last executing test programs:

1m14.178104955s ago: executing program 1 (id=3520):
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x100, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32658aeb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x100, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32658aeb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}]}], {0x14}}, 0xd4}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x400c491}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x400c491}, 0x0)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
r10 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r10, 0x29, 0x6, &(0x7f0000000040), 0x4)
sendmsg$kcm(r10, &(0x7f00000002c0)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, 0x3}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000540)="19", 0x1}], 0x1}, 0x0)
syz_emit_ethernet(0xfc1, &(0x7f00000013c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}, "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"}}}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r7], 0x1c}}, 0x0)
setsockopt$sock_attach_bpf(r10, 0x29, 0x6, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
sendmmsg$inet6(r9, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a80)="4117", 0x2}], 0x1}}], 0x1, 0x0)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090605fb0000002000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011000180c20000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
socket$netlink(0x10, 0x3, 0x0)

1m14.171222367s ago: executing program 1 (id=3526):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x200, 0x1, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/8, 0x8}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020)
r2 = socket$netlink(0x10, 0x3, 0x12)
sendmmsg(r2, &(0x7f0000000800), 0x2, 0x0)
unshare(0x22020600)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x3)
ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000500)=0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
getpeername$tipc(r4, &(0x7f0000000140)=@id, &(0x7f0000000200)=0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0x5, 0xb}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x40000)
r5 = socket$packet(0x11, 0x3, 0x300)
getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000240), &(0x7f0000000300)=0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14}}, 0x90}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x5c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "23ac0be944a67dbb0c316e5858e2fc020f8f7c1a7fad62123196735d"}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="28110000", @ANYRES16=r8, @ANYBLOB="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"], 0x1128}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @multicast}, 0x14)

1m13.172629136s ago: executing program 1 (id=3539):
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000380)={'vxcan1\x00', 0xfff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000090000000000000008000000850000002700000085000000d000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x17, 0x0, &(0x7f0000000900)="762f0800000000000001000000007dd38ed1d3fe590bfb", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, r2, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r4 = accept4(r1, &(0x7f00000000c0), &(0x7f00000001c0)=0x80, 0x40800)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r5, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x48001)

1m13.002474886s ago: executing program 1 (id=3542):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000280)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
write$cgroup_pressure(r2, &(0x7f0000000340)={'full', 0x20, 0x7, 0x20, 0xffffa}, 0x2f)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40210004}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x10c, 0x464, 0x10, 0x70bd25, 0x25dfdbfc, "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", ["", "", "", "", "", "", ""]}, 0x10c}, 0x1, 0x0, 0x0, 0x20008010}, 0x8c0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x3}, 0x10}, 0x94)

1m12.834676878s ago: executing program 1 (id=3544):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000100000085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@map, 0xffffffffffffffff, 0x19, 0x10}, 0x20)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x1d, 0x3, @private=0xa010102, @local}}}}}}, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8001}, @printk={@lu}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x10, 0x9, 0xfffffff8}, 0x10, 0x1e990, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94)

1m12.490818613s ago: executing program 1 (id=3549):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r3, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x9, 0x4, "f10a942e28"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "da55c6505d"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44005}, 0x4040080)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r6 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x61d0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x8040)
unshare(0x22020400)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'})

1m12.20339965s ago: executing program 32 (id=3549):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r3, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x9, 0x4, "f10a942e28"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "da55c6505d"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44005}, 0x4040080)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r6 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x61d0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x8040)
unshare(0x22020400)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'})

28.48614041s ago: executing program 4 (id=4014):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001900010900eb1a97dbc900e5fe1800000000ff06000000000000fbffab1414c04f0008808b49efabfc75a98ae798f687fc00ec7c83ce4cf001543a8ad3cde292735c8367563f062bc0fa544e93445e267455be9c81b3170180531f50c8e0a071f622bec238ccffba5b6ba935bc6d819b88f5a28852"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, 0xd, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910426000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0xe, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_device}, 0x94)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)={0x6, &(0x7f0000000680)=[{@fixed}, {@none}, {@none}, {}, {@fixed}, {}]}) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r4, 0x0, 0x14, &(0x7f0000937fed)=""/3, &(0x7f0000000080)=0x3) (async)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0xb4013, r3, 0x0) (async, rerun: 32)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r6 = socket(0x28, 0x5, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev, [0xff], 0x0, 0x0, 0x0, 0x1}, {@ipv6=@loopback, [0x0, 0xffffff00], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f00000001c0)={0x1, 0x5}, 0x8)
write$cgroup_int(r3, &(0x7f0000000100)=0x7, 0x12)
unshare(0x8000000)

28.234376018s ago: executing program 4 (id=4018):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7c}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r0, 0x8, 0x25, 0xffffffffffffff11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x40)
read(r0, &(0x7f0000000180)=""/210, 0xd2)

28.039320673s ago: executing program 4 (id=4020):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e6d155c558a4f6dbf7076341df55b7aecaad952f364f05d5e0f", 0x29}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bd", 0x41}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="74a4e85cc89d33547afbda9d629f9f9f20b9b051442633488e9e33357c312479a404b3704c8d07860bf96d27dfa418938011b5863b28d31d6185a51a0ad41082802e5ca3be41e7ceac5799eac6bb0ff07c730031c7dca06f1e3f85a9c396610ab3bce2e140e31e878fe2bb2c4c8fbdf6cf9fc309342407cb59bd5086e9dd41ade97c48662086653e4c390266c307182581eb72c91b5ab9efdd54b319bb8d1b4b977e050b1194f01177fdd42215aa0a444854aae3729ffa795dd6e19d7fd7bdc6208778db60e756", 0xc7}, {&(0x7f00000004c0)="d82d33a6d81edc4b66cc88bf8c1a89a62b9f80694439ec866cab778d9631e23dc3b23087ca46c503e8b9bbf555fff7ba14bbd9", 0x33}, {&(0x7f0000000580)="4cc291a1339f36fedfa937c3d768baa73ddc72c419695988fc8177e38f1379e15e6745bbb565b5a19e98a179b04a46aeeb2ae125123d2bb33ca7f7a32c4b04399893a25cdc4147", 0x47}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000880)="6442740e247b17bd4d19bd1c3479aa6b61e51e45a4ad19e06610cf34114ffff5fb2f594acecc29734a7acec71e4d5b3ce05bae0b340b4d2876079233eff3cc471c9d307222d237ec184324d0a6abfdbb9d3e8e408ec4bcd5deb573f5999c49f7281bdc243b62ef5f33c487dba59f52304381e9dd7f3084094bfdf1bbc2b592d73ff16b44fb3aa0", 0x87}, {&(0x7f0000000940)="431892f7b6e52b6659416138702f0fd658122d85468d4d814c549c8651bbf881dcbe242abd08a5d2499bd3e24add3598d455ddec7c5ecc6bd9d67ddf174512aa1182a7381928d9e7fb20003894ed", 0x4e}], 0x2}}], 0x3, 0x8810)
sendmsg$alg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040001}, 0x0)
recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x800, @local, 0x9}]}, &(0x7f0000000480)=0x10)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000040))
setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000600)={@generic={0x26, "2c0e2ec7531dbd1ac29ef7083dd5604891b5b668c96c47e23ec6c6bf8e50a397633565bcb9c8834fb0c881cb901925e52fcf30160b73308c66b785f53e65bcfa72966d6c5e7c26f568f896301b213aaffe4254e554a6fe47356200f2c50056a3ac347e5363a019722cb344f4b58827d94bd39ea0e5f2b8a03d5aa2c00c21"}, {&(0x7f0000000080)=""/11, 0xb}, &(0x7f0000000180), 0x58}, 0xa0)

26.819798896s ago: executing program 4 (id=4036):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x40}, 0x94)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000640)="80387b", 0x3, 0x40885, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000040)=0x40)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e26, @multicast2}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={r6, 0xac0}, &(0x7f0000000140)=0x8)
sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}, 0x2}}, 0x10, &(0x7f0000000040)}, 0x20004000)
recvmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)=""/189, 0xbd}], 0x1, &(0x7f0000000340)=""/72, 0x48}}], 0x1, 0x40012000, 0x0)

25.878331515s ago: executing program 4 (id=4044):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20000040) (async)
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20000040)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000bdcbf9c85fe88000600000004000000000000000114000100ff020000000000000000000000000001080008004204000076"], 0x48}}, 0x0)

23.98855383s ago: executing program 4 (id=4047):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x44, 0x18, 0x1, 0x1000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0x1c, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x17, 0x2, 'net_prio.ifpriomap\x00'}}}]}, 0x44}}, 0x44890) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async)
connect$inet(r1, 0x0, 0x0) (async)
writev(r1, &(0x7f0000000200), 0x0) (async)
shutdown(r1, 0x1) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r4, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000000)) (async)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) (async)
close(0x3) (async)
accept4(r0, 0x0, 0x0, 0x800) (async)
socket(0x1e, 0x4, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

17.622674938s ago: executing program 5 (id=4123):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xf}, 0x94)

17.614637675s ago: executing program 3 (id=4124):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000dd6bf8e16d319daf979df816a4ffdc8c775d6ad46b8d9c0aaf1badd102fb2b7e4d312ddf74e6608355c5d3c775dd181db8b292441ccd8825d3c3edbcadd16b2759c7be42664389beae0f53b6e875bf1df66f42ca7c618a57c64dca907dfad01dff9f1f5713f017aaaee2aef6ab2ba5ace04fe2abffc4ac1c2803a14a4be796d097cc14284495a8ea503e1df196f4fc4f3e5d52bb2b62ab771932e0e8a769bc8dd90600000000000000", @ANYRES32=r2, @ANYRES8=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) (async)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000000)) (async)
ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000000))

17.547607902s ago: executing program 5 (id=4125):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="fe1fde28b7ba9163fa68d9b367a8fb3402995d331e726c1e291700f572b974f4f29a55ed2efc098d28df7fd748c0547a8de8f2991d49417e9f2108da039286b3019bb7b708301f7ceca8bc8c823a42250385bfd18b5c32827ca4709bac1ba040234fbf5a3394060cd0573752047baafaaecb5fc3c2604ea8368134c1705f60168424c00e48c11b5e8725b936e12847e56d0e13c23304d77cf539591866446d179c178f9cdc1e2a075c1db44c2e736390e22190abd2a1eb046473656025b6b302bc4c63ad096e64b69ab6b6bd22630e0f44ec1088d8c6b92caa8177cd867fd60927a3c4b2f2d24439fd4b82c40f", @ANYRES64=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB="992c", @ANYRESOCT, @ANYRES16, @ANYRES64, @ANYRES32], 0x50)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ioctl$FIBMAP(r0, 0x1, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000000), &(0x7f0000000180)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x4, 0x1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000007380)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$packet_int(r0, 0x107, 0x7, 0x0, 0x40)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, 0x2, 0x0, 0xf2f8, 0x7, 0x0, 0x40004, 0x4}, &(0x7f0000000040)=0x9c)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82D\x80'}, 0x30)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1200000069000b"], 0x20}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', 0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000140)={0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)

17.433911171s ago: executing program 3 (id=4128):
syz_emit_ethernet(0x2c, &(0x7f00000004c0)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1e, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0xfff, 0x200, "c135"}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
unshare(0x6a040000) (async)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791c00000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x26, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) (rerun: 64)

16.990645459s ago: executing program 3 (id=4132):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x7fc, @loopback}}, 0x1e)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000000)) (async)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x1}, 0x18)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) (async, rerun: 64)
sendmmsg$inet(r2, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000010) (async, rerun: 64)
close(r0)
socket$alg(0x26, 0x5, 0x0)

16.779695806s ago: executing program 0 (id=4133):
syz_emit_ethernet(0x388, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r0, 0x7000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x24004816}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r3}, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0xc8}}, 0x0)
close(r1)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x2c, 0x48, 0x201, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0xd0, 0x0, 0x0, 0x6}, [@IFAL_LABEL={0x0, 0x2, 0x4}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x2c}}, 0x0)

16.599626234s ago: executing program 2 (id=4135):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)={@cgroup=r3, r3, 0x2f, 0x2000}, 0x20)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x1c, 0x0, 0x211, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=<r7=>r6, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=<r8=>r7, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3d, 0x0, 0x1, 0x20}, {0x4d}]})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r11, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001806005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)}, {&(0x7f0000000200)="4d0ff6044df96744927dc21a1af29aecba", 0x11}, {&(0x7f0000000680)="8c4e", 0x2}], 0x5)
bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r9, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r8], 0x8)
socket$inet6(0xa, 0x1, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x4000000000000151, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0xffffffbd)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010080000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="080026007f0900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4008800}, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000b, 0x32, r1, 0xffffc000)
socket$l2tp6(0xa, 0x2, 0x73)

16.544497965s ago: executing program 0 (id=4136):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x2c, r2, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050)
shutdown(0xffffffffffffffff, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="180000e22a005600010600000000000000000700000000000000e5abcf46ae8fd6c74cdbbe3acfbd3d846afb7e153614ab5da1672a67906cf92ab6499d8fdbeb3057006a798265957ba17d507c8b8fd2820b7c082bfa3fd9c4d22d0813bd5c23828ca54688517a3af03e4e37182afe71b66c98d5f627cd8225defb8db47a085730af1f71d87529e78f4f3ce17de6d9fe7702277f792bdb9047a5d4f8ce7cc9e7d22765f4598e779741d816765347bd24b87314baa7896182574c690ef90d9f3d0b31b98642761cf4a5ef984f4d"], 0x18}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES8=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000400)='westwood', 0x8)
getsockopt$inet_tcp_buf(r9, 0x6, 0x1a, 0x0, &(0x7f00000000c0))
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

16.543855439s ago: executing program 5 (id=4137):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001600), r0)
sendmsg$FOU_CMD_GET(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000080)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000)

16.452207066s ago: executing program 5 (id=4138):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33}, {0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0xfff}]}}}]}, 0x4c}}, 0x4)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @multicast2}, 0x2, 0x0, 0x0, 0x1}}, 0x2e)
connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)

16.281443073s ago: executing program 2 (id=4139):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0)
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf2509000000050005"], 0x24}, 0x1, 0x0, 0x0, 0x40044080}, 0x4000000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x80000000}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) (async)
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf2509000000050005"], 0x24}, 0x1, 0x0, 0x0, 0x40044080}, 0x4000000) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x80000000}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) (async)

16.131420165s ago: executing program 5 (id=4140):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
bind$inet6(r0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x68010b80)
r1 = socket$netlink(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
getsockname$netlink(r3, &(0x7f0000000000), &(0x7f00000000c0)=0xc)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1411, 0x300, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4840}, 0x48c1)

16.115645545s ago: executing program 0 (id=4141):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x22, 0x0, @void}, 0x10)

16.095942051s ago: executing program 2 (id=4142):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000300)={<r0=>0xffffffffffffffff, 0x5, 0xfffffffffffffffc, 0x4})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
writev(r5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@delchain={0x4438, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x5}, {0x3, 0xd}, {0xfff3, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xff}}, @filter_kind_options=@f_basic={{0xa}, {0x2140, 0x2, [@TCA_BASIC_ACT={0x278, 0x3, [@m_bpf={0x190, 0x2, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xfffa, 0xe6, 0xe9, 0x9}, {0x9, 0x7, 0xe3, 0x6}, {0x6, 0x7, 0x5, 0xd2}, {0x3, 0xf3, 0x5, 0x3}, {0x3, 0x2, 0xd, 0xc4}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0xffff, 0x8, 0x8, 0x1}, {0x6, 0x9, 0xa3, 0x4}, {0x5, 0x4, 0x0, 0x3}, {0x3, 0x4, 0x5}, {0xf02, 0xc0, 0x7, 0x8}, {0x9, 0x91, 0x4, 0xfff}]}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x9200, 0x81, 0x4, 0x7ff}, {0x100, 0x1, 0x4, 0x4}, {0x930c, 0x11, 0x8, 0xa}, {0x6, 0xf7, 0x3, 0x3}, {0x8, 0x80, 0x5, 0x81}, {0x2600, 0x10, 0x7, 0x3}, {0x456, 0xf, 0x7, 0x5e32}, {0xa, 0x3, 0x2, 0x10000}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xa5, 0x6, "e89336a31831fadde432dba0b54696539d4c9608bb23b006f57f597330da4e649e8b6c041235b6a48e4adf50203bf6cd922091b5357576d30b204647501cef8db9240f88bc7fce23e5e881437d00a8db0302961c1a0f79b49ea8e650c97a85968d9f0dcee3323c12bbaaec836187b9a5a213fc56c88fd27e8630eb971993ff2a6e3af92648ce1857da0344110d702090f393496464e3e2ce2c10a7bb54d217ae3d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0xe4, 0x4, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_LABEL={0x8, 0x5, 0x9325a}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2f, 0x7, 0x0, 0x0, 0x9}, 0x4}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8aae4}]}, {0x73, 0x6, "d36af388e05a0593e20026a6331a1a0a7b368ad5dd31ef5b9db7ff82444d44aa156f5539fde3738ebd8a527e0112ce3e03474158703ef1192ee934f9c46fe02c0697fe779acebea241c0a11b6039597e9c1d567c8de75d5bfdc5867609ddec56624f9c07e37ed6825d4789ce106b8c"}, {0xc, 0x7, {0x11cfa25da5eb995}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BASIC_POLICE={0x20, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x10001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xd9}]}, @TCA_BASIC_ACT={0x11a4, 0x3, [@m_tunnel_key={0x10a4, 0x1, 0x0, 0x0, {{0xf}, {0x74, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x8, 0x2, 0xffff, 0x4}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0xa4, 0x20, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x91600}]}, {0x74, 0x6, "af61de6e3599571b9a9c470f18cdd51a598fc1fc9c0afacfc3f96d80ae7b5e7cdc0565845802e01d8018f4ee7a893b29438b8a85dde61a4fdf8da94263ff4c828d693c440b6ad27221aa602d36aab2beadfc69b0330347080b99b625654261e20102221d61c6966a133bec8d1ad132c6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x58, 0x15, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x2, 0xffffffffffffffff, 0x8, 0xf}, @loopback, @broadcast, 0x0, 0x1}}]}, {0x6, 0x6, "40d3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0x3, 0x100, 0xc, {0x54, 0x1, 0x42c, 0x7ff, 0x6, 0x80000001}, {0xff, 0x1, 0x0, 0x8, 0x7, 0xfffffff7}, 0x8, 0x2, 0x9}}]}, @TCA_BASIC_POLICE={0x8b8, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x380, 0xa54, 0x10c5, {0x3, 0x0, 0x0, 0x7f, 0x6, 0xc121}, {0xc4, 0x1, 0x1ff, 0x1, 0xc, 0x7ff}, 0x3, 0xfb7, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffe}, @TCA_POLICE_RATE64={0xc, 0x8, 0x65}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x29}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x8, 0x1, 0x7, {0x4, 0x0, 0x1a3, 0xc, 0x48c3, 0x7fff}, {0x2, 0x0, 0x6, 0x1, 0x6, 0x80000000}, 0x80, 0x9550}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x10001, 0xffff, 0x9, 0x18c0000, 0x7, 0x2, 0x8, 0x7, 0x7, 0x2, 0x1ff, 0xa0f5, 0xff, 0x3bac, 0x200, 0x3, 0xfffffc01, 0x747, 0x7c5, 0x0, 0xfffffffe, 0x1000, 0x10000, 0x200, 0x97b9, 0x0, 0x5000000, 0x8, 0x7, 0x0, 0x1, 0x3, 0x4, 0x6, 0x80, 0x1, 0x7c64a7c7, 0x8001, 0x1, 0x401, 0x0, 0x3, 0x7, 0x9, 0x2, 0xfffffff8, 0x2, 0x81, 0xff, 0x3, 0x5, 0x7, 0x6, 0xde, 0x5, 0xd46, 0x5, 0x9, 0x7fff, 0x9, 0x7, 0x2, 0x5, 0xcf, 0x4, 0x5, 0x3, 0x6, 0x0, 0x2, 0x1, 0x9, 0x6, 0xfffffffe, 0x6, 0x8, 0x690d, 0x7fffffff, 0x228, 0x84, 0xc3, 0x4, 0x2, 0x70000, 0x81, 0xffffffff, 0x2, 0xc, 0x2, 0x1, 0x0, 0x7, 0x80, 0x3, 0xb615, 0x1, 0x81, 0x10, 0x23cc, 0x80, 0x6, 0xfffffffe, 0x0, 0x1, 0x80000001, 0x8, 0x3, 0x7, 0x0, 0x3, 0x3, 0x3, 0x101, 0xffff7ac2, 0x2, 0x8, 0x0, 0x101, 0x401, 0x40, 0x6, 0x2, 0x4, 0x24, 0xfffffffd, 0x3ff, 0x9, 0x80000000, 0x8001, 0x4, 0x0, 0x0, 0xa, 0x8, 0x0, 0x2, 0x9, 0x6, 0x0, 0x9e, 0x10, 0x40, 0x2, 0x2, 0x5, 0x3, 0x0, 0x9, 0x80, 0x9, 0x6, 0x21, 0x4dc3, 0x400, 0x0, 0xffd, 0x5, 0x4, 0x3, 0x6, 0x4, 0x9, 0xdc2a, 0xaea3, 0x8, 0x9edd, 0x401, 0xffffffff, 0x4f9fa40e, 0xb8, 0x8, 0x9, 0x0, 0x101, 0x5, 0x8, 0x7e200, 0x1, 0x1, 0x2, 0x7, 0x39, 0xfffffffd, 0x9c, 0x2, 0x40, 0xffffffff, 0x5, 0x3, 0x1, 0xc, 0x5, 0xa419, 0x6, 0x5, 0x5, 0xffff, 0x7, 0x4, 0x9, 0x3, 0xfffffff8, 0xffffffff, 0x1000, 0x6, 0x7fff, 0x1, 0x10, 0x1, 0x0, 0x401, 0x10000, 0x6c7, 0x6, 0x5, 0x6, 0x2fc0, 0x2, 0x4, 0x2, 0x80000000, 0x8000, 0x6, 0x4, 0x2, 0xc1b, 0x2, 0x80, 0xfffffffc, 0x3, 0x6, 0x5, 0xd, 0x9, 0x7ff, 0x6c, 0x200, 0x3, 0x9, 0x3, 0x1f77, 0x5, 0x9, 0xfffffffb, 0x4, 0x2, 0x1808, 0xffffca69, 0x45, 0x2, 0x5, 0x6, 0x6, 0x1, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0xc, 0x6, 0x800, 0x3, 0x1, 0x80000001, 0x51a9, 0xcc2, 0xfffffff1, 0x9, 0x5, 0x4, 0x7, 0x6, 0x942, 0x3, 0x5, 0x6, 0x4, 0x5, 0x4, 0x9901, 0x5, 0x4, 0xfffffff8, 0x3, 0x9, 0x4, 0xffffffff, 0x3, 0x5, 0xe3, 0x1000, 0xff70, 0xb, 0x7, 0x3, 0x2, 0x400, 0x4, 0x9, 0x8, 0x1ff, 0xff, 0x200, 0x9, 0x5f45, 0x10000, 0x180000, 0x2, 0xe, 0x3c, 0x0, 0x8, 0x40000000, 0x7ff, 0x8, 0x8, 0xc9e, 0xcc, 0x3, 0x401, 0x1, 0xd, 0x1, 0x3, 0x1, 0x0, 0x7, 0xf68, 0xfffffff7, 0x0, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x6, 0x3, 0xb12, 0x5, 0x18f7a2fa, 0x1, 0x3, 0x6, 0xa368, 0x6, 0x2, 0xfffffffe, 0x2, 0x8, 0x1, 0x2, 0x1, 0x2, 0x4, 0x0, 0xde, 0x67, 0x7, 0x800000, 0x7, 0x0, 0x8, 0xfffffff9, 0x80000001, 0x0, 0x3, 0x2, 0x3, 0x9, 0x871, 0x10001, 0x1, 0x9, 0x4, 0x7, 0xc, 0x1, 0x80000000, 0x5, 0x6, 0xfffffffe, 0xff000000, 0xc, 0xb, 0x8, 0x0, 0x6, 0x0, 0x4, 0x9, 0x10, 0x0, 0xfffffffc, 0x4, 0x80000000, 0xff, 0x10001, 0x1, 0x8, 0x5, 0x37, 0x2b7, 0x5, 0x8, 0x10000, 0x7, 0x7, 0xd, 0x2, 0x1, 0x10001, 0x2, 0x100, 0x6, 0x800, 0x7fffffff, 0x9d, 0x2, 0x10001, 0x8b, 0x4, 0x4, 0x1, 0x9, 0x7fff, 0x7fffffff, 0x7, 0x4, 0x80000001, 0xa94, 0x8, 0x4, 0x8000, 0x7, 0x0, 0x3, 0x2, 0x80000000, 0x1, 0x8, 0xa, 0x101, 0x800, 0x4407d561, 0x7644, 0x1ff800, 0x40, 0x527, 0x2, 0x8, 0x9, 0x1, 0x3ff, 0x4, 0x4, 0xffffffff, 0x101, 0x1dc4, 0x9, 0x5465ad89, 0xd, 0x73, 0x9f39, 0x1, 0x9, 0x10001, 0xacb, 0x2400000, 0x10001, 0xe2, 0x6, 0x6, 0x4, 0xffffffc0, 0xfffe, 0x10000, 0x5, 0x1, 0x401, 0xe92b, 0x4, 0x9, 0x1, 0x0, 0x7, 0x8001, 0x200, 0x10000, 0x7, 0xffff, 0xc, 0x5, 0x3, 0xff, 0x60b, 0x7, 0x5f4d3af1, 0x0, 0xfff, 0x3ff, 0x9, 0x7fff, 0x5, 0xa, 0x8, 0x280, 0xff, 0xffff, 0x5, 0x3, 0x0, 0x9, 0x9a3c0000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}]}, @TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x7, 0xaa6, 0x5, 0x988e, 0x3fff8, 0x3, 0xda, 0x4c3, 0x5, 0xf, 0xb, 0xfbc, 0x6, 0x8, 0x12000000, 0x5, 0x1, 0x200, 0x8, 0x5, 0xc, 0x0, 0x3, 0x8, 0x1, 0x1, 0x1, 0x2, 0x4d67, 0xfffffff8, 0x9, 0x7f, 0x7fffffff, 0x9, 0x1, 0x80, 0xbbed, 0x5, 0x1, 0x1, 0xce5, 0x100, 0x2d, 0x81, 0x52e, 0x8, 0x0, 0x2c2, 0x7, 0x7, 0x4, 0x0, 0x10, 0x5, 0x10000, 0x7, 0x8, 0x1, 0x4, 0x7, 0x4, 0x8, 0x0, 0x95b7, 0x5, 0x8, 0x8000, 0x4b, 0x1, 0x7, 0x8, 0x8000, 0x9, 0x6, 0x7f, 0xef9, 0x4d7f, 0x10000, 0x6, 0x0, 0x4, 0x401, 0x0, 0x6, 0x8000, 0x8, 0x4, 0x6, 0x6, 0x4, 0x616e04a4, 0xda1, 0x9, 0x4, 0x8, 0xffffff01, 0x6, 0x1, 0x9, 0x7, 0x7f, 0x1, 0x0, 0xffffc78d, 0x3, 0x4, 0x100, 0x2, 0x2, 0x20000000, 0x9, 0xcc, 0x6, 0x6, 0x1, 0xd, 0xffffffff, 0x7ff, 0x3, 0x10, 0xc88, 0x3, 0x3, 0x8000, 0x6bc, 0xfffffffa, 0x32, 0xc2fa, 0x1ff, 0x7, 0x5, 0x9, 0x3, 0x10000, 0x4, 0x5, 0x7f, 0x19274afc, 0x3ff, 0x8, 0x80000000, 0x7ff00, 0x1000, 0xe9c, 0x1, 0x6, 0x9, 0x3, 0x7f, 0x7, 0x3, 0x64e, 0x6, 0xb69, 0x8, 0x446, 0x9, 0x7, 0x5840, 0x4, 0x8, 0x7, 0x101, 0xc3, 0x0, 0xcfc, 0x8, 0xff, 0x7f, 0x2, 0x3, 0x8001, 0x200, 0xffff8000, 0x7, 0x9, 0x800, 0x5, 0x6, 0x400, 0x1, 0x2, 0x9, 0xd49d, 0x8, 0xe081, 0x5, 0x0, 0x2, 0x3, 0x7, 0x8, 0x6, 0x2, 0x1, 0x2, 0x0, 0x4, 0x7fffffff, 0xffff, 0x10001, 0x2, 0xb34, 0x2, 0x7716, 0x7fff, 0x1, 0x4, 0xfffffff8, 0x7, 0x3, 0x10001, 0xd1, 0x2, 0x65a, 0xd8e9, 0x6, 0xa8, 0x5, 0x3, 0x6, 0xfffffff8, 0x4, 0x3, 0x1, 0x37, 0x1, 0xc7, 0x3, 0x4, 0x401, 0x8, 0x5, 0x6, 0x0, 0x8, 0x4, 0x10, 0xe906, 0x4, 0x2, 0x1, 0xae, 0x0, 0x10, 0x3ff, 0x2, 0x0, 0x3, 0x3, 0xb, 0x80000001, 0x8, 0x9]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x9a}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x2}}, @TCA_RATE={0x6, 0x5, {0x7, 0xf}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x2288, 0x2, [@TCA_U32_ACT={0x227c, 0x7, [@m_ife={0x1034, 0x1c, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x184, 0x1c, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x10, 0x0, 0x8, 0x6}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x5, 0x7, 0x80, 0x7}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_LABEL={0x8, 0x5, 0x9e719}, @TCA_MPLS_TTL={0x5, 0x7, 0x41}, @TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0xe8, 0x6, "2553cd4d9166c9747a0dc82a11185fb3f99c9f033123ca0a37d165741dfe2ebe42cfd1b3ec55f750571102e402ac3d98f8861f80d20808d3536babddaa263ee35b39ce91df524cf87408cfe4a8d8d8a41de1b3052ce94f6201f846195ac87d78d9d467208b375eccff249a719cfe4e022d5ebf6cc22c1b5701c746cfb231d1d3960497e1d04212d5eb9012da0c3bb4cedb895fdb4b755e6ef4cb598168029dd2c84b08cdfa866829dab4a857dfb0cc31c5f51a1079c93b68b519e023daf72b6dcf585c847ef624638d72858cb34cb5005287486fed0bbe897a83b2898b6c641761f81ace"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xebc, 0x13, 0x0, 0x0, {{0xa}, {0xe90, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1, 0x99df, 0x1, 0x8, 0x6}, 0x40, 0x2, [{0x5, 0xf32, 0x4, 0x5, 0x7ff, 0x10000}]}, [{0x1, 0x5, 0x6, 0xb0f, 0x6, 0x4}, {0x7, 0xa, 0x5, 0x55513cbf, 0xfffffffd, 0x4}, {0x9, 0x5, 0x3, 0x7fffffff, 0x6, 0x3}, {0x7968f77c, 0x9, 0x10, 0x6f, 0x4}, {0x2be3, 0x5, 0x1, 0x7fffffff, 0x90c, 0x100}, {0xc300, 0x80000000, 0x9, 0x9f2, 0xfffffff7}, {0x2, 0x81, 0xac, 0x40, 0xbc3, 0x9}, {0xdb7, 0x7, 0x8, 0x1, 0xe6, 0x6}, {0xa, 0x1010, 0x200, 0x8001, 0x5, 0x2}, {0x1000, 0x4, 0x7ff, 0x9, 0x101, 0x8}, {0x0, 0x80000001, 0xfffffff9, 0x9, 0xce8e, 0x10000}, {0x5, 0x6, 0xffe00000, 0x4, 0x6, 0xffffff81}, {0xffffffff, 0xa0, 0x1, 0x3, 0x4, 0x8899}, {0xff, 0x280000, 0xffff0001, 0x6, 0x2, 0x1}, {0x1000, 0x7, 0xff, 0x80000000, 0x81, 0x1}, {0x1, 0x4, 0x3ff, 0x0, 0x8, 0x6}, {0x1, 0x8, 0xfffffffc, 0x5, 0xfffffff7, 0x9}, {0x7, 0x3, 0x772, 0x8, 0x3, 0x1}, {0x1dda16af, 0x5, 0x8001, 0x7, 0x1, 0x7ff}, {0x6, 0x800, 0x1, 0x0, 0x401, 0x9}, {0x7, 0x8, 0x4, 0x9, 0x10, 0x3}, {0xd5e, 0xfe99, 0x460, 0x2, 0x1aa0, 0x23}, {0x0, 0x1, 0x3, 0x7, 0x9, 0x7fff}, {0x10001, 0xb, 0x75ed, 0xfff, 0x7, 0x2}, {0x100, 0x81, 0x6, 0x1, 0x4, 0x9}, {0x8000, 0xfffffff4, 0xe, 0xa8, 0x5, 0x2}, {0xdd, 0xff, 0x5, 0x20, 0x7fff, 0x6}, {0x2, 0xffffff80, 0xce4, 0x9, 0x0, 0x5}, {0x80, 0x40, 0x2, 0x4, 0x5, 0x1}, {0x80000001, 0x0, 0x5, 0x5, 0x3, 0x4}, {0x6, 0xfffffff8, 0x400, 0x1, 0xfffffff5, 0x9}, {0xffffdef5, 0x5, 0x2, 0x3, 0x3, 0x4}, {0x4, 0x2, 0x2, 0xc2d, 0x8, 0x4}, {0x3, 0x7, 0xfff, 0xfffffffe, 0x17e, 0xb}, {0x5, 0x5, 0x60, 0x1ff, 0x2, 0x8}, {0x327, 0x3, 0x8, 0x99, 0x5eb4, 0x8a4}, {0x1, 0x9, 0x9, 0x4, 0x80000001, 0x9}, {0x1e55, 0x3, 0xa46, 0x7, 0x8, 0x3}, {0x2, 0xff, 0x0, 0x4, 0x0, 0x6e}, {0x38000000, 0x9, 0x3, 0x9, 0xb074, 0x8}, {0x0, 0x1, 0x0, 0x7fff, 0x3, 0x3}, {0x93, 0x3, 0x80000001, 0x1, 0xe3}, {0x2, 0x4, 0x2, 0x2, 0x7f, 0xe71d}, {0x0, 0x24e, 0x7, 0x7, 0x10, 0x425}, {0x3, 0x37fc, 0x9, 0x2, 0xfffffffe, 0x3}, {0x3, 0x4, 0x6, 0x0, 0x9, 0x9}, {0x2, 0x8, 0x0, 0x7, 0x7, 0x3bfd}, {0x2, 0x1ff, 0x9, 0x200, 0x6, 0x7}, {0x6, 0x7fffffff, 0xe1, 0x72, 0x4, 0x1}, {0x5, 0xfffffffd, 0x3, 0x4, 0x200, 0x8}, {0xc9, 0x10001, 0xd, 0x2, 0x9, 0x8000}, {0xfffffff0, 0x200, 0xc, 0x7fb8, 0x1, 0x3}, {0xe, 0x5, 0xe73e, 0x0, 0x7b, 0xc}, {0xfffffff9, 0xfffffffe, 0x2, 0x8, 0xc, 0xe}, {0x6, 0x101, 0x2, 0x5, 0x8, 0x200}, {0x4, 0x0, 0x2, 0x9ed, 0x0, 0xe}, {0x4, 0xf40, 0x7fff, 0x0, 0x1ff, 0x1}, {0x8, 0xffff, 0x200, 0x8, 0x1, 0x7}, {0x3, 0x10001, 0x2a3, 0x4, 0x7, 0x37}, {0x3, 0x3, 0x8, 0x1, 0x8000}, {0x9, 0x0, 0x549, 0x7, 0x10000, 0x80000001}, {0x101, 0x1, 0x1, 0x0, 0x1, 0xf}, {0x5, 0x8, 0xfff, 0x7fff, 0x4, 0x94c}, {0x4, 0x1, 0xc59, 0x101, 0x1ff, 0x8001}, {0x7ff, 0x6, 0x2, 0x90b, 0xad9}, {0x9, 0x5, 0xfffffffb, 0xd, 0x9, 0x3}, {0xf28, 0x5, 0x7, 0xc, 0x5, 0x2}, {0x0, 0x4, 0x200, 0x6, 0xffff, 0x1}, {0x8, 0x1000, 0x3, 0x0, 0x5, 0xb539}, {0x2, 0x10, 0xe, 0x8, 0xdba, 0x5}, {0x4, 0x7, 0xb3, 0x632, 0x7fff, 0xfff}, {0x5, 0xf, 0x4, 0x2, 0x5, 0x80000000}, {0x262, 0x2800, 0x6, 0x2, 0x5, 0xa}, {0x7, 0xd2, 0x7, 0x8, 0xfff, 0x1000}, {0x8b5f, 0xfffffffe, 0x5, 0x7, 0x1, 0x3}, {0x1, 0x6, 0xd314, 0x3, 0x8, 0x10001}, {0x400, 0x2, 0x7, 0x20be, 0x2, 0x7}, {0x8001, 0x8001, 0x6, 0x9, 0xfffffff9, 0x8000}, {0x400, 0x5, 0x3ff, 0x1, 0x401, 0x6259}, {0x0, 0x7, 0x3, 0xfff, 0xb, 0xff}, {0x3ff, 0x8, 0x6, 0x48000, 0x9, 0x10001}, {0x1, 0x8, 0xfff, 0x5, 0x81, 0xa73}, {0x0, 0x5, 0x6, 0xfff, 0x0, 0xfffffff7}, {0x100, 0x8001, 0x3, 0x10001, 0x7ff, 0x1}, {0x7ca, 0x55, 0x9, 0x7fff, 0x3, 0x919}, {0x4, 0x1, 0x10000, 0x9, 0x9, 0x2}, {0x7, 0x2, 0x100, 0x5, 0xff, 0x5}, {0x9, 0x9, 0x7, 0x273, 0x1, 0x80000001}, {0x0, 0xffff8001, 0x400, 0x8, 0x34a2, 0x8}, {0x0, 0x6, 0xba8e, 0x10, 0x4, 0x687f61bf}, {0x5, 0x7ff, 0x7, 0x5, 0x5, 0x4}, {0x1, 0x7151, 0x7, 0x1, 0x0, 0x401}, {0x3, 0x7fff, 0x8, 0x5, 0x10000, 0x9}, {0xffff, 0x0, 0x3, 0x8, 0x41c, 0x8000}, {0x7, 0x6, 0x1, 0x1, 0x7, 0x99}, {0x2, 0x2, 0x4, 0x46c3, 0x4, 0x230}, {0xffffffad, 0x7, 0x5f, 0x401, 0x2, 0x5}, {0x53c1, 0xf, 0x4, 0x4, 0x0, 0x8}, {0x4, 0x3, 0x4f4, 0x67, 0x5c, 0x4}, {0x2, 0x1, 0x5, 0x80000000, 0x3, 0x1000}, {0x4, 0x6, 0x3, 0x1000, 0xffffffff, 0xfffffffd}, {0x3ff, 0x4a1, 0x8, 0xf1e9, 0x8, 0xf2}, {0x200, 0x4, 0xf, 0x5, 0x2, 0x7ff}, {0x1, 0xfffffffa, 0x2, 0x8, 0xff, 0x9}, {0x200, 0x40, 0xbd5, 0x560, 0x2, 0xc}, {0x9, 0x1000, 0x3ff, 0x9, 0x1ff, 0x4}, {0x2, 0x9, 0x0, 0x9, 0x8, 0x2}, {0x0, 0x2, 0x5, 0x7, 0x8, 0xffffffff}, {0x81, 0x8000, 0x6, 0x4, 0x5, 0x9}, {0x341, 0xb, 0x6, 0x1, 0x9, 0x1}, {0x2ce, 0x9, 0x2, 0x10001, 0x4, 0xd2}, {0x5, 0x7, 0x8001, 0x2, 0x6, 0x6}, {0x0, 0x8, 0x9, 0x0, 0x1, 0x6}, {0x7, 0x5, 0x1000, 0x0, 0x1417, 0x2}, {0xfffffbff, 0x0, 0xc, 0x34, 0xfffffffb, 0xffff}, {0x8, 0xf, 0x8, 0x7f, 0x1, 0x6}, {0x4, 0xf24, 0x100, 0x8, 0x2, 0x10}, {0x39, 0x10, 0x4, 0xca1, 0x3, 0x5}, {0x8, 0x0, 0x9, 0x34, 0x2, 0x1}, {0x9, 0x8001, 0x10, 0x8, 0x7, 0x2}, {0x4, 0x5, 0x3, 0x8, 0x47, 0x3}, {0x1, 0xffffffff, 0xf981, 0xfffff870, 0x7, 0xff}, {0x9, 0x800, 0x7ff85df0, 0x6, 0x0, 0x2}, {0x8, 0x53, 0x6, 0x4, 0x7fffffff, 0x9}, {0x80000001, 0x80000001, 0x7, 0x9, 0x0, 0x1}, {0x9, 0xffffffff, 0x8, 0x7, 0x2, 0x7c3d8af}, {0x3, 0x5c51, 0x6, 0x1, 0x5, 0x10001}, {0x3, 0x9, 0x2, 0x1, 0x0, 0x8}], [{0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x4}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x4}, {0x3}, {0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x3fb44ce2f02f4af8}, {0x2}, {0x3}, {0x4, 0x1}, {0x5}, {0x5}, {0x3}, {0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x3}, {0x4}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x3}, {0x3}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {}, {}, {0x4}, {0x2}, {0x3}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x1}, {0x5}, {0x4}, {0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x4}, {0x3}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2f5fc4a2ca7fee07}, {0x3}, {0x5}, {0x1}, {0x7}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x54, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x67b2f4d881aebdfa}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x168, 0x14, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x0, 0x5, 0xb, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0xb03, 0x2, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9, 0x3, 0x4, 0x200000}}]}, {0xf1, 0x6, "012f1a7f03b1b93096ec5204dfbc2574aef7752725493d119176c8029e57f48b2a0b0ee1977aff15ea406bfa944b5b2ae45e86f7a0f4c328cd6cca09840b6221841fd70af181f8b87284e192dc4f770cf02e9e7ef2987725d08b78cb92ab047d0716fdf67359c85f0e9dc74ec627e906d56a142f0d08db6c29cdff840632e59e32b66d6e326affa9442481e79ba77e3de47102c77673b340a5c8d074bd4b8975df03c9c60507677eb7508e58deda2a604ae6c29c13dc69e7952a224d8198aca4e76676c1c681c66e2ac5ad1af3cf2a5b599ec38a25d718bcb905ddfe0fe83a48f7031b62add9980b88f7ef4678"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x9c, 0x1d, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x10}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x2, 0x8, 0x9, 0x6}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x892f}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x3, 0x7, 0xfff, 0x6c70}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4d9b4}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x10, 0x6, "570b99fb4234dba8f0e62d78"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x61a}]}}]}, 0x4438}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {0x3, 0x5}, {0xb, 0x5}}}, 0x24}}, 0x4010004)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000104000000000400000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r3], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000160000042bbd7000fddbdf25023f00fd190eac0a4f0dad89fbcc6238e90321c79ea9fdbed1cf2d2a48b67a3948faf21a873feaa02bd3ace31fade35c5313c26829a30400cc7e191eb32ae2cd457a90f726886c3384f631908a13d8c7d2eb805cf65e21ebdd7c7fde4fc1274b4bbe2b72e6", @ANYRES32=r3, @ANYBLOB="08000400ffffffff0800010064010100"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r11 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000006, 0x4132, 0xffffffffffffffff, 0xab7ee000)
r12 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r12, 0x0)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r13, &(0x7f0000000200), 0xffffffc1)
getpeername$packet(r11, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14)
socket$netlink(0x10, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)

15.954242409s ago: executing program 3 (id=4143):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x3c, r1, 0x7, 0x70bd29, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f84814000000da6a0602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x24044810)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500250000000000080006"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0xc1646000)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x58, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0x1, <r11=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%-5lx  \x00'}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000100)=@raw=[@ringbuf_query], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, &(0x7f0000000180), 0x40f00, 0x40, '\x00', r7, 0x1b, r8, 0x8, &(0x7f0000000200)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x4, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0x1, r9, r10, r11], &(0x7f0000000640)=[{0x2, 0x5, 0x2}, {0x5, 0x2, 0x7, 0x7}, {0x0, 0x2, 0x4, 0x4}, {0x4, 0x4, 0x1, 0xb}, {0x1, 0x1, 0xd, 0xf}, {0x5, 0x3, 0x1, 0xf}, {0x5, 0x4, 0x7, 0x9}, {0x3, 0x5, 0x8}], 0x10, 0x4}, 0x94)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r4}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0)
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840)

15.951415183s ago: executing program 0 (id=4144):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
socket$rds(0x15, 0x5, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async)
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x50003}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) (async)
r4 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7bed}, 0x18)
unshare(0x6a040000) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000340)=""/202, &(0x7f00000001c0)=0xca) (async)
listen(r7, 0x0) (async)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000540)={<r9=>0x0, 0x6, 0x200, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000940)={r9, 0x9, 0x0, [0x2, 0x3, 0x1, 0x79f7], [0x8000, 0x9a, 0xffffffffffffffff, 0x3b73922d, 0x80, 0x8, 0x2, 0x3, 0x1, 0x5, 0x3, 0x9fc6, 0xfffffffffffffffd, 0x5388, 0x1d, 0x2a7, 0x2, 0x2, 0x5, 0x2, 0x8, 0x9, 0x4e61, 0x10, 0x8000000000000000, 0xf43, 0x8, 0x9, 0x3, 0x4, 0x8, 0x100, 0x8, 0x1b, 0x6, 0x3ff, 0x8, 0x7, 0x3cc7, 0xfffffffffffffff9, 0x1ff, 0xf35b, 0x7, 0x9, 0x3, 0x0, 0xf, 0x0, 0x5, 0xf7, 0xffff, 0xf, 0x101, 0xb, 0xf, 0xe79d, 0x2, 0x7e5, 0x2, 0x9d, 0x7f7, 0x100000000, 0x2, 0x0, 0x541f, 0x4, 0x8000, 0x4, 0x1, 0x8, 0x91, 0x80000001, 0x8, 0x4, 0xfffffffffffffffb, 0x1, 0x40, 0x7, 0x6, 0xb, 0x3c, 0xfffffffffffffff7, 0x321, 0x5, 0x8000000000000001, 0x753, 0x1ff, 0x400000, 0x0, 0x8, 0x7, 0x6, 0xea7, 0x71001b80, 0x8, 0xb6, 0x80, 0x7, 0x9, 0x1, 0x3ff, 0x7, 0x8, 0x5, 0x9, 0x6, 0x9a, 0x0, 0xfffffffffffffffe, 0x9, 0x8001, 0x7ff, 0x8, 0x10001, 0xe, 0xffffffff00000001, 0x3, 0x4, 0x374, 0x0, 0xe000000000000]}) (async)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) (async)
close(r7) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r10=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r10, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) (async)
r11 = socket(0x10, 0x3, 0x0)
sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0)

15.763323592s ago: executing program 3 (id=4145):
r0 = socket(0x15, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newlink={0x44, 0x10, 0x1, 0x70bd26, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0xdd23802dd61a7b94}, 0x40)
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

15.610170703s ago: executing program 3 (id=4146):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10) (async)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

15.514979991s ago: executing program 0 (id=4147):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000240)='percpu_alloc_percpu\x00', r3}, 0x66)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x0, 0x86, 0xce, &(0x7f0000000100)="851e11922585743951e96b45b21a989a2b413cc16d187302b5efba5cc07847ef375634327289fce367a66be911393c5ac07f4c8f8baf0c7120d1f8a14e4057a81446e337e5c408db426a3b5099060eef58215498ea3e525423652242c006c0d698ccd14e3e1df081a63b76117b2f4b4d13dfcdab2e5a90e8606972018ae5c9f8f9cb17eafa6f", &(0x7f00000002c0)=""/206, 0x8001, 0x0, 0xe7, 0xaf, &(0x7f0000000680)="d88ed566a1029efbb1022264f7134feed6fb401d539cae6956faccda12d49df66247d1a29164d0d51c68d2518294ee00a433356ecac4bf2a801d143cff9c1f7710ca12aa010625371a119683d260b79a88b93c86f36ded6ccc5f039b995c9653b25ba5dcf3729827656988a6fb45e570c566528680a26134958d5edf9aaf78c216f6386c930e2562febc2933dccf82815c1ccc78fed1571ba992dc0b889971f74e9e212b789675b7c29eff6a7f4c4cdeb7106f49eb89646ffa9ed677fb281c3c2078d3a33effdcb8ea217ddfb9117d33668f6051e0cc20606ef6300b4d82259b131094cdb2515b", &(0x7f00000001c0)="0ac182e105b1a96d998c204041ccd262c01b0dfe484248bd6e1f741c886da7a06b371118b1e3746b8a80256c430036aadfa3634c4a75ffda118d0fe526daf63b3267f97774c5587990ee981ddc970dac5e6d06fb6374d4c5a17cf7bd88df9c654564750184a22c4fa2d1c5aa79f8b373bba28a845c2a0b06c5e59b10bcd0b2d0349039233644e4a67a8cfa407b5cc3c6a39a793162ab37ff09a211bdc6dc45a28b8f73a8cb833a481e9ab27dd89c1a", 0x4, 0x0, 0xcc}, 0x50)

15.501255715s ago: executing program 2 (id=4148):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7d)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f0000000200), 0x0}, 0x20)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8)
bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r2, 0x4)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x18, 0x52, 0x1, 0x70bd05, 0x4, {0x1c}, [@typed={0x4, 0x1}]}, 0x18}}, 0x800)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={<r4=>0x0}, &(0x7f0000000040)=0xc)
syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/pid\x00')
unshare(0x6a040000)
socket(0x8, 0x1, 0x0)

15.33377618s ago: executing program 0 (id=4149):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000024c0)={'geneve0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0a}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cdf829613de05c780dd1b2b80c"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000)
r6 = socket$kcm(0x29, 0x5, 0x0)
accept(r6, 0x0, 0x0)
sendto$packet(r0, 0x0, 0x0, 0x200004c0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x9, 0x6, @multicast}, 0x14)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r7, &(0x7f0000000440), 0x10)
listen(r7, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r8, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
sendmmsg$inet(r8, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001040)="90", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[], 0x160}}], 0x2, 0x4000000)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r9, 0x6, 0x1, &(0x7f0000000dc0)=0xfffffffb, 0x4)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0)

15.333007579s ago: executing program 2 (id=4150):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, [@func={0xf, 0x0, 0x0, 0xc, 0x1}, @fwd={0xc}, @var={0x9, 0x0, 0x0, 0xe, 0x4, 0x2}, @volatile={0xc, 0x0, 0x0, 0x9, 0x4}, @enum64={0xa, 0x0, 0x0, 0x13, 0x1, 0x8, [{0x3, 0x5, 0x7}, {0x4, 0x4, 0xfffffff9}, {0x10, 0xec5}, {0xe, 0x2c3, 0x8}, {0xd, 0x101, 0x9}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x9}}]}}, 0x0, 0x1a, 0xffffffffffffff0e, 0x0, 0x0, 0x10000}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20)

15.202564075s ago: executing program 2 (id=4151):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000003c0)={0x0, 0x4d, &(0x7f0000000380)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd23, 0x25dfd3fc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x0, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0x0, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x0, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x0, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x0, 0x3, 0x555d}, @NL802154_DEV_ADDR_ATTR_SHORT={0x0, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0x0, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE, @NL802154_DEV_ADDR_ATTR_EXTENDED={0x0, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000049}, 0x24040001)

15.19718749s ago: executing program 5 (id=4152):
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x48890)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
r2 = socket(0xf, 0x2, 0xd)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}})
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x2, 0x3fff}, 0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4)
ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0)
r4 = socket$inet(0x2, 0x3, 0x5)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000540)='syzkaller\x00'}, 0x90)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x7, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfd4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x4000)
r6 = socket$xdp(0x2c, 0x3, 0x0)
sendto(r6, 0x0, 0x0, 0x48041, 0x0, 0x0)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r7, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c)
shutdown(r7, 0x1)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt(r8, 0x84, 0x81, &(0x7f0000000300)="1a00000002000000", 0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000640)={<r9=>0x0, 0x1, 0x5, [0xfffb, 0x9, 0x9, 0x7a8, 0x3]}, &(0x7f0000000680)=0x12)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f00000006c0)={r9, 0x3, 0x30, 0x80000000, 0xe15b}, &(0x7f0000000700)=0x18)
setsockopt(r7, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @empty}}}, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xa4, 0x0, &(0x7f0000000900)="e0b9545ed387dbe9abc89b6b5bec91ec758f33c925cb9b6ea900901e10fef0a2dfeeba13d799aeeff206cc6053e3e13b997e63071daca1604e2f78ba2c8d61ab3ef5e49af72ceadd6967e7997c4666b02661620175c82e05ad05856d79c8699ee051284048d8817fcaa6db068f765dbc6da25f4724dd2e1a322acb12ba580432c6e5e37ab9c58b41daddd6775222fad8bb30928792576d657d4dbf01806aad6a8ae382c0", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0xe0, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @empty, 0x0, 0x0, 0x3, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@remote}, 0x4, 0x5, 0xfff8, 0x91fe, 0x3, 0x0, 'bridge0\x00', 'veth1_to_bond\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xff000000, 0xa, 0x2, {@mac=@random="0acc9bdf614c", {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x4, 0xfff7, 0x2, 0xf, 0xb, 0x0, 'veth0_to_bond\x00', 'pimreg1\x00', {}, {}, 0x0, 0x282}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000ac0)={<r10=>0x0, 0x9}, &(0x7f0000000b00)=0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000b40)=@assoc_id=r10, &(0x7f0000000b80)=0x4)
bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1}, 0xc)

8.171054552s ago: executing program 33 (id=4047):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x44, 0x18, 0x1, 0x1000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0x1c, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x17, 0x2, 'net_prio.ifpriomap\x00'}}}]}, 0x44}}, 0x44890) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async)
connect$inet(r1, 0x0, 0x0) (async)
writev(r1, &(0x7f0000000200), 0x0) (async)
shutdown(r1, 0x1) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r4, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000000)) (async)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) (async)
close(0x3) (async)
accept4(r0, 0x0, 0x0, 0x800) (async)
socket(0x1e, 0x4, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

141.735492ms ago: executing program 34 (id=4149):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000024c0)={'geneve0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0a}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cdf829613de05c780dd1b2b80c"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000)
r6 = socket$kcm(0x29, 0x5, 0x0)
accept(r6, 0x0, 0x0)
sendto$packet(r0, 0x0, 0x0, 0x200004c0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x9, 0x6, @multicast}, 0x14)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r7, &(0x7f0000000440), 0x10)
listen(r7, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r8, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
sendmmsg$inet(r8, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001040)="90", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[], 0x160}}], 0x2, 0x4000000)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r9, 0x6, 0x1, &(0x7f0000000dc0)=0xfffffffb, 0x4)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0)

110.248735ms ago: executing program 35 (id=4152):
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x48890)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
r2 = socket(0xf, 0x2, 0xd)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}})
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x2, 0x3fff}, 0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4)
ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0)
r4 = socket$inet(0x2, 0x3, 0x5)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000540)='syzkaller\x00'}, 0x90)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x7, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfd4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x4000)
r6 = socket$xdp(0x2c, 0x3, 0x0)
sendto(r6, 0x0, 0x0, 0x48041, 0x0, 0x0)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r7, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c)
shutdown(r7, 0x1)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt(r8, 0x84, 0x81, &(0x7f0000000300)="1a00000002000000", 0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000640)={<r9=>0x0, 0x1, 0x5, [0xfffb, 0x9, 0x9, 0x7a8, 0x3]}, &(0x7f0000000680)=0x12)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f00000006c0)={r9, 0x3, 0x30, 0x80000000, 0xe15b}, &(0x7f0000000700)=0x18)
setsockopt(r7, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @empty}}}, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xa4, 0x0, &(0x7f0000000900)="e0b9545ed387dbe9abc89b6b5bec91ec758f33c925cb9b6ea900901e10fef0a2dfeeba13d799aeeff206cc6053e3e13b997e63071daca1604e2f78ba2c8d61ab3ef5e49af72ceadd6967e7997c4666b02661620175c82e05ad05856d79c8699ee051284048d8817fcaa6db068f765dbc6da25f4724dd2e1a322acb12ba580432c6e5e37ab9c58b41daddd6775222fad8bb30928792576d657d4dbf01806aad6a8ae382c0", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0xe0, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @empty, 0x0, 0x0, 0x3, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@remote}, 0x4, 0x5, 0xfff8, 0x91fe, 0x3, 0x0, 'bridge0\x00', 'veth1_to_bond\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xff000000, 0xa, 0x2, {@mac=@random="0acc9bdf614c", {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x4, 0xfff7, 0x2, 0xf, 0xb, 0x0, 'veth0_to_bond\x00', 'pimreg1\x00', {}, {}, 0x0, 0x282}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000ac0)={<r10=>0x0, 0x9}, &(0x7f0000000b00)=0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000b40)=@assoc_id=r10, &(0x7f0000000b80)=0x4)
bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1}, 0xc)

68.4599ms ago: executing program 36 (id=4151):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000003c0)={0x0, 0x4d, &(0x7f0000000380)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd23, 0x25dfd3fc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x0, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0x0, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x0, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x0, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x0, 0x3, 0x555d}, @NL802154_DEV_ADDR_ATTR_SHORT={0x0, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0x0, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE, @NL802154_DEV_ADDR_ATTR_EXTENDED={0x0, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000049}, 0x24040001)

0s ago: executing program 37 (id=4146):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10) (async)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

kernel console output (not intermixed with test programs):

to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.608437][ T5834] Bluetooth: hci2: command tx timeout
[  440.700664][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.418425][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.561634][   T12] bond0 (unregistering): Released all slaves
[  441.651860][   T12] bond1 (unregistering): Released all slaves
[  441.668239][   T12] bond2 (unregistering): Released all slaves
[  441.682609][   T12] bond3 (unregistering): Released all slaves
[  441.777849][   T12] bond4 (unregistering): Released all slaves
[  441.791848][   T12] bond5 (unregistering): Released all slaves
[  441.817562][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.892969][   T12] bond6 (unregistering): Released all slaves
[  441.978518][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.992945][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.994138][   T12] bond7 (unregistering): Released all slaves
[  442.094886][   T12] bond8 (unregistering): Released all slaves
[  442.185983][   T12] bond9 (unregistering): Released all slaves
[  442.200455][   T12] bond10 (unregistering): Released all slaves
[  442.254803][T17813] syzkaller0: entered promiscuous mode
[  442.265382][T17813] syzkaller0: entered allmulticast mode
[  442.359845][   T12] : left promiscuous mode
[  442.497941][   T12] tipc: Left network mode
[  442.689256][ T5834] Bluetooth: hci2: command tx timeout
[  442.846310][T17838] lo speed is unknown, defaulting to 1000
[  442.914153][T17838] wg1 speed is unknown, defaulting to 1000
[  442.924252][T17750] chnl_net:caif_netlink_parms(): no params data found
[  442.975225][T17838] wg1 speed is unknown, defaulting to 1000
[  442.987715][T17848] __nla_validate_parse: 5 callbacks suppressed
[  442.987742][T17848] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3044'.
[  443.149731][T17852] lo speed is unknown, defaulting to 1000
[  443.209144][T17852] wg1 speed is unknown, defaulting to 1000
[  443.209177][T17861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3047'.
[  443.227283][T17861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3047'.
[  443.280741][T17852] wg1 speed is unknown, defaulting to 1000
[  443.391684][T17750] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.406333][T17750] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.420093][T17750] bridge_slave_0: entered allmulticast mode
[  443.444363][T17750] bridge_slave_0: entered promiscuous mode
[  443.555141][T17750] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.584504][T17750] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.603797][T17750] bridge_slave_1: entered allmulticast mode
[  443.616688][T17750] bridge_slave_1: entered promiscuous mode
[  443.625001][T17861] lo speed is unknown, defaulting to 1000
[  443.692418][T17861] wg1 speed is unknown, defaulting to 1000
[  443.773684][T17861] wg1 speed is unknown, defaulting to 1000
[  443.800756][T17750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  443.853534][T17750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  444.002811][T17750] team0: Port device team_slave_0 added
[  444.043862][T17750] team0: Port device team_slave_1 added
[  444.462018][T17750] batman_adv: batadv0: Adding interface: batadv_slave_0
[  444.485946][T17750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  444.520307][T17750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  444.541286][  T981] net_ratelimit: 3 callbacks suppressed
[  444.541300][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.684646][T17750] batman_adv: batadv0: Adding interface: batadv_slave_1
[  444.693039][T17750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  444.747311][T17750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  444.767412][ T5834] Bluetooth: hci2: command tx timeout
[  445.063782][   T12] pimreg3 (unregistering): left allmulticast mode
[  445.099054][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.579055][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.832472][ T8803] lo speed is unknown, defaulting to 1000
[  445.839679][ T8803] infiniband syz1: ib_query_port failed (-19)
[  445.878661][T17750] hsr_slave_0: entered promiscuous mode
[  445.885481][T17750] hsr_slave_1: entered promiscuous mode
[  445.890547][T17909] netlink: 'syz.1.3056': attribute type 1 has an invalid length.
[  445.913726][T17750] debugfs: 'hsr0' already exists in 'hsr'
[  445.926714][T17750] Cannot create hsr debugfs directory
[  445.979853][T17913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3057'.
[  446.009776][T17914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3056'.
[  446.047449][T17914] 8021q: adding VLAN 0 to HW filter on device bond7
[  446.148272][T17913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3057'.
[  446.222799][T17926] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3059'.
[  446.227707][T17913] vlan2: entered promiscuous mode
[  446.238589][T17913] bond0: entered promiscuous mode
[  446.243654][T17913] bond_slave_0: entered promiscuous mode
[  446.283298][T17913] bond_slave_1: entered promiscuous mode
[  446.377157][T17933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.386169][T17930] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3059'.
[  446.435969][T17933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.449159][T17939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3063'.
[  446.459813][T17932] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.494043][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3061'.
[  446.550670][T17933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.608545][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.648370][T17933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.688682][T17937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.736913][T17937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.791020][T17932] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.817964][T17951] ipt_rpfilter: unknown options
[  446.850331][ T5834] Bluetooth: hci2: command tx timeout
[  447.165202][T17932] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.273712][   T12] IPVS: stop unused estimator thread 0...
[  447.359221][T17932] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.814647][ T6039] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.832877][T17994] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 0, id = 0
[  447.924230][ T6039] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.934093][T17997] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  447.954856][ T6039] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  448.007259][ T6039] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  448.051968][T18004] netlink: 'syz.1.3080': attribute type 1 has an invalid length.
[  448.175189][T18006] bond0: (slave rose0): Error: Device can not be enslaved while up
[  448.186099][T18008] netlink: 'syz.4.3082': attribute type 1 has an invalid length.
[  448.202525][T18010] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address
[  448.214769][T18010] bond8: (slave vxcan5): Error -95 calling set_mac_address
[  448.225609][T18004] __nla_validate_parse: 5 callbacks suppressed
[  448.225624][T18004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3080'.
[  448.298839][T18004] 8021q: adding VLAN 0 to HW filter on device bond8
[  448.351043][T18015] bond8: (slave bridge6): Enslaving as an active interface with a down link
[  448.521589][T18004] macvlan5: entered promiscuous mode
[  448.529035][T18004] macvlan5: entered allmulticast mode
[  448.537512][T18004] bond8: entered promiscuous mode
[  448.544937][T18004] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  448.560671][T18004] bond8: left promiscuous mode
[  448.800032][T17750] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  448.839659][T17750] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  448.859616][T17750] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  448.884038][T17750] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  448.909834][T18034] tipc: Started in network mode
[  448.914952][T18034] tipc: Node identity 4246, cluster identity 4
[  448.922083][T18034] tipc: Node number set to 16966
[  448.954398][T18037] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  448.975386][T18037] tipc: Resetting bearer <eth:syzkaller0>
[  449.121889][T18052] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3091'.
[  449.145798][T18052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3091'.
[  449.162074][T17750] 8021q: adding VLAN 0 to HW filter on device bond0
[  449.170342][T18051] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3091'.
[  449.201772][T18051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3091'.
[  449.280924][T17750] 8021q: adding VLAN 0 to HW filter on device team0
[  449.308844][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.316106][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  449.352208][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.359821][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  449.581085][T18079] netlink: 'syz.3.3096': attribute type 21 has an invalid length.
[  449.606171][T18079] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3096'.
[  449.650196][ T8794] net_ratelimit: 130 callbacks suppressed
[  449.650218][ T8794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.669261][T18079] netlink: 'syz.3.3096': attribute type 5 has an invalid length.
[  449.690247][T18079] netlink: 'syz.3.3096': attribute type 6 has an invalid length.
[  449.711409][T18079] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3096'.
[  449.729384][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.763918][T18086] netlink: 'syz.1.3098': attribute type 1 has an invalid length.
[  449.800782][T18086] netlink: 'syz.1.3098': attribute type 3 has an invalid length.
[  449.841064][T18086] netlink: 'syz.1.3098': attribute type 2 has an invalid length.
[  449.858201][T17750] 8021q: adding VLAN 0 to HW filter on device batadv0
[  449.865126][T18086] netlink: 'syz.1.3098': attribute type 3 has an invalid length.
[  449.882201][T18086] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3098'.
[  450.008192][T18095] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3100'.
[  450.018129][T18094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3099'.
[  450.060187][T17750] veth0_vlan: entered promiscuous mode
[  450.123268][T17750] veth1_vlan: entered promiscuous mode
[  450.211333][T17750] veth0_macvtap: entered promiscuous mode
[  450.248716][T17750] veth1_macvtap: entered promiscuous mode
[  450.300085][T17750] batman_adv: batadv0: Interface activated: batadv_slave_0
[  450.387255][T17750] batman_adv: batadv0: Interface activated: batadv_slave_1
[  450.420551][ T1336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.432390][ T1336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.445808][ T1336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.461319][ T1336] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.568411][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  450.577015][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.637375][ T6039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  450.645256][ T6039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.781128][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.920854][T18116] netlink: 'syz.0.3019': attribute type 1 has an invalid length.
[  450.937389][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.471152][T18125] batman_adv: batadv0: Adding interface: dummy0
[  451.498025][T18125] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.601868][T18125] batman_adv: batadv0: Interface activated: dummy0
[  451.813328][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.959548][T18139] syzkaller1: entered promiscuous mode
[  451.981566][T18139] syzkaller1: entered allmulticast mode
[  452.048409][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.092483][   T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  452.104866][   T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  452.113774][   T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  452.122333][   T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  452.133735][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  452.521248][T18143] wg1 speed is unknown, defaulting to 1000
[  452.531775][T18143] wg1 speed is unknown, defaulting to 1000
[  452.859916][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.099143][ T5834] block nbd2: Receive control failed (result -32)
[  453.131450][T18190] tipc: Started in network mode
[  453.136663][T18190] tipc: Node identity 829a479af114, cluster identity 4711
[  453.144112][T18190] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  453.151340][T18194] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  453.161616][T18190] syzkaller0: entered promiscuous mode
[  453.176887][T18190] syzkaller0: entered allmulticast mode
[  453.211131][T18194] tipc: Resetting bearer <eth:syzkaller0>
[  453.235975][T18189] tipc: Resetting bearer <eth:syzkaller0>
[  453.261406][T18189] tipc: Disabling bearer <eth:syzkaller0>
[  453.285556][T18143] chnl_net:caif_netlink_parms(): no params data found
[  453.344349][T18200] 0: reclassify loop, rule prio 0, protocol 800
[  453.436379][T18209] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20000
[  453.650638][T18143] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.667307][T18143] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.674945][T18143] bridge_slave_0: entered allmulticast mode
[  453.684278][T18143] bridge_slave_0: entered promiscuous mode
[  453.710520][T18143] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.725689][T18143] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.742259][T18143] bridge_slave_1: entered allmulticast mode
[  453.761692][T18143] bridge_slave_1: entered promiscuous mode
[  453.884104][T18143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.894973][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.922655][T18143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.079771][T18143] team0: Port device team_slave_0 added
[  454.104989][T18143] team0: Port device team_slave_1 added
[  454.209279][ T5834] Bluetooth: hci1: command tx timeout
[  454.249597][T18241] __nla_validate_parse: 7 callbacks suppressed
[  454.249622][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3135'.
[  454.281536][T18143] batman_adv: batadv0: Adding interface: batadv_slave_0
[  454.299878][T18143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  454.370216][T18143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  454.395436][T18233] wg1 speed is unknown, defaulting to 1000
[  454.438740][T18143] batman_adv: batadv0: Adding interface: batadv_slave_1
[  454.454549][T18143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  454.484270][T18143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.496322][T18249] wg1 speed is unknown, defaulting to 1000
[  454.505807][T18233] wg1 speed is unknown, defaulting to 1000
[  454.562140][T18249] wg1 speed is unknown, defaulting to 1000
[  454.682904][T18143] hsr_slave_0: entered promiscuous mode
[  454.698566][T18143] hsr_slave_1: entered promiscuous mode
[  454.707829][T18143] debugfs: 'hsr0' already exists in 'hsr'
[  454.713750][T18143] Cannot create hsr debugfs directory
[  454.811089][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3139'.
[  454.929020][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.088978][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.093216][T18266] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  455.369327][T18274] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  455.434592][T18143] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  455.598535][T18143] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  455.724177][T18143] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  455.822940][T18143] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  455.950743][T18289] wg1 speed is unknown, defaulting to 1000
[  455.977044][ T8803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.021860][T18289] wg1 speed is unknown, defaulting to 1000
[  456.086194][T18292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3148'.
[  456.135315][T18301] x_tables: duplicate entry at hook 2
[  456.287756][ T5834] Bluetooth: hci1: command tx timeout
[  457.021507][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.066573][T18304] Bluetooth: hci0: Opcode 0x080f failed: -4
[  457.155845][T18307] nbd: socks must be embedded in a SOCK_ITEM attr
[  457.191489][T18307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3152'.
[  457.214468][T18309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  458.051268][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.128552][ T8794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.291061][ T5834] Bluetooth: hci0: command 0x0405 tx timeout
[  458.371238][ T5834] Bluetooth: hci1: command tx timeout
[  458.683306][T18320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3157'.
[  458.758016][T18314] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.765865][T18314] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.817388][T18327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3157'.
[  458.831455][T18314] batman_adv: batadv0: Interface deactivated: dummy0
[  458.925725][T18314] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  458.949094][T18314] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  459.092100][ T8803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.148723][T18320] lo: entered allmulticast mode
[  459.154075][T18323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3155'.
[  459.165228][T18325] lo: left allmulticast mode
[  459.180093][ T3443] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.198402][ T3443] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.211115][ T3443] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.229719][T18143] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  459.248455][ T3443] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.259220][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.274909][T18143] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  459.278727][T18316] wg1 speed is unknown, defaulting to 1000
[  459.295909][T18316] wg1 speed is unknown, defaulting to 1000
[  459.298326][T18143] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  459.321222][T18143] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  459.571786][T18143] 8021q: adding VLAN 0 to HW filter on device bond0
[  459.658220][T18342] vxcan3: entered allmulticast mode
[  459.894839][T18355] xt_CT: No such helper "snmp_trap"
[  460.127351][ T8803] net_ratelimit: 1 callbacks suppressed
[  460.127375][ T8803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.447824][ T5834] Bluetooth: hci1: command tx timeout
[  460.843532][T18360] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  460.883511][T18381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.895380][T18381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.938552][T18143] 8021q: adding VLAN 0 to HW filter on device team0
[  460.946937][T18381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.958065][T18381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.993306][T18360] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.081438][ T6071] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.088796][ T6071] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.116443][ T6071] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.123714][ T6071] bridge0: port 2(bridge_slave_1) entered forwarding state
[  461.167593][ T8794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.176007][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.258335][T18360] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.328167][T18391] tc_dump_action: action bad kind
[  461.395259][T18360] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.474732][T18399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3174'.
[  461.790047][T18408] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  461.883884][T18408] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  461.919390][ T6071] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  461.981449][ T6071] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  462.023723][T18414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.072994][T18416] wg1 speed is unknown, defaulting to 1000
[  462.096221][T18416] wg1 speed is unknown, defaulting to 1000
[  462.160121][T18421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3178'.
[  462.207562][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.215893][T18143] 8021q: adding VLAN 0 to HW filter on device batadv0
[  462.233379][T18425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  462.302286][T18423] syzkaller0: entered promiscuous mode
[  462.308769][T18423] syzkaller0: entered allmulticast mode
[  462.331215][T18429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3179'.
[  462.461059][ T8803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.517452][T18143] veth0_vlan: entered promiscuous mode
[  464.551478][T18442] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3183'.
[  464.571852][T18143] veth1_vlan: entered promiscuous mode
[  464.651693][T18143] veth0_macvtap: entered promiscuous mode
[  464.675889][T18143] veth1_macvtap: entered promiscuous mode
[  464.743465][T18143] batman_adv: batadv0: Interface activated: batadv_slave_0
[  464.796137][T18143] batman_adv: batadv0: Interface activated: batadv_slave_1
[  464.827560][ T6071] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.879129][T18459] netlink: 'syz.0.3186': attribute type 12 has an invalid length.
[  464.897083][ T6071] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.930295][ T6071] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  464.981803][ T6071] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.343471][  T981] net_ratelimit: 7 callbacks suppressed
[  465.343493][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.431163][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.444433][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.500892][T12457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.510591][T12457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.599967][T18485] netlink: 'syz.1.3193': attribute type 1 has an invalid length.
[  465.651757][T18485] 8021q: adding VLAN 0 to HW filter on device bond9
[  465.658815][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  466.299257][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.367960][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.577681][T18527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3204'.
[  466.699213][T18532] netlink: 'syz.4.3205': attribute type 1 has an invalid length.
[  466.788047][T18527] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  466.890320][T18527] bond1 (unregistering): Released all slaves
[  467.093847][T12457] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  467.263345][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  467.278462][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  467.287897][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  467.308381][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  467.318438][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  467.409813][ T8803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.442567][T12457] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  467.547387][T18553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  467.588340][T12457] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  467.750201][T18553] syzkaller0: entered promiscuous mode
[  467.755825][T18553] syzkaller0: entered allmulticast mode
[  467.767425][T18553] tipc: Resetting bearer <eth:syzkaller0>
[  467.777327][T18546] wg1 speed is unknown, defaulting to 1000
[  467.795125][T12457] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  467.812249][T18546] wg1 speed is unknown, defaulting to 1000
[  467.826705][T18552] tipc: Resetting bearer <eth:syzkaller0>
[  467.930814][T18565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3212'.
[  468.069933][ T8794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  468.227785][T18575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3215'.
[  468.452484][ T8803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  468.789690][T18582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3217'.
[  468.856942][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.417893][ T5834] Bluetooth: hci3: command tx timeout
[  469.498130][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.507444][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.675772][T18552] tipc: Disabling bearer <eth:syzkaller0>
[  469.728381][ T8803] tipc: Node number set to 1938704282
[  470.012645][T12457] veth3: left allmulticast mode
[  470.020642][T12457] veth3: left promiscuous mode
[  470.040695][T12457] bridge1: port 2(veth3) entered disabled state
[  470.056213][T12457] ip6gretap2: left allmulticast mode
[  470.068928][T12457] ip6gretap2: left promiscuous mode
[  470.092576][T18606] netlink: 'syz.2.3223': attribute type 6 has an invalid length.
[  470.127653][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.138777][T12457] bridge1: port 1(ip6gretap2) entered disabled state
[  470.541089][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.763339][T12457] geneve0 (unregistering): left promiscuous mode
[  470.780110][ T3443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.078430][T12457] bond8 (unregistering): (slave bridge6): Releasing active interface
[  471.137465][T12457] bond0 (unregistering): Released all slaves
[  471.249488][T12457] bond1 (unregistering): Released all slaves
[  471.346921][T12457] bond2 (unregistering): Released all slaves
[  471.449869][T12457] bond3 (unregistering): Released all slaves
[  471.463967][T12457] bond4 (unregistering): Released all slaves
[  471.478910][T12457] bond5 (unregistering): Released all slaves
[  471.488247][ T5834] Bluetooth: hci3: command tx timeout
[  471.577561][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.595036][T12457] bond6 (unregistering): Released all slaves
[  471.693829][T12457] bond7 (unregistering): Released all slaves
[  471.791908][T12457] bond8 (unregistering): Released all slaves
[  471.893290][T12457] bond9 (unregistering): Released all slaves
[  471.999662][T18618] wg1 speed is unknown, defaulting to 1000
[  472.047937][T18618] wg1 speed is unknown, defaulting to 1000
[  472.054117][T18617] wg1 speed is unknown, defaulting to 1000
[  472.098373][T12457] : left promiscuous mode
[  472.174630][T18617] wg1 speed is unknown, defaulting to 1000
[  472.232379][T12457] !©�9: left promiscuous mode
[  472.277766][T18546] chnl_net:caif_netlink_parms(): no params data found
[  472.427145][T12457] tipc: Left network mode
[  472.609517][ T8803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.813478][T18546] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.823134][T18546] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.830623][T18546] bridge_slave_0: entered allmulticast mode
[  472.840982][T18546] bridge_slave_0: entered promiscuous mode
[  472.915578][T18659] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.923524][T18659] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  472.957285][T18546] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.998257][T18546] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.006173][T18546] bridge_slave_1: entered allmulticast mode
[  473.015448][T18546] bridge_slave_1: entered promiscuous mode
[  473.143867][T18546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  473.167783][  T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.305693][T18546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  473.327967][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.336885][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.341622][T18667] dvmrp0: entered allmulticast mode
[  473.566920][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.575720][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.585212][ T5834] Bluetooth: hci3: command tx timeout
[  473.704778][T18682] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3239'.
[  473.763990][T18546] team0: Port device team_slave_0 added
[  473.959233][T18689] xt_hashlimit: size too large, truncated to 1048576
[  473.968446][T18689] xt_hashlimit: max too large, truncated to 1048576
[  474.006687][T12457] hsr_slave_0: left promiscuous mode
[  475.283032][T18546] team0: Port device team_slave_1 added
[  475.383602][T18546] batman_adv: batadv0: Adding interface: batadv_slave_0
[  475.405186][T18546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  475.444903][T18546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  475.465106][T18737] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3246'.
[  475.496879][T18546] batman_adv: batadv0: Adding interface: batadv_slave_1
[  475.506121][T18546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  475.585380][T18546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  475.655406][T18742] 8021q: adding VLAN 0 to HW filter on device team0
[  475.656643][ T5834] Bluetooth: hci3: command tx timeout
[  475.679102][T18742] batman_adv: batadv0: Interface activated: dummy0
[  475.689154][T18742] net_ratelimit: 4 callbacks suppressed
[  475.689164][T18742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  475.771444][T18743] wg1 speed is unknown, defaulting to 1000
[  475.817365][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.840138][T18736] wg1 speed is unknown, defaulting to 1000
[  475.889564][   T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.898543][T12456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.936074][T18546] hsr_slave_0: entered promiscuous mode
[  475.943084][T18546] hsr_slave_1: entered promiscuous mode
[  475.949491][T18546] debugfs: 'hsr0' already exists in 'hsr'
[  475.955247][T18546] Cannot create hsr debugfs directory
[  476.194571][T12457] IPVS: stop unused estimator thread 0...
[  476.352102][T18766] netlink: 'syz.2.3254': attribute type 1 has an invalid length.
[  476.530682][ T8803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.590875][T18768] vlan2: entered allmulticast mode
[  476.614707][T18768] veth1: entered allmulticast mode
[  476.848248][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.875676][T18792] xt_NFQUEUE: number of queues (65532) out of range (got 118598)
[  476.938849][T18792] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3261'.
[  477.321718][T18807] wg1 speed is unknown, defaulting to 1000
[  477.390934][T18819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.399026][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3268'.
[  477.413908][T18546] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  477.435544][T18546] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  477.469532][T18546] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  477.476863][T18824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3268'.
[  477.493506][T18546] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  477.709782][T18546] 8021q: adding VLAN 0 to HW filter on device bond0
[  477.767333][T18546] 8021q: adding VLAN 0 to HW filter on device team0
[  477.796143][T18690] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.803364][T18690] bridge0: port 1(bridge_slave_0) entered forwarding state
[  477.844127][T18690] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.851386][T18690] bridge0: port 2(bridge_slave_1) entered forwarding state
[  477.890377][ T8803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.963153][T18840] wg1 speed is unknown, defaulting to 1000
[  478.249440][T18546] 8021q: adding VLAN 0 to HW filter on device batadv0
[  478.334112][T18546] veth0_vlan: entered promiscuous mode
[  478.348216][T18546] veth1_vlan: entered promiscuous mode
[  478.395373][T18546] veth0_macvtap: entered promiscuous mode
[  478.408938][T18546] veth1_macvtap: entered promiscuous mode
[  478.554941][T18546] batman_adv: batadv0: Interface activated: batadv_slave_0
[  478.571216][T18546] batman_adv: batadv0: Interface activated: batadv_slave_1
[  478.610364][T18852] netlink: 'syz.4.3274': attribute type 2 has an invalid length.
[  478.619055][T18852] netlink: 'syz.4.3274': attribute type 5 has an invalid length.
[  478.629599][T18852] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3274'.
[  478.642073][T12457] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  478.649584][T18852] netlink: 3200 bytes leftover after parsing attributes in process `syz.4.3274'.
[  478.662359][T12457] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  478.671846][T12457] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  478.683995][T12457] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.866728][T18860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.889726][T18860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.068166][T18872] netlink: 'syz.2.3279': attribute type 1 has an invalid length.
[  479.106970][T18872] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3279'.
[  479.166959][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.186013][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.263776][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.285553][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.298214][T18878] sctp: [Deprecated]: syz.3.3282 (pid 18878) Use of int in max_burst socket option.
[  479.298214][T18878] Use struct sctp_assoc_value instead
[  479.486241][T18897] netlink: 'syz.0.3285': attribute type 13 has an invalid length.
[  479.787249][T18897] batman_adv: batadv0: Interface deactivated: dummy0
[  479.841644][T18896] batman_adv: batadv0: Adding interface: dummy0
[  479.848415][T18896] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  479.875113][T18896] batman_adv: batadv0: Interface activated: dummy0
[  479.899152][T18892] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  479.965251][T18892] tipc: Disabling bearer <eth:syzkaller0>
[  480.032824][T18912] netlink: 'syz.3.3288': attribute type 29 has an invalid length.
[  480.541935][T18938] wg1 speed is unknown, defaulting to 1000
[  481.046409][ T5894] net_ratelimit: 213 callbacks suppressed
[  481.046432][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.180565][T18957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.251714][T18961] netlink: 'syz.3.3299': attribute type 1 has an invalid length.
[  481.300772][T18961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3299'.
[  481.381056][T18969] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  481.395956][T18969] sctp: [Deprecated]: syz.0.3302 (pid 18969) Use of int in max_burst socket option.
[  481.395956][T18969] Use struct sctp_assoc_value instead
[  481.652469][ T5023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.660678][ T5023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.827968][T18993] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  481.867971][T18997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3311'.
[  482.007763][T18993] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3308'.
[  482.051989][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.539780][T18982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  482.555581][T19004] netlink: 'syz.4.3313': attribute type 11 has an invalid length.
[  482.586890][T19004] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3313'.
[  482.781947][T19030] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  482.805461][T19030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3321'.
[  482.832781][T19030] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3321'.
[  482.844693][T19030] netlink: 'syz.1.3321': attribute type 9 has an invalid length.
[  483.088431][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.214997][T19046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3325'.
[  483.241236][T19046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3325'.
[  483.269025][T19046] netlink: 'syz.4.3325': attribute type 7 has an invalid length.
[  483.361530][T19051] syzkaller0: entered promiscuous mode
[  483.367714][T19051] syzkaller0: entered allmulticast mode
[  483.381408][T19051] tipc: Started in network mode
[  483.390271][T19051] tipc: Node identity 6e4c4bea133b, cluster identity 4711
[  483.398947][T19051] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  483.498792][T19054] tipc: Resetting bearer <eth:syzkaller0>
[  483.569076][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.596768][T19050] tipc: Resetting bearer <eth:syzkaller0>
[  483.623755][T19050] tipc: Disabling bearer <eth:syzkaller0>
[  484.207374][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.216052][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.294549][T19074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3333'.
[  484.468721][T19082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3335'.
[  484.737627][T19095] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3339'.
[  484.854270][T19091] wg1 speed is unknown, defaulting to 1000
[  484.960956][T19098] wg1 speed is unknown, defaulting to 1000
[  485.010850][T10954] IPVS: starting estimator thread 0...
[  485.106801][T19105] IPVS: using max 30 ests per chain, 72000 per kthread
[  485.369491][T19102] wg1 speed is unknown, defaulting to 1000
[  485.608422][T19131] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3348'.
[  485.645410][T19131] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3348'.
[  485.678450][T19135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3349'.
[  485.751910][T19135] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3349'.
[  485.871468][T19134] bond1: option lp_interval: invalid value (0)
[  485.905170][T19134] bond1: option lp_interval: allowed values 1 - 2147483647
[  485.914793][T19147] netlink: 178 bytes leftover after parsing attributes in process `syz.1.3352'.
[  485.930106][T19134] bond1 (unregistering): Released all slaves
[  485.989111][T19153] netlink: 592 bytes leftover after parsing attributes in process `syz.1.3352'.
[  486.015977][T19132] wg1 speed is unknown, defaulting to 1000
[  486.265350][T19161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3355'.
[  486.331972][ T5894] IPVS: starting estimator thread 0...
[  486.349528][T19169] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:19998
[  486.358594][T19167] tipc: Started in network mode
[  486.360888][T19169] net_ratelimit: 10 callbacks suppressed
[  486.360908][T19169] IPVS: nq: FWM 3 0x00000003 - no destination available
[  486.366103][T19167] tipc: Node identity 7a28ad11c94f, cluster identity 4711
[  486.390043][T19167] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  486.400324][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.418505][T19161] syzkaller0: entered promiscuous mode
[  486.427725][T19161] syzkaller0: entered allmulticast mode
[  486.436727][T19170] IPVS: using max 29 ests per chain, 69600 per kthread
[  486.679253][T19181] tipc: Resetting bearer <eth:syzkaller0>
[  486.771110][   T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.805872][T19160] tipc: Resetting bearer <eth:syzkaller0>
[  486.875438][T19160] tipc: Disabling bearer <eth:syzkaller0>
[  487.320623][T19182] wg1 speed is unknown, defaulting to 1000
[  487.367293][T19198] block nbd5: shutting down sockets
[  487.408452][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.421664][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.431322][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.452584][T19201] netlink: 'syz.1.3366': attribute type 21 has an invalid length.
[  487.479927][T19201] netlink: 'syz.1.3366': attribute type 5 has an invalid length.
[  487.490512][T19201] netlink: 'syz.1.3366': attribute type 6 has an invalid length.
[  487.530189][T19203] netlink: 'syz.4.3367': attribute type 13 has an invalid length.
[  487.556988][T19203] netlink: 'syz.4.3367': attribute type 12 has an invalid length.
[  487.647006][T19205] pim6reg1: entered allmulticast mode
[  488.131830][T19229] netlink: 'syz.3.3375': attribute type 2 has an invalid length.
[  488.152699][T19229] netlink: 'syz.3.3375': attribute type 1 has an invalid length.
[  488.689933][   T30] audit: type=1800 audit(1765351096.700:12): pid=19231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3374" name="memory.events" dev="tmpfs" ino=467 res=0 errno=0
[  488.924619][T19266] batadv_slave_0: entered promiscuous mode
[  488.933554][T19265] batadv_slave_0: left promiscuous mode
[  489.565528][T19281] netlink: 'syz.0.3387': attribute type 3 has an invalid length.
[  489.573656][T19281] __nla_validate_parse: 9 callbacks suppressed
[  489.573677][T19281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3387'.
[  490.045350][T19308] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 1, id = 0
[  490.217638][T19315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3397'.
[  490.246589][T19315] batman_adv: batadv0: Removing interface: batadv_slave_0
[  490.286182][T19315] batman_adv: batadv0: Removing interface: batadv_slave_1
[  490.328990][T19315] batman_adv: batadv0: Removing interface: dummy0
[  490.515655][T19321] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.544576][T19334] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3400'.
[  490.613295][T19339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3403'.
[  490.628229][T19321] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.741298][T19321] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.776745][T19349] x_tables: duplicate underflow at hook 2
[  490.832559][T19342] syzkaller0: entered promiscuous mode
[  490.838228][T19342] syzkaller0: entered allmulticast mode
[  490.876085][T19321] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.001727][T19351] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  491.088327][T19359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3407'.
[  492.459697][T19349] wg1 speed is unknown, defaulting to 1000
[  492.581110][ T6098] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  492.590333][T19364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3409'.
[  492.660120][ T6098] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  492.700661][   T38] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  492.774986][ T6039] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  492.787101][T19371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3412'.
[  492.803860][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3412'.
[  492.860094][T19375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3413'.
[  492.940995][T19379] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3415'.
[  492.964203][T19380] xt_TCPMSS: Only works on TCP SYN packets
[  493.069021][T19384] vlan3: entered promiscuous mode
[  493.198427][T19388] xt_connbytes: Forcing CT accounting to be enabled
[  493.314071][T19389] wg1 speed is unknown, defaulting to 1000
[  493.345499][T19367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  493.380105][T19398] erspan0: entered promiscuous mode
[  493.920436][T19434] netlink: zone id is out of range
[  493.925757][T19434] netlink: zone id is out of range
[  493.932161][T19434] netlink: zone id is out of range
[  493.942129][T19434] netlink: zone id is out of range
[  493.944772][T19437] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  493.947797][T19434] netlink: zone id is out of range
[  493.986953][T19434] netlink: zone id is out of range
[  493.992609][T19434] netlink: zone id is out of range
[  493.998923][T19434] netlink: zone id is out of range
[  494.004752][T19434] netlink: zone id is out of range
[  494.481108][T19456] wg1 speed is unknown, defaulting to 1000
[  496.367662][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  534.286908][   T52] Bluetooth: hci0: command 0x0405 tx timeout
[  559.886668][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  565.011187][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  580.366592][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  585.641746][ T5834] Bluetooth: hci3: link tx timeout
[  585.645802][T19463] __nla_validate_parse: 3 callbacks suppressed
[  585.645827][T19463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3439'.
[  585.650125][ T5834] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  585.689343][T19470] hsr0: entered promiscuous mode
[  585.695079][T19470] macsec1: entered promiscuous mode
[  585.738532][T19463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3439'.
[  586.380404][T19493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3445'.
[  586.434568][T19496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3446'.
[  586.462046][T19493] nbd: socks must be embedded in a SOCK_ITEM attr
[  586.601945][T12457] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  586.630805][T12457] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  586.640940][T18971] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  586.757628][T19504] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3447'.
[  586.767271][T19499] syzkaller0: entered promiscuous mode
[  586.796469][T19499] syzkaller0: entered allmulticast mode
[  586.847114][T19513] netlink: 'syz.4.3449': attribute type 4 has an invalid length.
[  586.890849][T18971] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  587.250024][T19522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3450'.
[  587.408813][T18971] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  587.695314][T19536] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3451'.
[  587.727697][ T5834] Bluetooth: hci3: command 0x0406 tx timeout
[  587.766226][T19532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3451'.
[  589.056931][T19531] netlink: 'syz.4.3452': attribute type 1 has an invalid length.
[  589.077541][T19531] netlink: 'syz.4.3452': attribute type 1 has an invalid length.
[  589.085340][T19531] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3452'.
[  589.221691][T19541] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3454'.
[  589.250970][T19542] sctp: [Deprecated]: syz.2.3455 (pid 19542) Use of int in maxseg socket option.
[  589.250970][T19542] Use struct sctp_assoc_value instead
[  589.260442][T19540] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  589.437825][T19558] x_tables: duplicate underflow at hook 1
[  589.447109][T19555] netlink: 'syz.2.3458': attribute type 13 has an invalid length.
[  589.474546][T19555] netlink: 'syz.2.3458': attribute type 17 has an invalid length.
[  589.604137][T19555] net_ratelimit: 45 callbacks suppressed
[  589.604151][T19555] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  589.754944][T19576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  589.787490][T19576] syzkaller0: entered promiscuous mode
[  589.805541][T19576] syzkaller0: entered allmulticast mode
[  589.834237][T19576] tipc: Resetting bearer <eth:syzkaller0>
[  589.939091][T19586] tipc: Resetting bearer <eth:syzkaller0>
[  589.973715][T19586] tipc: Disabling bearer <eth:syzkaller0>
[  590.061188][T19593] bond1: Removing last arp target with arp_interval on
[  590.167461][T19604] netlink: 'syz.3.3472': attribute type 49 has an invalid length.
[  590.248553][T19597] wg1 speed is unknown, defaulting to 1000
[  590.845850][T19638] __nla_validate_parse: 37 callbacks suppressed
[  590.845873][T19638] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3481'.
[  590.873078][T19643] netlink: 'syz.1.3483': attribute type 2 has an invalid length.
[  590.904775][T19643] : entered promiscuous mode
[  590.939550][T19644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3483'.
[  590.949039][T19643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3483'.
[  591.006562][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  591.249362][T19671] : entered promiscuous mode
[  591.407865][T19680] netlink: 'syz.4.3493': attribute type 12 has an invalid length.
[  591.416231][T19680] netlink: 'syz.4.3493': attribute type 29 has an invalid length.
[  591.427952][T19676] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3491'.
[  591.429448][T19680] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3493'.
[  591.560212][T19684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3494'.
[  591.586554][T19684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3494'.
[  591.619476][T19684] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1
[  591.646714][T19684] erspan1: entered allmulticast mode
[  591.762919][T19699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3495'.
[  591.772471][T19699] bridge_slave_1: left allmulticast mode
[  591.778544][T19699] bridge_slave_1: left promiscuous mode
[  591.789071][T19699] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.836686][T19699] bridge_slave_0: left allmulticast mode
[  591.849937][T19699] bridge_slave_0: left promiscuous mode
[  591.879490][T19699] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.929146][T19707] netlink: 'syz.2.3499': attribute type 1 has an invalid length.
[  592.038213][T19707] 8021q: adding VLAN 0 to HW filter on device bond1
[  592.059587][T19709] gretap1: entered promiscuous mode
[  592.070725][T19709] bond1: (slave gretap1): making interface the new active one
[  592.079703][T19709] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  592.363781][T19726] tipc: Started in network mode
[  592.369202][T19726] tipc: Node identity bea54c370268, cluster identity 4711
[  592.378016][T19726] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  592.405428][T19726] syzkaller0: entered promiscuous mode
[  592.429525][T19726] syzkaller0: entered allmulticast mode
[  592.527000][T19726] tipc: Resetting bearer <eth:syzkaller0>
[  592.542312][T19726] veth1_to_bond: entered allmulticast mode
[  592.550794][T19722] veth1_to_bond: left allmulticast mode
[  592.568361][T19722] tipc: Resetting bearer <eth:syzkaller0>
[  592.622851][T19722] tipc: Disabling bearer <eth:syzkaller0>
[  592.697773][T10954] IPVS: starting estimator thread 0...
[  592.732056][T19742] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3509'.
[  592.786576][T19743] IPVS: using max 29 ests per chain, 69600 per kthread
[  593.013409][T19761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3514'.
[  599.407182][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  616.046750][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  648.047018][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  663.872695][T19802] wg1 speed is unknown, defaulting to 1000
[  664.022810][T19809] wg1 speed is unknown, defaulting to 1000
[  664.273394][T19825] wg1 speed is unknown, defaulting to 1000
[  664.355708][T19829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3534'.
[  664.946575][T19863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3543'.
[  664.962910][T19863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3543'.
[  665.031359][T19854] wg1 speed is unknown, defaulting to 1000
[  665.236182][T19875] syzkaller0: entered promiscuous mode
[  665.243774][T19875] syzkaller0: entered allmulticast mode
[  665.381534][T19880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3550'.
[  665.627353][ T6039] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.810527][ T6039] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.984896][ T6039] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.055268][T19897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3554'.
[  666.200207][ T6039] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.255222][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  666.265253][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  666.284995][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  666.293395][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  666.301378][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  666.432708][T19912] wg1 speed is unknown, defaulting to 1000
[  666.449404][ T6039] bridge_slave_1: left allmulticast mode
[  666.456066][ T6039] bridge_slave_1: left promiscuous mode
[  666.462352][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.475278][ T6039] bridge_slave_0: left allmulticast mode
[  666.482144][ T6039] bridge_slave_0: left promiscuous mode
[  666.488477][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.512653][T19922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3562'.
[  667.096353][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  667.107690][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  667.119047][ T6039] bond0 (unregistering): Released all slaves
[  667.286129][ T6039] : left promiscuous mode
[  667.419155][ T6039] tipc: Left network mode
[  667.433348][T19949] wg1 speed is unknown, defaulting to 1000
[  667.493470][T19957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3569'.
[  667.910506][T19912] chnl_net:caif_netlink_parms(): no params data found
[  668.039768][ T6039] hsr_slave_0: left promiscuous mode
[  668.049466][ T6039] hsr_slave_1: left promiscuous mode
[  668.056554][T19982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3576'.
[  668.066556][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  668.073978][ T6039] batadv0: mtu less than device minimum
[  668.082250][ T6039] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  668.094761][ T6039] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  668.106768][ T6039] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  668.118809][ T6039] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  668.130843][ T6039] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  668.142873][ T6039] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  668.154894][ T6039] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  668.166963][ T6039] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  668.178950][ T6039] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  668.198971][T19987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3576'.
[  668.209409][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0
[  668.218412][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  668.258310][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1
[  668.267069][ T6039] batman_adv: batadv0: Interface deactivated: dummy0
[  668.273827][ T6039] batman_adv: batadv0: Removing interface: dummy0
[  668.301355][ T6039] veth1_macvtap: left promiscuous mode
[  668.308313][ T6039] veth0_macvtap: left promiscuous mode
[  668.315619][ T6039] veth1_vlan: left promiscuous mode
[  668.356813][ T6039] veth0_vlan: left promiscuous mode
[  668.366806][ T5834] Bluetooth: hci3: command tx timeout
[  668.983716][ T6039] team0 (unregistering): Port device team_slave_1 removed
[  669.036764][ T6039] team0 (unregistering): Port device team_slave_0 removed
[  669.562302][T19989] wg1 speed is unknown, defaulting to 1000
[  669.656217][T20004] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3581'.
[  669.686874][T20009] netlink: 'syz.4.3583': attribute type 1 has an invalid length.
[  669.753877][T19912] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.762951][T19912] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.771551][T19912] bridge_slave_0: entered allmulticast mode
[  669.780026][T19912] bridge_slave_0: entered promiscuous mode
[  669.800077][T19912] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.816122][T19912] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.850114][T19912] bridge_slave_1: entered allmulticast mode
[  669.859552][T19912] bridge_slave_1: entered promiscuous mode
[  670.001251][T19912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  670.015136][T19912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  670.035885][T20021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3586'.
[  670.074889][ T6039] IPVS: stop unused estimator thread 0...
[  670.106985][T20017] wg1 speed is unknown, defaulting to 1000
[  670.126040][T19912] team0: Port device team_slave_0 added
[  670.138900][T19912] team0: Port device team_slave_1 added
[  670.173832][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3588'.
[  670.204121][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3588'.
[  670.226271][T19912] batman_adv: batadv0: Adding interface: batadv_slave_0
[  670.233535][T19912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  670.260543][T19912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  670.273311][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3588'.
[  670.283269][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3588'.
[  670.301381][T19912] batman_adv: batadv0: Adding interface: batadv_slave_1
[  670.316461][T19912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  670.343341][T19912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  670.354901][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3588'.
[  670.455289][ T5834] Bluetooth: hci3: command tx timeout
[  670.538321][T20027] FAULT_INJECTION: forcing a failure.
[  670.538321][T20027] name failslab, interval 1, probability 0, space 0, times 1
[  670.560969][T19912] hsr_slave_0: entered promiscuous mode
[  670.569112][T19912] hsr_slave_1: entered promiscuous mode
[  670.581657][T19912] debugfs: 'hsr0' already exists in 'hsr'
[  670.588032][T19912] Cannot create hsr debugfs directory
[  670.606709][T20027] CPU: 0 UID: 0 PID: 20027 Comm: syz.3.3589 Not tainted syzkaller #0 PREEMPT(full) 
[  670.606741][T20027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  670.606758][T20027] Call Trace:
[  670.606769][T20027]  <TASK>
[  670.606779][T20027]  dump_stack_lvl+0x189/0x250
[  670.606808][T20027]  ? __pfx____ratelimit+0x10/0x10
[  670.606835][T20027]  ? __pfx_dump_stack_lvl+0x10/0x10
[  670.606858][T20027]  ? __pfx__printk+0x10/0x10
[  670.606894][T20027]  ? __pfx___might_resched+0x10/0x10
[  670.606914][T20027]  ? fs_reclaim_acquire+0x7d/0x100
[  670.606953][T20027]  should_fail_ex+0x414/0x560
[  670.606983][T20027]  should_failslab+0xa8/0x100
[  670.607016][T20027]  kmem_cache_alloc_noprof+0x74/0x6f0
[  670.607041][T20027]  ? __kernfs_new_node+0xd7/0x7e0
[  670.607077][T20027]  __kernfs_new_node+0xd7/0x7e0
[  670.607107][T20027]  ? up_write+0x1ac/0x410
[  670.607138][T20027]  ? __pfx___kernfs_new_node+0x10/0x10
[  670.607181][T20027]  ? kernfs_root+0x1c/0x230
[  670.607214][T20027]  ? kernfs_root+0x1c/0x230
[  670.607240][T20027]  ? kernfs_root+0x1c/0x230
[  670.607272][T20027]  kernfs_new_node+0x102/0x210
[  670.607307][T20027]  kernfs_create_link+0xa7/0x200
[  670.607333][T20027]  sysfs_do_create_link_sd+0x83/0x110
[  670.607363][T20027]  device_add_class_symlinks+0xb6/0x240
[  670.607398][T20027]  device_add+0x475/0xb50
[  670.607425][T20027]  ? device_initialize+0x24b/0x440
[  670.607457][T20027]  wakeup_source_sysfs_add+0x1d3/0x2c0
[  670.607482][T20027]  wakeup_source_register+0x18a/0x380
[  670.607516][T20027]  ep_insert+0xff3/0x19e0
[  670.607555][T20027]  ? __pfx_ep_insert+0x10/0x10
[  670.607596][T20027]  ? bpf_lsm_capable+0x9/0x20
[  670.607627][T20027]  do_epoll_ctl+0x7f4/0xe80
[  670.607658][T20027]  __x64_sys_epoll_ctl+0x163/0x1a0
[  670.607682][T20027]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  670.607708][T20027]  ? do_syscall_64+0xbe/0xf80
[  670.607738][T20027]  do_syscall_64+0xfa/0xf80
[  670.607765][T20027]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  670.607785][T20027]  ? clear_bhb_loop+0x60/0xb0
[  670.607811][T20027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  670.607830][T20027] RIP: 0033:0x7f7b92d8f749
[  670.607849][T20027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  670.607868][T20027] RSP: 002b:00007f7b93bae038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  670.607895][T20027] RAX: ffffffffffffffda RBX: 00007f7b92fe5fa0 RCX: 00007f7b92d8f749
[  670.607911][T20027] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000003
[  670.607923][T20027] RBP: 00007f7b93bae090 R08: 0000000000000000 R09: 0000000000000000
[  670.607935][T20027] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000002
[  670.607949][T20027] R13: 00007f7b92fe6038 R14: 00007f7b92fe5fa0 R15: 00007ffd2f4853e8
[  670.607984][T20027]  </TASK>
[  671.171415][T20045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3594'.
[  671.187772][T20044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3591'.
[  671.249301][T20047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3596'.
[  671.401677][T20047] bond2: entered promiscuous mode
[  671.421858][T20047] 8021q: adding VLAN 0 to HW filter on device bond2
[  671.513681][T20037] wg1 speed is unknown, defaulting to 1000
[  671.792852][T20070] FAULT_INJECTION: forcing a failure.
[  671.792852][T20070] name failslab, interval 1, probability 0, space 0, times 0
[  671.878340][T20070] CPU: 0 UID: 0 PID: 20070 Comm: syz.2.3603 Not tainted syzkaller #0 PREEMPT(full) 
[  671.878371][T20070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  671.878384][T20070] Call Trace:
[  671.878392][T20070]  <TASK>
[  671.878401][T20070]  dump_stack_lvl+0x189/0x250
[  671.878429][T20070]  ? __pfx____ratelimit+0x10/0x10
[  671.878455][T20070]  ? __pfx_dump_stack_lvl+0x10/0x10
[  671.878479][T20070]  ? __pfx__printk+0x10/0x10
[  671.878513][T20070]  ? __pfx___might_resched+0x10/0x10
[  671.878533][T20070]  ? fs_reclaim_acquire+0x7d/0x100
[  671.878567][T20070]  should_fail_ex+0x414/0x560
[  671.878597][T20070]  should_failslab+0xa8/0x100
[  671.878630][T20070]  __kmalloc_node_track_caller_noprof+0xcd/0x810
[  671.878659][T20070]  ? __kernfs_new_node+0x9c/0x7e0
[  671.878695][T20070]  kstrdup+0x42/0x100
[  671.878716][T20070]  __kernfs_new_node+0x9c/0x7e0
[  671.878763][T20070]  ? __pfx___kernfs_new_node+0x10/0x10
[  671.878792][T20070]  ? kernfs_root+0x1c/0x230
[  671.878826][T20070]  ? kernfs_root+0x1c/0x230
[  671.878853][T20070]  ? kernfs_root+0x1c/0x230
[  671.878884][T20070]  kernfs_new_node+0x102/0x210
[  671.878919][T20070]  kernfs_create_link+0xa7/0x200
[  671.878945][T20070]  sysfs_do_create_link_sd+0x83/0x110
[  671.878976][T20070]  device_add_class_symlinks+0x1cf/0x240
[  671.879010][T20070]  device_add+0x475/0xb50
[  671.879038][T20070]  ? device_initialize+0x24b/0x440
[  671.879070][T20070]  wakeup_source_sysfs_add+0x1d3/0x2c0
[  671.879099][T20070]  wakeup_source_register+0x18a/0x380
[  671.879134][T20070]  ep_insert+0xff3/0x19e0
[  671.879172][T20070]  ? __pfx_ep_insert+0x10/0x10
[  671.879208][T20070]  ? bpf_lsm_capable+0x9/0x20
[  671.879239][T20070]  do_epoll_ctl+0x7f4/0xe80
[  671.879314][T20070]  __x64_sys_epoll_ctl+0x163/0x1a0
[  671.879340][T20070]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  671.879366][T20070]  ? do_syscall_64+0xbe/0xf80
[  671.879398][T20070]  do_syscall_64+0xfa/0xf80
[  671.879425][T20070]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.879446][T20070]  ? clear_bhb_loop+0x60/0xb0
[  671.879472][T20070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.879492][T20070] RIP: 0033:0x7ff56a98f749
[  671.879511][T20070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  671.879529][T20070] RSP: 002b:00007ff56b87e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  671.879552][T20070] RAX: ffffffffffffffda RBX: 00007ff56abe5fa0 RCX: 00007ff56a98f749
[  671.879567][T20070] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000003
[  671.879596][T20070] RBP: 00007ff56b87e090 R08: 0000000000000000 R09: 0000000000000000
[  671.879609][T20070] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000002
[  671.879622][T20070] R13: 00007ff56abe6038 R14: 00007ff56abe5fa0 R15: 00007ffdad8c3198
[  671.879659][T20070]  </TASK>
[  672.170553][T20077] netlink: 'syz.3.3604': attribute type 39 has an invalid length.
[  672.360705][T20083] bridge0: port 2(bridge_slave_1) entered disabled state
[  672.368698][T20083] bridge0: port 1(bridge_slave_0) entered disabled state
[  672.395476][T20083] netlink: 'syz.2.3606': attribute type 2 has an invalid length.
[  672.526495][ T5834] Bluetooth: hci3: command tx timeout
[  672.645004][T20079] wg1 speed is unknown, defaulting to 1000
[  672.660159][T19912] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  672.679038][T19912] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  672.712760][T19912] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  672.738494][T19912] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  673.029124][T20101] vlan2: entered allmulticast mode
[  673.038931][T20101] erspan0: entered allmulticast mode
[  673.170980][T19912] 8021q: adding VLAN 0 to HW filter on device bond0
[  673.221744][T19912] 8021q: adding VLAN 0 to HW filter on device team0
[  673.268886][ T5023] bridge0: port 1(bridge_slave_0) entered blocking state
[  673.276133][ T5023] bridge0: port 1(bridge_slave_0) entered forwarding state
[  673.319473][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  673.326745][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  673.401896][T20109] syzkaller0: entered promiscuous mode
[  673.418023][T20109] syzkaller0: entered allmulticast mode
[  673.564554][T20119] FAULT_INJECTION: forcing a failure.
[  673.564554][T20119] name failslab, interval 1, probability 0, space 0, times 0
[  673.629538][T20119] CPU: 1 UID: 0 PID: 20119 Comm: syz.2.3615 Not tainted syzkaller #0 PREEMPT(full) 
[  673.629570][T20119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  673.629583][T20119] Call Trace:
[  673.629592][T20119]  <TASK>
[  673.629601][T20119]  dump_stack_lvl+0x189/0x250
[  673.629630][T20119]  ? __pfx____ratelimit+0x10/0x10
[  673.629656][T20119]  ? __pfx_dump_stack_lvl+0x10/0x10
[  673.629679][T20119]  ? __pfx__printk+0x10/0x10
[  673.629709][T20119]  ? __pfx___might_resched+0x10/0x10
[  673.629732][T20119]  ? fs_reclaim_acquire+0x7d/0x100
[  673.629765][T20119]  should_fail_ex+0x414/0x560
[  673.629796][T20119]  should_failslab+0xa8/0x100
[  673.629828][T20119]  kmem_cache_alloc_noprof+0x74/0x6f0
[  673.629864][T20119]  ? __kernfs_new_node+0xd7/0x7e0
[  673.629899][T20119]  __kernfs_new_node+0xd7/0x7e0
[  673.629931][T20119]  ? up_write+0x1ac/0x410
[  673.629961][T20119]  ? __pfx___kernfs_new_node+0x10/0x10
[  673.629990][T20119]  ? kernfs_root+0x1c/0x230
[  673.630025][T20119]  ? kernfs_root+0x1c/0x230
[  673.630052][T20119]  ? kernfs_root+0x1c/0x230
[  673.630084][T20119]  kernfs_new_node+0x102/0x210
[  673.630119][T20119]  kernfs_create_link+0xa7/0x200
[  673.630146][T20119]  sysfs_do_create_link_sd+0x83/0x110
[  673.630175][T20119]  device_add_class_symlinks+0xb6/0x240
[  673.630210][T20119]  device_add+0x475/0xb50
[  673.630238][T20119]  ? device_initialize+0x24b/0x440
[  673.630271][T20119]  wakeup_source_sysfs_add+0x1d3/0x2c0
[  673.630296][T20119]  wakeup_source_register+0x18a/0x380
[  673.630331][T20119]  ep_insert+0xff3/0x19e0
[  673.630369][T20119]  ? __pfx_ep_insert+0x10/0x10
[  673.630405][T20119]  ? bpf_lsm_capable+0x9/0x20
[  673.630436][T20119]  do_epoll_ctl+0x7f4/0xe80
[  673.630467][T20119]  __x64_sys_epoll_ctl+0x163/0x1a0
[  673.630492][T20119]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  673.630518][T20119]  ? do_syscall_64+0xbe/0xf80
[  673.630549][T20119]  do_syscall_64+0xfa/0xf80
[  673.630576][T20119]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.630597][T20119]  ? clear_bhb_loop+0x60/0xb0
[  673.630623][T20119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.630643][T20119] RIP: 0033:0x7ff56a98f749
[  673.630661][T20119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  673.630680][T20119] RSP: 002b:00007ff56b87e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  673.630702][T20119] RAX: ffffffffffffffda RBX: 00007ff56abe5fa0 RCX: 00007ff56a98f749
[  673.630717][T20119] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000003
[  673.630729][T20119] RBP: 00007ff56b87e090 R08: 0000000000000000 R09: 0000000000000000
[  673.630742][T20119] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000002
[  673.630754][T20119] R13: 00007ff56abe6038 R14: 00007ff56abe5fa0 R15: 00007ffdad8c3198
[  673.630790][T20119]  </TASK>
[  674.389736][T19912] 8021q: adding VLAN 0 to HW filter on device batadv0
[  674.608895][ T5834] Bluetooth: hci3: command tx timeout
[  674.859502][T20162] __nla_validate_parse: 4 callbacks suppressed
[  674.859523][T20162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'.
[  675.316416][T20163] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3622'.
[  675.376469][T20163] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3622'.
[  675.387702][T20167] netlink: 'syz.0.3623': attribute type 12 has an invalid length.
[  675.588678][T19912] veth0_vlan: entered promiscuous mode
[  675.641689][T19912] veth1_vlan: entered promiscuous mode
[  675.742990][T19912] veth0_macvtap: entered promiscuous mode
[  675.779353][T19912] veth1_macvtap: entered promiscuous mode
[  675.850089][T19912] batman_adv: batadv0: Interface activated: batadv_slave_0
[  675.893022][T19912] batman_adv: batadv0: Interface activated: batadv_slave_1
[  675.944249][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  675.989412][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  676.011208][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  676.044741][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  676.255691][T20194] bond4: option arp_validate: invalid value (18446744073491447809)
[  676.265732][T20201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3633'.
[  676.277852][T20194] bond4 (unregistering): Released all slaves
[  676.315148][T20199] dvmrp0: entered allmulticast mode
[  676.317107][T20204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3633'.
[  676.329760][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  676.338222][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  676.383226][T20201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3633'.
[  676.433307][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  676.460900][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  676.537856][T20209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3635'.
[  676.595259][T20209] veth3: entered promiscuous mode
[  676.646040][T20213] xt_CT: No such helper "snmp"
[  676.760106][T20219] wg1 speed is unknown, defaulting to 1000
[  677.133055][T20227] wg1 speed is unknown, defaulting to 1000
[  677.198961][T20231] wg1 speed is unknown, defaulting to 1000
[  677.351620][T20239] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3638'.
[  678.072887][T20270] netlink: 'syz.2.3646': attribute type 1 has an invalid length.
[  678.092509][T20270] netlink: 'syz.2.3646': attribute type 2 has an invalid length.
[  678.161267][T20264] syzkaller0: entered promiscuous mode
[  678.176441][   T30] audit: type=1800 audit(1765351286.180:13): pid=20275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3649" name="blkio.bfq.time_recursive" dev="tmpfs" ino=33 res=0 errno=0
[  678.200692][T20264] syzkaller0: entered allmulticast mode
[  678.349906][T18971] IPVS: starting estimator thread 0...
[  678.456379][T20283] IPVS: using max 26 ests per chain, 62400 per kthread
[  678.623697][T20298] netlink: 'syz.5.3653': attribute type 10 has an invalid length.
[  678.682025][T20298] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  678.779583][T20312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3655'.
[  678.949472][T20320] tipc: Started in network mode
[  678.954401][T20320] tipc: Node identity 2eeaea0160db, cluster identity 4711
[  678.989515][T20320] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  679.009478][T20321] syzkaller0: entered promiscuous mode
[  679.028558][T20331] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  679.039738][T20321] syzkaller0: entered allmulticast mode
[  679.116221][T20321] tipc: Resetting bearer <eth:syzkaller0>
[  679.163100][T20321] tipc: Disabling bearer <eth:syzkaller0>
[  679.323828][T20342] netlink: 'syz.4.3665': attribute type 1 has an invalid length.
[  679.384440][T20342] bond1: entered promiscuous mode
[  679.390593][T20342] 8021q: adding VLAN 0 to HW filter on device bond1
[  679.425520][T20351] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  679.438599][T20351] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  679.449611][T20351] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  679.533794][T20364] netlink: 'syz.0.3670': attribute type 2 has an invalid length.
[  679.631577][T20348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3667'.
[  679.665493][T20366] wg1 speed is unknown, defaulting to 1000
[  679.700852][T20372] syzkaller0: entered promiscuous mode
[  679.706517][T20372] syzkaller0: entered allmulticast mode
[  679.873681][T20374] smc: adding net device geneve0 with user defined pnetid SYZ0
[  679.902025][T20376] wg1 speed is unknown, defaulting to 1000
[  679.955049][T20384] __nla_validate_parse: 1 callbacks suppressed
[  679.955070][T20384] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3674'.
[  680.247738][T20395] netlink: 'syz.5.3677': attribute type 13 has an invalid length.
[  680.443748][T20395] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.451603][T20395] bridge0: port 1(bridge_slave_0) entered disabled state
[  680.608421][T20395] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  680.629917][T20395] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  680.638757][T20412] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3680'.
[  681.047242][ T5023] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  681.142193][ T5023] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  681.156588][ T5023] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  681.179762][T20436] netlink: 'syz.2.3687': attribute type 16 has an invalid length.
[  681.205345][ T5023] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  681.218589][T20436] netlink: 'syz.2.3687': attribute type 17 has an invalid length.
[  681.228094][T20406] wg1 speed is unknown, defaulting to 1000
[  681.267490][T20440] netlink: 'syz.0.3688': attribute type 1 has an invalid length.
[  681.277329][T20440] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3688'.
[  681.375277][T20447] netlink: 'syz.4.3690': attribute type 2 has an invalid length.
[  681.498821][T20436] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  681.529245][T20436] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  681.675901][T20447] !: entered promiscuous mode
[  681.686883][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  681.726765][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  681.869064][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  681.878979][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  682.210777][T20481] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  682.223055][T20481] bond2 (unregistering): Released all slaves
[  682.308446][T20484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3701'.
[  682.318352][T20484] net_ratelimit: 32 callbacks suppressed
[  682.318372][T20484] openvswitch: netlink: Invalid VLAN frame
[  682.450874][T20490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3703'.
[  682.612440][T20501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3702'.
[  682.628114][T20501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3702'.
[  682.639318][T20501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3702'.
[  682.664489][T20506] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3705'.
[  682.677756][T20503] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3704'.
[  682.688578][T20503] netlink: 'syz.5.3704': attribute type 7 has an invalid length.
[  682.696836][T20503] netlink: 'syz.5.3704': attribute type 8 has an invalid length.
[  682.768947][T18408] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  682.781663][T18408] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  682.791858][T18408] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  682.792421][T20507] Cannot find add_set index 0 as target
[  682.801436][T18408] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  682.835210][T20509] FAULT_INJECTION: forcing a failure.
[  682.835210][T20509] name failslab, interval 1, probability 0, space 0, times 0
[  682.851428][T20509] CPU: 0 UID: 0 PID: 20509 Comm: syz.3.3707 Not tainted syzkaller #0 PREEMPT(full) 
[  682.851459][T20509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  682.851471][T20509] Call Trace:
[  682.851479][T20509]  <TASK>
[  682.851488][T20509]  dump_stack_lvl+0x189/0x250
[  682.851516][T20509]  ? __pfx____ratelimit+0x10/0x10
[  682.851542][T20509]  ? __pfx_dump_stack_lvl+0x10/0x10
[  682.851566][T20509]  ? __pfx__printk+0x10/0x10
[  682.851597][T20509]  ? __pfx___might_resched+0x10/0x10
[  682.851618][T20509]  ? fs_reclaim_acquire+0x7d/0x100
[  682.851653][T20509]  should_fail_ex+0x414/0x560
[  682.851683][T20509]  should_failslab+0xa8/0x100
[  682.851716][T20509]  kmem_cache_alloc_noprof+0x74/0x6f0
[  682.851742][T20509]  ? __kernfs_new_node+0xd7/0x7e0
[  682.851785][T20509]  __kernfs_new_node+0xd7/0x7e0
[  682.851825][T20509]  ? __pfx___kernfs_new_node+0x10/0x10
[  682.851854][T20509]  ? kernfs_root+0x1c/0x230
[  682.851888][T20509]  ? kernfs_root+0x1c/0x230
[  682.851913][T20509]  ? kernfs_root+0x1c/0x230
[  682.851937][T20509]  ? kernfs_root+0x1c/0x230
[  682.851969][T20509]  kernfs_new_node+0x102/0x210
[  682.852004][T20509]  __kernfs_create_file+0x4b/0x2e0
[  682.852028][T20509]  sysfs_add_file_mode_ns+0x238/0x300
[  682.852062][T20509]  internal_create_group+0x667/0x1110
[  682.852109][T20509]  ? __pfx_internal_create_group+0x10/0x10
[  682.852138][T20509]  ? kernfs_add_one+0xf6/0x530
[  682.852175][T20509]  sysfs_create_groups+0x59/0x120
[  682.852206][T20509]  device_add_attrs+0x1c4/0x5a0
[  682.852239][T20509]  ? kernfs_put+0x40e/0x470
[  682.852268][T20509]  ? __pfx_device_add_attrs+0x10/0x10
[  682.852294][T20509]  ? kobject_put+0x43c/0x480
[  682.852330][T20509]  ? device_add_class_symlinks+0x21f/0x240
[  682.852364][T20509]  device_add+0x496/0xb50
[  682.852391][T20509]  ? device_initialize+0x24b/0x440
[  682.852423][T20509]  wakeup_source_sysfs_add+0x1d3/0x2c0
[  682.852448][T20509]  wakeup_source_register+0x18a/0x380
[  682.852484][T20509]  ep_insert+0xff3/0x19e0
[  682.852522][T20509]  ? __pfx_ep_insert+0x10/0x10
[  682.852558][T20509]  ? bpf_lsm_capable+0x9/0x20
[  682.852589][T20509]  do_epoll_ctl+0x7f4/0xe80
[  682.852619][T20509]  __x64_sys_epoll_ctl+0x163/0x1a0
[  682.852643][T20509]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  682.852669][T20509]  ? do_syscall_64+0xbe/0xf80
[  682.852700][T20509]  do_syscall_64+0xfa/0xf80
[  682.852728][T20509]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.852748][T20509]  ? clear_bhb_loop+0x60/0xb0
[  682.852774][T20509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.852802][T20509] RIP: 0033:0x7f7b92d8f749
[  682.852821][T20509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  682.852839][T20509] RSP: 002b:00007f7b93bae038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  682.852861][T20509] RAX: ffffffffffffffda RBX: 00007f7b92fe5fa0 RCX: 00007f7b92d8f749
[  682.852876][T20509] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000003
[  682.852888][T20509] RBP: 00007f7b93bae090 R08: 0000000000000000 R09: 0000000000000000
[  682.852901][T20509] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000002
[  682.852912][T20509] R13: 00007f7b92fe6038 R14: 00007f7b92fe5fa0 R15: 00007ffd2f4853e8
[  682.852949][T20509]  </TASK>
[  683.594071][T20523] pim6reg: entered allmulticast mode
[  683.673608][T20527] wg1 speed is unknown, defaulting to 1000
[  683.809622][T20530] wg1 speed is unknown, defaulting to 1000
[  683.820030][T20525] 8021q: adding VLAN 0 to HW filter on device bond0
[  683.859856][T20525] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  683.934836][T20542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  683.979596][T20542] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  684.464101][T20571] vxcan3: entered allmulticast mode
[  684.673857][T20582] netlink: 'syz.4.3727': attribute type 1 has an invalid length.
[  684.985696][T20580] __nla_validate_parse: 4 callbacks suppressed
[  684.985717][T20580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3727'.
[  685.202420][T20606] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3731'.
[  685.681026][T20626] ip6gre1: entered promiscuous mode
[  685.686724][T20626] ip6gre1: entered allmulticast mode
[  685.839553][T20630] syzkaller0: entered promiscuous mode
[  685.845274][T20630] syzkaller0: entered allmulticast mode
[  685.929784][T20643] netlink: 'syz.5.3740': attribute type 14 has an invalid length.
[  685.942895][T20638] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3741'.
[  685.953571][T20638] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3741'.
[  686.109195][T20655] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.170310][T20661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3744'.
[  686.246951][T20665] dummy0: entered allmulticast mode
[  686.260315][T20655] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.277744][T20669] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3747'.
[  686.309275][T20661] gretap1: entered promiscuous mode
[  686.451273][T20655] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.543513][T20684] netlink: 'syz.0.3750': attribute type 13 has an invalid length.
[  686.576335][T20655] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.627752][T20688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3752'.
[  686.762775][   T38] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  686.824034][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  686.876183][   T38] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  686.914013][   T38] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x22
[  686.933806][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  686.978719][T20712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3759'.
[  687.019849][T20712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3759'.
[  687.081928][T20712] bond2 (unregistering): Released all slaves
[  687.272680][T20735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3765'.
[  687.575408][T20756] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  688.840796][T20798] netlink: 'syz.0.3783': attribute type 1 has an invalid length.
[  688.937804][T20798] 8021q: adding VLAN 0 to HW filter on device bond2
[  688.944594][T20825] netlink: 'syz.2.3789': attribute type 2 has an invalid length.
[  688.989834][T20819] bond2: (slave gretap2): making interface the new active one
[  688.998721][T20819] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  689.078134][T20828] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  689.146486][T20834] netem: change failed
[  689.258246][T20842] nftables ruleset with unbound chain
[  689.692664][T20865] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  690.044833][T20886] netlink: 'syz.2.3807': attribute type 1 has an invalid length.
[  690.054963][   T10] IPVS: starting estimator thread 0...
[  690.176577][T20889] IPVS: using max 32 ests per chain, 76800 per kthread
[  690.190260][T20886] bond4: entered promiscuous mode
[  690.230186][T20886] 8021q: adding VLAN 0 to HW filter on device bond4
[  690.313008][T20906] netlink: 'syz.5.3810': attribute type 5 has an invalid length.
[  690.321683][T20906] __nla_validate_parse: 10 callbacks suppressed
[  690.321703][T20906] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3810'.
[  690.446987][T20911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3812'.
[  690.538312][T20911] 8021q: adding VLAN 0 to HW filter on device bond5
[  690.628077][T20922] netlink: 'syz.5.3816': attribute type 11 has an invalid length.
[  690.674459][T20911] bond5: (slave vlan0): Opening slave failed
[  690.888666][T20911] bond5 (unregistering): Released all slaves
[  690.937570][T20920] wg1 speed is unknown, defaulting to 1000
[  691.410488][T20943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3820'.
[  691.983477][T20986] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3829'.
[  691.989266][T20984] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  692.014165][T20976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3828'.
[  692.052927][T20988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3830'.
[  692.138174][T20988] team0: entered promiscuous mode
[  692.147886][T20988] team_slave_0: entered promiscuous mode
[  692.154767][T20988] team_slave_1: entered promiscuous mode
[  692.162361][T20988] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  692.182505][T20988] team0: left promiscuous mode
[  692.187730][T20988] team_slave_0: left promiscuous mode
[  692.197699][T20992] lec:lec_vcc_attach: copy from user failed for 28 bytes
[  692.223859][T20988] team_slave_1: left promiscuous mode
[  692.325361][T20994] wg1 speed is unknown, defaulting to 1000
[  692.720566][T21016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3840'.
[  692.766635][   T52] Bluetooth: hci0: command 0x0405 tx timeout
[  692.767894][ T5834] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  692.803601][T21018] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3839'.
[  692.878985][T21023] syzkaller0: entered promiscuous mode
[  692.884709][T21023] syzkaller0: entered allmulticast mode
[  693.026050][T21031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3844'.
[  693.048475][T21030] syzkaller0: entered promiscuous mode
[  693.054021][T21030] syzkaller0: entered allmulticast mode
[  693.284278][T21043] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode
[  693.440797][T21047] netlink: 'syz.4.3848': attribute type 10 has an invalid length.
[  693.469272][T21043] bridge_slave_0: left allmulticast mode
[  693.474990][T21043] bridge_slave_0: left promiscuous mode
[  693.506931][T21043] bridge0: port 1(bridge_slave_0) entered disabled state
[  693.573181][T21043] bridge_slave_1: left allmulticast mode
[  693.606668][T21043] bridge_slave_1: left promiscuous mode
[  693.627131][T21043] bridge0: port 2(bridge_slave_1) entered disabled state
[  693.676845][T21043] bond0: (slave bond_slave_0): Releasing backup interface
[  693.713079][T21043] bond0: (slave bond_slave_1): Releasing backup interface
[  693.772045][T21043] team0: Port device team_slave_0 removed
[  693.794733][T21043] team0: Port device team_slave_1 removed
[  693.816049][T21043] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  693.825071][T21043] batman_adv: batadv0: Removing interface: batadv_slave_0
[  693.848758][T21043] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  693.861236][T21043] batman_adv: batadv0: Removing interface: batadv_slave_1
[  693.878134][T21043] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  693.895803][T21047] mac80211_hwsim hwsim38 wlan1: left allmulticast mode
[  693.920424][T21047] 8021q: adding VLAN 0 to HW filter on device bond0
[  693.933292][T21047] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  693.949995][T21053] syzkaller1: entered promiscuous mode
[  693.956055][T21053] syzkaller1: entered allmulticast mode
[  694.073520][T21086] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20001
[  694.518516][T21111] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3863'.
[  694.807929][T21124] wg1 speed is unknown, defaulting to 1000
[  695.174847][T21150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  695.375773][T21158] __nla_validate_parse: 5 callbacks suppressed
[  695.375795][T21158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3877'.
[  695.429768][T21161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3878'.
[  695.480681][T21161] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3878'.
[  695.515771][T21157] netlink: 'syz.0.3875': attribute type 15 has an invalid length.
[  695.774151][T21179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3883'.
[  695.809477][T21179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3883'.
[  695.874935][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3885'.
[  695.898609][T21186] netlink: 'syz.4.3885': attribute type 1 has an invalid length.
[  695.959769][T21195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3885'.
[  695.975690][T21186] bond2: entered promiscuous mode
[  696.001182][T21186] 8021q: adding VLAN 0 to HW filter on device bond2
[  696.014411][T21186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3885'.
[  696.032699][T21197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3882'.
[  696.125847][T21201] wg1 speed is unknown, defaulting to 1000
[  696.228608][T21208] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3891'.
[  696.240119][T21203] wg1 speed is unknown, defaulting to 1000
[  696.701365][T21235] dvmrp1: tun_chr_ioctl cmd 35111
[  696.711528][T21236] dvmrp1: tun_chr_ioctl cmd 1074025673
[  696.720530][T21237] dvmrp1: tun_chr_ioctl cmd 35111
[  698.265396][T21307] sctp: [Deprecated]: syz.4.3918 (pid 21307) Use of int in maxseg socket option.
[  698.265396][T21307] Use struct sctp_assoc_value instead
[  698.585631][T21320] netlink: 'syz.4.3922': attribute type 10 has an invalid length.
[  698.694470][T21327] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  698.733402][T21321] netlink: 'syz.0.3923': attribute type 13 has an invalid length.
[  698.736780][T21335] netlink: 'syz.3.3925': attribute type 10 has an invalid length.
[  699.377740][T21335] dummy0: entered promiscuous mode
[  699.400888][T21335] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  699.845352][T21355] wg1 speed is unknown, defaulting to 1000
[  700.204056][T21370] syzkaller0: entered promiscuous mode
[  700.217215][T21370] syzkaller0: entered allmulticast mode
[  700.777070][T21391] __nla_validate_parse: 4 callbacks suppressed
[  700.777089][T21391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3935'.
[  701.167908][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  701.710594][T21393] warn_alloc: 1 callbacks suppressed
[  701.710617][T21393] syz.2.3940: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  701.736060][T21393] CPU: 0 UID: 0 PID: 21393 Comm: syz.2.3940 Not tainted syzkaller #0 PREEMPT(full) 
[  701.736090][T21393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  701.736103][T21393] Call Trace:
[  701.736112][T21393]  <TASK>
[  701.736121][T21393]  dump_stack_lvl+0x189/0x250
[  701.736149][T21393]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  701.736184][T21393]  ? __pfx_dump_stack_lvl+0x10/0x10
[  701.736207][T21393]  ? __pfx__printk+0x10/0x10
[  701.736235][T21393]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  701.736268][T21393]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  701.736311][T21393]  warn_alloc+0x214/0x310
[  701.736345][T21393]  ? __pfx_warn_alloc+0x10/0x10
[  701.736381][T21393]  ? __get_vm_area_node+0x28f/0x300
[  701.736406][T21393]  ? nf_tables_newset+0x1330/0x2540
[  701.736442][T21393]  __vmalloc_node_range_noprof+0x690/0x12d0
[  701.736506][T21393]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  701.736534][T21393]  ? nf_tables_newset+0x1330/0x2540
[  701.736562][T21393]  ? rcu_is_watching+0x15/0xb0
[  701.736587][T21393]  ? nf_tables_newset+0x1330/0x2540
[  701.736613][T21393]  __kvmalloc_node_noprof+0x670/0x910
[  701.736647][T21393]  ? nf_tables_newset+0x1330/0x2540
[  701.736677][T21393]  ? nft_set_lookup+0x128/0x150
[  701.736705][T21393]  ? nft_hash_privsize+0xcf/0xf0
[  701.736731][T21393]  nf_tables_newset+0x1330/0x2540
[  701.736774][T21393]  ? __pfx_nf_tables_newset+0x10/0x10
[  701.736827][T21393]  ? __nla_parse+0x40/0x60
[  701.736861][T21393]  nfnetlink_rcv+0x11d9/0x2590
[  701.736935][T21393]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  701.736961][T21393]  ? kasan_save_track+0x4f/0x80
[  701.737049][T21393]  ? netlink_deliver_tap+0x2e/0x1b0
[  701.737092][T21393]  netlink_unicast+0x82f/0x9e0
[  701.737134][T21393]  ? __pfx_netlink_unicast+0x10/0x10
[  701.737167][T21393]  ? netlink_sendmsg+0x642/0xb30
[  701.737185][T21393]  ? skb_put+0x11b/0x210
[  701.737220][T21393]  netlink_sendmsg+0x805/0xb30
[  701.737253][T21393]  ? __pfx_netlink_sendmsg+0x10/0x10
[  701.737279][T21393]  ? aa_sock_msg_perm+0xf1/0x1b0
[  701.737302][T21393]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  701.737335][T21393]  ? __pfx_netlink_sendmsg+0x10/0x10
[  701.737358][T21393]  __sock_sendmsg+0x21c/0x270
[  701.737387][T21393]  ____sys_sendmsg+0x505/0x820
[  701.737425][T21393]  ? __pfx_____sys_sendmsg+0x10/0x10
[  701.737469][T21393]  ? import_iovec+0x74/0xa0
[  701.737503][T21393]  ___sys_sendmsg+0x21f/0x2a0
[  701.737537][T21393]  ? __pfx____sys_sendmsg+0x10/0x10
[  701.737578][T21393]  ? futex_wait+0x285/0x360
[  701.737641][T21393]  ? __fget_files+0x2a/0x420
[  701.737659][T21393]  ? __fget_files+0x3a0/0x420
[  701.737691][T21393]  __x64_sys_sendmsg+0x19b/0x260
[  701.737726][T21393]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  701.737779][T21393]  ? do_syscall_64+0xbe/0xf80
[  701.737811][T21393]  do_syscall_64+0xfa/0xf80
[  701.737838][T21393]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.737859][T21393]  ? clear_bhb_loop+0x60/0xb0
[  701.737885][T21393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.737905][T21393] RIP: 0033:0x7ff56a98f749
[  701.737924][T21393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  701.737942][T21393] RSP: 002b:00007ff56b87e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  701.737965][T21393] RAX: ffffffffffffffda RBX: 00007ff56abe5fa0 RCX: 00007ff56a98f749
[  701.737979][T21393] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  701.737992][T21393] RBP: 00007ff56aa13f91 R08: 0000000000000000 R09: 0000000000000000
[  701.738005][T21393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  701.738017][T21393] R13: 00007ff56abe6038 R14: 00007ff56abe5fa0 R15: 00007ffdad8c3198
[  701.738054][T21393]  </TASK>
[  702.104495][T21393] Mem-Info:
[  702.107720][T21393] active_anon:3920 inactive_anon:0 isolated_anon:0
[  702.107720][T21393]  active_file:3205 inactive_file:40086 isolated_file:0
[  702.107720][T21393]  unevictable:768 dirty:54 writeback:0
[  702.107720][T21393]  slab_reclaimable:12911 slab_unreclaimable:157206
[  702.107720][T21393]  mapped:35256 shmem:1384 pagetables:999
[  702.107720][T21393]  sec_pagetables:0 bounce:0
[  702.107720][T21393]  kernel_misc_reclaimable:0
[  702.107720][T21393]  free:1264036 free_pcp:17305 free_cma:0
[  702.153786][T21393] Node 0 active_anon:15680kB inactive_anon:0kB active_file:12820kB inactive_file:160144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141024kB dirty:216kB writeback:0kB shmem:4000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14584kB pagetables:3836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  702.185778][T21393] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  702.216517][T21393] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  702.262214][T21393] lowmem_reserve[]: 0 2504 2504 2504 2504
[  702.268292][T21393] Node 0 DMA32 free:1150716kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15680kB inactive_anon:0kB active_file:12820kB inactive_file:160144kB unevictable:1536kB writepending:216kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:46396kB local_pcp:30136kB free_cma:0kB
[  702.309709][T21393] lowmem_reserve[]: 0 0 0 0 0
[  702.314546][T21393] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  702.344515][T21393] lowmem_reserve[]: 0 0 0 0 0
[  702.349925][T21393] Node 1 Normal free:3898168kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14788kB local_pcp:11712kB free_cma:0kB
[  702.383283][T21393] lowmem_reserve[]: 0 0 0 0 0
[  702.388172][T21393] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  702.407551][T21393] Node 0 DMA32: 2599*4kB (UM) 722*8kB (UME) 592*16kB (UME) 787*32kB (UM) 146*64kB (U) 54*128kB (UM) 33*256kB (UM) 72*512kB (UME) 64*1024kB (UME) 9*2048kB (UME) 233*4096kB (UM) = 1150732kB
[  702.427743][T21393] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  702.440205][T21393] Node 1 Normal: 170*4kB (UM) 46*8kB (UME) 40*16kB (UME) 185*32kB (UME) 50*64kB (UME) 8*128kB (UME) 5*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3898168kB
[  702.458785][T21393] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  702.468768][T21393] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  702.478598][T21393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  702.488539][T21393] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  702.498504][T21393] 44672 total pagecache pages
[  702.503266][T21393] 0 pages in swap cache
[  702.507606][T21393] Free swap  = 124996kB
[  702.511850][T21393] Total swap = 124996kB
[  702.516033][T21393] 2097051 pages RAM
[  702.520179][T21393] 0 pages HighMem/MovableOnly
[  702.526041][T21393] 424280 pages reserved
[  702.531533][T21393] 0 pages cma reserved
[  703.703664][T21427] wg1 speed is unknown, defaulting to 1000
[  704.139666][T21460] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3947'.
[  704.182092][T21462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3949'.
[  704.338640][T21475] veth0_to_batadv: entered promiscuous mode
[  704.344625][T21475] veth0_to_batadv: entered allmulticast mode
[  704.369470][T21471] tipc: Enabled bearer <ib:macvlan0>, priority 10
[  704.420709][T21471] bridge1: entered allmulticast mode
[  704.438405][T21468] bridge2: entered allmulticast mode
[  704.622990][T21489] netlink: 'syz.0.3956': attribute type 3 has an invalid length.
[  704.666641][T21489] netlink: 'syz.0.3956': attribute type 1 has an invalid length.
[  704.690575][T21489] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3956'.
[  704.759085][T21501] lo speed is unknown, defaulting to 1000
[  704.773549][T21501] lo speed is unknown, defaulting to 1000
[  704.793050][T21501] lo speed is unknown, defaulting to 1000
[  704.823077][T21508] netlink: zone id is out of range
[  704.831771][T21508] netlink: zone id is out of range
[  704.832740][T21501] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  704.839558][T21508] netlink: zone id is out of range
[  704.853345][T21508] netlink: zone id is out of range
[  704.858964][T21508] netlink: zone id is out of range
[  704.874344][T21508] netlink: zone id is out of range
[  704.887324][T21508] netlink: zone id is out of range
[  704.895022][T21508] netlink: zone id is out of range
[  704.901463][T21501] lo speed is unknown, defaulting to 1000
[  704.906263][T21501] lo speed is unknown, defaulting to 1000
[  704.909440][T21508] netlink: zone id is out of range
[  704.924404][T21501] lo speed is unknown, defaulting to 1000
[  704.929847][T21514] lo: Caught tx_queue_len zero misconfig
[  704.935854][T21514] netlink: 'syz.0.3963': attribute type 14 has an invalid length.
[  704.945714][T21508] netlink: zone id is out of range
[  704.973939][T21501] lo speed is unknown, defaulting to 1000
[  704.983261][T21501] lo speed is unknown, defaulting to 1000
[  704.998891][T21501] lo speed is unknown, defaulting to 1000
[  705.007179][T21501] lo speed is unknown, defaulting to 1000
[  705.015394][T21501] lo speed is unknown, defaulting to 1000
[  705.208066][T21517] syzkaller0: entered promiscuous mode
[  705.213601][T21517] syzkaller0: entered allmulticast mode
[  705.313805][T21517] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  705.413673][T21517] tipc: Resetting bearer <eth:syzkaller0>
[  705.500656][T21533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3970'.
[  705.514614][T21517] tipc: Disabling bearer <eth:syzkaller0>
[  705.550117][T10954] tipc: Node number set to 1311894017
[  705.840362][T21550] wg1 speed is unknown, defaulting to 1000
[  705.884087][T21550] lo speed is unknown, defaulting to 1000
[  706.121519][T21575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3979'.
[  706.563398][T21598] netlink: 'syz.2.3983': attribute type 2 has an invalid length.
[  706.602949][T21598] netlink: 'syz.2.3983': attribute type 2 has an invalid length.
[  706.615283][T21600] netlink: 'syz.5.3984': attribute type 3 has an invalid length.
[  706.638996][T21600] netlink: 'syz.5.3984': attribute type 3 has an invalid length.
[  706.763463][T21605] TCP: TCP_TX_DELAY enabled
[  706.780170][T21609] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3986'.
[  706.835087][T21607] wg1 speed is unknown, defaulting to 1000
[  706.844549][T21607] lo speed is unknown, defaulting to 1000
[  707.005039][T21620] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:19997
[  707.190421][T21626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3989'.
[  707.494316][T21634] wg1 speed is unknown, defaulting to 1000
[  707.502713][T21634] lo speed is unknown, defaulting to 1000
[  707.806959][   T52] Bluetooth: hci3: command tx timeout
[  707.967937][T21655] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3994'.
[  708.031690][T21657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3996'.
[  708.041249][T21657] netlink: 'syz.4.3996': attribute type 1 has an invalid length.
[  708.206813][T21667] Bluetooth: MGMT ver 1.23
[  708.239949][T21665] tipc: Enabled bearer <eth:vcan0>, priority 10
[  708.348582][T21673] sctp: [Deprecated]: syz.5.4001 (pid 21673) Use of int in max_burst socket option.
[  708.348582][T21673] Use struct sctp_assoc_value instead
[  708.555298][T21683] bridge0: port 3(macvtap1) entered blocking state
[  708.616985][T21683] bridge0: port 3(macvtap1) entered disabled state
[  708.633119][T21683] macvtap1: entered allmulticast mode
[  708.665609][T21683] bridge0: entered allmulticast mode
[  708.694758][T21683] macvtap1: left allmulticast mode
[  708.717437][T21683] bridge0: left allmulticast mode
[  708.799100][T21696] IPv6: sit1: Disabled Multicast RS
[  708.811529][T21696] sit1: entered allmulticast mode
[  709.110323][T21711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4010'.
[  709.442607][T21735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4015'.
[  709.849105][T21719] syzkaller0: entered promiscuous mode
[  709.863359][T21719] syzkaller0: entered allmulticast mode
[  710.462825][T21779] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  710.474221][T21781] xt_connbytes: Forcing CT accounting to be enabled
[  710.874807][T21801] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.4033'.
[  711.105244][T21813] netlink: 'syz.5.4037': attribute type 3 has an invalid length.
[  711.209787][T21820] netlink: 396 bytes leftover after parsing attributes in process `syz.3.4039'.
[  711.260900][T21817] syzkaller0: entered promiscuous mode
[  711.267508][T21817] syzkaller0: entered allmulticast mode
[  711.385126][T21829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4040'.
[  711.836564][T21844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4043'.
[  712.039588][T21849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4044'.
[  713.626607][T21839] tipc: New replicast peer: 6.0.255.255
[  713.633171][T21839] tipc: Enabled bearer <udp:syz2>, priority 10
[  713.646496][T21840] netlink: 'syz.3.4042': attribute type 11 has an invalid length.
[  713.654403][T21840] netlink: 'syz.3.4042': attribute type 11 has an invalid length.
[  713.667408][T21843] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  713.680178][T21840] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4042'.
[  713.782594][T21853] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  713.792843][T21855] syzkaller0: entered promiscuous mode
[  713.801675][T21855] syzkaller0: entered allmulticast mode
[  713.900786][T21863] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4048'.
[  713.927007][T21863] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4048'.
[  713.950916][T21868] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4049'.
[  713.958774][T21877] netlink: 'syz.2.4050': attribute type 1 has an invalid length.
[  713.977065][T21877] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.4050'.
[  713.997756][T21855] tipc: Resetting bearer <eth:syzkaller0>
[  714.055188][T21855] tipc: Disabling bearer <eth:syzkaller0>
[  714.315316][T21890] wg1 speed is unknown, defaulting to 1000
[  714.378313][T21890] lo speed is unknown, defaulting to 1000
[  714.500939][T21908] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4059'.
[  714.580452][T21911] netlink: 'syz.5.4060': attribute type 2 has an invalid length.
[  714.654875][T10954] tipc: Node number set to 3167570999
[  714.801677][T21929] veth0_to_bridge: entered promiscuous mode
[  714.822179][T21926] veth0_to_bridge: left promiscuous mode
[  714.907813][T21932] netlink: 'syz.3.4066': attribute type 1 has an invalid length.
[  714.934719][T21928] netlink: 'syz.5.4064': attribute type 13 has an invalid length.
[  714.949602][T21932] ip6gretap1: entered allmulticast mode
[  715.198442][T12456] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  715.229422][T12456] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  715.258024][T21948] x_tables: duplicate underflow at hook 2
[  715.277784][T12456] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  715.288546][T12456] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  715.324318][T21948] xfrm1: entered allmulticast mode
[  715.475821][T21957] ipvlan0: entered promiscuous mode
[  715.659938][T21963] wg1 speed is unknown, defaulting to 1000
[  715.672931][T21963] lo speed is unknown, defaulting to 1000
[  716.176918][T21979] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20000
[  716.310800][T21984] __nla_validate_parse: 2 callbacks suppressed
[  716.310821][T21984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4081'.
[  716.445451][T21996] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4084'.
[  716.458308][T21996] : renamed from veth0_to_bond
[  716.567764][T21999] wg1 speed is unknown, defaulting to 1000
[  716.575482][T21999] lo speed is unknown, defaulting to 1000
[  717.650085][T22019] team0 (unregistering): Port device team_slave_0 removed
[  717.671458][T22019] team0 (unregistering): Port device team_slave_1 removed
[  718.166857][T22052] netlink: 'syz.0.4098': attribute type 4 has an invalid length.
[  718.192721][T22049] netlink: 'syz.0.4098': attribute type 4 has an invalid length.
[  718.260924][T22055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4100'.
[  718.429903][T22062] macsec1: entered allmulticast mode
[  718.445541][T22062] dummy0: entered allmulticast mode
[  718.653479][T22074] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4104'.
[  718.678236][T22074] 0ªî{X¹¦: renamed from gretap0
[  718.705387][T22074] 0ªî{X¹¦: entered allmulticast mode
[  718.724693][T22075] netlink: 'syz.0.4104': attribute type 3 has an invalid length.
[  718.739332][T22074] net_ratelimit: 46 callbacks suppressed
[  718.739351][T22074] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  718.807092][T22084] batadv0: entered promiscuous mode
[  718.830934][T22084] macvtap0: entered promiscuous mode
[  718.854576][T22084] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  718.882086][T22084] batadv0: left promiscuous mode
[  718.911236][T22078] wg1 speed is unknown, defaulting to 1000
[  718.922169][T22078] lo speed is unknown, defaulting to 1000
[  719.228178][T22110] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4109'.
[  719.259402][T22110] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4109'.
[  719.801530][T22138] wg1 speed is unknown, defaulting to 1000
[  719.813913][T22138] lo speed is unknown, defaulting to 1000
[  719.827418][T22144] syzkaller0: entered promiscuous mode
[  719.833813][T22144] syzkaller0: entered allmulticast mode
[  720.061882][T22149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4120'.
[  720.428890][T22170] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  720.455268][T22170] bond3 (unregistering): Released all slaves
[  720.569855][T22174] wg1 speed is unknown, defaulting to 1000
[  720.578123][T22174] lo speed is unknown, defaulting to 1000
[  720.901417][   T30] audit: type=1800 audit(1765351328.910:14): pid=22184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4131" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1121 res=0 errno=0
[  720.958056][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  720.986485][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.006954][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.014224][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.053284][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.091756][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.097084][T22189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4133'.
[  721.102893][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.130279][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.137891][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.145830][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.153514][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.161480][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.169576][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.178224][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.185533][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.227510][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.234732][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.249875][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.303406][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.311361][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.319044][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.332966][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.341164][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.350531][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.361571][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.370288][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.377862][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.385413][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.393030][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.400985][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.409126][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.417284][T22195] wg1 speed is unknown, defaulting to 1000
[  721.424968][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.432846][T22195] lo speed is unknown, defaulting to 1000
[  721.433327][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.451065][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.458762][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.466264][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.474487][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.493280][T22201] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  721.520536][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.529079][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.536250][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.555348][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.582309][T22204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4139'.
[  721.592263][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.604374][T22206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4139'.
[  721.614322][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.622434][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.636835][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.662240][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.708145][T22186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  721.867410][T22221] netlink: 'syz.3.4143': attribute type 10 has an invalid length.
[  721.917183][T22221] batadv0: entered allmulticast mode
[  721.931656][T22224] netlink: 'syz.3.4143': attribute type 6 has an invalid length.
[  721.935607][T22221] 8021q: adding VLAN 0 to HW filter on device batadv0
[  721.940314][T22224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4143'.
[  721.948822][T22221] batadv0: entered promiscuous mode
[  721.962002][T22221] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  721.973116][T22223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  721.986576][T22214] syzkaller0: entered promiscuous mode
[  721.992707][T22214] syzkaller0: entered allmulticast mode
[  722.042549][T22214] tipc: Resetting bearer <eth:syzkaller0>
[  722.129649][T22226] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  722.161529][T22213] tipc: Resetting bearer <eth:syzkaller0>
[  722.187776][T22213] tipc: Disabling bearer <eth:syzkaller0>
[  722.278490][T22232] netlink: 'syz.0.4147': attribute type 1 has an invalid length.
[  722.354575][T22232] bond3: (slave xfrm2): The slave device specified does not support setting the MAC address
[  722.370356][T22232] bond3: (slave xfrm2): Setting fail_over_mac to active for active-backup mode
[  722.399226][T22232] bond3: (slave xfrm2): making interface the new active one
[  722.408512][T22232] bond3: (slave xfrm2): Enslaving as an active interface with an up link
[  722.607795][T22243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4149'.
[  742.127247][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  831.246655][T21019] Bluetooth: hci3: command 0x0406 tx timeout
[  859.886771][   T31] INFO: task kworker/1:2:981 blocked for more than 143 seconds.
[  859.894523][   T31]       Not tainted syzkaller #0
[  859.899853][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  859.908964][   T31] task:kworker/1:2     state:D stack:22080 pid:981   tgid:981   ppid:2      task_flags:0x4208060 flags:0x00080000
[  859.922150][   T31] Workqueue: events rfkill_sync_work
[  859.928049][   T31] Call Trace:
[  859.931624][   T31]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  859.934606][   T31]  __schedule+0x14bc/0x5000
[  859.940137][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  859.945433][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  859.952425][   T31]  ? preempt_schedule+0xae/0xc0
[  859.958053][   T31]  ? preempt_schedule+0xae/0xc0
[  859.963065][   T31]  ? __pfx___schedule+0x10/0x10
[  859.968175][   T31]  ? schedule+0x91/0x360
[  859.972579][   T31]  schedule+0x165/0x360
[  859.976986][   T31]  schedule_preempt_disabled+0x13/0x30
[  859.982524][   T31]  __mutex_lock+0x7e6/0x1350
[  859.988062][   T31]  ? look_up_lock_class+0x74/0x150
[  859.994073][   T31]  ? __mutex_lock+0x5bb/0x1350
[  860.014873][   T31]  ? nfc_rfkill_set_block+0x50/0x2e0
[  860.046507][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  860.051637][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  860.061752][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  860.068241][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  860.074625][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  860.080555][   T31]  nfc_rfkill_set_block+0x50/0x2e0
[  860.085725][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  860.091558][   T31]  rfkill_set_block+0x1d2/0x440
[  860.096614][   T31]  rfkill_sync_work+0x114/0x200
[  860.101517][   T31]  ? process_scheduled_works+0x9ef/0x1770
[  860.108114][   T31]  process_scheduled_works+0xad1/0x1770
[  860.113812][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  860.120351][   T31]  worker_thread+0x8a0/0xda0
[  860.125120][   T31]  kthread+0x711/0x8a0
[  860.129731][   T31]  ? __pfx_worker_thread+0x10/0x10
[  860.134866][   T31]  ? __pfx_kthread+0x10/0x10
[  860.139656][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  860.144886][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  860.150441][   T31]  ? __pfx_kthread+0x10/0x10
[  860.155087][   T31]  ret_from_fork+0x599/0xb30
[  860.159932][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  860.165093][   T31]  ? __switch_to_asm+0x39/0x70
[  860.170019][   T31]  ? __switch_to_asm+0x33/0x70
[  860.174862][   T31]  ? __pfx_kthread+0x10/0x10
[  860.179799][   T31]  ret_from_fork_asm+0x1a/0x30
[  860.184668][   T31]  </TASK>
[  860.187921][   T31] INFO: task kworker/1:4:5894 blocked for more than 143 seconds.
[  860.195754][   T31]       Not tainted syzkaller #0
[  860.200870][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  860.209912][   T31] task:kworker/1:4     state:D stack:23000 pid:5894  tgid:5894  ppid:2      task_flags:0x4208060 flags:0x00080000
[  860.222560][   T31] Workqueue: events rfkill_global_led_trigger_worker
[  860.229385][   T31] Call Trace:
[  860.232715][   T31]  <TASK>
[  860.235678][   T31]  __schedule+0x14bc/0x5000
[  860.240491][   T31]  ? __pfx___schedule+0x10/0x10
[  860.245371][   T31]  ? schedule+0x91/0x360
[  860.249725][   T31]  schedule+0x165/0x360
[  860.253918][   T31]  schedule_preempt_disabled+0x13/0x30
[  860.259562][   T31]  __mutex_lock+0x7e6/0x1350
[  860.264251][   T31]  ? __mutex_lock+0x5bb/0x1350
[  860.269186][   T31]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  860.275452][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  860.280633][   T31]  ? process_scheduled_works+0x9ef/0x1770
[  860.286431][   T31]  ? process_scheduled_works+0x9ef/0x1770
[  860.292285][   T31]  rfkill_global_led_trigger_worker+0x27/0xd0
[  860.298541][   T31]  ? process_scheduled_works+0x9ef/0x1770
[  860.304300][   T31]  process_scheduled_works+0xad1/0x1770
[  860.309992][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  860.316021][   T31]  worker_thread+0x8a0/0xda0
[  860.320775][   T31]  kthread+0x711/0x8a0
[  860.325284][   T31]  ? __pfx_worker_thread+0x10/0x10
[  860.330532][   T31]  ? __pfx_kthread+0x10/0x10
[  860.335166][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  860.340493][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  860.345712][   T31]  ? __pfx_kthread+0x10/0x10
[  860.350450][   T31]  ret_from_fork+0x599/0xb30
[  860.355067][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  860.360343][   T31]  ? __switch_to_asm+0x39/0x70
[  860.365128][   T31]  ? __switch_to_asm+0x33/0x70
[  860.369996][   T31]  ? __pfx_kthread+0x10/0x10
[  860.374608][   T31]  ret_from_fork_asm+0x1a/0x30
[  860.379526][   T31]  </TASK>
[  860.382642][   T31] INFO: task syz.4.4047:21861 blocked for more than 143 seconds.
[  860.390443][   T31]       Not tainted syzkaller #0
[  860.395420][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  860.404285][   T31] task:syz.4.4047      state:D stack:26648 pid:21861 tgid:21859 ppid:17463  task_flags:0x400040 flags:0x00080002
[  860.416452][   T31] Call Trace:
[  860.419783][   T31]  <TASK>
[  860.422781][   T31]  __schedule+0x14bc/0x5000
[  860.427716][   T31]  ? stack_trace_save+0x9c/0xe0
[  860.432638][   T31]  ? __pfx___schedule+0x10/0x10
[  860.437718][   T31]  ? schedule+0x91/0x360
[  860.442043][   T31]  schedule+0x165/0x360
[  860.451667][   T31]  schedule_timeout+0x9a/0x270
[  860.456731][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  860.462181][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  860.467590][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  860.472855][   T31]  ? wait_for_completion+0x267/0x5d0
[  860.478285][   T31]  wait_for_completion+0x2bf/0x5d0
[  860.483422][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  860.489209][   T31]  ? __flush_work+0xd2/0xbc0
[  860.493829][   T31]  ? __flush_work+0xd2/0xbc0
[  860.498571][   T31]  __flush_work+0x9b9/0xbc0
[  860.503101][   T31]  ? __flush_work+0xd2/0xbc0
[  860.507744][   T31]  ? __pfx___flush_work+0x10/0x10
[  860.512785][   T31]  ? __pfx_wq_barrier_func+0x10/0x10
[  860.518235][   T31]  ? __pfx___cancel_work+0x10/0x10
[  860.523360][   T31]  ? nfc_genl_device_removed+0x23c/0x330
[  860.529516][   T31]  ? __cancel_work_sync+0x5c/0x110
[  860.534693][   T31]  __cancel_work_sync+0xbe/0x110
[  860.539799][   T31]  rfkill_unregister+0x92/0x220
[  860.544676][   T31]  nfc_unregister_device+0x96/0x2a0
[  860.550141][   T31]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  860.555877][   T31]  virtual_ncidev_close+0x56/0x90
[  860.561146][   T31]  __fput+0x44c/0xa70
[  860.565155][   T31]  task_work_run+0x1d4/0x260
[  860.569936][   T31]  ? __pfx_task_work_run+0x10/0x10
[  860.575087][   T31]  ? exit_to_user_mode_loop+0x55/0x4f0
[  860.580732][   T31]  exit_to_user_mode_loop+0xff/0x4f0
[  860.586181][   T31]  ? rcu_is_watching+0x15/0xb0
[  860.591066][   T31]  do_syscall_64+0x2e3/0xf80
[  860.595705][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  860.601987][   T31]  ? clear_bhb_loop+0x60/0xb0
[  860.606783][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  860.612693][   T31] RIP: 0033:0x7fc673b8f749
[  860.617272][   T31] RSP: 002b:00007fc671dee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  860.625724][   T31] RAX: ffffffffffffffea RBX: 00007fc673de5fa0 RCX: 00007fc673b8f749
[  860.634084][   T31] RDX: 0000000000005400 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  860.642297][   T31] RBP: 00007fc673c13f91 R08: 0000000000000000 R09: 0000000000000000
[  860.650450][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  860.658661][   T31] R13: 00007fc673de6038 R14: 00007fc673de5fa0 R15: 00007ffde1f740f8
[  860.666753][   T31]  </TASK>
[  860.669877][   T31] 
[  860.669877][   T31] Showing all locks held in the system:
[  860.678116][   T31] 2 locks held by ksoftirqd/0/15:
[  860.683202][   T31] 1 lock held by khungtaskd/31:
[  860.689504][   T31]  #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  860.699729][   T31] 4 locks held by kworker/1:2/981:
[  860.704891][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  860.716296][   T31]  #1: ffffc90003ca7b80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  860.729703][   T31]  #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200
[  860.740561][   T31]  #3: ffff8880581f5100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  860.750556][   T31] 2 locks held by getty/5592:
[  860.755244][   T31]  #0: ffff888033ffc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  860.765290][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  860.775655][   T31] 3 locks held by kworker/1:4/5894:
[  860.780925][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  860.792339][   T31]  #1: ffffc900044afb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  860.806059][   T31]  #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  860.817864][   T31] 2 locks held by kworker/u8:29/21416:
[  860.823460][   T31]  #0: ffff88801a069148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  860.835916][   T31]  #1: ffffc90003d9fb80 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: psi_task_switch+0x53/0x880
[  860.848151][   T31] 1 lock held by syz.4.4047/21861:
[  860.853304][   T31]  #0: ffff8880581f5100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  860.863124][   T31] 3 locks held by syz.3.4146/22229:
[  860.868388][   T31]  #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  860.877077][   T31]  #1: ffffffff8f35cf88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  860.886095][   T31]  #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  860.896193][   T31] 2 locks held by syz.0.4149/22240:
[  860.901548][   T31]  #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  860.910054][   T31]  #1: ffffffff8f35cf88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  860.919082][   T31] 2 locks held by syz.2.4151/22245:
[  860.924284][   T31]  #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  860.932565][   T31]  #1: ffffffff8f35cf88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  860.942786][   T31] 2 locks held by syz.5.4152/22247:
[  860.948094][   T31]  #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  860.956519][   T31]  #1: ffffffff8f35cf88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  860.965540][   T31] 2 locks held by syz-executor/22251:
[  860.971193][   T31]  #0: ffff888078299118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  860.981423][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  860.991546][   T31] 2 locks held by syz-executor/22256:
[  860.997228][   T31]  #0: ffff888029051118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  861.007405][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  861.017431][   T31] 2 locks held by syz-executor/22257:
[  861.022808][   T31]  #0: ffff88805b088918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  861.033116][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  861.043804][   T31] 2 locks held by syz-executor/22258:
[  861.049276][   T31]  #0: ffff888075e0c918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  861.059729][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  861.069963][   T31] 2 locks held by syz-executor/22259:
[  861.075551][   T31]  #0: ffff8880798aa918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  861.085663][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  861.095881][   T31] 2 locks held by syz-executor/22261:
[  861.101350][   T31]  #0: ffff888057b87918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  861.111475][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  861.121695][   T31] 2 locks held by syz-executor/22265:
[  861.127118][   T31]  #0: ffff888032e48118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  861.137231][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  861.148111][   T31] 2 locks held by syz-executor/22266:
[  861.153955][   T31]  #0: ffff888046285918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  861.164022][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  861.174430][   T31] 2 locks held by syz-executor/22267:
[  861.180290][   T31]  #0: ffff888032e4d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  861.190408][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  861.200391][   T31] 2 locks held by syz-executor/22269:
[  861.205763][   T31]  #0: ffff88802d801918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  861.216074][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  861.226101][   T31] 2 locks held by syz-executor/22271:
[  861.231806][   T31]  #0: ffff88806021a118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  861.242149][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  861.253316][   T31] 2 locks held by syz-executor/22275:
[  861.258788][   T31]  #0: ffff88807ad28118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  861.269290][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  861.279418][   T31] 2 locks held by syz-executor/22276:
[  861.284796][   T31]  #0: ffff88804fd4d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  861.295074][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  861.305360][   T31] 2 locks held by syz-executor/22277:
[  861.310790][   T31]  #0: ffff88804d375918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  861.320896][   T31]  #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  861.331470][   T31] 
[  861.333857][   T31] =============================================
[  861.333857][   T31] 
[  861.342366][   T31] NMI backtrace for cpu 1
[  861.342385][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  861.342409][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  861.342419][   T31] Call Trace:
[  861.342426][   T31]  <TASK>
[  861.342433][   T31]  dump_stack_lvl+0x189/0x250
[  861.342456][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  861.342472][   T31]  ? __pfx__printk+0x10/0x10
[  861.342503][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  861.342521][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  861.342537][   T31]  ? __pfx__printk+0x10/0x10
[  861.342561][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  861.342585][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  861.342602][   T31]  watchdog+0xf3c/0xf80
[  861.342624][   T31]  ? watchdog+0x1e2/0xf80
[  861.342648][   T31]  kthread+0x711/0x8a0
[  861.342669][   T31]  ? __pfx_watchdog+0x10/0x10
[  861.342686][   T31]  ? __pfx_kthread+0x10/0x10
[  861.342706][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  861.342723][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  861.342740][   T31]  ? __pfx_kthread+0x10/0x10
[  861.342759][   T31]  ret_from_fork+0x599/0xb30
[  861.342783][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  861.342814][   T31]  ? __switch_to_asm+0x39/0x70
[  861.342830][   T31]  ? __switch_to_asm+0x33/0x70
[  861.342847][   T31]  ? __pfx_kthread+0x10/0x10
[  861.342865][   T31]  ret_from_fork_asm+0x1a/0x30
[  861.342896][   T31]  </TASK>
[  861.342901][   T31] Sending NMI from CPU 1 to CPUs 0:
[  861.491490][    C0] NMI backtrace for cpu 0
[  861.491510][    C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) 
[  861.491532][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  861.491543][    C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries
[  861.491578][    C0] RIP: 0010:__might_resched+0x0/0x610
[  861.491598][    C0] Code: e0 94 00 4c 89 e7 89 ee e9 57 ff ff ff 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48
[  861.491614][    C0] RSP: 0018:ffffc900000f79e0 EFLAGS: 00000246
[  861.491628][    C0] RAX: ffffffff86380853 RBX: ffffffff8ea52c80 RCX: ffff88801c6f9e80
[  861.491642][    C0] RDX: 0000000000000000 RSI: 000000000000004e RDI: ffffffff8bf8f7c0
[  861.491653][    C0] RBP: dffffc0000000000 R08: ffffffff8ea52b43 R09: 1ffffffff1d4a568
[  861.491666][    C0] R10: dffffc0000000000 R11: fffffbfff1d4a569 R12: ffff88805bfaa1f8
[  861.491679][    C0] R13: ffff88801cab1518 R14: 000000000000143f R15: ffffffffffffffa0
[  861.491692][    C0] FS:  0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000
[  861.491706][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  861.491718][    C0] CR2: 00007f9f9383117e CR3: 000000000dd3a000 CR4: 00000000003526f0
[  861.491734][    C0] Call Trace:
[  861.491742][    C0]  <TASK>
[  861.491748][    C0]  wg_ratelimiter_gc_entries+0x3a6/0x450
[  861.491780][    C0]  ? process_scheduled_works+0x9ef/0x1770
[  861.491809][    C0]  process_scheduled_works+0xad1/0x1770
[  861.491852][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  861.491888][    C0]  worker_thread+0x8a0/0xda0
[  861.491920][    C0]  kthread+0x711/0x8a0
[  861.491943][    C0]  ? __pfx_worker_thread+0x10/0x10
[  861.491959][    C0]  ? __pfx_kthread+0x10/0x10
[  861.491980][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  861.492001][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[  861.492029][    C0]  ? __pfx_kthread+0x10/0x10
[  861.492057][    C0]  ret_from_fork+0x599/0xb30
[  861.492085][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  861.492117][    C0]  ? __switch_to_asm+0x39/0x70
[  861.492137][    C0]  ? __switch_to_asm+0x33/0x70
[  861.492157][    C0]  ? __pfx_kthread+0x10/0x10
[  861.492177][    C0]  ret_from_fork_asm+0x1a/0x30
[  861.492208][    C0]  </TASK>