last executing test programs:

5.803755841s ago: executing program 3 (id=1703):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', <r1=>0x0})
r2 = accept(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x80)
ioctl$sock_bt_hci(r2, 0x96e0d90d49e67498, &(0x7f00000002c0)="607e324d83f8163188c38d818cfcc2c273fda67547a818a292190deb360dd24bcf3c2643eca5b5a49b80a27dad5b2ea27bee9effedd4547d4d56c359dd1de292854db0460431e23f5db1502e1aadbe503461d3bb22053b65b3beca0871c81bc6e961bf0a1a8a0299e51ef81e3a641ed5d909a9f20c5728b78b4c0e0696d8da96deb5c2db59b111d39095b9b53c8d95a0fba87294d938d25b3ac74c38e096d9f70f0799484add846b8f277b9a9f477c23")
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000820000000400000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f0000000500), 0x0}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x40, 0x25dfdbff, {0xa, 0x78, 0x9, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x41e}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010)
socket$kcm(0x29, 0x5, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r10)
recvmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/125, 0x7d}, {&(0x7f0000001600)=""/4099, 0x1003}, {&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f0000000480)=""/131, 0x83}], 0x4}, 0x40)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r8, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044040}, 0xc0)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r12 = accept$packet(r2, 0x0, &(0x7f0000000540))
getsockname$packet(r12, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)

5.23959897s ago: executing program 3 (id=1708):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x1)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000200)={0x2f}, 0x8)
sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040)

4.992378426s ago: executing program 3 (id=1710):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
preadv(r1, &(0x7f0000001440)=[{0x0}, {&(0x7f0000001480)=""/15, 0xf}], 0x2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800ddff790001000025021d000000000000000000000000eac9c6ad1d17810d79fa0bb75cb9a9844538a7d3d1393cf408bd73d8132c5e7d443dca444e5188e60b27860dfb1fc2d0009e445299a8dd6ce8c476f93ad90ae3915b6b956e16ab21eebe81297f2f07a39ff77a900cddc3ccf15b9224e558b01c4ba18f4f330e3dc3c8d31a9ec3721f5d0fcc4649c4dab8ccfd2d"], 0x18}, 0x1, 0x0, 0x0, 0x4402}, 0x0)

3.9234855s ago: executing program 2 (id=1716):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014001680100008800c00028008"], 0x38}, 0x1, 0x0, 0x0, 0x22004044}, 0x4048080)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={<r1=>r0, &(0x7f0000000000)='.\xcd.\x00', 0x18300, &(0x7f0000000080)={@_ha_fsid={[0xf, 0x95b8]}, {0x6, 0x7, 0x3, 0x2}}, 0x2000, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x7fffffff})
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x47c240a6e0016e69}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x1407, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4800)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff00000000850000001b3bdf0095"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

3.700818635s ago: executing program 2 (id=1719):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x4}, @in6={0xa, 0x4e23, 0xb, @loopback, 0x8}, @in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, @in6={0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}], 0x70) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0x30, r2, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x48, r7, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x4) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
sendmsg$nl_xfrm(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newspdinfo={0x1c, 0x24, 0x300, 0x70bd2c, 0x25dfdbfc, 0x1ff, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c004}, 0xa0) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
socket$isdn(0x22, 0x3, 0x24) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r8 = socket$netlink(0x10, 0x3, 0x12)
write(r8, &(0x7f00000000c0)="29160700110005b7ff00000004080f06", 0x10) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff}) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r10, 0x0) (async)
connect$netrom(r10, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r9, 0x0, r11, 0x0, 0x6, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32, @ANYBLOB="14000100ff05000000000000dfce0000000000010800"], 0x34}}, 0x0) (async)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32, @ANYBLOB="140002"], 0x34}}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

3.586744206s ago: executing program 0 (id=1720):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', <r2=>0x0, 0x29, 0x64, 0x6c, 0xfffff001, 0x64, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x40, 0x1, 0x5, 0xfffffff2}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100000052c60b2e2bec9313569d65df21082c2500000000002120207b1af8ff00000000bfa10000000000f607010000f8ffffffb702000008000000b7030000"], &(0x7f0000000980)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x482400, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'ipvlan1\x00', 0x2000})
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

3.464588471s ago: executing program 0 (id=1721):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r2 = socket(0x2a, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x8, 0x700, 0x10000000, 0xff, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x64, 0x0, 0x3, 0x4, 0x0, @empty, @empty}}}})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r5)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56441, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x56540f1e, 0x4, 0x5, 0x7fffffff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x2008880)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x4, 0x38, &(0x7f0000000900)=""/56, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0x10, 0xfffffff9, 0x3}, 0x10, 0x0, r10, 0x2, 0x0, &(0x7f0000000b80)=[{0x0, 0x5, 0xf, 0x9}, {0x5, 0x5, 0xf, 0x7}], 0x10, 0xffffff15}, 0x94)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r11, 0x0, r11, 0x0, 0x8000f28, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x16, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x1d}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x5, 0x5, 0x40, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x40, 0xf376, 0x1c}})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

3.198860183s ago: executing program 4 (id=1723):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0)
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket(0x14, 0x2, 0x4)
unshare(0x20400)
shutdown(r2, 0x1)
setsockopt$sock_int(r2, 0x1, 0x20, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00@\x00', 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x46}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd2, '\x00', @private0}}}}}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001200010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000000387d0500140003006e657464657673696d3000"], 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0x8804)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x403, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38a2}}, 0x20}, 0x1, 0xba01}, 0x0)

2.631536193s ago: executing program 4 (id=1724):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20, 0x40000000}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x78bd30, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x20000007}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0xc) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x78bd30, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x20000007}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90002000ad9000008000240000000000900010073797a30000000000900020073797a3200000000140005800800014000000011080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90002000ad9000008000240000000000900010073797a30000000000900020073797a3200000000140005800800014000000011080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001700)={&(0x7f0000000e80)={0x87c, r5, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1bc, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x80}]}, {0x118, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x104, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x8, 0x6d, 0x6, 0x1ff, 0x5, 0x6d9]}}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x5, 0x9, 0xc, 0x1b, 0x48, 0x6c, 0x5, 0x48, 0x30, 0x24, 0x18, 0x1b, 0x12, 0x12]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0xa}, {0x1, 0x6}, {0x4, 0x4}, {0x6, 0x5}, {0x3, 0xa}, {0x7, 0xa}, {0x6, 0x3}, {0x1, 0x3}, {0x1, 0x6}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1ff, 0x3, 0x6, 0x6e, 0xff, 0x68]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x5, 0x4, 0x2, 0x4, 0x40, 0xd36]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x95, 0x7f, 0x9, 0x17, 0x40, 0x8000, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x60, 0x5, 0x5, 0x18]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3, 0x6, 0x16, 0x0, 0x3, 0x60, 0x6, 0x2, 0x24, 0x16, 0x5, 0x9, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x7}, {0x6, 0x5}, {0x1, 0x3}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0xb, 0x3, 0x6, 0x1b, 0x2, 0x1edf8c434e4a3f09, 0x48, 0x4, 0x16, 0x30, 0xc, 0x30, 0x2, 0xc, 0x1, 0x1]}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7c}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x47}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x2f0, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x20c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x49f3, 0xfff, 0xeeb, 0x5, 0x9, 0x0, 0x7, 0x1ad]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5ee8, 0x6, 0x0, 0x3, 0x1, 0x5, 0x6, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xd9, 0xf, 0x0, 0x8, 0x6, 0x800, 0x2]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x0, 0x7}, {0x3, 0x2}, {0x1}, {0x2, 0x4}, {0x7, 0x3}, {0x5, 0xa}, {0x1, 0xa}, {0x3, 0xa}, {0x5, 0x8}, {0x3, 0xa}, {0x5, 0x7}, {0x2}, {0x0, 0x1}, {0x0, 0xc}, {0x1, 0x7}, {0x7, 0x8}, {0x7, 0x7}, {0x0, 0x6}, {0x5, 0x5}, {0x3, 0x4}, {0x6, 0x1}, {0x4, 0xa}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x8}, {0x3}, {0x0, 0x2}, {0x7, 0x5}, {0x1, 0x8}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x3ff, 0x6, 0xb, 0xffff, 0x0, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x3ff, 0x1b01, 0x8, 0xf3, 0x81, 0xfff9, 0x4]}}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x0, 0x2}, {0x5, 0x1}, {0x4}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0x2}, {0x2, 0x5}, {0x0, 0xa}, {}, {0x4, 0x5}, {0x5, 0x5}, {0x2, 0x1}, {0x2, 0x9}, {0x1, 0x9}, {0x5, 0x3}, {0x0, 0x5}, {0x1, 0x4}, {0x3, 0x2}, {0x7, 0x7}, {0x7, 0x9}, {0x2, 0x2}, {0x1, 0x5}, {0x4, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xcc, 0x8, 0x4, 0x0, 0x7, 0x7781, 0xfffd]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x2}, {0x1, 0x5}, {0x2, 0x8}, {0x7, 0x5}, {0x3, 0x6}, {0x5, 0x3}, {0x2, 0xa}, {0x6, 0x3}, {0x0, 0x8}, {0x5}, {}, {0x1, 0x7}, {0x5, 0x7}, {0x0, 0xa}, {0x3, 0x6}, {0x7, 0x7}, {0x3}, {0x1, 0x4}, {0x4, 0x6}, {0x0, 0xa}, {0x1, 0x2}, {0x3, 0x2}, {0x5, 0x7}, {0x4, 0x8}, {0x7, 0x6}, {0x1, 0x4}, {0x4}, {0x6, 0x9}, {0x7, 0x8}, {0x7, 0x3}, {0x7}, {0x0, 0x9}, {0x0, 0x8}, {0x7, 0x5}, {0x1, 0x6}, {0x6, 0x5}, {0x4, 0x2}, {0x3, 0x1}, {0x1, 0xa}, {0x2, 0xb}, {}, {0x3, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x7}, {0x7, 0xa}, {0x2, 0x2}, {0x5}, {0x7, 0x1}, {0x7, 0xa}, {0x5, 0x3}, {0x1, 0x3}, {0x7, 0x3}, {0x0, 0x6}, {0x4, 0x2}, {0x0, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x2, 0x7ff, 0x88d, 0x4, 0x0, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xc00, 0x84, 0x6, 0xffff, 0x8000, 0x8, 0x5]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x36, 0x5, 0x6, 0x30, 0x2, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x0, 0x6b0, 0x401, 0x263, 0x4, 0x7f, 0xffd1]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x60, 0x5, 0x4, 0x2, 0x4, 0x30f3b1f7d503d7e9, 0x18, 0x9, 0x5, 0x1b, 0x60, 0x3, 0x0, 0xb, 0x1b, 0x2, 0x3, 0xc, 0x1b, 0x9]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x3}, {0x4, 0xa}, {0x7, 0x5}, {0x1, 0x1}, {0x0, 0x6}, {0x4, 0xa}, {0x3, 0x6}, {0x4, 0x4}, {0x4, 0x3}, {0x4, 0x4}, {0x6, 0x7}, {0x2, 0x1}, {0x2, 0x8}, {0x2, 0x3}, {0x2, 0x6}, {0x7, 0x2}, {0x4, 0x5}, {0x5, 0x3}, {0x7, 0x4}, {0x3, 0x9}, {0x1, 0x2}, {0x1, 0x6}, {0x4, 0x2}, {0x2, 0x1}, {0x1}, {0x0, 0x9}, {0x5, 0x8}, {0x5, 0xa}, {0x1, 0x3}, {0x1, 0x2}, {0x6, 0x6}, {0x7, 0x6}, {0x7, 0x5}, {0x2}, {0x3, 0x7}, {0x4, 0x2}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0xa}, {0x6, 0x5}, {0x4, 0x4}, {0x2, 0x6}, {0x0, 0x8}, {0x3, 0x8}, {0x6, 0x7}, {0x0, 0x3}, {0x5}, {0x1, 0x8}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x5}, {0x0, 0x8}, {0x1, 0x3}, {0x3, 0x6}, {0x1, 0xa}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0x2}, {0x2, 0x5}, {0x3, 0x5}, {0x0, 0x2}, {0x3, 0x9}, {0x1, 0x7}, {0x2, 0x7}, {0x5, 0x6}, {0x1, 0x6}, {0x6, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x75}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}]}, {0x4}, {0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf953, 0x7, 0x4, 0x59, 0x43, 0xf56, 0x8, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x8, 0x200, 0xe, 0x7ff, 0x8b3b, 0x5c4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x9, 0x6c, 0x36, 0x30, 0x2, 0x6c, 0x6c, 0x1, 0x5, 0x60, 0x1b, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x18}]}]}, @NL80211_ATTR_TID_CONFIG={0x3a4, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x268, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x74}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x1}, {0x6, 0x5}, {0x2, 0x6}, {0x4, 0x5}, {0x3, 0xa}, {0x4, 0x9}, {0x1, 0x5}, {0x2}, {0x5, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x4, 0x2}, {0x5}, {0x4, 0x4}, {0x3, 0x7}, {0x7, 0xa}, {0x4, 0x2}, {0x7, 0x6}, {0x3}, {0x7, 0x3}, {0x5}, {0x2, 0x4}, {0x4}, {0x5, 0x9}, {0x4, 0x7}, {0x7, 0x1}, {0x6, 0x9}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0x8}, {0x3, 0xa}, {0x1, 0xa}, {0x7, 0x8}, {0x1, 0x2}, {0x3}, {0x0, 0xa}, {0x1, 0x7}, {0x4, 0x1}, {0x0, 0x2}, {0x7, 0x3}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0x1}, {}, {0x7, 0x9}, {0x1}, {0x1, 0x6}, {0x1, 0x8}, {0x4, 0x2}, {0x0, 0x4}, {0x4, 0x6}, {0x6, 0x1}, {0x1, 0x1}, {0x6, 0x6}, {0x1, 0x7}, {0x7, 0x3}, {0x3, 0xa}, {0x6, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x4, 0x3, 0x5c79, 0x80, 0x2, 0x4]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x0, 0x1ff, 0x0, 0xe, 0x5, 0x1c45]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x84d3, 0xe, 0x1, 0x4, 0x9, 0x7, 0x7]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x5, 0x1}, {0x4, 0x8}, {0x1, 0x2}, {0x2, 0x3}, {0x4, 0x2}, {0x7, 0x1}, {0x0, 0x3}, {0x4}, {0x1, 0x1}, {0x3, 0x8}, {0x0, 0xa}, {0x5}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x18, 0x2, 0x60, 0x6c, 0x59, 0x60, 0x12, 0x1, 0x18, 0x2, 0x6, 0x2, 0x4, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x8001, 0x9, 0x6, 0x3, 0x1, 0x5, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x202, 0x8, 0x4, 0x8, 0x8, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x81}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x6, 0x800, 0x3, 0x3, 0x4, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1, 0x6c, 0x1b, 0x4, 0x6c, 0x5, 0x16, 0x18, 0xeb0f9d19ca8f80ea, 0x16, 0x12, 0x16, 0x6c, 0x30, 0xc, 0x3, 0x24, 0x6, 0x1b, 0x30, 0x25, 0x30, 0x24, 0x3, 0x60, 0xc, 0x6, 0x36, 0x16]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8001, 0x3da, 0x3, 0xffff, 0x5, 0x38, 0x4]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x0, 0x1}, {0x5, 0x7}, {0x5, 0x8}, {0x1, 0x9}, {0x3, 0x6}, {}, {0x6, 0x1}, {0x7, 0x9}, {0x4, 0x6}, {}, {0x7, 0x7}, {0x3}, {0x0, 0x2}, {0x4, 0x7}, {0x7}, {0x1, 0x6}, {0x6, 0x9}, {0x3, 0x2}, {0x2, 0x4}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1}, {0x3, 0x7}, {0x5, 0x7}, {0x2, 0xa}, {0x6, 0x3}, {0x5, 0x9}, {0x0, 0x6}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0x5}, {0x4, 0x5}, {0x0, 0x7}, {0x5, 0x5}, {0x7, 0x7}, {0x7, 0x8}, {0x3, 0x1}, {0x2, 0xa}, {0x5, 0x8}, {0x1, 0x2}, {0x6, 0x7}, {0x4, 0x3}, {0x5}, {0x3, 0x9}, {0x6, 0x4}, {0x3, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x107e, 0x2, 0x3, 0x8, 0x7, 0x4, 0x4]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x60, 0x6c, 0x6c, 0xc, 0x1, 0x9, 0x36, 0x4, 0x4, 0x9, 0x18, 0x591e0441f0bfbffe, 0x4, 0x5, 0x9, 0x2, 0xc, 0x4, 0x3, 0x16, 0x36, 0x4, 0x16, 0x16, 0x30, 0x4, 0x36, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x45}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcd}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xfc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x1000, 0xfffc, 0x0, 0x753c, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x200, 0xfffb, 0xc187, 0x1000, 0x40, 0xba, 0x401]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x3}, {0x3, 0x1}, {}, {0x1, 0x6}, {0x3, 0x4}, {0x1, 0x7}, {0x6}, {0x4, 0x7}, {0x6}, {0x5, 0x9}, {0x2, 0x3}, {0x0, 0x7}, {0x4, 0xa}, {0x7, 0x1}, {0x6, 0x3}, {0x1, 0x2}, {0x2, 0xa}, {0x5, 0x8}, {0x6, 0x2}, {0x0, 0x4}, {0x0, 0xa}, {0x3, 0x8}, {0x4, 0x5}, {0x7, 0x6}, {0x2, 0x9}, {0x3, 0x7}, {0x1, 0x2}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0x9}, {0x5, 0x8}, {0x1, 0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x0, 0x2}, {0x1, 0x1}, {0x5, 0x9}, {0x2, 0x18}, {0x7, 0x7}, {0x1, 0x3}, {0x1, 0x7}, {0x4, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x3}, {0x1, 0x4}, {0x7, 0x8}, {0x5, 0x3}, {0x2, 0xa}, {0x2, 0xa}, {}, {0x1, 0x2}, {0x5, 0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x6, 0x7}, {0x4, 0xa}, {0x7, 0x9}, {0x0, 0x7}, {0x4, 0x3}, {0x0, 0x2}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x5}, {0x7, 0x5}, {0x0, 0x1}, {0x0, 0x9}, {0x4, 0x6}, {0x5, 0x3}]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x1}, {0x1, 0x6}, {0x5, 0x5}, {0x3, 0x3}, {0x6, 0xa}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x3}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x5}, {0x2, 0x8}, {0x6, 0x8}, {0x3, 0x8}, {0x1, 0x8}, {0x7}, {0x4}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x7}, {0x7, 0x2}, {0x6, 0x9}, {0x0, 0x4}, {0x2, 0x5}, {0x7, 0x2}, {0x4, 0x5}, {0x7, 0x4}, {0x6, 0x2}, {0x7, 0x6}, {0x5, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x7, 0x4}, {0x4, 0x6}, {0x3, 0x6}, {0x6, 0xa}, {}, {0x2, 0x6}, {0x6, 0xa}, {0x0, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x3}, {0x1, 0x7}, {0x7, 0x6}, {0x0, 0x9}, {0x2, 0x3}, {0x0, 0x8}, {0x6, 0x1}, {0x4}, {0x5, 0x4}, {0x3, 0xa}, {0x1}, {0x5, 0x6}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0xa}, {0x2, 0x7}, {0x6, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x87c}, 0x1, 0x0, 0x0, 0x40010}, 0x4080)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000640)=@framed={{}, [@ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)

1.775598985s ago: executing program 2 (id=1727):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
readv(r1, &(0x7f0000000280)=[{&(0x7f0000000240)=""/46, 0xfffffffffffffd0b}], 0x1)
r2 = socket$rds(0x15, 0x5, 0x0)
syz_emit_ethernet(0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000030000403a00fc000000000000000000000000000000ff0200000007000000000000000000000000604aa19800003c"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0xa4, 0x30, 0x1, 0x70bd28, 0xfffffffd, {}, [{0x90, 0x1, [@m_skbmod={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x50, 0x17, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xe1b}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xc8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
bind$rds(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000700), 0xb8, 0x20000000}, 0x84)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r1, 0x0, 0x1, 0x0)
vmsplice(r7, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000840)="89", 0x1}, {&(0x7f0000001100)="a6", 0x1}, {&(0x7f0000000580)='F', 0x1}], 0x4, 0x6)
ioctl$NILFS_IOCTL_GET_VINFO(0xffffffffffffffff, 0xc0186e86, &(0x7f00000006c0)={&(0x7f0000000680)=[{0x100000000, 0x3, 0x8, 0x7fffffffffffffff}], 0x1, 0x20, 0x4, 0x4})
ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0)
write(r5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r4, &(0x7f0000002180)=[{{&(0x7f00000005c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000002140)=[{&(0x7f0000000640)="47ea0147b5abd0e8d4971279aa2472bcd4c9f930a1532d1a7b7af7d7fcef3b67b745e3321ee2e4", 0x27}, {&(0x7f0000000700)="aeaf231875ca4fa75d1fd44865f22b4ba1d1afabb20db73ed97d1bd919c12b89857843a7f7ffaad605aeb80a86872f9512d1a09e596cb8f835675d30beb3fcfe5c7a3c36ef2bb2387ccb339ac6586aeb2784b0aea28346d6a8b88e3b5cca8049f60f675f53087e85dfebc7a3b1aacda497663fc37ee663c408deaf53b51f94a9e94e535284d562465c82e03eba3ca38eae66a33b19906627efbc0ea250a041fe65dad02c422255cf6c", 0xa9}, {&(0x7f0000001140)="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", 0x1000}], 0x3}}], 0x1, 0x24042111)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0xc, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private0, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xff000000, 0xff000000], 'veth1_to_batadv\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0xd86, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8)

1.762298668s ago: executing program 0 (id=1728):
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x80800)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xcbf3d000)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pB    \x00'}, 0x20)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)="3dbffb32631543c92bd561e80f9c85b29c3a1adcc0f1712940d72ca7b8a569293dc467efcb87a85c53423d69427b839286dfa2834e6758fde3d98060643ac096190b154cd93d95b3cc4a20180c45aa66dddc231d5d6015b6f3c0ac7f01438413defe1782de4f60c1da8a3301d2e43267543db59fc81dde75fd50bbbcb784840d3a8be76fa82b673fcc3b98838320b7f4b972610850722128054595", 0x9b}, {&(0x7f0000000200)="2dd11a97c41727acf15586b16a5c3291faa331d14ab369d8deb8acc206431e3fe31e87ed", 0x24}, {&(0x7f0000000240)="dd906bee84ca80cf9f87ca5364452a0f9ffe86f4641ddf848329fbb4c2ffcab14ed6091800cde12e4bf9b37822b0f3d890a5b8e4c69beb55643a67d477c3c159ca47d5c8d98260bede6134986f9c6005650224357b2e2473d9096dc956fd6fa3812a40f441adde91a2d8397ca9af5875fb966ba4328640aa37e2de00c2996e558c58d363223a885de67c485e3aac511589cbd5364a101b63444db44bd0a33c8b9b449ae647952e796352f9313708afea37d0c3a29dc07359312002adaaec7da6a0a42a8f6024f5d63be9deb79238b17902d8", 0xd2}], 0x3)
r3 = socket$packet(0x11, 0x3, 0x300)
getpeername$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0}, &(0x7f00000003c0)=0x14)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000400))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x13, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r2}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @exit, @alu={0x7, 0x0, 0x3, 0x0, 0x6, 0x12a, 0xffffffffffffffff}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ldst={0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1}, @tail_call], &(0x7f0000000500)='GPL\x00', 0x0, 0xee, &(0x7f0000000540)=""/238, 0x41000, 0x10, '\x00', r4, 0x0, r1, 0x8, &(0x7f0000000640)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x10, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000006c0)=[{0x1, 0x1, 0xa, 0xb}], 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={r5, 0x0, 0xad, 0x1000, &(0x7f00000007c0)="a4647b72b099a528db1fa696d4528cf14b7b3cf8a5891bbc81905cc5bdd2abdbdce98ccaf28783305182a920143d5e7208516fea2c4360617cbdc3b65cafbfc2caa7e54241c41dc80fd28bd9e9b1a940d6ab15e871ca2c3e01acb1d1b78d95063832fa507dfbbbd8102eeb9c0869fd4f2375cfe0da1748ce94ef60b73b7bdb58be30b1714e97c1aec5db7e811a28a4ba7274697e8873d9bca6f8c256c040ecd550e4573db8c71ff080f0ad1c0a", &(0x7f0000000880)=""/4096, 0x4, 0x0, 0x8c, 0x44, &(0x7f0000001880)="20b139d1bbc5697cbe82c73ed201aa3e981d6eabe0303e961ef49cbbe3ebefd292b0bb909f5d6f7ee75fdf024d7568b949dcd5788c43a784ab2c239d7378cebea121515a56d52e1a53e6269f247dfdc859ab449a5b3d5249ea26a63cf2c9e404a26886e0a51d8b39e98f24a9a06688f9fecb8021d9aa7de0292cf23f00c5b9d4d85111b29a40b4fa3b8d7ff1", &(0x7f0000001940)="958c5bf54248069aaaf7d5fd8a444fe61c1cb7b1ee6b03d3adb25ba64a596e8c33976df64febb87c42d3a1ac9ed169501aac878d1157b0c60776e055f4503af875c6ad2c", 0x2, 0x0, 0x10000}, 0x50)
socketpair(0x15, 0xa, 0xffffff7f, &(0x7f0000001a40)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvfrom$l2tp6(r7, &(0x7f0000001a80)=""/73, 0x49, 0x23, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b40), r6)
sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000001fc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001b80)={0x3f4, r8, 0xfce06f90eef9e839, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2214}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x12000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @private2, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x57}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff01}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x176f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76d7}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf0}]}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xafc5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x124, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x58}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe01}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xca7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x19c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r7)
sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000002140)={&(0x7f0000002000), 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x48, r9, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x20000800)
getsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000002180), &(0x7f00000021c0)=0x4)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000002240), r6)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r10, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, r11, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x88d4}, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000002340))
r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002440), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000025c0)={0x11, 0xb, &(0x7f0000002380)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x50c}, @ldst={0x2, 0x2, 0x1, 0x8, 0xb, 0xffffffffffffffc0, 0xfffffffffffffff0}, @tail_call, @generic={0x2, 0x8, 0x8, 0x3ff, 0xfffffbff}, @alu={0x4, 0x0, 0x5, 0x3, 0x9, 0x40}], &(0x7f0000002400)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0xa, '\x00', r4, 0x0, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002480)={0x3, 0x0, 0x6, 0x47}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000024c0)=[r2, r2, r2], &(0x7f0000002500)=[{0x4, 0x4, 0x0, 0x8}, {0x4, 0x4, 0x10, 0x9}, {0x1, 0x1, 0x3, 0xc}, {0x5, 0x4, 0x10, 0x7}, {0x5, 0x2, 0x1, 0x6}, {0x3, 0x2, 0x7, 0x1}, {0x2, 0x3, 0x0, 0x8}, {0x4, 0x4, 0x0, 0xa}, {0x4, 0x5, 0xc, 0x2}], 0x10, 0x64e2}, 0x94)
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000002680)={'virt_wifi0\x00', {0x2, 0x0, @remote}})

1.759148957s ago: executing program 4 (id=1729):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x2d)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r6], 0x44}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
r9 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r9, 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x19, 0x2a, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x91}}, @ringbuf_query, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf}, @jmp={0x5, 0x1, 0x4, 0x759ceef814dc3961, 0x7, 0x18, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @exit, @ldst={0x1, 0x3, 0x4, 0xb, 0x0, 0x40, 0x4}]}, &(0x7f0000000600)='GPL\x00', 0x40, 0x0, 0x0, 0x41100, 0x40, '\x00', r3, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x6, 0x5, 0xe7}, 0x10, 0xffffffffffffffff, r8, 0xa, &(0x7f00000007c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000800)=[{0x1, 0x1, 0x5, 0x2}, {0x5, 0x3, 0xf, 0x8}, {0x4, 0x3, 0x10, 0x7}, {0x2, 0x5, 0x8e}, {0x5, 0x2, 0x4, 0xa}, {0x0, 0x2, 0x9, 0x7}, {0x2, 0x5, 0xa, 0x8}, {0x2, 0x2, 0x0, 0x8}, {0x3, 0x5, 0xc, 0x2}, {0x5, 0x4, 0xd, 0xc}], 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000980)="b9dabd8e59bebe582e26fc00000003a7115f1a6133d25935ed40869ade79af0dde020cc9a021c54bf31f68d56f66ed24c1e1ebf29c10a6bfa35ff24761074d189a9136c2d2ad5125d0d7984bb2e280477f323657f01bb9f94194e09aba1c131fe0bb32702842c0a4b0d331744e9dc7589fa8c29f112e6cdd26b944e8a2932a556aab541bc0b8eebe64dbb63e15285185d6976601c09b4f61c1b4fd7a9b80bdcd0580c8100ee8b3aae595ad142306d9", 0x0, 0xfe3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000406}, 0xff8f)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmmsg$unix(r11, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0xf6)
r12 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r12, &(0x7f0000000340)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010f1ff0000f5ed76dd000000000000009928abc745f715903302eba89e407191dd9a5773c5e6d9526b0cf9006313d3cc869c78ed6fba2606daafc047d29307d390e9a5dd2fd05eef174103b9db01d1ddb2fe80a09ecc8981d39feed29ee102c98bc39f6083403f", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r13, @ANYBLOB="1c0012800b00010062726964676500000c0002800500070006000000"], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000bc0)="912a73124d1a09bc3718b826abdbd85a0c94391c218b9c11016efd0a6bcede583b0a1101c77561320e07e274893d01597ecc504126060ae1c9a4183f2382d25f0aaf30573c485d0a118cc1aba1fcbbf661061016e30ce11b78c5b1c63ff11e46d7409e529e342245ba966f36cdbd2d3a1937c82ee34b0435086bd053a8083b08d3be2bd46a7f93ad8cc120944f6d502e798b8727c823262afa8fb2fa049b3e99be7a0138f9d6659a9eafa54bbb5893cf0f2435eb161298111ae1fad5e794a94b1efd33b3f4cff466ff54fe6358d735f4cfef9d5b864543b8b5b9a57195be2cddba03ee67788520", 0xe7)

1.693381207s ago: executing program 3 (id=1730):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af53d2c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000002c0)="005b2794337633baa84dc9f5116bcab562b29da84516ac2be1309cea2ab89acbaffa0eacee5774b4d59e5ba89eb89aa3685074138d3535358d670366bbe25179896d193ee1ed9a4956df10a21051305f35db2b3023808521b4f69faf0d11eb6c6188255c03783c18e70598982b7c3dca13870267a3d8f256ffa3ea37f6fa7f13132ca67e7de4c6baa6f308e814512e19d1022d7440053b276ae9fb4149a5c484669e32acba05ef26546d9645145d01040cdf982704f46850252856b4ec20134e0530416fbd1a31e82a0ef5349d3d8b226f3326efab105bb199df0ec44700b4fd32a79321faa0af403ff0266f884692182581fc010b94bfc2f659c33414eb8345")
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000140)="24000000010006", 0x7)
setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000000)=0xfffffffb, 0x4)
r6 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f00000001c0)=0x9, 0x4)
r7 = socket$netlink(0x10, 0x3, 0x4)
write(r7, &(0x7f0000000b80)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f)
write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20001890"], 0x52)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af53d2c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x6bf1c2d5adba8c32}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000002c0)="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") (async)
syz_init_net_socket$ax25(0x3, 0x2, 0xca) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r5, &(0x7f0000000140)="24000000010006", 0x7) (async)
setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000000)=0xfffffffb, 0x4) (async)
socket(0x11, 0x3, 0x0) (async)
setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f00000001c0)=0x9, 0x4) (async)
socket$netlink(0x10, 0x3, 0x4) (async)
write(r7, &(0x7f0000000b80)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) (async)
write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20001890"], 0x52) (async)

1.636701374s ago: executing program 1 (id=1731):
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000280)=<r3=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r4=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=<r5=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000700)={&(0x7f0000000040), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x4010)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4c22, @empty=0xe0000000}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1}, 0x2400c880)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000c31100000001000095", @ANYRES8=0x0], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

1.483757832s ago: executing program 1 (id=1732):
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}], 0x5}}], 0x1, 0x2040000, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x4}, @md5sig={0x13, 0x12, "c140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'veth0_to_bond\x00'})
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000))
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}], 0x5}}], 0x1, 0x2040000, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x4}, @md5sig={0x13, 0x12, "c140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0) (async)
socket$qrtr(0x2a, 0x2, 0x0) (async)
ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'veth0_to_bond\x00'}) (async)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) (async)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) (async)

1.245449581s ago: executing program 0 (id=1733):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@remote, 0x0, 0xfffe, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}, {0x0, 0x882d, 0x0, 0x1, 0x100000000, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x339)
sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9afc, 0x0, 0x3}, {0x0, 0x8001, 0x2, 0xa3}, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x20000000)
syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0b0000000f000000cc0002000600008b3e0e663184dd724cd2b0b0309439", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001ddc2070144be264910c5a82a16d69f03d3271809f42781405db5406be1e7f8df99fe03abe1fabba2801cf0d72446979025224f602f567bca8a3f139a192714c7e5c0f7c4eefed365d1d83a5631b565cd4430b21444ac657fe2194c8a888cf94", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r8}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000d80)="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", &(0x7f0000000680), 0x2, r8}, 0x38)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r7, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10, &(0x7f0000001380)}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x800042, 0x1}, 0x10)
close(0x3)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/95, &(0x7f0000000040)=0x5f)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
r9 = socket$kcm(0x10, 0x2, 0x4)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xd4, 0x30, 0x871a15abc695fb3d, 0x0, 0x8000, {}, [{0xc0, 0x1, [@m_tunnel_key={0xbc, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @empty}]}, {0x59, 0x6, "f8d92f5830abe1a50121b0f4261959b77dbb30dce190788531bfaeee145965757a567919b184bcae436abe28fdc875af85e79738b6dd07ade804746b574132cce66e6ba527ceeabd075a846f6809a48feb1b45b3f5"}, {0xc}, {0xc}}}]}]}, 0xd4}}, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

1.172642236s ago: executing program 1 (id=1734):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000000d08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000005f80)={&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000140)=""/11, 0xb}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2, &(0x7f0000005d40)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x1}, {&(0x7f0000001540)=""/226, 0xe2}, &(0x7f0000002800)=[{&(0x7f0000001640)=""/88, 0x58}, {&(0x7f00000016c0)=""/116, 0x74}, {&(0x7f00000002c0)=""/93, 0x5d}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/13, 0xd}], 0x5, 0x17, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0xfffffffb, 0x971c}, &(0x7f0000002880)=0xfaf6, &(0x7f00000028c0)=0xffffffff, 0x224, 0x2, 0x2, 0x7, 0x27, 0x5}}, @mask_cswp={0x58, 0x114, 0x9, {{0xce, 0x40}, &(0x7f0000002900)=0x100, &(0x7f0000002940), 0x7, 0x7, 0x1, 0x4, 0x0, 0x2}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8}, @zcopy_cookie={0x18, 0x114, 0xc, 0x2}, @rdma_args={0x48, 0x114, 0x1, {{0x4}, {&(0x7f0000002980)=""/4096, 0x1000}, &(0x7f0000004980)=[{&(0x7f0000003980)=""/4096, 0x1000}], 0x1, 0x20, 0x10}}, @rdma_args={0x48, 0x114, 0x1, {{0x7}, {&(0x7f00000049c0)=""/172, 0xac}, &(0x7f0000005b40)=[{&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/175, 0xaf}], 0x2, 0xa, 0x6}}, @cswp={0x58, 0x114, 0x7, {{0x3, 0x39f}, &(0x7f0000005b80)=0xa59, &(0x7f0000005bc0)=0x57e10ebd, 0x800, 0x8, 0x2, 0x7, 0x0, 0x9}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000005c00)=""/227, 0xe3}, &(0x7f0000005d00), 0x25}}], 0x240, 0x8000}, 0x20000001)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x13c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x110, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x4}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x13c}}, 0x4000010)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0x19, 0x16, 0xb3, 0x40, 0x0, 0xffffffffffffffff, 0x20}, 0x50)
r2 = socket(0x1e, 0x805, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x17}, 0x300, 0x2, 0x2, 0x2, 0x6, 0xb}, 0x20)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x7fff)
sendto$inet(r3, 0x0, 0x0, 0x20000090, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4)
connect$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x12, 0x0, 0x0, 0x0, 0x8}, 0x94)
r4 = socket$inet6(0xa, 0x3, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000005c0), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001740)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r8 = socket(0x11, 0x2, 0x10001)
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x228, 0x2d0, 0xffffffff, 0xd8, 0x170, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0xff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}})
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000400)={r0, &(0x7f0000000180)='\\-$)x/&!}/$/##+\x00', 0x101542, &(0x7f0000000340)={@align=0xfff, {0x9, 0x5, 0x80000000, 0x4}}, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x80000000})

1.068103231s ago: executing program 3 (id=1735):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$rds(0x15, 0x5, 0x0)
recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001680)=""/4082, 0xff2}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r9)
r12 = getpid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r11, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r12}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003540)=<r13=>0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000003580)={0x0, 0x0, <r14=>0x0}, &(0x7f00000035c0)=0xc)
sendmsg$unix(r8, &(0x7f0000003680)={&(0x7f0000000380)=@file={0x64383376b8e7b142, './file0\x00'}, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000000400)="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", 0xfe}, {0x0}, {&(0x7f0000002300)="4d52766886e1cd8ce6a604bfa6ff22d3c8ca6ea1381639d4682899032d9ec72bf4e24d25df436628b1d96706a845927dd55a7bd55d60a25d9444fdf4b15766ba59a468a3680caf84a5aaba73dc9f53ed2bbd59b2de5b3935b9ae510d8c2d7704e244bdb1c09a303aa093c5204d9d9df664bf92569689982e0058bf6ba1343e08e8a827d2b1182a25d9613ad21cf98d3905bb0cdf09c65814364d1106847bfb1fe113e191fd490977b0728f8652cc02d172b71a4fad4933375cdd4354b7ba687e5eb822508c009fc1bde9ffb8544078fda786e9d1085a11fa27edc243e1cca4e0216adbecaff5d1", 0xe7}, {&(0x7f0000002400)="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", 0xfff}, {&(0x7f0000000d00)="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", 0x161}], 0x5, &(0x7f0000003600)=[@rights={{0x28, 0x1, 0x1, [r3, r2, r8, r6, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}], 0x48, 0x4004000}, 0x4000080)
r15 = gettid()
syz_open_procfs$namespace(r15, &(0x7f0000000180)='ns/ipc\x00')
r16 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000040)={0x0, <r17=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r17}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x24}], 0x1}, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b80)={0x0, 0x0, <r18=>0x0}, &(0x7f0000000bc0)=0xc)
sendmsg$netlink(r0, &(0x7f0000000cc0)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)=[{&(0x7f00000001c0)={0x10, 0x2c, 0x8, 0x70bd27, 0x25dfdbff}, 0x10}, {&(0x7f00000004c0)={0x288, 0x3d, 0x800, 0x70bd2c, 0x25dfdbfc, "", [@typed={0xd9, 0x76, 0x0, 0x0, @binary="1642f0802664053f3656895b17c3ca7c5383224d150ed1c65e04de7a911bd71d16678f97aaab403e4eb1ae9153e8fb43a330d422de70d50954a9d3ff14d823f0a2db80d7679bd9409c1d0b436407db50af06230b8c8a463e0064ae6937826ad2be3731ba8f31393a581085791492aa9ffcbb4ef9d3046f17ffdf2bd5cd00a393205567bcb22a035b82355d671137b6d6df003fd09fc2b2ac71c5bb8c88029476a3d7e9e102da879c04105ece6e6eb8fa11ef518c45fb65a5febc7fa01cb5a1d7c45deb5d53555620c97e3e8ea663770311abf314c7"}, @typed={0xd7, 0xbf, 0x0, 0x0, @binary="c309d34f0aa2ad36a5579a2f90ace58545066af8e3125c1f53d22d0c3b7779d52e5b4bb95c613ecd5f5cdbb31e65d42a60e91f187957bf713ac36320944ad8f4a7f3f585f4018d6c2711727f033ae4dbbecc60d01112ffdd4fe9681ec4f623ab0dcaf10e48f21691be48f67553e9309589b93a410629797551038b48a8fdebe17ec7419a17c4ca13b8a79a857dfffd08bca04cb8ed1cfc98e2f48571498d01803747dd7c615b2e1a8f7b41ab83d923afbbb92c9e61724bccd3314eb22c2fbdf159b55039faec3c4c10577d977f2161194ab7a0"}, @generic="1e5d70aac1555e2620488e63be8f46e33be3e28212dbefa5be898aa096817493188fc47457a2768a9dee546a3e5c526e704a73a738ff4179fa972d9c69de0fa56878c0855acf8ad15c71360c6b95e9daec3c3e119241792c2ac087d8cde68207bb959de0d0316c33da156dbe1d66b596003490ae600c4c777bcfbe7fbe63a0216ed88c93682680c8", @generic="8a2d6eff496961deece7b60b7f5d5ef89e443875ea945f3866d310959ac9ef91ca61413c3fce560e6af513f9b2442646789256e5ead6be011514"]}, 0x288}, {&(0x7f00000007c0)={0x210, 0x2f, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@nested={0xf9, 0x44, 0x0, 0x1, [@nested={0x4, 0xad}, @typed={0x8, 0xb7, 0x0, 0x0, @fd=r0}, @generic="2670b17a271b18bea3945acd3e2027b9388c90e9775c384a3fc506f20040bee707a7b92a69f78f0445f76528360eb410f7c65ee6e513225d893adac816fea88c6bd84dc79f7a671111a0caef775b2eb6ac884a8ab1b19a296ee697cf4cf33fc6677349f90acd4190f4972fd0c4656c1062b77a66afe01a669e33d0564acada602cf409f8bb9d683878ee6c8633d0004ce64cc1d276769d5665bde567ca17ba5add1297d2c5487d9e3afd717ebae269e88ad37c00a2eeea5943eabaeda7c91a4705fe7df75d55c13bf9f06776a9cb0010665cc0cefc", @typed={0x8, 0x146, 0x0, 0x0, @uid}, @typed={0xc, 0x12a, 0x0, 0x0, @u64=0x8}]}, @typed={0x14, 0x9b, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="fef8cfd357be62c67a3a9e55ecbf504a8d52a923dfb7a00b469eb52361b2211f89602da762d2e178071596d835eb6ff7ca1d4da3e10440e8b75247ec73bcd13cf8bbdf4289e8fb33b2198de3ae5be8d73ba6fa5ee9f5e2082abd78332be0716ebf722bf86b113f373cd2", @typed={0x7, 0x32, 0x0, 0x0, @str='+*\x00'}, @typed={0x5d, 0xdd, 0x0, 0x0, @binary="8dd1e7628ad4247c14721379da2344263193ac5a933566cf94f437332ba76ea8ed05c8b82c2ea280db263730ba1b30d312cbfe88c41a05fd94d4d10818549cee79766f5abf40d5f48b37d419414fadcdb084f60a4aa9e5eda5"}, @typed={0x8, 0x56, 0x0, 0x0, @uid}, @typed={0x14, 0x113, 0x0, 0x0, @ipv6=@remote}]}, 0x210}, {&(0x7f0000000a00)={0x88, 0x36, 0x200, 0x70bd28, 0x25dfdbfd, "", [@generic="906e8a6758cb09185beda2b764871b368284021df6f1fed75b2a967f77164c3428d8258e7829eb407e75172de80cbcaecc077f1b096349cc5824e0fb652400044fafb2b95d8c20a98a118f7d88b03c1a0322457368c82237fabd7ba1b1bc3e9fe76f301c78cc99f99303afca6f282babdd33a07d5a53fd3c"]}, 0x88}], 0x4, &(0x7f0000000c00)=[@rights={{0x28, 0x1, 0x1, [r1, r0, r0, r0, r1, r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r17, r18}}}], 0x88, 0x801}, 0x4000000)

872.119373ms ago: executing program 2 (id=1736):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)={'vxcan1\x00', <r2=>0x0})
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001a00)='cpuset.effective_cpus\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b00)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000001a80), &(0x7f0000001ac0)=r0}, 0x20)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0)
vmsplice(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x9, 0x9, &(0x7f0000000040)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}}], &(0x7f0000000180)='syzkaller\x00', 0x381, 0x1000, &(0x7f00000009c0)=""/4096, 0x0, 0x4f, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000001a40)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001b40)=[r4, r5], &(0x7f0000001b80)=[{0x4, 0x2, 0xb, 0xc}, {0x5, 0x2, 0x10, 0x4}, {0x2, 0x5, 0x6, 0x4}, {0x4, 0x2, 0xc, 0x9}], 0x10, 0x4}, 0x94)

664.480419ms ago: executing program 4 (id=1737):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x16}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000), 0x4) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000), 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffd, @local, 0x1}, 0x1c)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000140)) (async)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000140))

661.71457ms ago: executing program 2 (id=1738):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
setsockopt(r0, 0xff, 0x9, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24044880)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
close(0x3)
shutdown(0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x2000000000000109, &(0x7f0000000340)=ANY=[@ANYRESDEC], &(0x7f0000000000)='syzkaller\x00', 0x400, 0x94d7d65426643b11, 0x0, 0x41100, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r6=>0x0})
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r4, r6, 0x25, 0x4, @void}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0)
writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000440)="2a6b58044c97a90879b6e37a71f63d801e611cb7be13cc8f8cbba1744a77c83cbc4110281f1b3af21fc5b958cd86cc8a5e9e734b4704cd094ece4c6fa9095237978f1413b73abc1aa66cbd94ec931a6b422753327ed10c6cf2d188a62103d550b38793ef7ab7", 0x66}, {&(0x7f0000000680)="563f6a3bd248f27004460258326fc87071dee60f31d0895b016fe911ddb170178ab33072608a777fff4c0bcb2296eefc60041146003682cc799f07708586adf4c05adf782885ad9ae8d6797825585885f0c5630c95b8d3594ff9cbf15795", 0x5e}, {&(0x7f0000000700)="5b4b01b597ba285d6736a4c8ff4ecc9eb2fbfc47b6c045cea1dcfe3811696cb555eb10d2193ec82e5e6f74c508788c0c2427a747d11ed1bef193dd55cd89855407bd9e923476256f7b1bd00604250e307074d545f900a734bc9f0fb321c5063c2bc2c1042994fa98aae8c759e655d9a77619d80df1e40a0a3fbf3a19d016e36679afe6085a34ab9f12e0c5fa5b90a62b006e9f2be9f6", 0x96}, {&(0x7f0000000940)="15a182a2f5512030992fd7a8991dcdc7ae3c2ea2ac3d83917b53ed0acf2960f00ebcbc34add8999988cf66201f855a4169f4fda11b5e03be4b56ab21df93704190385debb96e06cf8b1f50c6b98503fdf65a50af924078617940449d4cfe9ebb8261f699dca77a96520d6f5a25e9a8f67a94a42648eac95d1f190afce2921415eb63ac0f", 0x84}], 0x4)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000300)=<r10=>0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r8, 0x5000943a, &(0x7f0000000c00)={{r5}, r10, 0x12, @unused=[0x7, 0x7fffffffffffffff, 0x4, 0x4003], @name="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"})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000181100"/81, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x28000600)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES8=r9, @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYRES32=r7], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x42, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94)
r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r9)
sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r11, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b80080009"], 0x184}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280029bd7000fddbdf2500"/20, @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

657.080861ms ago: executing program 1 (id=1739):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250701f280"], 0x118}, {&(0x7f0000000540)={0x320, 0x1f, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0xa0, 0xde, 0x0, 0x1, [@nested={0x4, 0xeb}, @nested={0x4, 0x5}, @generic="7021e69d461e6a527e100312061f22fa19a985dc2cb3fdc33fe0eedd91b6c0593eb34cb590439c835c9641f4be2956d392c14cd96e51eaaf2a7caf47069ec0669a81c10956925e07e2a06a07f61ad5cde1d0e1565df32957e656189094fc1afa7a08d7f10ce2220c39769b7907be00119e03e784c64a4b6704bef364f48751b5a626415926851fac93908c8f514875b4b208c6f4"]}, @generic="c9f173da00badfb26c253c820e1e5379396643e4d2b1c6edb726987e052883e8d7c7d39878a1fce763e29b6c5626b8696fab05b0cc38d8293a31d336f80180dadaf3f6ec1d7648bd3cb866bf67f69ef94069692e3708d880b6b2eb7aec57e86cf3ba0eaa97efeeaacc1ee2c7bda6f412e060dfb94bc71795c03eade311d65444901947", @typed={0xc, 0x64, 0x0, 0x0, @u64}, @nested={0x10, 0x88, 0x0, 0x1, [@typed={0xc, 0x6a, 0x0, 0x0, @u64=0xfffffffffffffff9}]}, @typed={0x8, 0xfb, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @nested={0x1c8, 0x13f, 0x0, 0x1, [@generic="3b51cbed6eb2cd291481dd0eb1b88c7cce01992b6fe60c11db0cb7f0f75751cec2dc0ffb908d6b5277bf25ed903ec98b77b0475a92a4792e7007664402a7858860647a5575368315f6a0a08552e475463bfaafa65b8292fc86e5f15857fb088c41740bc00e6ab028f96e3ef7b8", @generic="bba2531882d5551c8a6270494513529cfb692d6a71534adedd55ec850a2fddbbcc28a4a6b68c0a777a15ea9e35e9cdac8c97f57adbe5ee7eeed0d1e2ab58035b0110c3f7085941b18ea9307ff1eb3cf54d4086bc501d5050feacfd1d99286a4b", @nested={0x4, 0x86}, @generic="52bc0fca751fa6296cd7db9a0759b4b3c905bd18598d69f7dc61f645c7c1fec48e5de6fcba05c3baad3e45f9eaa94045cb22cb956770cb480f1dd3aa34e14479d9563d5283da9963bb59e1aa775692d913d8196f6d03732ed65a6edafbbb720eabe2d4a370b178fb91bf0503803e7cb05d7a6c469d62afac1e8efd5ea096f0e85dca0245fb0d604185607a6c430efd224ae667f92b6da1fa3cb84bb7b3ac6bfc75543eee7f76fb591e0efe3c710425c6bfc238eb3b88c5cd84452139be36d01d94e265a7a9cf3a74e13e4dae624031d0318e28034ba1944f5e29f3809d1a83813d8dd546bbf888331ba484964ef539a978aeb4"]}]}, 0x320}], 0x2, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000002100850000003700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

580.130727ms ago: executing program 0 (id=1740):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="0e10840dc342", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xf0, 0x6, 0x1}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x64}}, 0x4008000)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)

428.946705ms ago: executing program 4 (id=1741):
unshare(0x0)

413.068887ms ago: executing program 1 (id=1742):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@local, @remote, 0xffffff00, 0x0, 'geneve1\x00', 'wg0\x00', {}, {}, 0x89, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xd4cd, 0x8, 0x2, 'snmp_trap\x00', {0x3}}}}, {{@ip={@private=0xa010100, @loopback, 0xffffff00, 0xff, 'batadv_slave_0\x00', 'vcan0\x00', {0xff}, {}, 0x21, 0x2}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xc, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248)

336.515148ms ago: executing program 4 (id=1743):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x149100, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xf25)
listen(r3, 0x20) (async)
shutdown(r3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x20000004, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c0d0}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="1c0000001000010026bd700000"], 0x1c}}, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="241000002100be28f2e91a81499842d5febbc1c53e01002abd7000fcdbdf25028080010a0000040500010008000200e0000001"], 0x24}}, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}, @generic={0x4, 0x2}]}}}}}}}}, 0x0)
socket$netlink(0x10, 0x3, 0x10) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@private2, @in=@multicast2, 0x4e1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x23}, @in6=@rand_addr=' \x01\x00', {0x0, 0x5, 0x2, 0x100, 0x10000000, 0xffffffffffffffff}, {0x7, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}}, 0xf0}}, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async, rerun: 64)
readv(r9, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x10) (async)
r10 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r10, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async)
sendmsg$rds(r10, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)

271.429309ms ago: executing program 0 (id=1744):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000140)="a7f9a2a4a9cc419fba17c65f17e29f51c8038354", 0x14)
recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x32, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb0eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@map, 0xffffffffffffffff, 0xa, 0x2039}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0x6}, 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000700)={'bond0\x00'})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
setsockopt$inet6_buf(r6, 0x29, 0x32, &(0x7f00000000c0)="ff02040000b5ffffffffffffffff2c2be82db1af", 0x14)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @private2, 0xae3c}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0x4}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

240.615451ms ago: executing program 1 (id=1745):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf25000000ff", @ANYRES32=0x0, @ANYBLOB="150c0000000000001c00128009000100766c616e000000000c00028006000100"], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000)
recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000740)=@l2, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2, &(0x7f0000000940)=""/20, 0x14}, 0x1}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1, &(0x7f0000000a80)=""/86, 0x56}, 0x8}], 0x2, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680})
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=<r1=>0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x14, 0xf, 0xa, 0x201, 0x70bd29, 0x25dfdbfb, {0x1, 0x0, 0x5}}, 0x14}}, 0x80)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000814}, 0x4048010)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000600)=0x1)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r1, @ANYRESOCT, @ANYRES64=r4], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0xfffffd9b, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2})
r6 = accept4(r5, 0x0, 0x0, 0x80800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$tun(r3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c4000502ffffff07000000000002d588380003c1000000"], 0xfd6c)
shutdown(r0, 0x0)

153.591229ms ago: executing program 2 (id=1746):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x99ffef750d96a51f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x3c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r4, 0x201, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4f}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x80) (async)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="ac000000170a01031700000000000000000000070c000540000000038c00038008000240000000011800038014000100000000000000000000100000000000000800024000000004080001400000000040000380140001006970365f76746930000000000000000014000100677265300000000000000000000000001400010076657468310000000000800000000000080095a7086e72d8b94c01400000000008000140000000004f6207497f511d61b24dac708986d153aa2f3fb6"], 0xac}, 0x1, 0x0, 0x0, 0x840}, 0x40000d1) (async)
r6 = socket$netlink(0x10, 0x3, 0x13) (async)
unshare(0x26020480) (async)
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind(r7, &(0x7f0000000680)=@hci={0x1f, 0x1, 0x3}, 0x80) (async)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf25000400fffffeff"], 0x24}, 0x1, 0x0, 0x0, 0x40400a0}, 0x4040000) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x40000000)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x15, &(0x7f0000000940)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @exit, @map_fd={0x18, 0x7}, @ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}}, @generic={0xcb, 0xe, 0xc, 0x9, 0xb95}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000000c0)='GPL\x00', 0x80, 0xad, &(0x7f0000000200)=""/173, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x7, 0x400, 0x2fe}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x2, 0x4, 0xf, 0x8}, {0x4, 0x4, 0x9, 0x7}, {0x5, 0x2, 0xf, 0x5}, {0x5, 0x9, 0xd, 0x2}], 0x10, 0x7fffffff}, 0x94)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000005c0)=r9, 0x4)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) (async)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) (async)
setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x34}, @in6=@mcast1, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x33, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in=@remote, 0x4d6, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) (async)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r10, 0x84, 0x78, &(0x7f0000000000), 0x4)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) (async)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x99ffef750d96a51f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x7}]}}}]}, 0x44}}, 0x0)

0s ago: executing program 3 (id=1747):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=""/226, 0xe2}, 0x7f}], 0x1, 0x1, 0x0) (async, rerun: 64)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) (rerun: 64)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$tipc(r2, 0x0, &(0x7f0000000080)) (async, rerun: 32)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_gfeatures}) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', <r5=>0x0, 0x2f, 0x8, 0xf, 0x5, 0x52, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0xfff, 0x3}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', <r6=>0x0, 0x29, 0x8, 0x3, 0x3, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x1, 0x8, 0x80000001, 0x401}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x16074a456063951d}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)

kernel console output (not intermixed with test programs):

v0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.071111][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.085144][ T5847] team0: Port device team_slave_0 added
[   94.092064][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.099724][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.126792][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.151209][ T5843] team0: Port device team_slave_1 added
[   94.165886][ T5847] team0: Port device team_slave_1 added
[   94.187018][ T5853] hsr_slave_0: entered promiscuous mode
[   94.195039][ T5853] hsr_slave_1: entered promiscuous mode
[   94.259673][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.267324][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.295537][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.309659][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.317165][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.346159][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.374170][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.381834][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.409107][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.466339][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.474186][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.502050][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.539283][ T5846] hsr_slave_0: entered promiscuous mode
[   94.546227][ T5846] hsr_slave_1: entered promiscuous mode
[   94.552877][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   94.559022][ T5846] Cannot create hsr debugfs directory
[   94.571327][ T5840] hsr_slave_0: entered promiscuous mode
[   94.578749][ T5840] hsr_slave_1: entered promiscuous mode
[   94.585362][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[   94.592066][ T5840] Cannot create hsr debugfs directory
[   94.676215][ T5843] hsr_slave_0: entered promiscuous mode
[   94.683338][ T5843] hsr_slave_1: entered promiscuous mode
[   94.690499][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   94.696886][ T5843] Cannot create hsr debugfs directory
[   94.838364][ T5847] hsr_slave_0: entered promiscuous mode
[   94.845315][ T5847] hsr_slave_1: entered promiscuous mode
[   94.853068][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   94.860395][ T5847] Cannot create hsr debugfs directory
[   95.340249][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   95.354654][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   95.364112][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   95.376477][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   95.388181][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   95.400861][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   95.409516][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   95.420381][ T5853] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   95.501564][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   95.513825][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   95.523158][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   95.533033][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   95.544337][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   95.555184][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   95.564321][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   95.574050][ T5846] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   95.699721][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   95.714658][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   95.723707][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   95.734548][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   95.762468][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   95.772902][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   95.789135][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   95.802112][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   95.859945][ T5842] Bluetooth: hci0: command tx timeout
[   95.859966][ T5856] Bluetooth: hci4: command tx timeout
[   95.920214][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   95.931859][ T5847] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   95.940070][ T5842] Bluetooth: hci2: command tx timeout
[   95.940111][ T5842] Bluetooth: hci3: command tx timeout
[   95.948399][ T5856] Bluetooth: hci1: command tx timeout
[   95.965280][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.976847][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   95.987189][ T5847] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   95.996087][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   96.007761][ T5847] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   96.017025][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   96.030374][ T5847] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   96.105829][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   96.160199][   T92] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.167622][   T92] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.203919][   T92] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.211286][   T92] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.222456][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   96.235055][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   96.244754][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   96.256392][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   96.266958][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.282035][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   96.292736][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   96.311632][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   96.322714][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   96.395120][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   96.445712][   T92] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.453418][   T92] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.471585][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.508419][   T92] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.515795][   T92] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.571804][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   96.655227][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.662574][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.686361][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.694595][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.816410][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.896038][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.944711][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.965188][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   97.015622][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   97.035369][   T92] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.042811][   T92] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.060118][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.067485][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.096107][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.103844][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.135708][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.144678][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.257811][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.293034][ T5853] veth0_vlan: entered promiscuous mode
[   97.363287][ T5853] veth1_vlan: entered promiscuous mode
[   97.469647][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.473422][  T807] cfg80211: failed to load regulatory.db
[   97.610284][ T5853] veth0_macvtap: entered promiscuous mode
[   97.657348][ T5853] veth1_macvtap: entered promiscuous mode
[   97.754979][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.793111][ T5840] veth0_vlan: entered promiscuous mode
[   97.823778][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.905364][   T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.925087][   T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.937193][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.938563][ T5856] Bluetooth: hci4: command tx timeout
[   97.954132][ T5842] Bluetooth: hci0: command tx timeout
[   97.965338][ T5840] veth1_vlan: entered promiscuous mode
[   97.979661][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.019965][ T5842] Bluetooth: hci3: command tx timeout
[   98.026160][ T5851] Bluetooth: hci2: command tx timeout
[   98.026991][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.034568][ T5856] Bluetooth: hci1: command tx timeout
[   98.124445][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.181037][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.194335][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.208637][ T5840] veth0_macvtap: entered promiscuous mode
[   98.253365][ T5840] veth1_macvtap: entered promiscuous mode
[   98.292663][ T5847] veth0_vlan: entered promiscuous mode
[   98.301249][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.312423][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.323212][ T5846] veth0_vlan: entered promiscuous mode
[   98.346849][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.365770][ T5847] veth1_vlan: entered promiscuous mode
[   98.387020][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.425701][ T5846] veth1_vlan: entered promiscuous mode
[   98.428092][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   98.468169][ T5843] veth0_vlan: entered promiscuous mode
[   98.479020][   T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.488959][ T1119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.521646][ T1119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.569557][ T1119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.616088][ T5843] veth1_vlan: entered promiscuous mode
[   98.636850][ T5847] veth0_macvtap: entered promiscuous mode
[   98.663648][ T5846] veth0_macvtap: entered promiscuous mode
[   98.682836][ T5847] veth1_macvtap: entered promiscuous mode
[   98.774862][ T5846] veth1_macvtap: entered promiscuous mode
[   98.799855][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.801526][ T5968] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6'.
[   98.866276][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.878539][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.908866][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.975458][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.985634][ T1119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.996325][ T5843] veth0_macvtap: entered promiscuous mode
[   99.007488][ T5843] veth1_macvtap: entered promiscuous mode
[   99.037033][ T1119] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.062162][ T5970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.098638][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.106479][ T1119] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.112417][ T5970] netlink: 'syz.2.7': attribute type 11 has an invalid length.
[   99.116783][ T1119] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.144252][  T491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.163086][  T491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.176751][ T1119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.217185][ T1119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.233716][ T1119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.275076][ T1119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.321721][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.424675][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.596153][ T1119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.706233][ T1119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.759131][ T1119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.813682][ T1119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.827976][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.845801][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.872739][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.894941][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.018457][ T5842] Bluetooth: hci0: command tx timeout
[  100.026757][ T5856] Bluetooth: hci4: command tx timeout
[  100.061597][  T491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.098436][ T5856] Bluetooth: hci1: command tx timeout
[  100.098829][ T5842] Bluetooth: hci3: command tx timeout
[  100.104892][ T5851] Bluetooth: hci2: command tx timeout
[  100.105000][  T491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.255301][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.301347][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.384745][   T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.444110][   T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.572385][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.627287][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.841015][ T5991] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET)
[  101.255283][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[  101.430699][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[  101.633615][ T5852] IPVS: starting estimator thread 0...
[  101.689791][ T6013] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1'.
[  101.728927][ T6001] bond1 (unregistering): Released all slaves
[  101.809410][ T6014] IPVS: using max 25 ests per chain, 60000 per kthread
[  102.376704][ T6019] syzkaller0: entered promiscuous mode
[  102.383158][ T6019] syzkaller0: entered allmulticast mode
[  103.183324][ T6039] openvswitch: netlink: Flow actions attr not present in new flow.
[  103.250473][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'.
[  103.650023][ T6046] Driver unsupported XDP return value 0 on prog  (id 5) dev N/A, expect packet loss!
[  105.465748][ T6052] warning: `syz.4.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  105.600570][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'.
[  105.874947][ T6060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25'.
[  106.037368][ T6066] xt_connbytes: Forcing CT accounting to be enabled
[  106.098831][ T6064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.540666][ T6075] netlink: 'syz.0.28': attribute type 2 has an invalid length.
[  106.545419][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'.
[  106.687639][ T6075] netlink: 48 bytes leftover after parsing attributes in process `syz.0.28'.
[  106.922247][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'.
[  107.833183][ T6070] syz.4.27 (6070) used greatest stack depth: 17440 bytes left
[  108.234052][ T6098] vlan2: entered promiscuous mode
[  108.251960][ T6105] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.274664][ T6098] bridge0: entered promiscuous mode
[  108.777652][ T6116] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.37'.
[  108.782985][ T6117] xt_hashlimit: size too large, truncated to 1048576
[  108.883175][ T6119] Zero length message leads to an empty skb
[  110.121396][ T6132] sctp: [Deprecated]: syz.4.43 (pid 6132) Use of struct sctp_assoc_value in delayed_ack socket option.
[  110.121396][ T6132] Use struct sctp_sack_info instead
[  110.157379][ T6132] netlink: 36 bytes leftover after parsing attributes in process `syz.4.43'.
[  110.180419][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.41'.
[  110.226035][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.41'.
[  110.273944][ T6131] netlink: 58 bytes leftover after parsing attributes in process `syz.3.41'.
[  110.465039][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.475127][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.650047][ T6138] team0 (unregistering): Port device team_slave_0 removed
[  110.682552][ T6138] team0 (unregistering): Port device team_slave_1 removed
[  110.746098][ T6144] x_tables: duplicate underflow at hook 1
[  110.940204][ T6147] veth1_to_bond: entered promiscuous mode
[  110.972214][ T6149] veth1_to_bond: entered allmulticast mode
[  111.371057][ T6149] pim6reg: entered allmulticast mode
[  111.377664][ T6150] pim6reg: left allmulticast mode
[  111.457520][ T6145] veth1_to_bond: left allmulticast mode
[  111.467339][ T6145] veth1_to_bond: left promiscuous mode
[  112.492468][ T6182] netlink: 72 bytes leftover after parsing attributes in process `syz.4.53'.
[  112.591218][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.53'.
[  112.622852][ T6182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.53'.
[  113.034035][ T6193] syzkaller1: tun_chr_ioctl cmd 1074025677
[  113.064064][ T6193] syzkaller1: Refused to change device type
[  113.410982][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59'.
[  113.674973][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'.
[  114.410147][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'.
[  114.524765][ T6239] netlink: 72 bytes leftover after parsing attributes in process `syz.0.68'.
[  114.633976][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.68'.
[  114.694310][ T6241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.68'.
[  115.038369][ T6249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.72'.
[  115.680988][ T6259] netlink: 'syz.0.77': attribute type 13 has an invalid length.
[  115.696762][ T6259] netlink: 'syz.0.77': attribute type 17 has an invalid length.
[  115.802962][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.811534][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.521366][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.602818][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.725264][ T6255] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.733354][ T6255] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.741985][ T6255] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.749776][ T6255] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.764515][ T6262] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  118.973995][ T6259] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.000905][ T6259] 8021q: adding VLAN 0 to HW filter on device team0
[  119.029117][ T6259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  119.322330][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.330883][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.472000][ T6314] sctp: [Deprecated]: syz.0.85 (pid 6314) Use of int in max_burst socket option.
[  119.472000][ T6314] Use struct sctp_assoc_value instead
[  119.657327][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.676348][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.934658][ T6279] vlan2: entered allmulticast mode
[  119.950898][ T6279] bridge0: port 3(vlan2) entered blocking state
[  119.967382][ T6279] bridge0: port 3(vlan2) entered disabled state
[  119.989596][ T6279] vlan2: entered promiscuous mode
[  119.997449][   T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.034761][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  120.048920][    C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected!
[  120.202824][   T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.248557][   T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.296027][   T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.539782][   T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.557713][   T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.615291][   T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.674235][   T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.250094][ T6351] tap0: tun_chr_ioctl cmd 1074025677
[  121.276582][ T6351] tap0: linktype set to 6
[  121.707858][ T6361] batadv_slave_1: entered promiscuous mode
[  121.734173][ T6363] __nla_validate_parse: 4 callbacks suppressed
[  121.734235][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'.
[  121.766122][ T6367] netlink: 'syz.0.96': attribute type 6 has an invalid length.
[  121.799519][ T6367] netlink: 'syz.0.96': attribute type 7 has an invalid length.
[  121.807752][ T6367] netlink: 'syz.0.96': attribute type 8 has an invalid length.
[  121.822525][ T6367] netlink: 'syz.0.96': attribute type 5 has an invalid length.
[  121.831836][ T6367] netlink: 'syz.0.96': attribute type 6 has an invalid length.
[  121.844950][ T6367] netlink: 'syz.0.96': attribute type 13 has an invalid length.
[  121.884320][ T6363] batadv_slave_1 (unregistering): left promiscuous mode
[  121.894497][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.336725][ T6386] vcan0: tx drop: invalid da for name 0x00000000000000fe
[  122.512991][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.100'.
[  122.671384][ T6379] bond1: entered promiscuous mode
[  122.690403][ T6379] 8021q: adding VLAN 0 to HW filter on device bond1
[  122.723120][ T6389] 8021q: adding VLAN 0 to HW filter on device bond1
[  122.730882][ T6389] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  122.744600][ T6389] bond1: (slave vti0): Error -95 calling set_mac_address
[  123.202728][ T6416] netlink: 76 bytes leftover after parsing attributes in process `syz.1.104'.
[  123.375873][ T6421] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  123.997428][ T6432] netlink: 36 bytes leftover after parsing attributes in process `syz.1.111'.
[  124.356747][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'.
[  124.753130][ T6442] delete_channel: no stack
[  124.771895][ T6297] IPVS: starting estimator thread 0...
[  124.828169][ T6467] macsec1: entered allmulticast mode
[  124.878448][ T6467] dummy0: entered allmulticast mode
[  124.898840][ T6471] IPVS: using max 26 ests per chain, 62400 per kthread
[  124.941863][ T6467] dummy0: entered promiscuous mode
[  125.025104][ T6467] dummy0: left allmulticast mode
[  125.197887][ T5998] dummy0: left promiscuous mode
[  126.687034][ T6533] sctp: [Deprecated]: syz.1.133 (pid 6533) Use of struct sctp_assoc_value in delayed_ack socket option.
[  126.687034][ T6533] Use struct sctp_sack_info instead
[  126.813605][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'.
[  126.959522][ T6541] netlink: 'syz.3.135': attribute type 1 has an invalid length.
[  127.416062][ T6551] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  127.447080][ T6551] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  127.546316][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  127.756481][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'.
[  127.851937][ T6565] bridge2: entered promiscuous mode
[  127.886359][ T6570] netlink: 'syz.1.141': attribute type 21 has an invalid length.
[  127.905773][ T6570] netlink: 'syz.1.141': attribute type 22 has an invalid length.
[  127.925360][ T6570] netlink: 'syz.1.141': attribute type 23 has an invalid length.
[  127.952462][ T6573] netlink: 'syz.2.144': attribute type 1 has an invalid length.
[  127.963113][ T6570] netlink: 136 bytes leftover after parsing attributes in process `syz.1.141'.
[  127.981679][ T6573] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.121929][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'.
[  128.328937][ T6564] bond1 (unregistering): Released all slaves
[  128.441169][ T6579] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  128.471107][ T6579] bond2: (slave lo): Enslaving as an active interface with an up link
[  128.492028][ T6579] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  129.826434][ T6616] netlink: 56 bytes leftover after parsing attributes in process `syz.1.155'.
[  130.419150][ T6626] netlink: 'syz.1.158': attribute type 10 has an invalid length.
[  130.506792][ T6626] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  130.641667][ T6636] smc: net device wlan0 applied user defined pnetid SYZ0
[  130.797847][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'.
[  131.116820][ T6648] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  131.711380][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'.
[  131.901723][ T6678] netlink: 'syz.1.167': attribute type 1 has an invalid length.
[  131.938893][ T6678] netlink: 'syz.1.167': attribute type 2 has an invalid length.
[  131.951647][ T6678] netlink: 'syz.1.167': attribute type 1 has an invalid length.
[  131.963097][ T6678] netlink: 'syz.1.167': attribute type 3 has an invalid length.
[  132.291982][ T6701] netlink: 32 bytes leftover after parsing attributes in process `syz.4.170'.
[  132.303209][ T6701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.170'.
[  133.073244][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'.
[  133.186919][ T6729] netlink: 'syz.0.177': attribute type 83 has an invalid length.
[  133.310672][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  133.320560][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  133.710687][ T6750] xt_hashlimit: size too large, truncated to 1048576
[  134.073468][ T6764] netlink: 192 bytes leftover after parsing attributes in process `syz.1.186'.
[  134.097979][ T6763] netlink: 44 bytes leftover after parsing attributes in process `syz.0.187'.
[  134.156109][ T6763] netlink: 43 bytes leftover after parsing attributes in process `syz.0.187'.
[  134.252092][ T6763] netlink: 'syz.0.187': attribute type 5 has an invalid length.
[  134.338585][ T6763] netlink: 43 bytes leftover after parsing attributes in process `syz.0.187'.
[  135.530982][ T6786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.562837][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.193'.
[  135.584342][ T6778] syzkaller0: entered promiscuous mode
[  135.634880][ T6778] syzkaller0: entered allmulticast mode
[  135.923799][ T6801] netlink: 732 bytes leftover after parsing attributes in process `syz.4.194'.
[  135.934063][ T6801] netlink: 732 bytes leftover after parsing attributes in process `syz.4.194'.
[  136.845421][ T6815] netlink: 'syz.3.197': attribute type 1 has an invalid length.
[  137.437101][ T6838] bridge1: entered promiscuous mode
[  137.473479][ T6838] bridge1: entered allmulticast mode
[  138.441672][ T6865] bond2: option lacp_active: invalid value (8)
[  138.557014][ T6865] bond2 (unregistering): Released all slaves
[  139.077707][ T6869] __nla_validate_parse: 5 callbacks suppressed
[  139.077738][ T6869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'.
[  139.111385][ T6871] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'.
[  139.724236][ T6894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'.
[  139.741664][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'.
[  139.764947][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'.
[  139.857687][ T6894] netlink: 'syz.1.215': attribute type 1 has an invalid length.
[  139.898581][ T6894] netlink: 96 bytes leftover after parsing attributes in process `syz.1.215'.
[  139.917303][ T6897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.215'.
[  139.985743][ T6894] netlink: 658 bytes leftover after parsing attributes in process `syz.1.215'.
[  140.043863][ T6894] netlink: 1 bytes leftover after parsing attributes in process `syz.1.215'.
[  141.216061][ T6928] ip6t_rpfilter: unknown options
[  141.478477][ T6906] bond0: (slave bond_slave_1): Releasing backup interface
[  142.605774][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'.
[  142.703053][ T6957] macvlan2: entered allmulticast mode
[  142.717478][ T6957] hsr0: entered allmulticast mode
[  142.726009][ T6957] hsr_slave_0: entered allmulticast mode
[  142.746971][ T6957] hsr_slave_1: entered allmulticast mode
[  142.759916][ T6957] hsr0: entered promiscuous mode
[  143.776848][ T6986] netlink: 'syz.1.238': attribute type 4 has an invalid length.
[  143.905537][ T6986] .`: renamed from bond0
[  143.921954][ T6988] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  143.932239][ T6988] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  143.941744][ T6988] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  143.946487][ T6994] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.950141][ T6988] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  143.967920][ T6988] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  143.976017][ T6988] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  143.984512][ T6988] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  143.992755][ T6988] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  144.000875][ T6988] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  145.032609][ T7024] __nla_validate_parse: 4 callbacks suppressed
[  145.032655][ T7024] netlink: 192 bytes leftover after parsing attributes in process `syz.0.250'.
[  147.132456][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'.
[  147.187670][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.263'.
[  147.212001][ T7094] netlink: 'syz.4.263': attribute type 20 has an invalid length.
[  147.635137][ T7111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.267'.
[  147.740499][ T7111] bond1: option primary_reselect: invalid value (133)
[  147.752995][ T7111] bond1 (unregistering): Released all slaves
[  148.116220][ T7125] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.271'.
[  148.204095][ T7099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  148.309175][ T7122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.270'.
[  148.495562][ T7137] netlink: 'syz.1.274': attribute type 1 has an invalid length.
[  148.613030][ T7141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.274'.
[  148.664475][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'.
[  148.967100][ T7143] netlink: 'syz.0.275': attribute type 1 has an invalid length.
[  148.996305][ T7143] net_ratelimit: 56 callbacks suppressed
[  148.996363][ T7143] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.002050][ T7148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.276'.
[  149.160655][ T7149] delete_channel: no stack
[  149.741351][ T7175] netlink: 'syz.4.285': attribute type 14 has an invalid length.
[  149.806339][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'.
[  150.042020][ T7183] netlink: 60 bytes leftover after parsing attributes in process `syz.1.284'.
[  151.003692][ T7186] netlink: 28 bytes leftover after parsing attributes in process `syz.4.287'.
[  152.522899][ T7246] netlink: 'syz.0.295': attribute type 1 has an invalid length.
[  152.722325][ T7251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.295'.
[  152.747250][ T7246] 8021q: adding VLAN 0 to HW filter on device bond3
[  153.797371][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'.
[  153.850406][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'.
[  154.572335][ T7266] netlink: 'syz.1.300': attribute type 2 has an invalid length.
[  154.864955][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'.
[  154.905482][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'.
[  154.945885][ T7287] netlink: 'syz.3.305': attribute type 7 has an invalid length.
[  155.043000][ T7291] openvswitch: netlink: Key type 29 is not supported
[  155.120212][  T491] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  155.130754][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'.
[  155.170124][  T491] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  155.182901][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'.
[  155.211180][  T491] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  155.224291][ T7287] netlink: 'syz.3.305': attribute type 7 has an invalid length.
[  155.244926][  T491] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  155.379892][ T7305] netlink: 156 bytes leftover after parsing attributes in process `syz.4.309'.
[  156.026301][ T7323] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 0, id = 0
[  156.133477][ T7330] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 2, id = 0
[  156.184775][ T7328] pim6reg1: entered promiscuous mode
[  156.195196][ T7328] pim6reg1: entered allmulticast mode
[  156.811829][ T7349] sctp: [Deprecated]: syz.1.320 (pid 7349) Use of int in max_burst socket option.
[  156.811829][ T7349] Use struct sctp_assoc_value instead
[  156.843626][ T7346] netlink: 'syz.0.316': attribute type 2 has an invalid length.
[  156.869108][ T7349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.900188][ T7350] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.317995][ T7359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  157.534395][ T7374] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20001
[  157.560310][ T7371] Bluetooth: MGMT ver 1.23
[  157.814377][ T7379] syzkaller0: entered promiscuous mode
[  157.821302][ T7379] syzkaller0: entered allmulticast mode
[  158.196022][ T7389] netlink: 36 bytes leftover after parsing attributes in process `syz.4.331'.
[  159.005285][ T7412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.337'.
[  159.102581][ T7413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.338'.
[  159.541064][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  159.576845][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'.
[  159.663452][ T7416] netlink: 'syz.1.338': attribute type 12 has an invalid length.
[  159.717860][ T7416] netlink: 132 bytes leftover after parsing attributes in process `syz.1.338'.
[  159.903653][ T7430] netlink: 64 bytes leftover after parsing attributes in process `syz.3.341'.
[  159.967359][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'.
[  160.033408][ T7430] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  160.775643][ T7459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.349'.
[  160.787426][ T7460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.349'.
[  160.853435][ T7460] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.873148][ T7459] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.058823][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'.
[  161.861151][ T7492] netlink: 'syz.2.357': attribute type 153 has an invalid length.
[  161.933405][ T7494] netlink: 52 bytes leftover after parsing attributes in process `syz.1.356'.
[  162.993024][ T7526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.367'.
[  164.892232][ T7565] netlink: 52 bytes leftover after parsing attributes in process `syz.2.376'.
[  165.023755][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'.
[  165.056580][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'.
[  165.075414][ T7571] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  165.087083][ T7576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.103775][ T7572] netlink: 'syz.4.378': attribute type 13 has an invalid length.
[  165.113993][ T7571] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  165.130795][ T7571] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  165.539413][ T7588] No such timeout policy "syz0"
[  165.574177][ T7589] netlink: 40 bytes leftover after parsing attributes in process `syz.3.381'.
[  165.574272][ T7590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.381'.
[  166.442705][ T7613] netlink: 'syz.0.388': attribute type 1 has an invalid length.
[  166.656585][ T7613] bond4: entered promiscuous mode
[  166.675302][ T7613] 8021q: adding VLAN 0 to HW filter on device bond4
[  166.816333][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'.
[  166.886884][ T7617] bond4: (slave veth3): making interface the new active one
[  166.897108][ T7617] veth3: entered promiscuous mode
[  166.934244][ T7617] bond4: (slave veth3): Enslaving as an active interface with an up link
[  167.092918][ T7631] : entered promiscuous mode
[  167.372432][ T7642] netlink: 'syz.0.396': attribute type 1 has an invalid length.
[  167.383835][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'.
[  167.515638][ T7642] 8021q: adding VLAN 0 to HW filter on device bond5
[  167.593548][ T7650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.397'.
[  167.601398][ T7652] Bluetooth: MGMT ver 1.23
[  168.635970][ T7680] pim6reg: entered allmulticast mode
[  169.265852][ T7711] xt_hashlimit: size too large, truncated to 1048576
[  169.830369][ T7731] netlink: 'syz.3.418': attribute type 29 has an invalid length.
[  171.347032][ T7775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.427'.
[  171.350108][ T7763] bond1: entered promiscuous mode
[  172.175700][ T7793] netlink: 'syz.4.432': attribute type 1 has an invalid length.
[  172.244189][ T7793] netlink: 96 bytes leftover after parsing attributes in process `syz.4.432'.
[  172.266132][ T7795] netlink: 'syz.3.433': attribute type 1 has an invalid length.
[  172.330247][ T7793] netlink: 1 bytes leftover after parsing attributes in process `syz.4.432'.
[  172.389455][ T7793] netlink: 658 bytes leftover after parsing attributes in process `syz.4.432'.
[  172.539647][ T7795] 8021q: adding VLAN 0 to HW filter on device bond1
[  172.731889][ T7802] bond1: (slave veth3): Enslaving as an active interface with a down link
[  172.880757][ T7807] tipc: Started in network mode
[  172.925826][ T7807] tipc: Node identity 7a384e817dbc, cluster identity 4711
[  173.001526][ T7807] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.053869][ T7810] syzkaller0: entered promiscuous mode
[  173.111497][ T7810] syzkaller0: entered allmulticast mode
[  173.173386][ T7821] netlink: 20 bytes leftover after parsing attributes in process `syz.4.438'.
[  173.383719][ T7824] tipc: Resetting bearer <eth:syzkaller0>
[  173.503018][ T7806] tipc: Resetting bearer <eth:syzkaller0>
[  173.633434][ T7806] tipc: Disabling bearer <eth:syzkaller0>
[  173.746355][ T7833] syzkaller1: tun_chr_ioctl cmd 35108
[  175.386717][ T7872] syzkaller0: entered promiscuous mode
[  175.431650][ T7872] syzkaller0: entered allmulticast mode
[  179.474803][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'.
[  179.845619][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'.
[  179.975095][ T7960] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  180.443223][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.471'.
[  180.550843][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'.
[  180.747237][ T7978] macvtap1: entered promiscuous mode
[  180.768260][ T7978] dummy0: entered promiscuous mode
[  180.775438][ T7978] macvtap1: entered allmulticast mode
[  180.781829][ T7978] dummy0: entered allmulticast mode
[  181.393329][ T7999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.482'.
[  181.469557][ T7997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.482'.
[  181.526032][ T7997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.482'.
[  181.581001][ T7999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.482'.
[  181.806568][ T7997] ip6gre1: entered promiscuous mode
[  181.836029][ T7997] ip6gre1: entered allmulticast mode
[  182.237371][ T8022] xt_ecn: cannot match TCP bits for non-tcp packets
[  182.768121][ T8040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.779053][ T8041] sctp: [Deprecated]: syz.2.493 (pid 8041) Use of struct sctp_assoc_value in delayed_ack socket option.
[  182.779053][ T8041] Use struct sctp_sack_info instead
[  182.829601][ T8043] netlink: 72 bytes leftover after parsing attributes in process `syz.0.494'.
[  182.852395][ T8043] netlink: 680 bytes leftover after parsing attributes in process `syz.0.494'.
[  182.900215][ T8047] netlink: 'syz.1.496': attribute type 1 has an invalid length.
[  182.929895][ T8047] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  183.087491][ T8055] netlink: 'syz.0.497': attribute type 2 has an invalid length.
[  184.172601][ T8081] virtio_net virtio1 eth0: entered promiscuous mode
[  184.232664][ T8081] dummy0: entered promiscuous mode
[  184.257957][ T8081] debugfs: 'hsr0' already exists in 'hsr'
[  184.277335][ T8081] Cannot create hsr debugfs directory
[  184.742437][ T8112] __nla_validate_parse: 4 callbacks suppressed
[  184.742458][ T8112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.509'.
[  184.861632][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'.
[  185.031540][ T8098] syzkaller1: entered promiscuous mode
[  185.040532][ T8098] syzkaller1: entered allmulticast mode
[  186.389376][ T8147] openvswitch: netlink: Message has 496 unknown bytes.
[  186.455005][ T8147] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.327335][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'.
[  187.557509][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'.
[  187.602010][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'.
[  187.989296][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'.
[  188.014008][   T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  188.023188][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'.
[  188.048413][   T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  188.098516][   T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  188.145867][   T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  188.694549][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'.
[  188.734690][ T8202] x_tables: duplicate underflow at hook 2
[  188.753274][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'.
[  188.805083][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'.
[  188.890864][ T8197] veth3: entered promiscuous mode
[  190.226796][ T8253] Cannot find set identified by id 0 to match
[  190.348600][ T8256] netlink: 'syz.2.544': attribute type 58 has an invalid length.
[  190.374966][ T8256] __nla_validate_parse: 1 callbacks suppressed
[  190.374986][ T8256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.544'.
[  190.570404][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'.
[  190.696738][ T8273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.547'.
[  190.943574][ T8279] netlink: 'syz.0.548': attribute type 1 has an invalid length.
[  191.788154][ T8279] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  194.747089][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  200.466525][ T8377] batadv_slave_0: entered promiscuous mode
[  200.474201][ T8377] batadv_slave_0: entered allmulticast mode
[  200.584916][ T8380] netlink: 'syz.2.563': attribute type 13 has an invalid length.
[  200.616197][ T8380] netlink: 'syz.2.563': attribute type 17 has an invalid length.
[  200.663941][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  200.882663][ T8394] netlink: 128 bytes leftover after parsing attributes in process `syz.4.567'.
[  200.945402][ T8395] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.568'.
[  201.210813][ T8398] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.334784][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'.
[  201.699544][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  201.740374][ T8380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  202.327597][ T8428] netlink: 64 bytes leftover after parsing attributes in process `syz.4.575'.
[  202.885382][ T8436] netlink: 68 bytes leftover after parsing attributes in process `syz.1.577'.
[  204.275751][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'.
[  204.417041][ T8488] veth0_macvtap: left promiscuous mode
[  204.455972][ T8493] sctp: [Deprecated]: syz.1.585 (pid 8493) Use of int in max_burst socket option.
[  204.455972][ T8493] Use struct sctp_assoc_value instead
[  204.875498][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'.
[  205.001673][ T8499] netlink: 68 bytes leftover after parsing attributes in process `syz.3.591'.
[  205.440331][ T8525] ÿ: renamed from bond_slave_0
[  205.747252][ T8544] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.596'.
[  205.749209][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'.
[  206.381940][ T8559] __nla_validate_parse: 1 callbacks suppressed
[  206.381999][ T8559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.599'.
[  207.963729][ T8593] netlink: 'syz.2.606': attribute type 12 has an invalid length.
[  208.717993][ T8625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.614'.
[  208.994281][ T8627] bond2: option xmit_hash_policy: invalid value (10)
[  209.047954][ T8627] bond2 (unregistering): Released all slaves
[  210.463412][ T8652] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.619'.
[  210.927839][ T8634] trusted_key: syz.1.615 sent an empty control message without MSG_MORE.
[  211.077951][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'.
[  211.266200][ T8658] nr18: entered promiscuous mode
[  211.907500][ T8657] nr18: left promiscuous mode
[  212.654058][ T8676] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  212.762262][ T8676] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  212.846045][ T8676] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  213.051769][ T8676] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  213.318577][ T8676] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  213.879949][ T8693] netlink: 292 bytes leftover after parsing attributes in process `syz.0.627'.
[  214.238912][ T8701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'.
[  214.340758][ T8701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.630'.
[  214.707902][ T8715] netlink: 64 bytes leftover after parsing attributes in process `syz.2.633'.
[  214.825297][ T8724] syzkaller1: entered promiscuous mode
[  214.841757][ T8720] can: request_module (can-proto-4) failed.
[  214.861897][ T8724] syzkaller1: entered allmulticast mode
[  215.194894][ T5505] veth0_macvtap: entered promiscuous mode
[  215.556357][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'.
[  215.635845][ T8744] netlink: 48 bytes leftover after parsing attributes in process `syz.2.638'.
[  215.917906][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'.
[  216.526594][ T8771] netlink: 48 bytes leftover after parsing attributes in process `syz.2.645'.
[  216.913535][ T8783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.189259][ T8793] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.309113][ T5863] Bluetooth: hci2: command 0x0406 tx timeout
[  217.317542][ T5863] Bluetooth: hci3: command 0x0406 tx timeout
[  217.325368][ T5161] Bluetooth: hci0: command 0x0406 tx timeout
[  217.333168][ T5862] Bluetooth: hci1: command 0x0406 tx timeout
[  217.340940][ T8785] bond2: option lp_interval: invalid value (0)
[  217.340966][ T8785] bond2: option lp_interval: allowed values 1 - 2147483647
[  217.385317][ T8785] bond2 (unregistering): Released all slaves
[  217.518374][ T8795] tipc: Started in network mode
[  217.559797][ T8795] tipc: Node identity 0ad633f31f2f, cluster identity 4711
[  217.578503][ T8795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.754551][ T8795] tipc: Disabling bearer <eth:syzkaller0>
[  218.166644][ T8818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.658'.
[  218.255715][ T8812] bond0: entered promiscuous mode
[  218.270164][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'.
[  218.288560][ T8812] bond_slave_0: entered promiscuous mode
[  218.297034][ T8812] bond_slave_1: entered promiscuous mode
[  218.316825][ T8812] batadv0: entered promiscuous mode
[  218.349178][ T8812] 8021q: adding VLAN 0 to HW filter on device hsr1
[  218.360132][ T8812] bond0: left promiscuous mode
[  218.379381][ T8812] bond_slave_0: left promiscuous mode
[  218.398002][ T8812] bond_slave_1: left promiscuous mode
[  218.415201][ T8812] batadv0: left promiscuous mode
[  219.483807][ T8848] syzkaller0: entered promiscuous mode
[  219.510138][ T8848] syzkaller0: entered allmulticast mode
[  219.720723][ T8848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.665'.
[  221.413862][ T8890] netlink: 56 bytes leftover after parsing attributes in process `syz.1.673'.
[  222.134441][ T8913] xt_limit: Overflow, try lower: 324382443/0
[  222.700962][ T8928] netlink: 'syz.0.677': attribute type 3 has an invalid length.
[  222.774446][ T8920] raw_sendmsg: syz.0.677 forgot to set AF_INET. Fix it!
[  222.937165][ T8935] syzkaller1: entered promiscuous mode
[  222.972989][ T8935] syzkaller1: entered allmulticast mode
[  223.176145][ T8935] netlink: 'syz.3.681': attribute type 13 has an invalid length.
[  223.201438][ T8935] netlink: 'syz.3.681': attribute type 17 has an invalid length.
[  223.511667][ T8937] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.519915][ T8937] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.005070][ T8937] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.069194][ T8937] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.631150][ T8973] netlink: 'syz.0.687': attribute type 83 has an invalid length.
[  224.713958][ T8937] hsr0: left allmulticast mode
[  224.725326][ T8937] hsr_slave_0: left allmulticast mode
[  224.745812][ T8937] hsr_slave_1: left allmulticast mode
[  225.056905][ T8935] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.070825][ T8935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  225.117793][  T491] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  225.127585][  T491] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.137372][  T491] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  225.147476][  T491] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.168809][  T491] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  225.188279][  T491] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.210440][  T491] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  225.224580][  T491] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.313978][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'.
[  225.462231][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  226.622784][ T9016] netlink: 'syz.3.695': attribute type 3 has an invalid length.
[  226.814148][ T9039] netlink: 'syz.4.703': attribute type 1 has an invalid length.
[  226.948617][ T9039] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  227.572624][ T9056] netlink: 212080 bytes leftover after parsing attributes in process `syz.2.704'.
[  227.664935][ T9060] netlink: 100 bytes leftover after parsing attributes in process `syz.4.705'.
[  228.674673][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'.
[  228.734475][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'.
[  228.854175][ T9083] netlink: 'syz.4.712': attribute type 29 has an invalid length.
[  228.887863][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'.
[  228.963481][ T9090] netlink: 9 bytes leftover after parsing attributes in process `syz.3.716'.
[  228.987429][ T9090] .70·X: renamed from hsr0
[  229.085083][ T9090] .70·X: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  229.151766][ T9090] .70·X: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.234476][ T9090] .70·X: entered allmulticast mode
[  229.241994][ T9090] hsr_slave_0: entered allmulticast mode
[  229.253638][ T9090] hsr_slave_1: entered allmulticast mode
[  229.276612][ T9090] A link change request failed with some changes committed already. Interface .70·X may have been left with an inconsistent configuration, please check.
[  229.295412][ T9090] .70·X: left promiscuous mode
[  229.572141][ T9111] GUP no longer grows the stack in syz.4.718 (9111): 200000003000-20000000a000 (200000001000)
[  229.608858][ T9111] CPU: 1 UID: 0 PID: 9111 Comm: syz.4.718 Not tainted syzkaller #0 PREEMPT(full) 
[  229.608887][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  229.608898][ T9111] Call Trace:
[  229.608906][ T9111]  <TASK>
[  229.608915][ T9111]  dump_stack_lvl+0xe8/0x150
[  229.608954][ T9111]  __get_user_pages+0x2378/0x2720
[  229.608990][ T9111]  ? __gup_longterm_locked+0xc4e/0x1630
[  229.609028][ T9111]  ? __gup_longterm_locked+0xc4e/0x1630
[  229.609047][ T9111]  ? down_read_killable+0x1bb/0x340
[  229.609073][ T9111]  __gup_longterm_locked+0xdcf/0x1630
[  229.609098][ T9111]  ? lock_acquire+0x106/0x350
[  229.609151][ T9111]  gup_fast_fallback+0x1d84/0x20d0
[  229.609204][ T9111]  ? __pfx_gup_fast_fallback+0x10/0x10
[  229.609227][ T9111]  ? is_valid_gup_args+0x11f/0x200
[  229.609249][ T9111]  ? get_user_pages_fast+0x4d/0xb0
[  229.609272][ T9111]  __iov_iter_get_pages_alloc+0x370/0xa10
[  229.609304][ T9111]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  229.609334][ T9111]  iov_iter_get_pages2+0x5e/0xa0
[  229.609360][ T9111]  __se_sys_vmsplice+0x7c7/0x1620
[  229.609404][ T9111]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  229.609427][ T9111]  ? __pfx_futex_wait+0x10/0x10
[  229.609484][ T9111]  ? vm_mmap_pgoff+0x3b1/0x4f0
[  229.609550][ T9111]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.609572][ T9111]  do_syscall_64+0x15f/0xf80
[  229.609598][ T9111]  ? trace_irq_disable+0x3b/0x140
[  229.609623][ T9111]  ? clear_bhb_loop+0x40/0x90
[  229.609648][ T9111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.609667][ T9111] RIP: 0033:0x7fd32319cdd9
[  229.609686][ T9111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.609702][ T9111] RSP: 002b:00007fd324059028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  229.609725][ T9111] RAX: ffffffffffffffda RBX: 00007fd323415fa0 RCX: 00007fd32319cdd9
[  229.609739][ T9111] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006
[  229.609751][ T9111] RBP: 00007fd323232d69 R08: 0000000000000000 R09: 0000000000000000
[  229.609763][ T9111] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  229.609774][ T9111] R13: 00007fd323416038 R14: 00007fd323415fa0 R15: 00007ffcef521368
[  229.609815][ T9111]  </TASK>
[  230.017968][ T9117] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.720'.
[  230.027757][ T9117] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  231.307445][ T9155] macsec0: entered promiscuous mode
[  231.341497][ T9155] macsec0: entered allmulticast mode
[  231.376741][ T9153] netlink: 32 bytes leftover after parsing attributes in process `syz.3.731'.
[  231.586804][ T9163] netlink: 'syz.4.733': attribute type 1 has an invalid length.
[  231.887279][ T9166] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up
[  232.290221][ T9194] bond0: (slave bond_slave_1): Releasing backup interface
[  232.526038][ T9200] netlink: 'syz.4.743': attribute type 13 has an invalid length.
[  232.546897][ T9200] netlink: 'syz.4.743': attribute type 17 has an invalid length.
[  232.664723][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.743'.
[  232.707685][ T9200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  233.041508][ T9219] netlink: 'syz.1.747': attribute type 1 has an invalid length.
[  233.071055][ T9219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.747'.
[  233.096187][ T9219] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  233.106999][ T9219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  233.649192][ T9237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.751'.
[  234.221145][ T9253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.757'.
[  234.411216][ T9257] netlink: 'syz.4.758': attribute type 1 has an invalid length.
[  235.565379][ T9292] xt_hashlimit: size too large, truncated to 1048576
[  235.923009][ T9300] netlink: 'syz.2.768': attribute type 13 has an invalid length.
[  235.954634][ T9300] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.768'.
[  236.336887][ T9306] tipc: Started in network mode
[  236.354071][ T9306] tipc: Node identity f62cee51fb15, cluster identity 4711
[  236.371101][ T9306] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.372140][ T9310] IPv6: NLM_F_REPLACE set, but no existing node found!
[  236.685717][ T9316] syzkaller0: entered promiscuous mode
[  236.722738][ T9316] syzkaller0: entered allmulticast mode
[  236.763689][ T9316] tipc: Resetting bearer <eth:syzkaller0>
[  237.022978][ T1167] tipc: Resetting bearer <eth:syzkaller0>
[  237.049311][ T9305] tipc: Resetting bearer <eth:syzkaller0>
[  237.636617][ T9344] netlink: 32 bytes leftover after parsing attributes in process `syz.1.780'.
[  237.877472][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'.
[  239.908329][ T9305] tipc: Disabling bearer <eth:syzkaller0>
[  239.922077][ T5998] tipc: Node number set to 221900369
[  240.393774][ T9368] netlink: 'syz.4.787': attribute type 8 has an invalid length.
[  240.449129][ T9367] netlink: 'syz.4.787': attribute type 8 has an invalid length.
[  240.456497][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'.
[  240.544363][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'.
[  241.215168][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'.
[  241.438627][ T9401] netlink: 'syz.3.792': attribute type 2 has an invalid length.
[  241.468448][ T9395] bridge_slave_0: left allmulticast mode
[  241.512328][ T9395] bridge_slave_0: left promiscuous mode
[  241.556739][ T9401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.792'.
[  241.564056][ T9395] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.823368][ T9412] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  241.848000][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.793'.
[  242.172519][ T9395] bridge_slave_1: left allmulticast mode
[  242.207468][ T9420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.796'.
[  242.227123][ T9395] bridge_slave_1: left promiscuous mode
[  242.239590][ T9395] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.301799][ T9395] bond0: (slave bond_slave_0): Releasing backup interface
[  242.332730][ T9395] bond0: (slave bond_slave_1): Releasing backup interface
[  242.400163][ T9395] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.431522][ T9395] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.446042][ T9395] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  242.470821][ T9401] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  242.507282][ T9412] netlink: 830 bytes leftover after parsing attributes in process `syz.3.792'.
[  242.873578][ T9432] netlink: 36 bytes leftover after parsing attributes in process `syz.4.798'.
[  242.970133][ T9440] netlink: 'syz.4.798': attribute type 12 has an invalid length.
[  243.034695][ T9440] netlink: 132 bytes leftover after parsing attributes in process `syz.4.798'.
[  243.689035][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'.
[  243.719660][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'.
[  243.766602][ T9451] netlink: 'syz.0.801': attribute type 5 has an invalid length.
[  243.790960][ T9459] bond3 (unregistering): Released all slaves
[  244.012657][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'.
[  244.053561][  T491] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  244.065067][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'.
[  244.065106][ T9451] netlink: 'syz.0.801': attribute type 5 has an invalid length.
[  244.198000][  T491] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  244.406837][  T491] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  244.462124][  T491] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  245.557994][ T9501] netlink: 'syz.1.808': attribute type 2 has an invalid length.
[  245.615365][ T9502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.808'.
[  245.684283][ T9487] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.692313][ T9487] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  245.893229][ T9510] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  246.214888][ T9487] A link change request failed with some changes committed already. Interface 
1¾x9ÿ may have been left with an inconsistent configuration, please check.
[  246.514208][ T9500] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.565463][ T9500] bridge_slave_1: left allmulticast mode
[  246.571497][ T9500] bridge_slave_1: left promiscuous mode
[  246.577639][ T9500] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.600451][ T9500] .`: (slave bond_slave_0): Releasing backup interface
[  246.621343][ T9500] team0: Port device team_slave_0 removed
[  246.629801][ T9500] team0: Port device team_slave_1 removed
[  246.636581][ T9500] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.645448][ T9500] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.654816][ T9500] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  246.677401][ T9502] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  246.683340][ T9510] netlink: 830 bytes leftover after parsing attributes in process `syz.1.808'.
[  246.703130][ T9515] netlink: 'syz.3.811': attribute type 29 has an invalid length.
[  246.823041][ T9529] wg1 speed is unknown, defaulting to 1000
[  246.953086][ T9529] wg1 speed is unknown, defaulting to 1000
[  246.974685][ T9529] wg1 speed is unknown, defaulting to 1000
[  248.271499][ T9529] infiniband syz0: set active
[  248.279823][ T6140] wg1 speed is unknown, defaulting to 1000
[  248.294021][ T9529] infiniband syz0: added wg1
[  248.502769][ T9529] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  248.533603][ T9529] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  248.555363][ T9529] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  248.736801][ T9529] RDS/IB: syz0: added
[  248.755087][ T9529] smc: adding ib device syz0 with port count 1
[  248.763612][ T9529] smc:    ib device syz0 port 1 has no pnetid
[  248.776981][ T5576] wg1 speed is unknown, defaulting to 1000
[  248.807878][ T9529] wg1 speed is unknown, defaulting to 1000
[  248.919974][ T9581] sch_fq: defrate 53322 ignored.
[  249.046312][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'.
[  249.562216][ T9597] x_tables: unsorted entry at hook 1
[  250.076502][ T9597] netlink: 1 bytes leftover after parsing attributes in process `syz.1.835'.
[  251.397811][ T9529] wg1 speed is unknown, defaulting to 1000
[  251.853466][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'.
[  251.881140][ T9630] bond0: Unable to set down delay as MII monitoring is disabled
[  252.302965][ T9529] wg1 speed is unknown, defaulting to 1000
[  252.571937][ T9646] netlink: 'syz.0.848': attribute type 10 has an invalid length.
[  252.661342][ T9646] team0: Cannot enslave team device to itself
[  253.077048][ T9655] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  253.745415][ T9665] wg1 speed is unknown, defaulting to 1000
[  254.131113][ T9695] netlink: 'syz.3.860': attribute type 13 has an invalid length.
[  254.656424][ T9529] wg1 speed is unknown, defaulting to 1000
[  255.817431][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.869'.
[  255.875058][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.869'.
[  255.971928][ T9529] wg1 speed is unknown, defaulting to 1000
[  255.998536][ T9735] ip6tnl0: entered promiscuous mode
[  256.052884][ T9734] ip6tnl0: left promiscuous mode
[  256.840838][ T9753] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  256.862465][ T9753] batadv_slave_0: entered promiscuous mode
[  256.882456][ T9753] batadv_slave_0: entered allmulticast mode
[  257.694800][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.877'.
[  257.986305][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.878'.
[  258.066404][ T9776] netlink: 36 bytes leftover after parsing attributes in process `syz.1.878'.
[  258.124221][ T9779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.878'.
[  258.196936][ T9776] 8021q: VLANs not supported on sit0
[  258.235175][ T9778] netlink: 'syz.0.880': attribute type 13 has an invalid length.
[  258.285146][ T9778] netlink: 'syz.0.880': attribute type 17 has an invalid length.
[  258.461061][ T9778] 8021q: adding VLAN 0 to HW filter on device team0
[  258.467851][ T9795] netlink: 44 bytes leftover after parsing attributes in process `syz.2.879'.
[  258.624738][ T9778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  258.700743][ T9797] netlink: 'syz.2.879': attribute type 2 has an invalid length.
[  258.897940][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'.
[  259.357774][ T9800] wg1 speed is unknown, defaulting to 1000
[  260.279616][ T9830] netlink: 48 bytes leftover after parsing attributes in process `syz.4.889'.
[  260.373196][ T9830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.889'.
[  261.127742][ T9843] __nla_validate_parse: 2 callbacks suppressed
[  261.127763][ T9843] netlink: 68 bytes leftover after parsing attributes in process `syz.2.890'.
[  261.398073][ T9850] netlink: 'syz.4.893': attribute type 1 has an invalid length.
[  261.425472][ T9850] netlink: 'syz.4.893': attribute type 4 has an invalid length.
[  261.446996][ T9850] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.893'.
[  261.686461][ T9857] x_tables: duplicate underflow at hook 1
[  261.721124][ T9857] netlink: 'syz.0.892': attribute type 1 has an invalid length.
[  262.454791][ T9868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  263.503210][ T9894] netlink: 64 bytes leftover after parsing attributes in process `syz.3.902'.
[  264.047860][ T9902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.904'.
[  264.134266][ T9904] netlink: 11 bytes leftover after parsing attributes in process `syz.4.905'.
[  264.151297][ T9902] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.904'.
[  265.424326][ T9908] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.749093][ T9908] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.094763][ T9932] syzkaller0: entered promiscuous mode
[  266.144669][ T9932] syzkaller0: entered allmulticast mode
[  266.236599][ T9954] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  266.296888][ T9908] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.780891][ T9963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.918'.
[  266.793457][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.918'.
[  269.564283][ T9908] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.176659][ T9979] syzkaller1: entered promiscuous mode
[  270.199972][ T9979] syzkaller1: entered allmulticast mode
[  270.222847][   T92] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.543538][ T9984] syzkaller0: entered promiscuous mode
[  270.552676][ T9984] syzkaller0: entered allmulticast mode
[  270.777929][ T1167] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.185498][T10017] netlink: 48 bytes leftover after parsing attributes in process `syz.0.939'.
[  271.244734][ T1124] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.244898][T10018] netlink: 292 bytes leftover after parsing attributes in process `syz.1.929'.
[  271.387382][ T1167] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.022468][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'.
[  272.253474][T10044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.934'.
[  272.357970][T10043] netlink: 'syz.2.936': attribute type 1 has an invalid length.
[  272.404208][T10043] netlink: 'syz.2.936': attribute type 2 has an invalid length.
[  272.796973][T10061] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.015837][T10065] xt_hashlimit: size too large, truncated to 1048576
[  273.297510][T10066] –: renamed from vxcan1
[  273.845520][   T29] audit: type=1800 audit(1777146774.952:2): pid=10077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.945" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=949 res=0 errno=0
[  273.988992][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'.
[  274.059494][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.944'.
[  274.115271][   T29] audit: type=1804 audit(1777146775.222:3): pid=10080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.943" name="/newroot/185/cgroup.controllers" dev="tmpfs" ino=966 res=1 errno=0
[  274.200637][   T29] audit: type=1800 audit(1777146775.252:4): pid=10080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.943" name="cgroup.controllers" dev="tmpfs" ino=966 res=0 errno=0
[  274.287729][   T29] audit: type=1804 audit(1777146775.262:5): pid=10080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.943" name="/newroot/185/cgroup.controllers" dev="tmpfs" ino=966 res=1 errno=0
[  274.542841][T10098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.948'.
[  274.556869][T10094] lo speed is unknown, defaulting to 1000
[  274.625941][T10099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.948'.
[  274.644472][T10099] netlink: 32 bytes leftover after parsing attributes in process `syz.0.948'.
[  274.726003][T10094] lo speed is unknown, defaulting to 1000
[  274.771224][T10094] lo speed is unknown, defaulting to 1000
[  274.807037][T10101] netlink: 'syz.1.950': attribute type 11 has an invalid length.
[  274.836976][T10094] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  274.882228][T10101] netlink: 'syz.1.950': attribute type 11 has an invalid length.
[  274.934046][T10094] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  274.967133][T10101] netlink: 204 bytes leftover after parsing attributes in process `syz.1.950'.
[  275.028716][T10094] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  275.177844][T10094] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  275.290818][T10113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.951'.
[  275.379647][T10094] lo speed is unknown, defaulting to 1000
[  275.419870][T10094] lo speed is unknown, defaulting to 1000
[  275.448065][T10094] lo speed is unknown, defaulting to 1000
[  275.473513][T10094] lo speed is unknown, defaulting to 1000
[  275.500165][T10094] lo speed is unknown, defaulting to 1000
[  275.754304][T10125] netlink: 48 bytes leftover after parsing attributes in process `syz.1.955'.
[  275.801406][T10127] bridge_slave_1: left allmulticast mode
[  275.828345][T10127] bridge_slave_1: left promiscuous mode
[  275.845239][T10127] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.906988][T10127] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  275.999670][T10130] .70·X: renamed from hsr0
[  276.017204][T10130] .70·X: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  276.049784][T10130] .70·X: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  276.118434][T10130] .70·X: entered allmulticast mode
[  276.150513][T10130] hsr_slave_0: entered allmulticast mode
[  276.175892][T10130] hsr_slave_1: entered allmulticast mode
[  276.211252][T10130] A link change request failed with some changes committed already. Interface .70·X may have been left with an inconsistent configuration, please check.
[  276.978121][T10152] netlink: 'syz.1.959': attribute type 1 has an invalid length.
[  277.029396][T10140] __nla_validate_parse: 61 callbacks suppressed
[  277.029418][T10140] netlink: 36 bytes leftover after parsing attributes in process `syz.4.957'.
[  277.084627][T10140] netlink: 36 bytes leftover after parsing attributes in process `syz.4.957'.
[  277.204240][T10140] netlink: 36 bytes leftover after parsing attributes in process `syz.4.957'.
[  277.249078][T10140] netlink: 36 bytes leftover after parsing attributes in process `syz.4.957'.
[  277.356499][T10140] netlink: 36 bytes leftover after parsing attributes in process `syz.4.957'.
[  277.387053][T10163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.959'.
[  277.439008][T10140] netlink: 36 bytes leftover after parsing attributes in process `syz.4.957'.
[  277.491361][T10140] netlink: 36 bytes leftover after parsing attributes in process `syz.4.957'.
[  277.545832][T10140] netlink: 36 bytes leftover after parsing attributes in process `syz.4.957'.
[  277.606424][T10140] netlink: 36 bytes leftover after parsing attributes in process `syz.4.957'.
[  277.874748][T10140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  278.885338][T10140] dummy0: left allmulticast mode
[  278.923381][T10147] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  278.925198][T10152] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  279.132994][ T1167] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.153943][ T1167] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.195786][ T1167] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.222981][ T1167] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.255198][T10184] netlink: Unknown conntrack attr (0)
[  279.332063][T10184] netlink: 'syz.4.966': attribute type 4 has an invalid length.
[  279.557259][T10201] netlink: 'syz.2.968': attribute type 2 has an invalid length.
[  280.251325][T10233] wg1 speed is unknown, defaulting to 1000
[  280.835417][T10255] xt_hashlimit: max too large, truncated to 1048576
[  280.866339][T10255] xt_ecn: cannot match TCP bits for non-tcp packets
[  280.934253][T10266] vlan4: entered promiscuous mode
[  280.944186][T10267] sctp: [Deprecated]: syz.2.982 (pid 10267) Use of int in maxseg socket option.
[  280.944186][T10267] Use struct sctp_assoc_value instead
[  280.978566][T10266] bridge0: entered promiscuous mode
[  281.303975][T10265] wg1 speed is unknown, defaulting to 1000
[  281.307555][T10233] lo speed is unknown, defaulting to 1000
[  282.030310][T10301] netlink: 'syz.3.990': attribute type 9 has an invalid length.
[  282.083880][T10265] lo speed is unknown, defaulting to 1000
[  282.223135][T10299] wg1 speed is unknown, defaulting to 1000
[  282.771196][T10325] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  283.183129][T10346] __nla_validate_parse: 291 callbacks suppressed
[  283.183153][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.998'.
[  283.307241][T10299] lo speed is unknown, defaulting to 1000
[  283.977409][T10366] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1002'.
[  284.110299][T10369] x_tables: unsorted underflow at hook 4
[  284.117518][T10366] xt_CT: No such helper "netbios-ns"
[  285.022289][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1009'.
[  285.038514][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1009'.
[  285.050420][T10405] netlink: 58 bytes leftover after parsing attributes in process `syz.2.1009'.
[  285.160828][T10410] netlink: 'syz.3.1011': attribute type 1 has an invalid length.
[  285.169472][T10410] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1011'.
[  285.180650][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1011'.
[  285.450199][T10408] team0 (unregistering): Port device team_slave_0 removed
[  285.694278][T10408] team0 (unregistering): Port device team_slave_1 removed
[  286.417678][T10444] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1019'.
[  286.909723][T10468] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1028'.
[  286.955694][T10475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1031'.
[  287.473201][T10498] wg1 speed is unknown, defaulting to 1000
[  287.659324][T10515] sctp: [Deprecated]: syz.4.1041 (pid 10515) Use of struct sctp_assoc_value in delayed_ack socket option.
[  287.659324][T10515] Use struct sctp_sack_info instead
[  287.876023][T10521] netlink: 'syz.2.1043': attribute type 1 has an invalid length.
[  287.912648][T10522] netlink: 'syz.2.1043': attribute type 1 has an invalid length.
[  288.098637][T10521] 8021q: adding VLAN 0 to HW filter on device bond3
[  288.197966][T10527] bond3: (slave veth0_to_bond): making interface the new active one
[  288.224732][T10527] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  288.314440][T10498] lo speed is unknown, defaulting to 1000
[  288.436036][T10542] __nla_validate_parse: 1 callbacks suppressed
[  288.436057][T10542] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1048'.
[  288.480224][T10542] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  288.517774][T10544] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1047'.
[  288.543551][T10540] IPv6: NLM_F_CREATE should be specified when creating new route
[  288.571592][T10540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  288.579431][T10540] IPv6: NLM_F_CREATE should be set when creating new route
[  288.587399][T10540] IPv6: NLM_F_CREATE should be set when creating new route
[  288.595711][T10540] IPv6: NLM_F_CREATE should be set when creating new route
[  288.924211][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'.
[  289.154243][T10563] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1051'.
[  289.164512][T10564] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1051'.
[  289.606649][T10587] xt_hashlimit: max too large, truncated to 1048576
[  289.629444][T10587] xt_bpf: check failed: parse error
[  289.936113][T10605] sctp: [Deprecated]: syz.4.1062 (pid 10605) Use of struct sctp_assoc_value in delayed_ack socket option.
[  289.936113][T10605] Use struct sctp_sack_info instead
[  290.002923][T10611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1063'.
[  290.332083][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1064'.
[  290.664973][T10634] netlink: 'syz.4.1069': attribute type 1 has an invalid length.
[  290.810057][T10634] 8021q: adding VLAN 0 to HW filter on device bond4
[  290.863028][T10634] batman_adv: batadv0: Adding interface: dummy0
[  290.879484][T10634] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  290.977603][T10634] x_tables: duplicate underflow at hook 1
[  291.005560][T10634] batman_adv: batadv0: Removing interface: dummy0
[  291.025339][T10634] netlink: ct family unspecified
[  291.037403][T10634] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.177962][T10664] netlink: 41 bytes leftover after parsing attributes in process `syz.2.1070'.
[  291.195835][T10664] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1070'.
[  291.214692][ T5576] lo speed is unknown, defaulting to 1000
[  291.256018][T10666] tipc: Started in network mode
[  291.261476][T10666] tipc: Node identity 7e2a78bcd725, cluster identity 4711
[  291.278466][T10666] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.355808][T10666] tipc: Disabling bearer <eth:syzkaller0>
[  291.584071][T10674] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.1078'.
[  291.594855][T10674] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  291.903768][T10686] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.918417][T10687] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  292.149685][T10696] openvswitch: netlink: Flow actions attr not present in new flow.
[  292.484752][T10708] wg1 speed is unknown, defaulting to 1000
[  292.725383][T10717] bond0: entered promiscuous mode
[  292.750971][T10717] bond0: left promiscuous mode
[  292.994022][T10722] syzkaller0: entered promiscuous mode
[  293.016017][T10722] syzkaller0: entered allmulticast mode
[  293.339871][ T6140] IPVS: starting estimator thread 0...
[  293.448268][T10736] IPVS: using max 29 ests per chain, 69600 per kthread
[  293.527860][T10728] wg1 speed is unknown, defaulting to 1000
[  293.540423][T10708] lo speed is unknown, defaulting to 1000
[  293.971505][T10757] __nla_validate_parse: 2 callbacks suppressed
[  293.971526][T10757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1100'.
[  294.076416][T10728] lo speed is unknown, defaulting to 1000
[  294.510995][T10738] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  294.832442][T10774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1103'.
[  295.064748][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'.
[  295.618326][ T5856] Bluetooth: hci3: command 0x0406 tx timeout
[  296.202410][T10821] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1114'.
[  296.630128][T10834] wg1 speed is unknown, defaulting to 1000
[  296.742814][T10846] netlink: 'syz.0.1117': attribute type 9 has an invalid length.
[  297.353076][T10872] tc_dump_action: action bad kind
[  297.401195][T10874] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1125'.
[  297.571853][T10834] lo speed is unknown, defaulting to 1000
[  297.733014][T10891] netlink: 'syz.3.1130': attribute type 2 has an invalid length.
[  297.741447][T10891] netlink: 'syz.3.1130': attribute type 11 has an invalid length.
[  297.751057][T10891] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1130'.
[  297.771123][T10888] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  297.958048][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1131'.
[  297.969002][ T5576] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  298.140379][T10903] pimreg: entered allmulticast mode
[  298.530003][ T5576] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  298.735511][T10927] netlink: 'syz.1.1140': attribute type 32 has an invalid length.
[  298.792707][T10927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1140'.
[  298.902363][  T491] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  299.122447][T10938] wg1 speed is unknown, defaulting to 1000
[  299.515695][T10953] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1150'.
[  299.551067][T10951] geneve2: entered promiscuous mode
[  299.570664][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1150'.
[  299.573274][  T491] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.604193][  T491] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.639374][  T491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.684531][  T491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.939033][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  299.981081][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  300.119496][   T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  300.381236][T10938] lo speed is unknown, defaulting to 1000
[  300.769239][T11016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1165'.
[  300.835123][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1165'.
[  300.994570][T11026] netlink: 'syz.0.1168': attribute type 39 has an invalid length.
[  301.020191][T11029] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1165'.
[  301.314671][T11016] 8021q: adding VLAN 0 to HW filter on device bond4
[  301.410018][T11017] bond4 (unregistering): Released all slaves
[  301.566916][T11036] 5Ò: entered promiscuous mode
[  301.870134][T11042] netlink: 'syz.0.1173': attribute type 11 has an invalid length.
[  301.905754][T11042] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1173'.
[  302.373415][T11072] netlink: 'syz.3.1182': attribute type 13 has an invalid length.
[  302.389798][T11076] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1183'.
[  302.428421][T11083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1182'.
[  302.485859][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1182'.
[  302.527859][ T1124] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  302.540345][ T1124] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  302.598305][ T1124] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  302.636187][ T1124] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  302.753696][T11095] gtp0: entered promiscuous mode
[  302.759194][T11095] gtp0: entered allmulticast mode
[  302.812493][T11095] veth6: entered allmulticast mode
[  302.872846][T11099] gre1: entered promiscuous mode
[  302.953239][T11106] netlink: 'syz.3.1189': attribute type 39 has an invalid length.
[  302.979275][T11095] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20005
[  303.072477][T11113] wg1 speed is unknown, defaulting to 1000
[  303.170688][T11119] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1193'.
[  303.187235][ T6140] IPVS: starting estimator thread 0...
[  303.234999][T11118] pim6reg: entered allmulticast mode
[  303.242368][T11118] pim6reg: left allmulticast mode
[  303.278260][T11120] IPVS: using max 24 ests per chain, 57600 per kthread
[  303.613345][T11135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.683232][T11113] lo speed is unknown, defaulting to 1000
[  303.842592][T11143] x_tables: duplicate underflow at hook 3
[  304.018462][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  304.800476][T11165] wg1 speed is unknown, defaulting to 1000
[  304.950140][T11176] netlink: 'syz.3.1208': attribute type 1 has an invalid length.
[  305.034480][T11176] bond2: entered promiscuous mode
[  305.059070][T11176] bond2: entered allmulticast mode
[  305.066052][T11176] 8021q: adding VLAN 0 to HW filter on device bond2
[  305.257271][T11187] __nla_validate_parse: 4 callbacks suppressed
[  305.257292][T11187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1211'.
[  305.613690][T11165] lo speed is unknown, defaulting to 1000
[  306.342235][T11224] can: request_module (can-proto-0) failed.
[  306.555539][T11232] netlink: 'syz.0.1221': attribute type 1 has an invalid length.
[  306.595125][T11232] sctp: [Deprecated]: syz.0.1221 (pid 11232) Use of int in max_burst socket option.
[  306.595125][T11232] Use struct sctp_assoc_value instead
[  307.161645][T11250] netlink: 'syz.2.1226': attribute type 1 has an invalid length.
[  307.185214][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'.
[  307.197210][T11252] batadv1: entered promiscuous mode
[  307.203332][T11252] batadv1: entered allmulticast mode
[  307.209851][T11250] netlink: 'syz.2.1226': attribute type 1 has an invalid length.
[  307.267159][T11250] syzkaller1: entered promiscuous mode
[  307.274972][T11250] syzkaller1: entered allmulticast mode
[  307.484811][T11265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1231'.
[  307.549508][T11267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1231'.
[  307.673654][T11265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  307.804925][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1234'.
[  307.806170][T11276] pimreg: entered allmulticast mode
[  307.842632][T11279] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1236'.
[  307.900801][T11277] ipvlan1: entered promiscuous mode
[  307.928969][T11277] ipvlan1: left promiscuous mode
[  308.029774][T11276] syzkaller0: entered promiscuous mode
[  308.055706][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1240'.
[  308.057186][T11276] syzkaller0: entered allmulticast mode
[  308.126132][T11276] pimreg: left allmulticast mode
[  308.632662][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'.
[  309.119099][T11346] netlink: 'syz.4.1253': attribute type 11 has an invalid length.
[  309.134634][T11346] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1253'.
[  309.154062][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'.
[  309.663746][T11376] netlink: 'syz.2.1262': attribute type 1 has an invalid length.
[  309.681174][T11369] syzkaller0: entered promiscuous mode
[  309.701296][T11376] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  309.749951][T11384] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  309.749951][T11384] Please contact the netfilter-devel mailing list or update your nftables rules.
[  310.412675][  T491] nci: nci_rx_work: unknown MT 0x4
[  312.506649][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  313.051599][T11409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  313.554320][T11428] __nla_validate_parse: 10 callbacks suppressed
[  313.554344][T11428] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1274'.
[  313.628471][T11429] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1274'.
[  313.711297][T11416] syzkaller0: entered promiscuous mode
[  313.734746][T11416] syzkaller0: entered allmulticast mode
[  313.857932][T11435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1271'.
[  313.880912][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1271'.
[  316.983302][T11469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1282'.
[  317.184397][T11479] batadv_slave_1: entered promiscuous mode
[  317.285017][T11479] batadv_slave_1: left promiscuous mode
[  317.405719][T11490] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1289'.
[  317.986930][T11488] wg1 speed is unknown, defaulting to 1000
[  318.483180][T11517] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1292'.
[  318.649322][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  318.813337][T11527] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1296'.
[  318.847120][ T6139] wg1 speed is unknown, defaulting to 1000
[  318.879017][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  319.110486][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1297'.
[  319.140159][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1297'.
[  319.423918][T11488] lo speed is unknown, defaulting to 1000
[  319.760823][T11564] nbd: must specify a size in bytes for the device
[  321.206220][T11618] netlink: 'syz.3.1312': attribute type 12 has an invalid length.
[  322.177027][T11643] : renamed from veth0_to_bond
[  322.316785][T11645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1317'.
[  322.397209][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1318'.
[  322.725603][T11658] netlink: 'syz.4.1318': attribute type 1 has an invalid length.
[  323.415776][T11677] 8021q: adding VLAN 0 to HW filter on device .`
[  323.450545][T11677] 8021q: adding VLAN 0 to HW filter on device team0
[  323.505758][T11677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  323.673567][T11694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1327'.
[  323.997528][T11711] netlink: 'syz.4.1332': attribute type 1 has an invalid length.
[  324.028655][T11711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  324.053215][T11713] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1331'.
[  324.177894][T11718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1334'.
[  324.204813][T11718] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1334'.
[  324.888628][T11743] netlink: 'syz.4.1339': attribute type 8 has an invalid length.
[  324.923372][T11743] netlink: 'syz.4.1339': attribute type 4 has an invalid length.
[  325.260565][T11751] wg1 speed is unknown, defaulting to 1000
[  325.876311][T11779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1346'.
[  326.157040][T11791] netlink: 'syz.2.1349': attribute type 39 has an invalid length.
[  326.407194][T11751] lo speed is unknown, defaulting to 1000
[  326.414794][T11781] wg1 speed is unknown, defaulting to 1000
[  326.731312][T11800] netlink: 'syz.2.1350': attribute type 13 has an invalid length.
[  326.771718][T11800] netlink: 'syz.2.1350': attribute type 17 has an invalid length.
[  328.061940][T11822] netlink: 'syz.1.1352': attribute type 1 has an invalid length.
[  328.097262][T11822] netlink: 'syz.1.1352': attribute type 2 has an invalid length.
[  328.140954][T11799] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.149890][T11799] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.114349][T11799] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  329.138439][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  329.155808][T11799] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  330.140328][T11800] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.175412][T11800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  330.268859][T11781] lo speed is unknown, defaulting to 1000
[  330.370941][ T6285] wg1 speed is unknown, defaulting to 1000
[  330.378032][ T6285] syz0: Port: 1 Link DOWN
[  330.386371][ T6139] wg1 speed is unknown, defaulting to 1000
[  330.404624][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.422422][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.623095][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.664901][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.977552][T11803] Set syz1 is full, maxelem 65536 reached
[  332.567334][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1369'.
[  332.599869][T11906] syzkaller1: entered promiscuous mode
[  332.614183][T11906] syzkaller1: entered allmulticast mode
[  332.679189][T11910] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1372'.
[  332.835095][T11917] netlink: 1072 bytes leftover after parsing attributes in process `syz.1.1371'.
[  332.894812][T11922] netlink: 1072 bytes leftover after parsing attributes in process `syz.1.1371'.
[  332.965137][T11927] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  333.234138][T11936] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  333.417741][T11937] wg1 speed is unknown, defaulting to 1000
[  333.593707][T11951] netlink: zone id is out of range
[  333.648367][T11951] netlink: zone id is out of range
[  333.706695][T11951] netlink: zone id is out of range
[  333.755637][T11951] netlink: zone id is out of range
[  333.800177][T11951] netlink: zone id is out of range
[  333.836279][T11951] netlink: zone id is out of range
[  334.100958][T11962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1382'.
[  334.128455][T11962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1382'.
[  334.197513][T11965] xt_hashlimit: size too large, truncated to 1048576
[  334.424698][T11974] bridge_slave_0 (unregistering): left allmulticast mode
[  334.472444][T11974] bridge_slave_0 (unregistering): left promiscuous mode
[  334.518665][T11974] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.717940][T11935] wg1 speed is unknown, defaulting to 1000
[  334.717968][T11937] lo speed is unknown, defaulting to 1000
[  334.969891][ T6285] syzkaller1: tun_net_xmit 90
[  335.110852][T11996] netlink: 'syz.0.1388': attribute type 13 has an invalid length.
[  335.505949][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1391'.
[  335.720407][T11998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1389'.
[  335.885510][T12001] gre1: entered promiscuous mode
[  336.032133][T11935] lo speed is unknown, defaulting to 1000
[  336.326706][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'.
[  336.348031][T12035] vlan0: entered allmulticast mode
[  336.366249][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'.
[  336.381349][T12035] bond0: entered allmulticast mode
[  336.409317][T12035] bond_slave_0: entered allmulticast mode
[  336.442147][T12035] bond_slave_1: entered allmulticast mode
[  336.757839][T12053] tipc: New replicast peer: 255.255.255.255
[  336.814752][T12053] tipc: Enabled bearer <udp:syz2>, priority 10
[  336.836842][T12059] sch_tbf: burst 237 is lower than device lo mtu (65550) !
[  337.345785][T12047] ipvlan1: entered promiscuous mode
[  337.385386][T12047] ipvlan1: left promiscuous mode
[  337.694561][T12089] netlink: 'syz.2.1404': attribute type 11 has an invalid length.
[  337.741167][T12090] __nla_validate_parse: 3 callbacks suppressed
[  337.741189][T12090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1404'.
[  337.760479][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1405'.
[  337.929024][ T6275] tipc: Node number set to 126111361
[  338.177879][T12113] netlink: 'syz.2.1410': attribute type 15 has an invalid length.
[  338.953239][T12148] Bluetooth: MGMT ver 1.23
[  339.014673][T12150] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1416'.
[  339.076053][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'.
[  339.089325][T12153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1418'.
[  339.102320][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'.
[  339.109150][T12146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1416'.
[  339.112793][T12153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1418'.
[  339.327179][T12156] wg1 speed is unknown, defaulting to 1000
[  339.448779][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1420'.
[  339.500304][T12161] block nbd0: server does not support multiple connections per device.
[  339.579273][T12161] block nbd0: shutting down sockets
[  339.801860][T12173] nbd: must specify a size in bytes for the device
[  341.918451][T12156] lo speed is unknown, defaulting to 1000
[  341.918617][T12163] wg1 speed is unknown, defaulting to 1000
[  342.201284][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1428'.
[  342.244871][T12195] syzkaller1: tun_chr_ioctl cmd 1074025677
[  342.251953][T12195] syzkaller1: linktype set to 270
[  342.259842][T12194] vlan0: entered promiscuous mode
[  342.273958][T12192] bridge0: port 3(erspan0) entered blocking state
[  342.290378][T12192] bridge0: port 3(erspan0) entered disabled state
[  342.306497][T12192] erspan0: entered allmulticast mode
[  342.359820][T12192] erspan0: entered promiscuous mode
[  342.390582][T12195] erspan0: left allmulticast mode
[  342.398393][T12195] erspan0: left promiscuous mode
[  342.405906][T12195] bridge0: port 3(erspan0) entered disabled state
[  342.439726][T12163] lo speed is unknown, defaulting to 1000
[  342.844978][T12203] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1431'.
[  342.934785][T12209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1433'.
[  343.555865][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'.
[  343.602646][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'.
[  344.178296][ T5851] Bluetooth: hci4: command 0x0405 tx timeout
[  344.662718][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1448'.
[  344.674057][T12267] ªªªªª: renamed from vlan0
[  344.685601][T12267] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1450'.
[  344.697639][T12268] net_ratelimit: 349 callbacks suppressed
[  344.697659][T12268] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.832479][T12271] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1449'.
[  344.951765][T12274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1451'.
[  344.987036][T12269] dvmrp1: tun_chr_ioctl cmd 2147767507
[  345.021487][T12277] netlink: 'syz.1.1452': attribute type 2 has an invalid length.
[  345.593843][T12286] Cannot find del_set index 4 as target
[  345.759600][T12296] netlink: 'syz.2.1455': attribute type 3 has an invalid length.
[  345.807586][T12296] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20004
[  346.044825][T12303] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1459'.
[  346.046962][T12306] netlink: 'syz.4.1461': attribute type 1 has an invalid length.
[  346.348480][T12306] 8021q: adding VLAN 0 to HW filter on device bond5
[  346.641726][T12321] xt_CT: You must specify a L4 protocol and not use inversions on it
[  347.546905][T12338] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1468'.
[  350.545925][T12364] __nla_validate_parse: 3 callbacks suppressed
[  350.545945][T12364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1475'.
[  350.799307][T12375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1478'.
[  350.815224][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1479'.
[  350.991043][T12379] bond6: entered promiscuous mode
[  351.020354][T12379] bond6: entered allmulticast mode
[  351.272783][T12394] netlink: 'syz.3.1481': attribute type 9 has an invalid length.
[  351.843712][T12411] syzkaller1: entered promiscuous mode
[  351.870990][T12411] syzkaller1: entered allmulticast mode
[  351.908210][T12415] tun0: tun_chr_ioctl cmd 1074812118
[  351.928755][T12415] tun0: tun_chr_ioctl cmd 1074033169
[  351.990037][T12417] veth1_ma8Yap: renamed from macsec0
[  352.007971][T12417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1489'.
[  352.168011][T12421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.249349][T12425] pimreg0: tun_chr_ioctl cmd 1074025681
[  352.431884][T12437] sctp: [Deprecated]: syz.3.1494 (pid 12437) Use of int in maxseg socket option.
[  352.431884][T12437] Use struct sctp_assoc_value instead
[  352.634122][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1497'.
[  352.665312][T12449] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  352.678379][T12449] bond4 (unregistering): Released all slaves
[  352.710610][T12440] wg1 speed is unknown, defaulting to 1000
[  353.308491][T12440] lo speed is unknown, defaulting to 1000
[  353.728010][T12493] netlink: zone id is out of range
[  353.823033][T12493] netlink: set zone limit has 4 unknown bytes
[  353.940405][T12497] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  354.371195][T12515] geneve3: entered promiscuous mode
[  354.414348][ T1124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.435806][ T1124] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.445709][ T1124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.457306][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'.
[  354.467429][ T1124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.896024][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'.
[  354.905950][T12544] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1525'.
[  354.928277][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'.
[  355.080727][T12551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1525'.
[  355.516567][T12571] can: request_module (can-proto-0) failed.
[  355.564317][T12561] .70·X: left allmulticast mode
[  355.572627][T12561] hsr_slave_0: left allmulticast mode
[  355.584339][T12561] hsr_slave_1: left allmulticast mode
[  355.598077][T12561] vlan2: left promiscuous mode
[  355.610588][T12561] bond4: left promiscuous mode
[  355.615620][T12561] veth3: left promiscuous mode
[  355.668465][ T1167] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  355.681939][ T1167] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  355.708617][ T1167] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  355.733525][ T1167] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  356.031834][T12591] __nla_validate_parse: 5 callbacks suppressed
[  356.031856][T12591] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1537'.
[  356.155417][T12601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  356.163347][T12601] IPv6: NLM_F_CREATE should be set when creating new route
[  356.170938][T12601] IPv6: NLM_F_CREATE should be set when creating new route
[  356.267449][T12597] wg1 speed is unknown, defaulting to 1000
[  356.531732][T12609] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  356.685979][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'.
[  356.702286][T12621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1546'.
[  356.731241][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1545'.
[  356.765525][T12622] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1546'.
[  356.766681][T12621] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1546'.
[  357.092009][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1547'.
[  357.110422][T12607] wg1 speed is unknown, defaulting to 1000
[  357.111312][T12597] lo speed is unknown, defaulting to 1000
[  357.123603][T12636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1547'.
[  357.137632][T12636] netlink: 'syz.3.1547': attribute type 15 has an invalid length.
[  357.861908][T12614] wg1 speed is unknown, defaulting to 1000
[  358.371598][T12614] lo speed is unknown, defaulting to 1000
[  358.456837][T12607] lo speed is unknown, defaulting to 1000
[  358.644425][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'.
[  358.735459][T12690] ipvlan2: entered allmulticast mode
[  358.743819][T12690] syz_tun: entered allmulticast mode
[  359.293341][T12703] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  359.547663][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1559'.
[  360.176365][T12718] xt_TCPMSS: Only works on TCP SYN packets
[  360.369831][ T6139] IPVS: starting estimator thread 0...
[  360.459470][T12728] IPVS: using max 27 ests per chain, 64800 per kthread
[  360.601591][   T29] audit: type=1804 audit(1777146861.712:6): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1572" name="/newroot/288/memory.events" dev="tmpfs" ino=1506 res=1 errno=0
[  360.613029][T12741] Unsupported essiv instantiation: essiv(cbc(camellia),sha512)
[  360.660936][   T29] audit: type=1800 audit(1777146861.742:7): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1572" name="memory.events" dev="tmpfs" ino=1506 res=0 errno=0
[  360.734923][   T29] audit: type=1804 audit(1777146861.742:8): pid=12740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1572" name="/newroot/288/memory.events" dev="tmpfs" ino=1506 res=1 errno=0
[  360.990325][T12763] netlink: 'syz.3.1579': attribute type 20 has an invalid length.
[  361.103477][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  361.103569][T12763] netlink: 'syz.3.1579': attribute type 20 has an invalid length.
[  361.135001][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  361.163200][T12763] __nla_validate_parse: 2 callbacks suppressed
[  361.163221][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'.
[  361.173193][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  361.183957][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1582'.
[  361.192482][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  361.286624][T12770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  361.324946][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1582'.
[  361.509446][T12789] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1585'.
[  361.532311][T12777] wg1 speed is unknown, defaulting to 1000
[  362.391458][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1592'.
[  362.418329][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  362.488635][T12824] ip6tnl0: Caught tx_queue_len zero misconfig
[  362.523397][T12777] lo speed is unknown, defaulting to 1000
[  363.200247][T12857] netlink: 'syz.2.1599': attribute type 10 has an invalid length.
[  363.469295][T12873] netlink: 'syz.4.1601': attribute type 1 has an invalid length.
[  363.537207][T12869] veth0: entered promiscuous mode
[  363.563662][T12874] bond0: entered promiscuous mode
[  363.588323][T12874] bond_slave_0: entered promiscuous mode
[  363.617502][T12874] bond_slave_1: entered promiscuous mode
[  363.917461][T12892] netlink: 'syz.4.1604': attribute type 1 has an invalid length.
[  363.948804][T12892] netlink: 'syz.4.1604': attribute type 2 has an invalid length.
[  364.244988][T12902] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1605'.
[  364.362787][T12856] bond0: left promiscuous mode
[  364.390549][T12856] bond_slave_0: left promiscuous mode
[  364.436472][T12856] bond_slave_1: left promiscuous mode
[  364.515868][T12856] veth0: left promiscuous mode
[  364.525831][T12928] netlink: 'syz.4.1608': attribute type 3 has an invalid length.
[  365.665822][T12967] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1613'.
[  366.233435][T12982] netlink: 'syz.2.1619': attribute type 3 has an invalid length.
[  366.264232][T12982] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1619'.
[  367.623649][ T5856] Bluetooth: hci4: command 0x0405 tx timeout
[  371.689886][T12974] wg1 speed is unknown, defaulting to 1000
[  371.744780][T12998] xt_l2tp: missing protocol rule (udp|l2tpip)
[  371.816501][T13002] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1622'.
[  371.849073][T13002] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1622'.
[  371.869553][T13002] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1622'.
[  371.881075][T13002] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1622'.
[  371.897148][T13002] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1622'.
[  371.935376][T13002] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1622'.
[  371.961323][T13002] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1622'.
[  371.983033][T13002] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1622'.
[  372.008673][T13002] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1622'.
[  372.032940][T13002] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1622'.
[  372.266007][T12974] lo speed is unknown, defaulting to 1000
[  373.372425][T13043] netlink: 'syz.0.1638': attribute type 4 has an invalid length.
[  373.414432][T13043] netlink: 'syz.0.1638': attribute type 4 has an invalid length.
[  374.150644][T13071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  374.360280][T13085] netlink: 'syz.3.1655': attribute type 1 has an invalid length.
[  374.622998][T13091] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  374.639990][T13091] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  374.748894][T13103] netlink: 'syz.0.1658': attribute type 3 has an invalid length.
[  374.806865][T13095] bond4: (slave bridge4): Enslaving as an active interface with a down link
[  374.823752][T13085] 8021q: adding VLAN 0 to HW filter on device bond4
[  375.025294][T13109] netlink: 'syz.4.1659': attribute type 10 has an invalid length.
[  375.091799][T13109] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  375.111127][T13109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  375.137173][T13109] hsr0: entered promiscuous mode
[  375.150570][T13109] bridge0: port 3(hsr0) entered blocking state
[  375.162071][T13109] bridge0: port 3(hsr0) entered disabled state
[  375.192923][T13109] hsr0: entered allmulticast mode
[  375.208664][T13109] hsr_slave_0: entered allmulticast mode
[  375.214647][T13109] hsr_slave_1: entered allmulticast mode
[  375.469693][T13119] bond8: entered promiscuous mode
[  375.476289][T13119] 8021q: adding VLAN 0 to HW filter on device bond8
[  375.492801][T13136] Unsupported ieee802154 address type: 0
[  375.501522][T13119] bond8 (unregistering): Released all slaves
[  375.826245][T13146] bond0: Caught tx_queue_len zero misconfig
[  376.152926][T13155] wg1 speed is unknown, defaulting to 1000
[  376.676683][T13173] netlink: 'syz.3.1676': attribute type 9 has an invalid length.
[  376.697890][T13173] netlink: 'syz.3.1676': attribute type 6 has an invalid length.
[  376.713090][T13173] netlink: 'syz.3.1676': attribute type 7 has an invalid length.
[  376.724331][T13173] netlink: 'syz.3.1676': attribute type 8 has an invalid length.
[  376.912579][T13185] __nla_validate_parse: 69 callbacks suppressed
[  376.912600][T13185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1675'.
[  376.954030][T13186] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1678'.
[  377.014403][T13188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1678'.
[  377.043875][T13177] batadv_slave_0: entered promiscuous mode
[  377.227791][T13155] lo speed is unknown, defaulting to 1000
[  377.240326][T13170] batadv_slave_0: left promiscuous mode
[  377.403323][T13197] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20000
[  377.728647][T13206] x_tables: unsorted entry at hook 2
[  377.762047][T13209] netlink: 'syz.3.1682': attribute type 1 has an invalid length.
[  378.005715][T13209] 8021q: adding VLAN 0 to HW filter on device bond5
[  378.255037][T13228] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1687'.
[  378.281050][T13230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1686'.
[  378.773499][T13239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1690'.
[  378.825215][T13245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1690'.
[  378.847065][T13242] wg1 speed is unknown, defaulting to 1000
[  379.931736][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1696'.
[  380.150636][T13242] lo speed is unknown, defaulting to 1000
[  380.320544][T13268] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1698'.
[  380.857553][T13290] netlink: 'syz.1.1706': attribute type 1 has an invalid length.
[  381.139481][T13300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1709'.
[  382.627482][T13335] wg1 speed is unknown, defaulting to 1000
[  382.840919][T13343] syzkaller0: entered promiscuous mode
[  382.858332][T13343] syzkaller0: entered allmulticast mode
[  382.964142][T13343] netlink: 'syz.0.1721': attribute type 39 has an invalid length.
[  383.124277][T13335] lo speed is unknown, defaulting to 1000
[  384.360938][T13315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  384.487218][T13368] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1727'.
[  384.517698][T13368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  384.679402][T13382] netlink: 'syz.4.1729': attribute type 1 has an invalid length.
[  384.877052][T13382] 8021q: adding VLAN 0 to HW filter on device bond7
[  384.906760][T13388] vlan4: entered promiscuous mode
[  384.912149][T13388] bond7: entered promiscuous mode
[  384.918004][T13388] vlan4: entered allmulticast mode
[  384.923509][T13388] bond7: entered allmulticast mode
[  385.124810][T13400] syzkaller1: tun_chr_ioctl cmd 1074025677
[  385.139455][T13400] syzkaller1: linktype set to 825
[  385.172044][T13403] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  385.724778][T13424] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1739'.
[  385.777501][T13423] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1738'.
[  385.825881][T13423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1738'.
[  385.851080][T13423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1738'.
[  385.937654][T13432] x_tables: duplicate underflow at hook 3
[  386.213958][T13446] bond4: Unable to set up delay as MII monitoring is disabled
[  386.592148][T13446] bond4 (unregistering): Released all slaves
[  386.649535][T13449] 
[  386.651926][T13449] ======================================================
[  386.659406][T13449] WARNING: possible circular locking dependency detected
[  386.667145][T13449] syzkaller #0 Not tainted
[  386.671757][T13449] ------------------------------------------------------
[  386.679316][T13449] syz.0.1744/13449 is trying to acquire lock:
[  386.685494][T13449] ffffffff8ff61938 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860
[  386.695029][T13449] 
[  386.695029][T13449] but task is already holding lock:
[  386.702688][T13449] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860
[  386.712497][T13449] 
[  386.712497][T13449] which lock already depends on the new lock.
[  386.712497][T13449] 
[  386.723109][T13449] 
[  386.723109][T13449] the existing dependency chain (in reverse order) is:
[  386.732326][T13449] 
[  386.732326][T13449] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  386.740429][T13449]        _raw_spin_lock_bh+0x36/0x50
[  386.746731][T13449]        nr_rt_ioctl+0x40c/0xf90
[  386.751937][T13449]        sock_do_ioctl+0x101/0x320
[  386.757251][T13449]        sock_ioctl+0x5c6/0x7f0
[  386.762191][T13449]        __se_sys_ioctl+0xfc/0x170
[  386.767582][T13449]        do_syscall_64+0x15f/0xf80
[  386.772967][T13449]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.779392][T13449] 
[  386.779392][T13449] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  386.787573][T13449]        _raw_spin_lock_bh+0x36/0x50
[  386.793135][T13449]        nr_rt_ioctl+0x215/0xf90
[  386.798422][T13449]        sock_do_ioctl+0x101/0x320
[  386.803722][T13449]        sock_ioctl+0x5c6/0x7f0
[  386.808672][T13449]        __se_sys_ioctl+0xfc/0x170
[  386.813804][T13449]        do_syscall_64+0x15f/0xf80
[  386.819365][T13449]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.826247][T13449] 
[  386.826247][T13449] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  386.834599][T13449]        __lock_acquire+0x15a5/0x2cf0
[  386.840114][T13449]        lock_acquire+0x106/0x350
[  386.845414][T13449]        _raw_spin_lock_bh+0x36/0x50
[  386.850896][T13449]        nr_rt_device_down+0xbe/0x860
[  386.856487][T13449]        nr_device_event+0x137/0x150
[  386.861957][T13449]        notifier_call_chain+0x1ad/0x3d0
[  386.867615][T13449]        netif_close_many+0x2ae/0x420
[  386.873028][T13449]        netif_close+0x160/0x220
[  386.877981][T13449]        dev_close+0x10a/0x220
[  386.882748][T13449]        bpq_device_event+0x377/0x6a0
[  386.888308][T13449]        notifier_call_chain+0x1ad/0x3d0
[  386.894044][T13449]        __dev_notify_flags+0x16d/0x310
[  386.900123][T13449]        netif_change_flags+0xe8/0x1a0
[  386.905854][T13449]        dev_change_flags+0x130/0x270
[  386.911747][T13449]        dev_ioctl+0x7b4/0x1150
[  386.917489][T13449]        sock_do_ioctl+0x23e/0x320
[  386.922780][T13449]        sock_ioctl+0x5c6/0x7f0
[  386.927726][T13449]        __se_sys_ioctl+0xfc/0x170
[  386.933111][T13449]        do_syscall_64+0x15f/0xf80
[  386.938581][T13449]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.945275][T13449] 
[  386.945275][T13449] other info that might help us debug this:
[  386.945275][T13449] 
[  386.955856][T13449] Chain exists of:
[  386.955856][T13449]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  386.955856][T13449] 
[  386.970343][T13449]  Possible unsafe locking scenario:
[  386.970343][T13449] 
[  386.978275][T13449]        CPU0                    CPU1
[  386.983826][T13449]        ----                    ----
[  386.989561][T13449]   lock(nr_neigh_list_lock);
[  386.994444][T13449]                                lock(&nr_node->node_lock);
[  387.002004][T13449]                                lock(nr_neigh_list_lock);
[  387.009221][T13449]   lock(nr_node_list_lock);
[  387.014082][T13449] 
[  387.014082][T13449]  *** DEADLOCK ***
[  387.014082][T13449] 
[  387.022505][T13449] 2 locks held by syz.0.1744/13449:
[  387.027984][T13449]  #0: ffffffff8fde4240 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  387.037010][T13449]  #1: ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860
[  387.047416][T13449] 
[  387.047416][T13449] stack backtrace:
[  387.053591][T13449] CPU: 0 UID: 0 PID: 13449 Comm: syz.0.1744 Not tainted syzkaller #0 PREEMPT(full) 
[  387.053614][T13449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  387.053624][T13449] Call Trace:
[  387.053634][T13449]  <TASK>
[  387.053642][T13449]  dump_stack_lvl+0xe8/0x150
[  387.053673][T13449]  print_circular_bug+0x2e1/0x300
[  387.053694][T13449]  check_noncircular+0x12e/0x150
[  387.053714][T13449]  __lock_acquire+0x15a5/0x2cf0
[  387.053743][T13449]  ? __lock_acquire+0x6b5/0x2cf0
[  387.053766][T13449]  ? dsa_user_netdevice_event+0x495/0x2850
[  387.053786][T13449]  ? packet_notifier+0x121/0xf70
[  387.053807][T13449]  ? nr_rt_device_down+0xbe/0x860
[  387.053820][T13449]  lock_acquire+0x106/0x350
[  387.053843][T13449]  ? nr_rt_device_down+0xbe/0x860
[  387.053859][T13449]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  387.053881][T13449]  ? nr_rt_device_down+0xbe/0x860
[  387.053895][T13449]  _raw_spin_lock_bh+0x36/0x50
[  387.053913][T13449]  ? nr_rt_device_down+0xbe/0x860
[  387.053928][T13449]  nr_rt_device_down+0xbe/0x860
[  387.053941][T13449]  ? nr_device_event+0x12f/0x150
[  387.053966][T13449]  nr_device_event+0x137/0x150
[  387.053989][T13449]  notifier_call_chain+0x1ad/0x3d0
[  387.054008][T13449]  netif_close_many+0x2ae/0x420
[  387.054030][T13449]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  387.054051][T13449]  ? __pfx_netif_close_many+0x10/0x10
[  387.054072][T13449]  ? bond_netdev_event+0x231/0xfa0
[  387.054094][T13449]  ? __neigh_ifdown+0x7fd/0x8c0
[  387.054117][T13449]  netif_close+0x160/0x220
[  387.054137][T13449]  ? __pfx_netif_close+0x10/0x10
[  387.054158][T13449]  ? __asan_memset+0x22/0x50
[  387.054175][T13449]  ? macvtap_device_event+0xd1/0x400
[  387.054193][T13449]  dev_close+0x10a/0x220
[  387.054208][T13449]  bpq_device_event+0x377/0x6a0
[  387.054229][T13449]  notifier_call_chain+0x1ad/0x3d0
[  387.054248][T13449]  __dev_notify_flags+0x16d/0x310
[  387.054264][T13449]  ? __pfx___dev_notify_flags+0x10/0x10
[  387.054278][T13449]  ? __dev_change_flags+0x5a0/0x7e0
[  387.054295][T13449]  ? __pfx___dev_change_flags+0x10/0x10
[  387.054311][T13449]  ? full_name_hash+0x92/0xe0
[  387.054328][T13449]  netif_change_flags+0xe8/0x1a0
[  387.054345][T13449]  dev_change_flags+0x130/0x270
[  387.054368][T13449]  dev_ioctl+0x7b4/0x1150
[  387.054392][T13449]  sock_do_ioctl+0x23e/0x320
[  387.054413][T13449]  ? __pfx_sock_do_ioctl+0x10/0x10
[  387.054431][T13449]  ? do_futex+0x333/0x420
[  387.054451][T13449]  sock_ioctl+0x5c6/0x7f0
[  387.054471][T13449]  ? __pfx_sock_ioctl+0x10/0x10
[  387.054489][T13449]  ? __fget_files+0x2a/0x420
[  387.054505][T13449]  ? __fget_files+0x3a0/0x420
[  387.054520][T13449]  ? __fget_files+0x2a/0x420
[  387.054536][T13449]  ? bpf_lsm_file_ioctl+0x9/0x20
[  387.054558][T13449]  ? __pfx_sock_ioctl+0x10/0x10
[  387.054576][T13449]  __se_sys_ioctl+0xfc/0x170
[  387.054595][T13449]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.054612][T13449]  do_syscall_64+0x15f/0xf80
[  387.054632][T13449]  ? trace_irq_disable+0x3b/0x140
[  387.054652][T13449]  ? clear_bhb_loop+0x40/0x90
[  387.054669][T13449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.054685][T13449] RIP: 0033:0x7f84d4d9cdd9
[  387.054700][T13449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  387.054714][T13449] RSP: 002b:00007f84d5c05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  387.054733][T13449] RAX: ffffffffffffffda RBX: 00007f84d5016180 RCX: 00007f84d4d9cdd9
[  387.054744][T13449] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 0000000000000005
[  387.054755][T13449] RBP: 00007f84d4e32d69 R08: 0000000000000000 R09: 0000000000000000
[  387.054764][T13449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  387.054774][T13449] R13: 00007f84d5016218 R14: 00007f84d5016180 R15: 00007ffccf7d57a8
[  387.054791][T13449]  </TASK>