last executing test programs:

2m35.24938386s ago: executing program 2 (id=1833):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000100)={0x1, 0x6})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x9, @mcast2, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r3 = socket$inet6(0xa, 0x5, 0xba50)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000440)=@gcm_256={{0x304}, "10e2f502acad3e11", "92a98fd14897bd408c57816e22f0ce124d966258d927d6f2bc3621ef00b27ef6", '\x00#\x00\b', "0b9d4da700de4431"}, 0x1)
writev(r2, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0xff57}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$sock_buf(r5, 0x1, 0x5, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33)
readv(r2, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0xff1}], 0x1)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000000)={r0, 0x0, 0x4, "588d8f49d77eae429b8a229f67f70c588ef70effb46c9990149ac9445f8ac1cc5f75bc24e1ef2c7792d5a930a9bb9221d48cf6f8aef5b8781c702e782c15f37e757746871fa14c0caf5dce92718be4ab473c773583df8ea28a3e2484a8b15795ee101dd04754a90132acf2b76671c7acec"})
r6 = socket(0x1, 0x5, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r6)
sendmsg$kcm(r6, &(0x7f0000001800)={&(0x7f0000000480)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-ce\x00'}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000500)="3afd313057cf2731b3edc21894b18688beebab83244cb193e0d63ec4a2da76ceaf2e68db84029052adf4cfcaab33589188a30d42e70c3f054a611876e2ef068c6e4d8ebc6269019867e8c6a4951d4da21f0eed7a9441fae2f7d2d794dfa64e95358038793bb9d917048ff2b9cf914ff867f14054afc9567da8e07662db8168497e923b7e8356a1aed45599aabbc9a68353a9b79cf283d8152ff2cc12fdda", 0x9e}, {&(0x7f0000000600)="a16f3a7993b193cad0db256590e46f0a236e1791d6abad499525e3f7fc13aad2a4884bd479f1e23b0cfd33b22ec627f371262b353303a574e354dbf5351ea156a11b8b25bb1a886cfbeee9009abb22c68a45be15a13239a5eb13ec0b7448eaf4726bbe3f8aeaa67460388edde4e48a", 0x6f}, {&(0x7f0000000680)}, {&(0x7f0000000700)="48dfed2e1b2ced5e5b985c7c", 0xc}, {&(0x7f0000000740)="83430ea7d372cc515aa4e331ae5dfcbcba4ad5fcfb4557c65560a3b5b46e04", 0x1f}, {&(0x7f0000000780)="d5efe503b221b526a2744e15a9c610fb3d001f5d38db028e2d2ca65914eda4cb0b9badf061c0154d75265ff0cb52383a857c48f9db094faf4186cf3632873ac4c98bf900b4586b4fb9ce3453ba908c8eb7a9de1dfb36f210ff5026d3f1f5ab6332152832b09a141c14936c62db5c14fb6f45ec3b830ded03b335f6727c363d214c693ce0fb610e13b340dd777ae08dc567aef95d888d27385f855c509fa78dea79ea0fc399c65a2985b3d35daef7959e94700047a4ca689e77ac7256839895b6d44f6fb813342831689230816f669ce04c33b0bf4b371501bf18f80025aa8879312c2730d02a9d5c1fcfbebdeae1a63af5cfd209229b3d991ff4bdae81df3d0712dee1ead115a3aca6146dc28ccb8e2c018616a298df0e53609fa57e6d78ee41ae2ac237f2ea628b4d18d82a7e609e38ace2da72923c37e3fca48e3b74cde38ae77a4b13a50e61e038e593111e3fc73f0f2aa370e2a45ff7be065df0b6249125f5a06f82b3198395300d3da06733f08d5b04edbc1257e9a95195cce69d94362bffff38a50b155ce56aa4754a22458cbbca2ce09fbb7cca5792457b5cfbd1823b9abc48a3185234ab8c083cf843227fa21a6bb622c17308c69926220dd742a92968644b26ac34aed8a99a1b8ae759444300697553b01047d2040c1a7c55e9577e1c5931e3727afd3df4303e243658ae2eee1480032605493fb3c1ea49e3a6fc2ea7f0bebc0abc576060aa3a7cc4231176acfdf2cdf6455d8ea1197f2b0216b635a161bfa57f7dc499e915f63bdc79c1ce2edd46ef245046fae8c9d6f84902a4acdf7f54a7c3ece01b15ab028af82f18b986e3bfa2d9fb6f0596ed5398db45d29c2ff42e569297ca016b0c1c06b7c71fcf2514fda85eb6a8b1c1d767528e0cfefc2909f44f7d28a45fcfb1859739d5cfbca748f913ae5ac59e6c39dba7d25c0a5546c32c94f826cc8325c69936ed885f39e578da44da0b6334fcb3dc2deeee86b1b8429e66bdd5901d5a0589fe6aec3d196f549fcf339a38620d9f0c97c1257a90ac3d4a70b4be23fa13e184955de3aebf2d15b6ba719ab35dc25080ddcbc3432718fdd819ca802ecff2861f98417844909fa8386286735bce0cd201bd145adae6c61cb506011f76c620d29aef929ef7036951210bdc957e83b1e2161ce665f3f2fa560d171ac2ad65caa687c0daf03d997cb28977420186000fd259846935362a9868ce90b87da7151904afdf636972d4234597c735a1eb2aa0118b897fa509cefae84cef92c042f5ca9901e6b22c44abde037b868bb40ca1045eecf9651d60b736f35b9e22103bfd83ff4bf9e79a9c1980ea340f39571e8a8a83b7505a7ead55da55fb8e5d5ea0944139544360de7be1b6a5feb1bea67fe1b226ec2693a1173d18a7f9aae49080a20782ea2fdc4de145bd8ddd06ed7e16b6408e3e8066df1f497b75b9cf0da6453f66fe49c4004b655d93ce20998dd247c7f61594f7daeba2adf4eacee497354b0569275de916599ddb503b6f661649f17ad33b4eefd9ea1d135c9a349485dad273b3f0064c749493e1067b5a331c64016027b4f06a67d61ee48a3a6e93349961e6aa4a4e1ea87bace2278b35c4d6160c482f992fb2f6199e1336e3eb1744f93ad440974d6803407338ab40d87140d8bb2abfa0924be857d9242a33ab3f736ccf214c06e8e4287dd6e79af69635999115d2ead797263fba37cb0eae40c6a703588a97a6896e177a4ed36ad7fe5944050f626ba98ce2505fdaa5ebaaf47cd962064f9237bd25fc635dbf8512bba805a92fecdbe22abd8be7a22709ea22d52db9023b7cd9c52b08c61904c156b993da71da42f2422c37b286fd1e9f3135dd6f1defa1cd7f14ffe31804110294ba027fcf9759a576bf1e0e91ea4a189bac24243a44055c58d1abd387a94a291355a62e383894c434ced110b7bbacdfdf9524b44b33f4e7464d32e3ac67bd8cc29df40790686eb9ab076378826172fedd9137e34cdc2d1ac989c150ed1c076458eec8acc37decb656b333cdf6326e8fb858f333ed3e85d147606d3b25f056d6b4aaee41f96cdff3a68a521a5ea76f4f68864eb241a62fd69ab6fa90b18e5b11a6767667922df99b23300914214848bcb6c7901a87fbd9fc6d8f3f0e950ab8a966318030e5030aad7f3122435d1b94b2e1b0ddb841a7b3eb27db1258280022123df95b2c4b448cbf332920aab61bf35abce516f27b051c7c46868d152e68b3c39ee2f384eeffa2c7b9a6a7a0fb551db9fb3f9e93ff719edc90a59b6cf0d6a7d7f5a199a23af184949bd8388af2d025bfe2e2624c74789e920ef8ce1c76144e7aff7823f7fb1329097c3e271d85595ba85aa734295395d19517951dbd155db2ae6e43a880d5c7af6969b962ab6d0179a299ec73a37e3730ddbca328c761d839eae9ec7457354e653ac1b1c8445a097a914548df87a3df172942c432cec641cffa852d5d64bf89d5c9054dad142fc5c53efdbdbb70a2666e91e98b33498859f38994270769d5b1ba798fb87796e8b935ec54a6a4ec00064f1096645a9f1a44b68a48164a6ece13918a824e1bcc8ff40fd15304a05e85d6dc3348a2419af88985ca58162a1c01dd71c60828d6edf0d3545db81abc568a3d91d985dfa30bfebadb2f74a44447c3eb4d81074e30830e17df92facbce53a4766d5e59c6e1fea3f7927b7976bdd427b66ae0bf45aa551994b480b0dde740e69de0a91e7b224022965bef625d2603c1ac3b475536a4afa75f764d5a9268e3c5da23083b158cea55b82b8cf8401aacdb12fb65ab8eb3e0830db8187f0ea0bf8a2a36ac87f49574ab18953c2e394f6ff01199c331a63db52f3840ac8cbd11a941eda49f52c79d9b31372a1d2cc56a7eed8f1dc4451c592a7bf7e9ace1885bf5a85b8301dafdf49c863e90e99642e89e58dffaf59be87eb94789931f1197c98b15fde92c417ddecc5beb05b548c96b328c7e72006352b762e341463b91e930b118dbd9de5547376cf7a97dba8f384ba15994eb110aa8230026936cbce0515d86ee76d6745c19a65983312a1d8c56f71a973135a1887a71971a96514f618f6938d94332b1674c5bd9becc575263a461d63f88659a4fc61c1d963f4f572e01f025755f89cbecf0a294854f376ceef335a2d4496ebfe0739f7fbb7a770d6f5b8c8e2479a50a5e7aaa29f5d288b791a2059bd2b434b2ebaf121bcd07c1f0e36263a205c2a7b0584f635213e2e7aef0353ee671f1560d58b5730b9cabdac409a068e9b51e6cda686de4ba02b5e1d29855df91440d9645b3a2414ea601cfd53175ca8b7d70093cbacdb745fa1684194c6efc8815ebc7ef79ee920e9220290373033a0e99fa105b8b969b3fbcd6cadb6399520663d2556997cddd1f252d95d26133244ba7a8a4817564473d44dd1db5d22bc02b99800159c277e5364d93037d212db47df074647e43ca156a219f61aa658bac6a154a093bda3d3a4cac122a106d1ffaeb13d162ea7af2d11bd7716fc4fc7349b310c2e090191d74b1ab65e13137bd47d91942a8c885c17243764ef6f0842c2fb4458f5a655008d0c4bea953389478e3ec39b35d522d0df034b229f6244d0966244f4009fce6fcfe0bb2892f4141581803c195f99122e5a0c8c3c837d204234d43fcb18318681c4e67c7bacd60e1381569bb7aba1d394917ed673b3dfe0f81e5bb9d17333ae3f783e67e3bc210d65d183d75ba8a1ab7178ac445bc3d56c8de81279db7bf5577e5c01736a582ab63be8ffa62e6d42f668b6a645eb6162c1449d17d2ba19e406af41d8ec6d8fc2e4c9bb7d52983ad43d6a144402153494b478d6041fc6274c7d0fb2cf8ab68dbf393953cc446ef295f8211aa32f52acdb948b8c1537ffee36c929df3f8ae442e501559f9382ae7373da9bf76f7e2d6826d882fd7de0b4fe33042f7598ddac89d5780ed6408f87841c1b2ace28e9116fcb6ddf54f23749e4ead184a2a8674018025253d2fdb84d80bf6ed8890845aeaf61e3576fbed4c2f54da05c2645c433bd6a72d91b272bda2bbe1921346433a4f725e03e6d4e81eef2ca5cd4c64e4f4282c21607324ea7d45c78b89474a96c965e9b2451444892fccc7e3cf2b23266f208146f631c737450a9128c25b9fc3cc17781b01424fd308f82b88d2a7da10652e8c48a2dfd54fed34de580e213a18a54af1499d4824ccc0f173273269afd7604a56bd4e829bf93c0cbd005e6c3ae9ce75433e8ce69c9f979b58c02c6031cf5f8afc2fed6d0368fc248058d1dada37d5cbf9017bd68593b92b40fab58ef6c48be654a49b3dadc7536fce27fa58617a2c3c7202e22d587a5301b31bffecf88fa1bb2669d6d7e162f4d788c8a0ea6501f8e4c67c986ff13f9e6568251461393cea3c1c2edb7c50142ff5f8da9b7806dbaa392c5ad35d45f70218070bea62d804ed8d8807d7e6d20d9c7c415ab2bd81160dea4c792bc797732a8741ae888852fd20f8a72b0b5e17051e295eeac870f4e6eea6f2856a4475c4e9c922fa4411c3677e9a78595316ac0b4dc31665d1e995414ca32c9cca879a7266206fc2509108b853675bc8a6b5869a864b0b2b3ebc2df5949ea01e9bd0a939b1fc6135e51f83718e5121a6fd1ce1fe856bcbbe4c97c48f8676b71079bfea2e0a9b64ea4def69a110d2fa459d32abaf16666f179bfacf1717d4329b31fb7ea92ac7369f2227500de2082f06981ff29e697c61352da91eedb96e756e21972b6061d7431b6693e213462634dcd692a71b26d5a312e48b591c126daaa45eb25b5b6412253bd1f505e1a34791ad4838653d6f43dab9b7ccf1691ae94365fd260947acea295aa4dc44f6188e1071b75aa21c4c367e2f36180cace71717dca2064b6435720364ad2dcc3722c44e20161cb63266a5abb40e8a54feb6f0f97b3f28ffcbfa7a68e3b136ce896978c48d0fee7118b72eacf9099a28d11e3d1aa0ddeb3eb5664e2edb5661e39c1615e497506308ef434225249185e25089066c22e94defeaf6b1f49d6626a72abd13bf59f04e0fd863e9f3730c88070eec021b978ec1ff6ca08a8ea1804bd230626d91801dcdf5bbb5e7c8950b5d101e822647bcec34be893ac23d8e955e797d78b59e63db25ff2885e23015f540cbb8df3f27b0b25b25604767d059a0da4fe502671145e10b7aafca323a2093336f321d164a73dba1b2b93f235fd9a6b05b92254053193dde89fe1e34b2c9440ade3cdade0ba8e0a89a4082b55b92917055f7e90345f259f21b7a592e4d9fdcb40876714f1f217e5b14b84b6db09517e68f418b3ff8d06212369b473cd41ba1324cdc74b5f2ef54a7629c9ff9dc34825b9748cac56825fff4f05ddec439f74b4b48d243089a4edbc527f1b9663d693554ec60ea0160c03996583dad0c16c587fb67f4cde9af89e18bc176f9d3ac430414405b7647cac24d145b85b7abb5cc5dae4166ce038c2d51c707a6b8161cadb48fce9f70a3cd45d8ce3244f5058089255aed00f430c61723c6540ac3eacd7e055fe2db8bda85c4e25e0b3bc7b67e6c5470f266b93503434060b4a47601d15c47e340523b4d1ce292cd401b36a0588c83c49d14019aaf74b1683febd66250185d271d25620fbae13b88c4c01625c7401deb8c686493a8a3a5b44d7f8d7f691e94e295acbe03fd6859e39984fc25276862084fa92bcfa4f5f76c59e285719778f8e528646b8427a94af6c4afd21d29134d8f087f60e1a10a2c4a5926d0e228e72517826b979129b16b92f78d96641a4bf48a52a251e37d9fe8386153b716f0c7fb5685d16c9176", 0x1000}], 0x6}, 0x1)

2m34.953946501s ago: executing program 2 (id=1838):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r0, 0x8918, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = accept4(r0, &(0x7f0000000000)=@tipc=@name, &(0x7f00000000c0)=0x80, 0x800)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a000d615000008009f0005000000080026000816"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000180)={0x4c4, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x12c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x48, 0x9, 0x1, 0x3, 0x60, 0x60, 0x12, 0x2, 0x16, 0x3, 0x6c, 0xc, 0x3, 0x0, 0x9, 0x3, 0x4, 0x4, 0x48]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xff, 0x100, 0xffff, 0x5, 0x7, 0x1000, 0x6]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x3}, {0x3, 0xa}, {0x1, 0x1}, {0x3, 0x7}, {0x7, 0x5}, {0x5, 0x1}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x3, 0x8}, {0x5, 0xa}, {0x7, 0x1}, {0x5, 0x3}, {0x4, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x9, 0x7fff, 0x7, 0x5, 0x7, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x2, 0x4, 0x100, 0x1, 0x3, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xd, 0x5, 0x9, 0xe, 0x6, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x4, 0xdc, 0x201a, 0xfe00, 0x5, 0x8, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7d0, 0x1, 0x3, 0x6af3, 0x3, 0x9, 0x0, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x2fc2, 0x99e8, 0x2c47, 0xff, 0x4, 0xfff8]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x0, 0x1ff, 0x7ff, 0x8564, 0x6, 0xfff, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x30, 0x3, 0x60, 0x6, 0x36, 0x24]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x8, 0x40, 0x1000, 0x5, 0x7, 0x3ff]}}]}]}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x5}, {0x3, 0x7}, {0x3, 0x6}, {0x4, 0x3}, {0x1, 0x5}, {0x5, 0x8}, {0x5, 0x1}, {0x2, 0x8}, {0x7, 0x7}, {0x2, 0x5}, {0x4, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x60, 0x24, 0x12, 0x16, 0xc, 0x36, 0x60, 0x60, 0x9, 0x0, 0x50, 0x3, 0x36, 0xc, 0x9de4e3031c71cfa8, 0xb, 0x24, 0x30, 0x30, 0x16, 0x30, 0x18, 0x48, 0x3, 0x1, 0x75, 0x4, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0xb, 0x48, 0x1b, 0x3, 0x1, 0x1, 0x66, 0xc, 0xc, 0xc, 0x12, 0x24, 0x60, 0xc, 0x6]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x110, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x16, 0x60, 0x60, 0x0, 0x60, 0x48, 0x0, 0x2, 0x3, 0x18, 0xc, 0x2, 0x6, 0x2, 0x0, 0x16, 0x4, 0x5, 0x5, 0x3, 0x9, 0x9, 0x1, 0x34, 0x34606d76414cb1c9, 0x6c, 0x33]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x8, 0x7, 0x6, 0x0, 0x5, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x8, 0x5, 0x8, 0x7, 0x3, 0xffff]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x5, 0x2, 0x3, 0x6, 0x5, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5, 0x100, 0xbb, 0xfe00, 0x0, 0x9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0x1b, 0x4, 0x48, 0x16, 0x12, 0x4, 0x18, 0x2, 0x5, 0x6c, 0x3, 0xc, 0x48, 0x3, 0x18, 0xb, 0x1a, 0x1, 0x18, 0x0, 0x6c, 0x6c]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x7}, {0x1, 0x7}, {0x4, 0x5}, {0x2, 0x4}, {0x2, 0x4}, {0x4, 0x6}, {0x6, 0x7}, {0x4, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x3, 0x5}, {0x6, 0x7}, {0x0, 0x7}, {0x5, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0x4629, 0xb2, 0x4, 0xcc21, 0x90, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x57, 0x0, 0x9, 0x6, 0x0, 0xd79, 0x9, 0xa78a]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1dc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x9, 0x10, 0x3c, 0x2, 0x9, 0x101]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x9}]}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x5, 0xfa2c, 0x1000, 0xce, 0x7f, 0x5, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x240, 0x7, 0xf000, 0xe4, 0xa, 0x1, 0x6, 0x6]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x2, 0x8}, {0x3}, {0x1, 0x1}, {0x0, 0x8}, {0x2, 0x3}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x4}, {0x2, 0x5}, {0x6, 0x3}, {0x1, 0x7}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x4}, {0x4, 0x9}, {0x7, 0x9}, {0x2, 0x3}, {0x5, 0x9}, {0x6, 0x2}, {0x0, 0x1}, {0x2, 0x3}, {0x2, 0x5}, {0x3, 0x7}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0x6}, {0x1}, {0x5, 0x1}, {0x3, 0x7}, {0x6, 0x2}, {0x5, 0x5}, {0x5, 0x6}, {0x1, 0x7}, {0x4, 0x8}, {0x0, 0x4}, {0x6, 0x3}, {0x0, 0x8}, {0x7, 0x9}, {0x7, 0x6}, {0x1, 0x4}, {0x6, 0x1}, {0x4, 0x8}, {0x6, 0x7}, {0x5, 0x6}, {0x3, 0x2}, {0x0, 0xa}, {0x4, 0xa}, {0x4, 0x2}, {0x1}, {0x7}, {0x1, 0x3}, {0x2, 0x1}, {0x5}, {0x5, 0x3}, {0x3, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfff9, 0xfff, 0x8, 0x2, 0x10, 0xb0, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x81, 0x8, 0x3, 0x1, 0x9, 0x81, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xf8db, 0x101, 0x3, 0x3, 0x8, 0x1d, 0x80]}}]}, @NL80211_BAND_6GHZ={0xf0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xe, 0x2, 0x0, 0x800, 0xee, 0x9, 0x1]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x4}, {0x1, 0x7}, {0x3, 0x1}, {0x2, 0x7}, {0x3, 0x2}, {0x0, 0x8}, {0x1, 0x7}, {0x4, 0x5}, {0x4, 0x8}, {0x2, 0x6}, {0x7, 0xa}, {0x5, 0x5}, {0x2, 0x5}, {0x4, 0xa}, {0x7, 0x7}, {0x4, 0x5}, {0x2, 0x7}, {0x2, 0x6}, {0x5, 0x5}, {0x7}, {0x0, 0x2}, {0x3, 0x4}, {0x2, 0x5}, {0x1, 0x5}, {0x5, 0x6}, {0x3}, {0x6, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x6, 0x3}, {0x5}, {0x3, 0x8}, {0x7, 0xa}, {0x5, 0x4}, {0x7, 0x6}, {0x1, 0x3}, {0x3, 0x8}, {0x2, 0x2}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {0x3, 0x4}, {0x0, 0x1}, {0x5}, {0x6, 0x5}, {0x5, 0x8}, {0x0, 0x5}, {0x3, 0x8}, {0x5}, {0x0, 0x10}, {0x4, 0x9}, {0x4, 0x1}, {0x7, 0x8}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0x3}, {0x1, 0x8}, {0x0, 0x3}, {0x3, 0xa}, {0x4, 0x6}, {0x5, 0xa}, {0x0, 0x1}, {0x1}, {0x6, 0x5}, {0x7, 0x8}, {0x3, 0x7}, {0x2}, {0x2}, {0x2, 0x9}, {0x5, 0x3}, {0x7, 0x3}, {0x2, 0x9}, {0x3, 0xa}, {0x7}, {0x1, 0x9}, {0x0, 0x8}, {0x3, 0x3}, {0x4, 0x4}, {}, {0x4, 0x1}, {0x2, 0x5}, {0x5, 0x9}, {0x1, 0x3}, {0x2, 0x3}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x4, 0x3}, {0x6, 0x8}, {0x2, 0xa}, {0x0, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x1, 0xa}, {0x4, 0x9}, {0x7, 0x5}, {0x0, 0x6}, {0x4, 0x6}, {0x4, 0x3}, {0x5, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x4, 0x0, 0x9, 0x6, 0xfffa, 0x5, 0x1]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x5}, {0x2, 0x8}, {0x2, 0x1}, {0x3, 0x8}, {0x5, 0x1}, {0x5}, {0x7, 0x7}, {0x3, 0x4}, {0x6, 0x5}, {0x1, 0x8}, {0x4, 0x3}, {0x1, 0x7}, {0x2}, {0x5, 0x2}, {0x5, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x9}, {0x7, 0x2}, {0x1, 0x3}, {0x4, 0xa}, {0x2, 0x7}, {0x1, 0x9}, {0x7, 0x9}, {0x2, 0x8}, {0x1, 0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x2, 0x6}, {0x1, 0x8}, {0x1, 0xa}, {0x7, 0x9}, {0x2, 0x6}, {0x6, 0x4}, {0x1, 0x5}, {0x7, 0x2}, {0x4, 0x5}, {0x0, 0x7}, {0x7, 0x3}, {0x4, 0x7}, {0x4, 0x9}, {0x1, 0x7}, {0x6, 0xa}, {0x0, 0x9}, {}, {0x0, 0x5}, {0x7, 0x6}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0x1, 0x5, 0x3, 0x30, 0xb, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x41}, 0x80)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0xe8b}, 0x8)

2m34.868789194s ago: executing program 2 (id=1842):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtclass={0x24, 0x28, 0x5ea11b84c59b353c, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0xa, 0x10}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtclass={0x24, 0x28, 0x5ea11b84c59b353c, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0xa, 0x10}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894)
r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000480)=r1, 0x4) (async)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000480)=r1, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000fdffffff00000000000000"], 0x50)
socket$inet(0x2, 0x2, 0x0) (async)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) (async)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r6}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r6}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r6, 0x1}, 0x20)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd7000fbdbdf251b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000180000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000)
r7 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)=0x28) (async)
getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)=0x28)
socket$netlink(0x10, 0x3, 0x27) (async)
socket$netlink(0x10, 0x3, 0x27)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000380)=0x4)
getsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000500)=""/231, &(0x7f0000000600)=0xe7)
r9 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r9, 0x101, 0x0, &(0x7f0000000000)=0x2, 0x4)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140000005e000100000000000008000004000080"], 0x14}], 0x1}, 0x0) (async)
sendmsg$netlink(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140000005e000100000000000008000004000080"], 0x14}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

2m34.457477565s ago: executing program 2 (id=1848):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0xffffffffffffff8b}, 0x1, 0x0, 0x0, 0x2004084}, 0x8001)
r1 = socket(0x21, 0x2, 0x2)
getsockopt$bt_BT_SECURITY(r1, 0x110, 0x6, 0x0, 0x20000000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
sendmmsg$sock(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)="4efeb6bca1", 0x5}], 0x1, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}], 0x18}}], 0x1, 0x83d086745d8479bf)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000940), r0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0xffffffffffffff8b}, 0x1, 0x0, 0x0, 0x2004084}, 0x8001) (async)
socket(0x21, 0x2, 0x2) (async)
getsockopt$bt_BT_SECURITY(r1, 0x110, 0x6, 0x0, 0x20000000) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async)
sendmmsg$sock(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)="4efeb6bca1", 0x5}], 0x1, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}], 0x18}}], 0x1, 0x83d086745d8479bf) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000940), r0) (async)

2m34.282819522s ago: executing program 2 (id=1853):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x5, 0x0, &(0x7f00000002c0)) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x30, r1, 0x645e4000)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0)

2m34.046370917s ago: executing program 2 (id=1857):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r0) (async)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r2=>0x0})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x68, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x4c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7bed42c744519ceedff853bccec8da4f439d4813ab299f92d3c56069871714e4"}, @NL802154_KEY_ATTR_BYTES={0x78, 0x4, "c8df528341e71a073c6ff9e073d3c285"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x46}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x68}, 0x1, 0x0, 0x0, 0x100}, 0x24000000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000980)={'wpan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000980)={'wpan1\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x38, 0x2, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x38}}, 0x4840)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xb, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4000000054c24debcd0a9d39c33fa4ec5b81d1248abb4585a317600c4ee36fe4abef", @ANYRES8=r3, @ANYBLOB="01002abd7000fbdbdf252000000008000300", @ANYRES32=r8, @ANYRES8=r1], 0x40}, 0x1, 0x0, 0x0, 0x20048011}, 0x4004080)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00', <r10=>0x0})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000004c0)={'wpan1\x00'})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r13, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="d77dccb90e908e1391104288b6f1e71e3b9db8664cb02a218a66b824617cc4d82d1655", @ANYRES16=r4, @ANYBLOB="000228bd7000fbdbdf251100000008000300", @ANYRES32=r10, @ANYBLOB="6c000600020000000200000005001200ff00000008000300", @ANYRES32=r5, @ANYBLOB="0c00060002000000020000000c0006000200000002000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x4082045) (async)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r13, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="d77dccb90e908e1391104288b6f1e71e3b9db8664cb02a218a66b824617cc4d82d1655", @ANYRES16=r4, @ANYBLOB="000228bd7000fbdbdf251100000008000300", @ANYRES32=r10, @ANYBLOB="6c000600020000000200000005001200ff00000008000300", @ANYRES32=r5, @ANYBLOB="0c00060002000000020000000c0006000200000002000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x4082045)
r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r12)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r12, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000440)={0x28, r14, 0xe29, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1}]}, 0x28}}, 0x24040044) (async)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r12, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000440)={0x28, r14, 0xe29, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1}]}, 0x28}}, 0x24040044)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r14, 0x300, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r6)
sendmsg$IEEE802154_SET_MACPARAMS(r11, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="000227bd7000fedbdf25000500270000000005002300090000000f002400020000000a0001007770616e31000000"], 0x40}, 0x1, 0x0, 0x0, 0x40011}, 0x20010000) (async)
sendmsg$IEEE802154_SET_MACPARAMS(r11, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="000227bd7000fedbdf25000500270000000005002300090000000f002400020000000a0001007770616e31000000"], 0x40}, 0x1, 0x0, 0x0, 0x40011}, 0x20010000)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x200c4880) (async)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x200c4880)

2m29.030860407s ago: executing program 0 (id=1900):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000240)={<r1=>r0, &(0x7f0000000100)='/\x00', 0x2, &(0x7f0000000140)={@align=0xdb, {0x400, 0x3, 0x1, 0x7ff}}, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x5})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r2, @ANYBLOB="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"], 0xf8}}, 0x800)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002c00ed002bbd7000ffdbdf25077c0000100001800c00dd800800f400", @ANYRES32=r0, @ANYBLOB="080003"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc090)

2m28.951641286s ago: executing program 0 (id=1901):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x22, 0x2, 0x3)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x7e26], 0x0, 0x0}, 0x78)
getsockopt$packet_buf(r5, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001900010000000000000000000a00000000020000000000001400050000003f00"], 0x3c}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00"/36, @ANYRES32=r9, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f"], 0x254}}, 0x0)
recvmsg(r4, &(0x7f0000000740)={&(0x7f0000000000)=@rc, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)=""/84, 0x54}, {&(0x7f00000001c0)=""/178, 0xb2}, {&(0x7f0000000280)=""/162, 0xa2}, {&(0x7f0000000540)=""/229, 0xe5}], 0x4, &(0x7f0000000680)=""/143, 0x8f}, 0x21)

2m28.808927758s ago: executing program 0 (id=1904):
r0 = socket(0x10, 0x803, 0x0)
bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async, rerun: 64)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 64)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000009, 0x40010, r0, 0x8000) (async)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf}, 0xa)

2m28.743046029s ago: executing program 0 (id=1906):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012b2f300010078665e6d240000ec000200bb0400000000297accb9eec065"], 0x50}}, 0x0)

2m28.633008153s ago: executing program 0 (id=1909):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x9}}, 0x10)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1)
splice(r1, 0x0, r0, 0x0, 0x82, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000000000b1b708000000000000850500e70f00001b95"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095"], 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33)
r5 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0x100, 0x4, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4c24}]}}]}, 0x4c}}, 0x24004010)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x4c)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$NILFS_IOCTL_RESIZE(r3, 0x40086e8b, &(0x7f0000000140)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x10, &(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRES64=0x0], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m27.776241872s ago: executing program 0 (id=1926):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xd, &(0x7f00000009c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m18.956389292s ago: executing program 32 (id=1857):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r0) (async)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r2=>0x0})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x68, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x4c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7bed42c744519ceedff853bccec8da4f439d4813ab299f92d3c56069871714e4"}, @NL802154_KEY_ATTR_BYTES={0x78, 0x4, "c8df528341e71a073c6ff9e073d3c285"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x46}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x68}, 0x1, 0x0, 0x0, 0x100}, 0x24000000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000980)={'wpan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000980)={'wpan1\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x38, 0x2, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x38}}, 0x4840)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xb, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4000000054c24debcd0a9d39c33fa4ec5b81d1248abb4585a317600c4ee36fe4abef", @ANYRES8=r3, @ANYBLOB="01002abd7000fbdbdf252000000008000300", @ANYRES32=r8, @ANYRES8=r1], 0x40}, 0x1, 0x0, 0x0, 0x20048011}, 0x4004080)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00', <r10=>0x0})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000004c0)={'wpan1\x00'})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r13, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="d77dccb90e908e1391104288b6f1e71e3b9db8664cb02a218a66b824617cc4d82d1655", @ANYRES16=r4, @ANYBLOB="000228bd7000fbdbdf251100000008000300", @ANYRES32=r10, @ANYBLOB="6c000600020000000200000005001200ff00000008000300", @ANYRES32=r5, @ANYBLOB="0c00060002000000020000000c0006000200000002000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x4082045) (async)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r13, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="d77dccb90e908e1391104288b6f1e71e3b9db8664cb02a218a66b824617cc4d82d1655", @ANYRES16=r4, @ANYBLOB="000228bd7000fbdbdf251100000008000300", @ANYRES32=r10, @ANYBLOB="6c000600020000000200000005001200ff00000008000300", @ANYRES32=r5, @ANYBLOB="0c00060002000000020000000c0006000200000002000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x4082045)
r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r12)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r12, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000440)={0x28, r14, 0xe29, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1}]}, 0x28}}, 0x24040044) (async)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r12, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000440)={0x28, r14, 0xe29, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1}]}, 0x28}}, 0x24040044)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r14, 0x300, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r6)
sendmsg$IEEE802154_SET_MACPARAMS(r11, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="000227bd7000fedbdf25000500270000000005002300090000000f002400020000000a0001007770616e31000000"], 0x40}, 0x1, 0x0, 0x0, 0x40011}, 0x20010000) (async)
sendmsg$IEEE802154_SET_MACPARAMS(r11, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="000227bd7000fedbdf25000500270000000005002300090000000f002400020000000a0001007770616e31000000"], 0x40}, 0x1, 0x0, 0x0, 0x40011}, 0x20010000)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x200c4880) (async)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x200c4880)

2m12.73916379s ago: executing program 33 (id=1926):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xd, &(0x7f00000009c0)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.984343344s ago: executing program 3 (id=3463):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711051000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c40)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4c22, 0xa, 0x4e21, 0x1, 0x2, 0x80, 0x20, 0xff, r4, 0xee01}, {0x8, 0x7ff, 0x7, 0x200000000010, 0x8, 0x4e63, 0x0, 0x7}, {0x1ff, 0x3, 0x9, 0x81}, 0x2, 0x0, 0x2, 0x0, 0x1, 0x3}, {{@in6=@private1, 0x4d6, 0x18}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x0, 0x3, 0x2, 0x8, 0xa7a0, 0x0, 0x40}}, 0xe8)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=<r7=>r6, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r8, 0x0, 0x7, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff9, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x45aa, 0x2, 0x6}, {0x1, 0x0, 0x3}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x810)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, &(0x7f0000000340)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r0, @ANYRESDEC=r7, @ANYRES8=r2], &(0x7f00000001c0)='GPL\x00', 0xb0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x82, &(0x7f00000001c0), 0x8)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r14)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)

1.576390694s ago: executing program 4 (id=3471):
r0 = socket$inet(0xa, 0x801, 0x84)
r1 = socket(0x10, 0x80003, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x13}, 0x1c)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r4 = accept4(r0, 0x0, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000280), &(0x7f0000000380)=0x8)
socket$netlink(0x10, 0x3, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4643070000000000000000000000050000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x0)

1.389195804s ago: executing program 1 (id=3472):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, {0xb, 0xffff}, {}, {0x8, 0x2}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000002380)={0x0, 0x1, 0x6, @broadcast}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001110ad00"/32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071104200000700000000000700000000cd1dea8f1da3b2092f99be009ba6cf046fdc5889f6d5045bfe0744ac93c0673f5563e6a50d153c423e920347a3d88b5a8e66767aa622f7cb098560f3a158c5f4035fac"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4c010}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES64=r5, @ANYRES16, @ANYBLOB="01a9000000000000001c0012000c000100626f6e64000000000c00020008000100068e2c4cef6bea7a6d168e09dd6610953ac6876d8d175f4daed9515e7f7368f5"], 0x3c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4004)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000690}, 0x20048040)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/78, 0x4e}], 0x2}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

1.287676115s ago: executing program 1 (id=3475):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44)
r0 = socket(0x15, 0x5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', 0x0})
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "e84c4e835beeb26007f2d13c341d2dc7"}}}]}, 0x48}}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', <r4=>0x0, 0x0, 0x20, 0x9, 0xff, 0x20, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x9, 0x1}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=<r5=>0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)=@newpolicy={0x210, 0x13, 0x8, 0x70bd26, 0x25dfdbfc, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0x4, 0x4e20, 0x400, 0x2, 0x80, 0x80, 0x2b, r2, r3}, {0x9, 0x7fffffffffffffff, 0xb, 0xe00, 0x25c3, 0x64, 0x6, 0x5}, {0x0, 0x8, 0x1, 0xd}, 0x0, 0x6e6bb0, 0x0, 0x1, 0x3, 0x3}, [@proto={0x5, 0x19, 0x32}, @policy_type={0xa}, @extra_flags={0x8, 0x18, 0x10001}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9b}, @sa={0xe4, 0x6, {{@in=@multicast1, @in=@empty, 0x4e21, 0xff, 0x4e24, 0xfff8, 0x2, 0x20, 0xc0, 0x0, r4, r5}, {@in=@private=0xa010100, 0x4d5, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x3, 0x2, 0x4, 0x27a, 0x10001, 0xffffffffffffffff, 0x7f, 0x2350}, {0xc, 0x7fffffffffffffff, 0x4, 0xe2f}, {0x4, 0xffff8001, 0x14aed556}, 0x70bd28, 0x3500, 0x8, 0x1, 0xa9, 0x3a}}, @encap={0x1c, 0x4, {0x2, 0x4e21, 0x4e21, @in=@multicast1}}, @user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1ff}]}, 0x210}, 0x1, 0x0, 0x0, 0x800}, 0x80)

1.222332542s ago: executing program 3 (id=3476):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "dad6db2a6e6fb222", "642201ab898530241e40c5ab2f66214d", "c9d4f80b", "3ecd4442b731d1b1"}, 0x28)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc040041)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f3000000000400000000020000000000001400", "e73400", "000000d900"}, 0x38)

1.206567327s ago: executing program 4 (id=3478):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x31}, 0x50)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e01400004fcff", 0x58}], 0x1)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x3, 0x5, 0x7f, 0x7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000600000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
listen(r2, 0x0)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.167581406s ago: executing program 5 (id=3479):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={<r2=>0x0, 0x5}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x3}, &(0x7f0000000140)=0x8)

1.086458228s ago: executing program 3 (id=3480):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x1410, 0x100, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20011}, 0x20000081)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0008000103"], 0x42)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)

1.085369443s ago: executing program 1 (id=3481):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$sock(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="95cb57f7f9f5e9b19422fdbba16052a29a2d3be6e213bd75a97b56c7dc217216090e7c97", 0x34000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000880)="05ba8c1cfb03f631fd2d06121541e78e6718599f7482f9b4b4464ff2d795", 0x1e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@initdev, @multicast2, <r1=>0x0}, &(0x7f0000000040)=0xc)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
getsockopt(r4, 0x111, 0x5, 0x0, &(0x7f0000000080)=0x5a)
bind(r0, &(0x7f0000000080)=@xdp={0x2c, 0x6, r1, 0xd}, 0x80)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendto(r5, &(0x7f0000000100)="6a072ae4bbebff350823105e8f78a3cdbb002c11cf54ac52835e4fc9c51faa6c42832a", 0x23, 0x0, 0x0, 0x0)

1.019996352s ago: executing program 6 (id=3482):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d3, 0x0)
r1 = socket(0x10, 0xa, 0x9)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10)
write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

973.822432ms ago: executing program 4 (id=3483):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xd}], {0x95, 0x0, 0x9}}, &(0x7f0000000140)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xee}, 0x94)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x9, @mcast2={0xff, 0x3}, 0x80}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x3, {{@in6=@loopback, @in=@broadcast, 0x0, 0xd, 0x400, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe, 0x3}, {0x0, 0x1765}, 0xfffffffe, 0x0, 0x0, 0x1}}, 0xb8}}, 0x10)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'veth0_to_bridge\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket$nl_netfilter(0x10, 0x3, 0xc)
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x2, 0x2, 0x1, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x11}, 0x90)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000f00))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffec8, '\x00', 0x0, r1, 0x5, 0x3, 0x5}, 0x50)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x85, &(0x7f0000000ac0), 0x90)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, 0x0, 0x0)
bind$tipc(r8, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x4}}, 0x10)
sendto$inet6(r0, &(0x7f0000000040)="82ff0000", 0x49, 0x0, 0x0, 0xf)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000a6000000e6010000fbfeffff1801000020646c2503000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020012f2cb1c00b70300000900000085000000060000009500000000000000d731c947e2538ec1b1a4261cf953ece8e36939088fa14b6122730be6b967a76ecf09655c31eb4ea103e03c56220a9bac486088b866ef688cacd0326fc0c0d5be6abfc1db0757db02b68b322c220aa9a9f170987b6e064fabc2a2e68aa1579f364632a6163eb88d9c80d98ae053a102d1167224e6150c893efbe6068340badb9a536e5af806c82c7c53a3fd"], &(0x7f00000001c0)='syzkaller\x00', 0x80000001, 0x65, &(0x7f0000000200)=""/101, 0x41000, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x5, 0x1}, 0x10, 0x3b8b, 0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x0, 0x2, 0x2, 0x3}, {0x3, 0x1, 0x2, 0xa}], 0x10, 0x4}, 0x94)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0)

910.451144ms ago: executing program 5 (id=3484):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x80000001, 0x2, 0x0, 0x40, 0x100ad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xf, 0x4}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r2, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000000bc0)=@framed={{}, [@exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x38}, @map_fd, @map_idx, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2}, 0x90)

910.023303ms ago: executing program 1 (id=3485):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x801)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
close(r2)
ioctl$BTRFS_IOC_ENCODED_READ(r2, 0x80809440, &(0x7f0000001980)={&(0x7f00000018c0)=[{&(0x7f00000001c0)="c7f72fa93033d34bbca98f7c95587d9fdb8d3166e6cc2eb90b3d334dcfc3cfa5f1bf213cbd4ba906c6783f112422b7a3f5c4905307045173604e3a4d3c46128b448fa2cf55393de8f85d9d54ccb8d4e69add8b33b24ce128a3f7092472a2f3769e4c5bdc21d15edcd6e233e7ad520e992715cc9243fdf0707008f4e2aa12fa4919a11b9bb7b05ae164c605e6feeac7bc437fb80a301527a2a16b404eef8b414dfb732556062ff32f17212af7e77cd48424bb38282582c7c1f76c4591471677dc5cbef236f96303b3f98d6c163018c8e72f26e8e8", 0xd4}, {&(0x7f00000002c0)="059e2bfee8d62317315662171464da51d119203ec5ded58e4ad8a595cb4e8c2dc4547942d677053664e628f2a76f4e57c5dfd368b15010165457f0354f10e93efc8d9c4eae6f86ea033b5b7f4a252b1b5f3428d606a0ae35b37c7be022649664959f267a7e395622cfe410a41ba47bef8b35e0549aa16e09b7a2671e9229256abd626f1f476267c064c73e0cd17e8c938ad227c3f2155cd7360ef6f7d7674bda398b7366fe330c78c9ddf497b73043cc4f17be25edc44dc1c1cb852c5327fdddb8efb3e4ec39d3522c88a5846b9c1fc179c6aaf4", 0xd4}, {&(0x7f00000003c0)="8f5ffc1496339475c655cda09fdd5865035a9cee356a28b2d58e7e9d96dca2513abc2b695020b1975aa03c447c7a2464bd68e5", 0x33}, {&(0x7f0000000400)="73fced3d02a28b97b953d908933f2e3d1e52f60935f058f2e48200603f1497f8b7442507cd80218480be7b2c9af7d9bc8b90f581eb3cf6caac6c26b81425ed9dfd9528400e4a4a78b7fab30c3fa0f2cdeaa5e117e7a9a878", 0x58}, {&(0x7f0000000540)="62a769410f576631f0a4ec68ea2144c94d7930ab44c4f055393c8306a9c55d43d0aed2114ec6fc712666f2ecb5a0df069bf1f9a5f29ead469fc7067593b5e402c8f63033b4231151a1b2cb848a21ebaf6d8d6e479fbb82b62d9d520c6234d7d905506e55828c65e6d5168d07b1a40eb9ed0913d936b87e486470cfcf668b30aa2dab57f0b805f3529d3801874d3067fe2b6f6881796719224596728041ef9d9a535e460407d00c78be66412b7a64ec2001e79dcb766d9b9e8ea842f17b23faa0d57bb996356d11820e2a60e7406eb906251b783dbc7b7e051d731211699af89ad7ea8d2dd21f8e44ee0e575326e2755356defc0de0b3d19bc66b0d32219cce2c096e56b457a83c77fb38266f864ed0a05d073d348f9b852a8569e6c2e0ef58a8b0766bd71b931cb6340da43457b9dbb19ac0e321223804f9ffc3b4a05b3b8ae242f77144ca1eba0d7bc89e0d1642eb987e44d652984b87a7f1c82d49bee043bb937d3189eb1aab0eeb0df1edadd13d8f7b6d6f017ea8f723494535d46a196473812c16e557c34c081b8c34c1e5c26267b824a22e5803e02ddd109e00bb59a931db1f071fb1bc34683a04bc60448fb05e66d98a9a2c05aec468724b2e654db718a9a76b0968962f1464399c2b2eafb2599ce912ec2baa336750afca3e3fa57213a31351e3656f500c83ba0aefb4bad5b4c6413aaddf6a792f80338ad2778aa0dd3917255581dda10e9d68f7a5eb7476d7bf499d94d3a99f45adeb911953094e31e0719e36ebd3c18cf8068b6b439e6b8443a74f2762ac889ea171046fe0c3e094c6bfae811fb8614507490e2d5855ee9622e2e93f2f7000d1f5247017506dc74d40e886e6a9ff7c774bdd31176a03aa9134c329764edc6fe54a6e139bb20b140e3d4d7fbec77b1a1d893b31ea74491f00647bd109830509ebd02102c877cac42b5de9585751695582e0a8952821a70816bf4967a6db347261058d101e941c68b6aed52f0d2692eb83daf57afcd27307a421bc80a2c2e6df9485340903b75e59e004f4dacaf21efdd09f5136176ea7a39e820b95ca4b7f9296a3f53a4bdf515529120c45427eebe33895c25e053763aba1c5d6e29cc31d7c30b7e05972c8e5144b5278dfd301e42cad700ed2d1880d0f744d59ae5bb16ad8deff0a18f4063b38426fd0d52247f1f077acf9c42a5156163673c3cd8e35f05327b0157b2fc92682f805789740e76be8fb091c93f766200d24547d1c16812e2902e0329f1106c2ab5a07a09b450a6b92a4f2efa36a548dbdaecf216fa1f6cc7419e13edb8c26ff2c62f7d6bf9b273d1284b36f2f180a6262436f333bf0a2d910464a0df2540964629c94f0d353c086425e6ff77abeefd1abe4231ed6adb61db534c810c9e41637e689d038a2d8650eeefa21baf6eec61ac61204a72332cdd24cdbe13e51f27017d87fbe892a47867fe7cc9b5f557fdb90b0bc039da672472cb04babe0f0c353ee7c544931e04a32f231e16a540b88227b3eb13565650a7e354b7c5d3a4c1276fa20b2889e3c14ca02765b990afaccafdbf0ff84a97eb58dc02071aa37cb3cb5f134504d98184f6cd6fff190a8ba66a33ffd4141a30d6aea86b195e79a35e700b552ee96f2b408e943ba21086c9de3b07247ef0157c8fef193093315f65e842d3421836e7da38e5957117c62ef6c33e215954e44e015ee0c280f08a824877f86d1afa22bf51ae5ef1f505c247c245c57b3f6975fbe67222f306b8dcd82922cca04e0e931a2dc9e29d03b3f70fafb3e2e35374b04a14125de6efabf1c23826db98b4523fb5cff759c23552c8376667399782e97c92530067bf9e1ed59ac7dea9b44465f9232abcd0533b08b4026ddc3375a939e11c9d3a2311287b7167357c3e77b5c43a60f2f58297b06ebce9351bab91a99a3be1d6987935c981a51d455da1e0505030bcaecfca170f9b633083c03a06093f9263035dc6ce907b6d1ea1b834cb88b50ba21760f4f163421a3b96cbdf410299f48444d6572c221ba2c2060a41fe9b4b6bfd77a0fefe10ab62dd921b0da446b95463c0cd87ead7fc291de1e355a640d9bc7dc21fc5af42419243b1ced9f94f60420480b9b131921308ec48d2b1f030dfe37fb03728dc1d45e7c70ede7ba87b2af0aa044d36a9ee91c7e4b87213d5a982f22c33d6863f1f3ae2e4b3c8ccf1bceb557364da14ead699f3976ca70d7fb15c3889d78f08cbe5850e4d46a6dbc47286a7d68e061eabb68799c0a0af3fa1ee463d6b3a239b1200ca8710c621eddad8d61ebca42fd2b7556e7292086c2d2929a572ce964ef077b293379a754316acec108a1b23c332951bca49724cc90f11cb5dc2a077b68ce9ecb710add723dff8b6ac0b5202bf5449a93915cefcce2b814c3b13d84591867e81ebbc427ed10800fe839603e8c08d01053b4edf915d6a20f94b82d5e8b78af7e9e106a4c45c27558a64e3ed4460b830b890bb45a221ca2f2828cf6d450f5dfce3b299c2ca73e9d67f20f5600f9f40597f5ea55dbf41b1cdc0a212cae2f9e2b7b1a4c0bea7f6936d2a9dd1037b2499073f99bd3b5cac25e7fbefaab711b3cc09e098e1c5ed32223ce927481f0bfa821f84c25d3770135729c30590c5a07093225fad87397483929326ae80517d980a8acdf28cbf4791ba923d088beea3fde2080a1da5d90931f3b0129647c5defe0e9e86883e0f791ef75b12e533a4d7f4167daddfcca75e803eb85bac6a6fea9ac7a5555e1e562a059b85bcf10cfe57854714a866125adaa86fd51b781cfa60ced7400026f8f1a020c158513f3034c3b2d78c9c787bd2afcb5373508bbe9623bf862b63470fa85cf917b01a8616fb5e39621b82c2dc52017172dcc91cad0443ac2b80089684afdd0c627521eb2e6d010e8d6104d23c4768bcf608771515d3886ae4bab3dac2a2a20d9ce446e70b931340c3eb48c1dd7efa36a565484de43b70d2f55e2cf9852aa89f22531ccca7084624d69f656c896c15ebbbc254b3bfa512e72a71c417823fbb98694c1618cac437f3d719b5a0d740880493778d827bf0b8c8e8c8a20db5128006b1b50c4b201f54e7b9e42394d574b654d369d1babbc1baf6afccf547907d568e222cfe8907a49375bcc86fec7ed47817e0745bcbbda11e3a4cac831af81ab6f7d1897a9e46a339613689d337c17e34b6cdbd78eb5a63f80647f356d5eac8abaeed2ed1233c264cb09962d283f4d6dc2ce1de5c15e819bab2831b449881d9103d02bf07dcf4f2a5ca1abd7bb4d8f380e51d60f8b7ef072d8e0f929c43b1cd94d2ddef5409eb0e9b1362ceabba8f86fed96317593ac45003cb718c7c04077fa0b455cd9e07ab393adecfe910c6cc5f9e8265a184023cb697967e45fe0aba48adc7a97c74678e92aef59eec2684d63a265f0593d9e72c35f8c10b06b372dc33ecbdfc9f5738499db484d2d96183c39244a2439adc545a2c19d6f74ea670cc45880d7e967f72805c424e18ff7a7c8114f0e92148cb7eea754c9df07acafcabb67632ba1d7ce7aa51af003246ca38f3f14caaa7e42fb2541591380fcd0201373a8d3c01d092bc9022681e73f5c3238d3948ea5738cb4b9316c11455fec0e0da2eec77a2aecf69144faf01c72b7166e36c8170022e3714d755b17d1a2ae474b67914424d6ea038ecb2b9f51a9c0b18265198f8563e6b12901ebe214ed605ab52dc8016897dad6026228965e6f44f585618f113811eda4b1bfed5665ed87f9566a96c00f7878ca27f3db524f773282a4222f593d020818a4b070d83a052c6e9278847c3334c7ad58a3f86ccac53c880e1d67a922334dd4b63ba60b9e2ffd2e6be6c2177056067835ca050f0765cab3fecd22143cfc35a2f2793436ccfdd170cbc3cad5a2547618643127913b7a61ba23d23cb19aa47aff8d8632a97c8e4447f4b84080e5fb43f4fd1b90d5b2c2351e785ed9f50a5e39b5e7e4b2907eb693d6390d3c76b0745c1c2e0269c7decb5db3fc55236ccec0e6a7d1a3279ebae4a467971aa6452f98cbc8dc810c6f7f6ed52a5e2eb3fe20fb649fa9ce4b901e87171e5d0c1f076172761a748eccf5784115a0a822f0971e4e5939589e0d50c713b9cd121664603d298fbdf4db1c8f013da8d5888f79e7961e04f7bb99ccbb4b793c6d9f7e6f5d383242a7c88e62a60425c0d46702661aaea9c773f258e0b08492857d000929ad06fc14c8884ae993092f3c6af465cee971899629439e436df46746765788aa9dab0443ad8b1c688e248e651fd46e28bb2ee0f3e8dcc3be3741a6b18f7d629e1b7b9017fe9968ce7fd612a78081180365b993c08997bfb8ff499c2a42e2d0dfb0de715661bbab099320765d5be7881ccf8b3d2c4ac482cc48ce8a7b276e64b84e0ea68f614deb932bc3268734a6ace551c47294f10a36948d6b508fe99e0602741c29262ea2d05032cf7bb950f2f19ac57bee262f4ce09f12546450234296e96bc10a44ea7d538e29c37f292804da2e6583219bdd3350f2ed31b084f33d1ad39dbe802192c2e6391e650b2abfd3b80ef5c01fe46ba9b4707693657f76022f04ceb28980cad51bee3f20c8870ade901a61bef4a1c58876a14e80912893d48a25dd62e953be1d1ff093e526e9ea9987e2e89fb41ce85efbf4a39350fdf89758ea5ceff58d4b8cd52f89fd7d2fc0ade50cc04fc965ce3a3f736cafd3411266442f74bbc00cf5539ccebf651450281004e51bad131348daefe2d591f2e6291eb15ebe230155917beb1408c330449ffaaa1653f288a51ce77f9410b9076e7bece72cca4c0766920c9a0b474fa16e074878fb0cd355df0e125461cee96351f25d2e674b39d70b5531b5a87dddb2184d786503b82ba7b2158da4f2490e67e6c142ab205efd4ee9775e3fbf725b07dbe222f019f4982320cb610d7658a57d2a88ccf2bf7067363958f976a9e9b8a8052898f2c7221d0bc2d868e26cb652d9969a2142f1588b4eb195a1a405a28b2866b1224d71bbfc66e10f57eada3b0d2194886909e41b1be15be576c1a2f9c8532465fbfd729905b76980a36d85b31b82fa30c9d69212bc6391ed1923d37d9bec3d3577342da0fd52ea50939709c227ab8ba7b1bba1901ff1c19f65427d0664f711ba97476c8d9f16ea32543a2355ae75c0c20298c691e30a873f85b6ff6b226088ef93ef4ce65e0d90fe51c49954e37ae350d82729da7d29b69aba1be8814546be387b79fef3886622cfd8fefe770759da86b230b4115eba09ff0121cfb56f959c8d6d27fde4d09140f3adf2cc2bc2ebf179e82465361dbf51c29cb14046d35ecd1d7967b73b5e8e6686399888fd4e09cb47be825d882d62f63f2cf70c2f357c029b7450a87479262ce4e593913753101ca3ccf5ea303c1ef9a3f59108404738e1674177fea53aff4c0599e737355e48c92695ffcc242285823f9c92aca57ca38dd9c0e43751065d291a63ba72530ec47f12c09c128f8a5110086f832beee81095242f94a341453cd91f9b5ae5105761efa91281a35c832c62770784c320d2de356da70e58155a48d9c27ef923af3e6473ef33c26308a76b02e49b1f84fe6833a3f355bd43d6ee917290899cf179732c6fddead93821f5def79ebbec06c2a74bf8d431c884a79a04d7f17e953189bdde1188749af24aeb37244c8eb8391ccc31f23af2e431388bfccd6317fd8029a925502a4ce1b2f1126ae4983ce11666b0665644adc23b8830df7883e41e401a971c3d454694aea5c3629d8a23a505ed3f2ef23f93e5ea83535ce95ab16ce9aebd72c0ad5900e865dc7357467c", 0x1000}, {&(0x7f0000001540)="de647062195c22ea30e45eeb210849ff7f133eaf1cb13cc3a0b7f3cbbe695dfe7c7475a16032580ef56b6068f24abf39107d99ff2d13afbe22a12250e03d53ae647cc7eba6851ba814ecad06e48d38dea3cd0eff4339201579ec36f2e65276bf9b7c99eb246163615a91bb957ca5e2abaaf3db54aef74e63c8af31d7d306a3557085e606245767d738df114cd8df41b537670efa6df75967b122435ca87e0053ea46cda578c18151577c357511270d1d97b081cb621bbfaf624297877fff7fc570685ecca44ad43b583539bd963a581ebf8aed087562d3994339de79a4b3d4b0af33a9ab6c43797e3703564b7df0d0c8", 0xf0}, {&(0x7f0000001640)="db64f91b0742a41f860bf1b3bd0d8b8f3a15113c46f442fa91df04411ff9aaac2fe576e44f4c26248be22e387f7c82aeb2ffc425b5e9cc9bd85e4fa1b00f991741974b62952cee0f55f9fb8b0771f2e4da762bb9e9bd6fa6bc371873b1f62da25ceb73aa3d2e962b4a999133b58231a6cee37b8a2773a3069aac59a585831a8f5a8836f0eeb26b992b19a893cbbc40180ae9523893a0a1cfcd31b917fab7602ef988c7b4ea049a56", 0xa8}, {&(0x7f0000001700)="0014936dd5b509c50cb4b08ae4c256cb2d3fb85d350167dcc928bc5961d095962676513aa4d789a5f2ad41d4d320247079f3f1e04648a5dd6bc9194fd4f5a99dfc006ab85f1ed0f9096e9d1b2b5d0fd63d928ec1bc1d455f8d65b55b4fe404b70d9df9ca6b9ac09531a7040f0837848b1b5ce35eb5db1bc8034fb0d8da3673f56bf18550ee59f120ff142fc4aa08a92248d09bb9c7f547ad69e818", 0x9b}, {&(0x7f00000017c0)="7e643ce1de01d8ab2781ceb5f11648c0c2e3a9487a32a03edb5e91955d15b522ff080952156690bcb80d5dda218c814d53e290b2c8c0e0c2801f3e2ade666ec5030a5821f9f8bcef8ce045e65912d38c76d9e1a448563f451e98105b34c2f1b00b84677b767e4bd47fa370c8d7b2a13ba60a7aa3e2a16d18ef2adb86a0e67ccb14cc8ac9bc52485962cb3d24ba78efdd757742d16a2d8f53ced709ba5d72aba727c7c6e978d8e76ba00cb5a4a92a9cacd4eb52346878b3cc152a60ba90e077", 0xbf}, {&(0x7f0000001880)="2927d85c6634dfc7b1e5e1ebd1610c11", 0x10}], 0xa, 0x3, 0x0, 0xfffffffffffffffb, 0x400, 0x770, 0x0, 0x1})

872.202998ms ago: executing program 6 (id=3486):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=<r3=>0x0)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_APDU={0x5, 0x19, 'O'}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f00000000c0)="feffffff", 0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xfce6, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}}, 0x4048840)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r11)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r12 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)

810.465121ms ago: executing program 5 (id=3487):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1)
sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01040000f5ffffffffff2000000009001f00706879316000000005002000050000000c0005"], 0x34}}, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)

650.083583ms ago: executing program 4 (id=3488):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="169381", 0x3}], 0x1}}], 0x1, 0x48c4) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x20000000000000a, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
clock_gettime(0x4, &(0x7f0000000000)) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50)

627.568675ms ago: executing program 5 (id=3489):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000018c0)={'gre0\x00', &(0x7f0000001880)=@ethtool_cmd={0x43}})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
bind$netlink(r5, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0x8, 0x2, 0x1, 0x0, 0x10001, 0x6}}, {0x10, 0x2, [0xfffc, 0xc2, 0x7fff, 0xfff9, 0x800, 0xffff]}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r10, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r11=>0x0})
r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$PPPIOCDISCONN(r12, 0x7439)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCBRDELBR(r13, 0x89a3, &(0x7f0000000200)='bridge0\x00')
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000280)={0x0, 0x0, 0xf9, r11, 0x7}, 0xc)
setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000b00)=@nat={'nat\x00', 0x1b, 0x5, 0x3e0, 0x0, 0x240, 0xffffffff, 0x240, 0x0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @remote, @icmp_id=0x65, @icmp_id=0x66}}}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0x0, 0xffffffff, 'bond_slave_0\x00', 'veth1_to_bridge\x00', {}, {}, 0x2e, 0x1, 0x24}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "c09b"}}, @common=@socket0={{0x20}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x11, @dev={0xac, 0x14, 0x14, 0x1f}, @empty, @port=0x4e21, @port=0x4e23}}}}, {{@ip={@loopback, @broadcast, 0xff, 0xff000000, 'netpci0\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x21, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x14, @broadcast, @remote, @gre_key=0x5, @gre_key=0xaf1}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x5, 0x5, 0x4, 0x2, 0x1, 0x4], 0x4, 0x1}}}, @common=@socket0={{0x20}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @empty, @icmp_id=0x65, @gre_key=0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7020fcdbdf250f0000000800030084b5722844b4d348ef894c0cc94da2a42ddd2a4abe3fa4b7633c9c", @ANYRES32=r11, @ANYBLOB="08002c0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x800)
r14 = socket$inet_smc(0x2b, 0x1, 0x0)
r15 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_udp_SIOCINQ(r15, 0x541b, &(0x7f0000000180))
setsockopt$IPT_SO_SET_REPLACE(r14, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x618, 0x0, 0xe8, 0x0, 0x2e8, 0x1e8, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@multicast2, @multicast1, 0xff0000ff, 0xff, 'dummy0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x11, 0x2, 0x2}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffff9, 0xf7b], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x5, 0x2, 0x2, 0x2], 0x6, 0x3}, {0x0, [0x5, 0x5, 0x5, 0x7, 0x2, 0x3], 0x0, 0x1}}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x1, 0x0, 0x1, 0x2, 0x2, 0x4], 0x2}}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @loopback, 0xff000000, 0xffffffff, 'macsec0\x00', 'team_slave_1\x00', {}, {0xff}, 0x0, 0x1, 0x10}, 0x0, 0x188, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x6, 0x1, 0x38, 0x0, 'syz0\x00', 0x4}}, @common=@socket0={{0x20}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x3, 0x0, 0x2}}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)

587.865319ms ago: executing program 3 (id=3490):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r3=>r0, 0x6, 0xd, 0x9})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r6, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf250100000005000600af0000000800030006000000050005"], 0x2c}}, 0x24000806)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000140)={0x80}, 0x10)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000cf0080202000000000000000000008000200ffffffff080001"], 0x2c}}, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x20, 0x1405, 0x1, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0xfffffffffffffefd}}, 0x0)

465.660776ms ago: executing program 4 (id=3491):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r2=>r1})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x48000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x700, 0x1, 0x0, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x0, 0x0, @multicast1, @rand_addr=0x64010100}}}})

464.988814ms ago: executing program 6 (id=3492):
r0 = socket$netlink(0x10, 0x3, 0x12)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c43000013000100000000000000000007000000d0dd7eaaf56cb31991b2fdfef9c8d76225a758c952feb989d5393ab40e145b3dc3e3609afc80", @ANYRES32=r2, @ANYBLOB="00840000000004000c001a800800048004000580"], 0x2c}, 0x1, 0x0, 0x0, 0x60}, 0x20000000)

453.489554ms ago: executing program 3 (id=3493):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250a00000009000061117000000000001800000000000000000000000000000095000000000081b6"], &(0x7f0000000000)='GPL\x00'}, 0x80)

374.562055ms ago: executing program 1 (id=3494):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x28}}, 0x80)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r3 = socket(0x1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
accept4(r4, 0x0, 0x0, 0x800)
bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)
r5 = socket(0xa, 0x1, 0x0)
close(r5)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x12, 0x0, &(0x7f0000003c00))
recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
r6 = socket(0x1, 0x803, 0x0)
close(0x3)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
sendto$unix(r6, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

273.711062ms ago: executing program 6 (id=3495):
r0 = socket(0x22, 0x2, 0x4)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000100), 0x4)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000fddbdf250600000008000300", @ANYRES32=r4, @ANYBLOB="d59c0900c98a4b0a4b240660edfdc40a2bbf622e2f000004"], 0x38}, 0x1, 0x0, 0x0, 0x41000}, 0x48000)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000000)=0x4, 0x4)
mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x800000, 0x11, r1, 0x100000000)

272.114469ms ago: executing program 3 (id=3496):
listen(0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000780)={0x0, "d16ca4d16d9fb8ccb59123b208ba9c02"})
r5 = accept4(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x28044854}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x9b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r10, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}, {&(0x7f0000000800)="258d6ac381562407cea4d3e5092130c7e922ab9a89bcd856d7f9459fdd10974c51c97e41b980bccc094742796e60ec164f9a91f87da52f71393b2c6d408bdbd8973f8aa5fcad81a8aadebd14adb648485a39ca8a3aac7c3e5537c7d992deaa05b9f2b4642ec73aea7a143bed8469bc2e04d59776e2931b7fe131a2c3cbdc7442415511507cdeec64d381cbf50c08a888c0aedd71e26ba6679daaa11c6ef2956e1212e26638b4587a53d43768a2b4af6af7d23f39537113e06f36c779cd07098435e405d0d140e0c533bd337bfbef60bdba19ca423a6b5056bd53c74a3fc8df316e6822ee9c6ca6dcee234184bfcfa77c63e92aa6", 0xf4}, {&(0x7f00000009c0)="b1435c7b947125b263d85ac30cb7ffc7855292ba72d726851d9fb18d574c4aa8f894cd3602a01f09ba677fa14acb586e07ab13b1a014c9160756617d178a5dbfa122490cc0851b6ca0d5f91e82648608568b1043da588a3c75fd27ebceb994e892e07da952d99bbbcdb5a33c63aa05d3abba5970a9aae7448e356ebfc0bd7944ea9aa53d274367cf71ca1a4f72530e9a11629da0ff33b4d667dff62d", 0x9c}, {&(0x7f0000000ac0)="2bd4c5812005a616b58a605767f6c99ac4038e8661a4ad1fef7ff53a605c0111af3f354bf44a1f38659151648684b12a85fc9859f6aa0eaeb459db0e24616333a4aa01dff64593257b06606b14fed386bd9123ed5a907e565a716479a7409252d80ab3631cea08c6f9b1337a17037dd32aac54e9127f49c321b183592fc9720d9da8eca7c4dc8177b1f9d83e8e68e81f38eead6e4405c11e92aabd8e634bdd88baab2b0c9c15c5047d8fc82c6cdeb8f2f4cf2196602b3e5f256b6a57f5f90a71090b", 0xc2}], 0x5}, 0x4)

223.288473ms ago: executing program 6 (id=3497):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x0, 0x0, {0x49}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$sock(r5, &(0x7f0000000000)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4)
close(0x3)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4})
mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r0, 0xf6695000)

219.193252ms ago: executing program 4 (id=3498):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001500010000200000000000000a"], 0x14}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10102dbd7000fedbdf25270000bec1ed216f6897983afbc60008120300", @ANYRES32=r4, @ANYBLOB="0c009900008056003600000006003600faff0000"], 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x2000c014)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000700)={<r6=>r0, &(0x7f00000005c0)='\x00', 0x22800, &(0x7f0000000600)={@align=0x340, {0x800, 0x7, 0x0, 0x8}}, 0x7ff, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)=0x1000}) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0d00000000000009f3e10b399eedf1", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x800040, 0x0, 0x0, 0x41000, 0x60, '\x00', r1, @fallback=0x18, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x94)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r9) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x7, 0x3}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r10, &(0x7f0000000080)}, 0x20)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32)
r13 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32)
ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
ioctl$TUNSETLINK(r12, 0x400454cd, 0x10f) (async, rerun: 64)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r11, r1, 0x25, 0x8, @void}, 0x10) (rerun: 64)
r14 = socket$inet6_sctp(0xa, 0x5, 0x84)
r15 = socket$inet6_sctp(0xa, 0x4, 0x84) (async)
r16 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r16, 0x84, 0x1d, &(0x7f0000000100), &(0x7f0000000080)=0x4) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r15, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="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"], 0x18) (async, rerun: 32)
setsockopt(r14, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8)
socket$nl_generic(0x10, 0x3, 0x10)

214.532894ms ago: executing program 5 (id=3499):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) (async, rerun: 32)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) (async, rerun: 32)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000440)={'ah\x00'}, &(0x7f0000000480)=0x1e) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48)
r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x7, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x4, r1}, 0x10) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="911000000000000000000000000000000000002000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0xc0, 0x8d, &(0x7f0000000040)="755442d276fb0278ffb7213b37f42ce60a75391a2220f91751c55f48dc7d39f5e3064007078f9459a355a72bac97c87a23b1762be217cfbdb0cb54f5f37f0540891ab371d19e9cacf93e45ed1fbddae7c018a1751cd8c793619e4094e15ac88a4a78e434e8889299f36384ada363ed061f8f212cf532e6a1b232c75fccd1804a515a6ae50a852c7343b178a3db56ab7769c3f75bd10355b4d2ef61d141c777f900bf9c8aceafb957baa4c9749dc4253fed0903e9fecfa62cbc1abfdc43bb34b1", &(0x7f0000000140)=""/141, 0x0, 0x0, 0x67, 0xd2, &(0x7f0000000200)="ff4de40422a924f7dbdc234ea922805c3d2f23185f52050572391937142d4044f2d022463ca72c751b5d790065b4cc27b4037cd6dd48c67073c9d71c6726f78d504fdb73a550aa308b7195e80d414dc71219af19429dcc6221104739b9c2f5485db2d847946be6", &(0x7f0000000280)="c798de80c46aac5f67ac7c6e0f362948095998086662c5b8a202c1020b0b3a27a54b60a921e89b0f22157d65205658182879c1af24026b490614ca924c9aa427fe79be110ad526a7950ef9bc8c0c36b7e378b60703e9473d3f08d5de35a2e8e70f146a0e1b329650e511eabc2d9c22e6cd3e43426855a1e692832f1c649c4eade923ef5fcb403c10b500519f160d05727235bcad63b5ec81f82590e96243b03b4707b0c8cd5b69581a1564493374d70db628028007c9767d899d502c608992e779b258857fb8e60606871acf28dc6d9d78d2", 0x1, 0x0, 0xffffffe6}, 0x50)

118.447585ms ago: executing program 1 (id=3500):
pipe(&(0x7f00000045c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="d956ec0756dc", 0x6}], 0x1, 0x1) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r5 = accept4(r3, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) (async)
splice(r0, 0x0, r5, 0x0, 0x10000000000066, 0xa)

56.718984ms ago: executing program 6 (id=3501):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
listen(r1, 0xfffffffc) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async, rerun: 64)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) (rerun: 64)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="290000001e00190f25003fffffffda060200000000e80001dd000804f4ff0800ea11c21d0005000000", 0x29}], 0x1) (async)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1401, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8c1f631e17a8826e}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000000) (async)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff, 0x20000000}, 0xc)

0s ago: executing program 5 (id=3502):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) (async)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYRES8=r0, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="00020008000000000000000000000000000000000000000081905d1921f5ec75000000001b70c6eb694cf7838db65cd8422d3520297e087a46ec6bf5c1578e0ed0488d756317"], 0x48)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendfile(r2, r2, &(0x7f0000000040)=0x8001, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000200), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0)
sendmsg$sock(r4, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x48}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r1}, 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'tunl0\x00', &(0x7f00000006c0)={'syztnl0\x00', <r8=>0x0, 0x8000, 0x20, 0x2, 0xffffff07, {{0x2f, 0x4, 0x0, 0x3d, 0xbc, 0x66, 0x0, 0x3, 0x29, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x41}, {[@generic={0x83, 0x6, "c061bdb1"}, @lsrr={0x83, 0xf, 0x4, [@remote, @empty, @multicast2]}, @end, @rr={0x7, 0x7, 0xf, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xb2, 0x3, 0x5, [{@private=0xa010101, 0x7ff}, {@local, 0x9}, {@multicast2, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@rand_addr=0x64010102, 0x800}]}, @cipso={0x86, 0x54, 0xffffffffffffffff, [{0x1, 0xc, "3877d6717b85c4524a73"}, {0x1, 0x5, '/r}'}, {0x6, 0x12, "f6125c8050892bc63e06d7ab31027614"}, {0x2, 0x5, "5f6f84"}, {0x5, 0x7, "5b1ccc9738"}, {0x7, 0xa, "7961ed2e57ae1d9b"}, {0x6, 0xa, "6eeb87bfd17f2936"}, {0x2, 0xb, "4ff587276607761223"}]}]}}}}}) (async, rerun: 64)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)=""/142, 0xf7, 0x8e, 0x0, 0x2}, 0x28) (rerun: 64)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x4, 0x1b4f, 0x0, 0x3, 0x203, r1, 0x6, '\x00', r8, r9, 0x2, 0x4, 0x3}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r10, @ANYRES32=r7, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) (async, rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000140), &(0x7f0000000180)=r3}, 0x20) (async, rerun: 64)
r11 = socket(0x840000000002, 0x3, 0x102)
getsockopt$inet_pktinfo(r11, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2)
getpeername$tipc(r11, &(0x7f0000000500)=@name, &(0x7f00000004c0)=0x45) (async)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

ace lo may have been left with an inconsistent configuration, please check.
[  267.308260][T13300] wg1 speed is unknown, defaulting to 1000
[  267.653280][T13300] chnl_net:caif_netlink_parms(): no params data found
[  267.731899][T13332] IPv6: NLM_F_CREATE should be specified when creating new route
[  267.846633][T13341] netlink: 'syz.4.2067': attribute type 3 has an invalid length.
[  267.943627][T13300] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.953488][T13300] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.960925][T13300] bridge_slave_0: entered allmulticast mode
[  267.976816][T13300] bridge_slave_0: entered promiscuous mode
[  267.988217][T13300] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.997202][T13300] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.016170][T13300] bridge_slave_1: entered allmulticast mode
[  268.052915][T13300] bridge_slave_1: entered promiscuous mode
[  268.061284][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5830 ms
[  268.069325][    C1] lec:lec_tx_timeout: lec0
[  268.075491][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  268.140342][T13300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.155255][T13300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.225214][T13300] team0: Port device team_slave_0 added
[  268.236690][T13300] team0: Port device team_slave_1 added
[  268.307634][T13300] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.315126][T13300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  268.341373][T13300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.355387][T13300] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.362769][T13300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  268.410933][T13300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.521006][T13300] hsr_slave_0: entered promiscuous mode
[  268.528233][T13300] hsr_slave_1: entered promiscuous mode
[  268.808430][T13300] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  268.824960][T13300] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  268.836782][T13300] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  268.849731][T13300] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  268.860352][T13391] netlink: 'syz.1.2085': attribute type 1 has an invalid length.
[  268.870591][T13391] __nla_validate_parse: 13 callbacks suppressed
[  268.870612][T13391] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2085'.
[  268.989072][T13300] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.017323][T13300] 8021q: adding VLAN 0 to HW filter on device team0
[  269.036989][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.044439][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.073950][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.081099][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.114759][T13405] macvlan0: entered promiscuous mode
[  269.251395][   T51] Bluetooth: hci5: command tx timeout
[  269.548782][T13300] 8021q: adding VLAN 0 to HW filter on device batadv0
[  269.754662][T13438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2096'.
[  269.805120][T13440] IPVS: set_ctl: invalid protocol: 19689 0.0.0.0:20001
[  269.905679][T13448] lo: entered allmulticast mode
[  269.910954][T13448] tunl0: left promiscuous mode
[  269.913757][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2099'.
[  269.916934][T13448] tunl0: entered allmulticast mode
[  269.938376][T13447] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2099'.
[  269.944144][T13448] gre0: left promiscuous mode
[  269.953058][T13448] gre0: entered allmulticast mode
[  269.958565][T13448] gretap0: left promiscuous mode
[  269.964604][T13448] gretap0: entered allmulticast mode
[  269.970439][T13448] erspan0: left promiscuous mode
[  269.977836][T13448] erspan0: entered allmulticast mode
[  269.978809][T13447] netlink: 'syz.4.2099': attribute type 5 has an invalid length.
[  269.984722][T13448] ip_vti0: left promiscuous mode
[  269.984743][T13448] ip_vti0: entered allmulticast mode
[  269.985074][T13448] ip6_vti0: entered allmulticast mode
[  270.012216][T13449] netlink: 'syz.1.2098': attribute type 4 has an invalid length.
[  270.020931][T13449] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2098'.
[  270.074584][T13448] sit0: entered allmulticast mode
[  270.099736][T13448] ip6tnl0: entered allmulticast mode
[  270.118369][T13456] netlink: 'syz.1.2098': attribute type 11 has an invalid length.
[  270.127356][T13456] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2098'.
[  270.167314][T13448] ip6gre0: entered allmulticast mode
[  270.183401][T13448] syz_tun: entered allmulticast mode
[  270.212288][T13448] ip6gretap0: entered allmulticast mode
[  270.232857][T13448] team0: entered allmulticast mode
[  270.256107][T13448] H: entered allmulticast mode
[  270.282256][T13448] nlmon0: entered allmulticast mode
[  270.293933][T13448] batadv0: entered allmulticast mode
[  270.313502][T13448] vxcan0: entered allmulticast mode
[  270.325049][T13448] vxcan1: entered allmulticast mode
[  270.335729][T13448] veth0: entered allmulticast mode
[  270.343713][T13448] veth1: entered allmulticast mode
[  270.372285][T13448] wg0: entered allmulticast mode
[  270.382218][T13448] wg1: entered allmulticast mode
[  270.397419][T13448] wg2: entered allmulticast mode
[  270.412472][T13448] veth0_to_bridge: entered allmulticast mode
[  270.432372][T13448] bridge_slave_0: entered allmulticast mode
[  270.451251][T13448] veth1_to_bridge: entered allmulticast mode
[  270.466028][T13448] bridge_slave_1: entered allmulticast mode
[  270.479640][T13448] veth0_to_bond: entered allmulticast mode
[  270.492159][T13448] bond_slave_0: entered allmulticast mode
[  270.506859][T13448] veth1_to_bond: entered allmulticast mode
[  270.515091][T13448] bond_slave_1: entered allmulticast mode
[  270.521123][T13448] veth0_to_team: entered allmulticast mode
[  270.549475][T13448] team_slave_0: entered allmulticast mode
[  270.559489][T13448] veth1_to_team: entered allmulticast mode
[  270.575330][T13448] team_slave_1: entered allmulticast mode
[  270.585767][T13448] veth0_to_batadv: entered allmulticast mode
[  270.597519][T13448] batadv_slave_0: entered allmulticast mode
[  270.614088][T13448] veth1_to_batadv: entered allmulticast mode
[  270.637561][T13448] batadv_slave_1: entered allmulticast mode
[  270.657568][T13448] xfrm0: entered allmulticast mode
[  270.677260][T13448] veth0_to_hsr: entered allmulticast mode
[  270.696789][T13448] hsr_slave_0: entered allmulticast mode
[  270.716931][T13448] veth1_to_hsr: entered allmulticast mode
[  270.753089][T13448] hsr0: entered allmulticast mode
[  270.768942][T13448] veth1_virt_wifi: entered allmulticast mode
[  270.792171][T13448] veth0_virt_wifi: entered allmulticast mode
[  270.809381][T13448] veth1_vlan: entered allmulticast mode
[  270.828888][T13448] veth0_vlan: entered allmulticast mode
[  270.870493][T13448] vlan0: entered allmulticast mode
[  270.887277][T13448] vlan1: entered allmulticast mode
[  270.893971][T13448] macvlan0: entered allmulticast mode
[  270.904213][T13448] macvlan1: entered allmulticast mode
[  270.920116][T13448] ipvlan0: entered allmulticast mode
[  270.931461][T13448] ipvlan1: entered allmulticast mode
[  270.937087][T13448] veth1_macvtap: entered allmulticast mode
[  270.960739][T13448] veth0_macvtap: entered allmulticast mode
[  270.973755][T13448] macvtap0: entered allmulticast mode
[  270.988672][T13448] macsec0: entered allmulticast mode
[  271.009153][T13448] geneve0: entered allmulticast mode
[  271.023865][T13448] geneve1: entered allmulticast mode
[  271.042278][T13448] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  271.053095][T13448] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  271.080350][T13448] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[  271.097558][T13448] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  271.117972][T13448] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  271.129203][T13448] macvlan2: entered allmulticast mode
[  271.143572][T13448] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode
[  271.150838][T13448] veth2: entered allmulticast mode
[  271.156713][T13448] veth3: entered allmulticast mode
[  271.163104][T13448] bond1: entered allmulticast mode
[  271.168364][T13448] geneve2: entered allmulticast mode
[  271.184160][T13448] bond2: entered allmulticast mode
[  271.194236][T13448] macsec1: entered allmulticast mode
[  271.208836][T13448] bridge1: entered allmulticast mode
[  271.222373][T13448] erspan1: entered allmulticast mode
[  271.232623][T13448] wireguard0: entered allmulticast mode
[  271.238661][T13448] sit1: entered allmulticast mode
[  271.286138][T13448] veth4: entered allmulticast mode
[  271.311640][T13448] veth5: entered allmulticast mode
[  271.323152][T13448] bond3: left promiscuous mode
[  271.327968][T13448] ip6gre1: left promiscuous mode
[  271.333109][   T51] Bluetooth: hci5: command tx timeout
[  271.351902][T13448] bond3: entered allmulticast mode
[  271.357061][T13448] ip6gre1: entered allmulticast mode
[  271.412487][T13448] xfrm1: left promiscuous mode
[  271.417491][T13448] gretap1: entered allmulticast mode
[  271.423867][T13448] vlan2: left promiscuous mode
[  271.431695][T13448] geneve3: entered allmulticast mode
[  271.437206][T13448] ip6tnl1: entered allmulticast mode
[  271.443571][T13448] mac80211_hwsim hwsim20 wlan3: entered allmulticast mode
[  271.451994][T13448] vxlan0: entered allmulticast mode
[  271.459255][T13448] �9: entered allmulticast mode
[  271.465291][T13448] vlan3: entered allmulticast mode
[  271.471050][T13448] bond4: entered allmulticast mode
[  271.477839][T13448] vlan4: entered allmulticast mode
[  271.484085][T13448] sit2: entered allmulticast mode
[  271.520313][T13448] ip6gre2: left promiscuous mode
[  271.528123][T13448] bond5: entered allmulticast mode
[  271.535232][T13448] vlan5: entered allmulticast mode
[  271.541055][T13448] bond0: left promiscuous mode
[  271.549242][T13448] bridge2: left promiscuous mode
[  271.558651][T13448] gretap2: left promiscuous mode
[  271.566896][T13448] syztnl2: entered allmulticast mode
[  271.573158][T13448] gre1: entered allmulticast mode
[  271.578991][T13448] ip6tnl2: entered allmulticast mode
[  271.587559][T13448] bond6: entered allmulticast mode
[  271.593471][T13448] ipip0: entered allmulticast mode
[  271.598795][T13448] veth6: entered allmulticast mode
[  271.604393][T13448] veth7: entered allmulticast mode
[  271.609791][T13448] sit3: entered allmulticast mode
[  271.627114][T13448] veth8: entered allmulticast mode
[  271.633266][T13448] veth9: entered allmulticast mode
[  271.638490][T13448] bond7: entered allmulticast mode
[  271.644084][T13448] gretap3: entered allmulticast mode
[  271.650710][T13448] gre2: entered allmulticast mode
[  271.685232][   T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  271.704315][   T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.714410][   T36] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  271.723844][   T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.776128][   T36] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  271.797783][   T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.825502][   T36] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  271.855400][   T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.901437][T13464] syzkaller0: entered promiscuous mode
[  271.907144][T13464] syzkaller0: entered allmulticast mode
[  271.917124][T13465] tc action pedit offset must be on 32 bit boundaries
[  271.924525][T13467] tc action pedit offset must be on 32 bit boundaries
[  271.974704][T13300] veth0_vlan: entered promiscuous mode
[  272.006461][T13300] veth1_vlan: entered promiscuous mode
[  272.033240][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2106'.
[  272.047785][T13300] veth0_macvtap: entered promiscuous mode
[  272.060645][T13300] veth1_macvtap: entered promiscuous mode
[  272.083835][T13300] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.098625][T13300] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.116616][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.134913][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.149431][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.159316][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.254214][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.264640][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.293601][  T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.304203][  T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.433866][T13478] sctp: [Deprecated]: syz.4.2108 (pid 13478) Use of int in maxseg socket option.
[  272.433866][T13478] Use struct sctp_assoc_value instead
[  272.459363][T13477] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2052'.
[  272.469524][T13477] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2052'.
[  272.479286][T13477] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2052'.
[  273.092197][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  273.100303][    C1] lec:lec_tx_timeout: lec0
[  273.105814][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  273.136126][T13508] netlink: 'syz.1.2118': attribute type 26 has an invalid length.
[  273.145571][T13508] netlink: 'syz.1.2118': attribute type 26 has an invalid length.
[  273.154430][T13509] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  273.183980][T13508] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  273.217037][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  273.227789][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  273.237703][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  273.260938][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  273.269449][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  273.368208][T13510] wg1 speed is unknown, defaulting to 1000
[  273.411635][   T51] Bluetooth: hci5: command tx timeout
[  273.500675][T13526] openvswitch: netlink: IP tunnel TTL not specified.
[  273.627988][T13530] dvmrp0: entered allmulticast mode
[  273.913542][T13555] veth1_macvtap: left promiscuous mode
[  273.947609][T13510] chnl_net:caif_netlink_parms(): no params data found
[  273.971077][T13555] __nla_validate_parse: 7 callbacks suppressed
[  273.971110][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2131'.
[  274.369635][T13510] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.402779][T13586] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2138'.
[  274.421830][T13510] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.440467][T13510] bridge_slave_0: entered allmulticast mode
[  274.449232][T13510] bridge_slave_0: entered promiscuous mode
[  274.471639][T13586] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2138'.
[  274.487710][T13510] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.497847][T13510] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.514480][T13510] bridge_slave_1: entered allmulticast mode
[  274.535212][T13510] bridge_slave_1: entered promiscuous mode
[  274.544769][T13586] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2138'.
[  274.708654][T13602] netlink: 'syz.4.2142': attribute type 10 has an invalid length.
[  274.732340][T13510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.815758][T13510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.873970][T13613] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2146'.
[  274.885168][T13613] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2146'.
[  274.896791][T13613] netlink: 'syz.4.2146': attribute type 10 has an invalid length.
[  274.908767][T13510] team0: Port device team_slave_0 added
[  274.943773][T13510] team0: Port device team_slave_1 added
[  274.951731][T13611] wg1 speed is unknown, defaulting to 1000
[  275.007245][T13619] netlink: 'syz.1.2147': attribute type 7 has an invalid length.
[  275.018886][T13510] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.033987][T13510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  275.037116][T13619] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2147'.
[  275.079416][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2148'.
[  275.080328][T13510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.105921][T13510] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.116143][T13510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  275.143817][T13510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.323594][T13630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2150'.
[  275.331378][   T51] Bluetooth: hci6: command tx timeout
[  275.356571][T13510] hsr_slave_0: entered promiscuous mode
[  275.364344][T13510] hsr_slave_1: entered promiscuous mode
[  275.370911][T13510] debugfs: 'hsr0' already exists in 'hsr'
[  275.377317][T13510] Cannot create hsr debugfs directory
[  275.399007][T13635] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2152'.
[  275.491797][   T51] Bluetooth: hci5: command tx timeout
[  275.665185][T13649] netlink: 'syz.5.2153': attribute type 10 has an invalid length.
[  275.955121][T13649] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  275.968069][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.977211][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.494165][T13688] pimreg: entered allmulticast mode
[  276.539532][T13510] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  276.562623][T13510] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  276.615587][T13510] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  276.633452][T13510] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  276.801428][T13703] syzkaller0: entered promiscuous mode
[  276.824758][T13703] syzkaller0: entered allmulticast mode
[  277.122075][T13510] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.195775][T13510] 8021q: adding VLAN 0 to HW filter on device team0
[  277.223376][T13734] batadv1: entered allmulticast mode
[  277.276780][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.284001][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  277.313646][T13736] bond6: (slave vlan0): Opening slave failed
[  277.328224][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.335483][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  277.414497][   T51] Bluetooth: hci6: command tx timeout
[  277.677500][T13747] ip6erspan0: entered allmulticast mode
[  277.757935][ T5923] IPVS: starting estimator thread 0...
[  277.872784][T13765] IPVS: using max 23 ests per chain, 55200 per kthread
[  277.971153][T13510] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.121655][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  278.129863][    C1] lec:lec_tx_timeout: lec0
[  278.136903][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  278.188841][T13784] netlink: 'syz.1.2187': attribute type 10 has an invalid length.
[  278.429081][T13804] openvswitch: netlink: Flow key attr not present in new flow.
[  278.489586][T13803] bond9: entered promiscuous mode
[  278.521715][T13807] macvlan2: entered promiscuous mode
[  278.537103][T13807] macvlan2: entered allmulticast mode
[  278.561941][T13807] bond9: (slave macvlan2): Opening slave failed
[  278.653406][T13814] delete_channel: no stack
[  278.750949][T13510] veth0_vlan: entered promiscuous mode
[  278.787099][T13818] netlink: 'syz.4.2198': attribute type 1 has an invalid length.
[  278.825057][T13816] team0: Port device team_slave_0 removed
[  278.837506][T13510] veth1_vlan: entered promiscuous mode
[  278.878577][T13818] 8021q: adding VLAN 0 to HW filter on device bond6
[  278.900688][T13818] netlink: 'syz.4.2198': attribute type 2 has an invalid length.
[  278.910080][T13818] netlink: 'syz.4.2198': attribute type 2 has an invalid length.
[  279.027920][T13827] bond8 (unregistering): Released all slaves
[  279.176085][T13510] veth0_macvtap: entered promiscuous mode
[  279.197257][T13510] veth1_macvtap: entered promiscuous mode
[  279.240566][T13836] wg1 speed is unknown, defaulting to 1000
[  279.272289][T13510] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.296263][T13510] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.418563][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.509890][   T51] Bluetooth: hci6: command tx timeout
[  279.511730][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.566377][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.596283][T13855] sit4: entered promiscuous mode
[  279.602446][T13855] sit4: entered allmulticast mode
[  279.646035][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.852275][T13867] __nla_validate_parse: 17 callbacks suppressed
[  279.852294][T13867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2209'.
[  279.870653][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2209'.
[  279.875803][T13866] bridge_slave_0: left allmulticast mode
[  279.886246][T13866] bridge_slave_0: left promiscuous mode
[  279.894279][T13866] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.928418][T13866] bridge_slave_1: left allmulticast mode
[  279.935039][T13866] bridge_slave_1: left promiscuous mode
[  279.941059][T13866] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.954370][T13866] bond0: (slave bond_slave_0): Releasing backup interface
[  279.966392][T13866] bond0: (slave bond_slave_1): Releasing backup interface
[  279.985480][T13866] team0: Port device team_slave_1 removed
[  279.993948][T13866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  280.003205][T13866] batman_adv: batadv0: Removing interface: batadv_slave_0
[  280.012290][T13866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  280.019794][T13866] batman_adv: batadv0: Removing interface: batadv_slave_1
[  280.030509][T13866] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  280.253662][T13871] syzkaller1: entered promiscuous mode
[  280.259329][T13871] syzkaller1: entered allmulticast mode
[  280.270003][T13879] netlink: 165 bytes leftover after parsing attributes in process `syz.5.2212'.
[  280.282333][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.290200][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.469099][T13882] syzkaller0: entered promiscuous mode
[  280.476692][  T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.491251][T13882] syzkaller0: entered allmulticast mode
[  280.496953][  T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.603486][T13887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2215'.
[  280.714813][T13887] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2215'.
[  280.756580][T13893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.790597][T13894] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2217'.
[  280.791694][T13893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.848481][T13898] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2218'.
[  280.894852][T13895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.000108][T13909] IPVS: set_ctl: invalid protocol: 8 100.1.1.1:20000
[  281.118404][T13914] netlink: 'syz.1.2224': attribute type 9 has an invalid length.
[  281.549160][T13929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2229'.
[  281.572502][   T51] Bluetooth: hci6: command tx timeout
[  281.719238][T13935] netlink: 'syz.1.2230': attribute type 8 has an invalid length.
[  281.739656][T13935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2230'.
[  281.976293][T13945] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  282.166621][T13947] syzkaller0: entered promiscuous mode
[  282.215179][T13947] syzkaller0: entered allmulticast mode
[  282.237550][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2237'.
[  282.492105][T13967] syzkaller0: entered promiscuous mode
[  282.498423][T13967] syzkaller0: entered allmulticast mode
[  283.151628][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  283.159648][    C1] lec:lec_tx_timeout: lec0
[  283.164771][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  284.922135][T14024] tipc: Started in network mode
[  284.927108][T14024] tipc: Node identity , cluster identity 4711
[  284.974190][T14024] tipc: Failed to obtain node identity
[  284.995128][T14024] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  285.042283][T14035] Unsupported ieee802154 address type: 0
[  285.070317][T14039] __nla_validate_parse: 6 callbacks suppressed
[  285.070337][T14039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2260'.
[  285.081947][T14024] syzkaller0: entered promiscuous mode
[  285.092717][T14024] syzkaller0: entered allmulticast mode
[  285.188671][T14044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2261'.
[  286.892814][T14063] openvswitch: netlink: Missing key (keys=40, expected=100)
[  286.932250][T14052] macvtap1: entered promiscuous mode
[  286.939035][T14052] macvtap1: entered allmulticast mode
[  286.946860][T14052] veth1_vlan: entered allmulticast mode
[  287.017899][T14053] macvtap2: entered promiscuous mode
[  287.031614][T14053] macvtap2: entered allmulticast mode
[  287.060658][T14054] veth0: entered promiscuous mode
[  287.072007][T14055] veth0: left promiscuous mode
[  287.118109][T14075] netlink: 'syz.1.2270': attribute type 33 has an invalid length.
[  287.303572][T14068] syzkaller0: entered promiscuous mode
[  287.320431][T14068] syzkaller0: entered allmulticast mode
[  287.380231][T14084] syzkaller0: entered promiscuous mode
[  287.391352][T14084] syzkaller0: entered allmulticast mode
[  287.405181][T14087] netlink: 'syz.5.2272': attribute type 11 has an invalid length.
[  288.172957][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  288.181028][    C1] lec:lec_tx_timeout: lec0
[  288.186307][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  289.689418][T14141] syz_tun: refused to change device tx_queue_len
[  289.750163][T14141] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2286'.
[  289.895929][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.110137][T14159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2289'.
[  290.132384][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.165414][T14161] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2289'.
[  290.265730][T14168] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2293'.
[  290.420034][T14173] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2295'.
[  290.584087][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2295'.
[  290.603174][T14177] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2296'.
[  290.657096][T14180] netlink: 'syz.6.2297': attribute type 26 has an invalid length.
[  290.677422][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2297'.
[  290.712666][T14180] netlink: 'syz.6.2297': attribute type 26 has an invalid length.
[  290.720645][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2297'.
[  290.933713][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.965106][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2303'.
[  291.001608][T14194] openvswitch: netlink: Missing key (keys=40, expected=80)
[  291.035451][T14197] netlink: 'syz.5.2304': attribute type 4 has an invalid length.
[  291.066518][T14199] netlink: 'syz.6.2305': attribute type 64 has an invalid length.
[  291.107570][T14205] openvswitch: netlink: IPv4 tun info is not correct
[  291.119064][T14205] netlink: 'syz.4.2307': attribute type 21 has an invalid length.
[  291.130593][T14205] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2307'.
[  291.166393][T14205] netlink: 'syz.4.2307': attribute type 5 has an invalid length.
[  291.186290][T14204] netlink: 'syz.1.2306': attribute type 1 has an invalid length.
[  291.304997][T14204] bond12: entered promiscuous mode
[  291.310490][T14204] 8021q: adding VLAN 0 to HW filter on device bond12
[  291.331792][T14209] bond12: (slave bridge4): making interface the new active one
[  291.339727][T14209] bridge4: entered promiscuous mode
[  291.346015][T14209] bond12: (slave bridge4): Enslaving as an active interface with an up link
[  291.362088][T14212] nbd2: detected capacity change from 0 to 127
[  291.628759][T14226] vlan2: entered allmulticast mode
[  291.653357][T14226] bond0: entered allmulticast mode
[  291.670415][T14226] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode
[  291.791645][T14233] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  291.810123][T14233] mac80211_hwsim hwsim33 wlan1: left allmulticast mode
[  291.853827][T14233] bond0 (unregistering): Released all slaves
[  291.972017][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.556387][T14273] syzkaller0: entered promiscuous mode
[  292.562502][T14273] syzkaller0: entered allmulticast mode
[  292.718493][T14281] syzkaller0: entered promiscuous mode
[  292.753812][T14281] syzkaller0: entered allmulticast mode
[  292.968337][T14288] syzkaller0: entered promiscuous mode
[  293.010566][T14288] syzkaller0: entered allmulticast mode
[  293.019993][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.171677][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.211908][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  293.220013][    C1] lec:lec_tx_timeout: lec0
[  293.225208][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  293.338397][T14311] netlink: 'syz.5.2332': attribute type 9 has an invalid length.
[  293.381488][T14311] netlink: 'syz.5.2332': attribute type 11 has an invalid length.
[  293.400907][T14311] netlink: 'syz.5.2332': attribute type 12 has an invalid length.
[  293.449265][T14325] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.536501][T14321] team0: Mode "uandom" not found
[  293.670376][T14331] vlan2: entered promiscuous mode
[  293.701348][T14331] erspan0: entered promiscuous mode
[  293.981458][T14363] netlink: 'syz.6.2343': attribute type 3 has an invalid length.
[  294.054650][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.307119][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.940193][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.981367][T14409] netlink: 'syz.4.2350': attribute type 8 has an invalid length.
[  295.091904][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.369175][T14424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.378356][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.836839][T14438] syzkaller0: entered promiscuous mode
[  295.843192][T14438] syzkaller0: entered allmulticast mode
[  297.172222][   T29] net_ratelimit: 2 callbacks suppressed
[  297.172244][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.334681][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.214522][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.595297][T14463] netlink: 'syz.4.2362': attribute type 8 has an invalid length.
[  298.645436][T14463] __nla_validate_parse: 14 callbacks suppressed
[  298.645458][T14463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2362'.
[  298.713207][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2363'.
[  298.735837][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2363'.
[  298.994416][T14480] bond0: Error: Cannot enslave bond to itself.
[  299.011201][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms
[  299.019376][    C1] lec:lec_tx_timeout: lec0
[  299.024604][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  299.047546][T14485] netlink: 'syz.6.2368': attribute type 1 has an invalid length.
[  299.149881][T14485] 8021q: adding VLAN 0 to HW filter on device bond1
[  299.157134][T14499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2370'.
[  299.175999][T14496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2369'.
[  299.203032][T14488] bond1: (slave veth0_to_bond): making interface the new active one
[  299.220964][T14488] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  299.253896][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.350278][T14499] 8021q: adding VLAN 0 to HW filter on device bond8
[  299.413800][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.422490][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.430671][T14496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2369'.
[  299.458770][T14509] bond8: entered promiscuous mode
[  299.475689][T14509] bond8: entered allmulticast mode
[  299.497598][T14509] 8021q: adding VLAN 0 to HW filter on device bond8
[  299.506537][T14509] team0: Port device bond8 added
[  299.512639][T14514] netlink: 3648 bytes leftover after parsing attributes in process `syz.6.2371'.
[  299.531853][T14514] netlink: 3648 bytes leftover after parsing attributes in process `syz.6.2371'.
[  299.603773][   T63] bond1: (slave veth0_to_bond): link status definitely down, disabling slave
[  299.642787][   T63] bond1: now running without any active interface!
[  299.778422][T14527] netlink: 'syz.6.2374': attribute type 12 has an invalid length.
[  299.914772][T14540] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2377'.
[  300.070577][T14542] wg1 speed is unknown, defaulting to 1000
[  300.117039][T14554] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2380'.
[  300.291850][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.395397][T14559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.404487][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.332032][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.627779][T14624] IPVS: persistence engine module ip_vs_pe_�
 not found
[  302.335594][T14668] tipc: MTU too low for tipc bearer
[  302.374106][  T796] net_ratelimit: 3 callbacks suppressed
[  302.374127][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.455028][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.615038][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.102194][T14699] veth0: entered promiscuous mode
[  303.289610][T14696] syzkaller0: entered promiscuous mode
[  303.312773][T14696] syzkaller0: entered allmulticast mode
[  303.413187][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.508798][T14698] veth0: left promiscuous mode
[  303.953311][T14739] __nla_validate_parse: 9 callbacks suppressed
[  303.953334][T14739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2423'.
[  304.052099][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  304.060169][    C1] lec:lec_tx_timeout: lec0
[  304.060760][T14747] GUP no longer grows the stack in syz.4.2423 (14747): 200000003000-20000000a000 (200000001000)
[  304.066369][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  304.077275][T14747] CPU: 0 UID: 0 PID: 14747 Comm: syz.4.2423 Not tainted syzkaller #0 PREEMPT(full) 
[  304.077299][T14747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  304.077310][T14747] Call Trace:
[  304.077317][T14747]  <TASK>
[  304.077325][T14747]  dump_stack_lvl+0xe8/0x150
[  304.077358][T14747]  __get_user_pages+0x2453/0x29d0
[  304.077386][T14747]  ? __lock_acquire+0x6b5/0x2cf0
[  304.077430][T14747]  ? __gup_longterm_locked+0xc4e/0x1630
[  304.077456][T14747]  ? down_read_killable+0x1bb/0x340
[  304.077488][T14747]  __gup_longterm_locked+0xdcf/0x1630
[  304.077545][T14747]  gup_fast_fallback+0x1d82/0x22e0
[  304.077603][T14747]  ? __pfx_gup_fast_fallback+0x10/0x10
[  304.077631][T14747]  ? is_valid_gup_args+0x11f/0x200
[  304.077658][T14747]  ? get_user_pages_fast+0x4d/0xb0
[  304.077687][T14747]  __iov_iter_get_pages_alloc+0x3b6/0xb10
[  304.077716][T14747]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  304.077740][T14747]  iov_iter_get_pages2+0x5e/0xa0
[  304.077763][T14747]  __se_sys_vmsplice+0x7b3/0x1490
[  304.077800][T14747]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  304.077820][T14747]  ? __pfx_futex_wake+0x10/0x10
[  304.077853][T14747]  ? lockdep_hardirqs_on+0x7a/0x110
[  304.077934][T14747]  do_syscall_64+0x14d/0xf80
[  304.077956][T14747]  ? trace_irq_disable+0x3b/0x150
[  304.077971][T14747]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.077989][T14747]  ? clear_bhb_loop+0x40/0x90
[  304.078011][T14747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.078028][T14747] RIP: 0033:0x7fe447d9c819
[  304.078046][T14747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  304.078060][T14747] RSP: 002b:00007fe448c62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  304.078080][T14747] RAX: ffffffffffffffda RBX: 00007fe448016090 RCX: 00007fe447d9c819
[  304.078166][T14747] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a
[  304.078178][T14747] RBP: 00007fe447e32c91 R08: 0000000000000000 R09: 0000000000000000
[  304.078189][T14747] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  304.078200][T14747] R13: 00007fe448016128 R14: 00007fe448016090 R15: 00007fff0e276848
[  304.078232][T14747]  </TASK>
[  304.080646][T14747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2423'.
[  304.462112][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.491526][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.499766][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.135832][T14769] sctp: [Deprecated]: syz.4.2428 (pid 14769) Use of struct sctp_assoc_value in delayed_ack socket option.
[  306.135832][T14769] Use struct sctp_sack_info instead
[  306.327346][T14780] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2431'.
[  307.224185][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2447'.
[  307.244441][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2447'.
[  307.278652][T14837] xt_hashlimit: size too large, truncated to 1048576
[  307.333501][T14835] �: renamed from vxcan1
[  307.404772][T14841] xt_ecn: cannot match TCP bits for non-tcp packets
[  307.442586][T14842] xt_ecn: cannot match TCP bits for non-tcp packets
[  307.596634][T14856] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2453'.
[  307.726935][T14863] netlink: 'syz.4.2454': attribute type 1 has an invalid length.
[  307.777062][T14866] netlink: 'syz.4.2454': attribute type 1 has an invalid length.
[  307.956193][T14884] netlink: 'syz.4.2461': attribute type 7 has an invalid length.
[  308.203411][T14897] xt_NFQUEUE: number of total queues is 0
[  308.489543][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2471'.
[  308.606585][T14923] netlink: 'syz.3.2473': attribute type 142 has an invalid length.
[  309.078806][T14938] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2475'.
[  309.092053][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  309.100335][    C1] lec:lec_tx_timeout: lec0
[  309.106458][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  309.278282][T14949] netlink: 'syz.4.2479': attribute type 15 has an invalid length.
[  309.317365][ T5923] IPVS: starting estimator thread 0...
[  309.321525][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2479'.
[  309.412270][T14956] IPVS: using max 29 ests per chain, 69600 per kthread
[  309.451368][   T63] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  309.460043][   T63] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  309.469096][T14949] netlink: 'syz.4.2479': attribute type 15 has an invalid length.
[  309.489745][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2479'.
[  309.515549][   T63] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  309.527501][   T63] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  309.669508][T14982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2485'.
[  309.680711][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2485'.
[  309.693069][T14982] netlink: 'syz.4.2485': attribute type 3 has an invalid length.
[  309.701663][T14982] netlink: 'syz.4.2485': attribute type 3 has an invalid length.
[  309.710409][T14983] netlink: 'syz.4.2485': attribute type 3 has an invalid length.
[  309.719672][T14983] netlink: 'syz.4.2485': attribute type 3 has an invalid length.
[  309.870615][T14994] rdma_rxe: rxe_newlink: failed to add lo
[  309.942077][T14993] syzkaller0: entered promiscuous mode
[  309.947830][T14993] syzkaller0: entered allmulticast mode
[  310.033143][T14997] syzkaller0: entered promiscuous mode
[  310.039214][T14997] syzkaller0: entered allmulticast mode
[  312.261680][T14953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  312.273705][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2480'.
[  312.299321][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2480'.
[  312.537403][T15011] xt_hashlimit: size too large, truncated to 1048576
[  313.808729][T15037] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2495'.
[  314.064416][T15030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  314.131665][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  314.139749][    C1] lec:lec_tx_timeout: lec0
[  314.145524][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  315.045915][T15062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2503'.
[  315.103136][T15062] bond3: Invalid ad_actor_system MAC address.
[  315.109430][T15062] bond3: option ad_actor_system: invalid value (1)
[  315.128338][T15062] bond3 (unregistering): Released all slaves
[  315.311724][T15079] netlink: 'syz.4.2508': attribute type 5 has an invalid length.
[  315.419333][T15089] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2510'.
[  315.729755][   T30] audit: type=1800 audit(1775522986.033:2): pid=15101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2512" name="memory.events" dev="tmpfs" ino=526 res=0 errno=0
[  315.818797][T15107] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2513'.
[  315.868718][T15107] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2513'.
[  316.126326][T15119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2514'.
[  316.269078][T15119] 8021q: adding VLAN 0 to HW filter on device bond1
[  316.414609][T15137] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2519'.
[  316.475722][T15137] netlink: 'syz.3.2519': attribute type 83 has an invalid length.
[  316.765042][T15151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2522'.
[  316.873458][T15165] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  316.900019][T15164] netlink: 'syz.1.2525': attribute type 16 has an invalid length.
[  316.929522][T15160] syzkaller0: entered promiscuous mode
[  316.938799][T15164] netlink: 'syz.1.2525': attribute type 17 has an invalid length.
[  316.955675][T15151] netlink: 'syz.3.2522': attribute type 13 has an invalid length.
[  317.006734][T15164] erspan0: left promiscuous mode
[  317.065080][T15164] 8021q: adding VLAN 0 to HW filter on device team0
[  317.080019][T15164] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.131875][T15164] batman_adv: batadv0: Interface activated: batadv_slave_0
[  317.141861][T15164] batman_adv: batadv0: Interface activated: batadv_slave_1
[  317.158910][T15164] veth0_vlan: left promiscuous mode
[  317.165960][T15164] veth0_vlan: entered promiscuous mode
[  317.174812][T15164] macvlan0: left promiscuous mode
[  317.184647][T15164] veth1_macvtap: left promiscuous mode
[  317.192618][T15164] veth0_macvtap: entered promiscuous mode
[  317.199568][T15164] veth1_macvtap: entered promiscuous mode
[  317.215526][T15164] 8021q: adding VLAN 0 to HW filter on device batadv1
[  317.228351][T15164] 8021q: adding VLAN 0 to HW filter on device bond1
[  317.240628][T15164] 8021q: adding VLAN 0 to HW filter on device bond2
[  317.249920][T15164] erspan0: entered promiscuous mode
[  317.263906][T15164] 8021q: adding VLAN 0 to HW filter on device bond3
[  317.278226][T15164] 8021q: adding VLAN 0 to HW filter on device bond4
[  317.286460][T15164] 8021q: adding VLAN 0 to HW filter on device bond5
[  317.299334][T15164] 8021q: adding VLAN 0 to HW filter on device bond6
[  317.313551][T15164] 8021q: adding VLAN 0 to HW filter on device team1
[  317.329496][T15164] bond7: left promiscuous mode
[  317.340502][T15164] bond7: left allmulticast mode
[  317.347975][T15164] 8021q: adding VLAN 0 to HW filter on device bond8
[  317.356591][T15164] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.365405][T15164] gtp1: left promiscuous mode
[  317.370102][T15164] gtp1: left allmulticast mode
[  317.384932][T15164] bond9: left promiscuous mode
[  317.390031][T15164] 8021q: adding VLAN 0 to HW filter on device bond9
[  317.400873][T15164] 8021q: adding VLAN 0 to HW filter on device bond10
[  317.413545][T15164] 8021q: adding VLAN 0 to HW filter on device bond11
[  317.427024][T15164] bond12: left promiscuous mode
[  317.432414][T15164] bridge4: left promiscuous mode
[  317.533351][  T136] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  317.542162][  T136] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  317.550413][  T136] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  317.583271][  T136] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  317.604930][  T136] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  317.615605][  T136] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex
[  317.688683][   T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  317.697306][   T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  317.712663][ T5919] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  317.784961][   T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  317.806230][   T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  317.819277][ T5919] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  317.828914][   T12] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  317.840553][   T12] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  317.851574][ T5919] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  317.916185][ T5919] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  317.945049][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2532'.
[  317.957567][T15196] netlink: 'syz.3.2531': attribute type 1 has an invalid length.
[  317.968015][T15198] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  318.110658][T15203] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[  318.124294][T15203] bond9: (slave vxcan3): Error -95 calling set_mac_address
[  318.195151][T15196] macvlan3: entered promiscuous mode
[  318.195159][T15192] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  318.200585][T15196] macvlan3: entered allmulticast mode
[  318.210452][T15184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  318.216775][T15196] bond9: entered promiscuous mode
[  318.240981][T15196] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  318.280845][T15196] bond9: left promiscuous mode
[  318.632847][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2535'.
[  318.953328][T15228] netlink: 'syz.6.2539': attribute type 8 has an invalid length.
[  318.971057][T15228] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2539'.
[  319.161356][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  319.169457][    C1] lec:lec_tx_timeout: lec0
[  319.174286][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  319.795323][T15264] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  319.813031][T15264] team0: Device macvlan2 is already an upper device of the team interface
[  319.889484][T15275] x_tables: ip6_tables: mh match: only valid for protocol 135
[  319.917914][T15279] x_tables: ip6_tables: mh match: only valid for protocol 135
[  320.627480][T15321] __nla_validate_parse: 2 callbacks suppressed
[  320.627502][T15321] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2568'.
[  320.836706][T15330] netlink: 'syz.6.2571': attribute type 4 has an invalid length.
[  320.934974][T15337] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2572'.
[  321.012225][   T13] wlan0: Trigger new scan to find an IBSS to join
[  321.069082][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2573'.
[  321.118994][T15343] hsr0: entered promiscuous mode
[  321.136738][T15343] macvlan2: entered allmulticast mode
[  321.143944][T15343] hsr0: entered allmulticast mode
[  321.149056][T15343] hsr_slave_0: entered allmulticast mode
[  321.154949][T15343] hsr_slave_1: entered allmulticast mode
[  321.213749][T15346] syzkaller1: tun_chr_ioctl cmd 1074025677
[  321.219941][T15346] syzkaller1: linktype set to 823
[  321.328870][T15354] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2576'.
[  321.364995][T15358] lo: Caught tx_queue_len zero misconfig
[  321.443228][T15358] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2578'.
[  321.454417][T15358] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2578'.
[  321.467705][T15358] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2578'.
[  321.801388][T15377] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2584'.
[  321.855448][T15378] netlink: 'syz.4.2585': attribute type 3 has an invalid length.
[  321.872246][ T1759] block nbd2: Possible stuck request ffff8880268b8000: control (read@0,1024B). Runtime 30 seconds
[  321.885902][ T1759] block nbd2: Possible stuck request ffff8880268b8200: control (read@1024,1024B). Runtime 30 seconds
[  321.899286][ T1759] block nbd2: Possible stuck request ffff8880268b8400: control (read@2048,1024B). Runtime 30 seconds
[  321.911108][ T1759] block nbd2: Possible stuck request ffff8880268b8600: control (read@3072,1024B). Runtime 30 seconds
[  322.007748][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  322.017650][ T5836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  322.027682][ T5836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  322.038629][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  322.053122][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  322.150674][T15381] wg1 speed is unknown, defaulting to 1000
[  322.862928][T15413] tunl0: Caught tx_queue_len zero misconfig
[  322.883062][T15381] chnl_net:caif_netlink_parms(): no params data found
[  323.070920][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2597'.
[  323.250886][T15381] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.263020][T15437] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2600'.
[  323.275665][T15381] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.284734][T15381] bridge_slave_0: entered allmulticast mode
[  323.293862][T15381] bridge_slave_0: entered promiscuous mode
[  323.306438][T15381] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.315725][T15381] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.325708][T15381] bridge_slave_1: entered allmulticast mode
[  323.347466][T15381] bridge_slave_1: entered promiscuous mode
[  323.442021][T15381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  323.512229][T15381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  323.615366][T15453] syzkaller0: entered promiscuous mode
[  323.636240][T15381] team0: Port device team_slave_0 added
[  323.646033][T15381] team0: Port device team_slave_1 added
[  323.745729][T15381] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.753289][T15381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.783095][T15381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.828622][T15381] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.836575][T15381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.875168][T15381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.920535][T15464] netlink: 'syz.4.2608': attribute type 21 has an invalid length.
[  324.132854][ T5828] Bluetooth: hci7: command tx timeout
[  324.163712][T15476] openvswitch: netlink: Missing valid actions attribute.
[  324.164804][T15381] hsr_slave_0: entered promiscuous mode
[  324.180887][T15381] hsr_slave_1: entered promiscuous mode
[  324.181504][T15476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  324.186916][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  324.203534][    C1] lec:lec_tx_timeout: lec0
[  324.209025][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  324.219994][T15381] debugfs: 'hsr0' already exists in 'hsr'
[  324.227226][T15381] Cannot create hsr debugfs directory
[  324.267691][T15476] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20000
[  325.828631][T15482] bridge21: entered promiscuous mode
[  325.834189][T15482] bridge21: entered allmulticast mode
[  325.842202][T15482] team0: Port device bridge21 added
[  325.847781][T15483] bridge0: port 3(team0) entered blocking state
[  325.854737][T15483] bridge0: port 3(team0) entered disabled state
[  325.861889][T15483] team0: entered allmulticast mode
[  325.869338][T15483] team_slave_0: entered allmulticast mode
[  325.875538][T15483] team_slave_1: entered allmulticast mode
[  325.890073][T15483] team0: entered promiscuous mode
[  325.896920][T15483] team_slave_0: entered promiscuous mode
[  325.903596][T15483] team_slave_1: entered promiscuous mode
[  325.923094][T15483] bridge0: port 3(team0) entered blocking state
[  325.929789][T15483] bridge0: port 3(team0) entered forwarding state
[  325.984012][T15493] __nla_validate_parse: 9 callbacks suppressed
[  325.984044][T15493] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2616'.
[  326.053431][   T13] wlan0: Trigger new scan to find an IBSS to join
[  326.226443][ T5828] Bluetooth: hci7: command 0x041b tx timeout
[  326.268260][T15514] delete_channel: no stack
[  326.350204][T15381] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.363605][T15381] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.464727][T15381] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.475971][T15381] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.563025][T15381] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.582492][T15381] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.684083][T15381] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.695075][T15381] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.291874][ T5836] Bluetooth: hci7: command 0x041b tx timeout
[  328.362802][   T13] wlan0: Creating new IBSS network, BSSID 1e:cd:5e:40:3f:63
[  328.930323][T15493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  328.966384][T15381] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  329.048784][T15381] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  329.133357][T15381] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  329.140427][T15530] netlink: 'syz.5.2625': attribute type 1 has an invalid length.
[  329.177226][T15381] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  329.205900][T15536] x_tables: unsorted underflow at hook 3
[  329.222324][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  329.230408][    C1] lec:lec_tx_timeout: lec0
[  329.236036][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  329.301065][T15545] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2628'.
[  329.327134][T15547] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2629'.
[  329.492258][    C0] ip6_tnl_xmit_ctl: 8 callbacks suppressed
[  329.492278][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  329.643617][T15381] 8021q: adding VLAN 0 to HW filter on device bond0
[  329.669477][T15381] 8021q: adding VLAN 0 to HW filter on device team0
[  329.685913][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.693173][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.815074][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.822603][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.131810][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  330.139999][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  330.189744][T15591] bond0: option ad_select: unable to set because the bond device is up
[  330.381802][ T5836] Bluetooth: hci7: command 0x041b tx timeout
[  330.476684][T15604] wg1 speed is unknown, defaulting to 1000
[  330.544456][T15381] 8021q: adding VLAN 0 to HW filter on device batadv0
[  330.682564][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2647'.
[  330.736487][T15618] netlink: 'syz.5.2648': attribute type 30 has an invalid length.
[  330.745745][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2648'.
[  331.410359][T15628] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2650'.
[  331.438356][ T1331] bond5 (unregistering): (slave bridge2): Releasing active interface
[  331.585957][ T1331] bond12 (unregistering): (slave bridge4): Releasing backup interface
[  331.666610][ T1331] bond1 (unregistering): (slave lo): Releasing backup interface
[  331.675467][ T1331] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  331.689529][ T1331] bond1 (unregistering): Released all slaves
[  331.704786][ T1331] bond2 (unregistering): Released all slaves
[  331.720590][ T1331] bond3 (unregistering): (slave veth5): Releasing active interface
[  331.728850][ T1331] veth0_to_bond: entered promiscuous mode
[  331.738859][ T1331] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface
[  331.750182][ T1331] bond3 (unregistering): (slave veth7): Releasing active interface
[  331.766088][ T1331] bond3 (unregistering): Released all slaves
[  331.782813][ T1331] bond4 (unregistering): Released all slaves
[  331.801056][ T1331] bond5 (unregistering): Released all slaves
[  331.818426][ T1331] bond6 (unregistering): Released all slaves
[  331.839360][ T1331] bond7 (unregistering): Released all slaves
[  331.854535][ T1331] bond8 (unregistering): Released all slaves
[  331.873999][ T1331] bond0 (unregistering): Released all slaves
[  331.888834][ T1331] bond9 (unregistering): Released all slaves
[  331.904941][ T1331] bond10 (unregistering): Released all slaves
[  331.924351][ T1331] bond11 (unregistering): Released all slaves
[  331.938814][ T1331] bond12 (unregistering): Released all slaves
[  332.204607][ T1331] �9: left promiscuous mode
[  332.432744][T15645] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2652'.
[  332.451900][ T5836] Bluetooth: hci7: command 0x041b tx timeout
[  332.508260][T15638] syzkaller0: entered promiscuous mode
[  332.514243][T15638] syzkaller0: entered allmulticast mode
[  332.543019][ T1331] tipc: Left network mode
[  332.713839][ T1331] IPVS: stopping backup sync thread 6882 ...
[  334.306617][T15381] veth0_vlan: entered promiscuous mode
[  334.504964][T15661] delete_channel: no stack
[  334.527278][T15661] ipt_REJECT: TCP_RESET invalid for non-tcp
[  334.638694][T15381] veth1_vlan: entered promiscuous mode
[  334.826325][T15683] netlink: 'syz.3.2666': attribute type 1 has an invalid length.
[  334.968578][T15684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2666'.
[  334.993528][T15683] bond10: entered promiscuous mode
[  334.999592][T15683] 8021q: adding VLAN 0 to HW filter on device bond10
[  335.011192][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms
[  335.019353][    C1] lec:lec_tx_timeout: lec0
[  335.024881][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  335.089562][T15683] bond10: (slave bridge4): making interface the new active one
[  335.107029][T15683] bridge4: entered promiscuous mode
[  335.125534][T15683] bond10: (slave bridge4): Enslaving as an active interface with an up link
[  335.200357][T15381] veth0_macvtap: entered promiscuous mode
[  335.314213][T15381] veth1_macvtap: entered promiscuous mode
[  335.348094][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2668'.
[  335.380383][T15381] batman_adv: batadv0: Interface activated: batadv_slave_0
[  335.483366][T15381] batman_adv: batadv0: Interface activated: batadv_slave_1
[  335.509433][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  335.559459][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  335.786815][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  335.870555][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  335.914198][T15725] netlink: 'syz.3.2677': attribute type 1 has an invalid length.
[  335.931341][T15725] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2677'.
[  335.950837][T15725] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2677'.
[  335.967115][ T1331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.977034][ T1331] batman_adv: batadv0: Removing interface: batadv_slave_0
[  336.005417][T15725] netlink: 'syz.3.2677': attribute type 1 has an invalid length.
[  336.029443][ T1331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  336.059668][T15725] netlink: 634 bytes leftover after parsing attributes in process `syz.3.2677'.
[  336.069785][ T1331] batman_adv: batadv0: Removing interface: batadv_slave_1
[  336.125133][ T1331] veth1_macvtap: left promiscuous mode
[  336.141579][ T1331] veth0_macvtap: left promiscuous mode
[  336.158849][ T1331] veth1_vlan: left promiscuous mode
[  336.181369][ T1331] veth0_vlan: left promiscuous mode
[  336.559083][ T1331] team0 (unregistering): Port device batadv1 removed
[  336.831068][ T1331] team0 (unregistering): Port device team_slave_1 removed
[  336.871850][ T1331] team0 (unregistering): Port device team_slave_0 removed
[  337.013231][ T1331] lo (unregistering): left allmulticast mode
[  337.235755][T15767] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2683'.
[  337.274139][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.290828][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.318713][T15767] team0 (unregistering): Port device bond8 removed
[  337.434774][T15775] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2686'.
[  337.471032][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.502912][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.575689][T15779] netlink: 'syz.3.2687': attribute type 1 has an invalid length.
[  337.612427][T15779] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2687'.
[  337.685387][T15784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2690'.
[  337.700549][T15784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2690'.
[  337.831755][T15785] netlink: 332 bytes leftover after parsing attributes in process `syz.5.2689'.
[  337.894348][T15792] xt_cgroup: invalid path, errno=-2
[  337.958815][T15798] syzkaller0: entered promiscuous mode
[  337.966418][T15798] syzkaller0: entered allmulticast mode
[  338.243949][T15816] netlink: 'syz.4.2698': attribute type 83 has an invalid length.
[  338.728329][T15847] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2707'.
[  338.932121][T15851] sctp: [Deprecated]: syz.6.2710 (pid 15851) Use of int in max_burst socket option.
[  338.932121][T15851] Use struct sctp_assoc_value instead
[  339.077236][T15861] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2712'.
[  339.107296][T15857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2711'.
[  339.276234][T15875] netlink: 'syz.4.2714': attribute type 16 has an invalid length.
[  339.310728][T15875] netlink: 'syz.4.2714': attribute type 17 has an invalid length.
[  339.529100][T15875] sit0: left promiscuous mode
[  339.648425][T15893] x_tables: duplicate underflow at hook 1
[  339.649927][T15875] bridge0: port 3(team0) entered blocking state
[  339.661021][T15875] bridge0: port 3(team0) entered forwarding state
[  339.701784][T15875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  339.720366][  T136] bridge0: port 3(team0) entered disabled state
[  339.895416][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  339.908009][T15905] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  339.927932][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  339.972672][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  339.981341][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  339.988373][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  339.997835][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.004654][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.011696][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.018429][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.025467][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.032423][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.045521][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.052994][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.059732][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.061371][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  340.066710][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.074398][    C1] lec:lec_tx_timeout: lec0
[  340.074842][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  340.081288][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.130829][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.139636][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.165190][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.177806][T15910] wg1 speed is unknown, defaulting to 1000
[  340.181339][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.190737][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.198134][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.223042][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.229975][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.238652][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.249730][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.257025][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.264981][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.288529][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.338526][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.366439][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.391593][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.415322][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.416592][T15923] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2729'.
[  340.452165][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.492102][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.498801][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.500495][T15927] netlink: 'syz.3.2732': attribute type 1 has an invalid length.
[  340.517278][T15927] NCSI netlink: No device for ifindex 0
[  340.528404][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.536179][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.543224][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.553431][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.562387][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.570399][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.593193][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.610280][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.620713][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.629645][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.638380][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.645305][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.680778][T15902] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  340.854485][T15942] openvswitch: netlink: Flow actions attr not present in new flow.
[  340.965565][T15954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.260164][T15965] netlink: 'syz.1.2740': attribute type 8 has an invalid length.
[  341.287032][T15965] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.295026][T15965] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.399175][T15972] syzkaller0: entered promiscuous mode
[  341.406306][T15972] syzkaller0: entered allmulticast mode
[  341.439870][T15975] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002
[  341.913695][T16000] vlan2: entered promiscuous mode
[  341.922986][T16000] vlan2: entered allmulticast mode
[  341.974396][T16003] netlink: 'syz.3.2751': attribute type 10 has an invalid length.
[  342.322728][T16024] __nla_validate_parse: 7 callbacks suppressed
[  342.322750][T16024] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.2756'.
[  342.422378][T16028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  342.507064][T16032] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2760'.
[  342.592165][T16035] netlink: 'syz.6.2761': attribute type 2 has an invalid length.
[  342.646925][T16035] wlan1 speed is unknown, defaulting to 1000
[  342.676377][T16035] wlan1 speed is unknown, defaulting to 1000
[  342.696927][T16035] wlan1 speed is unknown, defaulting to 1000
[  342.748247][T16035] infiniband �yz2: RDMA CMA: cma_listen_on_dev, error -98
[  342.873139][T16035] wlan1 speed is unknown, defaulting to 1000
[  342.893461][T16035] wlan1 speed is unknown, defaulting to 1000
[  342.923250][T16035] wlan1 speed is unknown, defaulting to 1000
[  342.956731][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  342.957583][T16035] wlan1 speed is unknown, defaulting to 1000
[  342.972794][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  342.983713][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  342.992388][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  342.993360][T16035] wlan1 speed is unknown, defaulting to 1000
[  343.013935][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  343.093317][T16056] syzkaller0: entered promiscuous mode
[  343.099545][T16056] syzkaller0: entered allmulticast mode
[  343.126105][T16058] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2769'.
[  343.126820][T16035] wlan1 speed is unknown, defaulting to 1000
[  343.143117][T16058] netlink: 'syz.4.2769': attribute type 15 has an invalid length.
[  343.186047][T16056] veth3: entered allmulticast mode
[  343.198405][T16035] wlan1 speed is unknown, defaulting to 1000
[  343.205406][T16053] wg1 speed is unknown, defaulting to 1000
[  343.226356][T16053] wlan1 speed is unknown, defaulting to 1000
[  343.478704][T16074] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2772'.
[  343.497281][T16068] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2772'.
[  343.525350][T16076] netlink: 'syz.4.2775': attribute type 8 has an invalid length.
[  343.533586][T16076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2775'.
[  343.793130][T16083] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2780'.
[  343.920115][T16099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2782'.
[  344.144717][T16053] chnl_net:caif_netlink_parms(): no params data found
[  344.223574][T16117] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  344.314721][T16121] netlink: 'syz.4.2789': attribute type 8 has an invalid length.
[  344.332921][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2789'.
[  344.522016][T16125] netlink: 'syz.5.2790': attribute type 29 has an invalid length.
[  344.537688][T16132] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2791'.
[  344.646339][T16053] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.667033][T16053] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.693779][T16053] bridge_slave_0: entered allmulticast mode
[  344.719564][T16053] bridge_slave_0: entered promiscuous mode
[  344.803710][T16053] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.827930][T16053] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.844519][T16053] bridge_slave_1: entered allmulticast mode
[  344.857040][T16053] bridge_slave_1: entered promiscuous mode
[  345.027101][T16053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.084044][T16053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.095999][ T5836] Bluetooth: hci3: command tx timeout
[  345.101219][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  345.109749][    C1] lec:lec_tx_timeout: lec0
[  345.114851][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  345.204223][T16053] team0: Port device team_slave_0 added
[  345.225668][T16053] team0: Port device team_slave_1 added
[  345.369906][T16053] batman_adv: batadv0: Adding interface: batadv_slave_0
[  345.391337][T16053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  345.418179][T16053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  345.461235][T16168] bridge0: port 3(team0) entered disabled state
[  345.467865][T16168] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.475646][T16168] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.556627][T16168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  345.568359][T16168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  345.694632][T16168] hsr0: left allmulticast mode
[  345.699453][T16168] hsr_slave_0: left allmulticast mode
[  345.705344][T16168] macvlan2: left allmulticast mode
[  345.718114][T16168] vlan2: left promiscuous mode
[  345.723494][T16168] vlan2: left allmulticast mode
[  345.728389][T16168] hsr_slave_1: left allmulticast mode
[  345.743471][T16053] batman_adv: batadv0: Adding interface: batadv_slave_1
[  345.750672][T16053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  345.778238][T16053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  345.815112][   T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.833061][   T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.872224][   T24] wlan1 speed is unknown, defaulting to 1000
[  345.894648][   T24] �yz2: Port: 1 Link DOWN
[  345.916223][   T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.986053][   T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  346.068514][T16053] hsr_slave_0: entered promiscuous mode
[  346.087247][T16053] hsr_slave_1: entered promiscuous mode
[  346.102088][T16053] debugfs: 'hsr0' already exists in 'hsr'
[  346.107878][T16053] Cannot create hsr debugfs directory
[  346.313152][T16208] xt_NFQUEUE: number of total queues is 0
[  346.390513][T16211] netlink: 'syz.5.2814': attribute type 23 has an invalid length.
[  346.843673][T16232] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma?
[  347.096546][T16243] sctp: [Deprecated]: syz.6.2823 (pid 16243) Use of struct sctp_assoc_value in delayed_ack socket option.
[  347.096546][T16243] Use struct sctp_sack_info instead
[  347.130656][T16241] wg1 speed is unknown, defaulting to 1000
[  347.147702][T16250] openvswitch: netlink: Flow key attr not present in new flow.
[  347.175690][ T5828] Bluetooth: hci3: command tx timeout
[  347.279928][T16241] wlan1 speed is unknown, defaulting to 1000
[  347.443128][T16259] __nla_validate_parse: 6 callbacks suppressed
[  347.443147][T16259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2829'.
[  347.544442][T16259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2829'.
[  347.759178][T16053] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  347.811618][T16270] syzkaller1: entered promiscuous mode
[  347.817176][T16270] syzkaller1: entered allmulticast mode
[  347.924384][T16290] netlink: 'syz.4.2838': attribute type 1 has an invalid length.
[  347.931039][T16053] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  347.948868][T16288] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2837'.
[  348.017317][T16290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  348.107871][T16053] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  348.161930][T16053] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  348.206238][T16305] netlink: 'syz.1.2842': attribute type 10 has an invalid length.
[  348.238096][T16295] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2840'.
[  348.282874][T16305] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  348.657719][T16053] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.700429][T16053] 8021q: adding VLAN 0 to HW filter on device team0
[  348.740226][  T136] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.747390][  T136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.773715][T16340] netlink: 'syz.4.2847': attribute type 1 has an invalid length.
[  348.796342][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.803596][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.108646][T16360] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2851'.
[  349.131628][T16359] openvswitch: netlink: IPv4 tun info is not correct
[  349.253307][ T5828] Bluetooth: hci3: command 0x040f tx timeout
[  349.349483][T16053] 8021q: adding VLAN 0 to HW filter on device batadv0
[  349.473101][T16368] bond4 (unregistering): Released all slaves
[  349.536799][T16374] netlink: 'syz.4.2856': attribute type 8 has an invalid length.
[  349.544789][T16374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2856'.
[  349.561546][T16053] veth0_vlan: entered promiscuous mode
[  349.654109][T16375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2855'.
[  349.664492][T16375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2855'.
[  349.708442][T16053] veth1_vlan: entered promiscuous mode
[  349.757114][T16053] veth0_macvtap: entered promiscuous mode
[  349.784950][T16053] veth1_macvtap: entered promiscuous mode
[  349.829437][T16053] batman_adv: batadv0: Interface activated: batadv_slave_0
[  349.839344][T16382] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.2858'.
[  349.846706][T16053] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.856913][T16382] netlink: Conntrack attr has 4 unknown bytes
[  349.872300][  T105] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.890886][  T105] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.923116][  T105] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.942792][  T105] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.029828][T16386] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2860'.
[  350.043269][T16386] netlink: 'syz.6.2860': attribute type 12 has an invalid length.
[  350.051129][T16386] netlink: 'syz.6.2860': attribute type 11 has an invalid length.
[  350.131246][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  350.139297][    C1] lec:lec_tx_timeout: lec0
[  350.144242][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  351.331873][ T5836] Bluetooth: hci3: command 0x040f tx timeout
[  351.507073][T16324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  351.690423][  T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.720857][  T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.843414][  T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.869514][  T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.890360][T16404] netlink: 'syz.1.2866': attribute type 8 has an invalid length.
[  351.913356][T16408] IPVS: Unknown mcast interface: vcan0
[  351.923277][ T1759] block nbd2: Possible stuck request ffff8880268b8000: control (read@0,1024B). Runtime 60 seconds
[  351.934278][ T1759] block nbd2: Possible stuck request ffff8880268b8200: control (read@1024,1024B). Runtime 60 seconds
[  351.945845][ T1759] block nbd2: Possible stuck request ffff8880268b8400: control (read@2048,1024B). Runtime 60 seconds
[  351.969263][ T1759] block nbd2: Possible stuck request ffff8880268b8600: control (read@3072,1024B). Runtime 60 seconds
[  352.060160][T16407] bond2: invalid ARP target 0.0.0.0 specified for addition
[  352.068244][T16407] bond2: option arp_ip_target: invalid value (0)
[  352.085797][T16407] bond2 (unregistering): Released all slaves
[  352.650708][T16449] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma?
[  352.791928][T16458] __nla_validate_parse: 5 callbacks suppressed
[  352.791949][T16458] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2878'.
[  352.830604][T16462] syzkaller0: entered promiscuous mode
[  352.831282][T16458] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2878'.
[  352.836291][T16462] syzkaller0: entered allmulticast mode
[  352.846048][T16458] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2878'.
[  352.846130][T16458] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2878'.
[  352.870745][T16458] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2878'.
[  352.880475][T16458] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2878'.
[  352.890850][T16458] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2878'.
[  352.900373][T16458] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2878'.
[  352.909986][T16458] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2878'.
[  353.069152][T16469] netlink: 'syz.1.2880': attribute type 8 has an invalid length.
[  353.080044][T16469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2880'.
[  353.128590][T16474] netlink: 'syz.1.2882': attribute type 1 has an invalid length.
[  353.412265][ T5836] Bluetooth: hci3: command 0x040f tx timeout
[  353.868357][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056486000: rx timeout, send abort
[  354.368425][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056485400: rx timeout, send abort
[  354.377732][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056486000: abort rx timeout. Force session deactivation
[  354.866036][    C0] vcan0: j1939_tp_rxtimer: 0xffff888026db3400: rx timeout, send abort
[  354.874915][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888026db3400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  354.893373][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056485400: abort rx timeout. Force session deactivation
[  355.028358][T16502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  355.052270][T16501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  355.161256][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  355.169333][    C1] lec:lec_tx_timeout: lec0
[  355.174581][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  355.620115][T16453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  355.804124][T16510] netlink: 'syz.6.2892': attribute type 8 has an invalid length.
[  355.852618][T16512] veth3: entered promiscuous mode
[  355.859263][T16512] veth3: entered allmulticast mode
[  355.944801][T16521] veth5: entered promiscuous mode
[  355.949912][T16521] veth5: entered allmulticast mode
[  356.138002][T16529] team0: Cannot enslave team device to itself
[  356.331596][T16547] netlink: 'syz.4.2903': attribute type 9 has an invalid length.
[  356.378904][T16551] syzkaller1: entered promiscuous mode
[  356.385988][T16551] syzkaller1: entered allmulticast mode
[  357.292564][T16609] netlink: 'syz.4.2922': attribute type 29 has an invalid length.
[  357.363301][T16615] netlink: 'syz.4.2922': attribute type 29 has an invalid length.
[  357.487918][T16617] netlink: 'syz.4.2924': attribute type 8 has an invalid length.
[  357.598739][T16625] netlink: 'syz.4.2928': attribute type 10 has an invalid length.
[  357.625911][T16626] xfrm1: entered allmulticast mode
[  358.482462][T16629] bond8: invalid ARP target 0.0.0.0 specified for addition
[  358.489828][T16629] bond8: option arp_ip_target: invalid value (0)
[  358.497988][T16629] bond8 (unregistering): Released all slaves
[  359.754221][T16578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  360.181196][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  360.189318][    C1] lec:lec_tx_timeout: lec0
[  360.427865][T16672] __nla_validate_parse: 6 callbacks suppressed
[  360.427886][T16672] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2942'.
[  360.849584][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  360.863363][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  360.879936][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  360.895932][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  360.904779][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  361.081368][T16686] wg1 speed is unknown, defaulting to 1000
[  361.112369][T16686] wlan1 speed is unknown, defaulting to 1000
[  361.166362][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2949'.
[  361.180649][T16700] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2950'.
[  361.221820][T16703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2951'.
[  361.262119][T16703] netlink: 'syz.3.2951': attribute type 30 has an invalid length.
[  361.320291][T16703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2951'.
[  361.390681][T16707] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2951'.
[  361.461689][T16707] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2951'.
[  361.487701][T16712] IPVS: set_ctl: invalid protocol: 51 172.20.20.32:20004
[  361.577114][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2956'.
[  361.618743][T16718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2956'.
[  361.678048][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2956'.
[  361.697969][T16720] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  361.976437][T16739] x_tables: unsorted entry at hook 1
[  361.988964][T16686] chnl_net:caif_netlink_parms(): no params data found
[  362.371369][ T5836] Bluetooth: hci3: command 0x040f tx timeout
[  363.014331][ T5836] Bluetooth: hci2: command tx timeout
[  364.044512][T16686] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.053626][T16686] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.061095][T16686] bridge_slave_0: entered allmulticast mode
[  364.069472][T16686] bridge_slave_0: entered promiscuous mode
[  364.078805][T16686] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.086235][T16686] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.094700][T16686] bridge_slave_1: entered allmulticast mode
[  364.103061][T16686] bridge_slave_1: entered promiscuous mode
[  364.190256][T16686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.234135][T16686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  364.345408][T16686] team0: Port device team_slave_0 added
[  364.463980][T16794] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  364.583217][T16686] team0: Port device team_slave_1 added
[  364.592904][T16799] nbd: must specify an index to disconnect
[  364.676475][T16686] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.721520][T16686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  364.751594][T16686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  364.855720][T16686] batman_adv: batadv0: Adding interface: batadv_slave_1
[  364.866878][T16686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  364.901718][T16686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  364.916403][T16803] delete_channel: no stack
[  365.091475][ T5836] Bluetooth: hci2: command tx timeout
[  365.097513][T16686] hsr_slave_0: entered promiscuous mode
[  365.153579][T16686] hsr_slave_1: entered promiscuous mode
[  365.160797][T16686] debugfs: 'hsr0' already exists in 'hsr'
[  365.206177][T16686] Cannot create hsr debugfs directory
[  365.239282][T16824] netlink: 'syz.6.2988': attribute type 1 has an invalid length.
[  365.446718][T16831] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode
[  365.455311][T16831] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode
[  365.475232][T16831] __nla_validate_parse: 7 callbacks suppressed
[  365.475252][T16831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2989'.
[  365.528051][T16831] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2989'.
[  365.709173][T16686] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.739701][T16686] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  365.764569][T16686] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.910745][T16686] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.947884][T16686] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  365.983037][T16686] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.209400][T16686] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  366.233017][T16865] netlink: 'syz.5.2999': attribute type 1 has an invalid length.
[  366.246676][T16686] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  366.257308][T16686] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.360868][T16868] bond2: (slave bridge4): Enslaving as a backup interface with an up link
[  366.383834][T16869] bond2: (slave bridge5): Enslaving as a backup interface with a down link
[  366.424024][T16686] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  366.435855][T16686] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  366.446667][T16686] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.568626][T16875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3001'.
[  366.625577][T16875] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3001'.
[  366.695522][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3003'.
[  366.810427][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3005'.
[  366.955783][T16686] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  367.012916][T16686] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  367.045255][T16686] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  367.076772][T16902] ip6t_srh: unknown srh invflags 4000
[  367.091748][T16686] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  367.157818][T16909] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  367.183062][ T5836] Bluetooth: hci2: command tx timeout
[  367.261470][T16917] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3011'.
[  367.276887][T16913] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3012'.
[  367.300258][T16920] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3014'.
[  367.329139][T16913] vlan4: entered allmulticast mode
[  367.359385][T16923] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3012'.
[  367.368877][T16913] bond0: entered allmulticast mode
[  367.385841][T16913] bond_slave_0: entered allmulticast mode
[  367.409065][T16913] bond_slave_1: entered allmulticast mode
[  367.454360][T16923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  367.467530][T16923] bond_slave_0: left allmulticast mode
[  367.475723][T16923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  367.489297][T16923] bond_slave_1: left allmulticast mode
[  367.505064][T16923] bond0 (unregistering): Released all slaves
[  367.566179][T16686] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.589162][T16686] 8021q: adding VLAN 0 to HW filter on device team0
[  367.606758][  T136] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.613916][  T136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  367.742716][  T136] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.749906][  T136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  368.039563][T16686] 8021q: adding VLAN 0 to HW filter on device batadv0
[  368.258066][T16686] veth0_vlan: entered promiscuous mode
[  368.269679][T16686] veth1_vlan: entered promiscuous mode
[  368.296609][T16686] veth0_macvtap: entered promiscuous mode
[  368.312809][T16686] veth1_macvtap: entered promiscuous mode
[  368.332488][T16686] batman_adv: batadv0: Interface activated: batadv_slave_0
[  368.346801][T16686] batman_adv: batadv0: Interface activated: batadv_slave_1
[  368.360484][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  368.369813][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  368.384672][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  368.394845][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.251590][ T5828] Bluetooth: hci2: command tx timeout
[  370.389159][T16925] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  370.529560][T16971] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3024'.
[  370.560552][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.591701][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.669651][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.679684][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.865732][T16985] Bluetooth: MGMT ver 1.23
[  370.964815][T16988] syzkaller0: entered promiscuous mode
[  370.978647][T16988] syzkaller0: entered allmulticast mode
[  371.044402][T16995] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3033'.
[  371.149907][T16997] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3034'.
[  371.331395][ T5828] Bluetooth: hci2: command 0x0405 tx timeout
[  371.438181][T16983] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check.
[  372.158453][T17049] x_tables: unsorted underflow at hook 4
[  372.215833][T17050] xt_hashlimit: size too large, truncated to 1048576
[  372.308991][T17058] syzkaller1: entered promiscuous mode
[  372.316184][T17058] syzkaller1: entered allmulticast mode
[  372.656702][T17065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3053'.
[  372.713271][T17072] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20001
[  372.770986][T17076] x_tables: duplicate underflow at hook 2
[  372.899090][T17084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3057'.
[  373.190139][T17098] netlink: 'syz.3.3061': attribute type 6 has an invalid length.
[  373.595963][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3065'.
[  373.875102][T17128] netlink: 'syz.6.3069': attribute type 29 has an invalid length.
[  373.896187][T17130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3070'.
[  374.155340][T17147] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3075'.
[  374.289547][T17152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3076'.
[  374.376531][T17159] 8021q: VLANs not supported on ip6_vti0
[  375.381041][T17215] bond0 (unregistering): Released all slaves
[  375.464258][T17213] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  375.566764][T17231] Cannot find add_set index 46338 as target
[  375.685423][T17236] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3102'.
[  375.732335][T17239] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3103'.
[  375.858647][T17245] netlink: 'syz.6.3105': attribute type 1 has an invalid length.
[  376.016776][T17245] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.152393][T17250] bond0: (slave veth5): Enslaving as an active interface with a down link
[  376.192072][T17260] netlink: 'syz.6.3105': attribute type 29 has an invalid length.
[  376.236307][T17245] macvlan3: entered promiscuous mode
[  376.265555][T17245] macvlan3: entered allmulticast mode
[  376.276978][T17245] bond0: entered promiscuous mode
[  376.285111][T17245] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  376.304350][T17245] bond0: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  376.322742][T17245] bond0: left promiscuous mode
[  376.450017][T17275] netlink: 'syz.4.3110': attribute type 13 has an invalid length.
[  376.502750][T17275] gretap0: refused to change device tx_queue_len
[  376.509659][T17275] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  376.539210][T17273] syzkaller0: entered promiscuous mode
[  376.553859][T17282] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3113'.
[  376.692493][T17294] netlink: 'syz.5.3114': attribute type 1 has an invalid length.
[  376.722660][T17299] netlink: 212344 bytes leftover after parsing attributes in process `syz.6.3111'.
[  377.027226][T17311] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  377.081376][T17311] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  377.159277][T17311] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  377.224615][T17317] netlink: 'syz.1.3119': attribute type 1 has an invalid length.
[  377.372192][T17322] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3121'.
[  377.418580][T17317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3119'.
[  377.431038][T17327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3123'.
[  377.439799][T17321] bond5: (slave geneve2): making interface the new active one
[  377.452517][T17321] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  377.505918][T17317] 8021q: adding VLAN 0 to HW filter on device bond5
[  377.534439][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  377.581974][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  377.591752][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  377.623532][ T1331] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  378.666007][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'.
[  378.785126][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[  378.795295][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL
[  379.166122][T17402] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3141'.
[  379.504085][T17416] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3143'.
[  380.016960][T17447] openvswitch: netlink: EtherType 50a is less than min 600
[  380.137586][T17447] 8021q: adding VLAN 0 to HW filter on device batadv1
[  380.147149][T17447] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  380.158849][T17453] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048)
[  380.172190][T17447] team0: Failed to send options change via netlink (err -105)
[  380.206311][T17447] team0: Port device batadv1 added
[  380.245983][T17453] netlink: 'syz.1.3156': attribute type 1 has an invalid length.
[  380.361771][T17455] ip6tnl1: entered promiscuous mode
[  380.401707][   T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  380.441580][   T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  380.460535][   T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  380.482189][   T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  380.604450][T17485] syzkaller0: entered promiscuous mode
[  380.618380][T17485] syzkaller0: entered allmulticast mode
[  380.866814][T17497] x_tables: duplicate entry at hook 3
[  381.320668][T17525] __nla_validate_parse: 3 callbacks suppressed
[  381.320690][T17525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3178'.
[  381.429419][T17530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3180'.
[  381.433203][T17536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3182'.
[  381.465567][T17525] pim6reg: entered allmulticast mode
[  381.474364][T17530] hsr_slave_0: left promiscuous mode
[  381.480741][T17530] hsr_slave_1: left promiscuous mode
[  381.481366][T17525] netlink: 'syz.6.3178': attribute type 10 has an invalid length.
[  381.569959][T17533] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  381.597757][T17543] netlink: 'syz.3.3185': attribute type 1 has an invalid length.
[  381.698012][T17536] syzkaller0: entered promiscuous mode
[  381.723854][T17536] syzkaller0: entered allmulticast mode
[  381.756249][T17543] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  381.780383][T17536] wg1 speed is unknown, defaulting to 1000
[  381.822612][T17536] wlan1 speed is unknown, defaulting to 1000
[  381.989078][ T1759] block nbd2: Possible stuck request ffff8880268b8000: control (read@0,1024B). Runtime 90 seconds
[  382.000708][ T1759] block nbd2: Possible stuck request ffff8880268b8200: control (read@1024,1024B). Runtime 90 seconds
[  382.016757][ T1759] block nbd2: Possible stuck request ffff8880268b8400: control (read@2048,1024B). Runtime 90 seconds
[  382.028359][ T1759] block nbd2: Possible stuck request ffff8880268b8600: control (read@3072,1024B). Runtime 90 seconds
[  382.383428][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'.
[  384.056161][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms
[  384.064348][    C1] lec:lec_tx_timeout: lec0
[  384.343622][ T7907] lec:lec_start_xmit: lec0:No lecd attached
[  384.956695][T17626] tipc: Started in network mode
[  384.973490][T17626] tipc: Node identity 4, cluster identity 4711
[  384.993824][T17626] tipc: Node number set to 4
[  385.260569][T17645] syzkaller0: entered promiscuous mode
[  385.273245][T17645] syzkaller0: entered allmulticast mode
[  385.720361][T17679] netlink: 'syz.6.3221': attribute type 10 has an invalid length.
[  385.721342][T17677] netlink: 'syz.3.3220': attribute type 1 has an invalid length.
[  385.972172][T17687] openvswitch: netlink: IP tunnel dst address not specified
[  385.992908][T17689] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3224'.
[  386.022117][T17689] netlink: Conntrack attr has 3 unknown bytes
[  386.061680][T17695] sit0: entered promiscuous mode
[  386.099193][T17695] netlink: 'syz.4.3224': attribute type 1 has an invalid length.
[  386.109877][T17695] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3224'.
[  386.134440][T17694] syz_tun: entered allmulticast mode
[  386.160266][T17694] syz_tun: left allmulticast mode
[  386.287880][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3232'.
[  386.322328][T17710] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  386.351049][T17712] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3234'.
[  386.657903][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3240'.
[  386.686795][T17740] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  386.729139][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3242'.
[  386.763616][T17742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3241'.
[  386.839855][T17748] syzkaller1: entered promiscuous mode
[  386.846153][T17748] syzkaller1: entered allmulticast mode
[  386.916919][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3243'.
[  387.362110][T17769] netlink: 'syz.4.3251': attribute type 10 has an invalid length.
[  387.416714][T17773] sctp: [Deprecated]: syz.3.3252 (pid 17773) Use of int in maxseg socket option.
[  387.416714][T17773] Use struct sctp_assoc_value instead
[  387.452300][T17773] tipc: Failed to obtain node identity
[  387.468943][T17773] tipc: Enabling of bearer <ib:team_slave_0> rejected, failed to enable media
[  387.602331][T17786] netlink: 'syz.6.3255': attribute type 5 has an invalid length.
[  387.606848][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  387.618216][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  387.626060][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  387.641450][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  387.669520][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  387.731519][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  387.771211][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  387.778342][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  387.806981][T17794] bond1 (unregistering): Released all slaves
[  387.834151][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  387.858350][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  387.877788][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  387.903809][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  387.921547][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  387.929110][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  387.940051][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  387.949447][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  387.961256][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  387.969427][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  387.977539][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  388.005021][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  388.023916][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  388.031604][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  388.049797][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  388.073544][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  388.092123][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  388.100477][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  388.109503][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  388.121768][T17808] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  388.137191][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  388.177041][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  388.222576][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  388.229709][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  388.281508][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  388.307723][T17788] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  388.315925][T17818] syzkaller1: tun_chr_ioctl cmd 1074025677
[  388.353566][T17818] syzkaller1: linktype set to 823
[  388.426542][T17821] netlink: 'syz.6.3266': attribute type 10 has an invalid length.
[  388.675305][T17834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  388.683107][T17834] IPv6: NLM_F_CREATE should be set when creating new route
[  388.690580][T17834] IPv6: NLM_F_CREATE should be set when creating new route
[  389.010219][T17859] veth3: entered allmulticast mode
[  389.098436][T17866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3278'.
[  389.107200][T17870] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.3279'.
[  389.112271][T17859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3276'.
[  389.117737][T17870] bridge_slave_1: default FDB implementation only supports local addresses
[  389.139904][T17871] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.3279'.
[  389.142056][T17868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3278'.
[  389.149548][T17871] bridge_slave_1: default FDB implementation only supports local addresses
[  389.208464][T17866] veth0_to_team: entered promiscuous mode
[  389.259635][T17866] veth0_to_team: left promiscuous mode
[  389.295256][T17868] veth0_to_team: entered promiscuous mode
[  389.346385][T17868] veth0_to_team: left promiscuous mode
[  390.051423][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5710 ms
[  390.059499][    C1] lec:lec_tx_timeout: lec0
[  390.286293][T17929] sctp: [Deprecated]: syz.6.3296 (pid 17929) Use of int in max_burst socket option.
[  390.286293][T17929] Use struct sctp_assoc_value instead
[  390.313394][T17929] tap0: tun_chr_ioctl cmd 1074025678
[  390.318948][T17929] tap0: group set to 0
[  391.092248][ T5828] Bluetooth: hci5: command 0x0406 tx timeout
[  391.592225][T17974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3307'.
[  391.785569][T17986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3310'.
[  391.831835][T17986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3310'.
[  392.001657][T17997] netlink: 'syz.6.3313': attribute type 1 has an invalid length.
[  392.020376][T17996] netlink: 'syz.6.3313': attribute type 1 has an invalid length.
[  392.241679][T18012] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3317'.
[  392.289606][T18012] netlink: 'syz.5.3317': attribute type 1 has an invalid length.
[  392.333153][T18012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3317'.
[  392.353818][T18012] netlink: 658 bytes leftover after parsing attributes in process `syz.5.3317'.
[  392.377597][T18012] netlink: 'syz.5.3317': attribute type 1 has an invalid length.
[  392.822262][T18039] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3324'.
[  392.943939][T18046] veth0_to_bond: entered allmulticast mode
[  393.302457][T18057] bond4: Removing last arp target with arp_interval on
[  393.468309][T18073] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3334'.
[  393.719020][T18082] wireguard1: entered promiscuous mode
[  393.727566][T18082] wireguard1: entered allmulticast mode
[  393.750807][T18082] wireguard2: entered promiscuous mode
[  393.760438][T18082] wireguard2: entered allmulticast mode
[  393.779531][T18082] wireguard3: entered promiscuous mode
[  393.785246][T18082] wireguard3: entered allmulticast mode
[  393.807000][T18082] wireguard4: entered promiscuous mode
[  393.813768][T18082] wireguard4: entered allmulticast mode
[  393.836758][T18082] wireguard5: entered promiscuous mode
[  393.842514][T18082] wireguard5: entered allmulticast mode
[  393.872563][T18082] wireguard6: entered promiscuous mode
[  393.892097][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3339'.
[  393.903810][T18082] wireguard6: entered allmulticast mode
[  393.941526][T18092] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3339'.
[  393.969284][T18082] wireguard7: entered promiscuous mode
[  393.975027][T18082] wireguard7: entered allmulticast mode
[  393.996464][T18082] wireguard8: entered promiscuous mode
[  394.002117][T18082] wireguard8: entered allmulticast mode
[  394.069287][T18082] wireguard9: entered promiscuous mode
[  394.081461][T18082] wireguard9: entered allmulticast mode
[  394.104096][T18082] wireguard10: entered promiscuous mode
[  394.110496][T18082] wireguard10: entered allmulticast mode
[  394.123968][T18101] syzkaller1: entered promiscuous mode
[  394.188605][T18101] syzkaller1: entered allmulticast mode
[  394.254298][T18082] wireguard11: entered promiscuous mode
[  394.262760][T18082] wireguard11: entered allmulticast mode
[  394.291023][T18117] netlink: 'syz.4.3343': attribute type 3 has an invalid length.
[  394.340291][T18082] wireguard12: entered promiscuous mode
[  394.347655][T18082] wireguard12: entered allmulticast mode
[  394.365071][T18082] wireguard13: entered promiscuous mode
[  394.371098][T18082] wireguard13: entered allmulticast mode
[  394.391654][T18082] wireguard14: entered promiscuous mode
[  394.413402][T18082] wireguard14: entered allmulticast mode
[  394.457223][T18082] wireguard15: entered promiscuous mode
[  394.471490][T18082] wireguard15: entered allmulticast mode
[  394.530453][T18082] wireguard16: entered promiscuous mode
[  394.577583][T18082] wireguard16: entered allmulticast mode
[  394.779477][T18135] Bluetooth: hci1: too big key_count value 32778
[  395.595936][T18177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  395.638355][T18180] IPVS: Unknown mcast interface: vcan0
[  395.651367][T18185] IPVS: length: 94 != 24
[  396.045515][T18211] netlink: 'syz.4.3362': attribute type 2 has an invalid length.
[  396.078014][T18193] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.085979][T18193] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.213208][ T5828] Bluetooth: hci6: command 0x0406 tx timeout
[  396.292107][T18193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  396.310060][T18193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  396.553400][T18193] veth3: left promiscuous mode
[  396.558208][T18193] veth3: left allmulticast mode
[  396.565983][T18193] veth5: left promiscuous mode
[  396.570796][T18193] veth5: left allmulticast mode
[  396.579183][T18193] xfrm1: left allmulticast mode
[  396.586916][T18193] ip6tnl1: left promiscuous mode
[  396.616893][T18198] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.636117][T18219] __nla_validate_parse: 7 callbacks suppressed
[  396.636137][T18219] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3365'.
[  396.655654][  T136] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.748178][  T136] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.782328][  T136] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.805060][T18205] wg1 speed is unknown, defaulting to 1000
[  396.815765][T18205] wlan1 speed is unknown, defaulting to 1000
[  397.484847][T18263] tipc: Failed to remove unknown binding: 66,0,0/0:2803143377/2803143378
[  397.504480][T18263] tipc: Failed to remove unknown binding: 66,0,0/0:2803143377/2803143378
[  397.667051][T18268] ip6gre0: entered allmulticast mode
[  397.697323][T18273] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3384'.
[  397.734589][T18271] syzkaller0: entered promiscuous mode
[  397.740130][T18271] syzkaller0: entered allmulticast mode
[  397.886240][T18285] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3386'.
[  397.911098][T18285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3386'.
[  399.964280][T18327] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3398'.
[  399.977898][T18321] bond1: option miimon: invalid value (18446744073709551585)
[  399.985530][T18321] bond1: option miimon: allowed values 0 - 2147483647
[  399.996018][T18321] bond1 (unregistering): Released all slaves
[  400.021652][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3396'.
[  400.250021][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3401'.
[  400.272583][T18341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3401'.
[  400.306189][T18340] netlink: 'syz.4.3401': attribute type 29 has an invalid length.
[  400.633020][T18351] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  400.660697][T18378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3408'.
[  400.874226][T18381] siw: device registration error -23
[  400.979816][T18389] gtp0: entered promiscuous mode
[  401.032030][T18389] gtp0: entered allmulticast mode
[  401.553386][T18444] netlink: 'syz.4.3424': attribute type 4 has an invalid length.
[  401.565543][T18443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3422'.
[  401.910827][T18461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  401.955795][T18461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  402.037947][T18444] __nla_validate_parse: 1 callbacks suppressed
[  402.037961][T18444] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3424'.
[  402.061929][T18469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3430'.
[  402.071474][T18469] netlink: 'syz.1.3430': attribute type 1 has an invalid length.
[  402.079235][T18469] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3430'.
[  402.103330][T18469] netlink: 'syz.1.3430': attribute type 1 has an invalid length.
[  402.224527][T18474] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3430'.
[  402.636020][T18503] netlink: 'syz.6.3441': attribute type 9 has an invalid length.
[  402.655048][T18503] netlink: 'syz.6.3441': attribute type 11 has an invalid length.
[  402.664511][T18503] netlink: 'syz.6.3441': attribute type 12 has an invalid length.
[  402.674090][T18503] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.3441'.
[  402.801906][T18409] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  402.816153][T18518] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  402.854287][T18510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3443'.
[  403.045162][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3449'.
[  403.408958][T18548] netlink: zone id is out of range
[  403.422631][T18548] netlink: zone id is out of range
[  403.451358][T18548] netlink: zone id is out of range
[  403.456538][T18548] netlink: zone id is out of range
[  403.458977][T18550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3456'.
[  403.471216][T18548] netlink: zone id is out of range
[  403.471234][T18548] netlink: zone id is out of range
[  403.471243][T18548] netlink: zone id is out of range
[  403.471252][T18548] netlink: zone id is out of range
[  403.471261][T18548] netlink: zone id is out of range
[  403.471270][T18548] netlink: zone id is out of range
[  403.498537][T18550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3456'.
[  403.527198][T18406] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  403.551327][T18406] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  403.576224][T18550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3456'.
[  403.601532][T18406] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  403.619093][T18406] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  403.675247][T18561] sctp: [Deprecated]: syz.6.3460 (pid 18561) Use of struct sctp_assoc_value in delayed_ack socket option.
[  403.675247][T18561] Use struct sctp_sack_info instead
[  403.799951][T18568] netlink: 'syz.5.3462': attribute type 1 has an invalid length.
[  403.968865][T18568] bond5: entered promiscuous mode
[  404.008031][T18568] bond5: entered allmulticast mode
[  404.026721][T18568] 8021q: adding VLAN 0 to HW filter on device bond5
[  404.027079][T18583] xt_CT: You must specify a L4 protocol and not use inversions on it
[  404.061030][T18581] macvlan2: entered promiscuous mode
[  404.104464][T18581] macvlan2: entered allmulticast mode
[  404.138824][T18581] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  404.798081][T18622] team0 (unregistering): Port device team_slave_0 removed
[  404.835374][T18622] team0 (unregistering): Port device team_slave_1 removed
[  405.198389][T18648] syzkaller0: entered promiscuous mode
[  405.204539][T18648] syzkaller0: entered allmulticast mode
[  405.249800][T18648] x_tables: duplicate underflow at hook 1
[  405.257501][T18648] x_tables: duplicate underflow at hook 1
[  405.602621][T18669] syzkaller1: entered promiscuous mode
[  405.626671][T18669] syzkaller1: entered allmulticast mode
[  405.656234][   T31] INFO: task syz.0.1926:12848 blocked for more than 143 seconds.
[  405.669384][   T31]       Not tainted syzkaller #0
[  405.686734][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  405.705858][   T31] task:syz.0.1926      state:D stack:27144 pid:12848 tgid:12846 ppid:5823   task_flags:0x400140 flags:0x00080002
[  405.728761][T18664] sit0: entered promiscuous mode
[  405.741567][T18664] netlink: 'syz.3.3496': attribute type 1 has an invalid length.
[  405.749848][   T31] Call Trace:
[  405.759992][   T31]  <TASK>
[  405.765615][   T31]  __schedule+0x15dd/0x52d0
[  405.780622][   T31]  ? __pfx___schedule+0x10/0x10
[  405.786699][   T31]  ? schedule+0x90/0x360
[  405.802415][   T31]  schedule+0x164/0x360
[  405.806656][   T31]  schedule_preempt_disabled+0x13/0x30
[  405.821219][   T31]  __mutex_lock+0x7fe/0x1300
[  405.825912][   T31]  ? __mutex_lock+0x5ac/0x1300
[  405.830885][   T31]  ? nfsd_nl_listener_set_doit+0x141/0x1670
[  405.836948][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  405.842520][   T31]  ? __asan_memset+0x22/0x50
[  405.847188][   T31]  nfsd_nl_listener_set_doit+0x141/0x1670
[  405.853078][   T31]  ? __pfx___nla_validate_parse+0x10/0x10
[  405.859102][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  405.861943][T18664] syzkaller0: entered promiscuous mode
[  405.865520][   T31]  ? __nla_parse+0x40/0x60
[  405.871411][T18664] syzkaller0: entered allmulticast mode
[  405.875573][   T31]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  405.887766][   T31]  genl_family_rcv_msg_doit+0x22a/0x330
[  405.894473][   T31]  ? __asan_memcpy+0x40/0x70
[  405.899172][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  405.906486][   T31]  ? bpf_lsm_capable+0x9/0x20
[  405.911786][   T31]  ? security_capable+0x7e/0x2c0
[  405.916746][   T31]  genl_rcv_msg+0x61c/0x7a0
[  405.921351][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  405.926515][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  405.932991][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  405.937969][   T31]  netlink_rcv_skb+0x232/0x4b0
[  405.942809][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  405.947963][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  405.954201][   T31]  ? down_read+0x272/0x2e0
[  405.958648][   T31]  ? genl_rcv+0xd/0x40
[  405.962813][   T31]  genl_rcv+0x28/0x40
[  405.966914][   T31]  netlink_unicast+0x80f/0x9b0
[  405.971961][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  405.977265][   T31]  ? netlink_sendmsg+0x650/0xb40
[  405.982262][   T31]  ? skb_put+0x11b/0x210
[  405.986628][   T31]  netlink_sendmsg+0x813/0xb40
[  405.992357][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  405.997665][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  406.003444][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  406.008762][   T31]  ____sys_sendmsg+0x972/0x9f0
[  406.014051][   T31]  ? futex_unqueue+0x211/0x240
[  406.018856][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  406.024265][   T31]  ? import_iovec+0x73/0xa0
[  406.028819][   T31]  ___sys_sendmsg+0x2a5/0x360
[  406.033736][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  406.038987][   T31]  ? futex_wait+0x29a/0x380
[  406.043636][   T31]  ? __fget_files+0x2a/0x420
[  406.048323][   T31]  ? __fget_files+0x3a0/0x420
[  406.053437][   T31]  __x64_sys_sendmsg+0x1bd/0x2a0
[  406.058419][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  406.064104][   T31]  ? rcu_is_watching+0x15/0xb0
[  406.068944][   T31]  do_syscall_64+0x14d/0xf80
[  406.073691][   T31]  ? trace_irq_disable+0x3b/0x150
[  406.078762][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.085373][   T31]  ? clear_bhb_loop+0x40/0x90
[  406.090262][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.096282][   T31] RIP: 0033:0x7fab14d9c819
[  406.100723][   T31] RSP: 002b:00007fab15bd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  406.109325][   T31] RAX: ffffffffffffffda RBX: 00007fab15015fa0 RCX: 00007fab14d9c819
[  406.117485][   T31] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003
[  406.125605][   T31] RBP: 00007fab14e32c91 R08: 0000000000000000 R09: 0000000000000000
[  406.133667][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  406.141726][   T31] R13: 00007fab15016038 R14: 00007fab15015fa0 R15: 00007ffd2bcbfea8
[  406.149755][   T31]  </TASK>
[  406.152973][   T31] 
[  406.152973][   T31] Showing all locks held in the system:
[  406.160831][   T31] 1 lock held by khungtaskd/31:
[  406.165942][   T31]  #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  406.176604][   T31] 4 locks held by kworker/u8:3/49:
[  406.181836][   T31] 2 locks held by kworker/u9:0/51:
[  406.186970][   T31]  #0: ffff888026815148 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  406.198711][   T31]  #1: ffffc90000bb7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  406.232490][   T31] 2 locks held by getty/5580:
[  406.237366][   T31]  #0: ffff888031ed20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  406.248068][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  406.258670][   T31] 2 locks held by syz.2.1857/12616:
[  406.264192][   T31]  #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  406.272771][   T31]  #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  406.283398][   T31] 2 locks held by syz.0.1926/12848:
[  406.288598][   T31]  #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  406.297479][   T31]  #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  406.308076][   T31] 1 lock held by udevd/13513:
[  406.312903][   T31]  #0: ffff8880263bd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  406.322659][   T31] 3 locks held by kworker/u8:16/18396:
[  406.328174][   T31]  #0: ffff88813fe54148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  406.339978][   T31]  #1: ffffc90010b0fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  406.352210][   T31]  #2: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  406.363547][   T31] 1 lock held by syz.3.3496/18662:
[  406.368755][   T31]  #0: ffff888057dbb5c8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  406.380139][   T31] 2 locks held by syz.4.3498/18669:
[  406.385510][   T31]  #0: ffff88804ef3b5c8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  406.396030][   T31]  #1: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  406.407343][   T31] 
[  406.409694][   T31] =============================================
[  406.409694][   T31] 
[  406.428126][   T31] NMI backtrace for cpu 1
[  406.428148][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  406.428168][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  406.428180][   T31] Call Trace:
[  406.428188][   T31]  <TASK>
[  406.428197][   T31]  dump_stack_lvl+0xe8/0x150
[  406.428231][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  406.428253][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  406.428280][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  406.428303][   T31]  sys_info+0x135/0x170
[  406.428329][   T31]  watchdog+0xfd9/0x1030
[  406.428354][   T31]  ? watchdog+0x21a/0x1030
[  406.428380][   T31]  kthread+0x388/0x470
[  406.428401][   T31]  ? __pfx_watchdog+0x10/0x10
[  406.428417][   T31]  ? __pfx_kthread+0x10/0x10
[  406.428437][   T31]  ret_from_fork+0x51e/0xb90
[  406.428466][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  406.428490][   T31]  ? __switch_to+0xc7d/0x1450
[  406.428516][   T31]  ? __pfx_kthread+0x10/0x10
[  406.428536][   T31]  ret_from_fork_asm+0x1a/0x30
[  406.428581][   T31]  </TASK>
[  406.428590][   T31] Sending NMI from CPU 1 to CPUs 0:
[  406.539210][    C0] NMI backtrace for cpu 0
[  406.539230][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  406.539248][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  406.539256][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  406.539282][    C0] Code: ce 6b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f2 19 00 fb f4 <e9> fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  406.539296][    C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242
[  406.539311][    C0] RAX: 000000000017058f RBX: ffffffff819a91fa RCX: 0000000080000001
[  406.539323][    C0] RDX: 0000000000000001 RSI: ffffffff8defadf3 RDI: ffffffff8c27d100
[  406.539334][    C0] RBP: ffffffff8e407eb0 R08: ffff8880b863399b R09: 1ffff110170c6733
[  406.539344][    C0] R10: dffffc0000000000 R11: ffffed10170c6734 R12: 0000000000000000
[  406.539355][    C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 1ffffffff1c929d8
[  406.539366][    C0] FS:  0000000000000000(0000) GS:ffff888125457000(0000) knlGS:0000000000000000
[  406.539379][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  406.539390][    C0] CR2: 00007f32473e92f8 CR3: 000000007855e000 CR4: 00000000003526f0
[  406.539407][    C0] Call Trace:
[  406.539415][    C0]  <TASK>
[  406.539421][    C0]  default_idle+0x9/0x20
[  406.539441][    C0]  default_idle_call+0x72/0xb0
[  406.539462][    C0]  do_idle+0x36a/0x5f0
[  406.539486][    C0]  ? __pfx_do_idle+0x10/0x10
[  406.539510][    C0]  cpu_startup_entry+0x43/0x60
[  406.539534][    C0]  rest_init+0x2de/0x300
[  406.539549][    C0]  start_kernel+0x385/0x3d0
[  406.539572][    C0]  x86_64_start_reservations+0x24/0x30
[  406.539591][    C0]  x86_64_start_kernel+0x143/0x1c0
[  406.539608][    C0]  common_startup_64+0x13e/0x147
[  406.539632][    C0]  </TASK>
[  406.716402][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  406.723296][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  406.732430][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  406.742586][   T31] Call Trace:
[  406.745876][   T31]  <TASK>
[  406.748830][   T31]  vpanic+0x56c/0xa60
[  406.752835][   T31]  ? __pfx___schedule+0x10/0x10
[  406.757695][   T31]  ? __pfx_vpanic+0x10/0x10
[  406.762205][   T31]  ? __pfx_console_unlock+0x10/0x10
[  406.767422][   T31]  panic+0xc5/0xd0
[  406.771176][   T31]  ? __pfx_panic+0x10/0x10
[  406.775812][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  406.781220][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  406.787413][   T31]  watchdog+0x1023/0x1030
[  406.791765][   T31]  ? watchdog+0x21a/0x1030
[  406.796295][   T31]  kthread+0x388/0x470
[  406.800370][   T31]  ? __pfx_watchdog+0x10/0x10
[  406.805057][   T31]  ? __pfx_kthread+0x10/0x10
[  406.809697][   T31]  ret_from_fork+0x51e/0xb90
[  406.814313][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  406.819450][   T31]  ? __switch_to+0xc7d/0x1450
[  406.824246][   T31]  ? __pfx_kthread+0x10/0x10
[  406.828954][   T31]  ret_from_fork_asm+0x1a/0x30
[  406.833837][   T31]  </TASK>
[  406.837019][   T31] Kernel Offset: disabled
[  406.841340][   T31] Rebooting in 86400 seconds..