last executing test programs:

4m35.522190767s ago: executing program 4 (id=4057):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c0000000b0a010300000000000000000a0000020900010073797a31000000000c0000010000000000000000000100000a00"/84], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e0000001000000"], 0x88}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r6 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000500)={0x3, 0x4}, 0x4)
sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300", @ANYRES32=r5, @ANYBLOB="08001b"], 0x30}}, 0x0)

4m35.332672976s ago: executing program 4 (id=4059):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040)=ANY=[], 0x4)
syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@canfd={0xd, {{0x1, 0x0, 0x0, 0x1}, 0x25, 0x1, 0x0, 0x0, "8335126e052893e2a35cb143a5f60bb0d202d9c0a04ee43553245a001fc35d54464a52fc17e835f1c12689f58fa9e79b52ea04eab7cac7f06ca2373c3bad5d9b"}}}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340"], 0x64}}, 0x0)

4m35.199405543s ago: executing program 4 (id=4061):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd}, 0x10}, 0x94)

4m35.151798756s ago: executing program 4 (id=4062):
r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84)
sendto$inet(r0, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010102}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x4e22, @multicast1}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000100)={0x5, {{0x2, 0x4e24, @multicast2}}}, 0x88)
syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2001000aaaaaaaaaaaa0800450042948121ab0028006400000402907800000000e000000111009078e000000200010001000000"], 0x0)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x45, &(0x7f00000001c0)}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f000000a580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000000d0aab000000000000000100"/27], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8080)
sendmsg$NFT_MSG_GETFLOWTABLE(r6, 0x0, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYBLOB="05"], 0x10)
socket$kcm(0x2b, 0x1, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000023c0)={'pimreg1\x00', <r10=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r10, @ANYBLOB="200003800400010010000400004017b40200000000eb00000800020049"], 0x40}}, 0x0)
sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=' %', 0x2}, {&(0x7f0000000400)="604b6b896a2f76535a1962881a6b9f2f156bd7132d829bd20c1d368b36445f727b52473884ab543b3c7cfa311af0125627e9", 0x73}], 0x2, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20, 0x20048090}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}}, 0x0)

4m32.402572758s ago: executing program 4 (id=4069):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c0000000b0a010300000000000000000a0000020900010073797a31000000000c0000010000000000000000000100000a00"/84], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e0000001000000"], 0x88}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r6 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000500)={0x3, 0x4}, 0x4)
sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300", @ANYRES32=r5, @ANYBLOB="08001b"], 0x30}}, 0x0)

4m32.134213167s ago: executing program 4 (id=4071):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59cf0000000010000000080000001400018006000100020000000800050003"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0)
bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r3, 0xa63)
close(r4)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x68, r8, 0x200, 0x123, 0x234, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b296de8b56f9caa0e1f6b505d415d92ce9c71aa48f1d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x68}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_GET(r9, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x800)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002700090024bd700000dcdf25060000006f536f1b71fdc23f9c75b3d726782b331550b80f59784853159fb77e5bcfe395dcfef9779aaeeac879e14eeb12b54d7f04a545bf4364f25d0278e0bfeaf6be9aad8c6c45e5be477b18f634dc4b308c3c19599a9a32cd46c331ef8f4a3a1c3845d035b70e73"], 0x14}}, 0x4040080)

4m17.059257004s ago: executing program 32 (id=4071):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59cf0000000010000000080000001400018006000100020000000800050003"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0)
bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r3, 0xa63)
close(r4)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x68, r8, 0x200, 0x123, 0x234, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b296de8b56f9caa0e1f6b505d415d92ce9c71aa48f1d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x68}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_GET(r9, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x800)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002700090024bd700000dcdf25060000006f536f1b71fdc23f9c75b3d726782b331550b80f59784853159fb77e5bcfe395dcfef9779aaeeac879e14eeb12b54d7f04a545bf4364f25d0278e0bfeaf6be9aad8c6c45e5be477b18f634dc4b308c3c19599a9a32cd46c331ef8f4a3a1c3845d035b70e73"], 0x14}}, 0x4040080)

2m44.659568288s ago: executing program 5 (id=5007):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000fe03a3b6a5941d7d26f469848b21fcc4b1cd6274376cdec73b02b678cc457a8f8c2506bb6f41ba4a849eba167cc45e8acb15982fb7c54d212bb887adf220cbab995ca02a4c4b6d46811a27d5296f6df3db952b6c7c1f304aaa3c8cd791f9c5759395d3d9ae54c1cfed9f3157b64571a8edd3a2bff262a136f42c060ee89cd81137cd37a66e09979620fe8c8057c765f060969723aefa0fd8e2a78981e9247c16403375b7", @ANYRES16=r3, @ANYRES64=r0, @ANYRES32=r2, @ANYBLOB, @ANYRESOCT=r2, @ANYRESDEC=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4004010)
syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r9, 0x6, 0x19, 0x0, &(0x7f0000000000))
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40)
sendmsg$NFT_BATCH(r10, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000080000000a0000090900010073797a31000000000900020073797a31000000002c0000000b0a010400000000000000000a00000209000100757b7a05000000000c0010400000000000000002140000001100010000000000000000000100000a"], 0x80}, 0x1, 0x0, 0x0, 0x40091}, 0x40)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24040005}, 0xc001)
ioctl$sock_inet_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000040)={'erspan0\x00', {0x2, 0x4e23, @remote}})

2m44.168636966s ago: executing program 5 (id=5014):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
r0 = socket(0x10, 0x1, 0xfff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendto$packet(r0, &(0x7f0000000080)="0db0a49d411d721cb652c26acd46ebc4", 0x10, 0x1, &(0x7f0000000200)={0x11, 0x11, r1, 0x1, 0x9c, 0x6, @remote}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r2 = socket$netlink(0x10, 0x3, 0xb)
sendmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
preadv(r3, 0x0, 0x0, 0x6, 0x433f)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001000010409bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a3c001280110001006272696467655f736c617665000000002400058005001d000000000006001f00d5000000050008000000000005001c0001000000140003006272696467655f736c6176655f30"], 0x70}, 0x1, 0x0, 0x0, 0x20044010}, 0x44800)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0)

2m42.512511314s ago: executing program 5 (id=5026):
r0 = socket(0x11, 0x3, 0x0)
write(r0, &(0x7f0000000200)="5f2aa421e77c5e062fc7219f6287750abaa184cd854fcc55aec0aa8f21c3fb860a1e1b60408c1c42b8399837601597b8d30fe5086fe5a4076eada3e4c701bdbbd16e2c8a5e7e203e3456deb1e39c89482718511c6cd926b26ba5d3f321322f886c8eef4122f51ebc55df0025f3ddbc4ad7bd5ee9d1cb73591f7ed899d379474d45cd538343e469c30db93823f30f6c2bcce2ba1d7d02c4e1d8d4d76211bffec7581992d6", 0xa4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="100029c07000fedbdf254f1d000008003100622f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x40010)
write(r0, &(0x7f0000000140)="9a408d3f994f7320bc5f4776bceadcb4a51338e6a0b864caa8aa598799908c7fe604abd64239fe10650bbab022bc53067f76005917a2489ed6b60ec2d0ea14ad9c6cce2ea9ee8bf97cec58ed422ada042d9e11aa02c406973af0dac77066c6d287a91b145e21ad31655372c63be0e51b1c01a669c743b90d5ef6ff263b37f5c5ad46c58efc6b9c4735c90fd34d97c17c42d6a1839302938da4c9eabcbd08286d2d31fa8125c8c4d73b", 0xa9)
r3 = socket$netlink(0x10, 0x3, 0x4)
write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

2m42.192816795s ago: executing program 5 (id=5030):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000000, 0x0, 0xff, 0x1, 0xfffc}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000002c0)=0x100000, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd02d}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1200000}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x82}, 0x4040000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd1, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10)
sendmsg$kcm(r5, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x10, 0x117, 0x4}], 0x10}, 0x20000001)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m41.794719201s ago: executing program 5 (id=5033):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000000f7ffffbe0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x8, 0x3, 0x5, 0x4, 0x0, 0x3ff, 0x8000, 0x2, 0x0, 0x10, 0x8, 0x6, 0xffffffff, 0x7f, 0x1, 0xfff, 0x6, 0x514f, 0x401, 0x6, 0x9, 0x3}})
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xc}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffffff}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x28}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xc, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000801)

2m41.580567819s ago: executing program 5 (id=5038):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
socket$kcm(0x29, 0x7, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='syzkaller\x00', 0x4}, 0x94)

1m20.890235437s ago: executing program 33 (id=5038):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
socket$kcm(0x29, 0x7, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='syzkaller\x00', 0x4}, 0x94)

1m17.645406512s ago: executing program 3 (id=5179):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd755}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd755}, 0x94) (async)

1m17.308977089s ago: executing program 3 (id=5183):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x6c}, 0x0, @in=@multicast1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0xa, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0x23c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060086dd0000100007007f0000017f0000013a004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x422, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x24040040)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x19, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x79269}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40880}, 0x8040)

1m16.908302864s ago: executing program 3 (id=5187):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000180)=0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="3414379746dccd61c38e882b959f989d0000530877067fff3a643f46496f766c21fd9b999361e5e2bbe56e0ac7b42fa5e66d1f74d6703a33da7b80918bca57deab48e3d6b2672cb88a9038afd2fc5fab223526ab7bb2104e", @ANYRES8=r2, @ANYBLOB="010000000000006c5a76dd0196c27e0300", @ANYRES32=r3, @ANYBLOB="18005e800c000100fcfffffffdffffff0800020000800000"], 0x34}, 0x1, 0x0, 0x0, 0xc01}, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0) (async, rerun: 32)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) (rerun: 32)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20) (async, rerun: 64)
recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/112, 0x70}], 0x1}}], 0x2, 0x142, 0x0) (async, rerun: 64)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r7 = socket(0x10, 0x3, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002dc0)=@newtfilter={0x68, 0x28, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_vlan={0x30, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0xfffffffd}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r8}, @IFLA_BOND_TLB_DYNAMIC_LB={0xfffffffffffffe5c, 0x1b, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x1}]}}}]}, 0x54}}, 0x0)

1m16.436667442s ago: executing program 3 (id=5195):
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000000fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x153}}]}}, 0x0, 0x3e, 0x0, 0x1, 0x4863dbfa}, 0x28)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x44, r4, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x44, r4, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0)
sendmsg$NFT_BATCH(r2, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8115}, 0x200000c0) (async)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8115}, 0x200000c0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x8}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0)

1m16.097318451s ago: executing program 3 (id=5199):
bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000005c0)=[{0x4, 0x1, 0xc}, {0x0, 0x5, 0xe, 0xb}, {0x4, 0x1, 0xc, 0x5}, {0x7, 0x1, 0xf, 0xb}, {0x5, 0xb6, 0x5, 0x8}, {0x4, 0x1, 0x3, 0x8}, {0x2, 0x5, 0x2, 0x4}, {0x2, 0x5, 0xa, 0x1}, {0x3, 0x1, 0xc, 0x6}, {0x2, 0x1, 0xa, 0x6}], 0x10, 0x7}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffb, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0x40, 0x8, 0x4000004, 0xfffffe00, 0x5, 0x0, 0xb, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}})

1m14.96486231s ago: executing program 3 (id=5206):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000002f00090028bd3000000000000b0000000500110000000000b41fc176bc8c0f042c176f05b822bda8855487ca1eb62d04e5c00cbc10718b50a2f8e86ad41ddb8bce1cd08d0a674c7574e92acb32cf340f63422f5613e4fe36d3b496a804128f68614bbf9e4657df3d353b6291f63453c8f12b47bb0b05fa24a22fc0739b63a2377b3acb3dcfc31090a80fc00f8dc29faffd43638e023310b4d50c45c690ee5ad4c4b6c096d519754622ac38c633832c841e60e30f64c73c1f542426ffdcb53a0083241be947b415a19f572b822e"], 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='freezer.state\x00', 0x0, 0x0)
write$tun(r7, &(0x7f0000000380)={@void, @val={0x2, 0x0, 0x6, 0x1ff, 0x0, 0x4}, @eth={@random="37ad7a8af3c7", @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x5aaa}, {0x4}, {0x9, 0x0, 0x1}, {0x3df}], @llc={@llc={0xfc, 0x8e, "d8", "4acf2e0f60143650fd1f15b3491d1470d44755bb8ddbcc8b81725d368f5884c0e52310a46f10c9a657f9474580e284f4707355bccf258f5748a4d1a516f684455c3e474322f3a074ce718dce4ae94166df7b6578dbdbcf2ceae7390df34043c0bd09588fdf7435d32f9cf4255fca970bd3c77d729c63f83fc87bb2ea0be250678e99f0691e8e25108fbcabf899d93bac4453c6845504e3cd4dd482f8b09730f2c52a2b8d6644dbf63c54ab73a15d0f75c5fed258ec4328ffb877ec5bc1979bcf0bcc3892f86256b0ef04242235be7c8008ed80632cf5bcf146032dc008a45f0fa07079ffab89bb11"}}}}}}}, 0x123)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6)
sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x1, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x32be}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x40800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r10, 0x11c, 0x1, 0x0, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="c3ce4d270a7ecc780a3f68a263ab58688e20aaefd2fe5026330cfd5157e41336cb8196bf6ed626a481201c44e2859c23e09547b13e7869b316787e31f00cfd337bd500b5d5bad49c275368b8dc03a8b605ec12a8d6b3a864310ab8ed124bb112812e71e980125b3e312989341c88438319cee147440cd48852f599a78004b1e4238ea6c4b6111957d60bead3f80d1f5e609272f66f0116bb82d65d0778195136be1257720ff90a4da9e1892d96a50ad1f592825bbfd1b352af97d5511bc5a69196e1246b80db7df28b1fadf89ad0e8da14ab851bdbce40"], 0x1c}}, 0x40104)
sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002500090025bd7000fddbdfff06000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket$inet_icmp(0x2, 0x2, 0x1)
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000850000000500000095"], &(0x7f0000000040)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$netlink(r12, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)={0x600, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x5f0, 0x0, 0x0, 0x1, [@nested={0x2e0, 0x7c, 0x0, 0x1, [@typed={0xa2, 0xe1, 0x0, 0x0, @binary="bf2d8450224e1e8f8734f92cbc370ee229dcb62be8935b2c92bbbe1b1b6e1dee49ec97cc5aa28c29874fb013ff3e5597cf96d47a5e9b4cc3014090a6ef219d7ec3b0df484bb16487dde65ecfca0fe41370764a437dcdf3bcd6faf1a0e70c8909afb06a32fc66e8cb670b37187aeae1cd91e72633c5b91d8b2b0981affc7ff324feae84da3c5a139dfb8bf1f42a50ed7ebdaf83930bd9836647f5287f8dd2"}, @generic="b0f551b8510b9914d966ae528a58665b81d423e92ef423e7448719f5dea62c671f4540db9fe2dae6d0664658565e723c849baa341327172689e6bbecb4d7412793e1cee5e4a84389390668ece3f772b447d71d398c3de9362e4c79c3aea04eecaa9eb77e9abe845a9f74cb5e", @typed={0x8, 0x157, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}, @typed={0x14, 0x88, 0x0, 0x0, @binary="e74f14c966c77b9e5e953c980cd5b61e"}, @nested={0x1ad, 0x29, 0x0, 0x1, [@generic="19dfadcf39925bda85f4dfdc5f02f4ba1fdbdf7ae95121813ea76ccf1d2ca050beb7b0d09337dedb4cbb57c08fc7ad44f44baf3f824ad0a1d0ec6c13586445c103712beb2b37ab14c656660216b4e4df6b9f2276405dc35af58b2123f10d4db075fadc5d2f78a73e4afcbca78825830fa365757cb758b2a4e156f3591186508b9ebe37f7c327d508f52dd0a321c45daa6548ac4c765cc640228b8db4b0ef212c4928a33bd56ad4ab9ebd43400a9ad7ebfa11f2dbfd2ce1469d75d96a71f96c57a3782ad180e7", @generic="2cc5d8c1785c09370448d11b8c4cb54c8ab9b37477753a38be9d8e3271405e5f560a1d88127ed4561d7f65c008cf7990f048e9e498a1bf42a0740e8cad651da16a637f5ac713193c7472b0d44cf41e4ae4b52cdb063dce4cbf661e0c175c993920b75ba396c1b0c61ad97aec064be496bc2a454cd6d32e119917b463b840ea973adeafa1cf5f96e79eb0918bcdaebdcbc6ff3d0e3d78932c2bca587c537f7b7dd81081699f40dbd8f5deff3ccb6fcbc774b70af630ce0cbda257195c378b204c43cf0f54212639daa38a9fd8c70a18fe82f9410a333c41f6e2976828c4c948b2951168"]}]}, @nested={0x1bd, 0x11c, 0x0, 0x1, [@nested={0xe6, 0xb9, 0x0, 0x1, [@nested={0x4, 0x27}, @typed={0x8, 0x59, 0x0, 0x0, @fd=r13}, @generic="d4bc0c2a55819b23a48a7a0015a245fbf9774c77692885f5b5ecb6b7a36869c565e205a5b4486a94735e2b7010a5464faeb61f2f99fc6bf79f54289a0789130c284cca746acf6b7f53f5cc231baac0d627222f9a52c6418e4b41d6ed410d3c667d64835b4806464a8325c91941d9ca301644ad89eb9e8c52b9be6941ac4a8d4ca5613546ba022cbbf5523acce2974305f14b795f1a72010389864013032d93b5c10bad9cb450c0a7634fc7ff6e9e4dece6994849277310db71cc9661b190195bb40d548c4263b061d9a3ed961573319fa94bfaf849f0"]}, @generic="0ed7caf62a92593f6e8e52250a8982b2610987f95f79134293e33683fc1c4e8d4216d69853e7434acf14f065a11e7380a6fe73a43e6f46d095c8f575cb1ea4c728b80f953a5cf5b5bd79dc8b248e34674d02b4bb432c5b5855ded8c52814768814", @typed={0x6d, 0x164, 0x0, 0x0, @binary="ee4453cec783e85167dd58ac8a44be5219ca59faaea14dd2564352967975956dea23e7a834b2aba25e4003f7976f0ca5b4a99dd5bd22e9a82eae0af0fe9289c672361ba6bc871f3547d2a375c2576ce2d9632dd95c0cb95627739ae329ab058fb6d784dcd16e64840f"}]}, @nested={0x14b, 0xc0, 0x0, 0x1, [@generic="53a9f14b7ef74e7b10681d009204a75b8270c317aae9fff344c6fc6a2ea2130cce2e224aca060c865241e68ede7aebba873cbf871adbc982d0caa53eeebd37e980a55c6a361e0cedd1c8ec4b8657e1322bd33e5cc1f0ee91826410f57f69e49eaac6e949c099765d7e1888f4ee91d10d97662db9054a", @generic="4381f207b62832b9669416f36c0b366873d6df1f5080267a95cd14401329f714cc5fb8ccd235ff7e18ee2ab9cddec62f779c1905cd2d1d566bd2eee84641361706f21868d77e647ed24356d52ab2cb06370ededa444bc56fbbb6196c04b37882003c78b164811ea5d1865b6f214592a4", @nested={0xc, 0x115, 0x0, 0x1, [@typed={0x8, 0xe6, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @generic="22a2b62e82e7297d341aebdc2f92b89cfbd8298e2d656fc446377e65133f393df635320808c5d56adfd4906a3f688720841ff7c833a11f83048d4c197c3b5057c33065d147f68a398736c1d49e4a6abc554152dd09"]}]}]}, 0x600}], 0x1}, 0x0)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r15, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x40800)

4.999121783s ago: executing program 6 (id=5310):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000680)=""/210, 0xd2}, {&(0x7f0000001040)=""/4100, 0x1004}, {&(0x7f0000000040)=""/163, 0xa3}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}, 0xe}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xe}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000080)}, 0x4}], 0x7, 0x0, 0x0)

4.99733386s ago: executing program 34 (id=5206):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000002f00090028bd3000000000000b0000000500110000000000b41fc176bc8c0f042c176f05b822bda8855487ca1eb62d04e5c00cbc10718b50a2f8e86ad41ddb8bce1cd08d0a674c7574e92acb32cf340f63422f5613e4fe36d3b496a804128f68614bbf9e4657df3d353b6291f63453c8f12b47bb0b05fa24a22fc0739b63a2377b3acb3dcfc31090a80fc00f8dc29faffd43638e023310b4d50c45c690ee5ad4c4b6c096d519754622ac38c633832c841e60e30f64c73c1f542426ffdcb53a0083241be947b415a19f572b822e"], 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='freezer.state\x00', 0x0, 0x0)
write$tun(r7, &(0x7f0000000380)={@void, @val={0x2, 0x0, 0x6, 0x1ff, 0x0, 0x4}, @eth={@random="37ad7a8af3c7", @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x5aaa}, {0x4}, {0x9, 0x0, 0x1}, {0x3df}], @llc={@llc={0xfc, 0x8e, "d8", "4acf2e0f60143650fd1f15b3491d1470d44755bb8ddbcc8b81725d368f5884c0e52310a46f10c9a657f9474580e284f4707355bccf258f5748a4d1a516f684455c3e474322f3a074ce718dce4ae94166df7b6578dbdbcf2ceae7390df34043c0bd09588fdf7435d32f9cf4255fca970bd3c77d729c63f83fc87bb2ea0be250678e99f0691e8e25108fbcabf899d93bac4453c6845504e3cd4dd482f8b09730f2c52a2b8d6644dbf63c54ab73a15d0f75c5fed258ec4328ffb877ec5bc1979bcf0bcc3892f86256b0ef04242235be7c8008ed80632cf5bcf146032dc008a45f0fa07079ffab89bb11"}}}}}}}, 0x123)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6)
sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x1, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x32be}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x40800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r10, 0x11c, 0x1, 0x0, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="c3ce4d270a7ecc780a3f68a263ab58688e20aaefd2fe5026330cfd5157e41336cb8196bf6ed626a481201c44e2859c23e09547b13e7869b316787e31f00cfd337bd500b5d5bad49c275368b8dc03a8b605ec12a8d6b3a864310ab8ed124bb112812e71e980125b3e312989341c88438319cee147440cd48852f599a78004b1e4238ea6c4b6111957d60bead3f80d1f5e609272f66f0116bb82d65d0778195136be1257720ff90a4da9e1892d96a50ad1f592825bbfd1b352af97d5511bc5a69196e1246b80db7df28b1fadf89ad0e8da14ab851bdbce40"], 0x1c}}, 0x40104)
sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002500090025bd7000fddbdfff06000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket$inet_icmp(0x2, 0x2, 0x1)
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000850000000500000095"], &(0x7f0000000040)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$netlink(r12, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)={0x600, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x5f0, 0x0, 0x0, 0x1, [@nested={0x2e0, 0x7c, 0x0, 0x1, [@typed={0xa2, 0xe1, 0x0, 0x0, @binary="bf2d8450224e1e8f8734f92cbc370ee229dcb62be8935b2c92bbbe1b1b6e1dee49ec97cc5aa28c29874fb013ff3e5597cf96d47a5e9b4cc3014090a6ef219d7ec3b0df484bb16487dde65ecfca0fe41370764a437dcdf3bcd6faf1a0e70c8909afb06a32fc66e8cb670b37187aeae1cd91e72633c5b91d8b2b0981affc7ff324feae84da3c5a139dfb8bf1f42a50ed7ebdaf83930bd9836647f5287f8dd2"}, @generic="b0f551b8510b9914d966ae528a58665b81d423e92ef423e7448719f5dea62c671f4540db9fe2dae6d0664658565e723c849baa341327172689e6bbecb4d7412793e1cee5e4a84389390668ece3f772b447d71d398c3de9362e4c79c3aea04eecaa9eb77e9abe845a9f74cb5e", @typed={0x8, 0x157, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}, @typed={0x14, 0x88, 0x0, 0x0, @binary="e74f14c966c77b9e5e953c980cd5b61e"}, @nested={0x1ad, 0x29, 0x0, 0x1, [@generic="19dfadcf39925bda85f4dfdc5f02f4ba1fdbdf7ae95121813ea76ccf1d2ca050beb7b0d09337dedb4cbb57c08fc7ad44f44baf3f824ad0a1d0ec6c13586445c103712beb2b37ab14c656660216b4e4df6b9f2276405dc35af58b2123f10d4db075fadc5d2f78a73e4afcbca78825830fa365757cb758b2a4e156f3591186508b9ebe37f7c327d508f52dd0a321c45daa6548ac4c765cc640228b8db4b0ef212c4928a33bd56ad4ab9ebd43400a9ad7ebfa11f2dbfd2ce1469d75d96a71f96c57a3782ad180e7", @generic="2cc5d8c1785c09370448d11b8c4cb54c8ab9b37477753a38be9d8e3271405e5f560a1d88127ed4561d7f65c008cf7990f048e9e498a1bf42a0740e8cad651da16a637f5ac713193c7472b0d44cf41e4ae4b52cdb063dce4cbf661e0c175c993920b75ba396c1b0c61ad97aec064be496bc2a454cd6d32e119917b463b840ea973adeafa1cf5f96e79eb0918bcdaebdcbc6ff3d0e3d78932c2bca587c537f7b7dd81081699f40dbd8f5deff3ccb6fcbc774b70af630ce0cbda257195c378b204c43cf0f54212639daa38a9fd8c70a18fe82f9410a333c41f6e2976828c4c948b2951168"]}]}, @nested={0x1bd, 0x11c, 0x0, 0x1, [@nested={0xe6, 0xb9, 0x0, 0x1, [@nested={0x4, 0x27}, @typed={0x8, 0x59, 0x0, 0x0, @fd=r13}, @generic="d4bc0c2a55819b23a48a7a0015a245fbf9774c77692885f5b5ecb6b7a36869c565e205a5b4486a94735e2b7010a5464faeb61f2f99fc6bf79f54289a0789130c284cca746acf6b7f53f5cc231baac0d627222f9a52c6418e4b41d6ed410d3c667d64835b4806464a8325c91941d9ca301644ad89eb9e8c52b9be6941ac4a8d4ca5613546ba022cbbf5523acce2974305f14b795f1a72010389864013032d93b5c10bad9cb450c0a7634fc7ff6e9e4dece6994849277310db71cc9661b190195bb40d548c4263b061d9a3ed961573319fa94bfaf849f0"]}, @generic="0ed7caf62a92593f6e8e52250a8982b2610987f95f79134293e33683fc1c4e8d4216d69853e7434acf14f065a11e7380a6fe73a43e6f46d095c8f575cb1ea4c728b80f953a5cf5b5bd79dc8b248e34674d02b4bb432c5b5855ded8c52814768814", @typed={0x6d, 0x164, 0x0, 0x0, @binary="ee4453cec783e85167dd58ac8a44be5219ca59faaea14dd2564352967975956dea23e7a834b2aba25e4003f7976f0ca5b4a99dd5bd22e9a82eae0af0fe9289c672361ba6bc871f3547d2a375c2576ce2d9632dd95c0cb95627739ae329ab058fb6d784dcd16e64840f"}]}, @nested={0x14b, 0xc0, 0x0, 0x1, [@generic="53a9f14b7ef74e7b10681d009204a75b8270c317aae9fff344c6fc6a2ea2130cce2e224aca060c865241e68ede7aebba873cbf871adbc982d0caa53eeebd37e980a55c6a361e0cedd1c8ec4b8657e1322bd33e5cc1f0ee91826410f57f69e49eaac6e949c099765d7e1888f4ee91d10d97662db9054a", @generic="4381f207b62832b9669416f36c0b366873d6df1f5080267a95cd14401329f714cc5fb8ccd235ff7e18ee2ab9cddec62f779c1905cd2d1d566bd2eee84641361706f21868d77e647ed24356d52ab2cb06370ededa444bc56fbbb6196c04b37882003c78b164811ea5d1865b6f214592a4", @nested={0xc, 0x115, 0x0, 0x1, [@typed={0x8, 0xe6, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @generic="22a2b62e82e7297d341aebdc2f92b89cfbd8298e2d656fc446377e65133f393df635320808c5d56adfd4906a3f688720841ff7c833a11f83048d4c197c3b5057c33065d147f68a398736c1d49e4a6abc554152dd09"]}]}]}, 0x600}], 0x1}, 0x0)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r15, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x40800)

4.995072099s ago: executing program 2 (id=5314):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000100)={0x4a})
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vcan0\x00', <r3=>0x0})
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000000)={0x0, 0xf0, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1409, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x44810}, 0x0)
bind$can_raw(r2, &(0x7f0000000480)={0x1d, r3}, 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000000), 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x39)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48baed9dfb44bd33dba6bd292aad455d53d0c6f09126918f54e663d71c3506756e3eca40c1c7d2b3", 0xc6)
r5 = socket(0x1d, 0x2, 0x6)
ppoll(&(0x7f00000004c0)=[{r5, 0x1}], 0x1, &(0x7f0000000540), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

4.992151341s ago: executing program 6 (id=5316):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x200000c0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x8e4)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={<r4=>0xffffffffffffffff, &(0x7f0000000000)='GPL\x00', 0x80002, &(0x7f0000000040)={@_ha_fsid={[0x7, 0x7]}, {0x919e, 0x400, 0x10000, 0x6}}, 0x100, &(0x7f0000000080), &(0x7f0000000140)=0x9})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000880}, 0x40000)
r6 = socket(0x29, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x244}], 0x1, 0x0, 0x6b}, 0x0)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840)
write$nci(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="500504"], 0x7)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0x7fff]}})
socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x5}, 0x90)

4.131126502s ago: executing program 6 (id=5317):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r1)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x2c}, @loopback, 0x1b, 0x8}})
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000380)="5ccba05e2a5c18609db9e9a41d57f582ba1270787c95a2b85e77a5eb76e546ca04705b7e90ebb35169755b22c8f5b184757673b1a48a365200255d4dc4460477ee6efd9e603b004892740a4141d9b04475df6744cfa6c8a31a04a2184179aeb167d735baca7609b49c6c788446dbe4ff04b4dfd4d43ba4815b4161183358b09c79ed20b2852dfd11228fde9999dde3cbd78c676fb2bcffac1395607e24", 0x9d)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f)
write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES64=r1], 0xa)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x35, 0x0, 0x1, [@generic="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"]}]}, 0x114}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000000540)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000580), &(0x7f0000000640), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000f00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2c900404}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000800)={0x694, 0x12, 0x100, 0x70bd26, 0x25dfdbfb, {0x6, 0x0, 0x7, 0x7, {0x4e20, 0x4e21, [0x8, 0x5, 0x57, 0x5], [0x292, 0x3, 0x1, 0x268c669d], r4, [0x0, 0xe]}, 0x0, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x57, 0x1, "40a8173140c745aa3356f2e82d72c4669660733b2da5bc2925fd050223f75790794ea5c19e0d80060fdabcdaba1d713e8ae3567a776938bef188f4b0dc7312bab7bacaf0f8c7a9c82cecd6641180dc3f2de7e4"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "4348e0cc675ba41f4e5a4f25c1480cce7c8c7ab04036cfc5687384f11120113914012c5b2ad86e884efd8f32b68b092868c9f67e33ecb7e9a652289da23441a333c2c398f298fe26942e085e5b60ca9480c3b1e5cf8faaed971d5e4641dceb19e51086a44d5b85ea1a928c216864b9f8c72582ac55d8b2e887eff11a15841961ffd54616f122bba740506415f1489e7356cd5834d24bab72d87b90f6c4cd040a50c2f93764d5e99954340ebe3e7df3c6d5fafcd6918affc89ccbe027f24bba21a708977263c4c58cf4ae3781311cab98239b653e243fe904838fe79a4f51f5e5771f8b8183c18b422cfc97f3251a9f962742bf26e527ae2730"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "7c0bc1aba0b60138808eff184065ef76fe1af5cd0eca787d33fee7f42d088d209936eb3f37b0ed4a6525e7973e4e7e7d8704064a752f39f9ae9324352720c2cc6b23fd778a23970f8a9b640ebcfe00994f5826893a6102cbc17a98f94524795530305e4b5b251432a4b30e3517a449c6d14508680cb72a985a8d8e2e0b5b50e98c66bd740c96b65389d56ba17b69b9edfae3476efb76a50511e9f6d220f0ae825916f7da4e0437c23aa3f5551e"}, @INET_DIAG_REQ_BYTECODE={0x71, 0x1, "5146bc6d38e25cea7470e047f7876e1c02f3d47de0d017d75385e43ea307cd501a83d554548c98ce3ce2c3d9d21ac5fc55504cdc2ec077225e32e44631406219e2a80ba470d4da05f449e37b941c011220f8bc3968563f6280d71186fa046ff3ee1d651c9899f3ca2cbdfd8f14"}, @INET_DIAG_REQ_BYTECODE={0x69, 0x1, "5af1cbd9bf8601ad0e9dfb5511a65da8ee772ebba05e01770c70057cb5e3bd87e9f0b378831cfcd1e8efb942880ff76762c4f66e841960b90ff9dc9739f3f09606211a1bc9bdba8d3148d2bdab0e8c92f5d99a1838ff4638b682dbd3716493e526b3e7581c"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "555c3ba7f94e9ffadbfd0943afaa5c21bca6e0609374cb9a3ff1552e81bb42021dc7dda9ddaf245a57013b97fa69efa2c5d5119ea142575375e90bdcd5993fbeacf1c958cc866667c009f26809fd9fa3dc"}, @INET_DIAG_REQ_BYTECODE={0xff, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "d361845c21f7f782ea4a0fddb1aba2e48baf1dd4dcacba6420c26b355e5e31f2fd922596f9bd9e9fef54a20cb3b7d89aae7c5aa479be5fb08619f1"}, @INET_DIAG_REQ_BYTECODE={0xe0, 0x1, "75a46db0c6d275f2278a3ba636b6415b830d0f38acc4ec3565bba719330fd698baf23f1c84e3562efc8a9ece8e070ba91e9c77ffb033a5aa683497024d8d4f827361617fbe83d4ee690c8de29238d61e2243c30d64a51230ea29ad175ae013e08811a4d4e4a9219064598aadf20b169fe0b1ee5a35bbba3cc4da6e7dbd924ec9288a14c9961d13245ec44ec103fe47bf784973163d2592ee3a3677488479510ff0f3c4abf0a8a81e6ff5b6f897ab6c0f68d35296629c0da50fc0c6f07c22f500a2888ccba5107b03b7c8f7aeae19eb38dca534077e18b429caaba251"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "9e8f1eaed82cfe6b48e482b989f338292000e860637401f3444e0b0b4d84b9582f3eb97c0ca24f71bd4395ca4c23cedeae6b5069af89593330cca2cb933e40b1377086d4ac09668c579e683a4cddb1def2296d06e7b37e4308940c5210f56d51634f411a4aa3931ab7530452af6f0ce6842c265f90dc53bceeb88b1e80026a811d6c349db57c8b272efc76d03cd43a5e6347c8f9c402238d77bede9635683364cd05fdcd03f6188dbfa48ede85d719204e932e9197014c24bdeda457f4ce85f699a32451f6f736f79f8c82a47b6006b63b72777066a5002e6f9352972d1c"}]}, 0x694}, 0x1, 0x0, 0x0, 0x4000006}, 0x0)
r5 = socket$kcm(0xa, 0x3, 0x73)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0)
r8 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r8, 0x1, 0x25, &(0x7f00000002c0), 0x8)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x29, 0x37}], 0x10}, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x1000}, 0x4)

3.819591294s ago: executing program 2 (id=5319):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@updpolicy={0x19, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0xffffffffffffff80}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@replay_val={0x10, 0xa, {0x70bd26, 0x70bd29, 0x6}}]}, 0xc8}}, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580100001000050001000000000000000a01410000000000000000000000000100000000000000000a0080800000000000000061904b0e00000000000000000086e8f86c57", @ANYRES32=0x0, @ANYRES32=0x80, @ANYBLOB="00000000000000000000000000000001000012343300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000800000000000000048000100686d6163287368613129000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000170001000000000000000000000029bd7000000000002000000000000000"], 0x158}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="650000e1a1005e44faff12e2211329360b42d9440e25075be93f50d66dc760a75dc2e3be4e56", @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b004e44000006001600020000000500120001000000060011000700000008000b00ff7f0000"], 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000)
sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc000000130005000100000000000000000000000000000000000000000000010000000000000000000000000000000100000000000000000a00808089000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000100001234330000000a0000000000000000000000000000000000000100"/180], 0xfc}}, 0x0)
r5 = accept(r0, &(0x7f00000001c0)=@nfc, &(0x7f0000000240)=0x80)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r9 = accept$alg(r8, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0)
recvmmsg(r9, &(0x7f0000000440), 0x0, 0x40000000, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000180)={r10, @in={{0x2, 0x4e23, @empty}}, 0xfffffffc, 0x5, 0x4, 0xfffffff8, 0xb, 0x9, 0xf}, &(0x7f0000000000)=0x9c)
setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000002c0)={r10, 0x8}, 0x8)
socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r12)
ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r14=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r12, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r14, @ANYBLOB="24002d800500010003000000050004000000000008000200f9"], 0x40}, 0x1, 0x0, 0x0, 0x24880}, 0x4000880)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$inet6(0xa, 0x3, 0x8000000003c)

3.708053128s ago: executing program 0 (id=5320):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xd, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ff"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x400, &(0x7f00000001c0)={@align=0xab19, {0x0, 0x4, 0x4, 0x5}}, 0x2, &(0x7f0000000200), &(0x7f0000000540)=0x3})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0\x00', <r3=>0x0})
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x4)
pwritev(r4, &(0x7f0000000680)=[{&(0x7f0000000040)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003f60000000001010101", 0x2e}], 0x1, 0x6, 0x0)
pwritev(r4, &(0x7f0000000440)=[{&(0x7f00000003c0)="00214500001400000000400600000a0000010a000002005000500000ffff00000002603003e80000000201010101", 0x2e}], 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x64, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x34, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x80000000}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x10}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008800}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xd, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ff"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x400, &(0x7f00000001c0)={@align=0xab19, {0x0, 0x4, 0x4, 0x5}}, 0x2, &(0x7f0000000200), &(0x7f0000000540)=0x3}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0\x00'}) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) (async)
ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x8) (async)
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x4) (async)
pwritev(r4, &(0x7f0000000680)=[{&(0x7f0000000040)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003f60000000001010101", 0x2e}], 0x1, 0x6, 0x0) (async)
pwritev(r4, &(0x7f0000000440)=[{&(0x7f00000003c0)="00214500001400000000400600000a0000010a000002005000500000ffff00000002603003e80000000201010101", 0x2e}], 0x1, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x64, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x34, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x80000000}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x10}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) (async)

3.280786303s ago: executing program 6 (id=5321):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c40)={r3, r5, 0x25, 0x4, @val=@iter={0x0}}, 0x20)
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1)
r6 = socket(0x10, 0x803, 0x0)
socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffff, 0x4}, {0x0, 0x9}, {0xf, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

2.945549723s ago: executing program 0 (id=5322):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="03000088"], 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x124}, 0x1, 0x0, 0x0, 0x20008849}, 0x200080c4)

2.615433885s ago: executing program 0 (id=5324):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', 0x0}) (async)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103"], 0xb6) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x40, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24000804) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x7, 0x0, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {@private=0xa010100}, {@dev}, {@private}]}]}}}}}}}, 0x0) (async)
recvmsg(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002a00)=""/4114, 0x1012}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/135, 0x87}, {&(0x7f0000000440)=""/4087, 0xff7}], 0x4}, 0x40000020)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) (async)
shutdown(r9, 0x0)

2.563442852s ago: executing program 2 (id=5325):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcb, 0x0, 0x0) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={<r1=>r0, &(0x7f0000000040)='z\xe0&,**\x00', 0x80000, &(0x7f0000000080)={@_ha_fsid={[0x75, 0x8]}, {0xce, 0x2, 0x8, 0x3}}, 0xe64, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x7f})
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) (async, rerun: 64)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x168, 0x9, 0x0, 0xb, 0x3f0, 0x250, 0x250, 0x3f0, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [0x0, 0x0, 0xff], 'veth0_to_bridge\x00', 'sit0\x00', {0xff}, {}, 0x6c}, 0x6000000, 0x190, 0x1d0, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@local, [0xffffff00, 0x0, 0xff000000, 0xff], @ipv6=@empty, [0x0, 0xff000000, 0xffffff00, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xff, 0x0, 0xffffffff], @ipv4=@empty, [0xff000000, 0xff, 0xffffffff, 0xffffffff], 0x653e0000, 0x7, 0x5c, 0x4e22, 0x4e24, 0x4e21, 0x4e24, 0x69ccc8084b1cbfbd, 0x2411}, 0x40, 0x260}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b1099635e9c646145a89acec2754b3572c7cf068dfcba1441233ece9898a"}}, {{@uncond, 0x0, 0x200, 0x220, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv6=@empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7f, 0xff000000, 0xffffff00, 0xffffff00], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@private0, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, [0xffffffff, 0xffffff00], @ipv4=@multicast2, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) (rerun: 64)

2.042211341s ago: executing program 2 (id=5327):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000010000000000000000000000000000000000000000000c0003006272696467653000140012800b000200627269646765000000000000"], 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000034001a800600000002000000280005802400018008000100010000000800020000000000080003000000000008000400", @ANYRES32=r1], 0x54}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000038001a8006000000020000002c0005802800038008000100010000000a000200001122334455000008000300000000000800040001000000"], 0x58}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111af00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1.878036789s ago: executing program 1 (id=5328):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x28, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="70020000130029"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)
r2 = socket$pptp(0x18, 0x1, 0x2)
shutdown(r2, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000002000)={{'\x00', 0x1}, {0x4}, 0x8, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="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", 0x163, 0x0, &(0x7f0000000f40)={0x2, 0x1035, {0x0, 0xc, 0x28, "02639ce8b1892e6a2c3c5a4d62c3703ca22bda07ca541eb5092055ae9f9b05b2a498fdf102e9ada6", 0x1000, "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"}, 0x43, "4891b53fb521d74fb2fe3c955bb89917912a0d2d68afd42b4b9ee815838836eaa2fd287ebcb3d282d3e6926a4b5ff0ad6c4fc31c4bd9c8f9048d3538253bf8d0795f65"}, 0x1084})

1.684136768s ago: executing program 1 (id=5329):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x6d8, 0x490, 0x390, 0xd0, 0xd0, 0x490, 0x608, 0x608, 0x608, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'lo\x00', 'vlan1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x738)
sendmmsg$inet6(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ddf9a43014000000000043492f19200f38d87a3ce05413c3aad632828fd4fccfc2ace17610bd073903e32f2620a8ae2c8b57910f85a2f1a9bc7009dd0000", 0x52}], 0x1}}], 0x1, 0x40044800)
sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)

1.619755618s ago: executing program 1 (id=5330):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd26, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
r2 = socket$kcm(0x10, 0x400000002, 0x0) (async)
r3 = epoll_create1(0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)=@can_delroute={0x3c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "89543896f10eee1e"}, 0x2}}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0x2}}]}, 0x3c}}, 0x0) (async)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000001040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x50)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ppoll(&(0x7f0000000340)=[{r3, 0x4}, {r6, 0x1481}], 0x2, 0x0, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33) (async)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r7, &(0x7f0000000240)={0x23, 0x0, 0xd0, 0x41}, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r8) (async)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000100)={r12, 0xffffffff}, &(0x7f0000000180)=0x8)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r9, 0x1, 0x70b92a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe27, 0xb, 0x9}, {0x6, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x200c0850)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x40094}, 0x0)

1.513053514s ago: executing program 6 (id=5331):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x84}}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket(0x2b, 0x80000, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000100), &(0x7f0000000400)}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
write$cgroup_int(r5, &(0x7f0000000000)=0x2, 0x12)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x30, 0x0, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbf}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}}, 0x4004811)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12094}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @local}, @IFLA_GENEVE_ID={0x8}]}}}]}, 0x48}}, 0x20000050)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0)

1.463373874s ago: executing program 2 (id=5332):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x428}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8d4}, 0x8000)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf255c00000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00k'], 0x24}}, 0x44) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02010000000000de130003006e657464657673696d30000000000000200016801c00018018000c8014"], 0x54}}, 0x24040800)

1.444637157s ago: executing program 1 (id=5333):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0}) (async)
r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x57}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20040010) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f00000002c0)={0x6dc, r1, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0x1b, 0x2, 0x4c, 0x60, 0x1, 0x0, 0x5, 0x30, 0x60, 0x24, 0x6c, 0x1, 0x9, 0x2a, 0x9, 0x6, 0x18, 0x1, 0xb, 0x16, 0x4, 0x3, 0x24, 0x6, 0x18, 0x36, 0x18, 0x24, 0x3, 0x16, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x83, 0x5, 0x9, 0x0, 0x8, 0x6c33, 0x47, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x3, 0xc, 0x30, 0xb, 0x48, 0x48, 0x36, 0x2, 0xb, 0x4, 0x36, 0x6c, 0x3, 0x3a511ef759accabe, 0xc, 0x36, 0x5, 0x18, 0x18, 0x9, 0x3, 0x6]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x1}, {0x7}, {0x2, 0x2}, {0x1, 0x9}, {0x0, 0x1}, {0x3, 0x6}, {0x4, 0xa}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xdc9, 0x0, 0x1000, 0x9, 0xfff, 0x9, 0x20]}}]}]}, @NL80211_ATTR_TX_RATES={0x1ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xc000, 0x3, 0x6, 0x5, 0x83, 0x3, 0x863]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x0, 0x9, 0x3, 0x3, 0x1, 0x6, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0xc, 0x9, 0x12, 0x1b, 0x30, 0xb, 0x36]}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x6c, 0xb, 0x24, 0x2a, 0x2, 0x60, 0xb, 0x16, 0x4, 0x48, 0x3, 0x30]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0x0, 0x12, 0x2, 0x12, 0x9, 0x9, 0x9, 0x6c, 0x12, 0x18, 0x3, 0x1, 0x1, 0x24, 0x6, 0x32, 0x0, 0xc0, 0x48, 0x6, 0x1, 0x5, 0x9, 0x3, 0x36, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc9c, 0x9, 0x8, 0x7, 0xc, 0x3, 0x3, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x80, 0x3, 0x8, 0x2, 0x1ff, 0x7, 0x1e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x2, 0x8, 0xfff9, 0x5, 0x3, 0x4]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x2, 0x3, 0xb, 0x7e21, 0x9, 0x6]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x3}, {0x0, 0x6}, {0x0, 0x2}, {0x7, 0x2}, {0x0, 0x8}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x5}, {0x0, 0x8}, {0x5, 0x9}, {0x4, 0xa}, {0x5, 0x4}, {0x7, 0x9}, {0x7, 0x1}, {0x4, 0x2}, {0x7, 0x3}, {0x7, 0x6}, {0x2, 0x1}, {0x0, 0x7}, {0x7, 0x9}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0xa}, {0x2, 0x2}, {0x2, 0x4}, {0x0, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x5, 0x2, 0x3, 0x5, 0x1000, 0xc895, 0xbd0d]}}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x5, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x5, 0x9}, {0x4, 0xa}, {0x3, 0x4}, {0x4, 0x9}, {0x6, 0x9}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x8}, {0x3, 0x6}, {0x3, 0x8}, {0x7, 0x4}, {0x3, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x7, 0x6}, {0x1, 0x8}, {0x6}, {0x2, 0x7}, {0x4}, {0x5, 0x4}, {0x7, 0x8}, {0x6, 0x1}, {0x4, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x9}, {0x2, 0x3}, {0x2, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x0, 0x7, 0xfe0, 0x8, 0x0, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0xfff8, 0x0, 0x6, 0x9, 0x5, 0x6, 0x5]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xac2e, 0x4, 0xd, 0x5, 0x5, 0x8]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0xb, 0x36, 0x48, 0x1, 0xc, 0x1b, 0x4, 0x24, 0x30, 0x48, 0x18, 0x0, 0x36, 0xb, 0x18, 0x1b, 0x6c, 0x30, 0x30, 0x3, 0x48, 0x2, 0x30, 0x60, 0x1b, 0x9, 0x36, 0x6, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff33, 0x3, 0x81, 0x9, 0x17, 0x2b, 0x0, 0xc]}}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x0, 0x3, 0x24, 0x2, 0x2, 0x0, 0x1b, 0x5, 0x6c, 0xc, 0x1b, 0x3, 0x6c, 0x7e, 0x3, 0x36, 0x1, 0x24, 0xb, 0x60, 0x6c, 0xc, 0x18, 0x2d, 0xb, 0x36, 0x6, 0x48, 0x1, 0x48, 0x6, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x0, 0x100, 0x4, 0x0, 0x7fff, 0xff83]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe2e, 0x4, 0x3ff, 0x8, 0x5, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1000, 0x4, 0x92, 0x7, 0x7, 0x2e, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x60, 0x30, 0x75, 0x6, 0x60, 0x4, 0x9, 0x5, 0x2, 0x24, 0x16, 0x3, 0x36, 0x30, 0x24, 0x5]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x0, 0x7fff, 0x1, 0xfffa, 0xf0e, 0x7, 0x8000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x4, 0x1a, 0x12, 0x4, 0xf, 0x18, 0x4, 0x60, 0x1b, 0x18, 0x2, 0xb, 0x24, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x3, 0xa, 0x8, 0x0, 0x1, 0x1]}}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x81, 0xfffd, 0x6, 0x4, 0x5, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x9}, {0x1, 0x1}, {0x6, 0x1}, {0x5, 0x6}, {0x7, 0x3}, {0x1, 0x3}, {0x4, 0x7}, {0x5, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x9}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x7}, {0x3, 0x9}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x5}, {0x5, 0x7}, {0x6, 0x2}, {0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x2, 0x1}, {0x3, 0x6}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0x8}, {0x7, 0x2}, {0x1, 0x6}, {0x2, 0x5}, {0x7, 0x6}, {0x3, 0x4}, {0x3, 0x2}, {0x5, 0xa}, {0x7, 0x9}, {0x0, 0x2}, {0x6, 0xa}, {0x4, 0x1}, {0x3, 0x2}, {0x1, 0x8}, {0x4, 0x1}, {0x0, 0xa}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x2b8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x36, 0x36, 0xc, 0x24, 0x9, 0xb, 0x3, 0x1b, 0x6c, 0x6, 0x16, 0x1b, 0x1b]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x4}, {0x7, 0xa}, {0x0, 0x4}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0x1}, {0x7, 0xa}, {0x2, 0x2}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x5}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x4}, {0x1, 0xa}, {0x4, 0x3}, {0x4, 0x2}, {0x4, 0x9}, {0x7, 0x6}, {0x4, 0x3}, {0x7, 0x6}, {0x2}, {0x6, 0x8}, {0x7, 0x1}, {0x4, 0x8}, {0x4, 0x9}, {0x4, 0x1}, {0x0, 0x9}, {0x6, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x5}, {0x6, 0x8}, {0x0, 0xa}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x2}, {0x4, 0x6}, {0x4, 0x3}, {0x2, 0x9}, {0x3, 0x8}, {0x1, 0x7}, {0x4, 0x7}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x4}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x8}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x5}, {0x5, 0x5}, {0x6, 0x8}, {}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x8}, {0x5, 0x7}, {0x0, 0x8}, {0x4, 0x9}, {0x7, 0x9}, {0x1, 0x3}, {0x6, 0xa}, {0x2, 0x2}, {0x3, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x3, 0x8}, {0x4, 0x6}, {0x6, 0x1}, {0x5, 0x6}, {0x3, 0x9}, {0x4, 0xa}, {0x5, 0x7}, {0x1, 0x1}, {0x6, 0x4}, {0x5, 0x5}, {0x6, 0x8}, {0x4, 0x1}, {0x5, 0xa}, {0x1, 0x2}, {0x4, 0x4}, {0x5, 0x1}, {0x2, 0x7}, {0x0, 0x4}, {0x0, 0x6}, {0x4, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x1}, {0x5, 0x6}, {0x0, 0x1}, {0x1, 0xa}, {0x6, 0xa}, {0x5, 0xa}, {0x6, 0x1}, {0x5}, {0x6}, {0x4, 0x3}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x6c, 0xb, 0x12, 0xb, 0x4, 0x24]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x4}, {0x3, 0x7}, {0x5}, {0x0, 0x7}, {0x6, 0x6}, {0x6}, {0x5, 0xa}, {0x0, 0x6}, {0x7, 0x5}, {0x6, 0x7}, {0x2, 0x6}, {0x4, 0x9}, {0x4, 0xa}, {0x3, 0x9}, {0x6}, {0x4, 0x9}, {0x1, 0x2}, {0x4, 0x7}, {0x4, 0x4}, {0x0, 0x7}, {0x2, 0x8}, {0x5, 0x4}, {0x0, 0x7}, {0x2, 0x1}, {0x4, 0x7}, {0x1, 0x5}, {0x4, 0x8}, {0x1, 0x5}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x4}, {0x6, 0x9}, {0x1, 0x8}, {0x4, 0x7}, {0x0, 0x1}, {0x1, 0x6}, {0x5, 0x7}, {0x0, 0x8}, {}, {0x3, 0x17}, {0x4, 0xa}, {0x7}, {0x3, 0x3}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x7, 0x6}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0x5}, {0x6, 0x5}, {0x0, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x6, 0x7}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0x3}, {0x5, 0x4}, {0x7, 0x6}, {0x6, 0x3}, {0x2, 0x6}, {0x4, 0x7}, {0x3, 0x8}, {0x5, 0x2}, {0x2, 0x1}, {0x7, 0x4}, {0x1, 0x2}, {0x5, 0xa}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x2}, {0x3, 0x2}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x60, 0x6c, 0x9, 0x6, 0x2, 0x1b, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x6, 0xf720, 0x4ba, 0x8, 0x9, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x36}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xc, 0x12, 0x2, 0x24, 0xc, 0x6, 0x4, 0x0, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x4, 0x8, 0x5, 0x1ff, 0x3]}}]}, @NL80211_BAND_6GHZ={0x104, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x4, 0x8, 0x4, 0x2, 0x80]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9da, 0x7, 0x53b, 0x7f, 0x6, 0x3, 0x7, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x60, 0x8, 0x2, 0x5, 0x8, 0x10, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x5}, {0x7, 0x7}, {0x4, 0x2}, {0x7, 0x5}, {0x2, 0x7}, {}, {0x0, 0x2}, {0x1}, {0x7, 0x1}, {0x7, 0x5}, {0x7, 0x5}, {0x2, 0x9}, {0x4, 0x1}, {0x6, 0x3}, {0x0, 0x9}, {0x3, 0x3}, {0x7, 0x2}, {0x0, 0x6}, {0x1, 0xa}, {0x6, 0x7}, {0x1, 0xa}, {0x7, 0x4}, {0x5, 0x5}, {0x5}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x3, 0x2}, {0x5, 0x8}, {0x5, 0x8}, {0x0, 0x8}, {0x2, 0x1}, {0x7, 0x2}, {0x5, 0x4}, {0x2, 0x4}, {0x5, 0x6}, {0x2, 0x2}, {0x5, 0x4}, {0x2, 0x2}, {0x5, 0xa}, {0x6, 0x5}, {0x7, 0x7}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x9}, {0x2, 0x1}, {0x0, 0x6}, {0x5, 0x8}, {0x1, 0x8}, {0x4, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0xa}, {0x3}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0x8}, {0x2, 0x4}, {0x3, 0x7}, {0x2, 0x7}, {0x4, 0x6}, {0x2, 0x4}, {0x4, 0x3}, {0x6, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x3, 0x7}, {0x2, 0xa}, {0x2, 0x6}, {0x3, 0x3}, {0x1, 0x6}, {0x6, 0x1}, {0x1, 0x5}, {0x0, 0x7}, {0x6, 0x1}, {0x3, 0x1}, {0x7, 0x3}, {0x1, 0x5}, {0x0, 0x6}, {0x5}, {0x6, 0xa}, {0x0, 0x4}, {0x3, 0x5}, {0x7, 0x1}, {0x5, 0x5}, {0x2, 0xa}, {0x5, 0x8}, {0x0, 0x6}, {0x0, 0xa}, {0x4, 0x7}, {0x2, 0x2}, {0x1, 0xa}, {0x6, 0x8}, {0x6}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0x8}, {0x1, 0x7}, {0x2, 0x4}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x4}, {0x0, 0x1}, {0x6, 0x9}, {0x4, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x2, 0x1}, {0x4, 0x4}, {0x7, 0xa}, {0x5}, {0x3, 0x8}, {0x5, 0x7}, {0x5, 0x5}, {0x1, 0x3}, {0x4, 0x6}, {0x3, 0x8}, {}, {0x4, 0x8}, {0x1, 0x2}, {0x2, 0x2}, {0x7, 0x4}, {0x1, 0x8}, {0x4}, {0x6, 0x8}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x4}, {0x3, 0x6}, {0x7, 0xa}, {0x4, 0x4}, {0x1, 0x1}, {0x4, 0x3}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0x7}, {0x1, 0xa}, {0x6, 0x7}, {0x5, 0x6}]}]}]}]}, 0x6dc}, 0x1, 0x0, 0x0, 0x200480c5}, 0x20008000) (async, rerun: 32)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000a40)=@req={0x0, 0x9363, 0x8, 0x74}, 0x10) (rerun: 32)
r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000a80)={'wg1\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'ip6tnl0\x00', r5, 0x29, 0xf9, 0x0, 0x5, 0x9, @local, @rand_addr=' \x01\x00', 0x8, 0x8000, 0x8, 0x7}}) (async)
getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000b80)=""/198, &(0x7f0000000c80)=0xc6)
setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000cc0)={0xffffffffffffffff, 0x1, 0x8, 0x3, @vifc_lcl_addr=@private=0xa010102, @multicast1}, 0x10)
ioctl$XFS_IOC_FSGETXATTRA(r3, 0x801c582d, &(0x7f0000000d00)) (async)
r6 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r6, &(0x7f0000000d40)={0x2, 0x0, @loopback, 0x1}, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80))
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e00), r0)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0x90, r7, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc0}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffd}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe0}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5ff6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x24048004) (async)
getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000f80), &(0x7f0000000fc0)=0xe) (async)
recvfrom$l2tp(r6, &(0x7f0000001000)=""/27, 0x1b, 0x40010020, &(0x7f0000001040)={0x2, 0x0, @broadcast}, 0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001080)={<r8=>0x0, @in={{0x2, 0x4e21, @local}}, 0xfffa}, &(0x7f0000001140)=0x90)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000001180)={r8, 0xda6d}, 0x8) (async)
r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getpeername(r9, &(0x7f00000011c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r10=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000001240)=0x80)
sendmsg$MPTCP_PM_CMD_REMOVE(r10, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8001}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2840}, 0x80) (async, rerun: 64)
ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f00000013c0)={@mcast2, 0x19, r5}) (rerun: 64)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001400)=@vsock, 0x80, &(0x7f0000001580)=[{&(0x7f0000001480)=""/11, 0xb}, {&(0x7f00000014c0)=""/165, 0xa5}], 0x2, &(0x7f00000015c0)=""/26, 0x1a}, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f00000016c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001680)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4000051}, 0x20048044) (async)
socket$packet(0x11, 0x1, 0x300)

1.303817844s ago: executing program 0 (id=5334):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000200)=0x7b8d, 0x4)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001040)={{{@in=@private=0xa010100, @in=@broadcast, 0x4e23, 0x5, 0x4e20, 0x1000, 0x10, 0x40, 0x20, 0x5c, 0x0, 0xee01}, {0x1, 0x5c1a, 0x0, 0xb2ca, 0x2a66, 0x2, 0x8, 0xff}, {0x28, 0x8, 0x40}, 0x5, 0x6e6bb2, 0x2, 0x0, 0x2}, {{@in6=@private0, 0x4d6, 0x33}, 0x0, @in=@remote, 0x3503, 0x3, 0x3, 0x5, 0x88, 0x9, 0x7}}, 0xe8)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000004c0))

822.711666ms ago: executing program 0 (id=5335):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfdbc}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x11)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x35, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xab, 0x1}}, @ibss={0x6, 0x2, 0x4}, @mesh_chsw={0x76, 0x6, {0xfd, 0x8, 0x33, 0x9}}, @random_vendor={0xdd, 0x1e, "37d45774b576704df9cd4a53eb76f3098e24564fd1f38635686d7d8fb68f"}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x91)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000440)={0x1, [0x0]}, &(0x7f0000000480)=0x8)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r6)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r8, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffc0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}]}, 0x54}}, 0x24004090)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r1)
syz_emit_ethernet(0xe6, &(0x7f0000000680)={@empty, @local, @void, {@mpls_uc={0x8847, {[{0x100, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xbe5, 0x0, 0x1}, {0xffff4, 0x0, 0x1}, {0x8000}, {0x403a, 0x0, 0x1}], @llc={@snap={0x0, 0xaa, "97", "27b66e", 0xf6, "539a66b07e17a62bd3df2f8491e4b108f1c93e95ad18bbfe2571c1c74f6204317a9f8a2adb3e05ba07de017c33b11ab2300d0d33044a6695ee7f23ee414721670fa7c12eb7ee61444fb93491be9ac7e0bbc0c5e6ca6b701232df5a455cc2baa67e4488579f6f3ffaa9b78888f1ec7bc1a67309a183463b5689180a91850de9a374407bd07e8af2de06a192853b7f67979170be3d23850309f425c7e1f05532f5ef16da663bf8c0b1ead205fbc04f6996281e110652b92d6e"}}}}}}, &(0x7f0000000780)={0x1, 0x2, [0xa16, 0x71d, 0x8db, 0x7b2]})
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r6)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r9, 0x211, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x1, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x8080)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r10, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44045}, 0x810)
write$ppp(0xffffffffffffffff, &(0x7f0000000a40)="c04c67dd967f4e5803f7974990dcc3b207ec47efffbc31307514f096570b226d4974aaadeb663aeb602f46d8170b01238478404cacb3e2dddee25e75b7af8b077c49aff800fbc9e0500f671881", 0x4d)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b00)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c00)={'gretap0\x00', &(0x7f0000000b40)={'tunl0\x00', r11, 0x8, 0x20, 0xa6, 0x27, {{0x1b, 0x4, 0x0, 0x2a, 0x6c, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast2, @multicast1, {[@ssrr={0x89, 0x1b, 0x48, [@empty, @private=0xa010100, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @end, @lsrr={0x83, 0x7, 0x7e, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x14, 0x95, 0x3, 0x0, [{@loopback, 0x101}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x1c, 0x22, 0x3, 0x3, [{@broadcast, 0x9}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9}]}, @generic={0x7, 0x3, '\''}]}}}}})
r12 = accept$packet(0xffffffffffffffff, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c80)=0x14)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r7, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}}, 0x20004001)
r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000e40)={'wpan4\x00', <r14=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000e80)={'wpan0\x00', <r15=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x48, r13, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x48}, 0x1, 0x0, 0x0, 0x1000}, 0x24000840)
setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000fc0)={0x2}, 0x4)

653.562939ms ago: executing program 6 (id=5336):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYBLOB="000429bd7000ffdbdf2511000000dc0006800800010000000000040002004400040067636d28616573290000000000000000000000000000000000000000000000001c000000f36caf2b101d1d891e5ec37b88000300f8cbae58f1767ac6c952b79900e0c8dc1455defb7f0ca34d32df86fe1316deea8ad4fddcda2bebce5b490ed4ee2734efbba36849857c966cc5eca86e8eb93b762e25c380b89dd1bdc10475bbc2299b008746f388a58caa1555b04d2c946b0e067f7d795d8ea5e0e54c23cd66c0bdcf557e85d64ca764a273853b7819d7d4634e51afdc36a80002800a000400540003800800010003000000080002000200000008000200080000000800020004000000080002000a00000008000200050000000800010005000000080001000900000008000100880200000800010007000000080001000700000008000100000000003c000380080001007f000000080002000400000008000100ff010000080002000a0000000800010047a20000080002004e67000008000100ff0700000000000000000000000000000000000090b7ad6efb6a8622eb6ce809b329ad5de937d9a1739aff5bf333c1e00c439a2d5e5bc1751c4c398da3f6b5cd47d62c6f14c4cb7df3468371590013b8533be5a5be3fddd403a10f416ca1789716759891684b82c196434f8b28a418dba49bad2482fd0f93893c6455c8d250bcf95ce2bcacaf6921b9b2edee8408c16b32448c543682af92d75c09868f6d4b652cb96838d99aeea0ffd6d5dd759e2d92e015e3e8489742e2ea096c7fd925e286b08cd6097018ccab8de8bff11de82389a36adad9343d3c066a9d65c7d766acb9f4fa1f8d76406338bee40c9a35de57744f7f89"], 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004805)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x4, {{0x2, 0x4e22, @multicast1}}}, 0x88) (async)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000100)={0x5, {{0x2, 0x4e24, @multicast2}}}, 0x88) (async)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r4)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb894f450000140000000001170000010203040506070800000c00020006002000080000000c0003000800170004"]}, 0x58}}, 0x0) (async)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x339)

543.644209ms ago: executing program 2 (id=5337):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x7, &(0x7f0000000740)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x71}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @rand_addr=' \x01\x00'}}]}, 0x3c}}, 0x0) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@ptr={0x10, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @enum64={0x3, 0x3, 0x0, 0x13, 0x0, 0x3, [{0x4, 0x2, 0xc}, {0xb, 0x1, 0x2}, {0x10, 0x6, 0x10}]}]}, {0x0, [0x5f, 0x61, 0x2e]}}, &(0x7f00000002c0)=""/20, 0x65, 0x14, 0x1, 0x931, 0x10000}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xec, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x4, 0x1, 0x7, 0xa, 0x9, 0x50, 0x10}, @jmp={0x5, 0x0, 0xb, 0x8, 0x5, 0xffffffffffffffe0}, @alu={0x4, 0x0, 0xa, 0x4, 0x5, 0x80, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0xf2, &(0x7f0000000140)=""/242, 0x41100, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0x1, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r0, r0, r0], &(0x7f0000000480)=[{0x2, 0x2, 0x4, 0x5}, {0x0, 0x2, 0x80, 0xb}, {0x0, 0x4, 0x6, 0x5}, {0x5, 0x2, 0xa, 0x5b3f7dfba693b11e}, {0x3, 0x4, 0x9}, {0x2, 0x3, 0x9, 0x8}, {0x5, 0x2, 0xf, 0x1}, {0x5, 0x3, 0xb, 0x3}], 0x10, 0x8001}, 0x94)

358.916092ms ago: executing program 1 (id=5338):
r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x1, 'geneve0\x00', {}, 0x1000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
pread64(r2, &(0x7f0000001b40)=""/4102, 0x1006, 0x3)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0)

167.575782ms ago: executing program 1 (id=5339):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010004b0400000000feffffff7a000000", @ANYRES32=0x0, @ANYBLOB="0000a00000000000200012800b0001006272696467650000100002800c002300fbffffffffffffff"], 0x40}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
r2 = socket(0x28, 0x5, 0x0)
getsockopt$inet_tcp_int(r2, 0x6, 0x4, 0x0, &(0x7f0000000180))
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x8010, r2, 0xf792f000)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
recvmmsg$unix(r3, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0)
ioctl$SIOCGSTAMP(r3, 0x8906, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000140))
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa8, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x9, 0x1}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x3}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x84}, 0x24004880)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, 0xffffffffffffffff, 0x100000000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001400090528bd7080faffffff02186d00", @ANYRES32=r8, @ANYBLOB="2300040064000100080002007f0000011e0fdead186a"], 0x28}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x411, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x4}, {0xffe0, 0xb}, {0xa, 0xa}}, ["", ""]}, 0x24}}, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
r10 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f00000003c0)=0x3a2, 0x4)
shutdown(r10, 0x1)

0s ago: executing program 0 (id=5340):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
listen(r2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0xd2}, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x300}, @broadcast, @device_b, @initial, {0x2, 0x2}, @value=@ver_80211n={0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1d, @void}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x408c000)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x140c, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40810)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0x1403, 0x8, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r5}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x4c}}, 0x0)

kernel console output (not intermixed with test programs):

 parsing attributes in process `syz.3.3895'.
[  535.177204][T21965] ip_tables: iptables: counters copy to user failed while replacing table
[  535.259013][T21957] netlink: Unknown conntrack attr (0)
[  535.270058][T21965] netlink: 'syz.4.3894': attribute type 2 has an invalid length.
[  535.596833][T21965] : entered promiscuous mode
[  535.726050][T21975] veth5: entered allmulticast mode
[  535.884295][T21990] netlink: 'syz.4.3903': attribute type 1 has an invalid length.
[  535.916102][T10729] lwtunnel_output(): recursion limit reached on datapath
[  536.083502][T21990] bond3: entered promiscuous mode
[  536.086156][T21990] 8021q: adding VLAN 0 to HW filter on device bond3
[  536.337952][T22013] netlink: 'syz.3.3909': attribute type 1 has an invalid length.
[  536.337988][T22013] nbd: error processing sock list
[  537.257827][T22054] netlink: 'syz.3.3925': attribute type 1 has an invalid length.
[  537.267405][T22054] netlink: 'syz.3.3925': attribute type 2 has an invalid length.
[  537.274796][T22055] syzkaller1: entered promiscuous mode
[  537.274830][T22055] syzkaller1: entered allmulticast mode
[  537.282004][T22054] netlink: 'syz.3.3925': attribute type 3 has an invalid length.
[  537.593896][T22073] __nla_validate_parse: 10 callbacks suppressed
[  537.601441][T22073] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3932'.
[  537.657202][T22072] syzkaller1: entered promiscuous mode
[  537.657274][T22072] syzkaller1: entered allmulticast mode
[  538.107837][T22096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3936'.
[  538.197166][T22099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3936'.
[  538.478285][T10729] lwtunnel_output(): recursion limit reached on datapath
[  538.551393][T22117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3943'.
[  538.896697][T22128] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3946'.
[  538.911538][T22128] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3946'.
[  538.949388][T22130] netlink: 'syz.3.3947': attribute type 2 has an invalid length.
[  539.071307][T22136] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3949'.
[  539.142573][T22138] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20001
[  539.275058][T22140] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  539.330880][T22140] syzkaller0: entered promiscuous mode
[  539.330973][T22140] syzkaller0: entered allmulticast mode
[  539.347265][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3955'.
[  539.446576][T22146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3952'.
[  539.446623][T22146] netlink: 'syz.4.3952': attribute type 10 has an invalid length.
[  539.446653][T22146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3952'.
[  539.596054][T22150] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.597060][T22150] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.760116][  T999] lwtunnel_output(): recursion limit reached on datapath
[  540.285517][T22150] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  540.337843][T22150] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  540.668942][T22150] veth0_macvtap: left allmulticast mode
[  540.809949][ T1161] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.810081][ T1161] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.810146][ T1161] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.829149][T22146] geneve2: entered promiscuous mode
[  540.829184][T22146] geneve2: entered allmulticast mode
[  540.891447][  T999] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  540.892366][ T7813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  540.892430][ T7813] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  540.892493][ T7813] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  541.679477][ T1088] lwtunnel_output(): recursion limit reached on datapath
[  541.690261][T22205] vlan0: entered allmulticast mode
[  541.690296][T22205] bond0: entered allmulticast mode
[  541.690330][T22205] bond_slave_0: entered allmulticast mode
[  541.690351][T22205] bond_slave_1: entered allmulticast mode
[  541.799594][T22213] xt_NETMAP: bad rangesize 37.
[  541.823591][T22217] xt_NETMAP: bad rangesize 37.
[  542.110638][T22235] sctp: [Deprecated]: syz.3.3978 (pid 22235) Use of struct sctp_assoc_value in delayed_ack socket option.
[  542.110638][T22235] Use struct sctp_sack_info instead
[  542.758290][T22257] __nla_validate_parse: 8 callbacks suppressed
[  542.758335][T22257] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3986'.
[  542.874254][T22260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3986'.
[  542.874295][T22260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3986'.
[  542.910962][T22266] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  542.928816][T22257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3986'.
[  543.140401][T22272] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  543.353333][T22279] syzkaller0: entered promiscuous mode
[  543.353381][T22279] syzkaller0: entered allmulticast mode
[  543.520448][  T999] lwtunnel_output(): recursion limit reached on datapath
[  543.608918][T22289] netlink: 'syz.0.3999': attribute type 10 has an invalid length.
[  543.667107][T22296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  543.729658][T22288] netlink: 'syz.0.3999': attribute type 2 has an invalid length.
[  543.993115][T22308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4002'.
[  544.005002][T22316] netlink: 'syz.0.4006': attribute type 24 has an invalid length.
[  544.025007][T22316] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  544.035084][T22316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  544.314861][T22321] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified.
[  544.324879][T22321] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  544.340544][T22325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4009'.
[  544.408633][T22299] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  544.409619][T22299] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  544.409682][T22299] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  544.409738][T22299] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  544.409783][T22299] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  544.458646][T22324] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4008'.
[  544.751158][T22336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  544.859034][T22339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  544.947612][T22345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  545.089186][T22346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  545.886488][T22375] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4018'.
[  546.317418][T22389] sctp: [Deprecated]: syz.4.4021 (pid 22389) Use of int in maxseg socket option.
[  546.317418][T22389] Use struct sctp_assoc_value instead
[  546.366475][T22394] netlink: 'syz.0.4022': attribute type 2 has an invalid length.
[  546.479703][T22394] syzkaller1: entered promiscuous mode
[  546.479824][T22394] syzkaller1: entered allmulticast mode
[  546.631049][T22412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4024'.
[  546.718883][T22417] xt_nat: multiple ranges no longer supported
[  547.457546][T22423] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.458206][T22423] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.820299][T22427] tipc: Failed to obtain node identity
[  547.821647][T22427] tipc: Enabling of bearer <ib:bridge_slave_0> rejected, failed to enable media
[  547.885277][ T1161] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  547.887003][ T1161] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  547.887298][ T1161] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  547.887336][ T1161] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  548.077194][T22455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4032'.
[  548.130191][T22460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4033'.
[  548.201378][T22462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4036'.
[  548.212183][T22462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4036'.
[  548.300744][T22458] syzkaller0: entered promiscuous mode
[  548.300836][T22458] syzkaller0: entered allmulticast mode
[  548.530941][T22466] veth0_vlan: left promiscuous mode
[  548.546378][T22473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4040'.
[  548.556811][T22473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4040'.
[  548.619879][T22475] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4041'.
[  548.620100][T22476] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4041'.
[  548.717071][ T1161] net_ratelimit: 475 callbacks suppressed
[  548.717132][ T1161] lwtunnel_output(): recursion limit reached on datapath
[  548.753438][T22478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4041'.
[  548.753510][T22478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4041'.
[  549.008981][T22492] netlink: 'syz.0.4045': attribute type 6 has an invalid length.
[  549.092834][T22493] netlink: 'syz.4.4047': attribute type 3 has an invalid length.
[  549.132513][T22498] Cannot find set identified by id 65535 to match
[  549.359462][T22520] netlink: 'syz.2.4052': attribute type 6 has an invalid length.
[  549.872676][T22515] syzkaller0: entered promiscuous mode
[  549.872763][T22515] syzkaller0: entered allmulticast mode
[  550.122255][T22559] netlink: 'syz.0.4063': attribute type 4 has an invalid length.
[  550.641704][ T1161] lwtunnel_output(): recursion limit reached on datapath
[  552.758156][T22578] netlink: 'syz.0.4065': attribute type 1 has an invalid length.
[  552.828746][T22578] 8021q: adding VLAN 0 to HW filter on device bond2
[  552.864740][T22587] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  553.207326][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  553.358980][T22612] __nla_validate_parse: 9 callbacks suppressed
[  553.359020][T22612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4074'.
[  553.441889][T22612] hsr_slave_1 (unregistering): left promiscuous mode
[  553.643875][T22621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4077'.
[  553.657651][T22624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4077'.
[  553.833140][T22631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4081'.
[  554.153314][T22644] macsec1: entered promiscuous mode
[  554.160736][T22644] hsr0: entered promiscuous mode
[  554.173138][T22644] hsr0: left promiscuous mode
[  554.245856][T22657] syzkaller0: left promiscuous mode
[  554.245923][T22657] syzkaller0: left allmulticast mode
[  554.265351][T22657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4086'.
[  554.486765][ T1088] lwtunnel_output(): recursion limit reached on datapath
[  554.565339][T22675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4091'.
[  554.671756][T22679] netlink: 'syz.0.4093': attribute type 4 has an invalid length.
[  554.835861][T22685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4095'.
[  554.835960][T22685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  554.839821][T22685] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4095'.
[  554.839860][T22685] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4095'.
[  555.127782][T22700] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4099'.
[  555.142276][T22700] netlink: 'syz.1.4099': attribute type 2 has an invalid length.
[  555.208589][T22705] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  555.208630][T22705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  555.256974][T22668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  556.321994][T22749] netlink: 'syz.1.4112': attribute type 11 has an invalid length.
[  556.357183][T22749] netlink: 'syz.1.4112': attribute type 1 has an invalid length.
[  556.396255][ T1161] lwtunnel_output(): recursion limit reached on datapath
[  557.017386][T22786] netlink: 'syz.2.4120': attribute type 2 has an invalid length.
[  557.186507][T22790] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  557.212055][T22790] bond3 (unregistering): Released all slaves
[  557.478616][T22802] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  557.944520][  T999] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  557.944587][  T999] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  557.944635][  T999] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  558.568747][T22852] syzkaller1: entered promiscuous mode
[  558.568795][T22852] syzkaller1: entered allmulticast mode
[  558.774589][T22859] __nla_validate_parse: 38 callbacks suppressed
[  558.782232][T22859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4144'.
[  558.929486][T22867] netlink: 'syz.0.4143': attribute type 21 has an invalid length.
[  558.959249][T10733] lwtunnel_output(): recursion limit reached on datapath
[  559.592908][T22890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4151'.
[  559.612986][T22891] netlink: 'syz.1.4150': attribute type 3 has an invalid length.
[  559.639783][T22891] netlink: 'syz.1.4150': attribute type 3 has an invalid length.
[  559.649684][T22893] netlink: 'syz.0.4152': attribute type 5 has an invalid length.
[  559.651578][T22893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4152'.
[  559.660884][T22893] veth0_to_bond: entered allmulticast mode
[  559.866203][T22899] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  559.926039][T22899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  560.128612][T22905] syzkaller1: entered promiscuous mode
[  560.128653][T22905] syzkaller1: entered allmulticast mode
[  560.199228][T22912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4158'.
[  560.242957][ T1116] lwtunnel_output(): recursion limit reached on datapath
[  560.603328][T22946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4164'.
[  560.806104][T22949] lo speed is unknown, defaulting to 1000
[  560.989190][T22958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4171'.
[  561.031161][T22958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4171'.
[  561.617732][T22977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4177'.
[  561.939482][T22992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4180'.
[  562.108073][T23001] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4185'.
[  562.155580][T10735] lwtunnel_output(): recursion limit reached on datapath
[  562.692429][T23030] dvmrp0: left allmulticast mode
[  562.838084][T23040] x_tables: unsorted underflow at hook 3
[  563.857008][T23086] __nla_validate_parse: 8 callbacks suppressed
[  563.857343][T23086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4208'.
[  563.893134][T23084] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4207'.
[  564.059400][T23095] netlink: 'syz.3.4210': attribute type 11 has an invalid length.
[  564.070382][T23095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4210'.
[  564.081493][ T1116] lwtunnel_output(): recursion limit reached on datapath
[  564.412723][T23104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4212'.
[  564.481075][T23107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4212'.
[  564.482348][T23108] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4212'.
[  564.746772][T23112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4215'.
[  565.279945][ T1088] lwtunnel_output(): recursion limit reached on datapath
[  565.326230][T23136] ip6t_hbh: Not strict - not implemented
[  565.332520][T23136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4222'.
[  565.517279][T23136] macvtap1: entered promiscuous mode
[  565.522915][T23136] vlan0: entered promiscuous mode
[  565.528598][T23136] bond0: entered promiscuous mode
[  565.533883][T23136] bond_slave_0: entered promiscuous mode
[  565.542418][T23136] bond_slave_1: entered promiscuous mode
[  565.549595][T23136] macvtap1: entered allmulticast mode
[  566.220748][T23187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4232'.
[  566.418776][T23197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4234'.
[  567.196935][ T1116] lwtunnel_output(): recursion limit reached on datapath
[  567.472879][T23227] bridge0: port 3(team0) entered disabled state
[  567.473838][T23227] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.474447][T23227] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.621740][T23227] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  567.636412][T23227] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  568.177582][T23227] vlan0: left promiscuous mode
[  568.177673][T23227] bond0: left promiscuous mode
[  568.177685][T23227] bond_slave_0: left promiscuous mode
[  568.178102][T23227] bond_slave_1: left promiscuous mode
[  568.190115][T10735] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  568.190142][T10735] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  568.190622][T10735] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  568.190643][T10735] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  568.240334][T10735] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  568.240378][T10735] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  568.240426][T10735] netdevsim netdevsim2 
: unset [0, 0] type 1 family 0 port 8472 - 0
[  568.240452][T10735] netdevsim netdevsim2 
: unset [1, 0] type 2 family 0 port 6081 - 0
[  568.332711][ T4934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  568.342185][ T4934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  568.350302][ T4934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  568.359754][ T4934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  568.367675][ T4934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  568.768003][T23273] netlink: 'syz.2.4255': attribute type 1 has an invalid length.
[  568.869419][T23273] 8021q: adding VLAN 0 to HW filter on device bond7
[  568.941138][T23273] bond7: (slave geneve3): making interface the new active one
[  568.958062][T23273] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  568.967686][ T1088] netdevsim netdevsim2 
: set [1, 0] type 2 family 0 port 6081 - 0
[  568.967829][ T1088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  568.967861][ T1088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  568.967891][ T1088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  569.375292][T23300] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  569.470846][T23308] __nla_validate_parse: 1 callbacks suppressed
[  569.470902][T23308] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4263'.
[  569.472829][T23308] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4263'.
[  569.492401][T23254] lo speed is unknown, defaulting to 1000
[  569.908165][T23254] bridge0: port 1(bridge_slave_0) entered blocking state
[  569.908331][T23254] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.908701][T23254] bridge_slave_0: entered allmulticast mode
[  569.910344][T23254] bridge_slave_0: entered promiscuous mode
[  569.913641][T23254] bridge0: port 2(bridge_slave_1) entered blocking state
[  569.913801][T23254] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.913915][T23254] bridge_slave_1: entered allmulticast mode
[  569.917630][T23254] bridge_slave_1: entered promiscuous mode
[  569.955340][T23254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  569.958995][T23254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  569.992821][T23254] team0: Port device team_slave_0 added
[  569.997723][T23254] team0: Port device team_slave_1 added
[  570.022923][T23254] batman_adv: batadv0: Adding interface: batadv_slave_0
[  570.022956][T23254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  570.023321][T23254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  570.025948][T23254] batman_adv: batadv0: Adding interface: batadv_slave_1
[  570.025961][T23254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  570.025984][T23254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  570.091294][T23254] hsr_slave_0: entered promiscuous mode
[  570.092699][T23254] hsr_slave_1: entered promiscuous mode
[  570.093422][T23254] debugfs: 'hsr0' already exists in 'hsr'
[  570.093441][T23254] Cannot create hsr debugfs directory
[  570.475317][T10735] lwtunnel_output(): recursion limit reached on datapath
[  570.486813][ T5618] Bluetooth: hci3: command tx timeout
[  572.337848][T23300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  572.353921][T23254] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  572.386230][T23254] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  572.399109][T23254] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  572.404034][ T1088] lwtunnel_output(): recursion limit reached on datapath
[  572.438930][T23254] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  572.452818][T23254] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  572.483617][T23254] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  572.494509][T23254] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  572.525896][T23254] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  572.554740][ T5618] Bluetooth: hci3: command tx timeout
[  572.603790][T23333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4267'.
[  572.669309][T23333] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4267'.
[  572.940323][T23254] 8021q: adding VLAN 0 to HW filter on device bond0
[  572.989301][T23254] 8021q: adding VLAN 0 to HW filter on device team0
[  573.018045][ T6233] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.018153][ T6233] bridge0: port 1(bridge_slave_0) entered forwarding state
[  573.065395][  T999] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.065576][  T999] bridge0: port 2(bridge_slave_1) entered forwarding state
[  573.191443][T23377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'.
[  573.591274][T23392] netlink: 'syz.1.4278': attribute type 1 has an invalid length.
[  573.646819][T23398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4279'.
[  573.931499][T23404] bond4: (slave gretap5): making interface the new active one
[  573.941484][T23404] bond4: (slave gretap5): Enslaving as an active interface with an up link
[  574.367669][T23420] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4283'.
[  574.640190][ T5618] Bluetooth: hci3: command tx timeout
[  574.663051][T23427] sock: sock_set_timeout: `syz.3.4285' (pid 23427) tries to set negative timeout
[  575.147722][T23455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4290'.
[  575.245440][T23254] 8021q: adding VLAN 0 to HW filter on device batadv0
[  575.596814][  T999] lwtunnel_output(): recursion limit reached on datapath
[  575.692535][T23470] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  576.174490][T23489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4298'.
[  576.288922][T23254] veth0_vlan: entered promiscuous mode
[  576.344022][T23254] veth1_vlan: entered promiscuous mode
[  576.436847][T23496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4300'.
[  576.463418][T23254] veth0_macvtap: entered promiscuous mode
[  576.487740][T23501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4302'.
[  576.489884][T23254] veth1_macvtap: entered promiscuous mode
[  576.549079][T23503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4303'.
[  576.716394][ T5618] Bluetooth: hci3: command tx timeout
[  576.733202][T23254] batman_adv: batadv0: Interface activated: batadv_slave_0
[  576.768281][T23254] batman_adv: batadv0: Interface activated: batadv_slave_1
[  576.804830][   T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  576.804887][   T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  576.804919][   T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  576.804944][   T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  576.848448][T23512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4306'.
[  576.858254][T23512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4306'.
[  577.217934][T23533] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4308'.
[  577.474972][T23509] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  578.099614][   T43] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  578.100526][   T43] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  578.136250][T10727] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  578.136408][T10727] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  578.156278][  T999] lwtunnel_output(): recursion limit reached on datapath
[  578.157110][  T999] lwtunnel_output(): recursion limit reached on datapath
[  579.956877][T23519] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  580.168018][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  580.168058][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  580.281886][T10727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  580.281930][T10727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  580.323876][T23558] ip6t_rt: too many addresses specified
[  580.427107][T23558] netlink: 'syz.3.4312': attribute type 4 has an invalid length.
[  580.717700][   T43] lwtunnel_output(): recursion limit reached on datapath
[  580.753633][T23572] xt_hashlimit: size too large, truncated to 1048576
[  580.805544][T23577] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  580.839038][T23577] xt_hashlimit: size too large, truncated to 1048576
[  580.846850][T23581] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  580.850350][T23580] netlink: 'syz.1.4321': attribute type 11 has an invalid length.
[  580.850366][T23580] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4321'.
[  580.949847][T23594] netlink: 'syz.1.4321': attribute type 11 has an invalid length.
[  580.949881][T23594] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4321'.
[  580.951278][T23593] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4322'.
[  581.623485][T23617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4327'.
[  582.353009][T23652] netlink: 'syz.0.4334': attribute type 16 has an invalid length.
[  582.353055][T23652] netlink: 'syz.0.4334': attribute type 3 has an invalid length.
[  582.357225][T23652] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4334'.
[  582.598733][T23661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4337'.
[  582.705786][ T6233] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  582.705888][ T6233] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  582.705916][ T6233] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  582.705944][ T6233] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  582.716415][T23661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4337'.
[  582.716433][T23661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4337'.
[  582.718387][T23661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4337'.
[  582.718404][T23661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4337'.
[  582.836234][T23666] gretap0: entered promiscuous mode
[  582.850986][T23666] gretap0: left promiscuous mode
[  582.966662][T23670] gretap0: entered promiscuous mode
[  582.979706][T23670] gretap0: left promiscuous mode
[  583.028696][T23682] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  583.053841][T23677] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  583.085577][T23677] x_tables: ip_tables: icmp match: only valid for protocol 1
[  583.099081][T23677] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  583.129918][T23677] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  583.132372][T23677] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  583.152830][T23683] netlink: 'syz.5.4342': attribute type 83 has an invalid length.
[  583.156880][T23677] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  583.162801][T23677] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  583.180701][T23677] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  583.208091][T23677] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  583.257298][T23677] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  583.915905][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  583.916793][ T1088] lwtunnel_output(): recursion limit reached on datapath
[  584.192184][T23700] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  584.270752][T23700] bond8 (unregistering): Released all slaves
[  584.463834][T23712] syzkaller0: Caught tx_queue_len zero misconfig
[  584.765235][T23747] netlink: 'syz.5.4355': attribute type 11 has an invalid length.
[  585.391738][T23771] xt_hashlimit: size too large, truncated to 1048576
[  585.470997][T23782] C: renamed from lo (while UP)
[  585.509781][T23784] netlink: 'syz.2.4366': attribute type 1 has an invalid length.
[  585.510102][T23782] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  585.618877][T23784] bond8: entered promiscuous mode
[  585.622112][T23784] 8021q: adding VLAN 0 to HW filter on device bond8
[  585.755730][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  585.957830][T23797] __nla_validate_parse: 10 callbacks suppressed
[  585.957873][T23797] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4368'.
[  586.239056][T23811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4371'.
[  586.302659][T23812] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4371'.
[  586.313289][T23812] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4371'.
[  586.329206][T23812] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4371'.
[  586.341989][T23812] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4371'.
[  586.349496][T23812] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4371'.
[  586.353463][T23812] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4371'.
[  586.356206][T23812] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4371'.
[  586.358719][T23812] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4371'.
[  586.984305][T23846] Cannot find add_set index 4 as target
[  587.648065][T23878] bridge0: port 1(bridge_slave_0) entered disabled state
[  587.651587][T23878] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.261455][T23898] netlink: 'syz.1.4396': attribute type 3 has an invalid length.
[  588.478824][T23912] sctp: [Deprecated]: syz.0.4400 (pid 23912) Use of int in maxseg socket option.
[  588.478824][T23912] Use struct sctp_assoc_value instead
[  588.584495][T23917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  588.824902][T23927] --map-set only usable from mangle table
[  589.172691][T23924] netlink: 'syz.2.4402': attribute type 3 has an invalid length.
[  589.203931][T23924] Bluetooth: hci0: unsupported parameter 5134
[  589.204636][T23924] Bluetooth: hci0: unsupported parameter 8192
[  589.204667][T23924] Bluetooth: hci0: unsupported parameter 5134
[  589.204683][T23924] Bluetooth: hci0: unsupported parameter 8192
[  589.326714][T23941] bridge0: port 3(veth1_to_bridge) entered blocking state
[  589.326825][T23941] bridge0: port 3(veth1_to_bridge) entered disabled state
[  589.326988][T23941] veth1_to_bridge: entered allmulticast mode
[  589.341958][T23941] veth1_to_bridge: entered promiscuous mode
[  589.677163][   T43] lwtunnel_output(): recursion limit reached on datapath
[  589.678014][   T43] lwtunnel_output(): recursion limit reached on datapath
[  590.151388][T23973] x_tables: duplicate underflow at hook 1
[  590.193916][T23979] x_tables: duplicate underflow at hook 1
[  590.957411][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  591.031888][T24017] __nla_validate_parse: 47 callbacks suppressed
[  591.033427][T24017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4428'.
[  591.078768][T24014] netlink: 'syz.1.4426': attribute type 1 has an invalid length.
[  591.078808][T24014] netlink: 'syz.1.4426': attribute type 1 has an invalid length.
[  591.133746][T24014] geneve2: entered promiscuous mode
[  591.133783][T24014] geneve2: entered allmulticast mode
[  591.278850][T24021] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4429'.
[  591.362880][T24026] netlink: 'syz.1.4431': attribute type 21 has an invalid length.
[  591.498536][T24026] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  591.513034][T24026] bond5 (unregistering): Released all slaves
[  591.532591][T24034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4433'.
[  591.988324][T24029] syzkaller0: entered promiscuous mode
[  592.000862][T24029] syzkaller0: entered allmulticast mode
[  592.314107][T24067] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4439'.
[  592.347620][T24067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4439'.
[  592.444849][T24072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4440'.
[  592.488687][T24082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4443'.
[  592.504661][T24082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4443'.
[  592.630954][T24089] bridge0: port 1(veth1_to_bridge) entered blocking state
[  592.631179][T24089] bridge0: port 1(veth1_to_bridge) entered disabled state
[  592.631324][T24089] veth1_to_bridge: entered allmulticast mode
[  592.646203][T24089] veth1_to_bridge: entered promiscuous mode
[  593.472351][T24123] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4450'.
[  593.667502][T24134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4454'.
[  593.898026][T24146] Bluetooth: MGMT ver 1.23
[  594.050791][T24155] sctp: [Deprecated]: syz.1.4460 (pid 24155) Use of struct sctp_assoc_value in delayed_ack socket option.
[  594.050791][T24155] Use struct sctp_sack_info instead
[  594.132584][T24158] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  594.204375][T24163] openvswitch: netlink: Duplicate or invalid key (type 0).
[  594.628171][T24166] netlink: 'syz.0.4464': attribute type 1 has an invalid length.
[  594.716106][   T43] lwtunnel_output(): recursion limit reached on datapath
[  594.734548][T24173] FAULT_INJECTION: forcing a failure.
[  594.734548][T24173] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  594.734606][T24173] CPU: 0 UID: 0 PID: 24173 Comm: syz.2.4467 Not tainted syzkaller #0 PREEMPT(full) 
[  594.734628][T24173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  594.734646][T24173] Call Trace:
[  594.734657][T24173]  <TASK>
[  594.734665][T24173]  dump_stack_lvl+0xe8/0x150
[  594.734697][T24173]  should_fail_ex+0x410/0x560
[  594.734732][T24173]  _copy_from_user+0x2d/0xb0
[  594.734754][T24173]  ___sys_sendmsg+0x1c6/0x360
[  594.734774][T24173]  ? __lock_acquire+0x6df/0x2e50
[  594.734797][T24173]  ? __pfx____sys_sendmsg+0x10/0x10
[  594.734852][T24173]  ? __fget_files+0x2a/0x420
[  594.734873][T24173]  ? __fget_files+0x3a2/0x420
[  594.734900][T24173]  __x64_sys_sendmsg+0x1b1/0x290
[  594.734922][T24173]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  594.734963][T24173]  do_syscall_64+0x166/0x520
[  594.734988][T24173]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.735005][T24173]  ? clear_bhb_loop+0x70/0xc0
[  594.735034][T24173]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.735052][T24173] RIP: 0033:0x7f89c019e159
[  594.735069][T24173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  594.735084][T24173] RSP: 002b:00007f89c10c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  594.735107][T24173] RAX: ffffffffffffffda RBX: 00007f89c0425fa0 RCX: 00007f89c019e159
[  594.735120][T24173] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000007
[  594.735131][T24173] RBP: 00007f89c10c6090 R08: 0000000000000000 R09: 0000000000000000
[  594.735142][T24173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  594.735153][T24173] R13: 00007f89c0426038 R14: 00007f89c0425fa0 R15: 00007ffe45bd0d98
[  594.735182][T24173]  </TASK>
[  595.442303][ T1088] lwtunnel_output(): recursion limit reached on datapath
[  596.150233][T24219] lo: left promiscuous mode
[  596.181390][T24219] mac80211_hwsim hwsim44 wlan0: left promiscuous mode
[  596.182381][T24219] bond1: left promiscuous mode
[  596.182415][T24219] bond1: left allmulticast mode
[  596.186702][T24219] gretap3: left promiscuous mode
[  596.186820][T24219] xfrm1: left promiscuous mode
[  596.186834][T24219] xfrm1: left allmulticast mode
[  596.187397][T24219] veth5: left allmulticast mode
[  596.231939][T24219] geneve2: left promiscuous mode
[  596.231975][T24219] geneve2: left allmulticast mode
[  596.366910][ T1096] IPVS: starting estimator thread 0...
[  596.474948][T24226] IPVS: using max 29 ests per chain, 69600 per kthread
[  596.582243][T24227] FAULT_INJECTION: forcing a failure.
[  596.582243][T24227] name failslab, interval 1, probability 0, space 0, times 1
[  596.582293][T24227] CPU: 0 UID: 0 PID: 24227 Comm: syz.0.4481 Not tainted syzkaller #0 PREEMPT(full) 
[  596.582313][T24227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  596.582324][T24227] Call Trace:
[  596.582331][T24227]  <TASK>
[  596.582339][T24227]  dump_stack_lvl+0xe8/0x150
[  596.582369][T24227]  should_fail_ex+0x410/0x560
[  596.582400][T24227]  ? __alloc_skb+0x1db/0x7a0
[  596.582426][T24227]  should_failslab+0xa8/0x100
[  596.582449][T24227]  ? __alloc_skb+0x1db/0x7a0
[  596.582472][T24227]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  596.582498][T24227]  ? __alloc_skb+0x18d/0x7a0
[  596.582533][T24227]  ? __alloc_skb+0x1db/0x7a0
[  596.582566][T24227]  __alloc_skb+0x1db/0x7a0
[  596.582597][T24227]  netlink_sendmsg+0x5d4/0xb40
[  596.582630][T24227]  ? __pfx_netlink_sendmsg+0x10/0x10
[  596.582661][T24227]  ? apparmor_socket_sendmsg+0x98/0x360
[  596.582690][T24227]  ? __pfx_netlink_sendmsg+0x10/0x10
[  596.582711][T24227]  sock_sendmsg_nosec+0x13a/0x180
[  596.582738][T24227]  ____sys_sendmsg+0x54e/0x850
[  596.582763][T24227]  ? __pfx_____sys_sendmsg+0x10/0x10
[  596.582796][T24227]  ? import_iovec+0x73/0xa0
[  596.582819][T24227]  ___sys_sendmsg+0x2a5/0x360
[  596.582837][T24227]  ? __lock_acquire+0x6df/0x2e50
[  596.582861][T24227]  ? __pfx____sys_sendmsg+0x10/0x10
[  596.582916][T24227]  ? __fget_files+0x2a/0x420
[  596.582939][T24227]  ? __fget_files+0x3a2/0x420
[  596.582972][T24227]  __x64_sys_sendmsg+0x1b1/0x290
[  596.582994][T24227]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  596.583036][T24227]  do_syscall_64+0x166/0x520
[  596.583060][T24227]  ? trace_irq_disable+0x3b/0x140
[  596.583078][T24227]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.583096][T24227]  ? clear_bhb_loop+0x70/0xc0
[  596.583119][T24227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.583136][T24227] RIP: 0033:0x7f49bfb9e159
[  596.583153][T24227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  596.583168][T24227] RSP: 002b:00007f49c0b04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  596.583187][T24227] RAX: ffffffffffffffda RBX: 00007f49bfe25fa0 RCX: 00007f49bfb9e159
[  596.583201][T24227] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000007
[  596.583213][T24227] RBP: 00007f49c0b04090 R08: 0000000000000000 R09: 0000000000000000
[  596.583224][T24227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  596.583234][T24227] R13: 00007f49bfe26038 R14: 00007f49bfe25fa0 R15: 00007ffe8249ab78
[  596.583265][T24227]  </TASK>
[  596.718722][ T1088] lwtunnel_output(): recursion limit reached on datapath
[  596.879789][T24240] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  597.392853][T24260] geneve3: entered promiscuous mode
[  597.392893][T24260] geneve3: entered allmulticast mode
[  597.406511][T24263] __nla_validate_parse: 7 callbacks suppressed
[  597.406559][T24263] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4491'.
[  597.643355][T24274] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4495'.
[  597.650378][T24276] netlink: 'syz.2.4494': attribute type 2 has an invalid length.
[  597.661761][T24278] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4494'.
[  597.861826][T24284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4493'.
[  597.875727][T24287] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  598.140766][T24300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4499'.
[  598.430935][T24316] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  598.586130][T24319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4507'.
[  598.648901][T24319] netlink: 'syz.0.4507': attribute type 29 has an invalid length.
[  598.652796][T24319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4507'.
[  598.690851][T24324] netlink: 'syz.2.4505': attribute type 2 has an invalid length.
[  598.888116][T24321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4504'.
[  598.909654][T24333] netlink: 'syz.5.4508': attribute type 12 has an invalid length.
[  598.909686][T24333] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4508'.
[  599.592230][T24367] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4519'.
[  599.920866][   T59] lwtunnel_output(): recursion limit reached on datapath
[  601.198678][ T1096] lwtunnel_output(): recursion limit reached on datapath
[  601.561440][T24438] bond6: entered promiscuous mode
[  601.563830][T24438] bond6: entered allmulticast mode
[  601.568712][T24438] 8021q: adding VLAN 0 to HW filter on device bond6
[  601.707291][T24437] bond7: entered promiscuous mode
[  601.707694][T24437] bond7: entered allmulticast mode
[  601.709698][T24437] 8021q: adding VLAN 0 to HW filter on device bond7
[  601.750712][T24447] netlink: 'syz.2.4538': attribute type 29 has an invalid length.
[  602.316600][T24479] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  602.476826][ T1161] lwtunnel_output(): recursion limit reached on datapath
[  604.810315][T24464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  605.016632][T24516] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  605.156470][T24524] __nla_validate_parse: 27 callbacks suppressed
[  605.156551][T24524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4553'.
[  605.295189][T24535] veth0: entered promiscuous mode
[  605.389946][T24529] veth0: left promiscuous mode
[  605.670872][T24546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4561'.
[  605.682711][T10731] lwtunnel_output(): recursion limit reached on datapath
[  606.056225][T24559] mac80211_hwsim hwsim51 wlan0: left promiscuous mode
[  606.056265][T24559] mac80211_hwsim hwsim51 wlan0: entered allmulticast mode
[  606.871138][T24588] netlink: 'syz.5.4572': attribute type 15 has an invalid length.
[  606.947707][T24590] netlink: 'syz.0.4573': attribute type 12 has an invalid length.
[  606.947778][T24590] netlink: 'syz.0.4573': attribute type 29 has an invalid length.
[  606.947804][T24590] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4573'.
[  606.947823][T24590] netlink: 51 bytes leftover after parsing attributes in process `syz.0.4573'.
[  606.957446][T10735] lwtunnel_output(): recursion limit reached on datapath
[  607.154577][T24598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4575'.
[  608.236183][T24495] lwtunnel_output(): recursion limit reached on datapath
[  609.318121][T24567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  609.792353][T24617] netlink: 'syz.3.4582': attribute type 2 has an invalid length.
[  610.270652][T24634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4585'.
[  610.270727][T24634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4585'.
[  610.270778][T24634] netlink: 'syz.0.4585': attribute type 14 has an invalid length.
[  610.270791][T24634] netlink: 'syz.0.4585': attribute type 13 has an invalid length.
[  610.797834][T10727] lwtunnel_output(): recursion limit reached on datapath
[  611.446216][T24678] syzkaller0: entered promiscuous mode
[  611.451935][T24678] syzkaller0: entered allmulticast mode
[  611.469551][T24680] ip_tables: iptables: counters copy to user failed while replacing table
[  611.482518][T24685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4596'.
[  611.502929][T24692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4596'.
[  612.075144][   T50] lwtunnel_output(): recursion limit reached on datapath
[  613.760197][T24651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  613.873078][T24696] nbd: must specify a size in bytes for the device
[  614.007990][T24495] lwtunnel_output(): recursion limit reached on datapath
[  614.131193][T24699] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4599'.
[  614.186932][T24705] syzkaller1: entered promiscuous mode
[  614.192496][T24705] syzkaller1: entered allmulticast mode
[  614.201618][T24705] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4600'.
[  614.223575][T24710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4601'.
[  614.272370][T24714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4601'.
[  614.338023][T24717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4603'.
[  614.349596][T24717] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  614.393915][T24714] veth1_to_bridge: left allmulticast mode
[  614.396165][T24714] veth1_to_bridge: left promiscuous mode
[  614.396563][T24714] bridge0: port 3(veth1_to_bridge) entered disabled state
[  614.429630][T24714] bridge_slave_1: left allmulticast mode
[  614.429722][T24714] bridge_slave_1: left promiscuous mode
[  614.430090][T24714] bridge0: port 2(bridge_slave_1) entered disabled state
[  614.443073][T24720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4603'.
[  614.485698][T24714] bridge_slave_0: left allmulticast mode
[  614.485786][T24714] bridge_slave_0: left promiscuous mode
[  614.486146][T24714] bridge0: port 1(bridge_slave_0) entered disabled state
[  614.914746][T24734] tap0: tun_chr_ioctl cmd 1074025672
[  614.914830][T24734] tap0: ignored: set checksum disabled
[  615.359851][T24757] __nla_validate_parse: 3 callbacks suppressed
[  615.366256][T24757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4609'.
[  615.375846][T24757] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4609'.
[  615.696643][T24771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4613'.
[  615.791985][T24769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  615.855201][T24775] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4611'.
[  615.918918][T24497] lwtunnel_output(): recursion limit reached on datapath
[  616.151673][T24791] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4
[  616.164584][T24791] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4618'.
[  616.206001][T24791] gretap0: entered promiscuous mode
[  616.268528][T24791] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4618'.
[  616.281479][T24791] 0ªî{X¹¦: renamed from gretap0
[  616.296504][T24791] 0ªî{X¹¦: left promiscuous mode
[  616.296578][T24791] 0ªî{X¹¦: entered allmulticast mode
[  616.305196][T24791] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  616.967958][T24807] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  617.235817][T24814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4625'.
[  617.567520][T24828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4629'.
[  617.567818][T24828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4629'.
[  617.568047][T24828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4629'.
[  617.837557][T10735] lwtunnel_output(): recursion limit reached on datapath
[  618.194487][T24851] xfrm0: entered allmulticast mode
[  618.535470][T24860] netlink: 'syz.5.4639': attribute type 3 has an invalid length.
[  618.638796][T24860] tipc: Started in network mode
[  618.643766][T24860] tipc: Node identity ac14140f, cluster identity 4711
[  618.650971][T24860] tipc: New replicast peer: 255.255.255.255
[  618.659854][T24860] tipc: Enabled bearer <udp:syz2>, priority 10
[  619.173103][T24880] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  619.490729][ T7813] pim6reg: left allmulticast mode
[  619.551290][ T7813] tipc: Resetting bearer <eth:xfrm0>
[  619.757234][T10735] lwtunnel_output(): recursion limit reached on datapath
[  620.096328][ T7813] tipc: Disabling bearer <eth:xfrm0>
[  620.331164][ T7813] bond5 (unregistering): (slave gretap0): Releasing active interface
[  620.471071][ T7813] bond3 (unregistering): (slave geneve2): Releasing active interface
[  620.616744][ T7813] bond4 (unregistering): (slave .`): Releasing active interface
[  620.629321][ T7813] .` (unregistering): Released all slaves
[  620.649014][ T7813] bond1 (unregistering): Released all slaves
[  620.663828][ T7813] bond2 (unregistering): Released all slaves
[  620.692747][ T7813] bond3 (unregistering): Released all slaves
[  620.720293][ T7813] bond4 (unregistering): Released all slaves
[  620.743210][ T7813] bond5 (unregistering): Released all slaves
[  620.762335][ T7813] bond6 (unregistering): Released all slaves
[  620.792807][ T7813] bond7 (unregistering): Released all slaves
[  620.819782][T24891] __nla_validate_parse: 67 callbacks suppressed
[  620.819829][T24891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4645'.
[  620.855372][ T6733] tipc: Node number set to 2886997007
[  620.927775][T24930] C: entered allmulticast mode
[  620.935351][T24930] netlink: 'syz.3.4656': attribute type 64 has an invalid length.
[  620.944476][T24930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4656'.
[  621.007219][T24934] netlink: 'syz.3.4656': attribute type 64 has an invalid length.
[  621.007304][T24934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4656'.
[  621.036581][T24494] lwtunnel_output(): recursion limit reached on datapath
[  621.148182][T24938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4655'.
[  621.279052][T24944] netlink: 'syz.1.4658': attribute type 1 has an invalid length.
[  621.363938][T24944] 8021q: adding VLAN 0 to HW filter on device bond5
[  621.372914][ T7813] tipc: Disabling bearer <udp:syz2>
[  621.373183][ T7813] tipc: Left network mode
[  621.411403][   T31] audit: type=1804 audit(1789022399.779:16): pid=24953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4659" name="/newroot/64/memory.events" dev="tmpfs" ino=346 res=1 errno=0
[  621.411471][   T31] audit: type=1800 audit(1789022399.779:17): pid=24953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4659" name="memory.events" dev="tmpfs" ino=346 res=0 errno=0
[  621.632048][T24952] bond5: (slave geneve3): making interface the new active one
[  621.647709][T24952] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  621.755198][T24497] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  621.755281][T24497] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  621.755329][T24497] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  621.755363][T24497] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  621.762999][T24961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4660'.
[  621.767557][T24961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4660'.
[  621.787443][T24964] netlink: 380 bytes leftover after parsing attributes in process `syz.0.4661'.
[  621.787521][T24964] netlink: 159 bytes leftover after parsing attributes in process `syz.0.4661'.
[  621.792837][T24966] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4662'.
[  622.149448][T24974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4665'.
[  622.647369][T24986] bridge_slave_0: left allmulticast mode
[  622.647409][T24986] bridge_slave_0: left promiscuous mode
[  622.651140][T24986] bridge0: port 1(bridge_slave_0) entered disabled state
[  622.733189][T24986] bridge_slave_1: left allmulticast mode
[  622.740437][T24986] bridge_slave_1: left promiscuous mode
[  622.750122][T24986] bridge0: port 2(bridge_slave_1) entered disabled state
[  622.852790][T24986] bond0: (slave bond_slave_0): Releasing backup interface
[  622.911643][T24986] bond0: (slave bond_slave_1): Releasing backup interface
[  622.962795][T24986] team0: Port device team_slave_0 removed
[  623.027329][T24986] team0: Port device team_slave_1 removed
[  623.039161][T24986] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  623.039204][T24986] batman_adv: batadv0: Removing interface: batadv_slave_0
[  623.062838][T24986] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  623.065106][T24986] batman_adv: batadv0: Removing interface: batadv_slave_1
[  623.094500][T24986] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  623.595080][T10731] lwtunnel_output(): recursion limit reached on datapath
[  623.609607][ T7813] veth0_to_team: left promiscuous mode
[  623.895310][T25000] netlink: 'syz.3.4673': attribute type 2 has an invalid length.
[  624.521584][ T7813] team0 (unregistering): Port device dummy0 removed
[  624.568153][T10727] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed
[  624.786523][  T921] lo speed is unknown, defaulting to 1000
[  624.786594][  T921] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19)
[  624.804980][T25052] syz_tun: entered allmulticast mode
[  624.875926][T10731] lwtunnel_output(): recursion limit reached on datapath
[  624.894648][T25051] nbd: illegal input index -8454144
[  624.920032][T25051] C: entered allmulticast mode
[  625.062414][T25052] mroute: pending queue full, dropping entries
[  625.105986][    C1] mroute: pending queue full, dropping entries
[  625.612949][T25072] 8021q: adding VLAN 0 to HW filter on device bond3
[  625.642483][T25082] macsec1: entered promiscuous mode
[  625.642517][T25082] hsr0: entered promiscuous mode
[  625.903256][T25097] __nla_validate_parse: 8 callbacks suppressed
[  625.910628][T25097] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4701'.
[  626.158366][T24497] lwtunnel_output(): recursion limit reached on datapath
[  626.181653][T25102] syzkaller0: entered promiscuous mode
[  626.181688][T25102] syzkaller0: entered allmulticast mode
[  626.201036][T25107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4705'.
[  626.251104][T25115] netlink: 'syz.3.4707': attribute type 4 has an invalid length.
[  626.260186][T25115] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4707'.
[  626.281485][T25115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4707'.
[  626.308325][T25115] netlink: 'syz.3.4707': attribute type 3 has an invalid length.
[  626.308394][T25115] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4707'.
[  626.502625][T25126] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4710'.
[  626.507128][T25121] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4709'.
[  629.361855][T24497] lwtunnel_output(): recursion limit reached on datapath
[  629.417227][T25121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  629.418024][T25126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4710'.
[  629.531749][T25137] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!'
[  629.531788][T25137] CPU: 0 UID: 0 PID: 25137 Comm: syz.5.4712 Not tainted syzkaller #0 PREEMPT(full) 
[  629.531809][T25137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  629.531820][T25137] Call Trace:
[  629.531828][T25137]  <TASK>
[  629.531836][T25137]  dump_stack_lvl+0xe8/0x150
[  629.531868][T25137]  sysfs_warn_dup+0x8e/0xa0
[  629.531894][T25137]  sysfs_do_create_link_sd+0xc0/0x110
[  629.531923][T25137]  device_add_class_symlinks+0x1cf/0x240
[  629.531954][T25137]  device_add+0x467/0xb80
[  629.531983][T25137]  wiphy_register+0x1fc8/0x2ff0
[  629.532024][T25137]  ? __pfx_wiphy_register+0x10/0x10
[  629.532047][T25137]  ? __pfx_netdev_run_todo+0x10/0x10
[  629.532068][T25137]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  629.532096][T25137]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  629.532126][T25137]  ieee80211_register_hw+0x3d3d/0x4a50
[  629.532164][T25137]  ? ieee80211_register_hw+0x1a01/0x4a50
[  629.532215][T25137]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  629.532243][T25137]  ? __asan_memset+0x22/0x50
[  629.532268][T25137]  ? __hrtimer_setup+0x1b7/0x260
[  629.532293][T25137]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  629.532316][T25137]  mac80211_hwsim_new_radio+0x3258/0x56b0
[  629.532367][T25137]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  629.532385][T25137]  ? kstrndup+0xbd/0x160
[  629.532409][T25137]  ? kstrndup+0xbd/0x160
[  629.532434][T25137]  hwsim_new_radio_nl+0xd8b/0xf90
[  629.532478][T25137]  genl_family_rcv_msg_doit+0x233/0x340
[  629.532516][T25137]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  629.532562][T25137]  ? bpf_lsm_capable+0x9/0x20
[  629.532586][T25137]  ? security_capable+0x7e/0x2c0
[  629.532610][T25137]  genl_rcv_msg+0x614/0x7a0
[  629.532644][T25137]  ? __pfx_genl_rcv_msg+0x10/0x10
[  629.532669][T25137]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  629.532705][T25137]  ? __pfx_ref_tracker_free+0x10/0x10
[  629.532735][T25137]  netlink_rcv_skb+0x226/0x4a0
[  629.532759][T25137]  ? __pfx_genl_rcv_msg+0x10/0x10
[  629.532801][T25137]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  629.532839][T25137]  ? down_read+0x2be/0x330
[  629.532863][T25137]  genl_rcv+0x28/0x40
[  629.532888][T25137]  netlink_unicast+0x7bd/0x940
[  629.532919][T25137]  netlink_sendmsg+0x813/0xb40
[  629.532952][T25137]  ? __pfx_netlink_sendmsg+0x10/0x10
[  629.532984][T25137]  ? apparmor_socket_sendmsg+0x98/0x360
[  629.533014][T25137]  ? __pfx_netlink_sendmsg+0x10/0x10
[  629.533036][T25137]  sock_sendmsg_nosec+0x13a/0x180
[  629.533064][T25137]  ____sys_sendmsg+0x54e/0x850
[  629.533091][T25137]  ? __pfx_____sys_sendmsg+0x10/0x10
[  629.533121][T25137]  ? import_iovec+0x73/0xa0
[  629.533146][T25137]  ___sys_sendmsg+0x2a5/0x360
[  629.533164][T25137]  ? __lock_acquire+0x6df/0x2e50
[  629.533188][T25137]  ? __pfx____sys_sendmsg+0x10/0x10
[  629.533205][T25137]  ? __lock_acquire+0x6df/0x2e50
[  629.533263][T25137]  ? __fget_files+0x2a/0x420
[  629.533285][T25137]  ? __fget_files+0x3a2/0x420
[  629.533319][T25137]  __x64_sys_sendmsg+0x1b1/0x290
[  629.533339][T25137]  ? _raw_spin_unlock_irq+0x2e/0x50
[  629.533363][T25137]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  629.533393][T25137]  ? do_user_addr_fault+0xc4c/0x1340
[  629.533424][T25137]  do_syscall_64+0x166/0x520
[  629.533449][T25137]  ? trace_irq_disable+0x3b/0x140
[  629.533466][T25137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.533485][T25137]  ? clear_bhb_loop+0x70/0xc0
[  629.533509][T25137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.533527][T25137] RIP: 0033:0x7ff4ec39e159
[  629.533545][T25137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  629.533561][T25137] RSP: 002b:00007ff4ed2d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  629.533580][T25137] RAX: ffffffffffffffda RBX: 00007ff4ec626090 RCX: 00007ff4ec39e159
[  629.533593][T25137] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003
[  629.533605][T25137] RBP: 00007ff4ec43503b R08: 0000000000000000 R09: 0000000000000000
[  629.533615][T25137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  629.533626][T25137] R13: 00007ff4ec626128 R14: 00007ff4ec626090 R15: 00007ffced6995a8
[  629.533659][T25137]  </TASK>
[  629.716625][T25177] netlink: 'syz.0.4717': attribute type 4 has an invalid length.
[  629.716686][T25177] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4717'.
[  630.159925][T25181] netlink: 'syz.3.4722': attribute type 32 has an invalid length.
[  630.179177][T25181] gtp0: entered promiscuous mode
[  630.184548][T25181] gtp0: entered allmulticast mode
[  630.307742][T25193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4720'.
[  630.349123][T25196] netlink: 'syz.1.4724': attribute type 7 has an invalid length.
[  630.511881][T25200] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  630.640417][T10727] lwtunnel_output(): recursion limit reached on datapath
[  630.734911][T25206] nbd: illegal input index 65508
[  630.900220][T25212] tipc: Started in network mode
[  630.900262][T25212] tipc: Node identity ac1414aa, cluster identity 4711
[  630.900930][T25212] tipc: Enabled bearer <udp:s†>, priority 10
[  631.216186][T25230] __nla_validate_parse: 1 callbacks suppressed
[  631.227080][T25230] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4734'.
[  631.281235][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  631.290345][T25228] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  631.390285][T25237] syzkaller0: entered promiscuous mode
[  631.396040][T25237] syzkaller0: entered allmulticast mode
[  631.524604][T25241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4738'.
[  631.648088][T25243] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4735'.
[  631.801344][T25241] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  632.026193][ T1221] tipc: Node number set to 2886997162
[  632.303196][T25262] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20000
[  632.686706][T25272] netlink: 'syz.5.4747': attribute type 11 has an invalid length.
[  632.732998][T25270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4746'.
[  632.746738][T25270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4746'.
[  632.751753][T25270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4746'.
[  632.832210][T25277] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4750'.
[  632.853000][T25270] openvswitch: netlink: IPv4 tun info is not correct
[  633.392307][T25301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4755'.
[  633.504626][T25305] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4754'.
[  633.635153][T25302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4754'.
[  634.019878][T25320] syzkaller0: left promiscuous mode
[  634.019948][T25320] syzkaller0: left allmulticast mode
[  635.119572][T24497] lwtunnel_output(): recursion limit reached on datapath
[  635.325876][T25369] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  635.685761][T24497] lwtunnel_output(): recursion limit reached on datapath
[  635.777129][T25389] netlink: 'syz.2.4775': attribute type 1 has an invalid length.
[  635.794742][T25387] netlink: 'syz.2.4775': attribute type 1 has an invalid length.
[  636.003040][T25397] openvswitch: netlink: Multiple metadata blocks provided
[  636.246526][T25407] __nla_validate_parse: 13 callbacks suppressed
[  636.246617][T25407] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4781'.
[  636.310154][T25412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4782'.
[  636.923336][T25430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4787'.
[  637.048531][T10727] lwtunnel_output(): recursion limit reached on datapath
[  637.286028][T25453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4792'.
[  637.286077][T25453] netlink: 'syz.1.4792': attribute type 7 has an invalid length.
[  637.286109][T25453] netlink: 'syz.1.4792': attribute type 8 has an invalid length.
[  637.286125][T25453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4792'.
[  637.391589][T25459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4792'.
[  637.830418][T25476] netlink: 'syz.2.4794': attribute type 1 has an invalid length.
[  637.830506][T25476] netlink: 'syz.2.4794': attribute type 4 has an invalid length.
[  637.830518][T25476] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4794'.
[  637.849717][T25476] netlink: 'syz.2.4794': attribute type 1 has an invalid length.
[  637.849757][T25476] netlink: 'syz.2.4794': attribute type 4 has an invalid length.
[  637.849786][T25476] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4794'.
[  638.095499][T25482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4796'.
[  638.309626][T25496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4801'.
[  638.321037][T25487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  638.601316][T25510] team0: left promiscuous mode
[  638.607076][T25510] team_slave_0: left promiscuous mode
[  638.613029][T25510] team_slave_1: left promiscuous mode
[  638.619034][T25510] bridge0: port 3(team0) entered disabled state
[  638.632733][T25510] bridge_slave_0: left allmulticast mode
[  638.640066][T25510] bridge_slave_0: left promiscuous mode
[  638.646851][T25510] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.666557][T25510] bridge_slave_1: left allmulticast mode
[  638.666643][T25510] bridge_slave_1: left promiscuous mode
[  638.666979][T25510] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.689802][T25510] bond1: (slave veth0_to_bond): Releasing active interface
[  638.700584][T25510] bond0: (slave bond_slave_0): Releasing backup interface
[  638.711445][T25510] bond_slave_0: left allmulticast mode
[  638.723023][T25510] bond0: (slave bond_slave_1): Releasing backup interface
[  638.732545][T25510] bond_slave_1: left allmulticast mode
[  638.738954][T25510] team_slave_0: left allmulticast mode
[  638.745894][T25510] team0: Port device team_slave_0 removed
[  638.752289][T25510] team_slave_1: left allmulticast mode
[  638.759073][T25510] team0: Port device team_slave_1 removed
[  638.765362][T25510] batman_adv: batadv0: Removing interface: batadv_slave_0
[  638.775140][T25510] batman_adv: batadv0: Removing interface: batadv_slave_1
[  638.827052][T25510] bond1: (slave veth3): Releasing active interface
[  638.827116][T25510] bond1: (slave veth3): the permanent HWaddr of slave - da:be:6f:32:0e:d4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  638.913526][T25510] bond1: (slave veth5): Releasing active interface
[  638.957797][T25510] bond4: (slave bridge2): Releasing backup interface
[  638.957894][T25510] bridge2: left promiscuous mode
[  639.078586][T25510] bond7: (slave geneve3): Releasing active interface
[  639.214937][T10731] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  639.215077][T10731] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  639.215173][T10731] netdevsim netdevsim2 
: unset [1, 0] type 2 family 0 port 6081 - 0
[  639.215264][T10731] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  639.452468][T25534] netlink: 'syz.2.4811': attribute type 3 has an invalid length.
[  639.452506][T25534] netlink: 'syz.2.4811': attribute type 1 has an invalid length.
[  639.567666][T25537] nbd: must specify at least one socket
[  639.700291][T25545] 0: reclassify loop, rule prio 0, protocol 03
[  639.706744][T25545] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  639.834268][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  639.851772][T25550] openvswitch: netlink: Duplicate key (type 0).
[  639.870941][   T31] audit: type=1107 audit(1789022418.239:18): pid=25547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  640.104039][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  640.286877][T25564] bond0: ARP target 8.4.0.0 is already present
[  640.286971][T25564] bond0: option arp_ip_target: invalid value (1032)
[  640.634184][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  640.879270][T24495] lwtunnel_output(): recursion limit reached on datapath
[  641.236077][T25615] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  641.497266][T25628] __nla_validate_parse: 12 callbacks suppressed
[  641.497849][T25628] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4837'.
[  641.516199][T24495] lwtunnel_output(): recursion limit reached on datapath
[  641.674013][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  642.004275][T25637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4841'.
[  642.351266][T25651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4846'.
[  642.351368][T25651] validate_nla: 1 callbacks suppressed
[  642.351390][T25651] netlink: 'syz.2.4846': attribute type 7 has an invalid length.
[  642.351416][T25651] netlink: 'syz.2.4846': attribute type 8 has an invalid length.
[  642.351427][T25651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4846'.
[  642.421601][T25654] ip6_vti0: entered promiscuous mode
[  642.428774][T25654] sit0: entered promiscuous mode
[  642.440648][T25654] ip6tnl0: entered promiscuous mode
[  642.449816][T25654] ip6gre0: entered promiscuous mode
[  642.456976][T25654] syz_tun: entered promiscuous mode
[  642.465271][T25654] bridge0: entered promiscuous mode
[  642.471746][T25654] vcan0: entered promiscuous mode
[  642.478468][T25657] netlink: 'syz.1.4849': attribute type 10 has an invalid length.
[  642.488689][T25654] bond0: entered promiscuous mode
[  642.495733][T25654] bond_slave_0: entered promiscuous mode
[  642.501694][T25654] bond_slave_1: entered promiscuous mode
[  642.509123][T25654] 8021q: adding VLAN 0 to HW filter on device bond0
[  642.517162][T25654] team0: entered promiscuous mode
[  642.522270][T25654] team_slave_0: entered promiscuous mode
[  642.528427][T25654] team_slave_1: entered promiscuous mode
[  642.535156][T25654] 8021q: adding VLAN 0 to HW filter on device team0
[  642.542735][T25654] nlmon0: entered promiscuous mode
[  642.549293][T25654] batadv0: entered promiscuous mode
[  642.556874][T25654] 8021q: adding VLAN 0 to HW filter on device batadv0
[  642.567777][T25654] vxcan0: entered promiscuous mode
[  642.575282][T25654] vxcan1: entered promiscuous mode
[  642.583487][T25654] veth0: entered promiscuous mode
[  642.591413][T25654] veth1: entered promiscuous mode
[  642.610736][T25654] wg0: entered promiscuous mode
[  642.626387][T25654] wg1: entered promiscuous mode
[  642.669380][T25654] wg2: entered promiscuous mode
[  642.670650][T25654] veth0_to_bridge: entered promiscuous mode
[  642.695570][T25654] bridge_slave_0: left allmulticast mode
[  642.695811][T25654] bridge0: port 1(bridge_slave_0) entered disabled state
[  642.714016][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  642.747478][T25654] veth1_to_bridge: entered promiscuous mode
[  642.757539][T25665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4851'.
[  642.767478][T25654] bridge_slave_1: left allmulticast mode
[  642.773418][T25654] bridge0: port 2(bridge_slave_1) entered disabled state
[  642.791842][T25654] veth0_to_bond: entered promiscuous mode
[  642.799249][ T7814] lwtunnel_output(): recursion limit reached on datapath
[  642.813541][T25654] bond0: (slave bond_slave_0): Releasing backup interface
[  642.832380][T25667] netlink: 'syz.1.4849': attribute type 10 has an invalid length.
[  642.843155][T25654] veth1_to_bond: entered promiscuous mode
[  642.859331][T25654] bond0: (slave bond_slave_1): Releasing backup interface
[  642.909251][T25664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4850'.
[  642.911473][T25654] veth0_to_team: entered promiscuous mode
[  642.928884][T25654] team0: Port device team_slave_0 removed
[  642.941378][T25654] veth1_to_team: entered promiscuous mode
[  642.950575][T25654] team0: Port device team_slave_1 removed
[  642.953783][T25654] veth0_to_batadv: entered promiscuous mode
[  642.955774][T25654] batadv_slave_0: entered promiscuous mode
[  642.958272][T25654] batman_adv: batadv0: Interface activated: batadv_slave_0
[  642.958369][T25654] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  642.958384][T25654] batman_adv: batadv0: Removing interface: batadv_slave_0
[  642.966653][T25654] veth1_to_batadv: entered promiscuous mode
[  642.967983][T25654] batadv_slave_1: entered promiscuous mode
[  642.970767][T25654] batman_adv: batadv0: Interface activated: batadv_slave_1
[  642.970895][T25654] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  642.970909][T25654] batman_adv: batadv0: Removing interface: batadv_slave_1
[  642.975858][T25654] xfrm0: entered promiscuous mode
[  642.977745][T25654] veth0_to_hsr: entered promiscuous mode
[  642.980034][T25654] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  643.124481][T25656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4848'.
[  643.374852][T10731] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  643.377297][T10731] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  643.379284][T10731] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  643.379315][T10731] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  643.582278][T25690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4857'.
[  643.637805][T25693] netlink: 'syz.1.4858': attribute type 11 has an invalid length.
[  643.637846][T25693] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4858'.
[  643.748819][T25702] x_tables: duplicate entry at hook 1
[  643.867976][T25698] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4860'.
[  643.882662][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  644.826696][T25735] netlink: 'syz.2.4870': attribute type 3 has an invalid length.
[  644.948265][T25738] sctp: [Deprecated]: syz.3.4871 (pid 25738) Use of struct sctp_assoc_value in delayed_ack socket option.
[  644.948265][T25738] Use struct sctp_sack_info instead
[  644.954169][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  645.126466][T25743] xt_hashlimit: size too large, truncated to 1048576
[  645.240181][T25748] sctp: [Deprecated]: syz.2.4872 (pid 25748) Use of int in max_burst socket option.
[  645.240181][T25748] Use struct sctp_assoc_value instead
[  645.243539][T25751] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  645.488557][T25760] netlink: 'syz.5.4878': attribute type 83 has an invalid length.
[  645.919483][T10731] lwtunnel_output(): recursion limit reached on datapath
[  645.994641][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  646.011198][   T31] audit: type=1804 audit(1789022424.379:19): pid=25784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4884" name="/newroot/394/cgroup.controllers" dev="tmpfs" ino=2042 res=1 errno=0
[  646.011447][   T31] audit: type=1800 audit(1789022424.379:20): pid=25784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4884" name="cgroup.controllers" dev="tmpfs" ino=2042 res=0 errno=0
[  646.559258][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  646.642492][T25801] __nla_validate_parse: 8 callbacks suppressed
[  646.642536][T25801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4890'.
[  646.644240][T25801] netlink: 'syz.1.4890': attribute type 30 has an invalid length.
[  646.693028][T25801] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  646.825469][T25801] bond6 (unregistering): Released all slaves
[  646.999014][T25805] syzkaller1: entered promiscuous mode
[  647.006846][T25805] syzkaller1: entered allmulticast mode
[  647.017621][T25805] netlink: 'syz.0.4892': attribute type 1 has an invalid length.
[  647.026807][T25805] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4892'.
[  647.034136][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  647.548056][T25821] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4895'.
[  647.875694][T25820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4896'.
[  648.074070][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  648.211128][T25841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4900'.
[  648.262816][T25841] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  648.282973][T25845] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4904'.
[  648.311420][T25841] netlink: ct_mark mask cannot be 0
[  648.311476][T25841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  648.523560][T25856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4903'.
[  648.590086][T24494] lwtunnel_output(): recursion limit reached on datapath
[  648.599812][T25851] nft_compat: unsupported protocol 5
[  648.950939][T25879] syzkaller0: entered promiscuous mode
[  648.950984][T25879] syzkaller0: entered allmulticast mode
[  649.114077][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  649.193514][T25886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4911'.
[  649.258300][T25893] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  649.293848][T25893] netlink: 'syz.5.4913': attribute type 18 has an invalid length.
[  649.293894][T25893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4913'.
[  649.328593][T25893] netlink: 'syz.5.4913': attribute type 18 has an invalid length.
[  649.337601][T25893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4913'.
[  649.608386][T25902] veth1_virt_wifi: entered allmulticast mode
[  649.624436][T25906] Bluetooth: hci0: unsupported parameter 5135
[  649.632517][T25906] Bluetooth: hci0: unsupported parameter 8192
[  649.646379][T25906] Bluetooth: hci0: unsupported parameter 5135
[  649.646450][T25906] Bluetooth: hci0: unsupported parameter 8192
[  649.693376][ T5618] Bluetooth: hci3: link tx timeout
[  649.693580][ T5618] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  650.957166][   T13] net_ratelimit: 2 callbacks suppressed
[  650.957219][   T13] lwtunnel_output(): recursion limit reached on datapath
[  651.194892][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  651.353543][T25959] scsi_nl_rcv_msg: discarding partial skb
[  651.516281][T25977] netlink: 'syz.1.4928': attribute type 10 has an invalid length.
[  651.764632][ T5618] Bluetooth: hci3: command 0x0406 tx timeout
[  652.240625][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  652.397642][ T7814] lwtunnel_output(): recursion limit reached on datapath
[  653.278138][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  653.686293][T10736] lwtunnel_output(): recursion limit reached on datapath
[  654.098051][T25977] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  654.281456][T25985] __nla_validate_parse: 68 callbacks suppressed
[  654.288889][T25985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4933'.
[  654.298118][T25985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4933'.
[  654.314384][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  654.414609][T25989] xt_CT: You must specify a L4 protocol and not use inversions on it
[  654.434884][T25998] Bluetooth: hci1: Opcode 0x0401 failed: -22
[  654.485613][T25990] xt_CT: You must specify a L4 protocol and not use inversions on it
[  654.861142][T26012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4940'.
[  654.861219][T26012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4940'.
[  654.954277][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  655.236171][T26030] netlink: 524 bytes leftover after parsing attributes in process `syz.1.4949'.
[  655.331000][T26039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4950'.
[  655.354219][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  655.490920][T26046] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4952'.
[  655.502971][T26046] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4952'.
[  655.826803][T26060] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4956'.
[  656.238219][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  656.394006][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  656.511821][T26089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4962'.
[  657.434610][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  657.897982][T26139] netlink: 'syz.1.4980': attribute type 11 has an invalid length.
[  658.155986][T10736] lwtunnel_output(): recursion limit reached on datapath
[  658.227030][T26148] netlink: Failed to add ¦â—k\  helper -22
[  658.233043][T26148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  658.474053][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  658.540048][T26153] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  658.627631][T26157] nbd: must specify an index to disconnect
[  659.003017][T26174] xt_CT: You must specify a L4 protocol and not use inversions on it
[  659.339651][T26188] __nla_validate_parse: 1 callbacks suppressed
[  659.340237][T26188] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4990'.
[  659.340299][T26188] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4990'.
[  659.347909][T26187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4991'.
[  659.442255][ T7814] lwtunnel_output(): recursion limit reached on datapath
[  659.514322][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  660.009616][T26213] x_tables: duplicate underflow at hook 1
[  660.200473][T26218] netlink: set zone limit has 4 unknown bytes
[  660.250013][T26218] xt_hashlimit: size too large, truncated to 1048576
[  660.416196][T26224] netlink: 'syz.5.5006': attribute type 29 has an invalid length.
[  660.576268][T26227] syzkaller1: tun_chr_ioctl cmd 1074025678
[  660.577343][T26227] syzkaller1: group set to 0
[  661.286838][T24497] net_ratelimit: 1 callbacks suppressed
[  661.286885][T24497] lwtunnel_output(): recursion limit reached on datapath
[  661.429002][T26267] ipvlan2: entered allmulticast mode
[  661.429040][T26267] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode
[  661.447850][T26267] batman_adv: batadv0: Adding interface: ipvlan2
[  661.458023][T26267] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  661.487509][T26267] batman_adv: batadv0: Interface activated: ipvlan2
[  661.546123][T26277] ipvlan3: entered allmulticast mode
[  661.553532][T26277] batman_adv: batadv0: Adding interface: ipvlan3
[  661.561492][T26277] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  661.587115][T26277] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2
[  661.587132][T26277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  661.587145][T26277] batman_adv: batadv0: Interface activated: ipvlan3
[  661.599725][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  662.634002][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  662.876610][T26320] Cannot find add_set index 2 as target
[  662.956907][T26325] netlink: 'syz.3.5028': attribute type 1 has an invalid length.
[  662.964959][T26325] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5028'.
[  662.976294][T26325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5028'.
[  662.991114][T26325] netlink: 'syz.3.5028': attribute type 18 has an invalid length.
[  663.100113][T26328] syzkaller1: entered promiscuous mode
[  663.120098][T26324] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5029'.
[  663.191807][T26327] vlan1: entered allmulticast mode
[  663.191934][T26327] veth0_vlan: entered allmulticast mode
[  663.228195][T26331] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  663.237858][T26331] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5031'.
[  663.281530][T10732] lwtunnel_output(): recursion limit reached on datapath
[  663.590805][T26341] netlink: 'syz.2.5034': attribute type 178 has an invalid length.
[  663.648251][T26344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5037'.
[  663.674116][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  663.782944][T26352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5034'.
[  663.803771][T26348] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5034'.
[  664.036858][T26358] 8021q: adding VLAN 0 to HW filter on device bond8
[  664.061369][T26358] netlink: 'syz.3.5039': attribute type 1 has an invalid length.
[  664.091684][T26361] bond6 (unregistering): Released all slaves
[  664.116166][T26366] netlink: 'syz.0.5043': attribute type 1 has an invalid length.
[  664.139519][T26363] bond0: left promiscuous mode
[  664.195311][T26363] 8021q: adding VLAN 0 to HW filter on device bond0
[  664.205316][T26363] bond8: (slave bond0): Enslaving as an active interface with a down link
[  664.397566][T26379] __nla_validate_parse: 3 callbacks suppressed
[  664.404746][T26379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5047'.
[  664.521703][T26379] netlink: 'syz.0.5047': attribute type 1 has an invalid length.
[  664.521773][T26379] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5047'.
[  664.642712][T26390] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5048'.
[  664.713994][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  665.134332][T26409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5054'.
[  665.157697][T26409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5054'.
[  665.198023][   T13] lwtunnel_output(): recursion limit reached on datapath
[  665.521138][T26424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5058'.
[  665.754055][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  665.981825][T26453] xt_HMARK: proto mask must be zero with L3 mode
[  666.073879][T26457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  666.416382][T26468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5068'.
[  666.428317][T26468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5068'.
[  666.466402][T26472] syzkaller0: entered promiscuous mode
[  666.472057][T26472] syzkaller0: entered allmulticast mode
[  666.484345][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  666.496111][T26476] netlink: 'syz.3.5068': attribute type 2 has an invalid length.
[  666.504321][T26476] netlink: 'syz.3.5068': attribute type 11 has an invalid length.
[  666.512246][T26476] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5068'.
[  666.635499][T26478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5068'.
[  666.793993][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  666.975774][T26495] netlink: 'syz.2.5073': attribute type 15 has an invalid length.
[  667.003750][T26495] netlink: 'syz.2.5073': attribute type 15 has an invalid length.
[  667.014871][T24497] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  667.015057][T24497] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  667.015123][T24497] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  667.015187][T24497] netdevsim netdevsim2 
: set [0, 0] type 1 family 0 port 2816 - 0
[  667.067861][T26497] netlink: 'syz.0.5075': attribute type 18 has an invalid length.
[  667.074377][T26497] netlink: 'syz.0.5075': attribute type 18 has an invalid length.
[  667.834097][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  668.874077][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  669.047846][T10732] lwtunnel_output(): recursion limit reached on datapath
[  669.914122][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  670.140624][T26517] __nla_validate_parse: 5 callbacks suppressed
[  670.140670][T26517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5081'.
[  670.243833][T26523] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5083'.
[  670.333669][T26525] netlink: 'syz.0.5079': attribute type 4 has an invalid length.
[  670.348329][T26529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5084'.
[  670.424410][T26529] bond9: Removing last ns target with arp_interval on
[  670.954296][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  670.962815][   T13] lwtunnel_output(): recursion limit reached on datapath
[  671.103808][T26564] netlink: 'syz.3.5093': attribute type 30 has an invalid length.
[  671.519405][T10732] lwtunnel_output(): recursion limit reached on datapath
[  671.647910][T26588] nbd6: detected capacity change from 0 to 63
[  671.666661][ T4934] block nbd6: Receive control failed (result -104)
[  671.994093][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  672.444913][T26617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5105'.
[  672.463505][T26618] x_tables: duplicate underflow at hook 1
[  672.463602][T26618] x_tables: duplicate underflow at hook 1
[  672.463690][T26618] x_tables: duplicate underflow at hook 1
[  672.463773][T26618] x_tables: duplicate underflow at hook 1
[  672.463846][T26618] x_tables: duplicate underflow at hook 1
[  672.463921][T26618] x_tables: duplicate underflow at hook 1
[  672.488116][T26618] x_tables: duplicate underflow at hook 1
[  672.488192][T26618] x_tables: duplicate underflow at hook 1
[  672.488262][T26618] x_tables: duplicate underflow at hook 1
[  672.488330][T26618] x_tables: duplicate underflow at hook 1
[  673.034112][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  673.072643][T26641] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5113'.
[  673.236741][T26644] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5113'.
[  673.866443][T26688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5121'.
[  674.074143][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  674.796901][T24497] lwtunnel_output(): recursion limit reached on datapath
[  675.114093][    C0] 0: reclassify loop, rule prio 0, protocol 03
[  675.756477][T26749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5135'.
[  675.875463][T26756] ÿÿÿÿÿÿ: renamed from virt_wifi0
[  675.971286][T26753] xt_CT: No such helper "netbios-ns"
[  676.148534][T26766] tipc: Resetting bearer <eth:syzkaller0>
[  676.150931][T26766] tipc: Resetting bearer <eth:syzkaller0>
[  676.166325][T26766] netlink: 'syz.2.5140': attribute type 16 has an invalid length.
[  676.166384][T26766] netlink: 'syz.2.5140': attribute type 17 has an invalid length.
[  676.186510][T26766] gretap0: left promiscuous mode
[  676.220834][T26766] 8021q: adding VLAN 0 to HW filter on device bond0
[  676.222551][T26766] team0: left allmulticast mode
[  676.223633][T26766] 8021q: adding VLAN 0 to HW filter on device team0
[  676.228699][T26766] 8021q: adding VLAN 0 to HW filter on device batadv0
[  676.297398][T26766] veth1_macvtap: left promiscuous mode
[  676.298512][T26766] veth0_macvtap: left promiscuous mode
[  676.299593][T26766] veth0_macvtap: entered promiscuous mode
[  676.300652][T26766] veth1_macvtap: entered promiscuous mode
[  676.306711][T26766] netdevsim netdevsim2 
: left promiscuous mode
[  676.307050][T26766] 8021q: adding VLAN 0 to HW filter on device 

[  676.308026][T26766] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  676.309370][T26766] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  676.310350][T26766] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  676.313603][T26766] 8021q: adding VLAN 0 to HW filter on device bond1
[  676.316036][T26766] veth3: left allmulticast mode
[  676.317430][T26766] veth5: left allmulticast mode
[  676.370257][T26766] 8021q: adding VLAN 0 to HW filter on device bond2
[  676.408958][T26766] 8021q: adding VLAN 0 to HW filter on device bond3
[  676.419531][T26766] veth7: left promiscuous mode
[  676.423539][T26766] bond4: left promiscuous mode
[  676.423857][T26766] 8021q: adding VLAN 0 to HW filter on device bond4
[  676.438962][T26766] 8021q: adding VLAN 0 to HW filter on device bond5
[  676.442947][T26766] 8021q: adding VLAN 0 to HW filter on device bond6
[  676.452744][T26766] vlan0: left allmulticast mode
[  676.452761][T26766] bond0: left allmulticast mode
[  676.462180][T26766] vlan0: entered allmulticast mode
[  676.462196][T26766] bond0: entered allmulticast mode
[  676.462331][T26766] vlan0: entered promiscuous mode
[  676.462343][T26766] bond0: entered promiscuous mode
[  676.462748][T26766] macvtap1: left promiscuous mode
[  676.462760][T26766] vlan0: left promiscuous mode
[  676.462771][T26766] bond0: left promiscuous mode
[  676.463125][T26766] macvtap1: left allmulticast mode
[  676.463136][T26766] vlan0: left allmulticast mode
[  676.463146][T26766] bond0: left allmulticast mode
[  676.467342][T26766] 8021q: adding VLAN 0 to HW filter on device bond7
[  676.502687][T26766] bond8: left promiscuous mode
[  676.503702][T26766] 8021q: adding VLAN 0 to HW filter on device bond8
[  676.520689][T26766] xfrm0: left allmulticast mode
[  676.526606][T26766] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check.
[  676.568561][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  676.694877][T10728] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  676.694924][T10728] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  676.717172][T10736] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  676.717244][T10736] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  676.738917][T10728] lwtunnel_output(): recursion limit reached on datapath
[  676.744461][T24494] netdevsim netdevsim2 
: set [0, 1] type 1 family 0 port 8472 - 0
[  676.744489][T24494] netdevsim netdevsim2 
: set [1, 0] type 2 family 0 port 6081 - 0
[  676.744877][T24494] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  676.744903][T24494] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  677.104633][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  677.357570][   T43] lwtunnel_output(): recursion limit reached on datapath
[  678.164126][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  679.194546][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  680.244067][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  680.555600][T24494] lwtunnel_output(): recursion limit reached on datapath
[  681.284082][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  681.835714][   T43] lwtunnel_output(): recursion limit reached on datapath
[  682.314057][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  682.475733][T10736] lwtunnel_output(): recursion limit reached on datapath
[  683.364156][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  684.394162][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  685.444088][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  685.687113][T10728] lwtunnel_output(): recursion limit reached on datapath
[  686.484103][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  687.524112][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  687.606560][   T13] lwtunnel_output(): recursion limit reached on datapath
[  688.564017][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  689.604029][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  690.644030][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  690.725168][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  691.684021][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  692.724293][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  692.734227][T24494] lwtunnel_output(): recursion limit reached on datapath
[  693.754425][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  694.804708][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  695.834492][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  695.924813][T24494] lwtunnel_output(): recursion limit reached on datapath
[  695.933290][   T43] lwtunnel_output(): recursion limit reached on datapath
[  696.874450][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  697.924073][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  698.484961][T24494] lwtunnel_output(): recursion limit reached on datapath
[  698.964030][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  700.004157][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  701.036796][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  701.038663][T24494] lwtunnel_output(): recursion limit reached on datapath
[  701.674976][ T4948] block nbd6: Possible stuck request ffff88802819e000: control (read@0,1024B). Runtime 30 seconds
[  701.675526][T24494] lwtunnel_output(): recursion limit reached on datapath
[  701.689992][ T4948] block nbd6: Possible stuck request ffff88802819e1c0: control (read@1024,3072B). Runtime 30 seconds
[  702.084139][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  703.124081][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  704.154584][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  704.247601][T10736] lwtunnel_output(): recursion limit reached on datapath
[  705.204426][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  706.234195][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  706.805283][T24494] lwtunnel_output(): recursion limit reached on datapath
[  707.284234][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  707.436948][T10735] lwtunnel_output(): recursion limit reached on datapath
[  708.314460][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  709.275970][T10736] lwtunnel_output(): recursion limit reached on datapath
[  709.354697][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  710.404112][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  711.434525][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  712.474156][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  712.555018][   T43] lwtunnel_output(): recursion limit reached on datapath
[  712.556288][T24494] lwtunnel_output(): recursion limit reached on datapath
[  713.514208][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  714.477579][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  714.554203][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  715.594467][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  716.634027][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  717.674494][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  717.686065][T10735] lwtunnel_output(): recursion limit reached on datapath
[  718.327500][   T43] lwtunnel_output(): recursion limit reached on datapath
[  718.724094][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  719.764042][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  720.235765][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  720.804148][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  721.834426][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  722.884057][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  723.435102][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  723.914147][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  724.086338][T10735] lwtunnel_output(): recursion limit reached on datapath
[  724.964056][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  725.994637][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  726.003094][   T43] lwtunnel_output(): recursion limit reached on datapath
[  727.034100][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  728.074533][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  728.475781][T10736] lwtunnel_output(): recursion limit reached on datapath
[  729.114148][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  729.847554][T10728] lwtunnel_output(): recursion limit reached on datapath
[  730.154567][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  731.194515][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  731.755593][ T4948] block nbd6: Possible stuck request ffff88802819e000: control (read@0,1024B). Runtime 60 seconds
[  731.755647][ T4948] block nbd6: Possible stuck request ffff88802819e1c0: control (read@1024,3072B). Runtime 60 seconds
[  731.756117][T24494] lwtunnel_output(): recursion limit reached on datapath
[  732.234150][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  733.192284][ T4985] udevd[4985]: worker [18363] /devices/virtual/block/nbd6 is taking a long time
[  733.284100][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  733.684890][   T43] lwtunnel_output(): recursion limit reached on datapath
[  734.325245][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  735.354184][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  735.597377][T24494] lwtunnel_output(): recursion limit reached on datapath
[  736.404309][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  737.444067][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  737.526838][T24494] lwtunnel_output(): recursion limit reached on datapath
[  738.484239][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  738.726055][ T7814] lwtunnel_output(): recursion limit reached on datapath
[  739.524111][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  740.554861][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  740.716248][   T43] lwtunnel_output(): recursion limit reached on datapath
[  741.594483][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  742.634699][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  742.635030][T10736] lwtunnel_output(): recursion limit reached on datapath
[  743.674137][    C1] 0: reclassify loop, rule prio 0, protocol 03
[  743.924936][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  744.431100][T26783] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5144'.
[  744.476458][ T5618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  744.486474][ T5618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  744.493723][ T5618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  744.504626][ T5618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  744.513845][ T5618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  744.908986][T26800] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5149'.
[  745.053413][T26776] tipc: Started in network mode
[  745.053482][T26776] tipc: Node identity 1, cluster identity 4711
[  745.053508][T26776] tipc: Node number set to 1
[  745.263418][T26810] bond10 (unregistering): Released all slaves
[  745.609632][T26823] netlink: 'syz.1.5155': attribute type 9 has an invalid length.
[  746.477651][T24494] lwtunnel_output(): recursion limit reached on datapath
[  746.634835][ T4934] Bluetooth: hci6: command tx timeout
[  746.750699][T26866] xt_l2tp: v2 doesn't support IP mode
[  746.838943][T26865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5170'.
[  746.838980][T26865] openvswitch: netlink: Flow key attr not present in new flow.
[  746.897854][T26873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5172'.
[  746.963122][T26789] bridge0: port 1(bridge_slave_0) entered blocking state
[  746.971270][T26789] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.978759][T26789] bridge_slave_0: entered allmulticast mode
[  746.987327][T26789] bridge_slave_0: entered promiscuous mode
[  747.046417][T26789] bridge0: port 2(bridge_slave_1) entered blocking state
[  747.046570][T26789] bridge0: port 2(bridge_slave_1) entered disabled state
[  747.046731][T26789] bridge_slave_1: entered allmulticast mode
[  747.070538][T26789] bridge_slave_1: entered promiscuous mode
[  747.118770][T26789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  747.131311][T26789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  747.203303][T26789] team0: Port device team_slave_0 added
[  747.213875][T26789] team0: Port device team_slave_1 added
[  747.310550][T26789] batman_adv: batadv0: Adding interface: batadv_slave_0
[  747.321952][T26789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  747.348990][T26789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  747.371281][T26789] batman_adv: batadv0: Adding interface: batadv_slave_1
[  747.380418][T26789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  747.380478][T26789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  747.651363][T26902] netlink: 'syz.0.5181': attribute type 10 has an invalid length.
[  747.666398][T26789] hsr_slave_0: entered promiscuous mode
[  747.667456][T26789] hsr_slave_1: entered promiscuous mode
[  747.668185][T26789] debugfs: 'hsr0' already exists in 'hsr'
[  747.668202][T26789] Cannot create hsr debugfs directory
[  747.669497][T26902] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address
[  747.669621][T26902] bond0: (slave virt_wifi0): Error -95 calling set_mac_address
[  747.765996][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  747.935129][T26910] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  747.938248][T26907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  748.287517][T26914] vlan2: entered promiscuous mode
[  748.298121][T26920] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5187'.
[  748.395748][T26920] bond9 (unregistering): Released all slaves
[  748.543235][T26930] openvswitch: netlink: IP tunnel dst address not specified
[  748.620548][T26789] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  748.644837][T26789] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  748.655548][T26789] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  748.699753][T26789] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  748.712461][T26789] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  748.714529][ T4934] Bluetooth: hci6: command tx timeout
[  748.773486][T26789] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  748.777055][T26789] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  748.817272][T26789] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  748.999645][T26959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  749.156085][T26962] netdevsim netdevsim3: Direct firmware load for . failed with error -2
[  749.169294][T26962] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  749.192523][T26789] 8021q: adding VLAN 0 to HW filter on device bond0
[  749.258785][T26789] 8021q: adding VLAN 0 to HW filter on device team0
[  749.264887][T26966] openvswitch: netlink: Duplicate key (type 6).
[  749.302829][T10728] bridge0: port 1(bridge_slave_0) entered blocking state
[  749.302949][T10728] bridge0: port 1(bridge_slave_0) entered forwarding state
[  749.341855][ T7813] bridge0: port 2(bridge_slave_1) entered blocking state
[  749.341986][ T7813] bridge0: port 2(bridge_slave_1) entered forwarding state
[  749.379697][T26966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5201'.
[  749.671324][T26976] netlink: 'syz.2.5205': attribute type 1 has an invalid length.
[  749.685842][T24497] lwtunnel_output(): recursion limit reached on datapath
[  749.740494][T26976] bond10: option mode: invalid value (8)
[  749.764783][T26976] bond10 (unregistering): Released all slaves
[  749.836510][T26982] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5204'.
[  749.836549][T26982] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5204'.
[  749.836895][T26983] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5204'.
[  749.836916][T26983] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5204'.
[  749.905057][T26991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5205'.
[  750.383841][T27002] netlink: 1504 bytes leftover after parsing attributes in process `syz.3.5206'.
[  750.529367][T26963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5200'.
[  750.565413][T26964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5200'.
[  750.576129][T27004] netlink: 65003 bytes leftover after parsing attributes in process `syz.0.5200'.
[  750.796151][ T4934] Bluetooth: hci6: command tx timeout
[  750.867290][T27012] openvswitch: netlink: Duplicate or invalid key (type 0).
[  750.883511][T27012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5209'.
[  751.122520][T27020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  751.172113][T26789] 8021q: adding VLAN 0 to HW filter on device batadv0
[  751.470464][T27032] syzkaller0: entered promiscuous mode
[  751.470560][T27032] syzkaller0: entered allmulticast mode
[  751.479960][T27032] vlan0: Device is already in use.
[  751.600354][T26789] veth0_vlan: entered promiscuous mode
[  751.600719][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  751.662444][T26789] veth1_vlan: entered promiscuous mode
[  751.759642][T26789] veth0_macvtap: entered promiscuous mode
[  751.776662][T27039] netlink: 'syz.2.5215': attribute type 4 has an invalid length.
[  751.787227][T27039] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  751.797644][T26789] veth1_macvtap: entered promiscuous mode
[  751.828933][T26789] batman_adv: batadv0: Interface activated: batadv_slave_0
[  751.878095][T26789] batman_adv: batadv0: Interface activated: batadv_slave_1
[  751.939204][ T7814] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  751.958630][ T7814] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  751.960134][ T7814] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  751.960204][ T7814] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  752.174307][T24494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  752.183007][T24494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  752.245733][T27051] xt_check_table_hooks: 23 callbacks suppressed
[  752.253270][T27051] x_tables: duplicate entry at hook 1
[  752.320585][ T7813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  752.320651][ T7813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  752.442586][T27058] netlink: 'syz.0.5221': attribute type 8 has an invalid length.
[  752.874611][ T4934] Bluetooth: hci6: command tx timeout
[  753.247984][T27095] vlan2: entered allmulticast mode
[  753.248842][T27095] veth1_virt_wifi: entered allmulticast mode
[  753.516665][   T43] lwtunnel_output(): recursion limit reached on datapath
[  753.765298][T27113] netlink: 'syz.2.5237': attribute type 28 has an invalid length.
[  753.773216][T27113] netlink: 'syz.2.5237': attribute type 3 has an invalid length.
[  753.979783][T27119] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  754.521837][T27141] nbd: must specify a size in bytes for the device
[  754.863296][T27153] __nla_validate_parse: 9 callbacks suppressed
[  754.865923][T27153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5252'.
[  754.959662][T26986] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0
[  755.115166][T27164] netlink: 'syz.0.5253': attribute type 17 has an invalid length.
[  755.124320][T27164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5253'.
[  755.124378][T27164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5253'.
[  755.167369][T27164] gretap0: entered promiscuous mode
[  755.177791][T27164] gretap0: left promiscuous mode
[  755.271184][T27168] netlink: 'syz.2.5255': attribute type 21 has an invalid length.
[  755.279243][T27168] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5255'.
[  755.290406][T27168] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5255'.
[  755.439187][T10728] lwtunnel_output(): recursion limit reached on datapath
[  755.522488][T27175] netlink: 'syz.0.5257': attribute type 1 has an invalid length.
[  755.669870][T27183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5260'.
[  755.669980][T27183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5260'.
[  756.728486][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  756.942331][T27212] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5268'.
[  756.960353][T27212] ip6t_frag: unknown flags 6
[  757.008714][T27215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5269'.
[  758.141274][T27229] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5275'.
[  758.412971][T27231] team0: Port device dummy0 removed
[  759.279347][   T43] lwtunnel_output(): recursion limit reached on datapath
[  760.175196][T27242] netlink: 'syz.6.5279': attribute type 4 has an invalid length.
[  760.214906][T27268] netlink: 'syz.6.5279': attribute type 4 has an invalid length.
[  760.215499][T27263] netlink: 'syz.2.5284': attribute type 1 has an invalid length.
[  761.093794][T27278] netlink: 'syz.0.5288': attribute type 4 has an invalid length.
[  761.197549][T10729] lwtunnel_output(): recursion limit reached on datapath
[  761.503154][T27294] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  761.771912][   T43] lwtunnel_output(): recursion limit reached on datapath
[  761.782112][T27285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  761.846072][ T4948] block nbd6: Possible stuck request ffff88802819e000: control (read@0,1024B). Runtime 90 seconds
[  761.846178][ T4948] block nbd6: Possible stuck request ffff88802819e1c0: control (read@1024,3072B). Runtime 90 seconds
[  762.597233][T27313] netlink: 'syz.2.5292': attribute type 9 has an invalid length.
[  762.606288][T27313] __nla_validate_parse: 3 callbacks suppressed
[  762.620055][T27313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5292'.
[  762.815451][T27316] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20002
[  763.641300][T27339] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5299'.
[  763.655441][T27338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5301'.
[  764.129679][T27349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5302'.
[  764.129750][T27349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5302'.
[  764.182344][T27355] netlink: 'syz.6.5302': attribute type 4 has an invalid length.
[  764.182435][T27355] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5302'.
[  764.265019][T27347] 8021q: adding VLAN 0 to HW filter on device bond1
[  764.382133][T27355] .`: renamed from bond0
[  764.693478][T27371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5307'.
[  765.047969][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  766.956111][T25860] lwtunnel_output(): recursion limit reached on datapath
[  766.958659][T25860] lwtunnel_output(): recursion limit reached on datapath
[  770.797177][T24494] lwtunnel_output(): recursion limit reached on datapath
[  772.076433][T10735] lwtunnel_output(): recursion limit reached on datapath
[  772.715804][T10735] lwtunnel_output(): recursion limit reached on datapath
[  776.556313][  T999] lwtunnel_output(): recursion limit reached on datapath
[  777.755944][T25860] lwtunnel_output(): recursion limit reached on datapath
[  777.842063][   T43] lwtunnel_output(): recursion limit reached on datapath
[  782.317549][  T999] lwtunnel_output(): recursion limit reached on datapath
[  783.596590][T24494] lwtunnel_output(): recursion limit reached on datapath
[  783.601691][T24494] lwtunnel_output(): recursion limit reached on datapath
[  787.358535][T24494] lwtunnel_output(): recursion limit reached on datapath
[  788.715828][T25860] lwtunnel_output(): recursion limit reached on datapath
[  789.355769][   T43] lwtunnel_output(): recursion limit reached on datapath
[  791.915001][ T4948] block nbd6: Possible stuck request ffff88802819e000: control (read@0,1024B). Runtime 120 seconds
[  791.915124][ T4948] block nbd6: Possible stuck request ffff88802819e1c0: control (read@1024,3072B). Runtime 120 seconds
[  792.556084][ T7814] lwtunnel_output(): recursion limit reached on datapath
[  794.478411][T10735] lwtunnel_output(): recursion limit reached on datapath
[  794.479200][ T7814] lwtunnel_output(): recursion limit reached on datapath
[  797.678164][T10735] lwtunnel_output(): recursion limit reached on datapath
[  799.516780][   T43] lwtunnel_output(): recursion limit reached on datapath
[  800.236156][T24494] lwtunnel_output(): recursion limit reached on datapath
[  803.449899][T24494] lwtunnel_output(): recursion limit reached on datapath
[  804.556319][ T7814] lwtunnel_output(): recursion limit reached on datapath
[  809.196272][T10728] lwtunnel_output(): recursion limit reached on datapath
[  809.836614][   T43] lwtunnel_output(): recursion limit reached on datapath
[  814.317544][T25860] lwtunnel_output(): recursion limit reached on datapath
[  814.317696][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  815.596748][ T7813] lwtunnel_output(): recursion limit reached on datapath
[  819.444159][T24494] lwtunnel_output(): recursion limit reached on datapath
[  819.446738][T10728] lwtunnel_output(): recursion limit reached on datapath
[  820.471258][T27400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5312'.
[  820.514852][T27409] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  820.518747][T27409] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  820.589564][ T5618] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  820.603557][ T5618] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  820.615673][ T5618] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  820.629211][ T5618] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  820.640352][ T5618] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  820.751692][  T999] lwtunnel_output(): recursion limit reached on datapath
[  821.282652][T27417] netlink: 'syz.6.5317': attribute type 29 has an invalid length.
[  821.282725][T27417] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5317'.
[  821.323651][T27417] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5317'.
[  821.338697][T27417] unsupported nlmsg_type 40
[  821.394598][T27417] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5317'.
[  821.476476][T27424] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  821.530323][T27427] netlink: zone id is out of range
[  821.600613][T27431] netlink: zone id is out of range
[  821.609426][T27431] netlink: zone id is out of range
[  821.616800][T27431] netlink: zone id is out of range
[  821.623393][T27431] netlink: zone id is out of range
[  821.634474][T27431] netlink: zone id is out of range
[  821.640461][T27431] netlink: zone id is out of range
[  821.646921][T27431] netlink: zone id is out of range
[  821.661760][T27431] netlink: zone id is out of range
[  821.703145][T27433] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5319'.
[  821.812556][T27433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5319'.
[  821.996756][ T4948] block nbd6: Possible stuck request ffff88802819e000: control (read@0,1024B). Runtime 150 seconds
[  821.996861][ T4948] block nbd6: Possible stuck request ffff88802819e1c0: control (read@1024,3072B). Runtime 150 seconds
[  822.715049][ T4934] Bluetooth: hci7: command tx timeout
[  823.171455][T27467] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5327'.
[  823.281140][T27470] netlink: 'syz.1.5328': attribute type 5 has an invalid length.
[  823.290805][T27470] xt_policy: output policy not valid in PREROUTING and INPUT
[  823.422140][T27472] xt_CONNSECMARK: invalid mode: 0
[  823.537451][T27474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5330'.
[  824.795159][ T4934] Bluetooth: hci7: command tx timeout
[  825.146841][T27509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5337'.
[  825.200885][   T32] INFO: task syz.5.5038:26345 blocked for more than 143 seconds.
[  825.200970][   T32]       Not tainted syzkaller #0
[  825.201012][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  825.201042][   T32] task:syz.5.5038      state:D stack:27088 pid:26345 tgid:26342 ppid:23254  task_flags:0x400140 flags:0x00080002
[  825.201169][   T32] Call Trace:
[  825.201195][   T32]  <TASK>
[  825.201228][   T32]  __schedule+0x17db/0x58f0
[  825.201359][   T32]  ? __pfx___schedule+0x10/0x10
[  825.201431][   T32]  ? schedule+0x90/0x2b0
[  825.201497][   T32]  schedule+0x164/0x2b0
[  825.201565][   T32]  schedule_preempt_disabled+0x13/0x30
[  825.201627][   T32]  __mutex_lock+0x7c1/0x1550
[  825.201697][   T32]  ? __mutex_lock+0x5d4/0x1550
[  825.201765][   T32]  ? nfsd_nl_version_set_doit+0xcd/0x7a0
[  825.201827][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  825.201921][   T32]  ? irqentry_exit+0x218/0x910
[  825.201988][   T32]  nfsd_nl_version_set_doit+0xcd/0x7a0
[  825.202052][   T32]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  825.202095][   T32]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  825.202181][   T32]  genl_family_rcv_msg_doit+0x233/0x340
[  825.202254][   T32]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  825.202346][   T32]  ? bpf_lsm_capable+0x9/0x20
[  825.202409][   T32]  ? security_capable+0x7e/0x2c0
[  825.202455][   T32]  genl_rcv_msg+0x614/0x7a0
[  825.202522][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  825.202578][   T32]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  825.212402][T27515] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  825.355218][   T32]  ? netlink_rcv_skb+0x192/0x4a0
[  825.355285][   T32]  netlink_rcv_skb+0x226/0x4a0
[  825.355344][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  825.355408][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  825.355477][   T32]  ? down_read+0x2be/0x330
[  825.355542][   T32]  genl_rcv+0x28/0x40
[  825.355585][   T32]  netlink_unicast+0x7bd/0x940
[  825.355651][   T32]  netlink_sendmsg+0x813/0xb40
[  825.355715][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  825.355778][   T32]  ? apparmor_socket_sendmsg+0x98/0x360
[  825.355839][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  825.355878][   T32]  sock_sendmsg_nosec+0x13a/0x180
[  825.355937][   T32]  ____sys_sendmsg+0x54e/0x850
[  825.355997][   T32]  ? __pfx_____sys_sendmsg+0x10/0x10
[  825.356044][   T32]  ? import_iovec+0x73/0xa0
[  825.356100][   T32]  ___sys_sendmsg+0x2a5/0x360
[  825.356138][   T32]  ? __lock_acquire+0x6df/0x2e50
[  825.356195][   T32]  ? __pfx____sys_sendmsg+0x10/0x10
[  825.356236][   T32]  ? futex_wake+0x51b/0x5f0
[  825.356339][   T32]  ? __fget_files+0x2a/0x420
[  825.356392][   T32]  ? __fget_files+0x3a2/0x420
[  825.356458][   T32]  __x64_sys_sendmsg+0x1b1/0x290
[  825.356499][   T32]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  825.356598][   T32]  do_syscall_64+0x166/0x520
[  825.356654][   T32]  ? trace_irq_disable+0x3b/0x140
[  825.356689][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  825.356725][   T32]  ? clear_bhb_loop+0x70/0xc0
[  825.356782][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  825.356818][   T32] RIP: 0033:0x7ff4ec39e159
[  825.423769][   T32] RSP: 002b:00007ff4ed2f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  825.423831][   T32] RAX: ffffffffffffffda RBX: 00007ff4ec625fa0 RCX: 00007ff4ec39e159
[  825.423973][   T32] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000005
[  825.424005][   T32] RBP: 00007ff4ec43503b R08: 0000000000000000 R09: 0000000000000000
[  825.445471][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  825.445530][   T32] R13: 00007ff4ec626038 R14: 00007ff4ec625fa0 R15: 00007ffced6995a8
[  825.445599][   T32]  </TASK>
[  825.445663][   T32] 
[  825.445663][   T32] Showing all locks held in the system:
[  825.445685][   T32] locks held by pr/ttyS0/16: 1, last CPU#0:
[  825.445697][   T32]  #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  825.445793][   T32] locks held by khungtaskd/32: 1, last CPU#0:
[  825.445816][   T32]  #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  825.445884][   T32] locks held by kworker/u8:2/43: 3, on CPU#1:
[  825.445895][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  825.445980][   T32]  #1: ffffc90000b37c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  825.446043][   T32]  #2: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  825.446115][   T32] locks held by kworker/u8:6/999: 3, last CPU#1:
[  825.446142][   T32]  #0: ffff88802572c140 ((wq_completion)krds_cp_wq#14/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  825.446189][   T32]  #1: ffffc90004fffc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  825.446256][   T32]  #2: ffff88802b836d80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  825.446348][   T32] locks held by getty/5371: 2, on CPU#0:
[  825.446374][   T32]  #0: ffff88801c7a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  825.446446][   T32]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  825.446534][   T32] locks held by kworker/u8:12/7813: 4, last CPU#0:
[  825.446546][   T32]  #0: ffff888023793140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  825.446643][   T32]  #1: ffffc9000533fc40 ((work_completion)(&(&bat_priv->mcast.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  825.446744][   T32]  #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: batadv_mcast_mla_update+0x186/0x3750
[  825.446843][   T32]  #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  825.446940][   T32] locks held by kworker/u8:13/7814: 5, last CPU#1:
[  825.446971][   T32]  #0: ffff8880259a5140 ((wq_completion)krds_cp_wq#14/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  825.447069][   T32]  #1: ffffc9000532fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  825.447168][   T32]  #2: ffff88802b835b80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  825.447264][   T32]  #3: ffff888034a345e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30
[  825.447360][   T32]  #4: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __inet6_bind+0x49b/0xf30
[  825.447457][   T32] locks held by kworker/u8:15/10728: 4, last CPU#0:
[  825.447470][   T32]  #0: ffff8880369e9940 ((wq_completion)krds_cp_wq#14/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  825.447595][   T32]  #1: ffffc9000d827c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  825.447697][   T32]  #2: ffff88802b836780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  825.447792][   T32]  #3: ffff88802b5e9d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30
[  825.447891][   T32] locks held by kworker/u8:21/10735: 5, last CPU#0:
[  825.447922][   T32]  #0: ffff8880259a6140 ((wq_completion)krds_cp_wq#14/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  825.448025][   T32]  #1: ffffc900032d7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  825.448128][   T32]  #2: ffff88802b836180 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  825.448223][   T32]  #3: ffff88802b5e8fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30
[  825.448320][   T32]  #4: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __inet6_bind+0x49b/0xf30
[  825.448438][   T32] locks held by udevd/18363: 1, on CPU#0:
[  825.448451][   T32]  #0: ffff8880280f9350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  825.448601][   T32] locks held by syz.4.4071/22600: 2, on CPU#0:
[  825.448615][   T32]  #0: ffffffff902c1be8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  825.448734][   T32]  #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0
[  825.448837][   T32] locks held by syz.5.5038/26345: 2, on CPU#1:
[  825.448868][   T32]  #0: ffffffff902c1be8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  825.448969][   T32]  #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0
[  825.449068][   T32] locks held by syz.3.5206/26999: 2, on CPU#0:
[  825.449099][   T32]  #0: ffffffff902c1be8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  825.449201][   T32]  #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0
[  825.449300][   T32] locks held by syz-executor/27411: 1, on CPU#1:
[  825.449330][   T32]  #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30
[  825.449425][   T32] locks held by syz.6.5336/27500: 2, on CPU#1:
[  825.449455][   T32]  #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  825.449552][   T32]  #1: ffffffff8ed62aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  825.449654][   T32] locks held by syz.1.5339/27515: 2, last CPU#1:
[  825.449685][   T32]  #0: ffff888034e0ae20 (sk_lock-AF_INET){+.+.}-{0:0}, at: sctp_sendmsg+0xbb8/0x2d00
[  825.449785][   T32]  #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0
[  825.449887][   T32] locks held by syz.0.5340/27519: 2, on CPU#1:
[  825.449916][   T32]  #0: ffffffff907a5df8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  825.450016][   T32]  #1: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30
[  825.450111][   T32] 
[  825.450116][   T32] =============================================
[  825.450116][   T32] 
[  825.450150][   T32] NMI backtrace for cpu 0
[  825.450166][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  825.450186][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  825.450197][   T32] Call Trace:
[  825.450204][   T32]  <TASK>
[  825.450212][   T32]  dump_stack_lvl+0xe8/0x150
[  825.450240][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  825.450263][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  825.450293][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  825.450318][   T32]  sys_info+0x135/0x170
[  825.450337][   T32]  watchdog+0xfd7/0x1030
[  825.450362][   T32]  ? watchdog+0x1c7/0x1030
[  825.450387][   T32]  kthread+0x38b/0x480
[  825.450406][   T32]  ? __pfx_watchdog+0x10/0x10
[  825.450421][   T32]  ? __pfx_kthread+0x10/0x10
[  825.450440][   T32]  ret_from_fork+0x514/0xb70
[  825.450461][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  825.450489][   T32]  ? __switch_to+0xc89/0x1420
[  825.450523][   T32]  ? __pfx_kthread+0x10/0x10
[  825.450543][   T32]  ret_from_fork_asm+0x1a/0x30
[  825.450585][   T32]  </TASK>
[  825.450666][   T32] Sending NMI from CPU 0 to CPUs 1:
[  825.450710][    C1] NMI backtrace for cpu 1
[  825.450724][    C1] CPU: 1 UID: 0 PID: 7814 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) 
[  825.450746][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  825.450760][    C1] Workqueue: krds_cp_wq#14/6 rds_connect_worker
[  825.450790][    C1] RIP: 0010:enqueue_task_fair+0x8fa/0x1cb0
[  825.450814][    C1] Code: de 48 89 ea e8 17 ff 50 03 84 c0 0f 84 8d 00 00 00 4c 8d 75 08 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 f7 e8 ec c4 9e 00 4d 89 2e 4c 89 e8 48 c1 e8 03 48 b9
[  825.450833][    C1] RSP: 0018:ffffc90000a18bc8 EFLAGS: 00000046
[  825.450848][    C1] RAX: 1ffff11003bdebd4 RBX: ffff8880b873c730 RCX: dffffc0000000000
[  825.450865][    C1] RDX: ffff88801def5e98 RSI: ffff8880b873c730 RDI: ffff88807a145e98
[  825.450879][    C1] RBP: ffff88801def5e98 R08: 0000000001000001 R09: 1ffffffff20f4200
[  825.450894][    C1] R10: dffffc0000000000 R11: fffffbfff20f42f0 R12: ffff88807a145e40
[  825.450909][    C1] R13: ffff88807a145e98 R14: ffff88801def5ea0 R15: 1ffff110170e78e6
[  825.450925][    C1] FS:  0000000000000000(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000
[  825.450941][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  825.450955][    C1] CR2: 00002000000032c0 CR3: 0000000075240000 CR4: 00000000003526f0
[  825.450972][    C1] Call Trace:
[  825.450979][    C1]  <IRQ>
[  825.450999][    C1]  enqueue_task+0x75/0x410
[  825.451039][    C1]  ttwu_do_activate+0x1c8/0x640
[  825.451065][    C1]  try_to_wake_up+0x82b/0x14d0
[  825.451092][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  825.451122][    C1]  hrtimer_wakeup+0x4e/0x60
[  825.451150][    C1]  __hrtimer_run_queues+0x3bc/0xa10
[  825.451189][    C1]  hrtimer_interrupt+0x4cd/0xaa0
[  825.451234][    C1]  __sysvec_apic_timer_interrupt+0x102/0x430
[  825.451259][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  825.451287][    C1]  </IRQ>
[  825.451293][    C1]  <TASK>
[  825.451300][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  825.451322][    C1] RIP: 0010:lock_acquire+0x232/0x350
[  825.451341][    C1] Code: ff ff ff e8 20 f9 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 54 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf fc 43 0a cc 48 8d 3d b7 34 da
[  825.451359][    C1] RSP: 0018:ffffc9000532f668 EFLAGS: 00000282
[  825.451375][    C1] RAX: 5a6c921f48edcb00 RBX: 0000000000000000 RCX: 0000000000000046
[  825.451389][    C1] RDX: 0000000062773a94 RSI: ffffffff8e6fd2ba RDI: ffffffff8c6d9480
[  825.451403][    C1] RBP: ffff888026de5dc0 R08: 5200000000000000 R09: 0000000000000000
[  825.451418][    C1] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: ffffffff8ed5c6e0
[  825.451431][    C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
[  825.451459][    C1]  __ipv6_chk_addr_and_flags+0x1a4/0x7e0
[  825.451482][    C1]  ? __ipv6_chk_addr_and_flags+0x184/0x7e0
[  825.451504][    C1]  ? __ipv6_chk_addr_and_flags+0x184/0x7e0
[  825.451533][    C1]  ipv6_chk_addr+0x3a/0x60
[  825.451555][    C1]  __inet6_bind+0x799/0xf30
[  825.451585][    C1]  kernel_bind+0x13e/0x1c0
[  825.451607][    C1]  ? irqentry_exit+0x218/0x910
[  825.451636][    C1]  ? __pfx_kernel_bind+0x10/0x10
[  825.451658][    C1]  ? irqentry_exit+0x218/0x910
[  825.451695][    C1]  ? rds_tcp_conn_path_connect+0x574/0x920
[  825.451719][    C1]  rds_tcp_conn_path_connect+0x53b/0x920
[  825.451748][    C1]  ? __pfx_rds_tcp_conn_path_connect+0x10/0x10
[  825.451783][    C1]  rds_connect_worker+0x1d8/0x290
[  825.451810][    C1]  ? process_scheduled_works+0x97a/0x1630
[  825.451836][    C1]  process_scheduled_works+0xc3d/0x1630
[  825.451882][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  825.451912][    C1]  ? assign_work+0x3cf/0x5d0
[  825.451940][    C1]  worker_thread+0xa47/0xfb0
[  825.451975][    C1]  ? __kthread_parkme+0x71/0x1f0
[  825.452019][    C1]  kthread+0x38b/0x480
[  825.452038][    C1]  ? __pfx_worker_thread+0x10/0x10
[  825.452063][    C1]  ? __pfx_kthread+0x10/0x10
[  825.452082][    C1]  ret_from_fork+0x514/0xb70
[  825.452102][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  825.452133][    C1]  ? __switch_to+0xc89/0x1420
[  825.452161][    C1]  ? __pfx_kthread+0x10/0x10
[  825.452180][    C1]  ret_from_fork_asm+0x1a/0x30
[  825.452221][    C1]  </TASK>
[  825.452738][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  826.674505][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  826.683611][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  826.693659][   T32] Call Trace:
[  826.696961][   T32]  <TASK>
[  826.699889][   T32]  vpanic+0x56d/0xa60
[  826.703880][   T32]  ? __pfx_vpanic+0x10/0x10
[  826.708395][   T32]  ? console_srcu_read_unlock+0x3a/0x60
[  826.713950][   T32]  panic+0xc5/0xd0
[  826.717684][   T32]  ? __pfx_panic+0x10/0x10
[  826.722107][   T32]  ? wq_watchdog_touch+0xf9/0x160
[  826.727134][   T32]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  826.733288][   T32]  watchdog+0x1030/0x1030
[  826.737629][   T32]  ? watchdog+0x1c7/0x1030
[  826.742044][   T32]  kthread+0x38b/0x480
[  826.746111][   T32]  ? __pfx_watchdog+0x10/0x10
[  826.750783][   T32]  ? __pfx_kthread+0x10/0x10
[  826.755376][   T32]  ret_from_fork+0x514/0xb70
[  826.759978][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  826.765105][   T32]  ? __switch_to+0xc89/0x1420
[  826.769793][   T32]  ? __pfx_kthread+0x10/0x10
[  826.774384][   T32]  ret_from_fork_asm+0x1a/0x30
[  826.779173][   T32]  </TASK>
[  826.782443][   T32] Kernel Offset: disabled
[  826.786766][   T32] Rebooting in 86400 seconds..