzkaller0>
[  543.041655][T23576] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5145'.
[  543.052922][T23553] tipc: Disabling bearer <eth:syzkaller0>
[  543.062972][T23576] netlink: 'syz.8.5145': attribute type 8 has an invalid length.
[  544.924080][T23592] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5149'.
[  545.144295][T23633] netlink: 'syz.6.5158': attribute type 1 has an invalid length.
[  545.205159][T23644] syzkaller1: entered promiscuous mode
[  545.218432][T23644] syzkaller1: entered allmulticast mode
[  545.258105][T23645] syzkaller1: left promiscuous mode
[  545.279007][T23645] syzkaller1: left allmulticast mode
[  545.288590][T23656] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5164'.
[  545.323620][T23659] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5163'.
[  545.433353][T23667] team0: Port device bridge0 added
[  545.509679][T23670] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5168'.
[  545.674464][T23673] syzkaller0: entered promiscuous mode
[  545.695975][T23673] syzkaller0: entered allmulticast mode
[  546.001776][T23689] netlink: 'syz.8.5173': attribute type 13 has an invalid length.
[  546.063711][T23690] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5174'.
[  547.414723][T23689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  547.483436][T23698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  547.500486][T23698] syzkaller0: entered promiscuous mode
[  547.507738][T23698] syzkaller0: entered allmulticast mode
[  547.566242][T23698] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  547.613600][T23698] tipc: Resetting bearer <eth:syzkaller0>
[  547.623355][T23701] netlink: 'syz.9.5177': attribute type 7 has an invalid length.
[  547.636309][T23701] netlink: 140 bytes leftover after parsing attributes in process `syz.9.5177'.
[  547.656603][T23697] tipc: Resetting bearer <eth:syzkaller0>
[  547.698406][T23707] netlink: 'syz.9.5177': attribute type 11 has an invalid length.
[  547.710145][T23707] netlink: 224 bytes leftover after parsing attributes in process `syz.9.5177'.
[  547.712532][T23697] tipc: Disabling bearer <eth:syzkaller0>
[  547.817333][T23715] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5183'.
[  547.827517][T23715] netlink: 'syz.6.5183': attribute type 7 has an invalid length.
[  547.835395][T23715] netlink: 'syz.6.5183': attribute type 8 has an invalid length.
[  547.863671][T23715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5183'.
[  548.073320][T23723] veth0_to_team: entered promiscuous mode
[  548.269730][T23738] netlink: 'syz.9.5191': attribute type 10 has an invalid length.
[  548.328400][T23740] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  548.424822][T23738] 8021q: adding VLAN 0 to HW filter on device team0
[  548.459071][T23738] bond0: (slave team0): Enslaving as an active interface with an up link
[  548.460578][T23747] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  548.869196][T23763] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5199'.
[  549.553919][T23821] batadv_slave_1: entered promiscuous mode
[  549.660648][T23820] batadv_slave_1: left promiscuous mode
[  549.718722][T23829] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5219'.
[  549.977085][T23843] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5225'.
[  550.007792][T23846] Bluetooth: MGMT ver 1.23
[  550.098486][T23850] batman_adv: batadv0: Adding interface: dummy0
[  550.104773][T23850] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.165158][T23850] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  550.185226][T23852] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5227'.
[  550.390480][T23874] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  550.409518][T23874] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  550.484721][T23884] block nbd5: Unsupported socket: should be TCP or UNIX.
[  550.500328][T23886] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  550.508459][T23886] syzkaller0: entered promiscuous mode
[  550.514023][T23886] syzkaller0: entered allmulticast mode
[  550.612100][T23889] tipc: Resetting bearer <eth:syzkaller0>
[  550.621175][T23885] tipc: Resetting bearer <eth:syzkaller0>
[  550.640408][T23885] tipc: Disabling bearer <eth:syzkaller0>
[  550.788185][T23896] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  550.796420][T23896] syzkaller0: entered promiscuous mode
[  550.802116][T23896] syzkaller0: entered allmulticast mode
[  550.836796][T23896] tipc: Resetting bearer <eth:syzkaller0>
[  550.845312][T23896] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5241'.
[  550.857338][T23895] tipc: Resetting bearer <eth:syzkaller0>
[  550.879136][T23895] tipc: Disabling bearer <eth:syzkaller0>
[  550.900846][T23898] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  550.912349][T23898] bond6 (unregistering): Released all slaves
[  551.132089][T23910] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5246'.
[  551.422308][T23930] geneve2: entered promiscuous mode
[  551.562061][T23943] netlink: 'syz.6.5256': attribute type 1 has an invalid length.
[  551.688205][T23943] bond3 (unregistering): Released all slaves
[  551.956639][T23964] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  552.235969][T23975] syzkaller1: entered promiscuous mode
[  552.256391][T23975] syzkaller1: entered allmulticast mode
[  552.563487][T24003] netlink: 'syz.6.5278': attribute type 8 has an invalid length.
[  552.683962][T24010] __nla_validate_parse: 12 callbacks suppressed
[  552.683980][T24010] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5279'.
[  552.742264][T24010] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.844688][T24010] bridge_slave_1 (unregistering): left allmulticast mode
[  552.874018][T24010] bridge_slave_1 (unregistering): left promiscuous mode
[  552.892184][T24010] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.137707][T24033] team0: Device wireguard0 is up. Set it down before adding it as a team port
[  553.526343][T24058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5290'.
[  553.603231][T24058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5290'.
[  553.738641][T24069] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  553.759400][T24069] syzkaller0: entered promiscuous mode
[  553.775075][T24069] syzkaller0: entered allmulticast mode
[  553.863216][T24069] tipc: Resetting bearer <eth:syzkaller0>
[  553.892221][T24068] tipc: Resetting bearer <eth:syzkaller0>
[  553.906837][T24092] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5298'.
[  553.938961][T24094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5299'.
[  553.979614][T24068] tipc: Disabling bearer <eth:syzkaller0>
[  554.079276][T24100] netlink: 'syz.4.5301': attribute type 1 has an invalid length.
[  554.161926][T24100] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.5301'.
[  554.247992][T24111] netlink: 'syz.9.5305': attribute type 1 has an invalid length.
[  554.546602][T24132] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5310'.
[  554.590381][T24137] smc: net device vcan0 applied user defined pnetid SYZ1
[  554.682926][T24150] policy can only be matched on NF_INET_PRE_ROUTING
[  554.682939][T24150] unable to load match
[  554.807082][T24157] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5316'.
[  555.019939][T24163] pimreg3: entered allmulticast mode
[  555.135414][T24170] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5320'.
[  555.153069][T24170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  555.429786][T24186] can: request_module (can-proto-0) failed.
[  555.531401][T24190] netlink: 14544 bytes leftover after parsing attributes in process `syz.6.5327'.
[  555.587879][T24190] netlink: 'syz.6.5327': attribute type 11 has an invalid length.
[  555.911993][T24220] netlink: 'syz.6.5334': attribute type 14 has an invalid length.
[  555.931992][T24220] netlink: 'syz.6.5334': attribute type 14 has an invalid length.
[  556.186506][T24238] veth1_macvtap: entered promiscuous mode
[  556.192811][T24238] macsec0: entered promiscuous mode
[  556.206495][T24238] veth1_macvtap: left promiscuous mode
[  556.530369][T24253] syzkaller0: entered promiscuous mode
[  556.557134][T24253] syzkaller0: entered allmulticast mode
[  558.356198][T24294] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  578.906334][   T31] INFO: task syz.0.3975:19454 blocked for more than 143 seconds.
[  578.922535][   T31]       Not tainted syzkaller #0
[  578.927884][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  578.936668][   T31] task:syz.0.3975      state:D stack:24392 pid:19454 tgid:19453 ppid:15684  task_flags:0x400140 flags:0x00080002
[  578.948881][   T31] Call Trace:
[  578.952168][   T31]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  578.955086][   T31]  __schedule+0x1798/0x4cc0
[  578.960233][   T31]  ? validate_chain+0x897/0x2140
[  578.965499][   T31]  ? __lock_acquire+0xab9/0xd20
[  578.970866][   T31]  ? __pfx___schedule+0x10/0x10
[  578.976279][   T31]  ? schedule+0x91/0x360
[  578.980552][   T31]  schedule+0x165/0x360
[  578.984718][   T31]  schedule_timeout+0x9a/0x270
[  579.035981][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  579.041417][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  579.105812][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  579.111070][   T31]  ? wait_for_completion+0x267/0x5d0
[  579.146119][   T31]  wait_for_completion+0x2bf/0x5d0
[  579.151295][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  579.176249][   T31]  ? up_write+0x1c4/0x420
[  579.180650][   T31]  ? remove_client_context+0xc0/0x1e0
[  579.206087][   T31]  disable_device+0x1c6/0x320
[  579.210820][   T31]  ? __pfx_disable_device+0x10/0x10
[  579.236140][   T31]  __ib_unregister_device+0x2cb/0x3f0
[  579.241570][   T31]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  579.265869][   T31]  ib_unregister_device_and_put+0xb8/0xf0
[  579.271652][   T31]  nldev_dellink+0x2d1/0x320
[  579.306137][   T31]  ? __pfx_nldev_dellink+0x10/0x10
[  579.335870][   T31]  ? apparmor_capable+0x137/0x1b0
[  579.340949][   T31]  ? bpf_lsm_capable+0x9/0x20
[  579.366578][   T31]  ? security_capable+0x7e/0x2e0
[  579.371587][   T31]  ? __pfx_nldev_dellink+0x10/0x10
[  579.396428][   T31]  rdma_nl_rcv+0x6ae/0x980
[  579.400907][   T31]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  579.416929][   T31]  ? __lock_acquire+0xab9/0xd20
[  579.421854][   T31]  ? netlink_deliver_tap+0x2e/0x1b0
[  579.447850][   T31]  netlink_unicast+0x82f/0x9e0
[  579.452684][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  579.495865][   T31]  ? netlink_sendmsg+0x642/0xb30
[  579.500844][   T31]  ? skb_put+0x11b/0x210
[  579.505097][   T31]  netlink_sendmsg+0x805/0xb30
[  579.530765][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  579.536209][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  579.541171][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  579.565824][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  579.571157][   T31]  __sock_sendmsg+0x21c/0x270
[  579.585907][   T31]  ____sys_sendmsg+0x505/0x830
[  579.590734][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  579.596320][   T31]  ? import_iovec+0x74/0xa0
[  579.600849][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  579.605539][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  579.610896][   T31]  ? __fget_files+0x2a/0x420
[  579.615580][   T31]  ? __fget_files+0x3a0/0x420
[  579.620658][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  579.625614][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  579.631215][   T31]  ? do_syscall_64+0xbe/0xfa0
[  579.636831][   T31]  do_syscall_64+0xfa/0xfa0
[  579.641349][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  579.648071][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.654156][   T31]  ? clear_bhb_loop+0x60/0xb0
[  579.659268][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.665173][   T31] RIP: 0033:0x7f3296d8f6c9
[  579.669675][   T31] RSP: 002b:00007f3297c18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  579.678934][   T31] RAX: ffffffffffffffda RBX: 00007f3296fe5fa0 RCX: 00007f3296d8f6c9
[  579.687702][   T31] RDX: 0000000024000018 RSI: 00002000000005c0 RDI: 0000000000000005
[  579.695692][   T31] RBP: 00007f3296e11f91 R08: 0000000000000000 R09: 0000000000000000
[  579.703818][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  579.712318][   T31] R13: 00007f3296fe6038 R14: 00007f3296fe5fa0 R15: 00007ffde3284128
[  579.720493][   T31]  </TASK>
[  579.737814][   T31] 
[  579.737814][   T31] Showing all locks held in the system:
[  579.745564][   T31] 4 locks held by kworker/u8:0/12:
[  579.774810][   T31]  #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  579.805928][   T31]  #1: ffffc90000117ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  579.819230][   T31]  #2: ffffffff8f2be870 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820
[  579.828686][   T31]  #3: ffff88805390c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  579.840017][   T31] 1 lock held by khungtaskd/31:
[  579.844866][   T31]  #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  579.855177][   T31] 2 locks held by getty/5584:
[  579.860068][   T31]  #0: ffff88802fe340a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  579.870035][   T31]  #1: ffffc900036ce2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  579.880586][   T31] 3 locks held by kworker/0:8/9908:
[  579.886030][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  579.897249][   T31]  #1: ffffc9000f37fba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  579.907919][   T31]  #2: ffffffff8df430f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  579.918877][   T31] 3 locks held by kworker/0:15/9925:
[  579.924174][   T31] 2 locks held by syz.0.3975/19454:
[  579.929526][   T31]  #0: ffffffff99b658f8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  579.959521][   T31]  #1: ffff88805390c700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  579.971334][   T31] 1 lock held by syz-executor/20233:
[  579.980402][   T31]  #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  579.990476][   T31] 2 locks held by syz.5.4231/20291:
[  579.995679][   T31]  #0: ffffffff8f2be870 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  580.005264][   T31]  #1: ffff88805390c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  580.017740][   T31] 1 lock held by syz-executor/20979:
[  580.023027][   T31]  #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  580.032370][   T31] 2 locks held by syz-executor/20986:
[  580.038401][   T31]  #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  580.047445][   T31]  #1: ffffffff8df430f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  580.058833][   T31] 1 lock held by syz-executor/20988:
[  580.064121][   T31]  #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  580.075411][   T31] 
[  580.078162][   T31] =============================================
[  580.078162][   T31] 
[  580.086987][   T31] NMI backtrace for cpu 1
[  580.087002][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  580.087020][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  580.087030][   T31] Call Trace:
[  580.087037][   T31]  <TASK>
[  580.087045][   T31]  dump_stack_lvl+0x189/0x250
[  580.087073][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  580.087093][   T31]  ? __pfx__printk+0x10/0x10
[  580.087139][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  580.087160][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  580.087180][   T31]  ? __pfx__printk+0x10/0x10
[  580.087211][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  580.087236][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  580.087256][   T31]  watchdog+0xf60/0xfa0
[  580.087277][   T31]  ? watchdog+0x1e2/0xfa0
[  580.087299][   T31]  kthread+0x711/0x8a0
[  580.087322][   T31]  ? __pfx_watchdog+0x10/0x10
[  580.087336][   T31]  ? __pfx_kthread+0x10/0x10
[  580.087357][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  580.087377][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  580.087395][   T31]  ? __pfx_kthread+0x10/0x10
[  580.087415][   T31]  ret_from_fork+0x4bc/0x870
[  580.087434][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  580.087457][   T31]  ? __switch_to_asm+0x39/0x70
[  580.087470][   T31]  ? __switch_to_asm+0x33/0x70
[  580.087482][   T31]  ? __pfx_kthread+0x10/0x10
[  580.087502][   T31]  ret_from_fork_asm+0x1a/0x30
[  580.087532][   T31]  </TASK>
[  580.087539][   T31] Sending NMI from CPU 1 to CPUs 0:
[  580.236423][    C0] NMI backtrace for cpu 0
[  580.236438][    C0] CPU: 0 UID: 0 PID: 8851 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  580.236457][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  580.236467][    C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[  580.236495][    C0] RIP: 0010:__lock_acquire+0x5/0xd20
[  580.236513][    C0] Code: e9 c0 ee ab 09 cc 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 <41> 55 41 54 53 48 83 ec 30 48 89 fb 65 48 8b 3c 25 08 50 6e 92 45
[  580.236526][    C0] RSP: 0018:ffffc9000b14f778 EFLAGS: 00000006
[  580.236538][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002
[  580.236548][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8df3d660
[  580.236558][    C0] RBP: ffffffff8b0fd4f0 R08: 0000000000000000 R09: 0000000000000000
[  580.236568][    C0] R10: dffffc0000000000 R11: ffffed10044f3d17 R12: 0000000000000002
[  580.236579][    C0] R13: ffffffff8df3d660 R14: 0000000000000000 R15: 0000000000000246
[  580.236590][    C0] FS:  0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000
[  580.236603][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  580.236613][    C0] CR2: 0000562e6d5ae000 CR3: 000000000dd38000 CR4: 00000000003526f0
[  580.236628][    C0] Call Trace:
[  580.236634][    C0]  <TASK>
[  580.236641][    C0]  ? batadv_iv_ogm_schedule+0x430/0xf00
[  580.236660][    C0]  lock_acquire+0x120/0x360
[  580.236674][    C0]  ? batadv_iv_ogm_schedule+0x430/0xf00
[  580.236696][    C0]  ? batadv_iv_ogm_schedule+0x430/0xf00
[  580.236718][    C0]  batadv_iv_ogm_schedule+0x454/0xf00
[  580.236736][    C0]  ? batadv_iv_ogm_schedule+0x430/0xf00
[  580.236761][    C0]  ? batadv_iv_ogm_schedule+0x430/0xf00
[  580.236780][    C0]  ? __pfx_batadv_iv_ogm_schedule+0x10/0x10
[  580.236800][    C0]  ? __lock_acquire+0xab9/0xd20
[  580.236819][    C0]  batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0
[  580.236843][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  580.236859][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  580.236876][    C0]  process_scheduled_works+0xae1/0x17b0
[  580.236903][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  580.236927][    C0]  worker_thread+0x8a0/0xda0
[  580.236943][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  580.236966][    C0]  ? __kthread_parkme+0x7b/0x200
[  580.236986][    C0]  kthread+0x711/0x8a0
[  580.237005][    C0]  ? __pfx_worker_thread+0x10/0x10
[  580.237020][    C0]  ? __pfx_kthread+0x10/0x10
[  580.237038][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  580.237056][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  580.237074][    C0]  ? __pfx_kthread+0x10/0x10
[  580.237091][    C0]  ret_from_fork+0x4bc/0x870
[  580.237108][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  580.237126][    C0]  ? __switch_to_asm+0x39/0x70
[  580.237139][    C0]  ? __switch_to_asm+0x33/0x70
[  580.237158][    C0]  ? __pfx_kthread+0x10/0x10
[  580.237176][    C0]  ret_from_fork_asm+0x1a/0x30
[  580.237197][    C0]  </TASK>
[  580.607048][T20988] bridge0: port 1(syz_tun) entered disabled state
[  580.625439][T20988] syz_tun (unregistering): left allmulticast mode
[  580.633484][T20988] syz_tun (unregistering): left promiscuous mode
[  580.641296][T20988] bridge0: port 1(syz_tun) entered disabled state