last executing test programs:

7.226400788s ago: executing program 4 (id=4373):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r0, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10)
listen(r0, 0x5)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r1, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10)
accept$phonet_pipe(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r2, 0xfff)
r3 = accept4(r2, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r5, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0x7, 0x2, 0x925, 0xffffffff00000001, 0xc42, 0x200, 0x6e1, 0x2090c5d2, 0xffffffffffff77ae, 0x2, 0x4, 0x7, 0x100000001, 0x2, 0x9]}, &(0x7f00000000c0)=0x100)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840)
write$nci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="074248a63e", @ANYRES16], 0xbb)
sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x80)
sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)}, 0x80)
r10 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_group_source_req(r10, 0x0, 0x2c, &(0x7f0000000540)={0x789, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108)

6.843842531s ago: executing program 1 (id=4377):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, 0x0, 0x4040000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x48, 0x0}, @devid})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r3, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000001640)=""/209, 0xd1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000001740)=""/4076, 0xfec}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x100, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
accept4(0xffffffffffffffff, &(0x7f00000001c0)=@xdp, &(0x7f0000000240)=0x80, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

6.656165108s ago: executing program 1 (id=4380):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@typedef={0x8, 0x0, 0x0, 0x8, 0x2}, @volatile]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000200)=""/201, 0x3b, 0xc9, 0x1}, 0x20)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x50)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r6 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="2c548f2664234aea5882c40b008c", 0x5e0}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045)

6.516193784s ago: executing program 0 (id=4381):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="a905a6f2", 0x4}], 0x1}}], 0x1, 0xc044)
r4 = socket(0x2, 0x2, 0x1)
bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) (async)
connect$unix(r4, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r6)
sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="64004a14e0efef71a65f410000", @ANYRES16=r7, @ANYBLOB="010023bd7000fbdbdf250300000014000200fe8800000000000000000000000000012600070073797374656d5f753a6f626a6563745f723a78656e5f6465766963655f743a73300000001400060076657468315f766c616e000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4040805}, 0x40004)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r7, 0x301, 0x0, 0x25dfdbfd}, 0x14}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000007111770000000000851000000200000085000000c400000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000540)=ANY=[@ANYBLOB="400018f4f57dc8bf06e6a6253b3dbe5c17f71e8043fec873b638115bc6eb97983c7984977e9cf131a107fc93cb5eb99472c8629aa4433be2a652758418", @ANYRES16=r3, @ANYBLOB="010025bd7000000000000700000014000200fe8000000000000000000000000000bb080005007f000001"], 0x30}}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x9) (async)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r3, 0x301}, 0x14}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x34}}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r9, 0x0, r1, 0x0, 0xf3a, 0x0) (async)
write(r1, &(0x7f0000000380)=' ', 0x1) (async)
tee(r0, r10, 0x8f5, 0x100000000000000) (async)
write(r8, 0x0, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000712236008000000095000000000000008215fe01410dc2737239b516d498828bf6cf0f056439300d084fea5423c5745cb5467b2ec8d494240ca2a42a30e04e617defb81cc9c045d8dd9dc629854e84c9eddb1ad4b43633d533026685e2e7bf62431a73a4bc90fa14b8208ef4ad20f5fd29759322aa4d50e61bfb0b145a0399e04a69f90c280d02282dee08f3f029a1a4ae774231e6642fe3a53391f8a13f5ad8a82f7932729c615660b0464681d82c56284a06"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

6.314211328s ago: executing program 0 (id=4383):
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x5, 0x9, 0x80000001, 0x2, r1, 0x528, '\x00', 0x0, r0, 0x0, 0x1}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)=""/61, 0x135, 0x3d, 0x1, 0x9, 0x10000}, 0x28)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x5fca3000)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x1, 0x0, r5, 0xa0, '\x00', 0x0, r4, 0x4, 0x2, 0x5}, 0x50)

6.155026925s ago: executing program 4 (id=4384):
r0 = socket$kcm(0x2, 0x1000000000000005, 0x0)
r1 = socket(0x2, 0xa, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x87}, {0x6}]}, 0x10)
ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000340)={{r1}, 0x5, &(0x7f0000000000)=[0x3cb, 0xfff, 0x4, 0x5, 0x2], 0xb0c, 0xa})
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={<r2=>0x0, 0xa4, &(0x7f0000000180)=[@in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e21, 0x9, @remote, 0x5}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e21, 0x6, @loopback, 0x8}, @in6={0xa, 0x4e24, 0x5, @local, 0xffffffff}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000280)=0x10)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r2, &(0x7f0000000300)=0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000000001810400000000141a000002000000240001801400018008000100e000000508000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000f6070016"], 0x6c}}, 0x0)
sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0xe0)

5.907988958s ago: executing program 4 (id=4386):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfa, {0x2}}, 0x14}}, 0x8000) (async)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000080)) (async)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff}) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r4, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES64=r4], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) (async)
setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000340)={0x0, 0x2710}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) (async)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x9, 0x0, 0x50}}, 0x18}}, 0x0)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r5)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r8, 0x1, 0xfffffffc, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x5, 0x4, "f01f59114c92c1f61dce6de11bdd5f11"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) (async, rerun: 64)
recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1}, 0x0) (rerun: 64)

5.193915418s ago: executing program 2 (id=4389):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x6)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept(r0, 0x0, 0x0)
setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000200000004000000a4"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20)
close(r3)
recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xffffffe1}, 0x2040)
recvmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x22e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0xffff}})
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x3)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
listen(r0, 0x6) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async)
accept(r0, 0x0, 0x0) (async)
setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000200000004000000a4"], 0x50) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) (async)
close(r3) (async)
recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xffffffe1}, 0x2040) (async)
recvmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x22e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0xffff}}) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) (async)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x3) (async)

5.007882822s ago: executing program 2 (id=4390):
r0 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x106) (async, rerun: 64)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) (rerun: 64)
getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x1000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) (async, rerun: 32)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1, <r4=>0xffffffffffffffff}, 0x4) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', <r5=>0x0, 0x29, 0x3, 0xf1, 0x0, 0xc, @dev={0xfe, 0x80, '\x00', 0x42}, @private2, 0x80, 0x40, 0x2, 0x80000001}}) (async)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6e, 0x6e, 0x4, [@datasec={0x10, 0x8, 0x0, 0xf, 0x2, [{0x2, 0x5, 0x6}, {0x4, 0x80000000, 0x2}, {0x4, 0x9, 0x7}, {0x2, 0x8, 0xfebe}, {0x1, 0x4, 0x9}, {0x4, 0x7, 0x1}, {0x3, 0x8, 0x10001}, {0x4, 0x2, 0x2}], 'Xb'}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000640)=""/106, 0x8c, 0x6a, 0x1, 0x3}, 0x28) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xb, 0x15, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf27d}, {}, {}, [@map_idx={0x18, 0x9}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='syzkaller\x00', 0x6, 0x51, &(0x7f0000000840)=""/81, 0x41000, 0x12, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x6, 0x5, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000980)=[{0x3, 0x5, 0x10}, {0x2, 0x3, 0x1, 0x9}], 0x10, 0xfffffffe}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)='%pK    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0x1b, &(0x7f0000000340)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x1, 0xc, 0x9, 0xb, 0xfffffffffffffffe, 0x1}, @jmp={0x5, 0x0, 0x4, 0x9, 0x6, 0xc, 0xfffffffffffffffc}, @generic={0xf2, 0x1, 0x9, 0x2, 0x8865}, @generic={0x7f, 0x8, 0x0, 0x3, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}], &(0x7f0000000440)='syzkaller\x00', 0xffffff8a, 0x0, &(0x7f0000000480), 0x40f00, 0x5c, '\x00', r5, @fallback=0x15, r6, 0x8, &(0x7f0000000700)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r7, 0x9, &(0x7f0000000b40)=[r8], &(0x7f0000000b80)=[{0x5, 0x3, 0x5, 0x6}, {0x4, 0x2, 0xd, 0x1}, {0x2, 0x1, 0xe, 0x8}, {0x1, 0x2, 0xa, 0xb}, {0x3, 0x5, 0x9, 0x1}, {0x2, 0x4, 0x2, 0xa}, {0x0, 0x5, 0xb, 0x9}, {0x5, 0x4, 0x2, 0x8}, {0x2, 0x2, 0x1, 0x7}], 0x10, 0xff}, 0x94)
sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, 0x0, 0x300, 0xc, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x60}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) (async)
ioctl$XFS_IOC_ERROR_CLEARALL(r4, 0x40085875) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'vxcan1\x00', <r9=>0x0})
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000e40)=0x4100002) (async, rerun: 64)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r2) (rerun: 64)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r10, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000041) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001000), r2) (rerun: 64)
sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000001180)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001040)={0xf0, r12, 0x100, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x6a, 0xa8, @random="8dfce9a6dcf1fa803179e5e48018fd362743d0b708f0784a8721376a3d399039fb3836a1b3035ff95b104e23d2e3ea16760a654632d74fc55cb9f41540f88bbee162f98d3bf66cfbd611cc5bd01b76978f4d4c008eed486b1b131acbd0f293c7261df99c1392"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0xf0}, 0x1, 0x0, 0x0, 0x41}, 0x4081) (async)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000001200), r2)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x24, r13, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4008000) (async, rerun: 32)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), 0xffffffffffffffff) (rerun: 32)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r11, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x4c, r14, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x8080)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r15, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x28, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x40015)

1.915654776s ago: executing program 0 (id=4391):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc)
getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000100)=0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x800}, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000003c0)={0x0, 0xffffff7f, 0xfffffff9, 0x3}, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000140)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {}, @device_b, @random="d64cdc82144f", @from_mac=@device_b, {0x8, 0x81}, "", @void, @value=@ver_80211n={0x0, 0x9, 0x1, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x1dc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000004200004801c0001800b0001006e756d67656e00000c000280080001400000000900020073797a3200000000140000001100010000000000000000000000000a00"/116], 0x74}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x700, 0x1, 0xe, 0x5a6c, {{0xf, 0x4, 0x1, 0x0, 0x3c, 0x65, 0x0, 0x2, 0x449e38a30f149412, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010102, {[@noop, @timestamp_addr={0x44, 0x24, 0x81, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0xffffff01}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@remote, 0x100}, {@local, 0x1}]}]}}}}})

1.907862452s ago: executing program 3 (id=4392):
r0 = socket$kcm(0x29, 0x0, 0x0) (async)
r1 = socket$inet6(0xa, 0x3, 0x9f)
sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010100}, 0x3, 0x4, 0x4, 0x1}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="3cbc151a77786c0c81886761ab5b40bc22b24558d6987635771e3ed05fa7d09519", 0x21}, {&(0x7f00000000c0)="72bf5a1f59e2f0e5ae", 0x9}], 0x2, &(0x7f0000000140)=[{0xd8, 0x110, 0x5, "8092f85c56cd1b575c2be8e0d244eadc85677318efcac361027c252242ebf89edbcd36ee03497ad6648b0381bba26e23a930f4c9dc3b7cb99b063644476e924c8cf5ca1f0945d7781fdcfaeb410ebbf1b485d0d0aa574f52a36b3ecd84ec871f7e05891335fe734fba60a9d212bea37dce87fc22d1249dd51dc2680d770b3406d33d6b26a8591c82edf902e9dae40ce54d80cf80659b5914a3015039e7744c0345451aa04da0ffef10cda47e0ffb09a96987fcb372d2a221358f48e61ac7d96d600a07de75b2"}, {0xa0, 0x1, 0x7, "76104a079509f64042acab5d60cc4da4c47acaf0823ddc245dd13e05d6cf8a1aaab7211891dfe5c33f22ebbaa1d736d03751981d4daec9690363015a37bcb8501f7587c6ebf62ef4f61e91f5b81b4cc51f7b04f73b49ba0d87771948b5ab94dbe7d502ebebbfb7953b54d7034d52b1cbb571a2447023efb200e5168110ff8e2124ddb839d79c87f96cc0ce4f"}, {0x100, 0x102, 0x3, "8176bd3e086fd04badf504bd8c5ca9af7eb624c9b0a1f20ec3e8cccc06cac3fc80e10f9358153c76bc8e65249353765612ebf85fe3d6d8dd3123d28e1414a644f8e581975965038a00d5e03ca6aba5d0df5c8c8713df2f46363d49745f607e3e6aed22db8c86d84179f462f0bbf004a17004af95c35db33a02a62b3b688846b05e35864e5d27863e6eea7dd07fdd8a61ae37edc65202d3c595a846b5825938f5e3c28acae0e63d44f12e623a76512c496ee46544f61256ac61ea8a7f96c4820110a56d632b127e1f7cf820603826aa80a190a5fdac9067f37cf482b76a1c5b08c82a54957430e53d3860ee98537a"}, {0xb8, 0x103, 0x0, "c50fb31c3a0e07f3f3e32455a1a0943442582f6d367496604f84f3e3614a5ac8ea89c33aab90a62386e242274a6b4361316d18c095e30540b51ce746d79f83cec3498430439d994ecf32c8f24b24e594cee6a9a35ebe6bf5979b50c065de518ba97edb6950dba9191f99bc365a269ed3c404c4469631851b1388af8be803920c474d31ce16644a21235efdb17e9e41c0205026fbbbcd239fc50137d687449bd241b4309771"}, {0x110, 0x108, 0x1, "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"}], 0x440}, 0x20000884)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000005c0)={r0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000c40)=<r2=>0x0, &(0x7f0000000c80)=0x4)
sendmsg$inet(r0, &(0x7f0000000e00)={&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000640)="6412635dcedc2baec8a2af4047ca4db64111f2c9db1c12be92c6b4e6d548f69a55dc2efe07f2df0356d32e268e5af94a70aa28d8e2ea987dab8be452a85d8d2880651afe652715db554d2dc8c97837d81ac20c5b0ff35fe112d4a89d920972e42789c9e281a018880d57ab4a11d6f6561a7f3236d4e24b7f32ad7b6d4c8d6420a303614b700e2d036c919437d6c9cb108c363ba3065bfc715f373ca38afe148744e9e7f76c1d110b126cadd81bad66ced45167af169ae321e46af3a624f33d981fddb462bbdc8a8fd50d09056deb4a598d963ef97b57a9b8d507fe6f8d17781a838b40b2ed30bcf7a313a03f10476c39defe09c12903471f", 0xf8}, {&(0x7f0000000740)="e1ec9685743de35859a43fb0d28403df2e14c74c3a1f60ce30816da22ce59f2af4dc1a0b01e7d982bf47656cd1c4250b16e4b2b7f4cb9945232ae209f854298529d4a50d4b83dac314dc648d634921dfd539fa95642355ed46ccde69692d6e0fb9a7953d784b0513c7bf96985f43f6d62bfe84189890cb59c5dec26c20d64da7c2532de46508a134d35f6d28926d72ff2b998a8349a5dde68750a5f6170622dcedf2b6c22de4c19cad6157c9d36c6c63529979a2e5e60a0f7f47cbd6d2432c97469611da4dad90566eb50b8e9923e332db4535e325bf5c46cf9bdc24", 0xdc}, {&(0x7f0000000840)="4f9f8f2548135dbb063aa668c3fe932d3734998c982656eb513a3d1500005a10ebed747103fd0aaa0f64ef2eff6b3b7f65015b3a3232e50205e614024ccc91658c36a988ab3f1a5a6f30429ef2e9c676dbb5c378c22cf2bd1d995ca54b4a17dd977fbf19cc70685b3d2d57c1", 0x6c}, {&(0x7f00000008c0)="32820f67fbb1228d7934e1a151ebdfc5d9f4e60123f3f97686b2bb23f88d320bddaf5683f54b7f893eceeee3d1552b25f8ddac73f41e6d74bfc960b8bdc6c2f40473351d4d775510307a16bef7ebd31e52c5a78926b204aebfdc4caf66804b6533eaa6662a8fddf0f01caba0c138dca71409f65c0b5ec96eafed911f5f54e32aef76a81c8c67f5ccdfc62b50008bc0479e507f69a956862921a8b7ddc9e0905816a325695a36d54a985f0c96a2da2235cfd1c132ad14dc103de2be584e21126c08e8069bda3fd84e715925ffd350e4d52e268af599d2510f9a65c1c29f9122da9a6af922f3e139d65853eb87", 0xec}, {&(0x7f00000009c0)="f1c4e569cc3b9246b833700ac9189dee5db81ca7c72c53ab6f711d66309ee12308c9136ea5ec70ee05e6d2d92052246fe3a40809ae4e5e125945b73428c62573d135d28b718ef732580bfd165350a31950300ec25f2be8e906b9e2f343c1b61beb792e47db2a98fb30d345577b4c5b35f5fd27ffa11e8bd6599b06a92a19cfaeba74ec923ba3a3dbe203b7dc4239207cd37e3f077a74a3ef95c775cb538b802a30d1b1c9d501f26f9601b326987993f93346caea09edf3fb640fa8f85dd3e0e6b3340496dc2c88", 0xc7}, {&(0x7f0000000ac0)="46c0645f75468e98216a3bd593fae71fbd2a8a2f21643f044e7e187528ed68a5e00f318d6d73c7070a6cbfd8be92ae5669019ee766148e293af91f6a073ff4dc92fa544aeae9f528f87ff66562e831096ead1fc919f7fe49a69118cb295e567ed50d942f091ca36eca6fa9d71e55f10bcde7db6d1eb5d56fdbb1915a8d786cc975f9d21bafebeaacea950334bbe9f076a55abc9f9abaf7e7b0cedc2c9c504543e639b5ef05a24d6e8895428c4c267464b4e7a8662b210ee9e429239518015c0c562aa1b84bda8c69cb6f8887222c19b0f29bae97644574b02bb3fb99e218ae5e282d891a4d75", 0xe6}], 0x6, &(0x7f0000000cc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0xe8, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xa, 0x3, 0xa, [{@broadcast, 0x5}, {@multicast1, 0x34}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@private=0xa010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x10}, {@rand_addr=0x64010101, 0x7}]}, @timestamp={0x44, 0xc, 0xe3, 0x0, 0x0, [0xc, 0x1]}, @timestamp_prespec={0x44, 0x4c, 0xf5, 0x3, 0x3, [{@multicast2, 0x4}, {@empty, 0xffffffff}, {@broadcast}, {@rand_addr=0x64010102, 0x6}, {@local, 0xd1e}, {@initdev={0xac, 0x1e, 0xf, 0x0}, 0x10}, {@broadcast, 0xd476}, {@rand_addr=0x64010101, 0x9354}, {@remote, 0x6}]}, @timestamp={0x44, 0x18, 0x3c, 0x0, 0x9, [0x7, 0xd, 0x5, 0x6, 0x4]}, @timestamp_addr={0x44, 0x14, 0x3a, 0x1, 0x0, [{@loopback, 0x4}, {@local, 0x2}]}, @timestamp={0x44, 0xc, 0x24, 0x0, 0x1, [0x3, 0x1627483f]}, @timestamp_prespec={0x44, 0x14, 0xcf, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x4}, {@remote, 0x8}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @dev={0xac, 0x14, 0x14, 0xb}}}}], 0x120}, 0x0)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000e40)=0xffffffffffffffff) (async)
r3 = gettid()
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000e80)=r3)
sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x9c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r4, &(0x7f00000022c0)={&(0x7f0000001040)=@alg, 0x80, &(0x7f0000002280)=[{&(0x7f00000010c0)=""/235, 0xeb}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/154, 0x9a}], 0x3}, 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002340), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000002480)={&(0x7f0000002300), 0xc, &(0x7f0000002440)={&(0x7f0000002380)={0xbc, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x28}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000024c0)=r3)
sendmsg$inet(r4, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002500)="39c4733857adc97863b5498e1d385c1033512e8026be04c9e55f3c6a54ef6e94d308cc46194bd5767aa3b1eda63904757277a0afdf9de790eed925dbd614ad85fae5a8ede0c4d33e189d263802d3cb6a33514ac149d48ccf9e4827d2394c87fe51ba256ed7237f9491578a734732fc46f6fe2a55e0b9a71d", 0x78}, {&(0x7f0000002580)="cd501a9fdb179efe6b4f7f36a9f176166aadb0a9a4d0dad43c1d883988ff98482986309d9edaf912a445f5ba0d9c01d09e7c36a855b62d8ea2110755521a98e1a206ef745d2471091bab08a8308efbffc34e560c0934edcff90d99ab12191284702d00bf9862d0e1700cbb10909b16158653247e85b50aac15ea56f6bc3342a360607c7702a7a3121997df38a010abae7e047fa3136d32362da1029fa7eae69bcf9ac6d482618307a9b5eeecbc94eebb304cd896e5870177121cd736", 0xbc}, {&(0x7f0000002640)}, {&(0x7f0000002680)="6d6497128c9b2a4dcef47b7d7917e1e4f05834fab382da7f4260429c5609aa1f8f9392b9cff420f480677f1dc968dd527134acd2e88be96d68368e87044482c849ade4740a4b7d00aebdfbd12a48f7bfd0e36d75a037d6c2ca0800af8760db9a7d44f1fc779a73fecd867d48c7ca51938002d5584ae1342d5830a7ee6b9281a0e729161e02fc8552", 0x88}, {&(0x7f0000002740)="f33c83d04db23ee78cb350b21a36e4d2bee533b4b419f5c1ddb0042ea0b25af16524f399847d7551f373d0c90d6a983dfeec3a704752a4f47b8f0ddbe5e2192227e8c775b232685fa2169b938263b32a5903e82cc0656583c633c2235a280d11f3cec20f4d1a84fe1fad029530ae1ac38b388e29329bbd1b8bfbe362aafedc60c14b686f95e94c83bd2729672632d18c8f5bcc82bbfd6992f96decda8749bac3f7e5e527e37c9fc7e3e74f1bdff84a4dde5933bdcdc00508b49f2ea53443deb03138f1eabbccbf1f5b15ba2b1ae83eabd4f6061f0c6c55de531e8e179b9508219ed5c063ae66e778", 0xe8}], 0x5, &(0x7f00000028c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x24, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xef, [@rand_addr=0x64010100, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x26}]}]}}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@cipso={0x86, 0x14, 0xffffffffffffffff, [{0x0, 0xe, "9f3150e0d649d550e0645dbe"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xbd, 0x0, 0x9, [0x2, 0x0, 0x7fff]}, @lsrr={0x83, 0x27, 0xdf, [@remote, @local, @dev={0xac, 0x14, 0x14, 0x34}, @local, @rand_addr=0x64010100, @loopback, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @end, @generic={0x44, 0xa, "f426d041c0475ed3"}, @rr={0x7, 0x7, 0xb8, [@loopback]}, @cipso={0x86, 0x42, 0x3, [{0x7, 0x7, "b8fe014aea"}, {0x5, 0x7, "9a8a809563"}, {0x0, 0x5, "6ba422"}, {0x7, 0xd, "d2acf73f08fa0e63bb25ec"}, {0x1, 0x11, "d6f80d59fbd7a577a780e0f242f8a1"}, {0x1, 0xb, "baed2e4ded75d2c751"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x110}, 0x4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002a80)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000002b80)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x74, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1ff, 0x32}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "c3ce8216f7"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, 0x74}}, 0x20040880)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000002bc0), 0x8)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000002c00)={0x0, 'ip_vti0\x00'}, 0x18) (async)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000002c40)={r8}, 0x8)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002cc0), r8) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000002d00)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000002e00)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x68, r10, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xca0}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x20}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x10}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1208752ca56b7a6e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}}, 0x4000) (async)
ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000002e40)) (async)
close(r8)
socketpair(0x1e, 0x3, 0x5, &(0x7f0000002e80)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$kcm(r13, &(0x7f0000003000)={&(0x7f0000002ec0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002f40)="fe05696eca186e2b764f99caf13a96a7c40eaed331f0c170f2f94fbcca580c8da747b9696340dcbe1c5a9454c61a9d5d13da8e3a839ea1817e5308e4a9a3b63e070e217a3c8132", 0x47}], 0x1}, 0xc840) (async)
connect$rxrpc(r12, &(0x7f0000003040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010100}}, 0x24)

1.899791208s ago: executing program 2 (id=4393):
r0 = epoll_create1(0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x98}}, 0x40) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) (async)
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x1, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
accept4$unix(r5, &(0x7f0000000280), &(0x7f0000000300)=0x6e, 0x80000) (async)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @broadcast}, 0x10) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)='%pi6   \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), 0x0, 0x0, 0x0, 0x5, r6}, 0x38) (async)
connect$unix(r4, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000100)={0x20000014})
connect$unix(r5, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
syz_emit_ethernet(0x3aa, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x374, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x300, 0x2000000, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000001991319c00"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0x9, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc48537d68e2d2c6393a9f3becd1a7ad87dc858a04b6bf003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b01b9387f85932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0)

1.828531915s ago: executing program 4 (id=4394):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="0a000100aa941da21805"], 0x48}}, 0x0)

1.82762245s ago: executing program 1 (id=4395):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00')
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffd87, &(0x7f0000000140)={&(0x7f0000001ac0)={0x1c, 0x1e, 0x1, 0x20000002, 0x400, {0x1}, [@nested={0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = socket(0x6, 0x3, 0x2) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) (async, rerun: 64)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) (rerun: 64)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0x12) (async)
ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) (async)
writev(r8, &(0x7f0000003740)=[{&(0x7f0000000040)="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", 0xfb}, {&(0x7f0000000480)="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", 0xef3}], 0x2) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}, @generic={0xf7, 0x7, 0xf, 0xb7, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x200, 0x0, 0x0, 0x40f00, 0x8, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000380)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x3, 0x79, 0xfe0}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[r7, r8], &(0x7f00000004c0)=[{0x4, 0x5, 0xb}, {0x5, 0x2, 0x1, 0xa}, {0x4, 0x5, 0x1, 0x1}, {0x3, 0x3, 0xa}], 0x10, 0x5f}, 0x94) (async, rerun: 32)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async, rerun: 32)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xa}, @generic={0x4c, 0x0, 0x9, 0xfff, 0x4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}], &(0x7f0000000000)='GPL\x00'}, 0x94)

1.625702377s ago: executing program 2 (id=4396):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x840000000002, 0x3, 0xff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1", 0x12}], 0x1) (async)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1", 0x12}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r2, 0x0) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r2, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x1, 0x20048814) (async)
sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x1, 0x20048814)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x101, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x101, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', <r4=>0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x4, 0x8, 0x4, 0x4, 0x2, 0x4, 0x6, 0x769}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048084}, 0x20000000) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x4, 0x8, 0x4, 0x4, 0x2, 0x4, 0x6, 0x769}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048084}, 0x20000000)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r10, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4b}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x40005)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_deladdr={0x0, 0x15, 0x300, 0x70bd2d, 0x25dfdbfe, {0xa, 0x3f, 0x0, 0x105, r4}, [@IFA_LOCAL={0x0, 0x2, @remote}, @IFA_CACHEINFO={0x0, 0x6, {0x7, 0x7, 0x477, 0xfff}}, @IFA_LOCAL={0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004d808}, 0x800)

1.458548866s ago: executing program 3 (id=4397):
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@can={0x1d, <r1=>0x0}, &(0x7f0000000080)=0x80) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x234, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x400}, {0x8, 0xb, 0xffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xcaaa}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1000}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe2c5}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xfff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x3a}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd4}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x10}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7ff}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8973}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0xfff}}]}, 0x234}, 0x1, 0x0, 0x0, 0x4044}, 0x4000800)
syz_emit_ethernet(0x32, &(0x7f0000000400)={@random="82466d133504", @multicast, @val={@val={0x88a8, 0x5, 0x1}, {0x8100, 0x1, 0x1, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @private=0x800, @random="2bd62fb3c033", @broadcast}}}}, &(0x7f0000000440)={0x1, 0x4, [0x256, 0x655, 0x7d0, 0x562]}) (async)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x19}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), 0xffffffffffffffff) (rerun: 32)
sendmsg$NFC_CMD_DEV_DOWN(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r0)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x98, r6, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3c, 0x3, "762e875e700be36c3516afd0cb26bcbfcba57a0bb9b3b0fc6eb0e5060bee6ff788ba031f9e37146df4e5fb7092cf57f4d5de5edfa8f558e5"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "efb5e848ca76243ac31b9573f1019afff9663f4baa9c3562937f"}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000940)={'wpan0\x00', <r7=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000980)={'wpan3\x00', <r8=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008800}, 0x20000040) (async, rerun: 32)
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b00), 0xffffffffffffffff) (rerun: 32)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r9, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x810) (async)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000c00)={'lo\x00', {0x2, 0x0, @remote}}) (async)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r10, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008891}, 0x40000)
sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000050}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x50, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040054}, 0x40000) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000f00), r4) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r12, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, 0x0, 0x1732ca5005a296ed, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x24000000)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r12, 0x4048587b, &(0x7f0000001500)={{<r13=>r12, &(0x7f0000001140)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x200000, &(0x7f0000001180)={@_ha_fsid={[0x1, 0x7f]}, {0x5, 0x6, 0x5, 0x100}}, 0xffffff43, &(0x7f00000011c0), &(0x7f0000001200)=0x1}, 0x3, &(0x7f0000001480)=[{0x3, 0x8, &(0x7f0000001240)=',*pu\x00', &(0x7f0000001280)="3d7e249d863fa357996527a90c8a5dfc27882e061f379c5944260b22fc4e82a863e14c72", 0x24, 0x10}, {0x3, 0x8, &(0x7f00000012c0)='devlink\x00', &(0x7f0000001300)="819fa7f8e62cb5e45ca2c069ca50583fd9f6d51925a127dfb8c329b6c3ca859ebabac10d803c487889a5bcc716c04d299ce9cea4394e672ef5df39404b7a5038db0e223aa4c6ed2518808bd1296895096c2c", 0x52, 0x28}, {0x2, 0x3, &(0x7f0000001380)='gcm(aes)\x00', &(0x7f00000013c0)="e8416ca5d878d392455b7fd9661ee83ac34dc90a46c1ec7816f9d55611123b15df48ee330dca89ae4757e431bfdea028897663112b11e144836d952472357a36aabf8ecd76e5d4565f74483db9faa99a2f225f4d3c8bb32c639196c6a03e53dd101da713cf58cf3f27fdcff0506bf83ad8063855c1834a71b243a42560c4b3e1f1d92cbf7de3b8cdc001531dd4fd661bb5038147d11911e13796", 0x9a, 0x2}]})
sendmsg$TIPC_NL_NODE_GET(r13, &(0x7f0000001780)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001740)={&(0x7f00000015c0)={0x14c, r6, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc17a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x49}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xad9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x219}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000000}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4ad}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x41b}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffbc02}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6ee5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20004040}, 0xee5525cf7a2b7237)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x7, &(0x7f00000017c0)=""/4096, &(0x7f00000027c0)=0x1000) (async)
r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002840), r4)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x68, r14, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xfb}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x8}]}, 0x68}}, 0x8000)

1.300492747s ago: executing program 1 (id=4398):
r0 = socket(0x10, 0x3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r1=>0x0}) (async, rerun: 64)
r2 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_proto_private(r2, 0x89ee, &(0x7f0000007880)="0ecd")
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', <r3=>r1, 0x80, 0x8000, 0xe, 0x5, {{0x1e, 0x4, 0x3, 0x19, 0x78, 0x67, 0x0, 0x2, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0xa, [@remote, @broadcast]}, @timestamp={0x44, 0x18, 0x55, 0x0, 0x6, [0x4, 0x1, 0xe, 0x6, 0x2]}, @cipso={0x86, 0x10, 0x3, [{0x0, 0x4, '>a'}, {0x3, 0x2}, {0x5, 0x4, "180b"}]}, @rr={0x7, 0x23, 0xf7, [@private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast, @multicast1, @broadcast, @loopback]}, @generic={0x94, 0xe, "5bc82a6112665ef5ce077c06"}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0xde2, 0xffffffffffffff20, 0x0, 0x41100, 0x28, '\x00', r3, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000e5}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x963}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x110, 0xc8, 0x8, 0x0, 0x5803, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x6, 0x3, 0x4, 'syz0\x00', 'syz1\x00', {0x5}}}}, {{@ipv6={@remote, @remote, [0x0, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}, {}, 0x0, 0x0, 0x2, 0x70}, 0x0, 0x110, 0x130, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_virt_wifi\x00', {}, 'pimreg\x00', {}, 0x1, 0x1}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) (async)
r7 = epoll_create1(0x0)
epoll_wait(r7, &(0x7f0000003040)=[{}], 0x1, 0x3) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r8)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) (async)
listen(r9, 0x0) (async, rerun: 64)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 32)
r11 = accept(r9, 0x0, 0x0) (rerun: 32)
sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24008840}, 0x0) (async)
pipe(0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r11)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd75c, &(0x7f00000006c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async, rerun: 64)
write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) (rerun: 64)

1.213027511s ago: executing program 4 (id=4399):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5}, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2a003300d0000800080211000001080211000000505050505050004003"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8fb4b7eed1f1434495a88d1bd91445e1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c290fd947acefdbe"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4811}, 0x10)

1.0224828s ago: executing program 3 (id=4400):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r0=>0x0, 0x13, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x52, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
r1 = socket$inet(0x2, 0x80001, 0x84)
listen(r1, 0x3) (async)
accept4(r1, 0x0, 0x0, 0x800)
listen(r1, 0x0) (async)
shutdown(r1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xd8}, [@ldst={0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94)

968.568085ms ago: executing program 2 (id=4401):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x3}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x44}}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

780.401615ms ago: executing program 0 (id=4402):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r4, 0x4)
connect$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = accept(r4, &(0x7f0000000040)=@un=@abs, &(0x7f0000000100)=0x80)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r8=>0x0})
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="24d80000000000", @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="080005007f000001ae9b320e2e114e2eaf1d1783a5399d6301e7dffef4b04173b5d0f0476fa8372792ff0de7e0fada9e2127b2d941b8dd762c000000008366834d380b172204304490b6d6798c5e4d0b9df3c97b31eee758b4dca76b53233dafdecc8440c49667bb"], 0x24}, 0x1, 0x0, 0x0, 0x200440c4}, 0x24004810)
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRESOCT=r1], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000140))
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000540)={r6, &(0x7f0000000440)='syzka\x1a\x00e\xf2\x00', 0x280000, &(0x7f0000000480)={@_ha_fsid={[0x3, 0x7]}, {0x2, 0x5, 0x3, 0x4}}, 0x0, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x80000000})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x400}, 0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[], 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000140000007b030000000000008500000083000000790900000000000055090100000000009500000000000000bf91000000000000b70200000200000b8500000069000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x80000000, 0x3, 0x3, 0x800, 0xffffffffffffffff, 0x6519, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0xb}, 0x50)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000780))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50)
r11 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r12=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000080)={0x10000000})
epoll_create1(0x0)

692.616875ms ago: executing program 1 (id=4403):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008001100010000001400030067656e65766531"], 0x50}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYRESDEC=r0], 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x200080c4)

567.896574ms ago: executing program 2 (id=4404):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000900020073797a30000000010007100000050005000a0000000c000780050014000e00000011000600686173683a6e65742c6e6574000000000500040000000000b8c53b73240742b18fd70ea57ac5b0244aca77b0714bdeb2733c8cb04b64dd1b6cc099000000"], 0x58}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079108700000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890)
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x5ea, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="f7ff000000000000000000000000000063012000000000009500005a5f7a0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

565.091945ms ago: executing program 3 (id=4405):
r0 = socket(0x23, 0x8000b, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000100)={@private2, @rand_addr=0x64010101, 0x1f, 0xc}})
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_vlan\x00', 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket(0x2b, 0x1, 0x0)
getpeername$packet(r4, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x94)
r7 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001fe80000000000000000000000000000f00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES64=r5, @ANYBLOB="00000000000000000c000000000000000000000000000000e8ffffffffffffff3c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008090000000000000001000000000000004400050000000000000000000000ffff7f000001000000006c000000020000000a0101000000000000000000000000000600000000008d"], 0xfc}}, 0x0)
sendmmsg$inet(r7, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="078108befdbad4a32294", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_bt_bnep_BNEPCONNADD(r10, 0x400442c8, &(0x7f0000000c40)={r11, 0xca60, 0xfffa})
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000540)={0x3, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @random}]})
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r9, r6, 0x7}, 0x10)

436.460568ms ago: executing program 0 (id=4406):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000791090000000000063000000000000009500000000000000b8a164aed91d3d5b664c4ca806f01293f84f25209077b1bb4ab4cf447b29fad55603aa97715b6f60e53760e0565b07dd0f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5c38b46af21a0", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="fd", 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x48}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

427.779412ms ago: executing program 1 (id=4407):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18d8ad6b3e0fbb00010000000000002f11d9224aaa01521dcafb36d1bc7214802b46a7d63b9c78317f1ddc07b01386c36c29aac1a7e9705d8d525aa2222ec73234532a5e2f3612537950420fab79b596c2c650cca9d571d3697e4729cf72"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611074000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000025bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1b00"/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f0000000180), 0x0}, 0x20)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x42073, 0xffffffffffffffff, 0x4c90000)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14b)
write$cgroup_type(r2, &(0x7f0000000040), 0x9)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$LINK_DETACH(0x22, &(0x7f00000008c0)=r2, 0x4)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010029bd7000fedbdf2500000046000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000001000000003c00000002000000e0000002000000000000000000000000060000000403"], 0xfc}}, 0x0)
r8 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x4000870)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x2, 0x5}, {0xfff2, 0xb}, {0xb, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8)
sendmsg$nl_xfrm(r4, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)=@report={0x1c8, 0x20, 0x308, 0x70bd2a, 0x25dfdbfc, {0x2b, {@in6=@dev={0xfe, 0x80, '\x00', 0x32}, @in6=@empty, 0x4e21, 0x401, 0x4e23, 0x8000, 0xa, 0x80, 0x20, 0x87, r9, r10}}, [@iptfs_dont_frag={0x4}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2a, 0x70bd2d, 0x70bd28, 0x70bd2a, 0xf, [0x9, 0x2, 0xffffff81, 0x8001]}}, @algo_auth_trunc={0x144, 0x14, {{'ghash-generic\x00'}, 0x7c0, 0x60, "e8d610d33d313993e17227915cb5dfe6fe1b14c312ba176ac0e0326845d06524914b519d68317224279579f653e00d53895549c765378712b81c72fa76f9f250ceac432378ac748c1cd040735877817febab942acfdba139f7738acd6ad3a69a51d963b286f8fdcbf76c748748526aa92221c9bb863df1c9a982aa9d34029e28aa1e18fb02e2cc16f8c363af6c2bb5dc968b582afc8f0cef2b228c297cd365c52fbed4e9b50e789f9b319df68a5f8b44a1c55bf8b0bbec50560480acf3e71242920a24e8b439f8c2b1328bf888937287a07c269f4d32d3ffcf2e64b88aa6104384e9fc1b1b9dee0eaa285f2efed1b81f2fb6399843f9b64c"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xdf}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x2}, 0x40)
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r1, 0x4)

353.103053ms ago: executing program 4 (id=4408):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f00000001c0), 0x4)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4)

209.104991ms ago: executing program 3 (id=4409):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x54, r2, 0x4b35c65e9956e69f, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x9b}, {0xc}}]}, 0x54}}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x100000}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)

171.494521ms ago: executing program 0 (id=4410):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0xffffbbff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x14)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "00000000e8460000ffffffff00"}}}]}, 0x48}}, 0x0)
listen(r5, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r9, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28)
r11 = socket$kcm(0x10, 0x2, 0x4)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000240)={<r12=>r1, &(0x7f00000000c0)='r-*\x00', 0x0, &(0x7f0000000180)={@_ha_fsid={[0x6, 0x6]}, {0x6, 0x6, 0x6, 0x7f}}, 0x2, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x8})
sendmsg$nl_crypto(r12, &(0x7f0000000480)={0xfffffffffffffffc, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@getstat={0xe0, 0x15, 0x1, 0x70bd2a, 0x25dfdbff, {{'drbg_nopr_sha1\x00'}, '\x00', '\x00', 0x0, 0x2400}, ["", "", "", "", "", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x40081)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040)

0s ago: executing program 3 (id=4411):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)={0x114, 0x30, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r3)
ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8)
ioctl$TUNSETOWNER(r3, 0x400454cc, r4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62)

kernel console output (not intermixed with test programs):

][T16005] batman_adv: batadv0: Interface activated: batadv_slave_1
[  374.164610][   T33] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.201942][   T33] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.313157][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2917'.
[  374.318052][T16568] syzkaller0: entered promiscuous mode
[  374.365664][T16568] syzkaller0: entered allmulticast mode
[  374.462125][T16568] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2918'.
[  374.492018][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.525207][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.562420][ T7493] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.625105][  T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.633761][ T7493] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.648826][  T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.973476][T16604] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2796'.
[  374.991213][T16605] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2796'.
[  375.176779][T16597] syzkaller1: entered promiscuous mode
[  375.194887][T16597] syzkaller1: entered allmulticast mode
[  375.417363][T16616] bond9: left allmulticast mode
[  375.449674][T16616] bond9: left promiscuous mode
[  375.488325][T16616] bridge0: port 3(bond9) entered disabled state
[  375.566043][T16616] bridge_slave_1: left allmulticast mode
[  375.587668][T16616] bridge_slave_1: left promiscuous mode
[  375.594204][T16616] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.609433][T16616] bridge_slave_0: left allmulticast mode
[  375.620058][T16634] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2931'.
[  375.627207][T16616] bridge_slave_0: left promiscuous mode
[  375.641004][T16616] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.470426][T16666] xt_hashlimit: size too large, truncated to 1048576
[  377.279676][T16711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.395043][T16711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.468722][T16711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.527609][T16711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.614271][T16711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.676489][T16711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.724139][T16711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.796763][T16711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.881265][T16711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.978214][T16711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.126563][  T134] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x9e
[  378.327576][ T5274] veth1_macvtap: entered promiscuous mode
[  378.663770][T16772] netlink: 'syz.0.2961': attribute type 2 has an invalid length.
[  378.716193][T16777] netlink: 'syz.0.2961': attribute type 2 has an invalid length.
[  378.775430][T16783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2962'.
[  378.808301][  T134] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  378.855759][T16783] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2962'.
[  378.913348][T16778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  379.247573][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  379.259777][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  379.272891][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  379.290576][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  379.306171][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  379.713118][T16821] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2969'.
[  379.932498][T16833] netlink: 'syz.2.2972': attribute type 12 has an invalid length.
[  380.469609][T16861] �x9�: renamed from bridge_slave_0
[  381.382156][ T5613] Bluetooth: hci4: command tx timeout
[  381.422953][T16803] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.430320][T16803] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.438405][T16803] bridge_slave_0: entered allmulticast mode
[  381.439250][T16903] netlink: 'syz.2.2987': attribute type 29 has an invalid length.
[  381.451384][T16803] bridge_slave_0: entered promiscuous mode
[  381.463489][T16803] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.470926][T16803] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.478860][T16803] bridge_slave_1: entered allmulticast mode
[  381.488950][T16803] bridge_slave_1: entered promiscuous mode
[  381.587932][T16803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.621213][T16803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.700188][T16803] team0: Port device team_slave_0 added
[  381.728660][T16803] team0: Port device team_slave_1 added
[  381.827775][T16803] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.843610][T16803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.871563][T16803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.887380][T16803] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.894837][T16803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.923140][T16803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.047825][T16803] hsr_slave_0: entered promiscuous mode
[  382.055484][T16803] hsr_slave_1: entered promiscuous mode
[  382.068804][T16803] debugfs: 'hsr0' already exists in 'hsr'
[  382.076020][T16935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2995'.
[  382.079278][T16803] Cannot create hsr debugfs directory
[  382.103046][T16935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2995'.
[  382.263312][T16940] IPVS: ip_vs_edit_dest(): server weight less than zero
[  382.390069][T16944] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2999'.
[  382.469754][T16947] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2999'.
[  382.604316][T16952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3002'.
[  382.613672][T16952] net_ratelimit: 25 callbacks suppressed
[  382.613689][T16952] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  382.709468][T16803] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  382.745267][T16803] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.961377][T16968] netlink: 'syz.3.3007': attribute type 3 has an invalid length.
[  382.996663][T16803] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  383.014851][T16803] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.059471][T16968] netlink: 81 bytes leftover after parsing attributes in process `syz.3.3007'.
[  383.162859][T16971] 8021q: adding VLAN 0 to HW filter on device bond15
[  383.226565][T16803] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  383.238406][T16803] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.245445][T16967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3006'.
[  383.462706][ T5613] Bluetooth: hci4: command tx timeout
[  383.647993][T16986] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106
[  383.929507][T16996] netlink: 'syz.3.3015': attribute type 3 has an invalid length.
[  383.967260][T16996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3015'.
[  384.009840][T16996] netlink: 'syz.3.3015': attribute type 3 has an invalid length.
[  384.033497][T16996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3015'.
[  384.056450][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3015'.
[  384.105535][T17003] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  384.214966][T17010] netlink: 'syz.1.3021': attribute type 2 has an invalid length.
[  384.216341][T17011] netlink: 'syz.1.3021': attribute type 2 has an invalid length.
[  384.226746][T17010] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3021'.
[  384.241785][T17011] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3021'.
[  384.267752][T17007] bond16: option packets_per_slave: invalid value (18446744073709551615)
[  384.276545][T17007] bond16: option packets_per_slave: allowed values 0 - 65535
[  384.287132][T17007] bond16 (unregistering): Released all slaves
[  384.543881][T17028] netlink: 'syz.4.3023': attribute type 2 has an invalid length.
[  384.560864][T17028] : entered promiscuous mode
[  384.789406][T17039] netlink: 'syz.4.3027': attribute type 2 has an invalid length.
[  385.542823][ T5613] Bluetooth: hci4: command tx timeout
[  386.771145][T16992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  386.784210][T16803] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  386.836605][T16803] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  386.847383][T16803] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  386.911550][T16803] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  386.937913][T16803] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  386.996102][T16803] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  387.019119][T16803] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  387.058445][T16803] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  387.079489][T17077] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3034'.
[  387.346904][T16803] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.430273][T16803] 8021q: adding VLAN 0 to HW filter on device team0
[  387.465205][  T134] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.472496][  T134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.492866][  T134] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.500098][  T134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.627461][ T5613] Bluetooth: hci4: command tx timeout
[  388.706950][T17157] netlink: 'syz.4.3049': attribute type 2 has an invalid length.
[  388.738166][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3049'.
[  388.809879][T17162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3051'.
[  388.841868][T17166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3052'.
[  388.872760][T17166] xfrm1: entered promiscuous mode
[  388.877984][T17166] xfrm1: entered allmulticast mode
[  388.887355][T17166] ip_tables: iptables: counters copy to user failed while replacing table
[  388.904642][T16803] 8021q: adding VLAN 0 to HW filter on device batadv0
[  388.940164][T17162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3051'.
[  389.095682][T17170] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  389.138723][T16803] veth0_vlan: entered promiscuous mode
[  389.183323][T16803] veth1_vlan: entered promiscuous mode
[  389.189759][T17170] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  389.269386][T17170] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  389.365822][T16803] veth0_macvtap: entered promiscuous mode
[  389.399786][T17170] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  389.420120][T16803] veth1_macvtap: entered promiscuous mode
[  389.506430][T17170] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  389.517791][T16803] batman_adv: batadv0: Interface activated: batadv_slave_0
[  389.588614][T16803] batman_adv: batadv0: Interface activated: batadv_slave_1
[  389.674733][ T7492] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.713219][ T7492] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.742861][T17197] sch_tbf: burst 0 is lower than device lo mtu (81) !
[  389.794270][ T8413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.813266][ T8413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.079857][ T8413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.100895][ T8413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.178892][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.208071][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.437333][T17189] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  390.449373][T17189] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  390.790454][T17234] bond0: (slave bond_slave_1): Releasing backup interface
[  391.211049][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  391.236067][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  391.247280][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  391.257374][T17247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3073'.
[  391.268449][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  391.280335][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  391.638686][T17265] macvtap0: entered allmulticast mode
[  391.665250][T17265] veth0_macvtap: entered allmulticast mode
[  391.749796][T17265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3075'.
[  392.344281][T17299] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  392.928017][T17323] netlink: 'syz.4.3088': attribute type 11 has an invalid length.
[  392.948318][T17327] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  393.184337][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3091'.
[  393.207500][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3091'.
[  393.382242][ T5629] Bluetooth: hci3: command tx timeout
[  393.496962][T17359] netlink: 'syz.0.3096': attribute type 1 has an invalid length.
[  393.696354][T17371] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3099'.
[  393.727915][T17371] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3099'.
[  393.871011][T17382] netlink: 'syz.4.3102': attribute type 28 has an invalid length.
[  393.935090][T17382] netlink: 'syz.4.3102': attribute type 3 has an invalid length.
[  393.971360][T17382] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3102'.
[  394.245254][T17246] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.254031][T17246] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.261444][T17246] bridge_slave_0: entered allmulticast mode
[  394.274758][T17246] bridge_slave_0: entered promiscuous mode
[  394.290293][T17246] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.307788][T17246] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.323466][T17246] bridge_slave_1: entered allmulticast mode
[  394.360318][T17246] bridge_slave_1: entered promiscuous mode
[  394.495671][T17246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.512898][T17246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.696369][T17246] team0: Port device team_slave_0 added
[  394.729742][T17246] team0: Port device team_slave_1 added
[  394.886957][T17246] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.919008][T17246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.973079][T17246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  395.047876][T17246] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.076879][T17246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  395.157321][T17246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.229906][T17417] netlink: 'syz.3.3113': attribute type 22 has an invalid length.
[  395.289020][T17417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3113'.
[  395.461999][ T5629] Bluetooth: hci3: command tx timeout
[  395.696986][T17436] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.710819][T17436] 8021q: adding VLAN 0 to HW filter on device team0
[  395.726022][T17436] 8021q: adding VLAN 0 to HW filter on device batadv0
[  395.864062][T17436] 8021q: adding VLAN 0 to HW filter on device bond1
[  395.888257][T17436] 8021q: adding VLAN 0 to HW filter on device bond4
[  395.913663][T17436] 8021q: adding VLAN 0 to HW filter on device eth0
[  395.924490][T17436] 8021q: adding VLAN 0 to HW filter on device eth1
[  395.940696][T17436] 8021q: adding VLAN 0 to HW filter on device eth2
[  395.953772][T17436] 8021q: adding VLAN 0 to HW filter on device eth3
[  395.994527][T17436] 8021q: adding VLAN 0 to HW filter on device bond11
[  396.017440][T17436] 8021q: adding VLAN 0 to HW filter on device bond13
[  396.029532][T12685] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  396.041361][T17436] 8021q: adding VLAN 0 to HW filter on device bond14
[  396.055701][T17417] netlink: 'syz.3.3113': attribute type 22 has an invalid length.
[  396.066195][T17417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3113'.
[  396.089096][T17246] hsr_slave_0: entered promiscuous mode
[  396.096005][T17246] hsr_slave_1: entered promiscuous mode
[  396.111136][T17246] debugfs: 'hsr0' already exists in 'hsr'
[  396.125757][T17246] Cannot create hsr debugfs directory
[  396.178398][T17458] netlink: 'syz.4.3121': attribute type 1 has an invalid length.
[  396.190211][T15692] bond12: (slave veth7): link status definitely up, 10000 Mbps full duplex
[  396.208915][T15692] bond12: (slave veth9): link status definitely up, 10000 Mbps full duplex
[  396.266474][T12687] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  396.305750][T17461] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  396.340675][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3122'.
[  396.437049][T17458] 8021q: adding VLAN 0 to HW filter on device bond16
[  396.489031][T17463] bond16: (slave geneve4): making interface the new active one
[  396.500380][T17463] bond16: (slave geneve4): Enslaving as an active interface with an up link
[  396.697230][ T8421] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  396.710710][T17481] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  396.862576][T17479] tipc: Started in network mode
[  396.879826][T17479] tipc: Node identity 6e7b2f605711, cluster identity 4711
[  396.902318][T17479] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.955935][T17499] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3130'.
[  396.979001][T17487] netlink: 'syz.4.3127': attribute type 1 has an invalid length.
[  397.004904][T17491] IPVS: persistence engine module ip_vs_pe_�
 not found
[  397.054110][T17503] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3130'.
[  397.107939][T17486] syzkaller0: entered promiscuous mode
[  397.143414][T17486] syzkaller0: entered allmulticast mode
[  397.165515][T17486] tipc: Resetting bearer <eth:syzkaller0>
[  397.235297][T17510] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3131'.
[  397.279125][T17487] 8021q: adding VLAN 0 to HW filter on device bond17
[  397.518125][T15692] tipc: Resetting bearer <eth:syzkaller0>
[  397.542150][ T5629] Bluetooth: hci3: command tx timeout
[  397.596541][T17478] tipc: Resetting bearer <eth:syzkaller0>
[  398.906451][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.916971][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.925784][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.625012][ T5629] Bluetooth: hci3: command tx timeout
[  399.642784][T17478] tipc: Disabling bearer <eth:syzkaller0>
[  399.656712][T17508] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  399.658309][T17510] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  399.700868][T12572] tipc: Node number set to 963260256
[  399.720367][  T188] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  400.160188][T17246] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  400.185497][T17246] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.239714][T17541] bond9: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  400.253519][T17541] bond9 (unregistering): Released all slaves
[  400.351986][T12572] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  400.467623][T17566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3144'.
[  400.496597][T17566] openvswitch: netlink: Missing key (keys=c0, expected=100)
[  400.515537][T17246] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  400.541471][T17246] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.710684][T17561] syzkaller0: entered promiscuous mode
[  400.717423][T17561] syzkaller0: entered allmulticast mode
[  400.726977][   T12] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  400.755569][T17577] netlink: ct_mark mask cannot be 0
[  400.760981][T17577] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.789492][T17246] bond0: (slave netdevsim1): Releasing backup interface
[  400.802165][T17246] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  400.813718][T17246] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.903376][    C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  403.104387][T17246] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode
[  403.135015][T17246] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  403.174036][T17246] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.259732][T17599] netlink: 'syz.1.3153': attribute type 21 has an invalid length.
[  403.301553][T17599] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3153'.
[  403.337001][T17601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3154'.
[  403.362095][T17605] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3155'.
[  403.373790][T17599] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3153'.
[  403.406006][T17605] netlink: 'syz.3.3155': attribute type 4 has an invalid length.
[  403.502034][T17609] xt_connbytes: Forcing CT accounting to be enabled
[  403.509177][T17609] xt_CT: You must specify a L4 protocol and not use inversions on it
[  403.548128][T17604] bond18 (unregistering): Released all slaves
[  403.579349][T17617] netlink: 'syz.0.3157': attribute type 1 has an invalid length.
[  403.710845][T17618] veth3: entered allmulticast mode
[  403.727861][T17618] bond1: (slave veth3): Enslaving as an active interface with a down link
[  403.740974][   T59] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  403.749719][T17622] sctp: [Deprecated]: syz.1.3159 (pid 17622) Use of struct sctp_assoc_value in delayed_ack socket option.
[  403.749719][T17622] Use struct sctp_sack_info instead
[  403.767518][   T59] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  403.831292][T17612] macvlan2: entered promiscuous mode
[  403.841554][T17612] macvlan2: entered allmulticast mode
[  403.869940][T17612] bond1: entered promiscuous mode
[  403.901037][T17612] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  403.909397][T17612] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  403.942457][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.951353][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.960189][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.977161][T17612] bond1: left promiscuous mode
[  404.021404][T17624] tipc: Started in network mode
[  404.027953][T17624] tipc: Node identity ac14140f, cluster identity 4711
[  404.036784][T17624] tipc: New replicast peer: 255.255.255.255
[  404.044181][T17624] tipc: Enabled bearer <udp:syz2>, priority 10
[  404.113497][T12577] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  404.257837][T17624] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3160'.
[  404.272318][T17637] Bluetooth: hci0: unsupported parameter 5135
[  404.279938][T17637] Bluetooth: hci0: unsupported parameter 8192
[  404.300378][T17637] Bluetooth: hci0: unsupported parameter 5135
[  404.309091][T17637] Bluetooth: hci0: unsupported parameter 8192
[  404.560608][T17246] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  404.612980][T17246] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  404.631262][T17246] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  404.659254][T17246] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  404.715532][T17246] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  404.745763][T17246] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  404.769635][T17246] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  404.810766][T17246] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  404.894827][T17671] netlink: 'syz.3.3170': attribute type 1 has an invalid length.
[  405.087906][T17679] netlink: 'syz.0.3172': attribute type 3 has an invalid length.
[  405.119153][T17679] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3172'.
[  405.161810][T12572] tipc: Node number set to 2886997007
[  405.200234][T17246] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.266935][T17246] 8021q: adding VLAN 0 to HW filter on device team0
[  405.300340][ T8421] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.307577][ T8421] bridge0: port 1(bridge_slave_0) entered forwarding state
[  405.398676][  T134] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.405928][  T134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  405.630641][T17699] netlink: 'syz.4.3176': attribute type 1 has an invalid length.
[  405.663056][T17699] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3176'.
[  405.734637][T17700] bond18: entered promiscuous mode
[  405.774171][T17692] syzkaller1: entered promiscuous mode
[  405.795533][T17692] syzkaller1: entered allmulticast mode
[  406.180127][T17729] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3183'.
[  406.196289][T17729] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3183'.
[  406.215615][T17731] vlan0: entered promiscuous mode
[  406.220978][T17731] vlan0: entered allmulticast mode
[  406.228569][T17731] veth0_vlan: entered allmulticast mode
[  406.859448][T17768] netlink: 'syz.1.3191': attribute type 1 has an invalid length.
[  406.878930][T17768] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3191'.
[  406.937040][T17246] 8021q: adding VLAN 0 to HW filter on device batadv0
[  407.105161][T17246] veth0_vlan: entered promiscuous mode
[  407.145432][T17246] veth1_vlan: entered promiscuous mode
[  407.354111][T17246] veth0_macvtap: entered promiscuous mode
[  407.387180][T17246] veth1_macvtap: entered promiscuous mode
[  407.459286][T17246] batman_adv: batadv0: Interface activated: batadv_slave_0
[  407.508952][T17246] batman_adv: batadv0: Interface activated: batadv_slave_1
[  407.592924][ T7489] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.614968][ T7489] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.655597][  T134] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.697541][  T134] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.931128][  T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.970500][  T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.022110][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  408.059578][  T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.083432][  T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.517876][T17819] __nla_validate_parse: 2 callbacks suppressed
[  408.517897][T17819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3205'.
[  408.588775][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3205'.
[  408.598670][T17825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3205'.
[  409.054743][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  409.070609][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  409.082998][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  409.101497][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  409.109804][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  409.302304][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.311251][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.321554][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.330488][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.385705][    C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  409.476305][T17867] netlink: 'syz.4.3215': attribute type 1 has an invalid length.
[  409.508536][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3215'.
[  409.583234][T17867] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  409.981473][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3217'.
[  410.027602][T17886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  410.136119][T17897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3221'.
[  410.904350][T17936] netlink: 'syz.2.3230': attribute type 1 has an invalid length.
[  410.976570][T17936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3230'.
[  410.993720][T17935] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  411.012894][T17936] bridge0: entered promiscuous mode
[  411.030871][T17936] bridge0: entered allmulticast mode
[  411.044380][T17935] netlink: 'syz.0.3231': attribute type 1 has an invalid length.
[  411.143979][ T5613] Bluetooth: hci2: command tx timeout
[  411.285131][T17952] netlink: 'syz.0.3235': attribute type 1 has an invalid length.
[  411.549328][T17952] veth5: entered allmulticast mode
[  411.668918][T17842] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.678903][T17842] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.686516][T17842] bridge_slave_0: entered allmulticast mode
[  411.696133][T17842] bridge_slave_0: entered promiscuous mode
[  411.710919][T17842] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.718547][T17842] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.726033][T17842] bridge_slave_1: entered allmulticast mode
[  411.734456][T17842] bridge_slave_1: entered promiscuous mode
[  411.910298][T17842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  411.925711][T17987] netlink: 'syz.1.3244': attribute type 4 has an invalid length.
[  411.935391][T17987] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3244'.
[  411.949896][T17842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  411.970027][T17988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3245'.
[  412.005161][T17987] .`: renamed from bond0 (while UP)
[  412.126492][T17842] team0: Port device team_slave_0 added
[  412.159958][T17842] team0: Port device team_slave_1 added
[  412.266970][T17842] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.292318][T17842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  412.361010][T17842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  412.409274][T17842] batman_adv: batadv0: Adding interface: batadv_slave_1
[  412.437816][T17842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  412.522120][T17842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  412.625649][T18018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3253'.
[  412.766092][T17842] hsr_slave_0: entered promiscuous mode
[  412.793849][T17842] hsr_slave_1: entered promiscuous mode
[  412.813663][T17842] debugfs: 'hsr0' already exists in 'hsr'
[  412.831213][T17842] Cannot create hsr debugfs directory
[  413.097766][T18034] 8021q: adding VLAN 0 to HW filter on device bond0
[  413.223789][ T5613] Bluetooth: hci2: command tx timeout
[  413.361070][T17842] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.375086][T17842] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.394232][T17842] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  413.521031][T17842] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.554462][T17842] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.570578][T17842] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  413.698301][T17842] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.742203][T17842] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.770792][T17842] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  413.789354][T18057] netlink: 'syz.2.3267': attribute type 4 has an invalid length.
[  413.823015][T18057] netlink: 'syz.2.3267': attribute type 4 has an invalid length.
[  413.844915][T18059] vlan0: entered promiscuous mode
[  413.851403][T18059] vlan0: entered allmulticast mode
[  413.857042][T18059] veth0_vlan: entered allmulticast mode
[  413.902897][T17842] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.922936][T17842] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.933541][T17842] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  414.244406][T18075] netlink: 'syz.0.3273': attribute type 1 has an invalid length.
[  414.423189][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.423889][T18075] 8021q: adding VLAN 0 to HW filter on device bond2
[  414.436979][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.447027][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.640925][T18089] Cannot find map_set index 135 as target
[  414.681385][T18082] bond2: (slave geneve2): making interface the new active one
[  414.698860][T18082] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  414.893991][T18097] __nla_validate_parse: 1 callbacks suppressed
[  414.894009][T18097] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3280'.
[  414.933951][T17842] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  414.983801][T17842] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  415.002717][T17842] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  415.051304][T17842] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  415.076045][T17842] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  415.121577][T17842] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  415.156433][T17842] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  415.193655][T17842] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  415.302269][ T5629] Bluetooth: hci2: command tx timeout
[  415.361089][ T5613] block nbd2: Receive control failed (result -32)
[  415.584629][T18132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3289'.
[  415.612327][T18132] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3289'.
[  415.639595][T17842] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.720640][T17842] 8021q: adding VLAN 0 to HW filter on device team0
[  415.817991][ T7493] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.825234][ T7493] bridge0: port 1(bridge_slave_0) entered forwarding state
[  415.859529][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.866832][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  415.952436][T18146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3295'.
[  416.012405][T18147] netlink: 'syz.1.3295': attribute type 29 has an invalid length.
[  416.056260][T18147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3295'.
[  416.150971][T18150] bridge0: entered allmulticast mode
[  416.656781][ T3103] hid-generic 0005:046D:5502.0002: item fetching failed at offset 0/1
[  416.681574][ T3103] hid-generic 0005:046D:5502.0002: probe with driver hid-generic failed with error -22
[  416.724562][T18181] netlink: 'syz.2.3305': attribute type 1 has an invalid length.
[  417.062169][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  417.249276][T18204] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3308'.
[  417.274854][T18204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3308'.
[  417.381951][ T5613] Bluetooth: hci2: command tx timeout
[  417.627549][T18218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3310'.
[  417.678750][T17842] 8021q: adding VLAN 0 to HW filter on device batadv0
[  417.705574][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.714040][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.722494][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.730868][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.739345][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.747769][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.756240][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.853591][T18220] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  417.866816][T18220] bond3 (unregistering): Released all slaves
[  418.069031][T17842] veth0_vlan: entered promiscuous mode
[  418.096773][T17842] veth1_vlan: entered promiscuous mode
[  418.199544][T17842] veth0_macvtap: entered promiscuous mode
[  418.245158][T17842] veth1_macvtap: entered promiscuous mode
[  418.276311][T17842] batman_adv: batadv0: Interface activated: batadv_slave_0
[  418.323969][T17842] batman_adv: batadv0: Interface activated: batadv_slave_1
[  418.395382][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3319'.
[  418.417772][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.442119][T18246] netlink: 'syz.2.3319': attribute type 30 has an invalid length.
[  418.453461][T18246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3319'.
[  418.457151][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.488845][T18251] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  418.525171][T18245] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  418.569869][T18252] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  418.614847][   T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.652545][ T8413] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.766409][T18257] sctp: [Deprecated]: syz.2.3321 (pid 18257) Use of int in maxseg socket option.
[  418.766409][T18257] Use struct sctp_assoc_value instead
[  418.837119][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.845444][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.926823][T18264] netlink: 'syz.1.3325': attribute type 13 has an invalid length.
[  418.935049][T18264] netlink: 'syz.1.3325': attribute type 17 has an invalid length.
[  419.164447][T18264] 8021q: adding VLAN 0 to HW filter on device .`
[  419.261069][T18264] vlan0: left promiscuous mode
[  419.269488][T18264] vlan0: left allmulticast mode
[  419.274940][T18264] veth0_vlan: left allmulticast mode
[  419.448398][ T8413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.480092][ T8413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.529362][ T8421] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  419.809971][T18298] nbd: must specify an index to disconnect
[  420.180137][T18311] __nla_validate_parse: 2 callbacks suppressed
[  420.180156][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3337'.
[  420.184457][    C0] net_ratelimit: 40 callbacks suppressed
[  420.184507][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.209957][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.218880][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.293606][T18308] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3336'.
[  420.435745][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  420.457640][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  420.468692][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  420.480990][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  420.491460][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  421.160565][T18335] netlink: 'syz.3.3339': attribute type 5 has an invalid length.
[  421.570324][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3344'.
[  421.923657][T18372] netlink: 'syz.1.3349': attribute type 1 has an invalid length.
[  421.932061][T18373] netlink: 'syz.1.3349': attribute type 1 has an invalid length.
[  422.545439][T18379] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  422.597237][ T5613] Bluetooth: hci0: command tx timeout
[  422.830552][T18405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3354'.
[  422.861014][T18405] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3354'.
[  422.941105][T18390] syzkaller0: entered promiscuous mode
[  422.962025][T18390] syzkaller0: entered allmulticast mode
[  423.078133][T18415] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  423.243957][T18318] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.252224][T18318] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.259499][T18318] bridge_slave_0: entered allmulticast mode
[  423.268596][T18318] bridge_slave_0: entered promiscuous mode
[  423.298235][T18318] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.315591][T18318] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.331386][T18318] bridge_slave_1: entered allmulticast mode
[  423.339736][T18318] bridge_slave_1: entered promiscuous mode
[  423.349112][T18420] syzkaller0: entered promiscuous mode
[  423.355564][T18420] syzkaller0: entered allmulticast mode
[  423.382052][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  423.481870][T18318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  423.491256][T18427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3359'.
[  423.504844][T18318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  423.623106][T18318] team0: Port device team_slave_0 added
[  423.650327][T18318] team0: Port device team_slave_1 added
[  423.823001][T18318] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.843094][T18318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  423.901815][T18318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.922351][T18318] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.945688][T18318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.017293][T18318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.101819][ T5613] Bluetooth: hci4: command tx timeout
[  424.248892][T18318] hsr_slave_0: entered promiscuous mode
[  424.277103][T18318] hsr_slave_1: entered promiscuous mode
[  424.294635][T18318] debugfs: 'hsr0' already exists in 'hsr'
[  424.312573][T18318] Cannot create hsr debugfs directory
[  424.324805][T18466] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3369'.
[  424.483174][T18469] netlink: 'syz.0.3370': attribute type 1 has an invalid length.
[  424.517495][T18472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  424.550565][T18469] 8021q: adding VLAN 0 to HW filter on device bond3
[  424.585311][T18474] bond3: (slave veth0_to_bond): making interface the new active one
[  424.618984][T18474] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  424.648192][T18472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3372'.
[  424.662033][ T5613] Bluetooth: hci0: command tx timeout
[  424.685194][T18469] bond3: entered promiscuous mode
[  424.690282][T18469] veth0_to_bond: entered promiscuous mode
[  424.697545][T18469] bond3: entered allmulticast mode
[  424.703833][T18469] veth0_to_bond: entered allmulticast mode
[  424.741956][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  424.753507][T18474] macvlan2: entered promiscuous mode
[  424.760471][T18474] macvlan2: entered allmulticast mode
[  424.783226][T18474] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  424.807735][T18474] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond
[  424.898938][T18483] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3374'.
[  424.975393][T18484] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3374'.
[  425.053853][T18318] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  425.070526][T18318] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.097943][T18318] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  425.146584][T18483] gretap0: entered promiscuous mode
[  425.165798][T18484] 0��{X��: renamed from gretap0
[  425.180908][T18484] 0��{X��: left promiscuous mode
[  425.192172][T18484] 0��{X��: entered allmulticast mode
[  425.200110][T18484] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  425.236090][T18495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3377'.
[  425.345234][T18318] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  425.356686][T18318] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.367412][T18318] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  425.476443][T18497] lo speed is unknown, defaulting to 1000
[  425.579142][T18505] atomic_op ffff8880735c59e0 conn xmit_atomic 0000000000000000
[  425.593011][T18318] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  425.608475][T18318] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.619869][T18318] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  425.650822][T18497] lo speed is unknown, defaulting to 1000
[  425.673210][T18497] lo speed is unknown, defaulting to 1000
[  425.797030][T18318] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  425.828513][T18318] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.864612][T18318] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  425.942341][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.951315][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.960191][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.012003][T18516] team0: Device gtp1 is up. Set it down before adding it as a team port
[  426.511446][T18318] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  426.537494][T18527] xt_hl: Unknown Hop Limit match mode: 206
[  426.565928][T18318] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  426.590193][T18318] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  426.612350][T18497] infiniband syz1: set active
[  426.623761][T18318] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  426.630996][T18497] infiniband syz1: added lo
[  426.645733][T18318] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  426.655715][T18497] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  426.662155][    C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  426.678938][ T5735] lo speed is unknown, defaulting to 1000
[  426.687166][T18497] infiniband syz1: Couldn't open port 1
[  426.693547][T18497] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  426.696181][T18529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3388'.
[  426.709621][T18497] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  426.739817][T18318] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  426.748938][ T5613] Bluetooth: hci0: command tx timeout
[  426.760275][T18497] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  426.796186][T18318] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  426.808468][T18318] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  426.889536][T18497] RDS/IB: syz1: added
[  426.909735][T18497] smc: adding ib device syz1 with port count 1
[  426.937070][T18497] smc:    ib device syz1 port 1 has no pnetid
[  426.950059][T18318] 8021q: adding VLAN 0 to HW filter on device bond0
[  426.979456][T12687] lo speed is unknown, defaulting to 1000
[  426.999416][T18497] lo speed is unknown, defaulting to 1000
[  427.016675][T18318] 8021q: adding VLAN 0 to HW filter on device team0
[  427.053424][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.060677][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  427.120794][ T7489] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.129140][ T7489] bridge0: port 2(bridge_slave_1) entered forwarding state
[  427.237274][T18544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3391'.
[  427.421563][T18554] netlink: 'syz.1.3393': attribute type 2 has an invalid length.
[  427.460586][T18554] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3393'.
[  427.580138][T18556] team0 (unregistering): Port device team_slave_0 removed
[  427.634922][T18556] team0 (unregistering): Port device team_slave_1 removed
[  427.656097][T18554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3393'.
[  427.811459][T18497] lo speed is unknown, defaulting to 1000
[  427.881248][T18568] xt_hashlimit: size too large, truncated to 1048576
[  428.235691][    C0] vcan0: j1939_tp_rxtimer: 0xffff888065212000: rx timeout, send abort
[  428.509970][T18497] lo speed is unknown, defaulting to 1000
[  428.639854][T18318] 8021q: adding VLAN 0 to HW filter on device batadv0
[  428.735887][    C0] vcan0: j1939_tp_rxtimer: 0xffff888065212800: rx timeout, send abort
[  428.744639][    C0] vcan0: j1939_tp_rxtimer: 0xffff888065212000: abort rx timeout. Force session deactivation
[  428.825338][ T5613] Bluetooth: hci0: command tx timeout
[  428.944677][T18604] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3403'.
[  429.065997][T18608] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3404'.
[  429.244237][    C0] vcan0: j1939_tp_rxtimer: 0xffff888065212800: abort rx timeout. Force session deactivation
[  429.272298][T18620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3407'.
[  429.337248][T18620] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3407'.
[  429.416005][T18628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3409'.
[  429.455145][T18497] lo speed is unknown, defaulting to 1000
[  429.741217][T18318] veth0_vlan: entered promiscuous mode
[  429.759245][T18318] veth1_vlan: entered promiscuous mode
[  429.860516][T18318] veth0_macvtap: entered promiscuous mode
[  429.909049][T18318] veth1_macvtap: entered promiscuous mode
[  429.917862][T18640] netlink: 'syz.2.3413': attribute type 4 has an invalid length.
[  429.968600][T18318] batman_adv: batadv0: Interface activated: batadv_slave_0
[  430.036580][T18318] batman_adv: batadv0: Interface activated: batadv_slave_1
[  430.084692][ T7491] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.112296][ T7491] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.154351][T18497] lo speed is unknown, defaulting to 1000
[  430.183657][T15694] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.253976][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.598021][ T7491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.623326][ T7491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.753179][ T7489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.785874][ T7489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.836126][T18666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3422'.
[  430.862540][T18669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3424'.
[  431.040467][T18673] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3334'.
[  431.062395][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.071373][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.080237][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.115692][T18497] lo speed is unknown, defaulting to 1000
[  431.142798][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  431.355674][T18687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3428'.
[  431.524252][T18693] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3432'.
[  431.566580][T18693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3432'.
[  431.619914][T18695] netlink: 'syz.1.3432': attribute type 83 has an invalid length.
[  432.039587][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3436'.
[  432.224244][T18497] lo speed is unknown, defaulting to 1000
[  432.663955][T18709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  432.674474][T18497] lo speed is unknown, defaulting to 1000
[  432.778103][T18744] netlink: 'syz.2.3443': attribute type 21 has an invalid length.
[  432.789186][T18744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3443'.
[  432.874342][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3443'.
[  432.932083][ T7491] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  432.953006][ T7491] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  432.983756][ T7491] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  433.022323][ T7489] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  433.415516][T18764] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3445'.
[  433.479226][T18497] lo speed is unknown, defaulting to 1000
[  433.703802][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  433.882043][T18780] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  433.987523][T18780] bond2 (unregistering): Released all slaves
[  434.526123][T18798] netlink: 'syz.4.3459': attribute type 64 has an invalid length.
[  434.541812][T18813] netlink: 'syz.2.3461': attribute type 10 has an invalid length.
[  434.590307][T18813] team0: Port device dummy0 added
[  434.619533][T18808] bridge0: port 2(bridge_slave_1) entered listening state
[  434.676195][T18808] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.794339][T18823] netlink: 'syz.0.3463': attribute type 29 has an invalid length.
[  434.935085][T18834] ipt_REJECT: ECHOREPLY no longer supported.
[  435.009912][T18819] netlink: 'syz.3.3462': attribute type 5 has an invalid length.
[  435.358149][T18857] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified.
[  435.390178][T18857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.888437][T18880] __nla_validate_parse: 6 callbacks suppressed
[  435.888457][T18880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3481'.
[  435.946270][T18880] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3481'.
[  436.139102][T18895] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3486'.
[  436.165873][T18895] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3486'.
[  436.181952][ T5613] Bluetooth: hci4: command tx timeout
[  436.510707][T18912] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  436.758815][T18916] netlink: 'syz.2.3494': attribute type 12 has an invalid length.
[  436.823097][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.832017][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.834120][T18928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3497'.
[  436.840708][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.946166][T18933] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3499'.
[  437.130317][T18933] bond4 (unregistering): Released all slaves
[  437.187011][T18946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3501'.
[  437.244493][T18947] netlink: 'syz.4.3501': attribute type 29 has an invalid length.
[  437.265861][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3501'.
[  437.285280][T18946] netlink: 'syz.4.3501': attribute type 29 has an invalid length.
[  437.315853][T18946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3501'.
[  437.606193][T18965] netlink: 'syz.4.3507': attribute type 24 has an invalid length.
[  437.611496][T18925] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  437.887325][T18982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3512'.
[  438.063247][T18990] bond2: Invalid ad_actor_system MAC address.
[  438.101299][T18990] bond2: option ad_actor_system: invalid value (1)
[  438.141211][T18990] bond2 (unregistering): Released all slaves
[  438.687954][T19011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  438.718248][T18982] Bluetooth: MGMT ver 1.23
[  438.724102][T12577] lo speed is unknown, defaulting to 1000
[  439.060918][T19024] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  439.089322][T19024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  439.285276][T19001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  439.317375][T19036] netlink: 'syz.3.3527': attribute type 32 has an invalid length.
[  439.665125][T19058] veth0: entered promiscuous mode
[  439.741332][T19035] veth0: left promiscuous mode
[  440.073265][T19080] Bluetooth: ISO socket layer initialized
[  440.609569][T19116] 8021q: adding VLAN 0 to HW filter on device bond3
[  441.002798][T19136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  441.288709][T19147] __nla_validate_parse: 14 callbacks suppressed
[  441.288732][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3555'.
[  441.534158][T19150] pim6reg1: entered promiscuous mode
[  441.544476][T19150] pim6reg1: entered allmulticast mode
[  441.576458][T19161] sctp: [Deprecated]: syz.1.3559 (pid 19161) Use of int in maxseg socket option.
[  441.576458][T19161] Use struct sctp_assoc_value instead
[  441.630945][T19161] sctp: [Deprecated]: syz.1.3559 (pid 19161) Use of int in maxseg socket option.
[  441.630945][T19161] Use struct sctp_assoc_value instead
[  441.669528][T19161] sctp: [Deprecated]: syz.1.3559 (pid 19161) Use of int in maxseg socket option.
[  441.669528][T19161] Use struct sctp_assoc_value instead
[  441.690435][T19161] sctp: [Deprecated]: syz.1.3559 (pid 19161) Use of int in maxseg socket option.
[  441.690435][T19161] Use struct sctp_assoc_value instead
[  441.942547][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.951405][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.960266][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.986788][T19173] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  442.074261][T19185] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3564'.
[  442.115663][T19185] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3564'.
[  442.152882][T19191] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  442.330251][T19194] netlink: 576 bytes leftover after parsing attributes in process `syz.0.3566'.
[  442.395097][T19197] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3567'.
[  442.704988][T19218] netlink: 'syz.1.3571': attribute type 11 has an invalid length.
[  442.729720][T19218] netlink: 'syz.1.3571': attribute type 4 has an invalid length.
[  442.749313][T19218] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3571'.
[  442.950701][T19226] netlink: 'syz.0.3574': attribute type 32 has an invalid length.
[  442.958978][T19226] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3574'.
[  442.985793][T19226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3574'.
[  443.191795][T19241] IPv6: addrconf: prefix option has invalid lifetime
[  443.200472][T19241] IPv6: addrconf: prefix option has invalid lifetime
[  443.307955][T19247] netlink: 'syz.1.3580': attribute type 3 has an invalid length.
[  443.540577][T19262] netlink: 'syz.0.3585': attribute type 39 has an invalid length.
[  443.573080][T19258] bond2 (unregistering): Released all slaves
[  443.889379][T19277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3588'.
[  443.920282][T19278] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3589'.
[  444.043080][T19278] 8021q: VLANs not supported on gre0
[  444.106034][T19278] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  444.118591][T19291] netlink: 'syz.3.3592': attribute type 14 has an invalid length.
[  444.126952][T19291] netlink: 'syz.3.3592': attribute type 13 has an invalid length.
[  444.249869][T19297] xt_hashlimit: size too large, truncated to 1048576
[  444.267193][T19294] netlink: 'syz.4.3593': attribute type 1 has an invalid length.
[  444.305068][T19294] v: renamed from veth0_vlan (while UP)
[  444.463266][T19296] xt_hashlimit: size too large, truncated to 1048576
[  444.492208][T19307] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  444.556026][T19307] gretap0: entered promiscuous mode
[  444.592883][T19307] gretap0: entered allmulticast mode
[  445.079633][T19326] syzkaller0: entered promiscuous mode
[  445.113863][T19326] syzkaller0: entered allmulticast mode
[  445.248350][T19326] netlink: 'syz.4.3603': attribute type 83 has an invalid length.
[  445.620792][T19349] netlink: 'syz.2.3608': attribute type 10 has an invalid length.
[  445.872208][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  446.199055][T19377] x_tables: unsorted underflow at hook 2
[  446.492966][T19394] macvlan0: entered promiscuous mode
[  446.511282][T19394] macvlan0: entered allmulticast mode
[  446.524430][T19394] veth1_vlan: entered allmulticast mode
[  446.544834][T19395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  446.632697][T19395] xt_hashlimit: size too large, truncated to 1048576
[  447.012313][T19363] bond6: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms
[  447.049545][T19363] bond6: entered allmulticast mode
[  447.123272][T19410] bridge1: entered promiscuous mode
[  447.173543][T19410] bridge1: entered allmulticast mode
[  447.187908][T19410] bond6: (slave bridge1): Enslaving as an active interface with an up link
[  447.378695][T19429] __nla_validate_parse: 15 callbacks suppressed
[  447.378718][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3626'.
[  447.512848][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3626'.
[  447.529156][T19430] syzkaller0: entered promiscuous mode
[  447.542760][T19430] syzkaller0: entered allmulticast mode
[  447.702443][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.711335][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.720259][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.014887][T19445] can: request_module (can-proto-0) failed.
[  448.051102][T19449] TC_ACT_REPEAT abuse ?
[  448.073441][T19449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3632'.
[  448.520640][T19473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3639'.
[  448.730237][T19488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3643'.
[  448.778516][T19483] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3642'.
[  448.826524][T19483] netlink: 'syz.0.3642': attribute type 33 has an invalid length.
[  449.133505][T19500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3646'.
[  449.272805][T19505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3649'.
[  449.275666][T19506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3648'.
[  449.330303][T19509] netlink: Invalid conntrack helper
[  449.341017][T19509] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  449.441414][T19518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3652'.
[  450.123532][T19541] netlink: 'syz.4.3658': attribute type 1 has an invalid length.
[  450.702050][T19563] bond6: option xmit_hash_policy: invalid value (64)
[  450.730092][T19563] bond6 (unregistering): Released all slaves
[  450.793680][T19567] ovs-system: entered promiscuous mode
[  450.925489][T19577] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  451.354827][T19603] netlink: 'syz.0.3675': attribute type 10 has an invalid length.
[  451.414229][T19603] team0: Port device vlan0 added
[  451.442115][T19605] veth0_macvtap: entered allmulticast mode
[  451.448738][T19605] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  451.593703][T19612] x_tables: duplicate entry at hook 2
[  451.618800][T19616] IPv6: Can't replace route, no match found
[  451.643615][T19617] IPv6: Can't replace route, no match found
[  451.649773][T19616] IPv6: Can't replace route, no match found
[  451.666557][T19617] IPv6: Can't replace route, no match found
[  452.000043][   T33] IPVS: starting estimator thread 0...
[  452.106485][T19633] IPVS: using max 28 ests per chain, 67200 per kthread
[  452.127856][T19637] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  452.200812][T19638] openvswitch: netlink: Flow actions attr not present in new flow.
[  452.369366][T19649] netlink: 'syz.3.3694': attribute type 2 has an invalid length.
[  453.294241][T19696] xt_NFQUEUE: number of total queues is 0
[  453.326760][T19699] __nla_validate_parse: 16 callbacks suppressed
[  453.326788][T19699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3708'.
[  453.348275][T19701] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3709'.
[  453.364104][T19701] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.373628][T19701] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.472554][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.481476][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.490382][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.531414][T19702] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.538704][T19702] bridge0: port 2(bridge_slave_1) entered forwarding state
[  453.546258][T19702] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.553501][T19702] bridge0: port 1(bridge_slave_0) entered forwarding state
[  453.576112][T19702] bridge0: entered promiscuous mode
[  453.583550][T19702] bridge0: entered allmulticast mode
[  454.091500][T19734] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3718'.
[  454.133943][T19734] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3718'.
[  454.167224][T19735] x_tables: duplicate underflow at hook 2
[  454.261853][ T5629] Bluetooth: hci2: command 0x0405 tx timeout
[  454.281231][T19738] openvswitch: netlink: Missing valid actions attribute.
[  454.321154][T19738] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.425716][T12577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.498056][T19748] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3721'.
[  454.538209][T19749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3724'.
[  454.578013][T19751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  454.673987][T19758] netlink: 'syz.2.3724': attribute type 1 has an invalid length.
[  454.684422][T19758] netlink: 'syz.2.3724': attribute type 4 has an invalid length.
[  454.699001][T19758] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3724'.
[  454.755488][T19749] hsr_slave_1 (unregistering): left promiscuous mode
[  454.847597][T19766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3729'.
[  455.335705][T19782] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3736'.
[  455.370254][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3736'.
[  455.505698][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.115092][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.127146][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.339080][T19837] netlink: 'syz.4.3747': attribute type 1 has an invalid length.
[  456.849432][T19853] netlink: 'syz.3.3751': attribute type 2 has an invalid length.
[  457.047577][T19853] : entered promiscuous mode
[  457.337303][T19880] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  457.363502][T19880] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  457.394428][T19880] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  457.419740][T19880] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  457.443345][T19880] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  457.469123][T19880] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  457.494140][T19880] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  457.519255][T19880] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  457.544026][T19880] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  457.572768][T19880] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  457.620210][T19880] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms
[  457.630286][T19880] bond2: entered allmulticast mode
[  457.647134][T19880] bridge1: entered promiscuous mode
[  457.655972][T19880] bridge1: entered allmulticast mode
[  457.662164][T19880] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  457.878267][T19888] vlan3: entered promiscuous mode
[  458.582163][    C1] net_ratelimit: 6 callbacks suppressed
[  458.582180][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.596683][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.605368][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.664066][T12575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.143023][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.151359][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.549562][T19848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  459.704591][T12575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.865005][T19904] __nla_validate_parse: 41 callbacks suppressed
[  459.865025][T19904] netlink: 808 bytes leftover after parsing attributes in process `syz.1.3768'.
[  460.069554][T19914] netlink: 'syz.2.3770': attribute type 21 has an invalid length.
[  460.249006][T19922] syzkaller0: entered promiscuous mode
[  460.268698][T19922] syzkaller0: entered allmulticast mode
[  460.651129][T19946] netlink: 'syz.2.3783': attribute type 8 has an invalid length.
[  460.674300][T19941] ip_tables: iptables: counters copy to user failed while replacing table
[  460.686883][T19946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3783'.
[  460.702872][T19946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3783'.
[  460.713743][T19952] netlink: 'syz.2.3783': attribute type 10 has an invalid length.
[  460.737033][T19952] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  460.745890][T12577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.793406][T19951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3784'.
[  460.878613][T19963] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  460.999800][T19966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3787'.
[  461.108999][T19968] netlink: 'syz.2.3786': attribute type 1 has an invalid length.
[  461.156246][T19968] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  461.284452][T19936] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  461.406300][T19982] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3793'.
[  461.507886][T19988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3794'.
[  461.727343][T20000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  461.785734][T12575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.861896][    C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  461.974086][T20014] Bluetooth: hci0: unsupported parameter 5135
[  461.984692][T20014] Bluetooth: hci0: unsupported parameter 8192
[  461.999946][T20014] Bluetooth: hci0: unsupported parameter 5135
[  462.021245][T20014] Bluetooth: hci0: unsupported parameter 8192
[  462.395774][T20038] netlink: 'syz.1.3809': attribute type 4 has an invalid length.
[  462.509602][T20050] Bluetooth: hci0: unsupported parameter 5135
[  462.536043][T20050] Bluetooth: hci0: unsupported parameter 8192
[  462.546186][T20050] Bluetooth: hci0: unsupported parameter 5135
[  462.558622][T20050] Bluetooth: hci0: unsupported parameter 8192
[  462.596454][T20054] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3812'.
[  462.654893][T20054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3812'.
[  462.687984][T20050] netlink: 'syz.3.3812': attribute type 4 has an invalid length.
[  462.708656][ T7491] IPVS: starting estimator thread 0...
[  462.822401][T20060] IPVS: using max 25 ests per chain, 60000 per kthread
[  462.849631][T20066] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3817'.
[  462.975150][T20066] netlink: 'syz.3.3817': attribute type 10 has an invalid length.
[  463.020897][T20066] team0: Device vxcan1 is of different type
[  463.255523][T20081] netlink: 'syz.3.3822': attribute type 1 has an invalid length.
[  463.466202][T20081] 8021q: adding VLAN 0 to HW filter on device bond7
[  463.519764][T20086] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  463.591077][T20086] batman_adv: batadv0: Removing interface: batadv_slave_0
[  463.696371][T20086] bond7: (slave batadv_slave_0): Enslaving as a backup interface with an up link
[  463.726310][T20105] macvlan0: entered promiscuous mode
[  463.751780][T20104] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  463.760340][T20103] netlink: 'syz.4.3828': attribute type 8 has an invalid length.
[  463.842354][T20113] netlink: 'syz.2.3830': attribute type 83 has an invalid length.
[  463.863876][T12575] net_ratelimit: 12 callbacks suppressed
[  463.863895][T12575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.892664][T20115] netlink: 'syz.3.3831': attribute type 2 has an invalid length.
[  463.906197][T20115] netlink: 'syz.3.3831': attribute type 1 has an invalid length.
[  464.106182][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807b52c800: rx timeout, send abort
[  464.184388][T20127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  464.272644][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.281752][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.290630][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.443843][T20141] syzkaller1: entered promiscuous mode
[  464.458650][T20141] syzkaller1: entered allmulticast mode
[  464.606358][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804f925000: rx timeout, send abort
[  464.615428][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807b52c800: abort rx timeout. Force session deactivation
[  464.660106][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88804f925000: connection exists (fe ff). last cmd: 20
[  464.902803][T12685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.911014][T12685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.919529][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.928110][    C1] vcan0: j1939_tp_rxtimer: 0xffff888091097800: rx timeout, send abort
[  465.149764][T20168] __nla_validate_parse: 4 callbacks suppressed
[  465.149784][T20168] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3847'.
[  465.236604][T20171] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  465.257085][T20171] gretap1: entered promiscuous mode
[  465.270348][T20171] gretap1: entered allmulticast mode
[  465.436906][    C1] vcan0: j1939_tp_rxtimer: 0xffff888091097800: abort rx timeout. Force session deactivation
[  465.634362][   T30] audit: type=1107 audit(1787811630.299:11): pid=20188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  465.651137][T20195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3858'.
[  465.689527][   T30] audit: type=1107 audit(1787811630.299:12): pid=20188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  465.704347][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  465.945289][T12577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.193196][T20223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3867'.
[  466.343814][T12685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.405534][T20222] syzkaller1: entered promiscuous mode
[  466.425154][T20222] syzkaller1: entered allmulticast mode
[  466.820189][T20248] erspan0: entered promiscuous mode
[  466.860995][T20248] erspan0: entered allmulticast mode
[  466.877587][T20257] syz.2.3879: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  466.894741][T20257] CPU: 1 UID: 0 PID: 20257 Comm: syz.2.3879 Not tainted syzkaller #0 PREEMPT(full) 
[  466.894770][T20257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  466.894789][T20257] Call Trace:
[  466.894797][T20257]  <TASK>
[  466.894809][T20257]  dump_stack_lvl+0xe8/0x150
[  466.894851][T20257]  warn_alloc+0x24c/0x270
[  466.894886][T20257]  ? __pfx_warn_alloc+0x10/0x10
[  466.894911][T20257]  ? xskq_create+0x56/0x220
[  466.894934][T20257]  ? xsk_setsockopt+0x52a/0x960
[  466.894958][T20257]  ? do_syscall_64+0x166/0x520
[  466.894984][T20257]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.895024][T20257]  __vmalloc_node_range_noprof+0x12c/0x1730
[  466.895079][T20257]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  466.895114][T20257]  ? __kmalloc_cache_noprof+0x331/0x660
[  466.895141][T20257]  ? __kmalloc_cache_noprof+0x152/0x660
[  466.895167][T20257]  ? xskq_create+0x56/0x220
[  466.895194][T20257]  xskq_create+0x148/0x220
[  466.895219][T20257]  ? xsk_init_queue+0x8a/0xe0
[  466.895244][T20257]  xsk_init_queue+0x8a/0xe0
[  466.895271][T20257]  xsk_setsockopt+0x52a/0x960
[  466.895293][T20257]  ? __fget_files+0x2a/0x420
[  466.895323][T20257]  ? __pfx_xsk_setsockopt+0x10/0x10
[  466.895347][T20257]  ? __pfx_aa_sk_perm+0x10/0x10
[  466.895392][T20257]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  466.895413][T20257]  ? __pfx_xsk_setsockopt+0x10/0x10
[  466.895436][T20257]  do_sock_setsockopt+0x17c/0x1b0
[  466.895473][T20257]  __x64_sys_setsockopt+0x13d/0x1b0
[  466.895511][T20257]  do_syscall_64+0x166/0x520
[  466.895537][T20257]  ? trace_irq_disable+0x3b/0x140
[  466.895565][T20257]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.895587][T20257]  ? clear_bhb_loop+0x70/0xc0
[  466.895614][T20257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.895636][T20257] RIP: 0033:0x7f406ad9e0d9
[  466.895657][T20257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  466.895675][T20257] RSP: 002b:00007f406bd3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  466.895697][T20257] RAX: ffffffffffffffda RBX: 00007f406b025fa0 RCX: 00007f406ad9e0d9
[  466.895712][T20257] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  466.895725][T20257] RBP: 00007f406ae35024 R08: 0000000000000004 R09: 0000000000000000
[  466.895739][T20257] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  466.895752][T20257] R13: 00007f406b026038 R14: 00007f406b025fa0 R15: 00007fffaed6b288
[  466.895788][T20257]  </TASK>
[  466.895918][T20257] Mem-Info:
[  467.179469][T20257] active_anon:6333 inactive_anon:0 isolated_anon:0
[  467.179469][T20257]  active_file:3 inactive_file:43382 isolated_file:0
[  467.179469][T20257]  unevictable:0 dirty:75 writeback:0
[  467.179469][T20257]  slab_reclaimable:12411 slab_unreclaimable:168740
[  467.179469][T20257]  mapped:29434 shmem:576 pagetables:1597
[  467.179469][T20257]  sec_pagetables:0 bounce:0
[  467.179469][T20257]  kernel_misc_reclaimable:0
[  467.179469][T20257]  free:1251891 free_pcp:7846 free_cma:0
[  467.350567][T20257] Node 0 active_anon:25432kB inactive_anon:0kB active_file:12kB inactive_file:173312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117736kB dirty:296kB writeback:0kB shmem:2304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16400kB pagetables:6288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  467.490809][T20257] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:216kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  467.529398][T20257] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  467.563431][T20257] lowmem_reserve[]: 0 2488 2488 2488 2488
[  467.569656][T20257] Node 0 DMA32 free:1056688kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25332kB inactive_anon:0kB active_file:12kB inactive_file:173312kB unevictable:0kB writepending:296kB zspages:0kB present:3129332kB managed:2547792kB mlocked:0kB bounce:0kB free_pcp:32104kB local_pcp:16044kB free_cma:0kB
[  467.604708][T20257] lowmem_reserve[]: 0 0 0 0 0
[  467.614382][T20257] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:252kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  467.648859][T20257] lowmem_reserve[]: 0 0 0 0 0
[  467.654158][T20257] Node 1 Normal free:3935516kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:216kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  467.687750][T20257] lowmem_reserve[]: 0 0 0 0 0
[  467.709803][T20257] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  467.737733][T20257] Node 0 DMA32: 1274*4kB (UME) 681*8kB (UM) 328*16kB (UM) 112*32kB (M) 138*64kB (UME) 495*128kB (UME) 328*256kB (UME) 181*512kB (UM) 76*1024kB (U) 11*2048kB (UME) 168*4096kB (UM) = 1056688kB
[  467.759097][T20257] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  467.771276][T20257] Node 1 Normal: 1*4kB (U) 1*8kB (M) 7*16kB (UM) 5*32kB (UM) 6*64kB (UM) 5*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (UM) = 3935516kB
[  467.782272][ T5629] Bluetooth: hci2: command 0x0405 tx timeout
[  467.794143][T20257] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  467.805077][T20257] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  467.842641][T20257] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  467.878376][T20257] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  467.888849][T20257] 43957 total pagecache pages
[  467.895433][T20257] 0 pages in swap cache
[  467.899779][T20257] Free swap  = 124996kB
[  467.905256][T20257] Total swap = 124996kB
[  467.909490][T20257] 2097051 pages RAM
[  467.916080][T20257] 0 pages HighMem/MovableOnly
[  467.922709][T20257] 428425 pages reserved
[  467.927095][T20257] 0 pages cma reserved
[  468.398217][T20293] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3890'.
[  468.428224][T20300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3894'.
[  468.450441][T20300] netlink: 13 bytes leftover after parsing attributes in process `syz.2.3894'.
[  468.600587][T20300] veth3: entered promiscuous mode
[  468.629417][T20300] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3894'.
[  468.784767][T20307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3895'.
[  468.936215][T20319] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3901'.
[  469.112718][T20319] vlan2: entered allmulticast mode
[  469.124698][T20319] gretap0: entered allmulticast mode
[  469.173821][T20332] bridge_slave_1: left allmulticast mode
[  469.184898][T20332] bridge_slave_1: left promiscuous mode
[  469.190846][T20332] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.210334][T20332] bridge_slave_0: left promiscuous mode
[  469.227087][T12577] net_ratelimit: 4 callbacks suppressed
[  469.227106][T12577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.256211][T20332] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.357584][T20334] x_tables: duplicate underflow at hook 1
[  469.410253][T20338] netlink: 'syz.0.3904': attribute type 6 has an invalid length.
[  469.462281][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.471219][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.480135][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.584828][T20346] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3906'.
[  469.599971][T20348] syzkaller0: entered promiscuous mode
[  469.607221][T20348] syzkaller0: entered allmulticast mode
[  469.780276][T20353] veth1_macvtap: left promiscuous mode
[  469.788313][T20353] macsec0: entered promiscuous mode
[  470.084204][T20362] tunl0: entered promiscuous mode
[  470.098014][T20362] netlink: 'syz.0.3911': attribute type 4 has an invalid length.
[  470.207112][T20366] netlink: 'syz.4.3913': attribute type 13 has an invalid length.
[  470.219881][T20366] macsec0: left promiscuous mode
[  470.238659][T20366] macsec0: entered allmulticast mode
[  470.264166][T12577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.588853][T20389] __nla_validate_parse: 3 callbacks suppressed
[  470.588872][T20389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3920'.
[  470.629986][T20394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3921'.
[  470.662724][T12568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.671147][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.704144][T20397] bond0: (slave ip6gre0): Error: Device can not be enslaved while up
[  470.719767][T20397] ipvlan2: entered allmulticast mode
[  470.725729][T20397] virt_wifi0: entered allmulticast mode
[  470.736152][T20397] batman_adv: batadv0: Adding interface: ipvlan2
[  470.742856][T20397] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  470.772918][T20397] batman_adv: batadv0: Interface activated: ipvlan2
[  470.966299][T20406] x_tables: duplicate underflow at hook 3
[  471.017376][T20409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3926'.
[  471.117738][T20413] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  471.304990][T12575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.341120][T20422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3931'.
[  471.698851][T20435] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3935'.
[  471.787902][T20435] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3935'.
[  471.812208][T20435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  472.061838][T20456] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3943'.
[  472.629111][T20480] netlink: 308 bytes leftover after parsing attributes in process `syz.1.3952'.
[  472.648692][T20481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3952'.
[  472.761483][T20495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3954'.
[  473.127649][T20514] xt_TCPMSS: Only works on TCP SYN packets
[  473.194186][T20514] Cannot find add_set index 65532 as target
[  474.191819][T20568] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  474.429338][ T5735] net_ratelimit: 8 callbacks suppressed
[  474.429359][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.516063][T20580] vcan0: entered allmulticast mode
[  474.522807][T20580] ip_tables: iptables: counters copy to user failed while replacing table
[  475.222292][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.231180][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.240071][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.301772][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  475.629353][T12575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.747500][T20634] IPv6: Can't replace route, no match found
[  475.803435][T20640] netlink: 'syz.4.3991': attribute type 1 has an invalid length.
[  475.875473][T20634] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  475.940524][T20637] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  475.987545][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.001454][T12685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.191461][T20641] syzkaller0: entered promiscuous mode
[  476.210883][T20641] syzkaller0: entered allmulticast mode
[  476.327287][T20651] netlink: 'syz.1.3996': attribute type 1 has an invalid length.
[  476.380042][T20653] geneve2: entered promiscuous mode
[  476.422728][ T3103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.431151][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.450446][T20658] __nla_validate_parse: 18 callbacks suppressed
[  476.450466][T20658] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3997'.
[  476.530683][T20660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3997'.
[  476.565428][T20662] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3998'.
[  477.108666][T20686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4004'.
[  477.181074][T20687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4004'.
[  477.197662][T20680] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4003'.
[  477.437710][T20690] netlink: 'syz.4.4005': attribute type 1 has an invalid length.
[  477.481432][T20690] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4005'.
[  478.261050][T20736] sch_fq: defrate 0 ignored.
[  479.396273][T20765] netlink: 'syz.0.4025': attribute type 1 has an invalid length.
[  479.495244][T20774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4027'.
[  479.867065][T12577] net_ratelimit: 98 callbacks suppressed
[  479.867085][T12577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.985169][T20784] netlink: 'syz.4.4029': attribute type 1 has an invalid length.
[  480.034430][T20789] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.4032'.
[  480.087165][T20789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4032'.
[  480.127777][T20789] openvswitch: netlink: Message has 4 unknown bytes.
[  480.342435][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.351473][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.360328][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.820639][T20808] syzkaller0: entered promiscuous mode
[  480.881492][T20808] syzkaller0: entered allmulticast mode
[  480.917123][T12577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.753778][T20841] __nla_validate_parse: 4 callbacks suppressed
[  481.753798][T20841] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4046'.
[  481.816115][T20840] syzkaller0: entered promiscuous mode
[  481.850462][T20840] syzkaller0: entered allmulticast mode
[  481.883946][T20846] openvswitch: netlink: Missing valid actions attribute.
[  481.911744][T20846] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  481.949066][T12577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.195176][T12685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.246432][T20853] netlink: 'syz.0.4051': attribute type 23 has an invalid length.
[  482.361158][T20852] sctp: [Deprecated]: syz.2.4050 (pid 20852) Use of int in maxseg socket option.
[  482.361158][T20852] Use struct sctp_assoc_value instead
[  483.141737][ T5629] Bluetooth: hci5: command 0x0406 tx timeout
[  484.914302][   T13] net_ratelimit: 3 callbacks suppressed
[  484.914325][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.928358][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.076344][T12572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.382265][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.391175][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.400070][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.561921][T12685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.103404][T12577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.115782][T20888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4062'.
[  487.135573][T20891] netlink: 'syz.3.4060': attribute type 1 has an invalid length.
[  487.149109][T12575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.183228][T20895] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  487.292988][T20901] openvswitch: netlink: Missing key (keys=c0, expected=20100)
[  487.618231][T20897] bond8: (slave gretap1): making interface the new active one
[  487.659094][T20897] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  488.044637][T20927] netlink: 'syz.3.4068': attribute type 1 has an invalid length.
[  488.057472][T20930] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4071'.
[  488.071433][T20916] bond2: option min_links: invalid value (18446744073709551614)
[  488.127807][T20934] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4067'.
[  488.198301][T20916] bond2: option min_links: allowed values 0 - 2147483647
[  488.212645][T20934] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4067'.
[  488.320296][T20916] bond2 (unregistering): Released all slaves
[  488.642853][T20927] 8021q: adding VLAN 0 to HW filter on device bond9
[  488.745392][T20933] bond9: (slave dummy0): making interface the new active one
[  488.825879][T20933] bond9: (slave dummy0): Enslaving as an active interface with an up link
[  488.885441][T20935] 
: renamed from dummy0 (while UP)
[  488.930795][T20956] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  489.509690][T20979] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4081'.
[  489.954777][T20986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4082'.
[  490.265733][T12577] net_ratelimit: 5 callbacks suppressed
[  490.265754][T12577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.366939][T20992] FAULT_INJECTION: forcing a failure.
[  490.366939][T20992] name failslab, interval 1, probability 0, space 0, times 1
[  490.416345][T20992] CPU: 1 UID: 0 PID: 20992 Comm: syz.2.4085 Not tainted syzkaller #0 PREEMPT(full) 
[  490.416373][T20992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  490.416385][T20992] Call Trace:
[  490.416393][T20992]  <TASK>
[  490.416403][T20992]  dump_stack_lvl+0xe8/0x150
[  490.416442][T20992]  should_fail_ex+0x410/0x560
[  490.416564][T20992]  should_failslab+0xa8/0x100
[  490.416596][T20992]  kmem_cache_alloc_node_noprof+0xb3/0x620
[  490.416619][T20992]  ? local_lock_release+0x9c/0x160
[  490.416649][T20992]  ? __alloc_skb+0x1db/0x7a0
[  490.416675][T20992]  ? __alloc_skb+0x1db/0x7a0
[  490.416709][T20992]  __alloc_skb+0x1db/0x7a0
[  490.416741][T20992]  alloc_skb_with_frags+0xc6/0x760
[  490.416782][T20992]  sock_alloc_send_pskb+0x878/0x990
[  490.416811][T20992]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  490.416888][T20992]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  490.416918][T20992]  ? dev_get_by_index+0x22/0x2d0
[  490.416941][T20992]  ? dev_get_by_index+0x22/0x2d0
[  490.416982][T20992]  packet_sendmsg+0x31bb/0x4f80
[  490.417015][T20992]  ? aa_label_sk_perm+0x532/0x6e0
[  490.417151][T20992]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  490.417187][T20992]  ? __lock_acquire+0x683/0x2cf0
[  490.417234][T20992]  ? __lock_acquire+0x683/0x2cf0
[  490.417283][T20992]  ? __pfx_packet_sendmsg+0x10/0x10
[  490.417322][T20992]  ? __might_fault+0xaf/0x130
[  490.417346][T20992]  ? __pfx_aa_sk_perm+0x10/0x10
[  490.417382][T20992]  ? aa_sock_msg_perm+0xf6/0x1c0
[  490.417451][T20992]  ? __pfx_packet_sendmsg+0x10/0x10
[  490.417476][T20992]  sock_sendmsg_nosec+0x13a/0x180
[  490.417507][T20992]  __sys_sendto+0x408/0x5a0
[  490.417538][T20992]  ? ksys_write+0x1e6/0x270
[  490.417576][T20992]  ? __pfx___sys_sendto+0x10/0x10
[  490.417604][T20992]  ? __mutex_unlock_slowpath+0x731/0x900
[  490.417666][T20992]  ? __pfx_ksys_write+0x10/0x10
[  490.417707][T20992]  __x64_sys_sendto+0xde/0x100
[  490.417742][T20992]  do_syscall_64+0x166/0x520
[  490.417770][T20992]  ? trace_irq_disable+0x3b/0x140
[  490.417801][T20992]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.417825][T20992]  ? clear_bhb_loop+0x70/0xc0
[  490.417853][T20992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.417876][T20992] RIP: 0033:0x7f406ad9e0d9
[  490.417899][T20992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  490.417935][T20992] RSP: 002b:00007f406bd3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  490.417959][T20992] RAX: ffffffffffffffda RBX: 00007f406b025fa0 RCX: 00007f406ad9e0d9
[  490.417983][T20992] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000004
[  490.417997][T20992] RBP: 00007f406bd3b090 R08: 0000200000000140 R09: 0000000000000014
[  490.418012][T20992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  490.418026][T20992] R13: 00007f406b026038 R14: 00007f406b025fa0 R15: 00007fffaed6b288
[  490.418075][T20992]  </TASK>
[  490.735160][ T7491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.743566][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.970513][T21000] xt_limit: Overflow, try lower: 536871034/127
[  491.008730][T21003] netlink: 'syz.1.4089': attribute type 10 has an invalid length.
[  491.152898][T21006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4088'.
[  491.220382][T21006] hsr_slave_0: left promiscuous mode
[  491.232316][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.241394][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.250322][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.278873][T21006] hsr_slave_1: left promiscuous mode
[  491.334065][T12577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.529741][T21017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  491.628150][T21017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4093'.
[  491.785208][T21028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4097'.
[  492.246203][T21029] syzkaller0: entered promiscuous mode
[  492.288305][T21029] syzkaller0: entered allmulticast mode
[  492.309678][T21042] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  492.342519][T12577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.382607][T12577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.787746][T12568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.467643][T12575] net_ratelimit: 4 callbacks suppressed
[  495.467668][T12575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.262300][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.271153][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.435054][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.444386][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.504008][T12572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.816101][T21046] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  496.841178][T21037] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4099'.
[  496.887315][T21050] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  497.173696][T21065] syzkaller1: entered allmulticast mode
[  497.543368][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.621226][   T12] IPVS: starting estimator thread 0...
[  497.742989][T21089] IPVS: using max 28 ests per chain, 67200 per kthread
[  498.058443][T21104] netlink: 'syz.2.4114': attribute type 13 has an invalid length.
[  498.106083][T21104] veth1_macvtap: left promiscuous mode
[  498.156511][T21104] macsec0: entered allmulticast mode
[  498.328449][T21115] netlink: 'syz.0.4117': attribute type 32 has an invalid length.
[  498.354943][T21116] netlink: 'syz.0.4117': attribute type 32 has an invalid length.
[  498.379828][T21114] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  498.441354][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4117'.
[  498.460406][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4117'.
[  498.545166][T21124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4118'.
[  498.615559][T21121] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  498.694049][T21116] bond7: Setting coupled_control to off (0)
[  498.701527][T21115] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  499.011800][T21145] lo: entered allmulticast mode
[  499.030074][T21145] tunl0: entered allmulticast mode
[  499.110247][T21145] gre0: entered allmulticast mode
[  499.346635][T21145] gretap0: entered allmulticast mode
[  499.514375][T21145] erspan0: entered allmulticast mode
[  499.542332][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.551214][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.560046][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.642781][T21145] ip_vti0: entered allmulticast mode
[  499.722310][T21172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4127'.
[  499.758431][T21145] ip6_vti0: entered allmulticast mode
[  499.863642][T21145] sit0: entered allmulticast mode
[  499.995873][T21145] ip6tnl0: entered allmulticast mode
[  500.038032][T21145] ip6gre0: entered allmulticast mode
[  500.059016][T21145] syz_tun: entered allmulticast mode
[  500.117709][T21145] ip6gretap0: entered allmulticast mode
[  500.160831][T21145] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.196757][T21145] bridge0: entered allmulticast mode
[  500.497914][T21168] batadv_slave_0: entered promiscuous mode
[  500.524328][T21168] batadv_slave_0: left promiscuous mode
[  500.561514][T21172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  500.630413][T21172] batman_adv: batadv0: Removing interface: batadv_slave_0
[  500.750811][T21192] netlink: 'syz.1.4128': attribute type 3 has an invalid length.
[  500.815735][T21192] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4128'.
[  501.071049][T21200] gre1: entered promiscuous mode
[  501.093381][T21200] gre1: entered allmulticast mode
[  502.042570][T21230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4140'.
[  502.334721][T21241] netlink: 'syz.1.4142': attribute type 21 has an invalid length.
[  502.418704][  T134] IPVS: starting estimator thread 0...
[  502.430954][T21241] netlink: 'syz.1.4142': attribute type 1 has an invalid length.
[  502.545327][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4144'.
[  502.567984][T21247] IPVS: using max 27 ests per chain, 64800 per kthread
[  502.769759][T21254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4147'.
[  502.877430][T21260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4148'.
[  502.947261][T21260] netlink: 'syz.3.4148': attribute type 7 has an invalid length.
[  503.014804][T21249] ip6t_srh: unknown srh invflags 4000
[  503.041337][T21260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4148'.
[  503.193634][T21271] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  503.308181][T21271] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  503.626931][ T5613] Bluetooth: hci4: command 0x0406 tx timeout
[  504.842095][T21317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4160'.
[  504.939078][T21323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4162'.
[  505.302284][    C1] net_ratelimit: 2 callbacks suppressed
[  505.302304][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.316822][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.354658][T21332] netlink: 'syz.2.4164': attribute type 4 has an invalid length.
[  505.446955][T21344] netlink: 'syz.0.4167': attribute type 1 has an invalid length.
[  505.485046][T21339] sch_tbf: burst 32855 is lower than device lo mtu (65499) !
[  505.524432][T21347] sch_tbf: burst 32855 is lower than device lo mtu (65499) !
[  505.844265][T21356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4169'.
[  505.886412][T21356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4169'.
[  506.093959][T21369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4173'.
[  506.140906][T21374] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  506.140906][T21374] Please contact the netfilter-devel mailing list or update your nftables rules.
[  507.197865][T21392] bridge1: entered promiscuous mode
[  507.238615][T21392] bridge1: entered allmulticast mode
[  507.836156][T21429] __nla_validate_parse: 3 callbacks suppressed
[  507.836177][T21429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4184'.
[  507.937525][T21393] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4177'.
[  508.339109][T21447] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4188'.
[  508.374575][T21451] netlink: 'syz.2.4190': attribute type 1 has an invalid length.
[  508.399347][T21451] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4190'.
[  508.414091][T21456] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  508.444604][T21452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4190'.
[  508.460988][T21451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4190'.
[  508.502361][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.511376][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.528494][T21457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4188'.
[  508.651435][T21448] syz.4.4189 (21448) used greatest stack depth: 18080 bytes left
[  509.158005][T21474] netlink: 'syz.0.4195': attribute type 83 has an invalid length.
[  509.341303][T21479] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4197'.
[  509.365377][T21477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4196'.
[  509.400353][T21477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4196'.
[  509.483778][T21482] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  510.319489][T21509] ������: renamed from bond_slave_0 (while UP)
[  510.728365][T21518] netlink: 'syz.0.4206': attribute type 12 has an invalid length.
[  511.068856][ T5629] block nbd3: Receive control failed (result -32)
[  511.849428][T21565] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  512.263281][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.272144][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.380630][T21577] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  512.404388][T21578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  513.047382][T21599] __nla_validate_parse: 10 callbacks suppressed
[  513.047401][T21599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4232'.
[  513.242066][T21609] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4235'.
[  513.720655][T21624] gretap2: entered promiscuous mode
[  513.763160][T21624] gretap2: entered allmulticast mode
[  513.842514][T21624] bridge0: port 1(gretap2) entered blocking state
[  513.859165][T21624] bridge0: port 1(gretap2) entered disabled state
[  513.862656][ T5629] Bluetooth: hci3: command 0x0406 tx timeout
[  513.919830][T21624] bridge0: port 1(gretap2) entered blocking state
[  513.926555][T21624] bridge0: port 1(gretap2) entered forwarding state
[  514.064739][T21625] bond0: (slave ip6gre0): Error: Device can not be enslaved while up
[  514.404773][T21649] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4246'.
[  514.740230][T21656] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  515.287440][T21666] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4251'.
[  515.305403][T21672] netlink: 'syz.2.4253': attribute type 1 has an invalid length.
[  515.322096][T21633] syzkaller1: entered promiscuous mode
[  515.341169][T21633] syzkaller1: entered allmulticast mode
[  515.359558][T21672] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4253'.
[  515.469798][T21672] NCSI netlink: No device for ifindex 0
[  515.918432][T21636] lo speed is unknown, defaulting to 1000
[  516.088645][T21691] ip_tables: iptables: counters copy to user failed while replacing table
[  516.182260][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.191183][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.400280][T21699] netlink: 'syz.2.4260': attribute type 1 has an invalid length.
[  516.869860][T21715] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4262'.
[  516.876137][T21708] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  516.905736][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  516.960995][T21708] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  518.508768][ T7491] IPVS: starting estimator thread 0...
[  518.631984][T21751] IPVS: using max 22 ests per chain, 52800 per kthread
[  519.685254][T21785] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4275'.
[  519.807937][T21770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  519.868649][T21778] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4275'.
[  520.022359][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.031293][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.206943][T21790] netlink: 'syz.2.4277': attribute type 1 has an invalid length.
[  520.796150][T21806] syz_tun: entered allmulticast mode
[  520.893831][T21806] dvmrp8: entered allmulticast mode
[  520.939022][T21804] syz_tun: left allmulticast mode
[  521.205447][T21816] Bluetooth: hci0: unsupported parameter 5135
[  521.243138][T21816] Bluetooth: hci0: unsupported parameter 8192
[  521.279398][T21816] Bluetooth: hci0: unsupported parameter 5135
[  521.341043][T21816] Bluetooth: hci0: unsupported parameter 8192
[  521.753986][T21826] syzkaller0: entered promiscuous mode
[  521.773347][T21826] syzkaller0: entered allmulticast mode
[  522.212793][T21839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4294'.
[  522.319342][T21842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4293'.
[  522.461070][T21844] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  522.542335][T21844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  522.584106][T21845] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4295'.
[  523.699470][T21877] 
: renamed from bond0 (while UP)
[  523.862313][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.871233][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.078664][T21897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4307'.
[  527.063028][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.072026][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.132063][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4311'.
[  527.142288][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  527.204083][T21913] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4308'.
[  527.735279][T21917] gre1: entered promiscuous mode
[  527.985697][T21932] hsr0: entered allmulticast mode
[  528.028156][T21932] hsr_slave_0: entered allmulticast mode
[  528.076110][T21932] hsr_slave_1: entered allmulticast mode
[  528.479428][T21943] syzkaller1: entered promiscuous mode
[  528.504431][T21943] syzkaller1: entered allmulticast mode
[  528.683659][T21951] netlink: 'syz.0.4323': attribute type 8 has an invalid length.
[  528.705885][T21954] xt_TCPMSS: Only works on TCP SYN packets
[  528.723258][T21951] sch_fq: defrate 0 ignored.
[  528.736577][T21954] netlink: 524 bytes leftover after parsing attributes in process `syz.0.4323'.
[  528.938779][T21961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4325'.
[  529.037921][T21961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4325'.
[  529.178131][T21965] ip6gre1: entered promiscuous mode
[  529.267832][T21968] ip6gre1: entered allmulticast mode
[  529.539690][T21984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4332'.
[  529.597636][T21984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4332'.
[  529.625906][T21984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4332'.
[  529.637181][T21984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4332'.
[  529.651761][T21993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4334'.
[  530.369284][T22005] xt_CT: No such helper "snmp_trap"
[  530.546475][T21880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  530.576786][T21880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.635137][T22020] netlink: 'syz.2.4341': attribute type 1 has an invalid length.
[  530.902365][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.911323][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.328363][T22044] openvswitch: netlink: Flow actions attr not present in new flow.
[  531.994132][T22066] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  532.046068][T22066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  532.053399][T22066] IPv6: NLM_F_CREATE should be set when creating new route
[  532.060742][T22066] IPv6: NLM_F_CREATE should be set when creating new route
[  532.068051][T22066] IPv6: NLM_F_CREATE should be set when creating new route
[  532.122820][T22073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  532.412407][T22078] netlink: 'syz.0.4357': attribute type 10 has an invalid length.
[  532.449836][T22078] __nla_validate_parse: 89 callbacks suppressed
[  532.449855][T22078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4357'.
[  532.495600][T22086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4359'.
[  532.551431][T22083] netlink: 'syz.0.4357': attribute type 1 has an invalid length.
[  532.600806][T22078] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4357'.
[  532.621611][T22078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4357'.
[  532.766486][T22083] bond8: entered promiscuous mode
[  532.773669][T22083] 8021q: adding VLAN 0 to HW filter on device bond8
[  533.118063][T22094] 8021q: adding VLAN 0 to HW filter on device bond4
[  533.374637][T22116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4368'.
[  533.518204][T22116] bond9: Invalid ad_actor_system MAC address.
[  533.587671][T22116] bond9: option ad_actor_system: invalid value (1)
[  533.616053][T22116] bond9 (unregistering): Released all slaves
[  534.395944][T22154] netlink: 'syz.2.4379': attribute type 12 has an invalid length.
[  534.488503][T22154] netlink: 'syz.2.4379': attribute type 1 has an invalid length.
[  534.488510][T22162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4381'.
[  534.536310][T22156] syzkaller0: entered promiscuous mode
[  534.557108][T22156] syzkaller0: entered allmulticast mode
[  534.750580][T22154] bond4: entered promiscuous mode
[  534.778334][T22154] 8021q: adding VLAN 0 to HW filter on device bond4
[  535.382326][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.391276][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.400150][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.776234][T22189] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[  535.788861][T22189] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[  536.184685][ T5613] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  537.391239][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  537.401463][    C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  539.192790][T22209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4394'.
[  539.268546][T22204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  539.376651][T22204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4391'.
[  539.453156][T22209] macvtap1: entered promiscuous mode
[  539.500664][T22209] macvtap1: entered allmulticast mode
[  540.488002][T22266] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4404'.
[  540.537937][T22267] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4405'.
[  540.596559][T22266] syzkaller0: entered promiscuous mode
[  540.628733][T22266] syzkaller0: entered allmulticast mode
[  540.819038][T21880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  540.848546][T21880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  540.894494][T22280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.928450][    C1] ------------[ cut here ]------------
[  540.934097][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  540.944045][    C1] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0, CPU#1: syz-executor/17842
[  540.955014][    C1] Modules linked in:
[  540.958965][    C1] CPU: 1 UID: 0 PID: 17842 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  540.968589][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  540.978726][    C1] RIP: 0010:__rate_control_send_low+0x638/0x8a0
[  540.985044][    C1] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f
[  541.004754][    C1] RSP: 0018:ffffc90000a088f8 EFLAGS: 00010246
[  541.010888][    C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  541.018944][    C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff906a7e60
[  541.026998][    C1] RBP: ffff888055980f40 R08: 0000000000000000 R09: 0000000000000000
[  541.035067][    C1] R10: 0000000000000004 R11: 8000000000000100 R12: ffff888052e377a8
[  541.043172][    C1] R13: dffffc0000000000 R14: ffffffff906a7e60 R15: ffff888055983258
[  541.051199][    C1] FS:  00005555941ee500(0000) GS:ffff888125021000(0000) knlGS:0000000000000000
[  541.060219][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  541.066882][    C1] CR2: 00002000000002d0 CR3: 0000000076632000 CR4: 00000000003526f0
[  541.074931][    C1] Call Trace:
[  541.078263][    C1]  <IRQ>
[  541.081157][    C1]  rate_control_send_low+0x1a7/0x7b0
[  541.086521][    C1]  rate_control_get_rate+0x20b/0x5d0
[  541.091887][    C1]  ieee80211_beacon_get_finish+0x385/0x6c0
[  541.097749][    C1]  ? kmem_cache_alloc_node_noprof+0x3bc/0x620
[  541.103890][    C1]  ? local_lock_release+0x9c/0x160
[  541.109064][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  541.115502][    C1]  ? __ieee80211_beacon_get+0xdcc/0x1920
[  541.121217][    C1]  ? __ieee80211_beacon_get+0x36/0x1920
[  541.126842][    C1]  __ieee80211_beacon_get+0xe2b/0x1920
[  541.132417][    C1]  ? __lock_acquire+0x683/0x2cf0
[  541.137420][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  541.142970][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  541.149106][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  541.154845][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  541.162137][    C1]  __iterate_interfaces+0x2af/0x5a0
[  541.167397][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  541.173549][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  541.180813][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  541.187004][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  541.194118][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  541.200075][    C1]  mac80211_hwsim_beacon+0xaf/0x240
[  541.205364][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  541.211245][    C1]  __hrtimer_run_queues+0x3bc/0xa10
[  541.216556][    C1]  hrtimer_run_softirq+0x1e3/0x2e0
[  541.221777][    C1]  handle_softirqs+0x226/0x860
[  541.226606][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  541.231451][    C1]  __irq_exit_rcu+0xcb/0x220
[  541.236188][    C1]  irq_exit_rcu+0x9/0x30
[  541.240503][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  541.246213][    C1]  </IRQ>
[  541.249181][    C1]  <TASK>
[  541.252187][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  541.258215][    C1] RIP: 0010:lock_is_held_type+0x106/0x150
[  541.264021][    C1] Code: 1a 00 00 b8 ff ff ff ff 65 0f c1 05 dc 4c 97 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 1b 02 03 00 cc 90 0f 0b 90 48 c7
[  541.283708][    C1] RSP: 0018:ffffc90005e8ede8 EFLAGS: 00000206
[  541.289828][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000046
[  541.297867][    C1] RDX: 0000000000000000 RSI: ffffffff8e4ddbc5 RDI: ffffffff8c4cd780
[  541.305916][    C1] RBP: 00000000ffffffff R08: ffff88801d024d17 R09: 1ffff11003a049a2
[  541.313964][    C1] R10: dffffc0000000000 R11: ffffed1003a049a3 R12: 0000000000000246
[  541.322011][    C1] R13: ffff888073295dc0 R14: ffffffff8f389388 R15: 0000000000000003
[  541.330055][    C1]  depot_fetch_stack+0x31/0xa0
[  541.334923][    C1]  __set_page_owner+0x140/0x4c0
[  541.339828][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  541.345296][    C1]  ? seqcount_lockdep_reader_access+0x89/0xc0
[  541.351418][    C1]  ? lockdep_hardirqs_on+0x7b/0x110
[  541.356711][    C1]  ? bad_range+0x8e/0x2a0
[  541.361099][    C1]  post_alloc_hook+0x1f9/0x250
[  541.365967][    C1]  get_page_from_freelist+0x21fe/0x2270
[  541.371639][    C1]  ? prepare_alloc_pages+0x230/0x650
[  541.376995][    C1]  __alloc_frozen_pages_noprof+0x18d/0x380
[  541.382892][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  541.389285][    C1]  ? __pfx_policy_nodemask+0x10/0x10
[  541.394712][    C1]  alloc_pages_mpol+0x212/0x390
[  541.399642][    C1]  alloc_pages_noprof+0xb1/0x2b0
[  541.404678][    C1]  pte_alloc_one+0x22/0x370
[  541.409239][    C1]  __pte_alloc+0x25/0x1a0
[  541.413664][    C1]  copy_pmd_range+0x5035/0x5890
[  541.418570][    C1]  ? stack_depot_save_flags+0x33/0x7f0
[  541.424140][    C1]  ? __lock_acquire+0x683/0x2cf0
[  541.429159][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  541.434441][    C1]  ? percpu_ref_get_many+0x19/0x140
[  541.439713][    C1]  ? copy_page_range+0x2a0/0x1250
[  541.444873][    C1]  copy_page_range+0xc26/0x1250
[  541.449811][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  541.455230][    C1]  dup_mmap+0xf21/0x1d90
[  541.459557][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  541.464330][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  541.469483][    C1]  ? copy_mm+0x10f/0x480
[  541.473842][    C1]  ? copy_mm+0x10f/0x480
[  541.478192][    C1]  copy_mm+0x11a/0x480
[  541.482362][    C1]  ? copy_process+0xd3c/0x43e0
[  541.487184][    C1]  copy_process+0x1e75/0x43e0
[  541.491954][    C1]  ? copy_process+0xd3c/0x43e0
[  541.496786][    C1]  ? __pfx_copy_process+0x10/0x10
[  541.501931][    C1]  kernel_clone+0x2d7/0x940
[  541.506489][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  541.511621][    C1]  __x64_sys_clone+0x1b6/0x230
[  541.516489][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  541.521880][    C1]  ? do_user_addr_fault+0xc4c/0x1340
[  541.527238][    C1]  do_syscall_64+0x166/0x520
[  541.531920][    C1]  ? trace_irq_disable+0x3b/0x140
[  541.537005][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.543284][    C1]  ? clear_bhb_loop+0x70/0xc0
[  541.548019][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.554087][    C1] RIP: 0033:0x7fbd4e5c6b52
[  541.558555][    C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  541.578268][    C1] RSP: 002b:00007ffddc42a9a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  541.586775][    C1] RAX: ffffffffffffffda RBX: 00007ffddc42a9a0 RCX: 00007fbd4e5c6b52
[  541.594836][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  541.602871][    C1] RBP: 00007ffddc42ab2c R08: 0000000000000000 R09: 0000000000000001
[  541.610885][    C1] R10: 00005555941ee7d0 R11: 0000000000000246 R12: 0000000000000001
[  541.618939][    C1] R13: 00000000000927c0 R14: 0000000000084034 R15: 00007ffddc42ab80
[  541.627017][    C1]  </TASK>
[  541.630093][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  541.637407][    C1] CPU: 1 UID: 0 PID: 17842 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  541.646991][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  541.657085][    C1] Call Trace:
[  541.660412][    C1]  <IRQ>
[  541.663289][    C1]  vpanic+0x56d/0xa60
[  541.667319][    C1]  ? __pfx__printk+0x10/0x10
[  541.672042][    C1]  ? __pfx_vpanic+0x10/0x10
[  541.676611][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  541.681959][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  541.687243][    C1]  panic+0xc5/0xd0
[  541.691019][    C1]  ? __pfx_panic+0x10/0x10
[  541.695512][    C1]  __warn+0x315/0x4c0
[  541.699564][    C1]  ? __rate_control_send_low+0x60c/0x8a0
[  541.705258][    C1]  ? __rate_control_send_low+0x60c/0x8a0
[  541.710945][    C1]  __report_bug+0x276/0x570
[  541.715508][    C1]  ? __kernel_text_address+0xd/0x30
[  541.720756][    C1]  ? __rate_control_send_low+0x60c/0x8a0
[  541.726461][    C1]  ? __pfx___report_bug+0x10/0x10
[  541.731543][    C1]  ? stack_trace_save+0xa9/0x100
[  541.736538][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  541.741975][    C1]  report_bug_entry+0x19b/0x290
[  541.746874][    C1]  ? __rate_control_send_low+0x638/0x8a0
[  541.752562][    C1]  ? __rate_control_send_low+0x63d/0x8a0
[  541.758248][    C1]  handle_bug+0xce/0x200
[  541.762552][    C1]  exc_invalid_op+0x1a/0x50
[  541.767117][    C1]  asm_exc_invalid_op+0x1a/0x20
[  541.772010][    C1] RIP: 0010:__rate_control_send_low+0x638/0x8a0
[  541.778290][    C1] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f
[  541.797939][    C1] RSP: 0018:ffffc90000a088f8 EFLAGS: 00010246
[  541.804054][    C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  541.812068][    C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff906a7e60
[  541.820098][    C1] RBP: ffff888055980f40 R08: 0000000000000000 R09: 0000000000000000
[  541.828105][    C1] R10: 0000000000000004 R11: 8000000000000100 R12: ffff888052e377a8
[  541.839420][    C1] R13: dffffc0000000000 R14: ffffffff906a7e60 R15: ffff888055983258
[  541.847471][    C1]  ? __rate_control_send_low+0x600/0x8a0
[  541.853185][    C1]  rate_control_send_low+0x1a7/0x7b0
[  541.858537][    C1]  rate_control_get_rate+0x20b/0x5d0
[  541.863887][    C1]  ieee80211_beacon_get_finish+0x385/0x6c0
[  541.869755][    C1]  ? kmem_cache_alloc_node_noprof+0x3bc/0x620
[  541.875863][    C1]  ? local_lock_release+0x9c/0x160
[  541.881031][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  541.887432][    C1]  ? __ieee80211_beacon_get+0xdcc/0x1920
[  541.893125][    C1]  ? __ieee80211_beacon_get+0x36/0x1920
[  541.898717][    C1]  __ieee80211_beacon_get+0xe2b/0x1920
[  541.904264][    C1]  ? __lock_acquire+0x683/0x2cf0
[  541.909270][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  541.914825][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  541.920935][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  541.926531][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  541.933785][    C1]  __iterate_interfaces+0x2af/0x5a0
[  541.939034][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  541.945153][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  541.952399][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  541.958520][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  541.965597][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  541.971466][    C1]  mac80211_hwsim_beacon+0xaf/0x240
[  541.976728][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  541.982583][    C1]  __hrtimer_run_queues+0x3bc/0xa10
[  541.987847][    C1]  hrtimer_run_softirq+0x1e3/0x2e0
[  541.993009][    C1]  handle_softirqs+0x226/0x860
[  541.997821][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  542.002637][    C1]  __irq_exit_rcu+0xcb/0x220
[  542.007281][    C1]  irq_exit_rcu+0x9/0x30
[  542.011570][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  542.017251][    C1]  </IRQ>
[  542.020229][    C1]  <TASK>
[  542.023207][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  542.029231][    C1] RIP: 0010:lock_is_held_type+0x106/0x150
[  542.034999][    C1] Code: 1a 00 00 b8 ff ff ff ff 65 0f c1 05 dc 4c 97 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 1b 02 03 00 cc 90 0f 0b 90 48 c7
[  542.054632][    C1] RSP: 0018:ffffc90005e8ede8 EFLAGS: 00000206
[  542.060754][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000046
[  542.068763][    C1] RDX: 0000000000000000 RSI: ffffffff8e4ddbc5 RDI: ffffffff8c4cd780
[  542.076772][    C1] RBP: 00000000ffffffff R08: ffff88801d024d17 R09: 1ffff11003a049a2
[  542.084787][    C1] R10: dffffc0000000000 R11: ffffed1003a049a3 R12: 0000000000000246
[  542.092795][    C1] R13: ffff888073295dc0 R14: ffffffff8f389388 R15: 0000000000000003
[  542.100829][    C1]  depot_fetch_stack+0x31/0xa0
[  542.105661][    C1]  __set_page_owner+0x140/0x4c0
[  542.110572][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  542.115974][    C1]  ? seqcount_lockdep_reader_access+0x89/0xc0
[  542.122085][    C1]  ? lockdep_hardirqs_on+0x7b/0x110
[  542.127319][    C1]  ? bad_range+0x8e/0x2a0
[  542.131697][    C1]  post_alloc_hook+0x1f9/0x250
[  542.136508][    C1]  get_page_from_freelist+0x21fe/0x2270
[  542.142148][    C1]  ? prepare_alloc_pages+0x230/0x650
[  542.147490][    C1]  __alloc_frozen_pages_noprof+0x18d/0x380
[  542.153375][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  542.159757][    C1]  ? __pfx_policy_nodemask+0x10/0x10
[  542.165111][    C1]  alloc_pages_mpol+0x212/0x390
[  542.170020][    C1]  alloc_pages_noprof+0xb1/0x2b0
[  542.175012][    C1]  pte_alloc_one+0x22/0x370
[  542.179573][    C1]  __pte_alloc+0x25/0x1a0
[  542.183958][    C1]  copy_pmd_range+0x5035/0x5890
[  542.188850][    C1]  ? stack_depot_save_flags+0x33/0x7f0
[  542.194380][    C1]  ? __lock_acquire+0x683/0x2cf0
[  542.199414][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  542.204653][    C1]  ? percpu_ref_get_many+0x19/0x140
[  542.209913][    C1]  ? copy_page_range+0x2a0/0x1250
[  542.215007][    C1]  copy_page_range+0xc26/0x1250
[  542.219937][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  542.225292][    C1]  dup_mmap+0xf21/0x1d90
[  542.229611][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  542.234326][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  542.239409][    C1]  ? copy_mm+0x10f/0x480
[  542.243692][    C1]  ? copy_mm+0x10f/0x480
[  542.248004][    C1]  copy_mm+0x11a/0x480
[  542.252116][    C1]  ? copy_process+0xd3c/0x43e0
[  542.256936][    C1]  copy_process+0x1e75/0x43e0
[  542.261657][    C1]  ? copy_process+0xd3c/0x43e0
[  542.266492][    C1]  ? __pfx_copy_process+0x10/0x10
[  542.271572][    C1]  kernel_clone+0x2d7/0x940
[  542.276127][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  542.281199][    C1]  __x64_sys_clone+0x1b6/0x230
[  542.286003][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  542.291360][    C1]  ? do_user_addr_fault+0xc4c/0x1340
[  542.296748][    C1]  do_syscall_64+0x166/0x520
[  542.301390][    C1]  ? trace_irq_disable+0x3b/0x140
[  542.306452][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.312572][    C1]  ? clear_bhb_loop+0x70/0xc0
[  542.317313][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.323251][    C1] RIP: 0033:0x7fbd4e5c6b52
[  542.327712][    C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  542.347364][    C1] RSP: 002b:00007ffddc42a9a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  542.355826][    C1] RAX: ffffffffffffffda RBX: 00007ffddc42a9a0 RCX: 00007fbd4e5c6b52
[  542.363834][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  542.371842][    C1] RBP: 00007ffddc42ab2c R08: 0000000000000000 R09: 0000000000000001
[  542.379860][    C1] R10: 00005555941ee7d0 R11: 0000000000000246 R12: 0000000000000001
[  542.387882][    C1] R13: 00000000000927c0 R14: 0000000000084034 R15: 00007ffddc42ab80
[  542.395931][    C1]  </TASK>
[  542.399192][    C1] Kernel Offset: disabled
[  542.403569][    C1] Rebooting in 86400 seconds..