last executing test programs:

4.337287886s ago: executing program 3 (id=729):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$FITHAW(r1, 0xc0045878)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)={0xac, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x8c, 0x1, 0x0, 0x1, [@nested={0x88, 0x10, 0x0, 0x1, [@typed={0x82, 0x8, 0x0, 0x0, @binary="509d5dba6c50869ca71ec714b69739fc7eb4464e4b4c200003f460a768d2149821eb570d55bdf9c7ec33e87d6b7b3328f40e7a7ee63fd9ecdfdecf44f1ed43b28ac62902ae549e7dffe73df6ffa0b7bd9e7af241ea0bcaccdc07e7e3a67ffdb31dd9ac07c4539116d944d69b30fe22b75efc16ab7259989d89d02bd4a509"}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0xac}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}], 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x1ac, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x11b2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc10d}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd45}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0xd0}, 0x8000)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000104010100000000000000ffff0004000500010003"], 0x1c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@mpls_getroute={0x148, 0x1a, 0x0, 0x70bd2a, 0x25dfdbff, {0x1c, 0x20, 0x0, 0x7, 0xfd, 0x2, 0xc8, 0x7, 0x1500}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}, @RTA_NEWDST={0x84, 0x13, [{0x7fff}, {0x101}, {0x7, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x81}, {0x1ff}, {0xf, 0x0, 0x1}, {0x6890}, {0x5, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x4}, {0x7ff, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7}, {0x7ff, 0x0, 0x1}, {0xf6a38}, {0x6, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x7e}, {0x7, 0x0, 0x1}, {0x4}, {0x8}, {0x3b}, {0x8, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x7, 0x0, 0x1}, {}, {0xa}, {0x9, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}, @RTA_NEWDST={0x84, 0x13, [{0x8001, 0x0, 0x1}, {0x3}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6}, {0x1}, {}, {0x8001, 0x0, 0x1}, {0xc0000}, {0x7d5a, 0x0, 0x1}, {}, {0x4, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x80}, {0x6}, {0x2, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x8}, {0x100}, {0x3, 0x0, 0x1}, {0xffff}, {0x0, 0x0, 0x1}, {0x65a4}, {0x6, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xfffff}, {0x200}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xfff}]}, @RTA_VIA={0x14, 0x12, {0x1d, "0c337c8680f2a13b96bb22763684"}}]}, 0x148}, 0x1, 0x5502000000000000}, 0x0)
unshare(0x2c020400)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100}]}, 0x28}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r8 = socket$inet(0x2, 0x1, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x5c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r10, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, 0x0)
r11 = socket$kcm(0x2, 0xa, 0x2)
socket$igmp6(0xa, 0x3, 0x3a)
ioctl$SIOCSIFHWADDR(r11, 0x8914, 0x0)

4.1345599s ago: executing program 2 (id=731):
socket$inet6_sctp(0xa, 0x4, 0x84)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff8085000000710000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x4}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0x4, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x94}}, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000007c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x2, 0x2c, 0x0, @remote, @local, {[@routing={0xff, 0x0, 0x1, 0x8}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5000002000000000000006000000000303a00ff020000000000000000000000000001fc01000000000000e900000000000000040090780000000363fefbd400020001fc010000000000000000000000000000fc0100"/102], 0x66)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000)
setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)

3.83928468s ago: executing program 4 (id=734):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="00000000030000c7490b85bb000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4)
recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000780)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x11, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func, @ldst={0x1, 0x2, 0x4, 0x6, 0xa, 0x20, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x6, 0x8}, 0x10, 0xffffffffffffffff, r5, 0xa, &(0x7f0000000780), &(0x7f00000007c0)=[{0x0, 0x1, 0xd, 0x8}, {0x3, 0x3, 0x1, 0xb}, {0x0, 0x2, 0x6, 0xc}, {0x1, 0x4, 0x4}, {0x3, 0x1, 0x7, 0x1}, {0x0, 0x1, 0x9, 0x5}, {0x0, 0x1, 0x7, 0x3}, {0x2, 0x1, 0x8, 0x8}, {0x5, 0x5, 0xc, 0x6}, {0x2, 0x5, 0x10, 0x6}], 0x10, 0x3, @void, @value}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x4)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000)
recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f00000004c0)=""/257, 0x101}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4116, 0x1014}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/219, 0xdb}], 0x7}, 0x80000000}], 0x4, 0x40000030, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r9, 0x7, 0x0, 0x4000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

3.537010733s ago: executing program 2 (id=737):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x47}]}}}]}, 0x3c}}, 0x40)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000300), &(0x7f00000003c0)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, <r4=>0xffffffffffffffff}, 0x4)
socket$packet(0x11, 0x2, 0x300)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9dd4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5, r1}, 0xc)
pipe(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
tee(r6, 0xffffffffffffffff, 0x80000001, 0x0)
vmsplice(r7, &(0x7f0000000400)=[{&(0x7f0000000040)='\"w>', 0x3}], 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x2, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000050000008510000001000000950000000000000018000000f4c7e43851f4cf54002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b7030000ffffffff85000000ae0000009500"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xd, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f08", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001800010000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000f000000ffff0000000014000100fc0100"/44], 0x44}}, 0x0)
close(r9)

3.408313254s ago: executing program 2 (id=738):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a3, &(0x7f0000000200)='veth1_to_hsr\x00')
r3 = socket(0x26, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r6, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x80000000})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$cgroup_int(r5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"})
sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x2, 0x5, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x198, @remote, 0xfffffff7}}]}, 0x70}}, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@cswp={0x58, 0x114, 0x7, {{0x5, 0x81}, &(0x7f0000000180)=0x3, 0x0, 0x7, 0x1a000, 0xeec6773, 0xffff, 0x26, 0x1}}], 0x58}, 0x0)

3.309434416s ago: executing program 3 (id=739):
socket$inet6_sctp(0xa, 0x4, 0x84)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x4}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0x4, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x94}}, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000007c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x2, 0x2c, 0x0, @remote, @local, {[@routing={0xff, 0x0, 0x1, 0x8}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5000002000000000000006000000000303a00ff020000000000000000000000000001fc01000000000000e900000000000000040090780000000363fefbd400020001fc010000000000000000000000000000fc0100"/102], 0x66)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)

2.834593955s ago: executing program 4 (id=741):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000001080))
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x2, 0x4, 0xdd9d, 0x0, 0x4, 0x800}}, {0x4}}]}]}, 0x5c}}, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040))
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r6, &(0x7f0000000100)=""/113, 0x71)
write$ppp(r6, &(0x7f0000000200)="bc72", 0x2)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x7, 0x4, 0x1, 0x5, 0x6, 0x4, 0x2, 0x5, r4}, 0x20)
connect$ax25(r1, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r8 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}, {0x0}], 0x2}], 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}]}}}}}}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)

2.744746052s ago: executing program 3 (id=742):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)={0x34, r3, 0x30b, 0x0, 0x0, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x47}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x50}}, 0x40)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000300), &(0x7f00000003c0)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, <r6=>0xffffffffffffffff}, 0x4)
socket$packet(0x11, 0x2, 0x300)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9dd4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r7, r1}, 0xc)
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
tee(r8, 0xffffffffffffffff, 0x80000001, 0x0)
vmsplice(r9, &(0x7f0000000400)=[{&(0x7f0000000040)}], 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x2, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000050000008510000001000000950000000000000018000000f4c7e43851f4cf54002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b7030000ffffffff85000000ae0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe80, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001800010000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000f000000ffff0000000014000100fc0100"/44], 0x44}}, 0x0)
close(r11)

2.481619976s ago: executing program 3 (id=744):
socket$inet6_sctp(0xa, 0x4, 0x84)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000007c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x2, 0x2c, 0x0, @remote, @local, {[@routing={0xff, 0x0, 0x1, 0x8}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5000002000000000000006000000000303a00ff020000000000000000000000000001fc01000000000000e900000000000000040090780000000363fefbd400020001fc010000000000000000000000000000fc0100"/102], 0x66)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)

2.423278059s ago: executing program 2 (id=745):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x34, 0x10000ec}}], 0x18}}], 0x1, 0x0)
r1 = socket$kcm(0x10, 0x4, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)=0x28)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14)
r7 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x54, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x73f}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x8}]}}]}, 0x54}}, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x9}, {0xfff3, 0x5}, {0x1c, 0x2613a1b406814a86}}}, 0x24}}, 0x44804)
setsockopt$inet6_MCAST_LEAVE_GROUP(r7, 0x29, 0x2d, &(0x7f00000003c0)={0xa000, {{0xa, 0x4e24, 0x5, @private1, 0x8001}}}, 0x88)
bind$packet(r6, &(0x7f00000002c0)={0x11, 0x9, r8, 0x1, 0x6, 0x6, @random="2b52a21379cd"}, 0x14)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, 0x0, 0x3c)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, @null, @bpq0, 0x4, 'syz1\x00', @null, 0xfffffffd, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x1, @null, @bpq0, 0x69c4, 'syz1\x00', @null, 0xfff, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]})
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="a98835c2b5980000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r9}, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c00010000000000000000000400008004001000"], 0x18}], 0x1}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff)

2.382926846s ago: executing program 4 (id=746):
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'macsec0\x00', 0x2000})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r3}, &(0x7f0000000a40), &(0x7f0000000a80)='%pB    \x00'}, 0x20)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8)
sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket(0x1, 0x2, 0x7)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
sendmsg$netlink(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000001c0)=0x579, 0x4)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000130000000000000300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r9, &(0x7f0000000340)="07000000010000", 0x7)
sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8004)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'W'}]}], {0x14}}, 0x74}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x1, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x2e, 0x2e]}}, 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2e}]}}}]}, 0x50}}, 0x0)

1.932791604s ago: executing program 4 (id=749):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="00000000030000c7490b85bb000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18)
recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000780)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x11, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func, @ldst={0x1, 0x2, 0x4, 0x6, 0xa, 0x20, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x6, 0x8}, 0x10, 0xffffffffffffffff, r4, 0xa, &(0x7f0000000780), &(0x7f00000007c0)=[{0x0, 0x1, 0xd, 0x8}, {0x3, 0x3, 0x1, 0xb}, {0x0, 0x2, 0x6, 0xc}, {0x1, 0x4, 0x4}, {0x3, 0x1, 0x7, 0x1}, {0x0, 0x1, 0x9, 0x5}, {0x0, 0x1, 0x7, 0x3}, {0x2, 0x1, 0x8, 0x8}, {0x5, 0x5, 0xc, 0x6}, {0x2, 0x5, 0x10, 0x6}], 0x10, 0x3, @void, @value}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x4)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000)
recvmmsg(r5, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f00000004c0)=""/257, 0x101}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4116, 0x1014}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/219, 0xdb}], 0x7}, 0x80000000}], 0x4, 0x40000030, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r8, 0x7, 0x0, 0x4000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

1.923624327s ago: executing program 3 (id=750):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="00000000030000c7490b85bb000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4)
recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000780)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x11, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func, @ldst={0x1, 0x2, 0x4, 0x6, 0xa, 0x20, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x6, 0x8}, 0x10, 0xffffffffffffffff, r5, 0xa, &(0x7f0000000780), &(0x7f00000007c0)=[{0x0, 0x1, 0xd, 0x8}, {0x3, 0x3, 0x1, 0xb}, {0x0, 0x2, 0x6, 0xc}, {0x1, 0x4, 0x4}, {0x3, 0x1, 0x7, 0x1}, {0x0, 0x1, 0x9, 0x5}, {0x0, 0x1, 0x7, 0x3}, {0x2, 0x1, 0x8, 0x8}, {0x5, 0x5, 0xc, 0x6}, {0x2, 0x5, 0x10, 0x6}], 0x10, 0x3, @void, @value}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x4)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000)
recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f00000004c0)=""/257, 0x101}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4116, 0x1014}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/219, 0xdb}], 0x7}, 0x80000000}], 0x4, 0x40000030, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r9, 0x7, 0x0, 0x4000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

1.829539292s ago: executing program 2 (id=751):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="00000000030000c7490b85bb000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4)
recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000780)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x11, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func, @ldst={0x1, 0x2, 0x4, 0x6, 0xa, 0x20, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x6, 0x8}, 0x10, 0xffffffffffffffff, r5, 0xa, &(0x7f0000000780), &(0x7f00000007c0)=[{0x0, 0x1, 0xd, 0x8}, {0x3, 0x3, 0x1, 0xb}, {0x0, 0x2, 0x6, 0xc}, {0x1, 0x4, 0x4}, {0x3, 0x1, 0x7, 0x1}, {0x0, 0x1, 0x9, 0x5}, {0x0, 0x1, 0x7, 0x3}, {0x2, 0x1, 0x8, 0x8}, {0x5, 0x5, 0xc, 0x6}, {0x2, 0x5, 0x10, 0x6}], 0x10, 0x3, @void, @value}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x4)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000)
recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f00000004c0)=""/257, 0x101}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4116, 0x1014}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/219, 0xdb}], 0x7}, 0x80000000}], 0x4, 0x40000030, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r9, 0x7, 0x0, 0x4000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

1.683027532s ago: executing program 0 (id=752):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="610000000206010400000000000000000200000910000303000000683a69702c6d616300050004000100000005000100070000000900020073797a30000000000900020073797a3000000000050005000a000000"], 0xf}}, 0x40040)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x13c8, 0x0, 0x1250, 0x11b0, 0x11b0, 0xc0, 0x1420, 0x1420, 0x1420, 0x1420, 0x1420, 0x6, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'bridge0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'ip6gre0\x00', 'veth1_macvtap\x00'}, 0x0, 0x10a0, 0x10c8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'wg2\x00', 'lo\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1428)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES16=<r3=>0x0], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40040c5)
r4 = socket(0x2a, 0x2, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f00000004c0)={0x0, 0x1, 0x3, @random="54d356b64e9f"}, 0x10)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000000))
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0xf)
accept$inet(r4, &(0x7f0000000380)={0x2, 0x0, @empty}, &(0x7f0000000400)=0x10)
sendmmsg(r6, &(0x7f00000002c0), 0x0, 0x48005)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, 0x0, 0x4008800)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c3b0000", @ANYRES16=r9, @ANYRESHEX, @ANYRESHEX=r2, @ANYBLOB], 0x1c}}, 0xa52cf1d0dc906d1e)
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r10, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={<r11=>0x0}, 0x0)
r12 = socket$kcm(0x2, 0x3, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r10, @ANYRESHEX, @ANYRES64=r11, @ANYRES32=r3], &(0x7f0000000300), 0x38, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
sendmsg$inet(r12, 0x0, 0x40044)
accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'erspan0\x00'})

1.577740549s ago: executing program 0 (id=754):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)={0x34, r3, 0x30b, 0x0, 0x0, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x47}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x50}}, 0x40)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000300), &(0x7f00000003c0)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, <r6=>0xffffffffffffffff}, 0x4)
socket$packet(0x11, 0x2, 0x300)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9dd4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r7, r1}, 0xc)
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
tee(r8, 0xffffffffffffffff, 0x80000001, 0x0)
vmsplice(r9, &(0x7f0000000400)=[{&(0x7f0000000040)='\"w', 0x2}], 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x2, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000050000008510000001000000950000000000000018000000f4c7e43851f4cf54002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b7030000ffffffff85000000ae0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe80, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001800010000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000f000000ffff0000000014000100fc0100"/44], 0x44}}, 0x0)
close(r11)

1.486416469s ago: executing program 0 (id=756):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000001080))
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x2, 0x4, 0xdd9d, 0x0, 0x4, 0x800}}, {0x4}}]}]}, 0x5c}}, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040))
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r6, &(0x7f0000000100)=""/113, 0x71)
write$ppp(r6, &(0x7f0000000200)="bc72", 0x2)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x7, 0x4, 0x1, 0x5, 0x6, 0x4, 0x2, 0x5, r4}, 0x20)
connect$ax25(r1, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r8 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}, {0x0}], 0x2}], 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}]}}}}}}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)

1.423712682s ago: executing program 1 (id=757):
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000440)=<r0=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, r0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
unshare(0x20000400)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3ffb2d7144f29af11fe6557f8a74d923d12c43bc0000004d0012"], 0xb4}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$can_j1939(0x1d, 0x2, 0x7)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="010120"], 0xc)

1.234446144s ago: executing program 1 (id=758):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'vxcan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010100, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0xa}]}]}, 0xa0}}, 0x0)
r6 = socket$inet(0x2, 0x1, 0x5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003d0007010000000000000000027c0000040000000c00018006000600894f"], 0x24}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7020000000008300000008000300", @ANYRES32=0x0, @ANYBLOB="50000e804c0002150400018004000200040002002c000180180801800400080004000100060004000100000004000a000c0001800400080004000c000400018000"/79], 0x6c}, 0x1, 0x0, 0x0, 0x24048084}, 0x884)
r10 = socket$caif_stream(0x25, 0x1, 0x0)
ppoll(&(0x7f0000000040)=[{r2, 0x4582}, {r6, 0x2000}, {r8, 0x2308}, {r10, 0x1000}, {r0, 0x2000}, {r3, 0x4512}, {r0}, {r3, 0x4}], 0x8, &(0x7f00000000c0), &(0x7f0000000140)={[0x6000]}, 0x8)
r11 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000280)=0x8)
sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044090}, 0x0)
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd090032000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120088a8"], 0xfdef)

1.159020274s ago: executing program 0 (id=759):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
bind$tipc(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10)
clock_gettime(0x0, &(0x7f0000002980)={<r4=>0x0, <r5=>0x0})
recvmmsg(r3, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)}, {&(0x7f0000000380)=""/65, 0x41}], 0x2, &(0x7f0000000440)=""/89, 0x59}, 0x8}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001500)}, {&(0x7f0000001540)=""/38, 0x26}], 0x4, &(0x7f00000015c0)=""/143, 0x8f}, 0x9}, {{&(0x7f0000001680)=@nfc_llcp, 0x80, &(0x7f0000001880)=[{&(0x7f0000001700)=""/224, 0xe0}], 0x1, &(0x7f00000018c0)=""/4096, 0x1000}, 0x7}], 0x3, 0x0, &(0x7f00000029c0)={r4, r5+10000000})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002a00)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r8, @ANYBLOB="010000000000fddbdf253f00000008000300", @ANYRES32=r7, @ANYBLOB="10005e80040001000800050001000000fcd6bcc5d35ea960934240355af16434073618e9ab0deae2b448fe75f429eb341839554844ef01a448d9b26cb9e5257e60264da3209c216b33e21aff8143c8bc6eadf98e229a495287d285f22205b166417fe174a495352fab6dbbbdeec94095f42258816b0517c343ac9d9ee280a5e26fcb895a1aa87eb68373d59e0759514895930ff5d9f3"], 0x2c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
listen(r3, 0x8)
accept4(r3, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x3}, 0x8)
r9 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@rand_addr=0x64010100, 0x4e1e, 0x0, 0x4e22, 0x445b, 0x2, 0x20, 0x0, 0x3c}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000007, 0xe6}, {0x10000, 0x80000000000}, 0x4, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x4d2, 0x6c}, 0x0, @in=@rand_addr=0x64010102, 0x3502, 0x1, 0x8, 0x0, 0x2}}, 0xe8)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)

1.013361782s ago: executing program 0 (id=760):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="9c000000150001002dbd7000fedbdf250298c8ff", @ANYRES32=0x0, @ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1)
r1 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f00000001c0), 0x10)
recvmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x40000002, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="00022dbd7000ffcedf25010000000000000002410000000c00136574683a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40040)
sendmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "000000000000000e"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4004000)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r4, 0x6, 0xd, &(0x7f00000002c0)=""/156, &(0x7f0000000380)=0x9c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="13ffffff52f3ff0027bd70a32aa1fa40dfc150dfcee5b963bd3228c4ae0ab8b1f6aa"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x240080e0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23}, 0x10)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000024c0)=ANY=[@ANYBLOB="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"], 0x1178}, 0x1, 0x0, 0x0, 0x20000}, 0x20000000)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendto$inet(r6, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27)
setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f00000003c0)=0x40, 0x4)

1.012399894s ago: executing program 4 (id=761):
socket$inet6_sctp(0xa, 0x4, 0x84)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff8085000000710000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000007c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x2, 0x2c, 0x0, @remote, @local, {[@routing={0xff, 0x0, 0x1, 0x8}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5000002000000000000006000000000303a00ff020000000000000000000000000001fc01000000000000e900000000000000040090780000000363fefbd400020001fc010000000000000000000000000000fc0100"/102], 0x66)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)

957.072315ms ago: executing program 2 (id=762):
unshare(0x6a040000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x77, 0xfffff038}, {0x20}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001})
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x20)
ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r7)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)

955.516905ms ago: executing program 3 (id=763):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$FITHAW(r1, 0xc0045878)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)={0xac, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x8c, 0x1, 0x0, 0x1, [@nested={0x88, 0x10, 0x0, 0x1, [@typed={0x82, 0x8, 0x0, 0x0, @binary="509d5dba6c50869ca71ec714b69739fc7eb4464e4b4c200003f460a768d2149821eb570d55bdf9c7ec33e87d6b7b3328f40e7a7ee63fd9ecdfdecf44f1ed43b28ac62902ae549e7dffe73df6ffa0b7bd9e7af241ea0bcaccdc07e7e3a67ffdb31dd9ac07c4539116d944d69b30fe22b75efc16ab7259989d89d02bd4a509"}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0xac}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}], 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x1ac, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x11b2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc10d}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd45}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0xd0}, 0x8000)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000104010100000000000000ffff0004000500010003"], 0x1c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@mpls_getroute={0x148, 0x1a, 0x0, 0x70bd2a, 0x25dfdbff, {0x1c, 0x20, 0x0, 0x7, 0xfd, 0x2, 0xc8, 0x7, 0x1500}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}, @RTA_NEWDST={0x84, 0x13, [{0x7fff}, {0x101}, {0x7, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x81}, {0x1ff}, {0xf, 0x0, 0x1}, {0x6890}, {0x5, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x4}, {0x7ff, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7}, {0x7ff, 0x0, 0x1}, {0xf6a38}, {0x6, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x7e}, {0x7, 0x0, 0x1}, {0x4}, {0x8}, {0x3b}, {0x8, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x7, 0x0, 0x1}, {}, {0xa}, {0x9, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}, @RTA_NEWDST={0x84, 0x13, [{0x8001, 0x0, 0x1}, {0x3}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6}, {0x1}, {}, {0x8001, 0x0, 0x1}, {0xc0000}, {0x7d5a, 0x0, 0x1}, {}, {0x4, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x80}, {0x6}, {0x2, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x8}, {0x100}, {0x3, 0x0, 0x1}, {0xffff}, {0x0, 0x0, 0x1}, {0x65a4}, {0x6, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xfffff}, {0x200}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xfff}]}, @RTA_VIA={0x14, 0x12, {0x1d, "0c337c8680f2a13b96bb22763684"}}]}, 0x148}, 0x1, 0x5502000000000000}, 0x0)
unshare(0x2c020400)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100}]}, 0x28}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r8 = socket$inet(0x2, 0x1, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x5c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r10, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, 0x0)
r11 = socket$kcm(0x2, 0xa, 0x2)
socket$igmp6(0xa, 0x3, 0x3a)
ioctl$SIOCSIFHWADDR(r11, 0x8914, 0x0)

952.86619ms ago: executing program 1 (id=764):
socket$inet6_sctp(0xa, 0x4, 0x84)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff8085000000710000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x4}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0x4, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x94}}, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000007c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x2, 0x2c, 0x0, @remote, @local, {[@routing={0xff, 0x0, 0x1, 0x8}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5000002000000000000006000000000303a00ff020000000000000000000000000001fc01000000000000e900000000000000040090780000000363fefbd400020001fc010000000000000000000000000000fc0100"/102], 0x66)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000)
setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)

387.403174ms ago: executing program 4 (id=765):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x13, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200)={0x0, 0x0, 0xad2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1030000, 0x1000, 0x5, 0x4}, 0x20)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
unshare(0x6a040000)
unshare(0x20000400)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="0242090082b9000047b298c8716d09160000010018000000cb000000000000000200"/46], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="16242a1c72ec3ee56b042900000000000016000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r4, @ANYBLOB="f3f40000000000000000030000007000018008000300000000000d0001007564703a73797bb100000000440004"], 0x84}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r8, 0x106, 0x1, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet6_opts(r9, 0x29, 0x39, &(0x7f0000000500)=""/113, &(0x7f0000000580)=0x71)
sendmsg$NFT_BATCH(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a310000000060000000160a03000000000000000000020000000900010073797a31000000000900020073797a31000000002c000380080002400000000008000140000000001800038014000100776c616e3100000000000000000000000800074000000001"], 0xa8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)

260.18503ms ago: executing program 1 (id=766):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)={0x34, r3, 0x30b, 0x0, 0x0, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x47}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x50}}, 0x40)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000300), &(0x7f00000003c0)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, <r6=>0xffffffffffffffff}, 0x4)
socket$packet(0x11, 0x2, 0x300)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9dd4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r7, r1}, 0xc)
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
tee(r8, 0xffffffffffffffff, 0x80000001, 0x0)
vmsplice(r9, &(0x7f0000000400)=[{&(0x7f0000000040)='\"w', 0x2}], 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x2, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000050000008510000001000000950000000000000018000000f4c7e43851f4cf54002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b7030000ffffffff85000000ae0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe80, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001800010000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000f000000ffff0000000014000100fc0100"/44], 0x44}}, 0x0)
close(r11)

171.446642ms ago: executing program 1 (id=767):
socket$pppl2tp(0x18, 0x1, 0x1)
socket(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket(0x1e, 0x805, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$kcm(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r4], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)

107.943519ms ago: executing program 0 (id=768):
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000440)=<r0=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, r0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
unshare(0x20000400)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3ffb2d7144f29af11fe6557f8a74d923d12c43bc0000004d0012"], 0xb4}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$can_j1939(0x1d, 0x2, 0x7)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="010120"], 0xc)

0s ago: executing program 1 (id=769):
unshare(0x6a040000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x77, 0xfffff038}, {0x20}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001})
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x20)
ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={0x0, 0x74}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r7)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts.
[   69.326839][ T5821] cgroup: Unknown subsys name 'net'
[   69.433932][ T5821] cgroup: Unknown subsys name 'cpuset'
[   69.442064][ T5821] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   70.943437][ T5821] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.613023][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[   71.619400][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[   73.263851][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.272899][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   73.280714][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   73.286475][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   73.298752][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   73.310472][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   73.311556][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.318006][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   73.332915][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   73.336518][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.342200][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   73.349685][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.355405][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   73.364003][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.369875][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.377127][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   73.382994][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   73.391765][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   73.398596][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.403944][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.412061][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   73.419107][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.425459][ T5851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   73.434802][ T5148] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   73.439044][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   73.448962][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   73.461342][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   73.473910][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   73.491107][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   73.499371][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   73.914779][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   74.008210][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   74.021164][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   74.044221][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   74.101889][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.109130][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.117463][ T5832] bridge_slave_0: entered allmulticast mode
[   74.124432][ T5832] bridge_slave_0: entered promiscuous mode
[   74.178454][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.185734][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.193277][ T5832] bridge_slave_1: entered allmulticast mode
[   74.200107][ T5832] bridge_slave_1: entered promiscuous mode
[   74.210591][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   74.308735][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.351842][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.359117][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.366586][ T5839] bridge_slave_0: entered allmulticast mode
[   74.373328][ T5839] bridge_slave_0: entered promiscuous mode
[   74.384533][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.404228][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.411624][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.418858][ T5835] bridge_slave_0: entered allmulticast mode
[   74.426564][ T5835] bridge_slave_0: entered promiscuous mode
[   74.433947][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.441326][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.448495][ T5839] bridge_slave_1: entered allmulticast mode
[   74.455497][ T5839] bridge_slave_1: entered promiscuous mode
[   74.487120][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.494426][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.501700][ T5833] bridge_slave_0: entered allmulticast mode
[   74.508704][ T5833] bridge_slave_0: entered promiscuous mode
[   74.516015][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.523334][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.530752][ T5835] bridge_slave_1: entered allmulticast mode
[   74.537438][ T5835] bridge_slave_1: entered promiscuous mode
[   74.563132][ T5832] team0: Port device team_slave_0 added
[   74.578001][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.585357][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.593191][ T5833] bridge_slave_1: entered allmulticast mode
[   74.600093][ T5833] bridge_slave_1: entered promiscuous mode
[   74.624326][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.635526][ T5832] team0: Port device team_slave_1 added
[   74.649536][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.656850][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.664356][ T5831] bridge_slave_0: entered allmulticast mode
[   74.671335][ T5831] bridge_slave_0: entered promiscuous mode
[   74.699269][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.710455][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.728376][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.735921][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.743973][ T5831] bridge_slave_1: entered allmulticast mode
[   74.751123][ T5831] bridge_slave_1: entered promiscuous mode
[   74.759846][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.771991][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.783888][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.809710][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.817201][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.844663][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.907251][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.914748][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.940899][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.961169][ T5833] team0: Port device team_slave_0 added
[   74.970419][ T5835] team0: Port device team_slave_0 added
[   74.978845][ T5839] team0: Port device team_slave_0 added
[   74.994461][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.006507][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.017069][ T5833] team0: Port device team_slave_1 added
[   75.024470][ T5835] team0: Port device team_slave_1 added
[   75.042035][ T5839] team0: Port device team_slave_1 added
[   75.086058][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.093477][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.120074][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.173060][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.183698][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.210684][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.225728][ T5832] hsr_slave_0: entered promiscuous mode
[   75.235479][ T5832] hsr_slave_1: entered promiscuous mode
[   75.245005][ T5831] team0: Port device team_slave_0 added
[   75.253296][ T5831] team0: Port device team_slave_1 added
[   75.259537][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.266942][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.293123][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.307142][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.314331][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.340546][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.354114][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.361337][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.387329][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.421844][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.428844][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.455225][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.506813][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.514082][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.541014][ T5838] Bluetooth: hci4: command tx timeout
[   75.546496][ T5846] Bluetooth: hci1: command tx timeout
[   75.550484][ T5838] Bluetooth: hci3: command tx timeout
[   75.552621][ T5846] Bluetooth: hci2: command tx timeout
[   75.557801][ T5838] Bluetooth: hci0: command tx timeout
[   75.564849][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.592221][ T5835] hsr_slave_0: entered promiscuous mode
[   75.598396][ T5835] hsr_slave_1: entered promiscuous mode
[   75.605507][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.613589][ T5835] Cannot create hsr debugfs directory
[   75.630717][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.637708][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.663910][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.722168][ T5833] hsr_slave_0: entered promiscuous mode
[   75.728380][ T5833] hsr_slave_1: entered promiscuous mode
[   75.734588][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.742276][ T5833] Cannot create hsr debugfs directory
[   75.781844][ T5839] hsr_slave_0: entered promiscuous mode
[   75.788078][ T5839] hsr_slave_1: entered promiscuous mode
[   75.794734][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.803955][ T5839] Cannot create hsr debugfs directory
[   75.874783][ T5831] hsr_slave_0: entered promiscuous mode
[   75.881260][ T5831] hsr_slave_1: entered promiscuous mode
[   75.887276][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.895407][ T5831] Cannot create hsr debugfs directory
[   76.141848][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   76.171843][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   76.199219][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   76.229526][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   76.267534][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   76.290549][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   76.301508][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   76.323449][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   76.361996][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   76.375928][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   76.399097][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   76.408867][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   76.507856][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   76.517693][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   76.556205][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   76.580562][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   76.589386][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   76.614605][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   76.624824][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   76.636235][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   76.663631][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.700606][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.722861][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   76.764409][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.771741][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.805222][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   76.819910][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.827110][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.838024][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.845173][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.874568][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.881704][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.998200][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.023211][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.047359][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.084830][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   77.117275][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   77.139263][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   77.172860][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.180044][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.197367][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.204521][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.214858][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.221982][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.231420][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.238526][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.305771][ T5035] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.312987][ T5035] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.357113][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   77.368277][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   77.400889][ T5035] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.408392][ T5035] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.446363][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.515750][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.569664][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   77.599870][ T5835] veth0_vlan: entered promiscuous mode
[   77.611601][ T5838] Bluetooth: hci0: command tx timeout
[   77.617060][ T5838] Bluetooth: hci4: command tx timeout
[   77.624038][ T5845] Bluetooth: hci2: command tx timeout
[   77.624096][ T5846] Bluetooth: hci3: command tx timeout
[   77.629450][ T5845] Bluetooth: hci1: command tx timeout
[   77.694424][ T5835] veth1_vlan: entered promiscuous mode
[   77.781425][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.803283][ T5832] veth0_vlan: entered promiscuous mode
[   77.859268][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.884171][ T5832] veth1_vlan: entered promiscuous mode
[   77.925775][ T5833] veth0_vlan: entered promiscuous mode
[   77.938718][ T5835] veth0_macvtap: entered promiscuous mode
[   77.951673][ T5833] veth1_vlan: entered promiscuous mode
[   77.967197][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.977932][ T5835] veth1_macvtap: entered promiscuous mode
[   78.043060][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.052887][ T5832] veth0_macvtap: entered promiscuous mode
[   78.093455][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.116453][ T5833] veth0_macvtap: entered promiscuous mode
[   78.124000][ T5839] veth0_vlan: entered promiscuous mode
[   78.143104][ T5832] veth1_macvtap: entered promiscuous mode
[   78.151428][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.161729][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.176467][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.186048][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.199044][ T5833] veth1_macvtap: entered promiscuous mode
[   78.228454][ T5839] veth1_vlan: entered promiscuous mode
[   78.319914][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.334755][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.346835][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.366802][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.377606][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.387746][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.398257][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.409192][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.424113][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.435844][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.447789][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.464016][ T5839] veth0_macvtap: entered promiscuous mode
[   78.474432][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.485853][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.496387][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.506966][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.518234][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.537848][ T5839] veth1_macvtap: entered promiscuous mode
[   78.544657][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.561929][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.572680][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.575636][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.591647][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.600877][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.618599][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.627844][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.636830][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.645577][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.717088][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.718112][ T5831] veth0_vlan: entered promiscuous mode
[   78.737409][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.753822][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.765554][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.780695][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.791589][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.802190][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.814446][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.825841][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.867358][ T5831] veth1_vlan: entered promiscuous mode
[   78.896146][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.908984][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.919328][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.930267][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.940522][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.951474][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.963911][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.975743][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.986095][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.997482][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.999151][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   79.021526][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.053702][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.080113][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.190509][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.201992][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.232126][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.263671][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.276128][ T5919] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.340652][ T5831] veth0_macvtap: entered promiscuous mode
[   79.376227][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.394099][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.420214][ T5831] veth1_macvtap: entered promiscuous mode
[   79.484584][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.501433][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.574111][ T5925] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'.
[   79.646926][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.655370][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.688810][ T5926] Bluetooth: MGMT ver 1.23
[   79.694670][ T5845] Bluetooth: hci3: command tx timeout
[   79.701176][ T5838] Bluetooth: hci2: command tx timeout
[   79.707259][ T5849] Bluetooth: hci0: command tx timeout
[   79.707309][ T5148] Bluetooth: hci4: command tx timeout
[   79.718889][ T5846] Bluetooth: hci1: command tx timeout
[   79.929795][ T5924] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.953016][ T5924] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.154292][ T5924] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.206807][ T5924] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.231665][ T5924] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.244774][ T5924] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.351454][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.380061][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.390701][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.410676][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.420795][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.440169][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.450896][ T5933] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET)
[   80.451457][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.469518][ T5924] syz.0.1 (5924) used greatest stack depth: 19248 bytes left
[   80.470756][ T5933] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.502401][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.550178][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.560431][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.571642][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.581563][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.592271][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.621176][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.634978][ T5936] netlink: 'syz.1.2': attribute type 10 has an invalid length.
[   80.646395][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.674031][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.692766][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.704468][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.726033][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.740194][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.757786][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.765380][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.788416][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.796097][ T5936] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.804231][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.811439][ T5936] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.846889][ T5936] team0: Port device bridge0 added
[   80.852755][ T5940] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7'.
[   81.045327][ T5942] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   81.094749][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.130036][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.311635][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.349775][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.526072][ T5953] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82
[   81.634632][ T5960] Cannot find map_set index 0 as target
[   81.770781][ T5148] Bluetooth: hci3: command tx timeout
[   81.776377][ T5838] Bluetooth: hci0: command tx timeout
[   81.777290][ T5845] Bluetooth: hci1: command tx timeout
[   81.781998][ T5846] Bluetooth: hci0: Opcode 0x0401 failed: -110
[   81.787202][ T5849] Bluetooth: hci4: command tx timeout
[   81.787240][ T5849] Bluetooth: hci2: command tx timeout
[   82.148459][ T5969] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8'.
[   82.197064][ T5969] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   82.212982][ T5936] syz.1.2 (5936) used greatest stack depth: 18416 bytes left
[   82.283697][ T5950] smc: net device bond0 applied user defined pnetid SYZ2
[   82.317767][ T5969] netlink: 'syz.2.8': attribute type 2 has an invalid length.
[   83.065844][ T5986] vxcan1: entered allmulticast mode
[   83.104921][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'.
[   83.157811][ T5983] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[   83.246917][ T5994] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13'.
[   83.861490][ T5849] Bluetooth: hci0: command tx timeout
[   84.294130][ T6021] tipc: Started in network mode
[   84.299118][ T6021] tipc: Node identity 6, cluster identity 4711
[   84.315680][ T6021] tipc: Node number set to 6
[   84.346567][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16'.
[   84.510386][ T6027] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   85.333280][ T6027] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.581133][ T6016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15'.
[   86.076826][ T6016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.307126][ T6016] syz.2.15 (6016) used greatest stack depth: 17680 bytes left
[   86.829326][ T6071] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.935008][ T6079] bridge_slave_0: left allmulticast mode
[   86.940846][ T6079] bridge_slave_0: left promiscuous mode
[   86.971671][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.992869][   T25] cfg80211: failed to load regulatory.db
[   87.023227][ T6079] bridge_slave_1: left allmulticast mode
[   87.031775][ T6079] bridge_slave_1: left promiscuous mode
[   87.060785][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.121459][ T6079] bond0: (slave bond_slave_0): Releasing backup interface
[   87.148726][ T6079] bond0: (slave bond_slave_1): Releasing backup interface
[   87.214807][ T6079] team0: Port device team_slave_0 removed
[   87.238728][ T6079] team0: Port device team_slave_1 removed
[   87.245935][ T6079] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.275103][ T6079] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.302071][ T6079] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.324441][ T6079] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.458816][ T6071] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.702788][ T6071] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.876647][ T6071] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.985758][ T6106] netlink: 'syz.0.25': attribute type 29 has an invalid length.
[   88.044826][ T6109] IPVS: length: 24 != 3221225496
[   88.394778][ T6124] netlink: 'syz.4.27': attribute type 5 has an invalid length.
[   88.669711][ T6071] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.697228][ T6112] netlink: 'syz.0.25': attribute type 29 has an invalid length.
[   88.775298][ T6126] IPv6: sit1: Disabled Multicast RS
[   88.795866][ T6139] ax25_connect(): syz.2.28 uses autobind, please contact jreuter@yaina.de
[   88.818642][ T6126] sit1: entered allmulticast mode
[   88.991508][ T6133] ip6gretap0: entered promiscuous mode
[   88.999682][ T6133] batadv_slave_0: entered promiscuous mode
[   89.072021][ T6071] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.123176][ T6071] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.151740][ T6071] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.389815][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'.
[   89.725711][ T6159] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[   90.051990][ T6169] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[   90.731669][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.33'.
[   90.789570][ T6164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.406869][ T6188] netlink: 'syz.3.39': attribute type 1 has an invalid length.
[   91.421542][ T6188] netlink: 224 bytes leftover after parsing attributes in process `syz.3.39'.
[   91.539872][ T6192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.37'.
[   92.459057][ T6205] tipc: Started in network mode
[   92.464150][ T6205] tipc: Node identity ac14142f, cluster identity 4711
[   92.482968][ T6205] tipc: New replicast peer: 0.0.0.0
[   92.491084][ T6205] tipc: Enabled bearer <udp:syz2>, priority 10
[   92.508668][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.41'.
[   92.831061][ T6212] can: request_module (can-proto-3) failed.
[   93.031249][ T6124] Set syz1 is full, maxelem 65536 reached
[   93.286944][ T6222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.334377][ T6222] syzkaller0: entered promiscuous mode
[   93.340286][ T6222] syzkaller0: entered allmulticast mode
[   93.346610][ T6222] tipc: Resetting bearer <eth:syzkaller0>
[   93.357538][   T25] IPVS: starting estimator thread 0...
[   93.424208][ T6222] sch_fq: defrate 511 ignored.
[   93.512531][ T6230] IPVS: using max 29 ests per chain, 69600 per kthread
[   93.605259][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.48'.
[   94.146457][ T4861] tipc: Resetting bearer <eth:syzkaller0>
[   94.301544][   T25] tipc: Node number set to 2886997039
[   94.312844][ T6237] netdevsim netdevsim1: Direct firmware load for /
[   94.312844][ T6237]  failed with error -2
[   94.344555][ T6216] tipc: Resetting bearer <eth:syzkaller0>
[   94.364062][ T6237] netdevsim netdevsim1: Falling back to sysfs fallback for: /
[   94.364062][ T6237] 
[   94.484129][ T6251] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[   94.553838][ T6251] Zero length message leads to an empty skb
[   94.736235][ T5845] Bluetooth: hci2: command 0x0405 tx timeout
[   96.109342][ T6216] tipc: Disabling bearer <eth:syzkaller0>
[   96.123245][ T6250] netlink: 'syz.4.52': attribute type 30 has an invalid length.
[   96.485502][ T6263] netlink: 'syz.1.53': attribute type 5 has an invalid length.
[   96.994151][ T6258] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.007179][ T6258] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.022056][ T6258] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.031763][ T6258] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.182166][ T6261] bridge0: port 1(gretap0) entered blocking state
[   97.217746][ T6261] bridge0: port 1(gretap0) entered disabled state
[   97.262117][ T6261] gretap0: entered allmulticast mode
[   97.269248][ T6261] gretap0: entered promiscuous mode
[   97.295131][ T6264] gretap0: left allmulticast mode
[   97.300852][ T6264] gretap0: left promiscuous mode
[   97.306315][ T6264] bridge0: port 1(gretap0) entered disabled state
[   97.444879][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'.
[   97.587719][ T6276] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   98.032197][ T6286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.57'.
[   98.761034][ T6297] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  100.041064][ T6315] ax25_connect(): syz.1.67 uses autobind, please contact jreuter@yaina.de
[  100.146390][ T6324] vxcan1: entered allmulticast mode
[  100.269352][ T6327] ax25_connect(): syz.3.69 uses autobind, please contact jreuter@yaina.de
[  100.279391][ T6323] ax25_connect(): syz.0.68 uses autobind, please contact jreuter@yaina.de
[  100.534158][ T6313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.66'.
[  100.748388][ T6339] tipc: New replicast peer: 0.0.0.0
[  100.761260][ T6339] tipc: Enabled bearer <udp:syz2>, priority 10
[  100.784647][ T6340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.70'.
[  100.874456][ T6342] ax25_connect(): syz.3.71 uses autobind, please contact jreuter@yaina.de
[  101.015334][ T6349] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  101.234258][ T6356] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  101.485630][ T6359] ax25_connect(): syz.3.75 uses autobind, please contact jreuter@yaina.de
[  102.069507][ T6375] ax25_connect(): syz.3.80 uses autobind, please contact jreuter@yaina.de
[  102.100594][ T6377] ax25_connect(): syz.2.81 uses autobind, please contact jreuter@yaina.de
[  102.246173][ T6385] tipc: Started in network mode
[  102.251885][ T6385] tipc: Node identity ac14142f, cluster identity 4711
[  102.270268][ T6385] tipc: New replicast peer: 0.0.0.0
[  102.275971][ T6385] tipc: Enabled bearer <udp:syz2>, priority 10
[  102.331746][ T6388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.82'.
[  102.353850][ T6387] vxcan1: entered allmulticast mode
[  102.582453][ T6396] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  102.592072][ T6396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.84'.
[  102.738831][ T6399] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  103.036945][ T6412] vxcan1: entered allmulticast mode
[  103.065049][ T6406] ax25_connect(): syz.1.87 uses autobind, please contact jreuter@yaina.de
[  103.257954][ T6422] ax25_connect(): syz.2.90 uses autobind, please contact jreuter@yaina.de
[  103.271759][    T9] tipc: Node number set to 2886997039
[  103.697349][ T6434] ax25_connect(): syz.0.93 uses autobind, please contact jreuter@yaina.de
[  103.942845][ T6451] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  103.979862][ T6451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.96'.
[  104.435890][ T6467] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  104.706552][ T6474] ax25_connect(): syz.3.104 uses autobind, please contact jreuter@yaina.de
[  104.925984][ T6486] ax25_connect(): syz.2.106 uses autobind, please contact jreuter@yaina.de
[  105.191584][ T6491] ax25_connect(): syz.3.107 uses autobind, please contact jreuter@yaina.de
[  105.445907][ T6493] netlink: 52 bytes leftover after parsing attributes in process `syz.1.108'.
[  105.471999][ T6497] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  105.491628][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.109'.
[  106.941253][ T6559] ax25_connect(): syz.1.120 uses autobind, please contact jreuter@yaina.de
[  107.210685][ T6572] bond0: option xmit_hash_policy: invalid value (71)
[  107.485513][ T6584] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  107.505592][ T6584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.125'.
[  107.562552][ T6586] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  107.576043][ T6586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.126'.
[  107.882359][ T6592] ax25_connect(): syz.3.127 uses autobind, please contact jreuter@yaina.de
[  108.221201][ T6603] ax25_connect(): syz.2.130 uses autobind, please contact jreuter@yaina.de
[  108.994967][ T6625] netlink: 52 bytes leftover after parsing attributes in process `syz.3.135'.
[  109.031557][ T6630] ax25_connect(): syz.4.136 uses autobind, please contact jreuter@yaina.de
[  109.321308][ T6644] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  109.666193][ T6656] ax25_connect(): syz.2.142 uses autobind, please contact jreuter@yaina.de
[  109.709485][ T6659] ax25_connect(): syz.3.143 uses autobind, please contact jreuter@yaina.de
[  110.451991][ T6684] ax25_connect(): syz.3.148 uses autobind, please contact jreuter@yaina.de
[  110.590749][ T6688] netlink: 52 bytes leftover after parsing attributes in process `syz.2.149'.
[  110.839714][ T6699] ax25_connect(): syz.4.151 uses autobind, please contact jreuter@yaina.de
[  110.898154][ T6703] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  110.946974][ T6703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.152'.
[  110.956599][ T6707] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  111.209437][ T6711] bond0: option xmit_hash_policy: invalid value (71)
[  111.564620][ T6722] ax25_connect(): syz.4.157 uses autobind, please contact jreuter@yaina.de
[  112.050715][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.163'.
[  112.544642][ T6766] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  112.759923][ T6772] ax25_connect(): syz.0.167 uses autobind, please contact jreuter@yaina.de
[  112.908560][ T6775] bond0: option xmit_hash_policy: invalid value (71)
[  113.131878][ T6783] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  113.150699][ T6783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.169'.
[  113.253638][ T6787] ax25_connect(): syz.0.172 uses autobind, please contact jreuter@yaina.de
[  113.336333][ T6788] netlink: 52 bytes leftover after parsing attributes in process `syz.3.173'.
[  113.615978][ T6806] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  114.118793][ T6821] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  114.138502][ T6821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.180'.
[  114.408471][ T6832] ax25_connect(): syz.4.182 uses autobind, please contact jreuter@yaina.de
[  114.587825][ T6836] bond0: option xmit_hash_policy: invalid value (71)
[  114.866564][ T6843] ax25_connect(): syz.4.184 uses autobind, please contact jreuter@yaina.de
[  115.115308][ T6847] netlink: 52 bytes leftover after parsing attributes in process `syz.1.186'.
[  115.430527][ T6862] ax25_connect(): syz.4.188 uses autobind, please contact jreuter@yaina.de
[  115.443091][ T6864] ax25_connect(): syz.2.189 uses autobind, please contact jreuter@yaina.de
[  115.578831][ T6868] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  115.658221][ T6873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.190'.
[  115.697989][ T6872] tipc: Started in network mode
[  115.708560][ T6872] tipc: Node identity ac14142f, cluster identity 4711
[  115.723640][ T6872] tipc: New replicast peer: 0.0.0.0
[  115.733788][ T6872] tipc: Enabled bearer <udp:syz2>, priority 10
[  115.744489][ T6872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.191'.
[  115.910149][ T6882] ax25_connect(): syz.2.194 uses autobind, please contact jreuter@yaina.de
[  115.913736][ T6880] tipc: Started in network mode
[  115.956685][ T6880] tipc: Node identity ac14142f, cluster identity 4711
[  115.983168][ T6880] tipc: New replicast peer: 0.0.0.0
[  115.989763][ T6880] tipc: Enabled bearer <udp:syz2>, priority 10
[  116.017389][ T6884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.193'.
[  116.435902][ T6900] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  116.509123][ T6898] ax25_connect(): syz.0.198 uses autobind, please contact jreuter@yaina.de
[  116.598532][ T6907] vxcan1: entered allmulticast mode
[  116.850413][   T25] tipc: Node number set to 2886997039
[  116.860477][ T6915] ax25_connect(): syz.0.202 uses autobind, please contact jreuter@yaina.de
[  117.100099][   T25] tipc: Node number set to 2886997039
[  117.250753][ T6927] ax25_connect(): syz.0.206 uses autobind, please contact jreuter@yaina.de
[  117.259686][ T6923] ax25_connect(): syz.1.204 uses autobind, please contact jreuter@yaina.de
[  117.292565][ T6928] bond0: option xmit_hash_policy: invalid value (71)
[  117.533961][ T6931] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  117.560465][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.207'.
[  117.729302][ T6941] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  117.752245][ T6939] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  117.767753][ T6939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.209'.
[  117.816428][ T6948] ax25_connect(): syz.4.212 uses autobind, please contact jreuter@yaina.de
[  118.006695][ T6951] netlink: 52 bytes leftover after parsing attributes in process `syz.0.213'.
[  118.026149][ T6955] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  118.034593][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.214'.
[  118.886471][ T6985] ax25_connect(): syz.0.220 uses autobind, please contact jreuter@yaina.de
[  119.068338][ T6990] ax25_connect(): syz.4.221 uses autobind, please contact jreuter@yaina.de
[  119.157154][ T6994] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  119.165481][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.222'.
[  119.458068][ T6997] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  119.605939][ T7003] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  119.622804][ T7004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.225'.
[  119.692862][ T7006] ax25_connect(): syz.3.226 uses autobind, please contact jreuter@yaina.de
[  119.890168][ T7015] bond0: option xmit_hash_policy: invalid value (71)
[  120.770779][ T7053] ax25_connect(): syz.2.235 uses autobind, please contact jreuter@yaina.de
[  120.938195][ T7061] bond0: option xmit_hash_policy: invalid value (71)
[  121.157533][ T7066] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  121.266455][ T7071] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  121.376148][ T7076] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  121.423515][ T7076] netlink: 16 bytes leftover after parsing attributes in process `syz.4.241'.
[  121.427711][ T7078] bond0: option xmit_hash_policy: invalid value (71)
[  121.841435][ T7086] ax25_connect(): syz.1.245 uses autobind, please contact jreuter@yaina.de
[  122.167999][ T7104] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  122.364996][ T7108] ax25_connect(): syz.1.249 uses autobind, please contact jreuter@yaina.de
[  122.546335][ T7113] bond0: option xmit_hash_policy: invalid value (71)
[  122.649074][ T7117] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  122.835970][ T7125] bond0: option xmit_hash_policy: invalid value (71)
[  122.891344][ T7128] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  122.908923][ T7128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.253'.
[  123.197805][ T7134] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  123.207216][ T7134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.257'.
[  123.387787][ T7142] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  123.449651][ T7142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.258'.
[  123.500690][ T7144] ax25_connect(): syz.3.259 uses autobind, please contact jreuter@yaina.de
[  123.673276][ T7147] ax25_connect(): syz.0.260 uses autobind, please contact jreuter@yaina.de
[  123.701038][ T7154] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  124.070838][ T7168] bond0: option xmit_hash_policy: invalid value (71)
[  124.273021][ T7174] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  124.560342][ T7183] ax25_connect(): syz.0.268 uses autobind, please contact jreuter@yaina.de
[  124.668229][ T7188] ax25_connect(): syz.2.269 uses autobind, please contact jreuter@yaina.de
[  124.807033][ T7194] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  124.819565][ T7194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.270'.
[  125.187746][ T7206] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  125.196754][ T7206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.273'.
[  125.464424][ T7217] ax25_connect(): syz.0.275 uses autobind, please contact jreuter@yaina.de
[  125.473788][ T7219] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  125.719296][ T7229] bond0: option xmit_hash_policy: invalid value (71)
[  125.858965][ T7233] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  125.910062][ T7231] bond0: option xmit_hash_policy: invalid value (71)
[  126.248500][ T7248] ax25_connect(): syz.0.282 uses autobind, please contact jreuter@yaina.de
[  126.432365][ T7260] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  126.441852][ T7260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.284'.
[  126.948338][ T7275] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  126.995489][ T7275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.287'.
[  127.155497][ T7277] netlink: 52 bytes leftover after parsing attributes in process `syz.3.288'.
[  127.327084][ T7288] bond0: option xmit_hash_policy: invalid value (71)
[  127.407375][ T7297] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  127.835244][ T7314] ax25_connect(): syz.4.296 uses autobind, please contact jreuter@yaina.de
[  127.950700][ T7319] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  127.981851][ T7319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'.
[  128.010749][ T7322] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  128.021058][ T7322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.298'.
[  128.137149][ T7325] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  128.332990][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'.
[  128.484899][ T7333] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  128.531006][ T7333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.303'.
[  128.592787][ T7340] bond0: option xmit_hash_policy: invalid value (71)
[  128.695392][ T7336] netlink: 52 bytes leftover after parsing attributes in process `syz.1.302'.
[  128.922865][ T7347] ax25_connect(): syz.3.305 uses autobind, please contact jreuter@yaina.de
[  128.938335][ T7358] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  129.108493][ T7368] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 4, id = 0
[  129.350823][ T7370] ax25_connect(): syz.4.309 uses autobind, please contact jreuter@yaina.de
[  129.412937][ T7375] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  129.558372][ T7380] ax25_connect(): syz.3.312 uses autobind, please contact jreuter@yaina.de
[  129.732841][ T7387] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  129.887273][ T7390] bond0: option xmit_hash_policy: invalid value (71)
[  130.149895][ T7402] warning: `syz.3.316' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  130.207777][ T7402] lo speed is unknown, defaulting to 1000
[  130.220604][ T7404] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  130.241725][ T7402] lo speed is unknown, defaulting to 1000
[  130.250642][ T7404] __nla_validate_parse: 1 callbacks suppressed
[  130.250659][ T7404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.318'.
[  130.348781][ T7402] lo speed is unknown, defaulting to 1000
[  130.740281][ T7412] netlink: 52 bytes leftover after parsing attributes in process `syz.0.319'.
[  130.852476][ T7416] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  131.093026][ T7430] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  131.096347][ T7402] infiniband syz0: set active
[  131.107883][ T5934] lo speed is unknown, defaulting to 1000
[  131.128244][ T7426] ax25_connect(): syz.2.322 uses autobind, please contact jreuter@yaina.de
[  131.153530][ T7402] infiniband syz0: added lo
[  131.348944][ T7402] RDS/IB: syz0: added
[  131.369233][ T7436] ax25_connect(): syz.1.324 uses autobind, please contact jreuter@yaina.de
[  131.385396][ T7402] smc: adding ib device syz0 with port count 1
[  131.430355][ T7402] smc:    ib device syz0 port 1 has pnetid 
[  131.438379][ T5884] lo speed is unknown, defaulting to 1000
[  131.457837][ T7402] lo speed is unknown, defaulting to 1000
[  131.476821][ T7442] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  131.496384][ T7442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.325'.
[  131.773139][ T7447] ax25_connect(): syz.4.326 uses autobind, please contact jreuter@yaina.de
[  131.783852][ T7454] bond0: option xmit_hash_policy: invalid value (71)
[  131.809633][ T7402] lo speed is unknown, defaulting to 1000
[  132.126510][ T7460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.329'.
[  132.214077][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'.
[  132.227261][ T7402] lo speed is unknown, defaulting to 1000
[  132.268623][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'.
[  132.716943][ T7402] lo speed is unknown, defaulting to 1000
[  133.058136][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  133.064721][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  133.344555][ T7480] lo speed is unknown, defaulting to 1000
[  133.834834][ T7402] lo speed is unknown, defaulting to 1000
[  133.848131][ T7487] Bluetooth: MGMT ver 1.23
[  134.348940][ T7486] lo speed is unknown, defaulting to 1000
[  135.050242][ T7492] netlink: 52 bytes leftover after parsing attributes in process `syz.3.334'.
[  135.583815][ T7498] ax25_connect(): syz.3.336 uses autobind, please contact jreuter@yaina.de
[  135.587303][ T7504] bond0: option xmit_hash_policy: invalid value (71)
[  135.697624][ T7502] ax25_connect(): syz.1.337 uses autobind, please contact jreuter@yaina.de
[  136.049481][ T7515] bond0: option xmit_hash_policy: invalid value (71)
[  136.240165][ T7521] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  136.887094][ T7545] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  137.471497][ T7562] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  137.499057][ T7562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.350'.
[  137.753974][ T7564] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  137.789775][ T7564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.351'.
[  137.937150][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'.
[  137.981529][ T7567] ax25_connect(): syz.4.352 uses autobind, please contact jreuter@yaina.de
[  137.999585][ T7570] ax25_connect(): syz.1.354 uses autobind, please contact jreuter@yaina.de
[  138.486299][ T7591] ax25_connect(): syz.3.361 uses autobind, please contact jreuter@yaina.de
[  138.508990][ T7595] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  138.529615][ T7595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.359'.
[  138.584299][ T7599] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  138.949909][ T7612] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  138.999194][ T7612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.363'.
[  139.209168][ T7621] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  139.241289][ T7621] netlink: 80 bytes leftover after parsing attributes in process `syz.1.365'.
[  139.469095][ T7627] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  139.522266][ T7627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.366'.
[  139.674280][ T7629] ax25_connect(): syz.2.368 uses autobind, please contact jreuter@yaina.de
[  139.746470][ T7632] ax25_connect(): syz.1.370 uses autobind, please contact jreuter@yaina.de
[  139.972602][ T7645] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  140.255140][ T7648] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.309492][ T7650] tap0: tun_chr_ioctl cmd 2147767506
[  140.353547][ T7651] ax25_connect(): syz.0.374 uses autobind, please contact jreuter@yaina.de
[  140.578580][ T7648] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.824267][ T7648] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.963368][ T7678] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  140.991158][ T7678] netlink: 80 bytes leftover after parsing attributes in process `syz.0.380'.
[  141.030211][ T7648] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.378889][ T7692] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  141.387545][ T7692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.383'.
[  141.548938][ T7648] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.644372][ T7648] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.668565][ T7648] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.785072][ T7648] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.026264][ T7711] ax25_connect(): syz.2.386 uses autobind, please contact jreuter@yaina.de
[  142.038288][ T7715] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  142.039239][ T7710] ax25_connect(): syz.4.385 uses autobind, please contact jreuter@yaina.de
[  142.223262][ T7713] netlink: 52 bytes leftover after parsing attributes in process `syz.0.387'.
[  142.428210][ T7727] ax25_connect(): syz.4.390 uses autobind, please contact jreuter@yaina.de
[  142.791868][ T7746] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  142.801299][ T7746] netlink: 16 bytes leftover after parsing attributes in process `syz.4.394'.
[  143.055106][ T7748] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  143.063715][ T7748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.395'.
[  143.703289][ T7766] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  143.821446][ T7770] ax25_connect(): syz.3.401 uses autobind, please contact jreuter@yaina.de
[  143.879287][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'.
[  143.997677][ T7761] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.013545][ T7777] ax25_connect(): syz.4.402 uses autobind, please contact jreuter@yaina.de
[  144.126910][ T7780] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.135748][ T7780] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.201025][ T7780] team0: Port device bridge0 removed
[  144.246537][ T7780] bridge_slave_0: left allmulticast mode
[  144.277071][ T7780] bridge_slave_0: left promiscuous mode
[  144.352615][ T7780] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.361861][ T7791] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  144.430904][ T7780] bridge_slave_1: left allmulticast mode
[  144.436624][ T7780] bridge_slave_1: left promiscuous mode
[  144.486255][ T7780] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.525443][ T7780] bond0: (slave bond_slave_0): Releasing backup interface
[  144.556379][ T7780] bond0: (slave bond_slave_1): Releasing backup interface
[  144.599203][ T7780] team0: Port device team_slave_0 removed
[  144.635122][ T7780] team0: Port device team_slave_1 removed
[  144.650770][ T7780] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.658200][ T7780] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.675584][ T7780] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.683503][ T7780] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.707478][ T7783] team0: Mode changed to "broadcast"
[  144.925383][ T7806] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  144.933753][ T7806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.406'.
[  145.320757][ T7817] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  145.329267][ T7817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.410'.
[  145.379435][ T7820] bond0: option xmit_hash_policy: invalid value (71)
[  145.534169][ T7823] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  145.718561][ T7831] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  145.855480][ T7835] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  145.864579][ T7835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.415'.
[  146.052970][ T7842] bond0: option xmit_hash_policy: invalid value (71)
[  146.191919][ T7846] ax25_connect(): syz.1.418 uses autobind, please contact jreuter@yaina.de
[  146.268081][ T7853] ax25_connect(): syz.3.419 uses autobind, please contact jreuter@yaina.de
[  146.449250][ T7856] ax25_connect(): syz.4.420 uses autobind, please contact jreuter@yaina.de
[  146.520612][ T7861] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  146.530878][ T7861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.421'.
[  146.559905][ T7863] bond0: option xmit_hash_policy: invalid value (71)
[  146.776272][ T7870] SET target dimension over the limit!
[  146.782175][ T7865] netlink: 52 bytes leftover after parsing attributes in process `syz.0.423'.
[  146.810565][ T7868] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  146.909629][ T7873] lo speed is unknown, defaulting to 1000
[  147.076082][ T7882] bond0: option xmit_hash_policy: invalid value (71)
[  147.111382][ T7884] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  147.120061][ T7884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.428'.
[  147.765966][ T7903] ax25_connect(): syz.3.432 uses autobind, please contact jreuter@yaina.de
[  148.243599][ T7920] bridge_slave_0: left allmulticast mode
[  148.249593][ T7920] bridge_slave_0: left promiscuous mode
[  148.263297][ T7919] netlink: 52 bytes leftover after parsing attributes in process `syz.2.437'.
[  148.263892][ T7920] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.287051][ T7920] bridge_slave_1: left allmulticast mode
[  148.293467][ T7920] bridge_slave_1: left promiscuous mode
[  148.299184][ T7920] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.309582][ T7920] bond0: (slave bond_slave_0): Releasing backup interface
[  148.321370][ T7920] bond0: (slave bond_slave_1): Releasing backup interface
[  148.348700][ T7920] team0: Port device team_slave_0 removed
[  148.362031][ T7920] team0: Port device team_slave_1 removed
[  148.368675][ T7920] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.376425][ T7920] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.387499][ T7920] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.399299][ T7920] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.431679][    T9] lo speed is unknown, defaulting to 1000
[  148.621689][ T7929] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  148.735066][ T7936] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  148.749535][ T7933] vxcan1: left allmulticast mode
[  148.797501][ T7937] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  148.829194][ T7933] bridge0: port 3(gretap0) entered blocking state
[  148.831092][ T7937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.442'.
[  148.856816][ T7933] bridge0: port 3(gretap0) entered disabled state
[  148.880334][ T7933] gretap0: entered allmulticast mode
[  148.886621][ T7933] gretap0: entered promiscuous mode
[  148.927955][ T7942] gretap0: left allmulticast mode
[  148.966495][ T7942] gretap0: left promiscuous mode
[  148.977649][ T7942] bridge0: port 3(gretap0) entered disabled state
[  149.086512][ T7943] lo speed is unknown, defaulting to 1000
[  149.788000][ T7961] ax25_connect(): syz.1.447 uses autobind, please contact jreuter@yaina.de
[  150.303843][ T7968] lo speed is unknown, defaulting to 1000
[  150.377591][ T7967] netlink: 52 bytes leftover after parsing attributes in process `syz.0.449'.
[  150.559785][ T7983] bridge_slave_0: left allmulticast mode
[  150.591563][ T7983] bridge_slave_0: left promiscuous mode
[  150.611661][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.648294][ T7983] bridge_slave_1: left allmulticast mode
[  150.666521][ T7983] bridge_slave_1: left promiscuous mode
[  150.695772][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.762283][ T7983] bond0: (slave bond_slave_0): Releasing backup interface
[  150.817513][ T7983] bond0: (slave bond_slave_1): Releasing backup interface
[  150.886786][ T7983] team0: Port device team_slave_0 removed
[  150.925552][ T7983] team0: Port device team_slave_1 removed
[  150.939612][ T7983] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.947483][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.964818][ T7983] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.976416][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.003595][ T7985] team0: Mode changed to "broadcast"
[  151.038817][ T7990] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  151.288534][ T7998] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  151.319506][ T7998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.455'.
[  151.332760][ T8000] lo speed is unknown, defaulting to 1000
[  151.348523][ T8003] bond0: option xmit_hash_policy: invalid value (71)
[  151.372588][ T8005] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  151.375907][ T7965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.448'.
[  151.424978][ T8007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.454'.
[  151.473730][ T5849] Bluetooth: hci2: link tx timeout
[  151.479619][ T5849] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  151.495444][ T5849] Bluetooth: hci2: link tx timeout
[  151.501003][ T5849] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  151.509425][ T5849] Bluetooth: hci2: link tx timeout
[  151.515052][ T5849] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  151.524440][ T5849] Bluetooth: hci2: link tx timeout
[  151.529596][ T5849] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  151.539304][ T7965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.565389][ T8010] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  152.000332][ T8014] ax25_connect(): syz.3.459 uses autobind, please contact jreuter@yaina.de
[  152.445319][ T8023] lo speed is unknown, defaulting to 1000
[  152.598407][ T8030] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  153.112182][ T8039] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  153.351026][ T8048] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  153.369539][ T8052] bond0: option xmit_hash_policy: invalid value (71)
[  153.444278][ T8053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.467'.
[  153.488240][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'.
[  153.545808][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'.
[  153.610195][ T5849] Bluetooth: hci2: command 0x0405 tx timeout
[  153.619315][ T8062] lo speed is unknown, defaulting to 1000
[  153.636485][ T8059] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  153.690733][ T8059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.470'.
[  154.108277][ T8067] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  154.519076][ T8073] lo speed is unknown, defaulting to 1000
[  155.529699][ T8083] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  155.708421][ T5845] Bluetooth: hci2: command 0x0405 tx timeout
[  156.336092][ T8072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.474'.
[  156.405616][ T8106] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.606799][ T8106] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.667780][ T8072] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.677761][ T8072] 8021q: adding VLAN 0 to HW filter on device team0
[  156.695913][ T8072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  156.757338][ T8106] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.989839][ T8106] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.054063][ T8116] ax25_connect(): syz.4.484 uses autobind, please contact jreuter@yaina.de
[  157.069363][ T8126] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  157.088816][ T8126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.485'.
[  157.133649][ T8118] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  157.150786][ T8118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.483'.
[  157.199525][ T8106] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.295709][ T8106] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.481669][ T8106] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.493183][ T8134] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  157.532347][ T8106] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.602828][ T8128] lo speed is unknown, defaulting to 1000
[  157.786762][ T8142] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  157.979830][ T8143] lo speed is unknown, defaulting to 1000
[  158.273323][ T8153] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.655135][ T8157] syzkaller0: entered promiscuous mode
[  158.662204][ T8157] syzkaller0: entered allmulticast mode
[  158.700932][ T8157] tipc: Resetting bearer <eth:syzkaller0>
[  158.719804][ T8153] sch_fq: defrate 511 ignored.
[  159.062591][ T8176] ax25_connect(): syz.2.496 uses autobind, please contact jreuter@yaina.de
[  159.182888][   T11] tipc: Resetting bearer <eth:syzkaller0>
[  159.202735][ T8148] tipc: Resetting bearer <eth:syzkaller0>
[  160.718854][ T8148] tipc: Disabling bearer <eth:syzkaller0>
[  160.740933][ T8181] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  160.750445][ T8182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.497'.
[  161.021797][ T8198] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  161.138237][ T8203] Bluetooth: MGMT ver 1.23
[  161.193149][ T8199] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  161.229583][ T8199] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  161.301395][ T8206] lo speed is unknown, defaulting to 1000
[  161.609569][ T8223] bond0: option xmit_hash_policy: invalid value (71)
[  161.858759][ T8227] ax25_connect(): syz.0.507 uses autobind, please contact jreuter@yaina.de
[  161.967962][ T8206] lo speed is unknown, defaulting to 1000
[  162.152224][ T8240] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  162.186674][ T8240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.510'.
[  162.481423][ T8249] ax25_connect(): syz.3.511 uses autobind, please contact jreuter@yaina.de
[  162.677339][ T8253] ax25_connect(): syz.1.512 uses autobind, please contact jreuter@yaina.de
[  162.699696][ T8258] netlink: 'syz.2.514': attribute type 10 has an invalid length.
[  162.802003][ T8258] team0: Port device bridge0 added
[  162.927793][ T8264] lo speed is unknown, defaulting to 1000
[  162.934659][ T8266] bond0: option xmit_hash_policy: invalid value (71)
[  163.015624][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'.
[  163.047581][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'.
[  163.128539][ T8277] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  163.397360][ T8283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.515'.
[  163.987356][ T8289] ax25_connect(): syz.1.520 uses autobind, please contact jreuter@yaina.de
[  164.026221][ T8291] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  164.233466][ T8298] netlink: 'syz.2.522': attribute type 1 has an invalid length.
[  164.241646][ T8298] netlink: 224 bytes leftover after parsing attributes in process `syz.2.522'.
[  164.361790][ T8296] netlink: 52 bytes leftover after parsing attributes in process `syz.3.523'.
[  164.736234][ T8314] ax25_connect(): syz.3.527 uses autobind, please contact jreuter@yaina.de
[  164.936632][ T8318] ax25_connect(): syz.4.528 uses autobind, please contact jreuter@yaina.de
[  165.385771][ T8330] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  165.412330][ T8327] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  165.585905][ T8335] lo speed is unknown, defaulting to 1000
[  165.615187][ T8338] netlink: 44 bytes leftover after parsing attributes in process `syz.2.544'.
[  165.667163][ T8340] netlink: 'syz.3.534': attribute type 10 has an invalid length.
[  165.761426][ T8340] team0: Port device bridge0 added
[  165.987567][ T8330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.011717][ T8350] ax25_connect(): syz.4.535 uses autobind, please contact jreuter@yaina.de
[  166.774960][ T8341] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.788689][ T8341] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.799546][ T8370] netlink: 'syz.3.536': attribute type 1 has an invalid length.
[  166.800290][ T8341] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.819974][ T8341] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.827365][ T8370] netlink: 224 bytes leftover after parsing attributes in process `syz.3.536'.
[  166.956237][ T8346] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.968631][ T8346] 8021q: adding VLAN 0 to HW filter on device team0
[  166.998097][ T8346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.050675][ T8344] lo speed is unknown, defaulting to 1000
[  167.322009][ T8385] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  167.345609][ T8385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.538'.
[  167.385781][ T8387] ax25_connect(): syz.4.539 uses autobind, please contact jreuter@yaina.de
[  167.942858][ T8403] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  167.952290][ T8402] ax25_connect(): syz.4.542 uses autobind, please contact jreuter@yaina.de
[  167.981913][ T8403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.540'.
[  168.027479][ T8407] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  168.362264][ T8418] ax25_connect(): syz.2.546 uses autobind, please contact jreuter@yaina.de
[  168.471233][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'.
[  168.498855][ T8422] lo speed is unknown, defaulting to 1000
[  168.552393][ T8426] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  168.879470][ T8432] ax25_connect(): syz.4.550 uses autobind, please contact jreuter@yaina.de
[  168.984035][ T8436] bond0: option xmit_hash_policy: invalid value (71)
[  169.303363][ T8443] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  169.330588][ T8443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.552'.
[  169.546713][ T8449] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  169.604103][ T8449] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  169.663629][ T8449] lo speed is unknown, defaulting to 1000
[  169.727066][ T8456] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  170.104892][ T8462] lo speed is unknown, defaulting to 1000
[  170.139760][ T8466] ax25_connect(): syz.3.558 uses autobind, please contact jreuter@yaina.de
[  170.442374][ T8478] bond0: option xmit_hash_policy: invalid value (71)
[  170.684334][ T8484] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  170.766149][ T8482] ax25_connect(): syz.1.564 uses autobind, please contact jreuter@yaina.de
[  170.955611][ T8488] lo speed is unknown, defaulting to 1000
[  171.036979][ T8488] lo speed is unknown, defaulting to 1000
[  171.087979][ T8488] lo speed is unknown, defaulting to 1000
[  171.171187][ T8488] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  171.215600][ T8488] lo speed is unknown, defaulting to 1000
[  171.231369][ T8488] lo speed is unknown, defaulting to 1000
[  171.256579][ T8488] lo speed is unknown, defaulting to 1000
[  171.263497][ T8488] lo speed is unknown, defaulting to 1000
[  171.271407][ T8488] lo speed is unknown, defaulting to 1000
[  171.287571][ T8488] lo speed is unknown, defaulting to 1000
[  171.436180][ T8503] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  171.813237][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'.
[  171.847339][ T8515] netlink: 44 bytes leftover after parsing attributes in process `syz.3.572'.
[  171.865933][ T8512] xt_TCPMSS: Only works on TCP SYN packets
[  172.265680][ T8535] ax25_connect(): syz.0.576 uses autobind, please contact jreuter@yaina.de
[  172.361201][ T8537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.574'.
[  173.134332][ T8519] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.169970][ T8519] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.199295][ T8519] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.208265][ T8519] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.254794][ T8517] lo speed is unknown, defaulting to 1000
[  173.255396][ T8372] lo speed is unknown, defaulting to 1000
[  173.315281][ T8514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.571'.
[  173.355723][ T8528] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.391738][ T8528] 8021q: adding VLAN 0 to HW filter on device team0
[  173.408708][ T8528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  173.496538][ T8372] lo speed is unknown, defaulting to 1000
[  173.543365][ T8514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  173.590626][ T8517] lo speed is unknown, defaulting to 1000
[  173.603469][ T8522] lo speed is unknown, defaulting to 1000
[  173.661753][ T8546] ax25_connect(): syz.3.578 uses autobind, please contact jreuter@yaina.de
[  174.012583][ T8522] lo speed is unknown, defaulting to 1000
[  174.012616][ T8520] lo speed is unknown, defaulting to 1000
[  174.353914][ T8558] netlink: 52 bytes leftover after parsing attributes in process `syz.3.580'.
[  174.451861][ T8565] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  174.651464][ T8520] lo speed is unknown, defaulting to 1000
[  174.671857][ T8572] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  174.680393][ T8572] netlink: 16 bytes leftover after parsing attributes in process `syz.3.583'.
[  174.709225][ T8569] lo speed is unknown, defaulting to 1000
[  175.235371][ T8569] lo speed is unknown, defaulting to 1000
[  175.873980][ T8595] ax25_connect(): syz.4.589 uses autobind, please contact jreuter@yaina.de
[  176.004132][ T8598] ax25_connect(): syz.3.590 uses autobind, please contact jreuter@yaina.de
[  176.125194][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'.
[  176.138572][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'.
[  176.211790][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.592'.
[  176.227946][ T8606] xt_TCPMSS: Only works on TCP SYN packets
[  176.320581][ T8609] netlink: 52 bytes leftover after parsing attributes in process `syz.1.593'.
[  176.606214][ T8621] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  176.665517][ T8622] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  176.704895][ T8622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.595'.
[  176.807789][ T8627] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  177.251287][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.602'.
[  177.557796][ T8659] netlink: 44 bytes leftover after parsing attributes in process `syz.1.605'.
[  177.650587][ T8661] netlink: 52 bytes leftover after parsing attributes in process `syz.4.606'.
[  178.154062][ T8662] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.173212][ T8662] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.199967][ T8662] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.208359][ T8662] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.233693][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'.
[  178.254086][ T8675] xt_TCPMSS: Only works on TCP SYN packets
[  178.396388][ T8665] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.421552][ T8665] 8021q: adding VLAN 0 to HW filter on device team0
[  178.450048][ T8665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  178.479544][ T8680] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  178.624482][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'.
[  178.655975][ T8685] netlink: 'syz.0.610': attribute type 39 has an invalid length.
[  178.722087][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'.
[  178.753762][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'.
[  178.795867][ T8696] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  178.805630][ T8696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.612'.
[  179.100464][ T8704] ax25_connect(): syz.0.615 uses autobind, please contact jreuter@yaina.de
[  179.508276][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.620'.
[  179.746937][ T8736] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  179.852744][ T8738] lo speed is unknown, defaulting to 1000
[  179.921283][ T8740] ax25_connect(): syz.2.626 uses autobind, please contact jreuter@yaina.de
[  180.019082][ T8738] lo speed is unknown, defaulting to 1000
[  180.269528][ T8751] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  180.620073][ T8758] ax25_connect(): syz.1.630 uses autobind, please contact jreuter@yaina.de
[  180.705154][ T8760] ax25_connect(): syz.0.629 uses autobind, please contact jreuter@yaina.de
[  180.827203][ T8770] netlink: 16 bytes leftover after parsing attributes in process `syz.4.633'.
[  181.000838][ T8776] rdma_rxe: rxe_newlink: failed to add lo
[  181.343701][ T8778] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  181.691123][ T8785] lo speed is unknown, defaulting to 1000
[  181.698383][ T8787] ax25_connect(): syz.1.637 uses autobind, please contact jreuter@yaina.de
[  181.730546][ T8791] ax25_connect(): syz.2.639 uses autobind, please contact jreuter@yaina.de
[  181.995855][ T8802] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  182.017165][ T8785] lo speed is unknown, defaulting to 1000
[  182.098762][ T8806] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  182.132277][ T8802] lo speed is unknown, defaulting to 1000
[  182.207834][ T8809] xt_TCPMSS: Only works on TCP SYN packets
[  182.470324][ T8802] lo speed is unknown, defaulting to 1000
[  182.506488][ T8817] ax25_connect(): syz.3.644 uses autobind, please contact jreuter@yaina.de
[  182.676530][ T8819] ax25_connect(): syz.2.645 uses autobind, please contact jreuter@yaina.de
[  182.911379][ T8832] xt_l2tp: v2 doesn't support IP mode
[  182.948404][ T8830] bond0: option xmit_hash_policy: invalid value (71)
[  183.110748][   T25] IPVS: starting estimator thread 0...
[  183.194440][ T8839] ax25_connect(): syz.2.652 uses autobind, please contact jreuter@yaina.de
[  183.240147][ T8842] IPVS: using max 32 ests per chain, 76800 per kthread
[  183.338944][ T8849] ax25_connect(): syz.0.653 uses autobind, please contact jreuter@yaina.de
[  183.503301][ T8852] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  183.655844][ T8854] bond0: option xmit_hash_policy: invalid value (71)
[  183.675709][ T8856] lo speed is unknown, defaulting to 1000
[  183.945290][ T8856] lo speed is unknown, defaulting to 1000
[  184.017451][ T8868] __nla_validate_parse: 3 callbacks suppressed
[  184.017469][ T8868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.655'.
[  184.075297][ T8867] ax25_connect(): syz.4.658 uses autobind, please contact jreuter@yaina.de
[  184.126827][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'.
[  184.176651][ T8873] netlink: 'syz.1.659': attribute type 39 has an invalid length.
[  184.358973][ T8840] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  184.373629][ T8840] tipc: Enabled bearer <udp:s>, priority 10
[  184.490179][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  184.536802][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.650'.
[  184.760001][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  184.832140][ T8886] ipt_REJECT: TCP_RESET invalid for non-tcp
[  184.850451][ T8887] bond0: option xmit_hash_policy: invalid value (71)
[  185.036140][ T8886] lo: entered allmulticast mode
[  185.046455][ T8886] lo: left allmulticast mode
[  185.130957][ T8893] ax25_connect(): syz.1.664 uses autobind, please contact jreuter@yaina.de
[  185.141502][ T8894] ax25_connect(): syz.3.663 uses autobind, please contact jreuter@yaina.de
[  185.290209][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  185.299672][ T8901] ax25_connect(): syz.2.665 uses autobind, please contact jreuter@yaina.de
[  185.336314][ T8904] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  185.686325][ T8915] ax25_connect(): syz.4.670 uses autobind, please contact jreuter@yaina.de
[  185.871474][ T8921] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  186.077351][ T8929] netlink: 44 bytes leftover after parsing attributes in process `syz.4.673'.
[  186.297764][ T8933] bond0: option xmit_hash_policy: invalid value (71)
[  186.331034][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  186.401896][ T8931] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.449821][ T8931] 8021q: adding VLAN 0 to HW filter on device team0
[  186.481074][ T8931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  186.517434][ T8937] netlink: 148 bytes leftover after parsing attributes in process `syz.3.675'.
[  186.542655][ T8937] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  186.568803][ T8939] netlink: 'syz.3.675': attribute type 2 has an invalid length.
[  186.605639][ T8943] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  186.644722][ T8945] ax25_connect(): syz.0.677 uses autobind, please contact jreuter@yaina.de
[  186.802312][ T8951] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  186.813255][ T8946] ax25_connect(): syz.4.678 uses autobind, please contact jreuter@yaina.de
[  186.901411][ T8954] lo speed is unknown, defaulting to 1000
[  187.179549][ T8969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.680'.
[  187.192089][ T8954] lo speed is unknown, defaulting to 1000
[  187.212275][ T8963] ax25_connect(): syz.1.683 uses autobind, please contact jreuter@yaina.de
[  187.227805][ T8968] lo speed is unknown, defaulting to 1000
[  187.370118][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  187.803772][ T8968] lo speed is unknown, defaulting to 1000
[  188.263382][ T8991] siw: device registration error -23
[  188.293640][ T8993] bond0: option xmit_hash_policy: invalid value (71)
[  188.606671][ T8999] ax25_connect(): syz.1.692 uses autobind, please contact jreuter@yaina.de
[  189.063357][ T9007] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  189.180224][ T9009] ax25_connect(): syz.0.695 uses autobind, please contact jreuter@yaina.de
[  189.260584][ T9017] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  189.460017][    C0] net_ratelimit: 3 callbacks suppressed
[  189.460037][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  189.826720][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'.
[  189.959256][ T9029] lo speed is unknown, defaulting to 1000
[  190.343223][ T9046] bond0: option xmit_hash_policy: invalid value (71)
[  190.380962][ T9047] netlink: 'syz.1.703': attribute type 30 has an invalid length.
[  190.448531][ T9051] bond0: option xmit_hash_policy: invalid value (71)
[  190.490082][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  190.613344][ T9053] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  190.877445][ T9064] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  191.244833][ T9073] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  191.358246][ T9075] ax25_connect(): syz.3.712 uses autobind, please contact jreuter@yaina.de
[  191.540077][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  191.587948][ T9095] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  191.662675][ T9096] netlink: 'syz.0.714': attribute type 1 has an invalid length.
[  191.707398][ T9096] netlink: 224 bytes leftover after parsing attributes in process `syz.0.714'.
[  191.771694][ T9105] bond0: option xmit_hash_policy: invalid value (71)
[  191.903187][ T9111] lo speed is unknown, defaulting to 1000
[  191.941260][ T9106] ax25_connect(): syz.2.718 uses autobind, please contact jreuter@yaina.de
[  192.022171][ T9119] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  192.036700][ T9117] No such timeout policy "syz0"
[  192.392997][ T9132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.724'.
[  192.403806][ T9130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.720'.
[  192.542991][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.724'.
[  192.559751][ T9111] lo speed is unknown, defaulting to 1000
[  192.580668][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  192.592017][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'.
[  192.619479][ T9139] rdma_rxe: rxe_newlink: failed to add lo
[  192.639973][ T9138] lo speed is unknown, defaulting to 1000
[  192.650777][ T9117] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  192.802854][ T9143] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  193.320331][ T9149] ax25_connect(): syz.2.727 uses autobind, please contact jreuter@yaina.de
[  193.609997][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  193.670600][ T9156] bond0: option xmit_hash_policy: invalid value (71)
[  193.710318][ T9153] ax25_connect(): syz.1.728 uses autobind, please contact jreuter@yaina.de
[  193.753171][ T9159] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  193.867589][ T9161] bond0: option xmit_hash_policy: invalid value (71)
[  194.292280][ T9170] netlink: 52 bytes leftover after parsing attributes in process `syz.1.733'.
[  194.441373][ T9182] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71)
[  194.454543][ T9181] netlink: 44 bytes leftover after parsing attributes in process `syz.0.735'.
[  194.492401][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  194.499402][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  194.650092][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  194.917853][ T9202] atomic_op ffff888031300198 conn xmit_atomic 0000000000000000
[  194.974728][ T9181] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.002365][ T9181] 8021q: adding VLAN 0 to HW filter on device team0
[  195.040648][ T9181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  195.277396][ T9213] bond0: option xmit_hash_policy: invalid value (71)
[  195.282290][ T9211] ax25_connect(): syz.4.741 uses autobind, please contact jreuter@yaina.de
[  195.428131][ T9217] vxcan1: entered allmulticast mode
[  195.524196][ T9226] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  195.690019][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  195.703939][ T9235] netlink: 256 bytes leftover after parsing attributes in process `syz.4.746'.
[  195.747735][ T9235] unsupported nlmsg_type 40
[  195.925676][ T9243] netlink: 'syz.0.747': attribute type 30 has an invalid length.
[  196.369742][ T9265] bond0: option xmit_hash_policy: invalid value (71)
[  196.570248][ T5838] Bluetooth: hci1: command 0x0406 tx timeout
[  196.576427][ T5846] Bluetooth: hci4: command 0x0406 tx timeout
[  196.582761][ T5148] Bluetooth: hci3: command 0x0406 tx timeout
[  196.589457][ T9269] ax25_connect(): syz.0.756 uses autobind, please contact jreuter@yaina.de
[  196.739989][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  196.770983][ T9279] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  197.037149][ T9293] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  197.084125][ T9296] lo speed is unknown, defaulting to 1000
[  197.375977][ T9309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.762'.
[  197.436849][ T9296] lo speed is unknown, defaulting to 1000
[  197.705178][ T9318] bond0: option xmit_hash_policy: invalid value (71)
[  197.780220][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  197.828615][ T9316] lo speed is unknown, defaulting to 1000
[  197.947989][ T9323] ------------[ cut here ]------------
[  197.954032][ T9323] RTNL: assertion failed at net/core/dev.c (1769)
[  197.982732][ T9323] WARNING: CPU: 1 PID: 9323 at net/core/dev.c:1769 dev_setup_tc+0x315/0x360
[  197.991607][ T9323] Modules linked in:
[  197.995584][ T9323] CPU: 1 UID: 0 PID: 9323 Comm: syz.4.765 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0
[  198.006331][ T9323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  198.016584][ T9323] RIP: 0010:dev_setup_tc+0x315/0x360
[  198.022047][ T9323] Code: cc 49 89 ee e8 dc da f7 f7 c6 05 c0 39 5d 06 01 90 48 c7 c7 a0 5e 2e 8d 48 c7 c6 80 5e 2e 8d ba e9 06 00 00 e8 3c 97 b7 f7 90 <0f> 0b 90 90 e9 66 fd ff ff 89 d1 80 e1 07 38 c1 0f 8c aa fd ff ff
[  198.041829][ T9323] RSP: 0018:ffffc90003e1eed0 EFLAGS: 00010246
[  198.047943][ T9323] RAX: 48407c6ad134e100 RBX: 0000000000000000 RCX: 0000000000080000
[  198.056188][ T9323] RDX: ffffc9000e649000 RSI: 0000000000003e66 RDI: 0000000000003e67
[  198.064287][ T9323] RBP: ffff8880125c0008 R08: ffffffff81818e32 R09: fffffbfff1d3a67c
[  198.072446][ T9323] R10: dffffc0000000000 R11: fffffbfff1d3a67c R12: ffffc90003e1f070
[  198.080531][ T9323] R13: ffffffff8d4ab1e0 R14: ffff8880125c0008 R15: ffff8880125c0000
[  198.088531][ T9323] FS:  00007f4b70d366c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  198.098040][ T9323] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  198.104864][ T9323] CR2: 000000110c35345b CR3: 000000005ec52000 CR4: 00000000003526f0
[  198.112941][ T9323] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  198.121040][ T9323] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  198.129058][ T9323] Call Trace:
[  198.132434][ T9323]  <TASK>
[  198.135389][ T9323]  ? __warn+0x165/0x4d0
[  198.139566][ T9323]  ? dev_setup_tc+0x315/0x360
[  198.144370][ T9323]  ? report_bug+0x2b3/0x500
[  198.148902][ T9323]  ? dev_setup_tc+0x315/0x360
[  198.153660][ T9323]  ? handle_bug+0x60/0x90
[  198.158028][ T9323]  ? exc_invalid_op+0x1a/0x50
[  198.162832][ T9323]  ? asm_exc_invalid_op+0x1a/0x20
[  198.167899][ T9323]  ? __warn_printk+0x292/0x360
[  198.172961][ T9323]  ? dev_setup_tc+0x315/0x360
[  198.177710][ T9323]  nf_flow_table_offload_setup+0x2ff/0x710
[  198.183995][ T9323]  ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10
[  198.190632][ T9323]  ? __pfx_nf_flow_table_offload_setup+0x10/0x10
[  198.197021][ T9323]  ? __pfx_lock_release+0x10/0x10
[  198.202507][ T9323]  ? nft_pernet+0x23/0x240
[  198.206964][ T9323]  ? __pfx_nf_flow_table_offload_setup+0x10/0x10
[  198.213618][ T9323]  nft_register_flowtable_net_hooks+0x24c/0x570
[  198.220318][ T9323]  nf_tables_newflowtable+0x19f4/0x23d0
[  198.225942][ T9323]  ? __pfx_nf_tables_newflowtable+0x10/0x10
[  198.232151][ T9323]  ? nfnl_pernet+0x23/0x240
[  198.236693][ T9323]  ? __pfx_lock_release+0x10/0x10
[  198.242058][ T9323]  ? __nla_parse+0x40/0x60
[  198.246879][ T9323]  nfnetlink_rcv+0x14e3/0x2ab0
[  198.251923][ T9323]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  198.257128][ T9323]  ? netlink_deliver_tap+0x2e/0x1b0
[  198.262878][ T9323]  ? skb_clone+0x240/0x390
[  198.267337][ T9323]  ? __pfx_lock_release+0x10/0x10
[  198.272696][ T9323]  ? netlink_deliver_tap+0x2e/0x1b0
[  198.277950][ T9323]  netlink_unicast+0x7f6/0x990
[  198.282954][ T9323]  ? __pfx_netlink_unicast+0x10/0x10
[  198.288300][ T9323]  ? __virt_addr_valid+0x45f/0x530
[  198.293551][ T9323]  ? __phys_addr_symbol+0x2f/0x70
[  198.298617][ T9323]  ? __check_object_size+0x47a/0x730
[  198.304063][ T9323]  netlink_sendmsg+0x8de/0xcb0
[  198.308890][ T9323]  ? __pfx_netlink_sendmsg+0x10/0x10
[  198.314676][ T9323]  ? aa_sock_msg_perm+0x91/0x160
[  198.319675][ T9323]  ? __pfx_netlink_sendmsg+0x10/0x10
[  198.325106][ T9323]  __sock_sendmsg+0x221/0x270
[  198.329837][ T9323]  ____sys_sendmsg+0x53a/0x860
[  198.334757][ T9323]  ? __pfx_____sys_sendmsg+0x10/0x10
[  198.340176][ T9323]  ? futex_wake+0x523/0x5c0
[  198.344733][ T9323]  __sys_sendmsg+0x269/0x350
[  198.349352][ T9323]  ? __pfx_futex_wake+0x10/0x10
[  198.354313][ T9323]  ? __pfx___sys_sendmsg+0x10/0x10
[  198.359490][ T9323]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  198.365965][ T9323]  ? do_syscall_64+0x100/0x230
[  198.370922][ T9323]  ? do_syscall_64+0xb6/0x230
[  198.375651][ T9323]  do_syscall_64+0xf3/0x230
[  198.380253][ T9323]  ? clear_bhb_loop+0x35/0x90
[  198.384982][ T9323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.390994][ T9323] RIP: 0033:0x7f4b6ff8d169
[  198.395446][ T9323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.415394][ T9323] RSP: 002b:00007f4b70d36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  198.424252][ T9323] RAX: ffffffffffffffda RBX: 00007f4b701a6160 RCX: 00007f4b6ff8d169
[  198.432327][ T9323] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 000000000000000c
[  198.440369][ T9323] RBP: 00007f4b7000e2a0 R08: 0000000000000000 R09: 0000000000000000
[  198.448375][ T9323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  198.456493][ T9323] R13: 0000000000000000 R14: 00007f4b701a6160 R15: 00007ffcff62d688
[  198.464542][ T9323]  </TASK>
[  198.467597][ T9323] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  198.474905][ T9323] CPU: 1 UID: 0 PID: 9323 Comm: syz.4.765 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0
[  198.485536][ T9323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  198.495621][ T9323] Call Trace:
[  198.498923][ T9323]  <TASK>
[  198.501870][ T9323]  dump_stack_lvl+0x241/0x360
[  198.506580][ T9323]  ? __pfx_dump_stack_lvl+0x10/0x10
[  198.511821][ T9323]  ? __pfx__printk+0x10/0x10
[  198.516440][ T9323]  ? vscnprintf+0x5d/0x90
[  198.520807][ T9323]  panic+0x349/0x880
[  198.524724][ T9323]  ? __warn+0x174/0x4d0
[  198.528887][ T9323]  ? __pfx_panic+0x10/0x10
[  198.533321][ T9323]  __warn+0x344/0x4d0
[  198.537307][ T9323]  ? dev_setup_tc+0x315/0x360
[  198.542005][ T9323]  report_bug+0x2b3/0x500
[  198.546335][ T9323]  ? dev_setup_tc+0x315/0x360
[  198.551018][ T9323]  handle_bug+0x60/0x90
[  198.555203][ T9323]  exc_invalid_op+0x1a/0x50
[  198.559735][ T9323]  asm_exc_invalid_op+0x1a/0x20
[  198.564611][ T9323] RIP: 0010:dev_setup_tc+0x315/0x360
[  198.569914][ T9323] Code: cc 49 89 ee e8 dc da f7 f7 c6 05 c0 39 5d 06 01 90 48 c7 c7 a0 5e 2e 8d 48 c7 c6 80 5e 2e 8d ba e9 06 00 00 e8 3c 97 b7 f7 90 <0f> 0b 90 90 e9 66 fd ff ff 89 d1 80 e1 07 38 c1 0f 8c aa fd ff ff
[  198.589533][ T9323] RSP: 0018:ffffc90003e1eed0 EFLAGS: 00010246
[  198.595645][ T9323] RAX: 48407c6ad134e100 RBX: 0000000000000000 RCX: 0000000000080000
[  198.603652][ T9323] RDX: ffffc9000e649000 RSI: 0000000000003e66 RDI: 0000000000003e67
[  198.611627][ T9323] RBP: ffff8880125c0008 R08: ffffffff81818e32 R09: fffffbfff1d3a67c
[  198.619608][ T9323] R10: dffffc0000000000 R11: fffffbfff1d3a67c R12: ffffc90003e1f070
[  198.627590][ T9323] R13: ffffffff8d4ab1e0 R14: ffff8880125c0008 R15: ffff8880125c0000
[  198.635580][ T9323]  ? __warn_printk+0x292/0x360
[  198.640367][ T9323]  nf_flow_table_offload_setup+0x2ff/0x710
[  198.646185][ T9323]  ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10
[  198.652357][ T9323]  ? __pfx_nf_flow_table_offload_setup+0x10/0x10
[  198.658715][ T9323]  ? __pfx_lock_release+0x10/0x10
[  198.663758][ T9323]  ? nft_pernet+0x23/0x240
[  198.668170][ T9323]  ? __pfx_nf_flow_table_offload_setup+0x10/0x10
[  198.674506][ T9323]  nft_register_flowtable_net_hooks+0x24c/0x570
[  198.680765][ T9323]  nf_tables_newflowtable+0x19f4/0x23d0
[  198.686328][ T9323]  ? __pfx_nf_tables_newflowtable+0x10/0x10
[  198.692237][ T9323]  ? nfnl_pernet+0x23/0x240
[  198.696738][ T9323]  ? __pfx_lock_release+0x10/0x10
[  198.701776][ T9323]  ? __nla_parse+0x40/0x60
[  198.706198][ T9323]  nfnetlink_rcv+0x14e3/0x2ab0
[  198.710981][ T9323]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  198.716123][ T9323]  ? netlink_deliver_tap+0x2e/0x1b0
[  198.721327][ T9323]  ? skb_clone+0x240/0x390
[  198.725744][ T9323]  ? __pfx_lock_release+0x10/0x10
[  198.730788][ T9323]  ? netlink_deliver_tap+0x2e/0x1b0
[  198.735997][ T9323]  netlink_unicast+0x7f6/0x990
[  198.740771][ T9323]  ? __pfx_netlink_unicast+0x10/0x10
[  198.746063][ T9323]  ? __virt_addr_valid+0x45f/0x530
[  198.751177][ T9323]  ? __phys_addr_symbol+0x2f/0x70
[  198.756205][ T9323]  ? __check_object_size+0x47a/0x730
[  198.761502][ T9323]  netlink_sendmsg+0x8de/0xcb0
[  198.766286][ T9323]  ? __pfx_netlink_sendmsg+0x10/0x10
[  198.771583][ T9323]  ? aa_sock_msg_perm+0x91/0x160
[  198.776555][ T9323]  ? __pfx_netlink_sendmsg+0x10/0x10
[  198.781847][ T9323]  __sock_sendmsg+0x221/0x270
[  198.786531][ T9323]  ____sys_sendmsg+0x53a/0x860
[  198.791303][ T9323]  ? __pfx_____sys_sendmsg+0x10/0x10
[  198.796594][ T9323]  ? futex_wake+0x523/0x5c0
[  198.801116][ T9323]  __sys_sendmsg+0x269/0x350
[  198.805711][ T9323]  ? __pfx_futex_wake+0x10/0x10
[  198.810576][ T9323]  ? __pfx___sys_sendmsg+0x10/0x10
[  198.815728][ T9323]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  198.822084][ T9323]  ? do_syscall_64+0x100/0x230
[  198.826874][ T9323]  ? do_syscall_64+0xb6/0x230
[  198.831563][ T9323]  do_syscall_64+0xf3/0x230
[  198.836073][ T9323]  ? clear_bhb_loop+0x35/0x90
[  198.840758][ T9323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.846658][ T9323] RIP: 0033:0x7f4b6ff8d169
[  198.851077][ T9323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.870682][ T9323] RSP: 002b:00007f4b70d36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  198.879123][ T9323] RAX: ffffffffffffffda RBX: 00007f4b701a6160 RCX: 00007f4b6ff8d169
[  198.887110][ T9323] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 000000000000000c
[  198.895099][ T9323] RBP: 00007f4b7000e2a0 R08: 0000000000000000 R09: 0000000000000000
[  198.903080][ T9323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  198.911053][ T9323] R13: 0000000000000000 R14: 00007f4b701a6160 R15: 00007ffcff62d688
[  198.919038][ T9323]  </TASK>
[  198.922417][ T9323] Kernel Offset: disabled
[  198.926811][ T9323] Rebooting in 86400 seconds..