last executing test programs:

6m36.874727947s ago: executing program 0 (id=3928):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="6a0ac4ff000000007110930000000000950b"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x90)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980), 0x50)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r5, 0x1, 0x0, 0x8000004, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000280)=[0x0]}, 0x40)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002ec0)={'netdevsim0\x00', &(0x7f0000002e40)=@ethtool_coalesce={0x33, 0x3169, 0x9, 0x1, 0x6, 0x9, 0x8, 0x2, 0xfff, 0x10000, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1, 0x5, 0x1, 0x2400, 0x3, 0x9, 0xede, 0x80000000}})

6m36.176257737s ago: executing program 3 (id=3938):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4c080)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket$kcm(0x21, 0x2, 0x2) (async)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4c080) (async)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async)

6m35.98413013s ago: executing program 3 (id=3941):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x2}, 0x1c)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000200)=[{&(0x7f0000000240)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000", 0x40}, {&(0x7f0000000100)="2a090ae06f43c8f260a64ab6b38c3cdd3384437f7821ef85", 0x18}], 0x2)
read(r4, 0x0, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a090400000000000000000200000014000480100001800b0001006e756d67656e00000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000200000a761cc8c3d9cac3447a2d257729d4f4512cf1ebe533668e82739be568f66343e3d518683bc3e97da7d51ef822bc3db9c396b508651b949724736f405dbab1470abc7c5a33643ce2a48b5c327ad451ae1f00b5d863415bacf25527e6b48def6af341e1b507754aa866f0"], 0x68}}, 0x0)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r10, 0x0, 0x0)
sendmsg$inet(r10, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="bc9e15107abae085cf3e1fb05ae9b92db0512d97a7e48d15918721bb6dfb204c3841dea30cf8b4a24c4bad601d59b13d1134abf0dd2676a37d63f2ba01061543ba95aa83724062a64906a179884e63b4f3694dc3b1ac8e25606d8fd1f935491aeb30b018ced273aa47563e14b7bfb338957c1b5b76061e5bf89a59e118e2545f7324d5c9fafb35a4c309b24c19cd9f42b2eb8b9481ad7f7c2df6d6d0298d692f58b7fb970bade7d38662dfa908629556d772f2eb057fa51cb473469ddb4349eb86a8dbbf267aaabe1cfe1692d19e3570fa7f5d3274c8", 0xd6}, {&(0x7f0000000140)="b00723fca22f50fdfc5fe5ef2465f0ede0d8a6d8811c0d944480dd060093d266b66cfc5ae23647ea70bbcb21c28250c58febdc64e8da3599a059328cd540296a5b54953dd680635e07e3dfc98e4e0eea24d1920f107ea660", 0x58}], 0x2}, 0x11)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r11=>0x0})
r12 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r12, &(0x7f00000014c0)={0x1d, r11, 0x0, {0x0, 0xf0}, 0x1}, 0x18)

6m35.848757814s ago: executing program 0 (id=3944):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c8014"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x1)
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000003c0)={0x0, 0x0})
r3 = syz_init_net_socket$llc(0x1a, 0x4, 0x0)
accept4$llc(r3, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x80800)
accept(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80)

6m35.847440799s ago: executing program 3 (id=3946):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$unix(0x1, 0x5, 0x0)
recvfrom$unix(r1, &(0x7f0000000140)=""/254, 0xfe, 0x10000, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100013070000040000000000ac1414bb000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010000000032000000ac1514aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000a00020b0000000000000000480002006563622d73657270656e742d61767800"/240], 0x138}}, 0x0)

6m35.680281606s ago: executing program 3 (id=3948):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000080)=0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}}, 0x40008000)
ioctl(r0, 0x8b0f, &(0x7f0000000040))

6m35.677210671s ago: executing program 0 (id=3950):
r0 = socket(0x10, 0x3, 0x0)
ppoll(&(0x7f0000000180)=[{}], 0xfdfe, 0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={<r1=>r0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r3=>0x0})
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000340)={0x100, {{0x2, 0x4e24, @broadcast}}}, 0x88)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r2)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r4, @ANYBLOB="440002804000010024e9d222fc12751b283d0e38850001007175657500000000000000000000000000000500030003000000", @ANYRES32=r3, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x100, 0x2, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2}, [@IFLA_PORT_SELF={0x20, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "61d61d46e853dcb36e557a673cadaeff"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, @IFLA_EXT_MASK={0x8, 0x1d, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x0)

6m35.583857006s ago: executing program 0 (id=3952):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, <r3=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, <r4=>0x0}, &(0x7f0000000240)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@ipv6_delrule={0xbc, 0x21, 0x0, 0x70bd27, 0x25dfdbfd, {0xa, 0x14, 0x80, 0x4, 0x5, 0x0, 0x0, 0x1, 0x18}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r3, r4}}, @FRA_DST={0x14, 0x1, @mcast2}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @FRA_SRC={0x14, 0x2, @private2}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @FRA_DST={0x14, 0x1, @mcast2}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}, @FRA_SRC={0x14, 0x2, @private1}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x15c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x138, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x134, 0x1, {{}, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private2, @remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x20}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @remote, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, @empty]}}}]}, 0x15c}}, 0x0)

6m35.503896449s ago: executing program 3 (id=3953):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"], 0x50) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="6ebe30180441ffa1081c05000000bf7a", 0x10)
close(0x3) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r2, 0x2f, 0x0, 0x0, @void, @value=r3}, 0x20) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r5=>0x0}, 0x0)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r5, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r6, r2, 0x0, r4}, 0x10) (async)
pipe(&(0x7f0000000040)={<r7=>0xffffffffffffffff})
getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000440)={{{@in=@local, @in6=@mcast2}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000380)=0xe8)

6m35.478836349s ago: executing program 0 (id=3954):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', <r1=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1}, 0x48)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

6m35.295068272s ago: executing program 3 (id=3955):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000005737f86d0c000225eacbf5eaf0cef4002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000106000340000200000800074000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) (async)
setsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000a4c000000060a0b04000000000000000002000200200004801c0001800b00010065787468647200000c00028008000640000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/116], 0x74}}, 0x0)

6m34.985456156s ago: executing program 32 (id=3955):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000005737f86d0c000225eacbf5eaf0cef4002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000106000340000200000800074000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) (async)
setsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000a4c000000060a0b04000000000000000002000200200004801c0001800b00010065787468647200000c00028008000640000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/116], 0x74}}, 0x0)

6m34.900155003s ago: executing program 0 (id=3960):
socket$isdn(0x22, 0x3, 0x34) (async)
r0 = socket$isdn(0x22, 0x3, 0x34)
ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)=0x5) (async)
ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)=0x5)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x81, 0x37}}}}, [@NL80211_ATTR_SSID={0x13, 0x34, @random="f1216f5fad85179dcffb7732e7d27a"}, @NL80211_ATTR_PMKID={0x14, 0x55, "4a254f9dfbddc62b9322bf37fabb035d"}, @NL80211_ATTR_BSSID={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44041}, 0x20048800)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@delchain={0x2c, 0x65, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xffff}, {0x4, 0x4}, {0xfff7, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x440d8}, 0x2004c005)
r6 = socket$netlink(0x10, 0x3, 0x5)
r7 = accept4$x25(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x12, 0x80000)
accept4$x25(r7, &(0x7f0000000400), &(0x7f0000000440)=0x12, 0xb67941749e5e009c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@getchain={0x2c, 0x66, 0x300, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff5, 0x6}, {0x0, 0xe}, {0xa, 0xfff3}}, [{0x8, 0xb, 0x9}]}, 0x2c}}, 0xc4)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f00000005c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000600)=0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'dummy0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'dummy0\x00', <r10=>0x0})
bind$xdp(r6, &(0x7f0000000680)={0x2c, 0x1, r10, 0xe}, 0x10) (async)
bind$xdp(r6, &(0x7f0000000680)={0x2c, 0x1, r10, 0xe}, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6)
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r11, 0x10, 0x70bd2d, 0x6, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x170}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28040000}, 0x1)
r12 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000800), 0x2, 0x0)
write$cgroup_type(r12, &(0x7f0000000840), 0x9)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup/syz1\x00', 0x200002, 0x0) (async)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r13, &(0x7f00000008c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async)
r14 = openat$cgroup_ro(r13, &(0x7f00000008c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
close(r13)
connect$qrtr(r14, &(0x7f0000000900)={0x2a, 0xffffffff, 0x5b517d036be347e2}, 0xc) (async)
connect$qrtr(r14, &(0x7f0000000900)={0x2a, 0xffffffff, 0x5b517d036be347e2}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00'})
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r15 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY(r15, 0x0, 0x1, &(0x7f0000000980), &(0x7f00000009c0)=0x4)

6m34.548905958s ago: executing program 33 (id=3960):
socket$isdn(0x22, 0x3, 0x34) (async)
r0 = socket$isdn(0x22, 0x3, 0x34)
ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)=0x5) (async)
ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)=0x5)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x81, 0x37}}}}, [@NL80211_ATTR_SSID={0x13, 0x34, @random="f1216f5fad85179dcffb7732e7d27a"}, @NL80211_ATTR_PMKID={0x14, 0x55, "4a254f9dfbddc62b9322bf37fabb035d"}, @NL80211_ATTR_BSSID={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44041}, 0x20048800)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@delchain={0x2c, 0x65, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xffff}, {0x4, 0x4}, {0xfff7, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x440d8}, 0x2004c005)
r6 = socket$netlink(0x10, 0x3, 0x5)
r7 = accept4$x25(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x12, 0x80000)
accept4$x25(r7, &(0x7f0000000400), &(0x7f0000000440)=0x12, 0xb67941749e5e009c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@getchain={0x2c, 0x66, 0x300, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff5, 0x6}, {0x0, 0xe}, {0xa, 0xfff3}}, [{0x8, 0xb, 0x9}]}, 0x2c}}, 0xc4)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f00000005c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000600)=0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'dummy0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'dummy0\x00', <r10=>0x0})
bind$xdp(r6, &(0x7f0000000680)={0x2c, 0x1, r10, 0xe}, 0x10) (async)
bind$xdp(r6, &(0x7f0000000680)={0x2c, 0x1, r10, 0xe}, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6)
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r11, 0x10, 0x70bd2d, 0x6, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x170}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28040000}, 0x1)
r12 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000800), 0x2, 0x0)
write$cgroup_type(r12, &(0x7f0000000840), 0x9)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup/syz1\x00', 0x200002, 0x0) (async)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r13, &(0x7f00000008c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async)
r14 = openat$cgroup_ro(r13, &(0x7f00000008c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
close(r13)
connect$qrtr(r14, &(0x7f0000000900)={0x2a, 0xffffffff, 0x5b517d036be347e2}, 0xc) (async)
connect$qrtr(r14, &(0x7f0000000900)={0x2a, 0xffffffff, 0x5b517d036be347e2}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00'})
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r15 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY(r15, 0x0, 0x1, &(0x7f0000000980), &(0x7f00000009c0)=0x4)

2.680376012s ago: executing program 6 (id=8165):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x24044884)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r6, 0x6, 0x1f, 0x0, &(0x7f0000000100))
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7)
getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000020000004000000000000000000900010073797a30"], 0xd8}}, 0x0)
sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000002100000009001f00706879f529000000050020"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r7)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

2.594844993s ago: executing program 6 (id=8167):
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x2004)
getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="4d48fd08a938c33882e85c4b36a4c3e714c2b2008000001000ff0700007f00", @ANYRES32=r1, @ANYBLOB='@\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="00000000030000000200"/28], 0x50)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff000)

2.118194285s ago: executing program 4 (id=8177):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x40}}, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f00000000c0)={0x2, 0x1231, 0x89, &(0x7f0000000000)=""/137})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
close(0x3)

1.932340406s ago: executing program 4 (id=8179):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (rerun: 32)

1.862271652s ago: executing program 6 (id=8181):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'gre0\x00', &(0x7f00000004c0)={'erspan0\x00', <r3=>0x0, 0x7, 0x1, 0x2, 0xaf, {{0x1e, 0x4, 0x3, 0x20, 0x78, 0x66, 0x0, 0x4, 0x0, 0x0, @rand_addr=0x64010102, @loopback, {[@noop, @end, @ssrr={0x89, 0xb, 0x2f, [@local, @private=0xa010102]}, @rr={0x7, 0x1b, 0xef, [@empty, @multicast2, @broadcast, @broadcast, @multicast2, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x3, "8d"}, @timestamp_prespec={0x44, 0x34, 0xa9, 0x3, 0xa, [{@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@broadcast, 0x8}, {@loopback, 0x6372}, {@local}, {@private=0xa010100, 0x5b}]}]}}}}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
poll(&(0x7f0000000200)=[{r6, 0x20}], 0x1, 0x80000001)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r8 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r8, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r9 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r9, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'xfrm0\x00'}}, 0x1e)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$PPPIOCBRIDGECHAN(r10, 0x40047435, &(0x7f0000000200)=0x1)
socket$pppoe(0x18, 0x1, 0x0)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r11, 0x40047438, &(0x7f0000000040)=0x2)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

1.751591444s ago: executing program 4 (id=8184):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x208101, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x9, 0x7, 0xc, 0x2, 0x4, 0x2, 0xf, 0x4, 0x0, 0x5, 0x2, 0x6, 0x1, 0x4], 0x3, [0x8b, 0x101, 0x0, 0x2002, 0x1, 0x4, 0x2, 0xd04, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
close(r5)
syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[], 0x0)
socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee3, 0x8031, r11, 0x1000)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4010000)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000600))
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0)

1.701616457s ago: executing program 5 (id=8185):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ppoll(&(0x7f0000000080)=[{r0, 0x220}, {r1, 0x1148}], 0x2, &(0x7f00000000c0), &(0x7f0000000100)={[0x10000]}, 0x8)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140)=0x1, 0x4)
r2 = accept4(r1, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000200)=0x80, 0x800)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240400c3}, 0x10)
ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000340))
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r0, 0x20, &(0x7f0000000580)={&(0x7f0000000480)=""/9, 0x9, <r4=>0x0, &(0x7f00000004c0)=""/162, 0xa2}}, 0x10)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000600)=@raw=[@alu={0x4, 0x0, 0xc, 0x9, 0x6, 0x18, 0x10}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000640)='syzkaller\x00', 0x1a, 0xf0, &(0x7f0000000680)=""/240, 0x41000, 0x30, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r0], &(0x7f0000000800)=[{0x5, 0x1, 0xe, 0x1}, {0x3, 0x2, 0x9, 0x3}, {0x5, 0x2, 0xc, 0xa}, {0x2, 0x1, 0xf, 0x5}], 0x10, 0xe}, 0x94)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r1, 0x4, 0x4, 0x1}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe5c}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x31, &(0x7f0000000400)=""/49, 0x41000, 0x64, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0xd, 0xfffffffd, 0x1}, 0x10, r4, r5, 0x6, &(0x7f0000000980)=[r0, r0, r0, 0xffffffffffffffff, r0, r0, r6, r0], &(0x7f00000009c0)=[{0x2, 0x4, 0x8, 0x8}, {0x0, 0x3, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x2}, {0x1, 0x1, 0xd, 0x5}, {0x4, 0x4, 0xd, 0x1}, {0x0, 0x3, 0xb, 0x1}], 0x10, 0x865}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b00)={'gre0\x00', <r8=>0x0, 0x10, 0x7800, 0x1, 0x6, {{0x1f, 0x4, 0x0, 0x8, 0x7c, 0x68, 0x0, 0x40, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010101, {[@end, @timestamp_prespec={0x44, 0x14, 0x10, 0x3, 0xa, [{@empty, 0x4}, {@remote, 0x9}]}, @lsrr={0x83, 0x17, 0x3a, [@dev={0xac, 0x14, 0x14, 0x33}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @local]}, @ssrr={0x89, 0x7, 0xef, [@loopback]}, @cipso={0x86, 0x33, 0x2, [{0x6, 0xe, "f1e00027d1580a5fffd3dc68"}, {0x6, 0xe, "fa3f7af2a47e1f99b742d2b9"}, {0x5, 0xb, "098b0c65cafbe2475f"}, {0x6, 0x2}, {0x0, 0x4, "b811"}]}]}}}}})
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00)=r4, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x7, '\x00', r8, r9, 0x0, 0x1, 0x5}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000e00)={'tunl0\x00', &(0x7f0000000cc0)={'ip_vti0\x00', <r10=>r8, 0x20, 0x700, 0x80000001, 0x4, {{0x45, 0x4, 0x1, 0x1, 0x114, 0x65, 0x0, 0x55, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@end, @end, @ssrr={0x89, 0x2b, 0x5b, [@loopback, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @multicast2, @multicast2, @rand_addr=0x64010102, @private=0xa010100]}, @cipso={0x86, 0x68, 0x3, [{0x2, 0xf, "89db02b537f114bb8c5ec8af1f"}, {0x6, 0x9, "ea0c908ad99f79"}, {0x1, 0x8, "150688cd062f"}, {0x6, 0xc, "82873be634cb4ed0da3d"}, {0x5, 0xd, "fd9612ebd8de43427a84a4"}, {0x0, 0x7, "56cf537cfa"}, {0x0, 0xe, "e4b4c8c91c71ce6e2e07bd0d"}, {0x2, 0xb, "68f371cc67c8768213"}, {0x1, 0x9, "fe36199604e3a8"}]}, @generic={0x86, 0x6, "c708480d"}, @timestamp={0x44, 0x18, 0x9b, 0x0, 0x5, [0x9, 0xffff, 0x800, 0x1996, 0xa]}, @end, @lsrr={0x83, 0x17, 0xef, [@broadcast, @private=0xa010100, @multicast2, @rand_addr=0x64010102, @local]}, @timestamp={0x44, 0x18, 0xc0, 0x0, 0x6, [0x6, 0x8, 0x8, 0x10, 0x5]}, @lsrr={0x83, 0x1b, 0xc0, [@private=0xa010101, @local, @broadcast, @local, @loopback, @empty]}]}}}}})
ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000e40)={@loopback, 0x4e, r10})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000f00)={r6, &(0x7f0000000e80)="ee55b399f86575dc2226055b80ec0e2089e392107aa0c8d3", &(0x7f0000000ec0)=@udp=r3}, 0x20)
sendto(r3, &(0x7f0000000f40)="dc21f0e1fae1e3d6f718dfa44b0c02b6c93705de355a3f003eed6705c30b07a2bfd494441327162fee22999de25ea5e8f9842ff3b84035dc70ccc635c9d2bc2eeae1f57f1d435ed96842b53d72bea54abb97971ca338074ab6ff3b2d4aa73c", 0x5f, 0x800, &(0x7f0000000fc0)=@rc={0x1f, @none, 0x3}, 0x80)
r11 = bpf$ITER_CREATE(0x21, &(0x7f0000001040)={r1}, 0x8)
epoll_ctl$EPOLL_CTL_DEL(r11, 0x2, r2)
socket$inet_sctp(0x2, 0x1, 0x84)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nfc(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r12, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r13, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44881}, 0x4000000)
recvmsg$kcm(r11, &(0x7f0000002380)={&(0x7f00000011c0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/50, 0x32}, {&(0x7f0000002280)=""/137, 0x89}], 0x3}, 0x1)
close(r2)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002400), r2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002700)={r7, 0xe0, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002440)=[0x0], ""/16, <r16=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000002480)=[0x0], &(0x7f00000024c0)=[0x0, 0x0, 0x0], 0x0, 0xda, &(0x7f0000002500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000002540), &(0x7f0000002580), 0x8, 0x7e, 0x8, 0x8, &(0x7f00000025c0)}}, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_GET(r14, &(0x7f0000002940)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0xd661d650e1b5f54c}, 0xc, &(0x7f0000002900)={&(0x7f0000002740)={0x1c0, r15, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x424d4e4f61b27e8e}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4004004}, 0x48000)

1.483470756s ago: executing program 5 (id=8187):
syz_80211_inject_frame(0x0, 0x0, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x12, {0x0, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6b2}, @device_b, @device_b, @device_a, {0x0, 0x80}, @device_a, @void, @value=@ver_80211n={0x0, 0x5, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_a, 0xd8, "cf9f391fb68a1095339ec77fc842d80db332e12b51c873ba2564e6816da97146856adf8f74fcded6cb9236f183d51b871b04471ac779ac052a0b34560676700fb4b88c4459c0c0f3e0f3e4102bfcc08b62a2b716944bb11414870e9a629190b91290f1d693c193ec16f096479438396a02af94cfe952f62f2049623985018eff8f5f8d4cf74b9039c61cad38ceb9e5577c6d21ae5120be9758c92688fe5e420de5acaa952dfbedf5e0ebc4785fdd589e65724b002982a44c3d3ce991c28f48d6c8279bcd3f3928b96da976e42e9b3ff29a7dc64933728aae"}, {@device_b, @device_a, 0x7b, "33a3ba4388d8b80db87b57f4327343a25d28d8cafbf923396dc18a96decbcee61d9c61c03e8040fda25355be76e67b90518d664cbb6d631c6d6ba3b042931e3bf5ede8c124b73c4c7112c7409358975dfdd697c9358d687eb2e2eb7399d1bd02db894a1858f708a52e60a387c28fd1b3d9d6ef8f98072966aba065"}, {@device_b, @device_b, 0x5a, "4546a9c4069d4a96a38459820fc04fcb4d8e66027b87a9b9094ba2123725df5af4233a71123fafe0bd40294b8cc10b2066c889ebda663638079e76255b7c61b87fbf2f7468958265ebed7265a5d3ebece805761853ca523d96c9"}, {@device_b, @device_b, 0x7d, "460be7c81a8cd206b82561206c856c90b33583a08b6578c748e419b19fad78e31716f1e6a9140597aaa9d85da6e153a4cf5d313d99426109031796915c2179a64c2c0e708dd5758af54c664488a462fa32bd92a62af6c21c65c528f0cb81d73cf6f085c28470e5c5eec51dd0e44658b138c47be35b84ac61583209091a"}, {@device_b, @device_a, 0x9b, "ac86be1eb7748ff311b8abd36e5ae18c46a37095fd3aa6ebd67c75fa002bc9060bbcbfe0aebf2fd127e0f1bc36980c2eb722871eb778387e75e86bf713a874a7d039f700ac88e566382e052979ddc95cd0deca3fc28d1786caa737ed2f7698f66126dd3999a092f27b91c75e6a054f6071e47b7fbbd60b4c99f9369f877a2de1854e7a95302ae4bb28d1585cbab537148ea02002848e829a870eb4"}]}, 0x336)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x2008840)

1.019818522s ago: executing program 2 (id=8192):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r4)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x80000406, 0xffff, 0xfdffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x6c}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

860.622996ms ago: executing program 1 (id=8194):
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000380)={0x80000000, {{0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}, {{0xa, 0x4e22, 0xc, @mcast1, 0x2}}}, 0x108)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f0000000280)={0xf0, 0x3c, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@generic="cb1ccc1c25f958f81db3ea8401dd4e9054bde9e4d4e82b2acc651459f08f092bc1afca34b5b209c8832115000e4ff2d48916df73f8", @typed={0x8, 0x34, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x100, 0x0, 0x0, @uid}, @generic="51a62f14388e6c773dc5e392631b1543da3aa8181bbf7f04241296b8a02498f7f538e1d1f36ad79ee4e6922d25b943f7c2d0ab2841e500c3f660b204fffffe11c78394019dd89750ecfa32f979119a7f047d19061e3f9bd2682c6b607e11f061b3ba14c97b08eb6bde54fe3966c810d888ecff8415fab29440cd0829097606d0ac1ae585bb268a4ddb6e4ab8427441d2c9afbb064925b44e"]}, 0xf0}], 0x2}, 0x0)

822.910328ms ago: executing program 1 (id=8195):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8885)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)
socket$unix(0x1, 0x5, 0x0)

763.379818ms ago: executing program 2 (id=8196):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @multicast1}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611074000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

600.26074ms ago: executing program 5 (id=8197):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1001002, 0x200000, 0x7}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="f0000000100013070000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000ffffac1e00010000000032000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f900000200"/168], 0xf0}}, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'pim6reg1\x00', 0x8000}) (async)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]}) (async)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000005c0), &(0x7f0000000640)=0x68) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'nicvf0\x00', &(0x7f00000002c0)=@ethtool_pauseparam={0x13, 0xa374, 0x20b8ec9d, 0x1f2}}) (async)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x2c, 0x3ab3666c4349b199, 0xffbffffc, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4)
sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r5, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) (async)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={<r6=>0x0, 0x1, 0xd, 0xffffffc0}, &(0x7f00000001c0)=0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r3)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xec, r7, 0x8, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x85}, {0x6, 0x11, 0x4fb}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x227}, {0x6, 0x11, 0xa}}]}, 0xec}, 0x1, 0x0, 0x0, 0x42}, 0x800) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={r6, 0x66, "6df528862462561461a3437e5fd75acc195595f022a58df7e2a2095a37ad8b75e675cc11c5fedc9ccbcf4975bde662e5b8e2987df01a889eb1459a5d2b03f42a415a4ea2d7cffb4c17a322a12a8610102d49fd77c1c2e82f8078071d617adef5d9a2be7c32de"}, &(0x7f0000000280)=0x6e)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080))

599.963102ms ago: executing program 1 (id=8198):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x34ff, 0x0, 0x1}})
ioctl(r0, 0x8b1b, &(0x7f0000000040))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x306)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt(r4, 0x1, 0x1e, 0x0, &(0x7f00000004c0))
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r2, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)

599.09838ms ago: executing program 4 (id=8199):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a080001"], 0x80}}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
getpeername$inet6(r2, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffff83, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0xe4}}, 0x20050840)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000140)="41000200010001", 0x7)
close(r4)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r3, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5)
ioctl$int_in(r3, 0x5421, &(0x7f0000000180)=0x5)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

555.731719ms ago: executing program 2 (id=8200):
syz_extract_tcp_res$synack(&(0x7f0000000000)={<r0=>0x41424344}, 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, <r1=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x1af, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x6, 0x6, "5255e3", 0x179, 0x6, 0xff, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@srh={0x29, 0x6, 0x4, 0x3, 0x9, 0x18, 0x1, [@local, @loopback, @mcast1]}, @hopopts={0xc, 0x0, '\x00', [@pad1, @ra]}, @fragment={0x89, 0x0, 0x1, 0x1, 0x0, 0x9, 0x64}], {{0x4e23, 0x4e24, r0, r1, 0x0, 0x0, 0xf, 0x1, 0xce, 0x0, 0x9e, {[@fastopen={0x22, 0x8, "3bedaf975b3b"}, @nop, @mptcp=@mp_fclose={0x1e, 0xc, 0xffc, 0x0, 0x5}, @mptcp=@synack={0x1e, 0x10, 0xf, 0x2, 0x8, 0xb, 0x3ff}]}}, {"2039e0e796067faaf3b35a66da45441b9d79deef1e812b41969cc4d5b8f2bb6a0c26df15a7ab8d755763a53c8cfa076b5c96dca61b8614f2a49591aab37683e808e5b166dd1f73adc569aaa0cfdf53958b0381c957a36c8a6d3f21a535cea4429a51cb313578bd586ec0facb8b56abcc6883377ceea57c6431b9070788a17a84a9c0f1d7a4d6566a6bcb559b74db3dd5db16454240caee38fe12779650f2ada447846a354cb82e2ca23c55f4ea452d4906f80f67c682657783de2efa820b62c1e7e5cc2fb0ea6e293c0631aa98cbecc9906b1c649cdd948723efe12dd8105cb4ef7682c9b4143dc14d444d4d32"}}}}}}}, 0x0)

451.961077ms ago: executing program 4 (id=8201):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x304)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f00000022c0)={0xf46, 0xffffffffffffffff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})

400.016042ms ago: executing program 2 (id=8202):
syz_emit_ethernet(0x153, &(0x7f00000005c0)={@multicast, @broadcast, @void, {@mpls_mc={0x8848, {[{0x3}, {0xff, 0x0, 0x1}, {0x6}, {0x7, 0x0, 0x1}], @ipv4=@dccp={{0x16, 0x4, 0x3, 0x6, 0x135, 0x64, 0x0, 0x10, 0x21, 0x0, @loopback, @broadcast, {[@timestamp={0x44, 0x10, 0x72, 0x0, 0x5, [0x8, 0x75f1cd14, 0x8]}, @end, @timestamp={0x44, 0xc, 0xa3, 0x0, 0x1, [0xfffffffe, 0x9]}, @end, @ssrr={0x89, 0x13, 0x7, [@empty, @loopback, @multicast2, @private=0xa010101]}, @timestamp={0x44, 0x8, 0xae, 0x0, 0x4, [0x5]}, @ssrr={0x89, 0xb, 0xc5, [@loopback, @broadcast]}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0xe, 0x0, 0x0, 0x6, 0x3, "03a1dd", 0x1, "1371cf"}, "509c35d2abc9a0509de44030ae39184c24bb13c29bf932b5d563655dd54544d297c54b1cbfdd62006844f0f34633d8f6208166878b6fc053cbab70b1556cb5b9b51f3088fe1883cad500deb4a6ef1a00ac1c7703e1f05e223489dc5d8fa95d7346f5372d62d559e36b9bde4cbfa807e0bb65956822a1192656e01bc1202e0ee6a47de97d5622617c65ec96e0cc9e73222be0b1c93728850c70d3eae05476d9b94db71b12f569dea619c9d24cde0cc4549a3d71498407574efd794333e51f74ff36c6e95b7f933e869276fca73b"}}}}}}, &(0x7f0000000740)={0x0, 0x3, [0x5be, 0xb53, 0x410, 0xb46]})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x401, 0x0, 0x0, {0xb, 0x0, 0x2}}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0x94}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000800)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x470, 0x1e0, 0x1e0, 0x340, 0x340, 0x278, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x11}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0xff, 0x4, [0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x4e24, 0x4e23, 0x4e21, 0x4a23, 0x4e20, 0x4e23, 0x4e20, 0x4e22, 0x4e21], [0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1], 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x11, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@empty, @empty, 0x0, 0xff000000, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x800, 0x903, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, 0xffffff00, 0xffffffff, 'veth1_to_bond\x00', 'nr0\x00', {}, {0xff}, 0x67, 0x2}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0)
syz_emit_ethernet(0x153, &(0x7f00000005c0)={@multicast, @broadcast, @void, {@mpls_mc={0x8848, {[{0x3}, {0xff, 0x0, 0x1}, {0x6}, {0x7, 0x0, 0x1}], @ipv4=@dccp={{0x16, 0x4, 0x3, 0x6, 0x135, 0x64, 0x0, 0x10, 0x21, 0x0, @loopback, @broadcast, {[@timestamp={0x44, 0x10, 0x72, 0x0, 0x5, [0x8, 0x75f1cd14, 0x8]}, @end, @timestamp={0x44, 0xc, 0xa3, 0x0, 0x1, [0xfffffffe, 0x9]}, @end, @ssrr={0x89, 0x13, 0x7, [@empty, @loopback, @multicast2, @private=0xa010101]}, @timestamp={0x44, 0x8, 0xae, 0x0, 0x4, [0x5]}, @ssrr={0x89, 0xb, 0xc5, [@loopback, @broadcast]}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0xe, 0x0, 0x0, 0x6, 0x3, "03a1dd", 0x1, "1371cf"}, "509c35d2abc9a0509de44030ae39184c24bb13c29bf932b5d563655dd54544d297c54b1cbfdd62006844f0f34633d8f6208166878b6fc053cbab70b1556cb5b9b51f3088fe1883cad500deb4a6ef1a00ac1c7703e1f05e223489dc5d8fa95d7346f5372d62d559e36b9bde4cbfa807e0bb65956822a1192656e01bc1202e0ee6a47de97d5622617c65ec96e0cc9e73222be0b1c93728850c70d3eae05476d9b94db71b12f569dea619c9d24cde0cc4549a3d71498407574efd794333e51f74ff36c6e95b7f933e869276fca73b"}}}}}}, &(0x7f0000000740)={0x0, 0x3, [0x5be, 0xb53, 0x410, 0xb46]}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x401, 0x0, 0x0, {0xb, 0x0, 0x2}}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0x94}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000800) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x470, 0x1e0, 0x1e0, 0x340, 0x340, 0x278, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x11}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0xff, 0x4, [0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x4e24, 0x4e23, 0x4e21, 0x4a23, 0x4e20, 0x4e23, 0x4e20, 0x4e22, 0x4e21], [0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1], 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x11, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@empty, @empty, 0x0, 0xff000000, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x800, 0x903, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, 0xffffff00, 0xffffffff, 'veth1_to_bond\x00', 'nr0\x00', {}, {0xff}, 0x67, 0x2}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) (async)

398.461271ms ago: executing program 5 (id=8203):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r4, 0x0, 0x200ffff}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r5 = socket$kcm(0x21, 0x2, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r6, 0x0, 0x80000001}, 0x18)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x28}, 0xc0)
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000380)={'wlan1\x00', @broadcast})

395.441048ms ago: executing program 6 (id=8204):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x2, 0xfe, 0xb152, 0x1, 0x401fb, 0xfffffff9, 0x2}})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, 0x2, 0x9, 0x5}, 0x14}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x2, 0xfe, 0xb152, 0x1, 0x401fb, 0xfffffff9, 0x2}}) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, 0x2, 0x9, 0x5}, 0x14}}, 0x0) (async)

383.808349ms ago: executing program 1 (id=8205):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc2c0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f00000004c0)=ANY=[@ANYRES16=r5, @ANYBLOB="5e017b"], 0x4)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x14)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0)
r7 = socket(0x15, 0x80004, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000100)={'team0\x00', <r9=>0x0})
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r11, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
socket$inet6(0xa, 0x3, 0x87)
socket$inet6(0xa, 0x2, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x10, 0x1, 0x445, 0x7fffffff, 0x0, r8, 0x80, '\x00', r9, r10, 0x0, 0x0, 0x3}, 0x50)

289.721922ms ago: executing program 5 (id=8206):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50)
sendfile(r0, r0, &(0x7f0000000080)=0x6, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90)

236.091838ms ago: executing program 2 (id=8207):
close(0xffffffffffffffff)
syz_init_net_socket$netrom(0x6, 0x5, 0x18)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
close(0xffffffffffffffff) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x18) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)

234.517831ms ago: executing program 6 (id=8208):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x18, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffb}, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe0f}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @ldst={0x2, 0x0, 0x6, 0x0, 0x1, 0x100, 0xffffffffffffffff}], &(0x7f0000000080)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x11eac000)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x2000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r2, r3, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f462013c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

216.944889ms ago: executing program 1 (id=8209):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r1, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x42)
syz_emit_ethernet(0x4e, &(0x7f0000002100)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, [{0x5, 0x0, "9dc8"}]}}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3b150000000000000000000000d70b237ea2ba896ba300040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e6400000000040002800a000100aaaaaaaaaabb0000"], 0x40}}, 0x0)

139.574349ms ago: executing program 5 (id=8210):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x5}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000300)={<r2=>0xffffffffffffffff, 0x7, 0x9, 0x8})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0, 0xeb, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x13, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8bfc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x0, 0x94, &(0x7f0000000240)=""/148, 0x1f00, 0x58, '\x00', r1, 0x1b, r2, 0x8, &(0x7f0000000340)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x2, 0xb, 0x7}, 0x10, r3, 0x0, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}}}]}, 0x48}}, 0x0)

44.78664ms ago: executing program 1 (id=8211):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xe)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r2, 0x11, 0xb, 0x0, &(0x7f0000000100))
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600156f"], 0x18}}, 0x8080)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0)

37.929711ms ago: executing program 6 (id=8212):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x1d, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @alu={0x7, 0x1, 0x5, 0xb, 0xa, 0xffffffffffffffe0, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0xc, 0x1, 0x4, 0x2, 0xfffffffffffffff0}, @ldst={0x2, 0x1, 0x2, 0xa, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x60}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000280)='GPL\x00', 0xf, 0xab, &(0x7f0000000340)=""/171, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x8, 0x4e, 0xfff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r0], &(0x7f0000000480)=[{0x5, 0x2, 0x7, 0x8}, {0x1, 0x1, 0x9, 0x9}, {0x4, 0x2, 0xe, 0xc}], 0x10, 0xd97}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000140), &(0x7f0000000580)=r2}, 0x20)
ioctl$int_in(r0, 0x5452, &(0x7f0000000c80)=0xf4e)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r5 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000080)=0x7, 0x4)
bind$l2tp(r5, &(0x7f0000000200)={0x2, 0x0, @multicast1, 0x2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1)
writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}, {&(0x7f00000197c0)="1902e902d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5c2df6b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)

36.350807ms ago: executing program 4 (id=8213):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x97}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x0, 0xc}}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x28, 0x1, 0x0)
getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller1\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002440)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x0)
bind$netlink(r3, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbfd, 0x8080404}, 0xc)
r6 = socket(0x8000000010, 0x2, 0x0)
accept$inet6(r6, &(0x7f0000000580)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000005c0)=0x1c)
write(r6, &(0x7f00000002c0)="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", 0xfc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, 0x0, &(0x7f0000003100))
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRESHEX, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800011501b451c3444266a03d3cd80ebdaa226833a6c538cae1b68d311d0715eedb438cf25d51e3581a34e3a288899a3848cc3ba9a55202c80323139fae4f8c6d27dc646a7a3a6d1185717fb48ab11f956a90ef4b60c021a6434ad465406ae0c5b57b262ec74864f43007ac4ae6cbbfbe84a7e5914c063599d606f2cda2e510d6a022b1d781266c14c7603072fa36ce98eade07"], 0x3c}}, 0x40000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, r11, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fffffff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008010}, 0x40058)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d146"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000700000061106100000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$netlink(0x10, 0x3, 0x0)

0s ago: executing program 2 (id=8214):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x36, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, [@map_idx={0x18, 0x9}, @map_fd={0x18, 0xb}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd9a3}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x8}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x42, &(0x7f00000002c0)=""/66, 0x41100, 0x48, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x3, 0x4d, 0x8}, 0x10, 0x94d8, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000580)=[{0x0, 0x5, 0x10, 0x2}, {0x3, 0x2, 0x10, 0xc}], 0x10, 0x2e}, 0x94)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000040)=0x401, 0x4)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e22, @local}}, 0xf, 0x3}, &(0x7f00000005c0)=0x90)
r3 = socket(0x11, 0x5, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x8100}}]}, 0x24}}, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000840)=0x3, 0x4) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000840)=0x3, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010001000000000000000c0000001800018014000200697036677265300000000000000000000c0003800800020052e3ba9a12ecb9961df36e279800000078783f3d9319360808a9a18ee0ce0ecea99b0366a54d39b8ad391947b027531fbc78e5eeedddd844a5f5cb4e6456251c22379bfca67db05368879e3e8e90d83d2d0315e9ecaab7aadbadca79676dc219dda247ba14728bf77d1021674448734f98375f3b00"/172], 0x38}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r3)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xc0, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x7b, 0x5b, "8955c985b1154ed923be3577a8c7ae1746edafa538a21fa659a10a9c21d72b57f57e2f8509eda190c5bc58f5c5f094ffbd05185dc14163db9949eb1d710d82dfdac81a7d21efda06afded4066065e4bfa9b29c01aabb50ea1d5f56ec95cbcf8d809f1d84f36e4df5991e698a4197647a32eaa75e85ba42"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7fff}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc805}, 0x44011)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wg1\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb4, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_OURS={0x5c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x5040}, 0x10) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb4, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_OURS={0x5c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x5040}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x8000, 0x9}, 0x48)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r14=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x20, r13, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0)

kernel console output (not intermixed with test programs):

ength: 249 > 9
[  629.630199][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  629.638992][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  629.644742][T27146] tap0: tun_chr_ioctl cmd 2148553947
[  629.681662][T27146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  629.724767][T27146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6113'.
[  629.779843][T27146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6113'.
[  630.081247][T27166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6121'.
[  630.096855][T27166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6121'.
[  630.198100][T27143] lo speed is unknown, defaulting to 1000
[  630.236956][T27170] netlink: 'syz.6.6122': attribute type 1 has an invalid length.
[  630.266323][T27168] nbd3: detected capacity change from 0 to 127
[  630.538858][T27170] netlink: 'syz.6.6122': attribute type 1 has an invalid length.
[  630.547354][T23596] block nbd3: Receive control failed (result -32)
[  630.565357][T27143] lo speed is unknown, defaulting to 1000
[  630.571555][T27170] netlink: 'syz.6.6122': attribute type 1 has an invalid length.
[  630.597337][T27170] netlink: 'syz.6.6122': attribute type 1 has an invalid length.
[  630.666178][T27178] xt_ecn: cannot match TCP bits for non-tcp packets
[  630.673282][T27170] netlink: 'syz.6.6122': attribute type 1 has an invalid length.
[  630.701977][T27170] netlink: 'syz.6.6122': attribute type 1 has an invalid length.
[  631.445288][T23596] Bluetooth: hci0: command 0x041b tx timeout
[  631.620538][T27143] chnl_net:caif_netlink_parms(): no params data found
[  631.684804][T23596] Bluetooth: hci2: command tx timeout
[  631.704817][T27236] syz1: rxe_newlink: already configured on lo
[  631.720002][T27231] 8021q: adding VLAN 0 to HW filter on device bond1
[  631.733690][T27229] validate_nla: 75 callbacks suppressed
[  631.733710][T27229] netlink: 'syz.1.6138': attribute type 33 has an invalid length.
[  631.757184][T27229] netlink: 'syz.1.6138': attribute type 33 has an invalid length.
[  631.824163][T27229] netlink: 'syz.1.6138': attribute type 33 has an invalid length.
[  631.840498][T27229] netlink: 'syz.1.6138': attribute type 33 has an invalid length.
[  631.879201][T27229] netlink: 'syz.1.6138': attribute type 33 has an invalid length.
[  631.904136][T27229] netlink: 'syz.1.6138': attribute type 33 has an invalid length.
[  631.935476][T27229] netlink: 'syz.1.6138': attribute type 33 has an invalid length.
[  631.984810][T27229] netlink: 'syz.1.6138': attribute type 33 has an invalid length.
[  632.011559][T27143] bridge0: port 1(bridge_slave_0) entered blocking state
[  632.030369][T27143] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.038861][T27143] bridge_slave_0: entered allmulticast mode
[  632.047450][T27143] bridge_slave_0: entered promiscuous mode
[  632.060257][T27229] netlink: 'syz.1.6138': attribute type 33 has an invalid length.
[  632.061079][T27143] bridge0: port 2(bridge_slave_1) entered blocking state
[  632.075559][T27143] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.082881][T27143] bridge_slave_1: entered allmulticast mode
[  632.092193][T27143] bridge_slave_1: entered promiscuous mode
[  632.135806][T27229] netlink: 'syz.1.6138': attribute type 33 has an invalid length.
[  632.178467][T27143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  632.241583][T27143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  632.421658][T27268] macsec0: entered promiscuous mode
[  632.445196][T27143] team0: Port device team_slave_0 added
[  632.493756][T27143] team0: Port device team_slave_1 added
[  632.512107][   T30] audit: type=1804 audit(1762504379.173:7): pid=27280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6152" name="/newroot/51/cgroup.controllers" dev="tmpfs" ino=277 res=1 errno=0
[  632.566594][   T30] audit: type=1800 audit(1762504379.173:8): pid=27280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6152" name="cgroup.controllers" dev="tmpfs" ino=277 res=0 errno=0
[  632.634743][T27143] batman_adv: batadv0: Adding interface: batadv_slave_0
[  632.641746][T27143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  632.675584][T27143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  632.721977][T27143] batman_adv: batadv0: Adding interface: batadv_slave_1
[  632.758332][T27143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  632.815586][T27143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  633.021340][T27143] hsr_slave_0: entered promiscuous mode
[  633.046565][T27143] hsr_slave_1: entered promiscuous mode
[  633.075819][T27143] debugfs: 'hsr0' already exists in 'hsr'
[  633.097152][T27143] Cannot create hsr debugfs directory
[  633.272797][T27305] IPVS: length: 123 != 24
[  633.766619][T23596] Bluetooth: hci2: command tx timeout
[  633.843147][T27143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  633.856113][T27143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.860262][T27352] __nla_validate_parse: 92 callbacks suppressed
[  633.860282][T27352] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6167'.
[  634.019469][T27143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  634.032607][T27143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.035989][T27360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6172'.
[  634.059389][T27359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6171'.
[  634.070887][T27360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6172'.
[  634.143489][T27143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  634.155879][T27143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.303299][T27143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  634.326599][T27368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6175'.
[  634.341560][T27143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.438858][T27374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6177'.
[  634.621069][T27386] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6180'.
[  634.634640][T27393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6180'.
[  634.643869][T27394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6180'.
[  634.657499][T27143] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  634.686277][T27143] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  634.697846][T27143] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  634.709423][T27143] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  634.756744][T27392] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6182'.
[  635.090906][T27417] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20004
[  635.178976][T27408] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  635.188932][T27408] macsec0: left promiscuous mode
[  635.199320][T27408] macvtap1: left promiscuous mode
[  635.224685][T27408] gretap2: left promiscuous mode
[  635.258017][T27408] bond6: left promiscuous mode
[  635.844979][T23596] Bluetooth: hci2: command tx timeout
[  636.140754][T27449] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004
[  637.689248][T27451] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  637.705633][T27452] syzkaller0: entered promiscuous mode
[  637.711161][T27452] syzkaller0: entered allmulticast mode
[  637.761690][T27143] 8021q: adding VLAN 0 to HW filter on device bond0
[  637.829292][T27143] 8021q: adding VLAN 0 to HW filter on device team0
[  637.865834][ T6919] bridge0: port 1(bridge_slave_0) entered blocking state
[  637.873090][ T6919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  637.895643][T27452] tipc: Resetting bearer <eth:syzkaller0>
[  637.924764][T23596] Bluetooth: hci2: command tx timeout
[  637.957949][T27452] tipc: Disabling bearer <eth:syzkaller0>
[  638.003201][T25819] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.010471][T25819] bridge0: port 2(bridge_slave_1) entered forwarding state
[  638.373147][T27495] xt_CT: You must specify a L4 protocol and not use inversions on it
[  638.575135][T27510] IPVS: ip_vs_add_dest(): server weight less than zero
[  638.774936][T27143] 8021q: adding VLAN 0 to HW filter on device batadv0
[  638.891763][T27143] veth0_vlan: entered promiscuous mode
[  638.923052][T27143] veth1_vlan: entered promiscuous mode
[  638.946504][T27532] __nla_validate_parse: 7 callbacks suppressed
[  638.946524][T27532] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.6208'.
[  638.984178][T27532] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6208'.
[  639.069178][T27143] veth0_macvtap: entered promiscuous mode
[  639.106360][T27143] veth1_macvtap: entered promiscuous mode
[  639.189325][T27143] batman_adv: batadv0: Interface activated: batadv_slave_0
[  639.249163][T27143] batman_adv: batadv0: Interface activated: batadv_slave_1
[  639.320704][ T6906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  639.366762][ T6906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  639.396761][ T6906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  639.412879][ T6906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  639.597865][ T6919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  639.608923][ T6919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.667072][ T6906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  639.686661][ T6906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.706741][T27561] sctp: [Deprecated]: syz.5.6212 (pid 27561) Use of struct sctp_assoc_value in delayed_ack socket option.
[  639.706741][T27561] Use struct sctp_sack_info instead
[  639.963716][T27575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6215'.
[  640.335933][T27591] validate_nla: 13 callbacks suppressed
[  640.335954][T27591] netlink: 'syz.6.6219': attribute type 1 has an invalid length.
[  640.351752][T27591] vlan1: entered allmulticast mode
[  640.357115][T27591] veth0_vlan: entered allmulticast mode
[  640.418405][T27596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6221'.
[  640.742670][T27613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6225'.
[  640.873449][T27615] netlink: 'syz.1.6227': attribute type 6 has an invalid length.
[  641.030005][T27623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6231'.
[  641.049780][T27623] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  641.067049][T27625] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  641.264148][T27631] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6234'.
[  641.383904][T27641] netlink: 'syz.6.6238': attribute type 10 has an invalid length.
[  641.545284][T27645] syzkaller1: entered promiscuous mode
[  641.556621][T27645] syzkaller1: entered allmulticast mode
[  641.709403][T27656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6242'.
[  641.728799][T27656] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6242'.
[  641.742237][T27656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6242'.
[  641.766658][T27660] netlink: 'syz.6.6244': attribute type 23 has an invalid length.
[  642.221564][T27693] ip6t_rpfilter: unknown options
[  642.235340][T27696] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  642.424456][T27704] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001
[  642.441287][T27705] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001
[  642.636782][T27715] syzkaller0: entered promiscuous mode
[  642.654823][T27715] syzkaller0: entered allmulticast mode
[  643.103480][T27746] netlink: 'syz.5.6274': attribute type 21 has an invalid length.
[  643.135848][T27746] IPv6: NLM_F_CREATE should be specified when creating new route
[  643.161709][T27745] delete_channel: no stack
[  643.170796][T27746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  643.210693][T27752] vlan2: entered promiscuous mode
[  643.216616][T27752] geneve1: entered promiscuous mode
[  643.222709][T27752] vlan2: entered allmulticast mode
[  643.228766][T27752] geneve1: entered allmulticast mode
[  643.238585][T27746] syzkaller0: entered promiscuous mode
[  643.246700][T27746] syzkaller0: entered allmulticast mode
[  643.337588][T27746] tipc: Resetting bearer <eth:syzkaller0>
[  643.421365][T27746] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  643.446660][T27742] tipc: Resetting bearer <eth:syzkaller0>
[  643.503810][T27742] tipc: Disabling bearer <eth:syzkaller0>
[  643.854848][T27795] xt_l2tp: v2 tid > 0xffff: 1114244
[  645.750491][T27819] netlink: 'syz.2.6294': attribute type 1 has an invalid length.
[  645.770026][T27819] __nla_validate_parse: 6 callbacks suppressed
[  645.770046][T27819] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6294'.
[  645.837261][T27826] netlink: 'syz.5.6295': attribute type 1 has an invalid length.
[  645.853114][T27826] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  645.902066][T27832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6297'.
[  646.124127][T27845] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6300'.
[  646.438734][T27862] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6307'.
[  646.656369][T27872] netlink: 'syz.2.6310': attribute type 10 has an invalid length.
[  646.668032][T27872] bridge0: port 2(bridge_slave_1) entered disabled state
[  646.676203][T27872] bridge_slave_1: left allmulticast mode
[  646.681882][T27872] bridge_slave_1: left promiscuous mode
[  646.688148][T27872] bridge0: port 2(bridge_slave_1) entered disabled state
[  646.702216][T27872] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  646.798849][T27879] bridge_slave_1: entered promiscuous mode
[  647.388283][T27892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6316'.
[  647.397825][T27892] netlink: 'syz.5.6316': attribute type 3 has an invalid length.
[  647.568820][T27898] sctp: [Deprecated]: syz.1.6318 (pid 27898) Use of int in maxseg socket option.
[  647.568820][T27898] Use struct sctp_assoc_value instead
[  647.725285][T27906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6320'.
[  647.996444][T27923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6325'.
[  648.012211][T27923] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6325'.
[  648.037275][T27923] netlink: 'syz.1.6325': attribute type 5 has an invalid length.
[  648.126168][T27929] netlink: 'syz.2.6327': attribute type 64 has an invalid length.
[  648.142354][T27929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6327'.
[  648.310501][T27943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6329'.
[  650.145826][T27970] --map-set only usable from mangle table
[  650.861016][T28028] __nla_validate_parse: 4 callbacks suppressed
[  650.861036][T28028] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6356'.
[  650.973902][T28035] netlink: 'syz.6.6361': attribute type 7 has an invalid length.
[  651.297080][T28049] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6366'.
[  651.418447][T28062] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002
[  651.449709][T28049] tipc: Started in network mode
[  651.462661][T28065] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002
[  651.467017][T28049] tipc: Node identity 42f25dbdf149, cluster identity 4711
[  651.495645][T28049] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  651.520259][T28049] syzkaller0: entered promiscuous mode
[  651.529011][T28049] syzkaller0: entered allmulticast mode
[  651.601402][T28049] tipc: Resetting bearer <eth:syzkaller0>
[  651.687010][T28048] tipc: Resetting bearer <eth:syzkaller0>
[  651.703478][T28082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6374'.
[  651.743775][T28084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6375'.
[  651.754402][T28084] netlink: 'syz.2.6375': attribute type 4 has an invalid length.
[  651.763024][T28084] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6375'.
[  651.767434][T28048] tipc: Disabling bearer <eth:syzkaller0>
[  651.801420][T28078] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6374'.
[  651.821732][T28084] `: renamed from bond0 (while UP)
[  651.912361][T28087] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6377'.
[  651.991433][T28087] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6377'.
[  652.232540][T28087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  652.247010][T28087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  652.260603][T28087] bond0 (unregistering): Released all slaves
[  652.319884][T28109] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  652.338343][T28109] bond10 (unregistering): Released all slaves
[  652.587618][T28121] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6388'.
[  652.719357][T28134] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6392'.
[  652.799504][T28141] batadv_slave_1: entered promiscuous mode
[  652.870092][T28141] 8021q: adding VLAN 0 to HW filter on device bond2
[  652.880585][T28140] batadv_slave_1: left promiscuous mode
[  653.410444][T28177] pimreg: entered allmulticast mode
[  653.825781][T28205] sch_tbf: burst 0 is lower than device lo mtu (1550) !
[  653.973055][T28221] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  654.106856][T28225] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  654.109638][T12455] hid-generic 0005:0C45:1012.0002: unknown main item tag 0x1
[  654.136370][T12455] hid-generic 0005:0C45:1012.0002: ignoring exceeding usage max
[  654.156287][T12455] hid-generic 0005:0C45:1012.0002: unknown main item tag 0x4
[  654.166439][T12455] hid-generic 0005:0C45:1012.0002: unknown main item tag 0x5
[  654.177146][T12455] hid-generic 0005:0C45:1012.0002: reserved main item tag 0xd
[  654.184959][T12455] hid-generic 0005:0C45:1012.0002: unexpected long global item
[  654.193517][T12455] hid-generic 0005:0C45:1012.0002: probe with driver hid-generic failed with error -22
[  654.536283][T28257] netlink: 'syz.2.6425': attribute type 1 has an invalid length.
[  654.536281][T28255] netlink: 'syz.2.6425': attribute type 1 has an invalid length.
[  654.674863][T28252] team0: Port device team_slave_0 removed
[  655.271331][T28311] xt_CT: You must specify a L4 protocol and not use inversions on it
[  655.392798][T28319] nbd: must specify at least one socket
[  655.991697][T28354] sctp: [Deprecated]: syz.1.6455 (pid 28354) Use of struct sctp_assoc_value in delayed_ack socket option.
[  655.991697][T28354] Use struct sctp_sack_info instead
[  656.126968][T28364] wg2: entered promiscuous mode
[  656.131903][T28364] wg2: entered allmulticast mode
[  656.307722][T28376] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  656.316610][T28376] __nla_validate_parse: 15 callbacks suppressed
[  656.316630][T28376] netlink: 124 bytes leftover after parsing attributes in process `syz.5.6460'.
[  656.452250][T28383] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6464'.
[  656.461800][T28383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6464'.
[  656.598270][T28390] netlink: 'syz.5.6466': attribute type 2 has an invalid length.
[  656.643313][T28390] �9: entered promiscuous mode
[  657.073723][T28423] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6477'.
[  657.251688][T28434] team0: Device gtp0 is of different type
[  657.291630][T28439] sctp: [Deprecated]: syz.6.6480 (pid 28439) Use of int in max_burst socket option deprecated.
[  657.291630][T28439] Use struct sctp_assoc_value instead
[  657.426178][T28446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6486'.
[  657.458106][T28446] bridge_slave_1: left allmulticast mode
[  657.467982][T28446] bridge_slave_1: left promiscuous mode
[  657.479346][T28446] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.489859][T28446] bridge_slave_0: left allmulticast mode
[  657.496533][T28446] bridge_slave_0: left promiscuous mode
[  657.512866][T28446] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.625428][T28465] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6488'.
[  657.705115][T28460] bond8: option lp_interval: invalid value (0)
[  657.711500][T28460] bond8: option lp_interval: allowed values 1 - 2147483647
[  657.726517][T28460] bond8 (unregistering): Released all slaves
[  657.743127][T28473] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6493'.
[  658.215079][T28500] tipc: Enabling <eth:lo> not permitted
[  658.220994][T28500] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  658.431827][T28516] gre1: entered promiscuous mode
[  658.442594][T28516] gre1: entered allmulticast mode
[  658.631648][T28532] netlink: 'syz.1.6512': attribute type 3 has an invalid length.
[  658.792546][T28543] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20000
[  658.804024][T28549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6516'.
[  658.846363][T28551] netlink: 'syz.6.6517': attribute type 22 has an invalid length.
[  659.480406][T28586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6529'.
[  659.591849][T28600] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6532'.
[  659.726583][T28586] hsr_slave_1 (unregistering): left promiscuous mode
[  660.654625][T28657] netlink: 'syz.1.6550': attribute type 8 has an invalid length.
[  660.808741][T28669] netlink: 'syz.1.6550': attribute type 1 has an invalid length.
[  660.930545][T28677] tipc: Enabled bearer <ib:gretap0>, priority 0
[  661.406795][T28709] netlink: 'syz.6.6566': attribute type 39 has an invalid length.
[  661.629425][T28720] tap0: tun_chr_ioctl cmd 1074025676
[  661.645312][T28720] tap0: owner set to 0
[  661.650427][T28720] tap0: tun_chr_ioctl cmd 1074812118
[  661.714605][T28728] netlink: 'syz.1.6574': attribute type 9 has an invalid length.
[  661.745749][T28728] IPv6: Can't replace route, no match found
[  662.006775][T28744] tipc: Started in network mode
[  662.021963][T28744] tipc: Node identity 3afc80d68637, cluster identity 4711
[  662.033283][T28744] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  662.044472][   T24] tipc: Node number set to 116035894
[  662.058314][T28744] syzkaller0: entered promiscuous mode
[  662.076958][T28744] syzkaller0: entered allmulticast mode
[  662.112649][T28744] tipc: Resetting bearer <eth:syzkaller0>
[  662.136084][T28743] tipc: Resetting bearer <eth:syzkaller0>
[  662.142887][T28757] __nla_validate_parse: 6 callbacks suppressed
[  662.142906][T28757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6581'.
[  662.172427][T28743] tipc: Disabling bearer <eth:syzkaller0>
[  662.281069][T28755] syzkaller0: entered promiscuous mode
[  662.287581][T28755] syzkaller0: entered allmulticast mode
[  662.641908][T28779] netlink: 'syz.1.6587': attribute type 10 has an invalid length.
[  662.994940][T28793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6589'.
[  663.457754][T28778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  664.152345][T28779] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  664.505800][T28818] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  664.513495][T28818] syzkaller0: entered promiscuous mode
[  664.530233][T28818] syzkaller0: entered allmulticast mode
[  664.542250][T28815] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  664.630110][T28815] syzkaller0: entered promiscuous mode
[  664.653240][T28815] syzkaller0: entered allmulticast mode
[  664.667152][T28818] tipc: Resetting bearer <eth:syzkaller0>
[  666.248001][T28817] tipc: Resetting bearer <eth:syzkaller0>
[  666.297218][T28817] tipc: Disabling bearer <eth:syzkaller0>
[  666.316336][T28814] tipc: Resetting bearer <eth:syzkaller0>
[  666.376376][T28814] tipc: Disabling bearer <eth:syzkaller0>
[  666.499651][T28849] bond8: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  666.725054][T28867] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6609'.
[  666.905260][T28879] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  666.920720][T28879] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  666.997092][T28886] netlink: 'syz.4.6617': attribute type 1 has an invalid length.
[  667.033060][T28889] netlink: 'syz.1.6618': attribute type 10 has an invalid length.
[  667.035790][T28886] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.050046][T28889] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.054964][T28886] netlink: 45 bytes leftover after parsing attributes in process `syz.4.6617'.
[  667.057964][T28889] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.081601][T28889] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.088865][T28889] bridge0: port 2(bridge_slave_1) entered forwarding state
[  667.096503][T28889] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.103683][T28889] bridge0: port 1(bridge_slave_0) entered forwarding state
[  667.116755][T28889] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  667.140247][T28842] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  667.199961][T28886] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  667.403122][T28906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6624'.
[  667.425202][T28906] netlink: 'syz.1.6624': attribute type 1 has an invalid length.
[  667.433848][T28906] netlink: 'syz.1.6624': attribute type 2 has an invalid length.
[  667.469916][T28909] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6625'.
[  667.659251][T28917] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6628'.
[  667.763678][T28927] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6631'.
[  667.839260][T28930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6632'.
[  667.850526][T28930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6632'.
[  667.953238][ T3096] IPVS: starting estimator thread 0...
[  667.961711][T28931] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  668.054350][T28936] IPVS: using max 27 ests per chain, 64800 per kthread
[  668.618018][T28978] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6644'.
[  668.627323][T28978] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6644'.
[  668.903740][T28990] netlink: 'syz.2.6648': attribute type 1 has an invalid length.
[  669.068751][T28990] 8021q: adding VLAN 0 to HW filter on device bond0
[  669.166652][T28997] bond0: (slave geneve2): making interface the new active one
[  669.239305][T28997] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  669.269458][T29005] team0: Device gtp1 is of different type
[  669.350104][T29010] dvmrp0: entered allmulticast mode
[  669.382524][T29010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6653'.
[  669.502407][T29018] netlink: 'syz.2.6655': attribute type 1 has an invalid length.
[  669.551720][T29020] dvmrp0: left allmulticast mode
[  669.689801][T29018] bond1: entered promiscuous mode
[  669.725762][T29018] 8021q: adding VLAN 0 to HW filter on device bond1
[  669.762140][T29025] 8021q: adding VLAN 0 to HW filter on device bond1
[  669.776142][T29025] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[  669.776621][T29038] netlink: 'syz.1.6660': attribute type 2 has an invalid length.
[  669.788032][T29025] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  669.807936][T29025] bond1: (slave gre1): making interface the new active one
[  669.815613][T29025] gre1: entered promiscuous mode
[  669.821828][T29025] bond1: (slave gre1): Enslaving as an active interface with an up link
[  669.857021][T29027] bond1: Unable to set up delay as MII monitoring is disabled
[  669.867853][T29027] bond1 (unregistering): Released all slaves
[  669.917794][T29038] �9: entered promiscuous mode
[  669.952706][T29040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6660'.
[  670.208947][T29065] netlink: 'syz.6.6667': attribute type 12 has an invalid length.
[  670.278241][T29065] bond9: option primary_reselect: invalid value (255)
[  670.332171][T29065] bond9 (unregistering): Released all slaves
[  670.440624][T29076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  670.833592][T29101] syzkaller1: tun_chr_ioctl cmd 1074025677
[  670.839661][T29101] syzkaller1: Refused to change device type
[  670.873458][T29101] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  671.023289][T29107] netlink: 'syz.6.6676': attribute type 9 has an invalid length.
[  671.060732][T29101] bond1 (unregistering): Released all slaves
[  671.137553][T29104] netlink: 'syz.1.6675': attribute type 12 has an invalid length.
[  671.550719][T25820] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  671.574156][T25820] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  671.588041][T25820] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  671.603577][T25820] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  671.630545][T29145] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  671.638979][T29145] syzkaller0: entered promiscuous mode
[  671.644777][T29145] syzkaller0: entered allmulticast mode
[  671.686255][T29145] tipc: Resetting bearer <eth:syzkaller0>
[  671.717969][T29151] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  671.959282][T29168] x_tables: duplicate entry at hook 3
[  672.015878][T29171] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2
[  672.047941][T29171] tipc: Invalid UDP bearer configuration
[  672.047998][T29171] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  672.179787][T29178] sctp: [Deprecated]: syz.5.6697 (pid 29178) Use of int in maxseg socket option.
[  672.179787][T29178] Use struct sctp_assoc_value instead
[  672.195035][T29177] sctp: [Deprecated]: syz.5.6697 (pid 29177) Use of int in maxseg socket option.
[  672.195035][T29177] Use struct sctp_assoc_value instead
[  672.316498][T29135] tipc: Resetting bearer <eth:syzkaller0>
[  672.358005][T29135] tipc: Disabling bearer <eth:syzkaller0>
[  672.495631][T29191] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  672.504068][T29196] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  672.515706][T29191] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  672.567013][T29201] syz_tun: entered allmulticast mode
[  672.699646][T29206] __nla_validate_parse: 13 callbacks suppressed
[  672.699669][T29206] netlink: 276 bytes leftover after parsing attributes in process `syz.1.6708'.
[  672.744853][T29206] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6708'.
[  672.787966][T29209] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6709'.
[  672.815653][T29210] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6709'.
[  672.967057][T29219] netlink: 248 bytes leftover after parsing attributes in process `syz.4.6712'.
[  673.065984][T29227] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6712'.
[  673.108219][T29229] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6715'.
[  673.205930][T29235] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6717'.
[  673.243274][T29235] bridge0: port 2(bridge_slave_1) entered disabled state
[  673.243972][T29239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6718'.
[  673.250642][T29235] bridge0: port 1(bridge_slave_0) entered disabled state
[  673.466736][T29249] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6720'.
[  673.678417][T29262] veth0_to_bond: entered allmulticast mode
[  673.879594][T29260] syzkaller1: entered promiscuous mode
[  673.893596][T29260] syzkaller1: entered allmulticast mode
[  675.531352][T29330] bond2: (slave bond_slave_1): Device is not our slave
[  675.607456][T29330] bond2: option active_slave: invalid value (bond_slave_1)
[  675.697004][T29330] bond2 (unregistering): Released all slaves
[  675.817656][T29342] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2
[  675.866307][T29346] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  676.014425][T29353] lo: entered allmulticast mode
[  676.026864][T29354] syzkaller1: entered promiscuous mode
[  676.036427][T29354] syzkaller1: entered allmulticast mode
[  676.046775][T29353] lo: left allmulticast mode
[  676.076222][T29354] validate_nla: 2 callbacks suppressed
[  676.076241][T29354] netlink: 'syz.5.6751': attribute type 15 has an invalid length.
[  676.412826][T29361] hsr_slave_0 (unregistering): left promiscuous mode
[  676.598898][T29382] bond0: (slave rose0): Error: Device can not be enslaved while up
[  676.773079][T29403] netlink: 'syz.5.6761': attribute type 1 has an invalid length.
[  676.776537][T29402] netlink: 'syz.4.6762': attribute type 2 has an invalid length.
[  676.804633][T29400] xfrm1: entered promiscuous mode
[  676.809737][T29400] xfrm1: entered allmulticast mode
[  676.836998][T29403] 8021q: adding VLAN 0 to HW filter on device bond10
[  676.890816][T23596] Bluetooth: hci2: link tx timeout
[  676.897722][T23596] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  676.962833][T29403] veth17: entered promiscuous mode
[  676.978885][T29403] bond10: (slave veth17): Enslaving as an active interface with a down link
[  677.127817][T29422] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  677.157588][T29423] netlink: 'syz.6.6768': attribute type 1 has an invalid length.
[  677.167962][T29423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  677.273671][T29430] openvswitch: netlink: Message has -2 unknown bytes.
[  678.061712][T29489] __nla_validate_parse: 55 callbacks suppressed
[  678.061728][T29489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6789'.
[  678.601658][T29498] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  678.611136][T29496] IPVS: Error connecting to the multicast addr
[  678.651491][T29505] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  678.681506][T29501] netlink: 'syz.5.6793': attribute type 5 has an invalid length.
[  678.709294][T29501] netlink: 140 bytes leftover after parsing attributes in process `syz.5.6793'.
[  678.760994][T29509] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6794'.
[  678.796132][T29509] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6794'.
[  678.809318][T29508] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6794'.
[  678.830723][T29508] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6794'.
[  678.964889][ T5837] Bluetooth: hci2: command 0x0406 tx timeout
[  679.115558][T29531] syzkaller1: entered promiscuous mode
[  679.164579][T29531] syzkaller1: entered allmulticast mode
[  679.512992][T29559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6808'.
[  679.529339][T29556] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6805'.
[  679.627563][T29562] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  680.695930][T29588] bond0: option ad_select: unable to set because the bond device is up
[  680.843169][T29601] netlink: zone id is out of range
[  680.875115][T29601] netlink: zone id is out of range
[  680.887894][T29601] netlink: zone id is out of range
[  680.905946][T29601] netlink: zone id is out of range
[  680.915824][T29601] netlink: zone id is out of range
[  680.930051][T29601] netlink: get zone limit has 4 unknown bytes
[  681.232222][T29617] bond1 (unregistering): Released all slaves
[  681.340888][T29627] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  681.386514][T29627] syzkaller0: entered promiscuous mode
[  681.392054][T29627] syzkaller0: entered allmulticast mode
[  681.455609][T29627] tipc: Resetting bearer <eth:syzkaller0>
[  681.469515][T29629] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6830'.
[  681.496154][T29637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6831'.
[  681.537326][T29626] tipc: Resetting bearer <eth:syzkaller0>
[  681.573802][T29626] tipc: Disabling bearer <eth:syzkaller0>
[  681.750442][T29644] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  682.269574][T29634] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  682.589592][T29706] wg1: entered promiscuous mode
[  682.607182][T29706] wg1: entered allmulticast mode
[  682.800018][T29723] netlink: 'syz.5.6857': attribute type 6 has an invalid length.
[  682.832725][T29720] netlink: 'syz.4.6856': attribute type 8 has an invalid length.
[  682.836520][T29723] netlink: 'syz.5.6857': attribute type 6 has an invalid length.
[  683.421979][T29753] __nla_validate_parse: 70 callbacks suppressed
[  683.422001][T29753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6868'.
[  683.451110][T29756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6869'.
[  683.475440][T29756] bridge0: port 2(bridge_slave_1) entered disabled state
[  683.637275][T29756] bridge_slave_1 (unregistering): left allmulticast mode
[  683.648776][T29756] bridge_slave_1 (unregistering): left promiscuous mode
[  683.657039][T29756] bridge0: port 2(bridge_slave_1) entered disabled state
[  683.742589][T29780] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg1, syncid = 0, id = 0
[  683.817448][T25819] syzkaller0: tun_net_xmit 76
[  683.822918][T25819] syzkaller0: tun_net_xmit 48
[  683.849259][T22722] syzkaller0: tun_net_xmit 76
[  683.874491][T29773] syzkaller0: tun_chr_ioctl cmd 1074025677
[  683.880960][T29773] syzkaller0: Linktype set failed because interface is up
[  683.895717][T29782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6878'.
[  684.009511][T29790] netem: change failed
[  684.023023][T29793] netem: change failed
[  684.066697][T29799] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  684.354896][T22722] syzkaller0: tun_net_xmit 76
[  684.355521][T29811] bond2: entered promiscuous mode
[  684.365691][T29811] bond2: entered allmulticast mode
[  684.371321][T29811] 8021q: adding VLAN 0 to HW filter on device bond2
[  686.025524][T29838] netlink: 'syz.1.6893': attribute type 1 has an invalid length.
[  686.132075][T29838] 8021q: adding VLAN 0 to HW filter on device bond4
[  686.144026][T29848] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6894'.
[  686.171005][T29841] veth0_to_bond: left allmulticast mode
[  686.178063][T29848] netlink: 43 bytes leftover after parsing attributes in process `syz.5.6894'.
[  686.197324][T29848] netlink: 'syz.5.6894': attribute type 6 has an invalid length.
[  686.205829][T29848] netlink: 'syz.5.6894': attribute type 5 has an invalid length.
[  686.212007][T29841] bond4: (slave veth0_to_bond): making interface the new active one
[  686.213605][T29848] netlink: 43 bytes leftover after parsing attributes in process `syz.5.6894'.
[  686.240425][T29841] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  686.763773][T29889] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6907'.
[  686.785302][T29889] gretap0: entered promiscuous mode
[  686.801183][T29891] netlink: 'syz.5.6908': attribute type 10 has an invalid length.
[  686.805335][T29890] netlink: 'syz.5.6908': attribute type 10 has an invalid length.
[  686.838194][T29897] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6907'.
[  686.886043][T29897] 0��{X��: renamed from gretap0
[  686.908983][T29890] netlink: 'syz.5.6908': attribute type 6 has an invalid length.
[  686.919892][T29897] 0��{X��: left promiscuous mode
[  686.932525][T29897] 0��{X��: entered allmulticast mode
[  686.945036][T29897] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  687.136568][T29914] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6915'.
[  687.344699][T29933] netlink: 'syz.1.6921': attribute type 2 has an invalid length.
[  687.352663][T29933] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6921'.
[  688.501500][T30015] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  688.889251][T30041] __nla_validate_parse: 6 callbacks suppressed
[  688.889274][T30041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6953'.
[  688.949977][T30043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6954'.
[  689.053570][T30049] syzkaller0: entered promiscuous mode
[  689.087801][T30049] syzkaller0: entered allmulticast mode
[  689.190753][T25818] syzkaller0: tun_net_xmit 76
[  689.196812][T30057] x_tables: ip6_tables: mh match: only valid for protocol 135
[  689.207779][T25818] syzkaller0: tun_net_xmit 48
[  689.213129][T30058] syzkaller0: create flow: hash 595818582 index 2
[  689.220234][T22750] syzkaller0: tun_net_xmit 76
[  689.340242][T30058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6956'.
[  689.395038][T30067] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6963'.
[  689.434552][T22721] syzkaller0: tun_net_xmit 76
[  689.443530][T30070] bond9: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  689.459696][T22750] syzkaller0: tun_net_xmit 76
[  689.467344][T30070] bond9 (unregistering): Released all slaves
[  689.520001][T30046] syzkaller0: delete flow: hash 595818582 index 2
[  689.542779][T30076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6966'.
[  691.370639][T30096] syzkaller1: entered promiscuous mode
[  691.377546][T30096] syzkaller1: entered allmulticast mode
[  691.573974][T30110] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6977'.
[  691.933502][T30141] sctp: [Deprecated]: syz.6.6980 (pid 30141) Use of struct sctp_assoc_value in delayed_ack socket option.
[  691.933502][T30141] Use struct sctp_sack_info instead
[  692.602040][T30146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6984'.
[  692.627230][T30146] bridge_slave_0: default FDB implementation only supports local addresses
[  692.680065][T30152] Cannot find del_set index 4 as target
[  692.988343][T30171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6991'.
[  693.178260][T30189] netlink: 'syz.6.6996': attribute type 1 has an invalid length.
[  693.249980][T30191] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  693.322663][T30197] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7000'.
[  693.400050][T30191] syzkaller0: entered promiscuous mode
[  693.421068][T30191] syzkaller0: entered allmulticast mode
[  693.436460][T30191] tipc: Resetting bearer <eth:syzkaller0>
[  693.589770][T25808] tipc: Resetting bearer <eth:syzkaller0>
[  693.824744][T30219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7005'.
[  695.382925][T30186] tipc: Resetting bearer <eth:syzkaller0>
[  695.451211][T30186] tipc: Disabling bearer <eth:syzkaller0>
[  695.485690][T30233] bond4: (slave lo): Releasing backup interface
[  695.496081][T30233] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  695.522569][T30233] team0: Port device dummy0 removed
[  695.540129][T30233] wg2: left promiscuous mode
[  695.560235][T30233] wg2: left allmulticast mode
[  695.605625][T30233] bond0: (slave bridge_slave_1): Releasing backup interface
[  695.667061][T30233] bond0: (slave bond_slave_0): Releasing backup interface
[  695.715676][T30254] netlink: 'syz.1.7015': attribute type 2 has an invalid length.
[  695.752221][T30233] bond0: (slave bond_slave_1): Releasing backup interface
[  695.775393][T30233] team0: Port device team_slave_0 removed
[  695.790781][T30233] team0: Port device team_slave_1 removed
[  695.813030][T30233] batman_adv: batadv0: Removing interface: batadv_slave_0
[  695.828448][T30233] batman_adv: batadv0: Removing interface: batadv_slave_1
[  695.838663][T30233] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  695.962357][T30261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7018'.
[  695.980911][T30261] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7018'.
[  696.092473][T30267] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7021'.
[  696.108785][T30266] netlink: 'syz.6.7020': attribute type 1 has an invalid length.
[  696.124327][T30266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7020'.
[  696.170758][T30266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7020'.
[  696.208674][T30273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7022'.
[  696.563451][T30281] netlink: 'syz.4.7024': attribute type 21 has an invalid length.
[  696.652072][T30287] IPVS: length: 199 != 8
[  696.708856][T30286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7025'.
[  697.113297][T30307] netlink: 128 bytes leftover after parsing attributes in process `syz.6.7031'.
[  697.148574][T30307] netlink: 128 bytes leftover after parsing attributes in process `syz.6.7031'.
[  697.163319][T30307] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  697.176975][T30312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7033'.
[  697.428630][T30328] netlink: 'syz.6.7038': attribute type 1 has an invalid length.
[  697.540122][T30328] 8021q: adding VLAN 0 to HW filter on device bond9
[  697.828745][T30363] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  697.883049][T30367] erspan0: entered promiscuous mode
[  698.280785][T30396] reject_tg6_check: 23 callbacks suppressed
[  698.280804][T30396] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  698.780120][T30430] xt_l2tp: unknown flags: 10
[  698.859580][T30399] lo speed is unknown, defaulting to 1000
[  699.269571][T30399] lo speed is unknown, defaulting to 1000
[  699.586875][T30458] veth0: entered promiscuous mode
[  699.592662][T30458] veth0: left promiscuous mode
[  699.820341][T30463] netlink: 'syz.2.7076': attribute type 23 has an invalid length.
[  700.255379][T30479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  700.409690][T30481] gtp1: entered promiscuous mode
[  700.433078][T30481] gtp1: entered allmulticast mode
[  700.461636][T30487] --map-set only usable from mangle table
[  700.473304][T30484] IPv6: sit1: Disabled Multicast RS
[  700.507476][T30485] netlink: 'syz.4.7084': attribute type 3 has an invalid length.
[  700.524517][T30485] netlink: 'syz.4.7084': attribute type 3 has an invalid length.
[  700.532503][T30485] netlink: 'syz.4.7084': attribute type 3 has an invalid length.
[  700.554666][T30485] netlink: 'syz.4.7084': attribute type 3 has an invalid length.
[  700.580576][T30485] netlink: 'syz.4.7084': attribute type 3 has an invalid length.
[  700.607701][T30485] netlink: 'syz.4.7084': attribute type 3 has an invalid length.
[  700.631559][T30485] netlink: 'syz.4.7084': attribute type 3 has an invalid length.
[  700.659603][T30485] netlink: 'syz.4.7084': attribute type 3 has an invalid length.
[  700.681336][T30485] netlink: 'syz.4.7084': attribute type 3 has an invalid length.
[  701.286625][T30502] x_tables: duplicate entry at hook 1
[  701.938415][T30525] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  701.957585][T30525] syzkaller0: entered promiscuous mode
[  701.989248][T30525] syzkaller0: entered allmulticast mode
[  702.035937][T30525] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  702.154641][T30524] tipc: Resetting bearer <eth:syzkaller0>
[  702.236035][T30524] tipc: Disabling bearer <eth:syzkaller0>
[  702.264981][T30534] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  702.335112][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  702.356240][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  702.356557][T30534] tipc: Disabling bearer <eth:syzkaller0>
[  702.374154][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  702.391274][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  702.399516][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  702.464746][T30544] __nla_validate_parse: 72 callbacks suppressed
[  702.464766][T30544] netlink: 528 bytes leftover after parsing attributes in process `syz.4.7102'.
[  702.506831][T30543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7103'.
[  702.533688][T30544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7102'.
[  702.533747][T30545] netlink: 528 bytes leftover after parsing attributes in process `syz.4.7102'.
[  702.607837][T30545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7102'.
[  702.896338][T30560] syzkaller0: entered promiscuous mode
[  702.922352][T30560] syzkaller0: entered allmulticast mode
[  703.008623][T30539] lo speed is unknown, defaulting to 1000
[  703.059548][T30568] FAULT_INJECTION: forcing a failure.
[  703.059548][T30568] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  703.082170][T30568] CPU: 1 UID: 0 PID: 30568 Comm: syz.2.7112 Not tainted syzkaller #0 PREEMPT(full) 
[  703.082201][T30568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  703.082215][T30568] Call Trace:
[  703.082223][T30568]  <TASK>
[  703.082233][T30568]  dump_stack_lvl+0x189/0x250
[  703.082267][T30568]  ? __pfx____ratelimit+0x10/0x10
[  703.082297][T30568]  ? __pfx_dump_stack_lvl+0x10/0x10
[  703.082326][T30568]  ? __pfx__printk+0x10/0x10
[  703.082348][T30568]  ? __might_fault+0xb0/0x130
[  703.082390][T30568]  should_fail_ex+0x414/0x560
[  703.082428][T30568]  _copy_from_user+0x2d/0xb0
[  703.082456][T30568]  ___sys_sendmsg+0x158/0x2a0
[  703.082482][T30568]  ? __pfx____sys_sendmsg+0x10/0x10
[  703.082555][T30568]  ? __fget_files+0x2a/0x420
[  703.082573][T30568]  ? __fget_files+0x3a0/0x420
[  703.082605][T30568]  __x64_sys_sendmsg+0x19b/0x260
[  703.082631][T30568]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  703.082665][T30568]  ? __pfx_ksys_write+0x10/0x10
[  703.082699][T30568]  ? do_syscall_64+0xbe/0xfa0
[  703.082733][T30568]  do_syscall_64+0xfa/0xfa0
[  703.082760][T30568]  ? lockdep_hardirqs_on+0x9c/0x150
[  703.082790][T30568]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.082810][T30568]  ? clear_bhb_loop+0x60/0xb0
[  703.082836][T30568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.082856][T30568] RIP: 0033:0x7fc08198f6c9
[  703.082875][T30568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  703.082892][T30568] RSP: 002b:00007fc0828bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  703.082915][T30568] RAX: ffffffffffffffda RBX: 00007fc081be5fa0 RCX: 00007fc08198f6c9
[  703.082930][T30568] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000004
[  703.082943][T30568] RBP: 00007fc0828bf090 R08: 0000000000000000 R09: 0000000000000000
[  703.082956][T30568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  703.082969][T30568] R13: 00007fc081be6038 R14: 00007fc081be5fa0 R15: 00007ffdd6299998
[  703.083006][T30568]  </TASK>
[  703.467273][T30539] lo speed is unknown, defaulting to 1000
[  704.276840][T30539] chnl_net:caif_netlink_parms(): no params data found
[  704.484694][T23596] Bluetooth: hci4: command tx timeout
[  704.531056][T30539] bridge0: port 1(bridge_slave_0) entered blocking state
[  704.539036][T30539] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.546588][T30539] bridge_slave_0: entered allmulticast mode
[  704.555113][T30539] bridge_slave_0: entered promiscuous mode
[  704.595914][T30614] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7123'.
[  704.621777][T30614] netlink: 124 bytes leftover after parsing attributes in process `syz.4.7123'.
[  704.635385][T30539] bridge0: port 2(bridge_slave_1) entered blocking state
[  704.642893][T30539] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.664293][T30539] bridge_slave_1: entered allmulticast mode
[  704.672681][T30539] bridge_slave_1: entered promiscuous mode
[  704.753946][T30617] netlink: 112 bytes leftover after parsing attributes in process `syz.5.7124'.
[  704.792444][T30539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  704.836148][T30539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  704.984739][T30539] team0: Port device team_slave_0 added
[  705.009487][T30539] team0: Port device team_slave_1 added
[  705.165228][T30539] batman_adv: batadv0: Adding interface: batadv_slave_0
[  705.184327][T30539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  705.240349][T30539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  705.269013][T30539] batman_adv: batadv0: Adding interface: batadv_slave_1
[  705.293552][T30539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  705.303752][T30640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7132'.
[  705.331866][T30539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  705.348176][T30640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7132'.
[  705.570199][T30539] hsr_slave_0: entered promiscuous mode
[  705.585129][T30539] hsr_slave_1: entered promiscuous mode
[  705.598738][T30539] debugfs: 'hsr0' already exists in 'hsr'
[  705.609799][T30539] Cannot create hsr debugfs directory
[  706.032525][T30668] validate_nla: 39 callbacks suppressed
[  706.032545][T30668] netlink: 'syz.2.7142': attribute type 1 has an invalid length.
[  706.118640][T30668] 8021q: adding VLAN 0 to HW filter on device bond3
[  706.173766][T30670] 8021q: adding VLAN 0 to HW filter on device bond3
[  706.181901][T30670] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address
[  706.194347][T30670] bond3: (slave vxcan5): Error -95 calling set_mac_address
[  706.304830][T30668] veth3: entered promiscuous mode
[  706.314083][T30668] bond3: (slave veth3): Enslaving as an active interface with a down link
[  706.327667][T30674] 8021q: adding VLAN 0 to HW filter on device bond3
[  706.501337][T30675] pim6reg1: entered promiscuous mode
[  706.510730][T30675] pim6reg1: entered allmulticast mode
[  706.564716][T23596] Bluetooth: hci4: command tx timeout
[  706.748060][T30539] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  706.808667][T30539] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  706.839003][T30539] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  706.887306][T30539] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  707.223720][T30539] 8021q: adding VLAN 0 to HW filter on device bond0
[  707.258018][T30539] 8021q: adding VLAN 0 to HW filter on device team0
[  707.322260][T25820] bridge0: port 1(bridge_slave_0) entered blocking state
[  707.329507][T25820] bridge0: port 1(bridge_slave_0) entered forwarding state
[  707.381443][T25820] bridge0: port 2(bridge_slave_1) entered blocking state
[  707.388687][T25820] bridge0: port 2(bridge_slave_1) entered forwarding state
[  707.898835][T30728] sock: sock_timestamping_bind_phc: sock not bind to device
[  707.972789][T30539] 8021q: adding VLAN 0 to HW filter on device batadv0
[  708.185532][T30740] __nla_validate_parse: 3 callbacks suppressed
[  708.185553][T30740] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7162'.
[  708.224392][T30740] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7162'.
[  708.252018][T30740] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7162'.
[  708.261697][T30740] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7162'.
[  708.449174][T30750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7165'.
[  708.579564][T30756] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7167'.
[  708.644999][T23596] Bluetooth: hci4: command tx timeout
[  708.661923][T30539] veth0_vlan: entered promiscuous mode
[  708.695411][T30539] veth1_vlan: entered promiscuous mode
[  708.740452][T30539] veth0_macvtap: entered promiscuous mode
[  708.749754][T30764] netlink: 'syz.2.7168': attribute type 15 has an invalid length.
[  708.751557][T30539] veth1_macvtap: entered promiscuous mode
[  708.781119][T30539] batman_adv: batadv0: Interface activated: batadv_slave_0
[  708.800067][T30539] batman_adv: batadv0: Interface activated: batadv_slave_1
[  708.809416][T30766] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7169'.
[  708.823011][T30764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7168'.
[  708.895946][T25820] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  708.919546][T25820] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  708.956177][T25820] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  709.061621][T25820] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  709.071534][T30772] x_tables: duplicate entry at hook 1
[  709.235272][T25813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.243158][T25813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.372298][T25816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.389981][T25816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.426847][T30785] netlink: 'syz.2.7175': attribute type 4 has an invalid length.
[  709.464090][T30787] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7178'.
[  709.478166][T30789] netlink: 'syz.2.7175': attribute type 4 has an invalid length.
[  710.347332][T30814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7185'.
[  710.724824][T23596] Bluetooth: hci4: command tx timeout
[  710.882239][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  710.904619][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  710.914117][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  710.924178][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  710.932114][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  711.425542][T30819] lo speed is unknown, defaulting to 1000
[  711.585837][T30872] lo: entered promiscuous mode
[  711.596913][T30872] netlink: 'syz.4.7198': attribute type 2 has an invalid length.
[  711.617403][T30872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  711.984786][T30889] pimreg: left allmulticast mode
[  712.171962][T30819] lo speed is unknown, defaulting to 1000
[  712.172232][T30843] lo speed is unknown, defaulting to 1000
[  712.362829][T30886] netlink: 'syz.4.7202': attribute type 1 has an invalid length.
[  712.511176][T30906] netlink: 'syz.2.7208': attribute type 29 has an invalid length.
[  712.633579][   T24] IPVS: starting estimator thread 0...
[  712.656588][T30910] syzkaller0: entered promiscuous mode
[  712.677869][T30910] syzkaller0: entered allmulticast mode
[  712.724784][T30912] IPVS: using max 28 ests per chain, 67200 per kthread
[  712.911787][T30843] lo speed is unknown, defaulting to 1000
[  713.046872][T23596] Bluetooth: hci3: command tx timeout
[  713.209915][T30927] netlink: 'syz.1.7212': attribute type 3 has an invalid length.
[  713.230697][T30927] netlink: 'syz.1.7212': attribute type 3 has an invalid length.
[  713.245352][T30930] __nla_validate_parse: 7 callbacks suppressed
[  713.245374][T30930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7213'.
[  713.251759][T30927] netlink: 'syz.1.7212': attribute type 3 has an invalid length.
[  713.290004][T30927] netlink: 'syz.1.7212': attribute type 3 has an invalid length.
[  713.304630][T30927] netlink: 'syz.1.7212': attribute type 3 has an invalid length.
[  713.323874][T30933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7214'.
[  713.348330][T30927] netlink: 'syz.1.7212': attribute type 3 has an invalid length.
[  713.379533][T30934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7214'.
[  713.405174][T30927] netlink: 'syz.1.7212': attribute type 3 has an invalid length.
[  713.597882][T30941] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  713.786825][T30955] ip6t_REJECT: ECHOREPLY is not supported
[  713.892507][T30953] syz_tun: entered allmulticast mode
[  714.060792][T30951] syz_tun: left allmulticast mode
[  714.196305][T30971] sctp: [Deprecated]: syz.2.7222 (pid 30971) Use of int in max_burst socket option.
[  714.196305][T30971] Use struct sctp_assoc_value instead
[  714.345747][T30977] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 1, id = 0
[  714.701582][T30980] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7225'.
[  714.738709][T30980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7225'.
[  714.771928][T30989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7225'.
[  714.775015][T30980] netlink: 31 bytes leftover after parsing attributes in process `syz.1.7225'.
[  714.790810][T30843] chnl_net:caif_netlink_parms(): no params data found
[  714.820875][T30980] netlink: 31 bytes leftover after parsing attributes in process `syz.1.7225'.
[  714.921956][T30994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7227'.
[  714.953169][T30995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7227'.
[  715.124938][T23596] Bluetooth: hci3: command tx timeout
[  715.230565][T30843] bridge0: port 1(bridge_slave_0) entered blocking state
[  715.238464][T30843] bridge0: port 1(bridge_slave_0) entered disabled state
[  715.253351][T30843] bridge_slave_0: entered allmulticast mode
[  715.298610][T30843] bridge_slave_0: entered promiscuous mode
[  715.360024][T30843] bridge0: port 2(bridge_slave_1) entered blocking state
[  715.368498][T30843] bridge0: port 2(bridge_slave_1) entered disabled state
[  715.388804][T30843] bridge_slave_1: entered allmulticast mode
[  715.408256][T30843] bridge_slave_1: entered promiscuous mode
[  715.676040][T30843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  715.737651][T30843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  716.021096][T30843] team0: Port device team_slave_0 added
[  716.180651][T30843] team0: Port device team_slave_1 added
[  716.370092][T30843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  716.387416][T30843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  716.446037][T30843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  716.505210][T30843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  716.512718][T30843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  716.614327][T30843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  716.821167][T30843] hsr_slave_0: entered promiscuous mode
[  716.846455][T30843] hsr_slave_1: entered promiscuous mode
[  716.857113][T30843] debugfs: 'hsr0' already exists in 'hsr'
[  716.862917][T30843] Cannot create hsr debugfs directory
[  717.206163][T23596] Bluetooth: hci3: command tx timeout
[  717.448170][T30843] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  717.469173][T30843] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.489510][T30843] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  717.588736][T30843] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  717.610540][T30843] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.623499][T30843] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  717.643194][T31100] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  717.719607][T30843] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  717.730947][T30843] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.744346][T30843] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  717.750707][T31105] validate_nla: 47 callbacks suppressed
[  717.750732][T31105] netlink: 'syz.6.7261': attribute type 1 has an invalid length.
[  717.816112][T31105] veth3: entered promiscuous mode
[  717.886023][T31106] veth3: entered promiscuous mode
[  717.915314][T30843] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  717.927952][T30843] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.948535][T30843] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  718.036717][T31108] xt_SECMARK: invalid mode: 9
[  718.330631][T31131] __nla_validate_parse: 7 callbacks suppressed
[  718.330653][T31131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7267'.
[  718.360971][T30843] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  718.372981][T30843] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  718.403364][T30843] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  718.452537][T30843] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  718.543146][T31148] netlink: 'syz.4.7272': attribute type 1 has an invalid length.
[  718.554649][T31149] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7270'.
[  718.810842][T31164] netlink: 7840 bytes leftover after parsing attributes in process `syz.4.7276'.
[  718.868643][T31170] IPVS: length: 183 != 24
[  718.902960][T30843] 8021q: adding VLAN 0 to HW filter on device bond0
[  718.927565][T31164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7276'.
[  719.028556][T31179] netlink: 'syz.2.7280': attribute type 1 has an invalid length.
[  719.101472][T31179] 8021q: adding VLAN 0 to HW filter on device bond4
[  719.176331][T31178] 8021q: adding VLAN 0 to HW filter on device bond4
[  719.183765][T31178] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address
[  719.195977][T31178] bond4: (slave vxcan5): Error -95 calling set_mac_address
[  719.252056][T31179] vlan0: entered allmulticast mode
[  719.257524][T31179] team0: entered allmulticast mode
[  719.263054][T31179] team_slave_0: entered allmulticast mode
[  719.274890][T31179] team_slave_1: entered allmulticast mode
[  719.281787][T31179] team_slave_0: entered promiscuous mode
[  719.287843][T31179] team_slave_1: entered promiscuous mode
[  719.293802][T23596] Bluetooth: hci3: command tx timeout
[  719.295924][T31179] team_slave_0: left promiscuous mode
[  719.304729][T31179] team_slave_1: left promiscuous mode
[  719.313316][T31179] bond4: (slave vlan0): making interface the new active one
[  719.321447][T31179] team_slave_0: entered promiscuous mode
[  719.327223][T31179] team_slave_1: entered promiscuous mode
[  719.339748][T31179] bond4: (slave vlan0): Enslaving as an active interface with an up link
[  719.362836][T30843] 8021q: adding VLAN 0 to HW filter on device team0
[  719.392366][T25820] bridge0: port 1(bridge_slave_0) entered blocking state
[  719.399764][T25820] bridge0: port 1(bridge_slave_0) entered forwarding state
[  719.513091][T25820] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.520425][T25820] bridge0: port 2(bridge_slave_1) entered forwarding state
[  721.368914][T23596] Bluetooth: hci3: command tx timeout
[  721.429232][T31221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  721.806367][T31234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7296'.
[  721.875178][T30843] 8021q: adding VLAN 0 to HW filter on device batadv0
[  722.145243][   T30] audit: type=1800 audit(1762504468.803:9): pid=31258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7302" name="memory.events" dev="tmpfs" ino=1201 res=0 errno=0
[  722.224615][T31266] IPv6: addrconf: prefix option has invalid lifetime
[  722.278799][T31269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7305'.
[  722.298070][T31266] macsec1: entered promiscuous mode
[  722.472468][T31273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7305'.
[  722.676672][T31280] bond3: option all_slaves_active: invalid value (222)
[  722.692678][T31280] bond3 (unregistering): Released all slaves
[  722.858650][T31297] netlink: 'syz.4.7313': attribute type 1 has an invalid length.
[  722.871898][T30843] veth0_vlan: entered promiscuous mode
[  722.939839][T31297] 8021q: adding VLAN 0 to HW filter on device bond3
[  723.036741][T31303] veth3: entered promiscuous mode
[  723.078416][T31303] bond3: (slave veth3): Enslaving as an active interface with a down link
[  723.131777][T31297] veth5: entered promiscuous mode
[  723.165772][T31297] bond3: (slave veth5): Enslaving as an active interface with a down link
[  723.181675][T31314] bond3: entered allmulticast mode
[  723.193712][T30843] veth1_vlan: entered promiscuous mode
[  723.346119][T30843] veth0_macvtap: entered promiscuous mode
[  723.383178][T30843] veth1_macvtap: entered promiscuous mode
[  723.405045][T31327] ipt_ECN: cannot use operation on non-tcp rule
[  723.456397][T30843] batman_adv: batadv0: Interface activated: batadv_slave_0
[  723.477144][T31336] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7320'.
[  723.498438][T30843] batman_adv: batadv0: Interface activated: batadv_slave_1
[  723.552615][T25810] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  723.573739][T25810] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  723.615168][T25810] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  723.616139][T31327] netlink: 'syz.6.7320': attribute type 13 has an invalid length.
[  723.759091][T25810] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  724.063448][T25820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  724.082997][T25820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  724.083086][T31354] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7325'.
[  724.133061][T31354] openvswitch: netlink: Flow key attr not present in new flow.
[  724.178963][T25815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  724.209335][T25815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  724.251519][T31359] netlink: 'syz.1.7327': attribute type 1 has an invalid length.
[  724.289683][T31357] netlink: 'syz.1.7327': attribute type 1 has an invalid length.
[  724.302983][T31366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7329'.
[  724.337089][T31361] openvswitch: netlink: Duplicate or invalid key (type 0).
[  724.345282][T31366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7329'.
[  724.374999][T31366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7329'.
[  724.389736][T31361] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  724.420442][T31366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7329'.
[  724.447883][T31359] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  724.605517][T31359] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  724.703799][T31381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7332'.
[  724.727280][T31388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7335'.
[  724.785875][T31388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7335'.
[  724.826640][T31359] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  724.988684][T31359] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  725.102187][T31404] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.7340'.
[  725.194521][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  725.235888][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  725.336408][T25810] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  725.392577][T25820] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  725.420213][T31425] block nbd6: Unsupported socket: should be TCP or UNIX.
[  725.458974][T31426] block nbd6: Unsupported socket: should be TCP or UNIX.
[  725.603901][T31428] bridge0: port 2(bridge_slave_1) entered disabled state
[  725.792921][T31440] sctp: [Deprecated]: syz.2.7350 (pid 31440) Use of int in maxseg socket option.
[  725.792921][T31440] Use struct sctp_assoc_value instead
[  726.099864][T31473] nftables ruleset with unbound chain
[  726.461266][T31466] team0 (unregistering): Port device team_slave_0 removed
[  726.502451][T31466] team0 (unregistering): Port device team_slave_1 removed
[  726.780349][T31502] openvswitch: netlink: Message has 8 unknown bytes.
[  726.801651][T31488] syzkaller1: entered promiscuous mode
[  726.817818][T31488] syzkaller1: entered allmulticast mode
[  726.831308][T31502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  726.872114][T31502] openvswitch: netlink: Message has 8 unknown bytes.
[  726.907986][T31502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  726.995371][   T24] IPVS: starting estimator thread 0...
[  727.104889][T31512] IPVS: using max 24 ests per chain, 57600 per kthread
[  727.241295][T31523] openvswitch: netlink: Unknown key attributes 2
[  727.303991][T31528] xt_ecn: cannot match TCP bits for non-tcp packets
[  728.064925][T31565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  728.808756][T31592] veth5: entered allmulticast mode
[  728.825228][T31602] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  728.864328][T31602] bridge0: port 1(bridge_slave_0) entered disabled state
[  729.076345][T31619] syzkaller0: entered promiscuous mode
[  729.081888][T31619] syzkaller0: entered allmulticast mode
[  729.130183][T31624] __nla_validate_parse: 7 callbacks suppressed
[  729.130207][T31624] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.7404'.
[  729.157777][T31624] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  729.251076][T31624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7404'.
[  729.274691][T31624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7404'.
[  729.294501][T31624] netlink: 'syz.1.7404': attribute type 15 has an invalid length.
[  729.540786][T31650] ip6t_srh: unknown srh invflags 4000
[  729.549965][T31647] netlink: 'syz.1.7413': attribute type 1 has an invalid length.
[  729.624721][T31647] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  729.802059][T31669] netlink: 'syz.6.7416': attribute type 10 has an invalid length.
[  729.806719][T31662] bond1: (slave bond_slave_1): Device is not our slave
[  729.826168][T31662] bond1: option active_slave: invalid value (bond_slave_1)
[  729.836238][T31668] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  729.887911][T31662] bond1 (unregistering): Released all slaves
[  730.137172][T31683] netlink: 'syz.5.7420': attribute type 10 has an invalid length.
[  730.171473][T31683] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  730.651517][T31717] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7429'.
[  730.686445][T31717] bond1: (slave gre0): Device is not bonding slave
[  730.693031][T31717] bond1: option active_slave: invalid value (gre0)
[  730.701918][T31717] bond1 (unregistering): Released all slaves
[  731.075141][T31735] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7436'.
[  731.116881][T31735] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7436'.
[  731.166420][T31735] netlink: 124 bytes leftover after parsing attributes in process `syz.1.7436'.
[  731.187000][T31742] netlink: 124 bytes leftover after parsing attributes in process `syz.1.7436'.
[  731.198874][T31741] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7436'.
[  731.274057][T31744] x_tables: duplicate underflow at hook 1
[  731.782720][T31785] dvmrp0: entered allmulticast mode
[  731.796698][T31785] dvmrp0: left allmulticast mode
[  731.801998][T31785] syz_tun: left allmulticast mode
[  732.039471][T31795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7453'.
[  732.159274][T31804] lo: Caught tx_queue_len zero misconfig
[  732.177094][T31804] netem: change failed
[  732.453461][T31819] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  732.531721][T31830] openvswitch: netlink: IP tunnel dst address not specified
[  732.907645][T31854] syzkaller1: entered promiscuous mode
[  732.940247][T31854] syzkaller1: entered allmulticast mode
[  733.229598][T31869] IPv6: sit2: Disabled Multicast RS
[  733.240809][T31869] sit2: entered allmulticast mode
[  733.323895][T31871] syzkaller1: entered promiscuous mode
[  733.335955][T31873] netlink: 'syz.1.7477': attribute type 1 has an invalid length.
[  733.339890][T31871] syzkaller1: entered allmulticast mode
[  733.419614][T31875] veth0_macvtap: left promiscuous mode
[  733.548855][T31882] netlink: 'syz.2.7480': attribute type 1 has an invalid length.
[  733.661207][T31892] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  733.702414][T31882] 8021q: adding VLAN 0 to HW filter on device bond5
[  734.150175][T31919] netlink: 'syz.2.7491': attribute type 2 has an invalid length.
[  734.185616][T31912] __nla_validate_parse: 6 callbacks suppressed
[  734.185637][T31912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7488'.
[  734.265838][T31932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7491'.
[  734.309314][T31934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7494'.
[  734.312497][T31912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7488'.
[  734.457216][T31944] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7496'.
[  734.468269][T31940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  734.474643][T31944] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7496'.
[  734.493601][T31944] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7496'.
[  734.713807][T31949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7498'.
[  734.729935][T31953] netlink: 'syz.1.7501': attribute type 3 has an invalid length.
[  734.739957][T31955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7499'.
[  734.816893][T31949] hsr_slave_1 (unregistering): left promiscuous mode
[  734.828071][T31958] netlink: 'syz.1.7501': attribute type 3 has an invalid length.
[  734.933346][T31968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7503'.
[  734.943679][T31968] netlink: 'syz.1.7503': attribute type 8 has an invalid length.
[  735.083505][T31972] hsr_slave_0 (unregistering): left promiscuous mode
[  735.195902][T31983] syzkaller1: entered promiscuous mode
[  735.209709][T31983] syzkaller1: entered allmulticast mode
[  735.454483][T32001] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  735.469541][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  736.346941][T32035] delete_channel: no stack
[  737.075143][T32070] syz_tun: entered allmulticast mode
[  737.097844][T32069] syz_tun: left allmulticast mode
[  737.568085][T32098] netlink: 'syz.4.7541': attribute type 1 has an invalid length.
[  737.588393][T32098] netlink: 'syz.4.7541': attribute type 4 has an invalid length.
[  737.818333][T32124] netlink: 'syz.1.7548': attribute type 1 has an invalid length.
[  737.841523][T32124] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  738.055056][T32142] ip6t_rpfilter: unknown options
[  738.491794][T32165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  738.556923][T32173] lo: entered promiscuous mode
[  738.574132][T32173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  739.145490][T32202] netlink: 'syz.4.7570': attribute type 1 has an invalid length.
[  739.160021][T32202] netlink: 'syz.4.7570': attribute type 2 has an invalid length.
[  739.557566][T32225] __nla_validate_parse: 10 callbacks suppressed
[  739.557587][T32225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7575'.
[  739.601785][T32228] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7576'.
[  739.618792][T32228] block nbd0: Unsupported socket: should be TCP or UNIX.
[  740.163776][T32252] bridge5: entered promiscuous mode
[  740.187312][T32252] bridge5: entered allmulticast mode
[  740.202692][T32260] netlink: 'syz.5.7586': attribute type 1 has an invalid length.
[  740.293810][T32269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7589'.
[  740.303817][T32268] x_tables: duplicate underflow at hook 4
[  740.307920][T32269] openvswitch: netlink: Flow actions attr not present in new flow.
[  740.323086][T32260] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  740.362424][T32268] 8021q: adding VLAN 0 to HW filter on device bond4
[  740.381532][T32268] bond0: (slave bond4): Enslaving as an active interface with a down link
[  740.440968][T32275] netlink: 'syz.5.7590': attribute type 27 has an invalid length.
[  740.497576][T32280] netlink: 'syz.5.7590': attribute type 27 has an invalid length.
[  740.666593][T32294] netlink: 'syz.4.7593': attribute type 1 has an invalid length.
[  742.395525][T32303] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7597'.
[  742.633183][T32322] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7602'.
[  743.397697][T32320] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  743.483675][T32361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7612'.
[  743.497001][T32363] netlink: 'syz.1.7613': attribute type 1 has an invalid length.
[  743.508286][T32363] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7613'.
[  743.522711][T32365] netlink: 'syz.6.7614': attribute type 1 has an invalid length.
[  743.649802][T32367] bond1: (slave geneve2): making interface the new active one
[  743.659065][T32367] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  743.661156][T32372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7617'.
[  743.687214][T25820] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  743.697218][T32369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7615'.
[  743.714768][T25820] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  743.724730][T25820] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  743.733591][T25820] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  743.821171][T32375] bond6: entered promiscuous mode
[  743.826457][T32375] bond6: entered allmulticast mode
[  743.832783][T32375] 8021q: adding VLAN 0 to HW filter on device bond6
[  743.869928][T32369] syzkaller0: entered promiscuous mode
[  743.892178][T32369] syzkaller0: entered allmulticast mode
[  744.129708][T32396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7623'.
[  744.250322][T32399] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  744.280006][T32399] syzkaller0: entered promiscuous mode
[  744.288137][T32399] syzkaller0: entered allmulticast mode
[  744.319101][T32398] tipc: Resetting bearer <eth:syzkaller0>
[  744.373149][T32398] tipc: Disabling bearer <eth:syzkaller0>
[  744.493125][T32412] bond2: Removing last ns target with arp_interval on
[  744.657650][T25810] tipc: Subscription rejected, illegal request
[  744.682733][T32425] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  745.270089][T32470] netlink: 'syz.1.7641': attribute type 33 has an invalid length.
[  745.293823][T32470] __nla_validate_parse: 1 callbacks suppressed
[  745.293843][T32470] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7641'.
[  745.537663][T32482] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7645'.
[  745.598133][T32488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7648'.
[  745.668445][T32488] pim6reg527: entered allmulticast mode
[  745.689929][T32485] syzkaller0: entered promiscuous mode
[  745.724692][T32485] syzkaller0: entered allmulticast mode
[  745.753613][T32451] lo speed is unknown, defaulting to 1000
[  745.921948][T32507] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7653'.
[  746.105768][T32515] bridge7: entered promiscuous mode
[  746.112230][T32515] bridge7: entered allmulticast mode
[  746.124963][T32513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7657'.
[  746.249718][T32451] lo speed is unknown, defaulting to 1000
[  746.551737][T32536] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  746.660176][T32540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7666'.
[  746.701037][T32542] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7667'.
[  746.724134][T32542] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7667'.
[  746.768500][T32544] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  747.108953][T32563] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  747.476410][T32556] lo speed is unknown, defaulting to 1000
[  747.592300][T32576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7675'.
[  747.597513][T32580] netlink: 2 bytes leftover after parsing attributes in process `syz.6.7677'.
[  747.762389][T32584] Bluetooth: MGMT ver 1.23
[  748.201043][T32589] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  748.219029][T32589] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  748.252025][T25820] wlan1: Trigger new scan to find an IBSS to join
[  748.541929][T32556] lo speed is unknown, defaulting to 1000
[  748.542114][T25817] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  748.559979][T25817] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  748.572443][T25817] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  748.590948][T25817] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  748.607700][T25817] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  748.624462][T25817] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  748.643006][T25817] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  748.652715][T25817] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  748.839951][T32626] sctp: [Deprecated]: syz.5.7689 (pid 32626) Use of int in max_burst socket option deprecated.
[  748.839951][T32626] Use struct sctp_assoc_value instead
[  748.940550][T32623] netlink: 'syz.1.7687': attribute type 3 has an invalid length.
[  749.146059][T32641] wg1 speed is unknown, defaulting to 1000
[  749.166890][T32641] wg1 speed is unknown, defaulting to 1000
[  749.273556][T32641] wg1 speed is unknown, defaulting to 1000
[  749.330856][T32641] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  749.401650][T32641] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  749.496106][T32641] wg1 speed is unknown, defaulting to 1000
[  749.522206][T32641] wg1 speed is unknown, defaulting to 1000
[  749.548357][T32641] wg1 speed is unknown, defaulting to 1000
[  749.570835][T32641] wg1 speed is unknown, defaulting to 1000
[  749.598780][T32641] wg1 speed is unknown, defaulting to 1000
[  749.610897][T32641] wg1 speed is unknown, defaulting to 1000
[  749.622811][T32641] wg1 speed is unknown, defaulting to 1000
[  749.631838][T32641] wg1 speed is unknown, defaulting to 1000
[  749.644049][T32641] wg1 speed is unknown, defaulting to 1000
[  749.657114][T32641] wg1 speed is unknown, defaulting to 1000
[  749.666630][T32641] wg1 speed is unknown, defaulting to 1000
[  749.689846][T32641] wg1 speed is unknown, defaulting to 1000
[  749.720378][T32641] wg1 speed is unknown, defaulting to 1000
[  749.787491][T32657] xt_l2tp: missing protocol rule (udp|l2tpip)
[  749.974715][T32664] netlink: 'syz.2.7700': attribute type 3 has an invalid length.
[  750.182560][T32670] netlink: 'syz.2.7705': attribute type 2 has an invalid length.
[  750.233321][T32673] netlink: 'syz.5.7706': attribute type 1 has an invalid length.
[  750.327185][T32673] 8021q: adding VLAN 0 to HW filter on device bond1
[  750.402156][T32680] vlan0: entered promiscuous mode
[  750.423554][T32680] bond1: entered promiscuous mode
[  750.440138][T32680] vlan0: entered allmulticast mode
[  750.464595][T32680] bond1: entered allmulticast mode
[  750.581327][T32673] bond1: (slave gretap1): making interface the new active one
[  750.607724][T32673] gretap1: entered promiscuous mode
[  750.623388][T32673] gretap1: entered allmulticast mode
[  750.679343][T32673] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  750.845626][T32698] __nla_validate_parse: 7 callbacks suppressed
[  750.845647][T32698] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7711'.
[  751.090639][T32711] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7714'.
[  751.121134][T32710] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  751.138629][T32706] syzkaller0: entered promiscuous mode
[  751.164412][T32706] syzkaller0: entered allmulticast mode
[  751.204664][T25817] wlan1: Trigger new scan to find an IBSS to join
[  751.408011][T32726] Bluetooth: MGMT ver 1.23
[  751.499854][T32729] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7718'.
[  751.561837][T32730] netlink: 'syz.6.7718': attribute type 21 has an invalid length.
[  753.058331][T32732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7721'.
[  753.102203][T32736] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7723'.
[  753.105261][T32732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7721'.
[  753.134813][T32739] xt_hashlimit: size too large, truncated to 1048576
[  753.159872][T32739] syz.6.7723: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  753.205958][T32739] CPU: 1 UID: 0 PID: 32739 Comm: syz.6.7723 Not tainted syzkaller #0 PREEMPT(full) 
[  753.205989][T32739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  753.206002][T32739] Call Trace:
[  753.206010][T32739]  <TASK>
[  753.206020][T32739]  dump_stack_lvl+0x189/0x250
[  753.206055][T32739]  ? __pfx_dump_stack_lvl+0x10/0x10
[  753.206084][T32739]  ? __pfx__printk+0x10/0x10
[  753.206105][T32739]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  753.206133][T32739]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  753.206163][T32739]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  753.206194][T32739]  warn_alloc+0x214/0x310
[  753.206231][T32739]  ? __pfx_warn_alloc+0x10/0x10
[  753.206272][T32739]  ? __get_vm_area_node+0x28f/0x300
[  753.206303][T32739]  ? htable_create+0x101/0x7a0
[  753.206333][T32739]  __vmalloc_node_range_noprof+0x690/0x12d0
[  753.206391][T32739]  ? alloc_pages_mpol+0x3cd/0x4a0
[  753.206414][T32739]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  753.206469][T32739]  ? rcu_is_watching+0x15/0xb0
[  753.206493][T32739]  ? htable_create+0x101/0x7a0
[  753.206520][T32739]  __kvmalloc_node_noprof+0x674/0x910
[  753.206552][T32739]  ? htable_create+0x101/0x7a0
[  753.206576][T32739]  ? hashlimit_pernet+0x23/0x240
[  753.206619][T32739]  ? hashlimit_pernet+0x23/0x240
[  753.206643][T32739]  ? hashlimit_pernet+0x23/0x240
[  753.206691][T32739]  htable_create+0x101/0x7a0
[  753.206726][T32739]  hashlimit_mt_check_common+0x719/0xa10
[  753.206764][T32739]  xt_check_match+0x3d1/0xab0
[  753.206796][T32739]  ? __pfx_xt_check_match+0x10/0x10
[  753.206824][T32739]  ? pcpu_alloc_noprof+0xfdd/0x1720
[  753.206881][T32739]  ? xt_find_match+0x1f7/0x250
[  753.206914][T32739]  translate_table+0x1553/0x2040
[  753.206970][T32739]  ? __pfx_translate_table+0x10/0x10
[  753.207003][T32739]  ? __might_fault+0xb0/0x130
[  753.207054][T32739]  ? _copy_from_user+0x94/0xb0
[  753.207087][T32739]  do_ip6t_set_ctl+0x970/0xce0
[  753.207122][T32739]  ? rcu_is_watching+0x15/0xb0
[  753.207146][T32739]  ? trace_contention_end+0x39/0x120
[  753.207171][T32739]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  753.207228][T32739]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  753.207264][T32739]  ? __pfx_css_rstat_updated+0x10/0x10
[  753.207294][T32739]  ? __lock_acquire+0xab9/0xd20
[  753.207320][T32739]  nf_setsockopt+0x26f/0x290
[  753.207359][T32739]  rawv6_setsockopt+0x23b/0x5b0
[  753.207384][T32739]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  753.207405][T32739]  ? aa_sock_opt_perm+0xff/0x1b0
[  753.207437][T32739]  ? sock_common_setsockopt+0x36/0xc0
[  753.207467][T32739]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  753.207498][T32739]  do_sock_setsockopt+0x17c/0x1b0
[  753.207524][T32739]  __x64_sys_setsockopt+0x13f/0x1b0
[  753.207552][T32739]  do_syscall_64+0xfa/0xfa0
[  753.207580][T32739]  ? lockdep_hardirqs_on+0x9c/0x150
[  753.207618][T32739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.207638][T32739]  ? clear_bhb_loop+0x60/0xb0
[  753.207662][T32739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.207681][T32739] RIP: 0033:0x7f807d18f6c9
[  753.207699][T32739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  753.207716][T32739] RSP: 002b:00007f807b3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  753.207738][T32739] RAX: ffffffffffffffda RBX: 00007f807d3e6180 RCX: 00007f807d18f6c9
[  753.207753][T32739] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007
[  753.207765][T32739] RBP: 00007f807d211f91 R08: 0000000000000588 R09: 0000000000000000
[  753.207778][T32739] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000
[  753.207791][T32739] R13: 00007f807d3e6218 R14: 00007f807d3e6180 R15: 00007ffcf2c00bf8
[  753.207827][T32739]  </TASK>
[  753.207836][T32739] Mem-Info:
[  753.246567][T32749] netlink: 'syz.4.7726': attribute type 1 has an invalid length.
[  753.309917][T32752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7724'.
[  753.310857][T32739] active_anon:4745 inactive_anon:0 isolated_anon:0
[  753.310857][T32739]  active_file:3400 inactive_file:40151 isolated_file:0
[  753.310857][T32739]  unevictable:768 dirty:68 writeback:0
[  753.310857][T32739]  slab_reclaimable:14294 slab_unreclaimable:219523
[  753.310857][T32739]  mapped:29264 shmem:1411 pagetables:1391
[  753.310857][T32739]  sec_pagetables:0 bounce:0
[  753.310857][T32739]  kernel_misc_reclaimable:0
[  753.310857][T32739]  free:1196902 free_pcp:14016 free_cma:0
[  753.350205][T32753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7726'.
[  753.353977][T32739] Node 0 active_anon:18996kB inactive_anon:0kB active_file:13600kB inactive_file:160416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117132kB dirty:288kB writeback:0kB shmem:4112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18944kB pagetables:5388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  753.692785][T32739] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  753.730761][T32739] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  753.767639][T32739] lowmem_reserve[]: 0 2505 2505 2505 2505
[  753.773587][T32739] Node 0 DMA32 free:878724kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18996kB inactive_anon:0kB active_file:13600kB inactive_file:160416kB unevictable:1536kB writepending:288kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:37400kB local_pcp:20744kB free_cma:0kB
[  753.793268][T32749] 8021q: adding VLAN 0 to HW filter on device bond5
[  753.811813][T32739] lowmem_reserve[]: 0 0 0 0 0
[  753.822644][T32739] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  753.868277][T32739] lowmem_reserve[]: 0 0 0 0 0
[  753.873079][T32739] Node 1 Normal free:3893588kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18156kB local_pcp:6624kB free_cma:0kB
[  753.987539][T32739] lowmem_reserve[]: 0 0 0 0 0
[  753.992395][T32739] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  753.996930][T32765] IPv4: Oversized IP packet from 127.202.26.0
[  754.044750][T32739] Node 0 DMA32: 1865*4kB (UME) 2720*8kB (UM) 1312*16kB (UME) 1391*32kB (UME) 853*64kB (UM) 586*128kB (UM) 411*256kB (UM) 246*512kB (UM) 88*1024kB (UME) 3*2048kB (UE) 80*4096kB (M) = 879428kB
[  754.100342][T32739] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  754.112572][T32739] Node 1 Normal: 235*4kB (UE) 47*8kB (UME) 53*16kB (UME) 131*32kB (UME) 30*64kB (UME) 8*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3893588kB
[  754.132233][T32739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  754.150228][T32739] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  754.163231][T32739] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  754.174693][T32739] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  754.219992][T32739] 45137 total pagecache pages
[  754.234353][T32739] 0 pages in swap cache
[  754.238761][T32739] Free swap  = 124996kB
[  754.242954][T32739] Total swap = 124996kB
[  754.248832][T25810] wlan1: Trigger new scan to find an IBSS to join
[  754.258615][T32739] 2097051 pages RAM
[  754.262636][T32739] 0 pages HighMem/MovableOnly
[  754.268271][T32739] 424119 pages reserved
[  754.273416][T32739] 0 pages cma reserved
[  754.501810][  T320] netlink: 'syz.2.7732': attribute type 24 has an invalid length.
[  754.517975][  T320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7732'.
[  755.278601][T25810] wlan1: Creating new IBSS network, BSSID 82:ed:6a:25:26:b5
[  755.500772][  T353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7745'.
[  755.581406][  T358] x_tables: unsorted entry at hook 3
[  755.916870][  T378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7755'.
[  755.990427][  T382] syzkaller0: entered promiscuous mode
[  756.013918][  T382] syzkaller0: entered allmulticast mode
[  756.029337][  T387] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7758'.
[  756.369625][  T396] netlink: 'syz.2.7760': attribute type 2 has an invalid length.
[  756.380295][  T396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7760'.
[  756.392311][  T396] netlink: 'syz.2.7760': attribute type 2 has an invalid length.
[  756.400518][  T396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7760'.
[  756.919983][  T416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7764'.
[  757.161742][  T435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7767'.
[  757.171349][  T435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7767'.
[  757.261306][  T438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7768'.
[  757.663574][  T452] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  757.763321][  T459] netlink: 211856 bytes leftover after parsing attributes in process `syz.5.7773'.
[  758.047870][  T469] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7778'.
[  758.289350][  T478] bond5: option mode: invalid value (133)
[  758.298195][  T478] bond5 (unregistering): Released all slaves
[  758.693012][  T502] netlink: 'syz.5.7786': attribute type 19 has an invalid length.
[  758.741600][T25813] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  758.744999][  T502] netlink: 'syz.5.7786': attribute type 19 has an invalid length.
[  758.753175][T25813] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  758.790336][T25813] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  758.815328][T25813] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  759.193081][  T524] x_tables: duplicate underflow at hook 2
[  759.405439][T23596] Bluetooth: hci3: link tx timeout
[  759.412262][T23596] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  759.451819][  T543] lo: entered allmulticast mode
[  759.463818][  T543] lo: left allmulticast mode
[  759.562325][  T549] !��: renamed from bond_slave_0
[  759.722307][  T565] netlink: 'syz.6.7802': attribute type 11 has an invalid length.
[  759.902193][  T573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  759.902759][  T571] openvswitch: netlink: Flow actions attr not present in new flow.
[  759.980606][  T575] netlink: 'syz.2.7807': attribute type 10 has an invalid length.
[  760.000709][  T575] team0: Device veth1_macvtap failed to register rx_handler
[  760.074887][  T577] wg2: entered promiscuous mode
[  760.083371][  T577] wg2: entered allmulticast mode
[  760.175319][  T593] net veth1_virt_wifi .����: renamed from virt_wifi0
[  760.498776][  T623] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  760.512017][  T620] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  760.530141][  T620] bond7 (unregistering): Released all slaves
[  760.831697][  T618] netlink: 'syz.6.7819': attribute type 1 has an invalid length.
[  761.045991][  T651] __nla_validate_parse: 12 callbacks suppressed
[  761.046013][  T651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7825'.
[  761.084086][  T651] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  761.192367][  T664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7829'.
[  761.215103][  T663] netlink: 'syz.2.7830': attribute type 12 has an invalid length.
[  761.292075][  T664] netlink: 212048 bytes leftover after parsing attributes in process `syz.5.7829'.
[  761.308247][  T667] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7831'.
[  761.323423][  T664] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7829'.
[  761.343027][  T660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7829'.
[  761.443379][  T676] x_tables: duplicate underflow at hook 4
[  761.452267][  T547] Bluetooth: hci3: command 0x0406 tx timeout
[  761.527744][T23596] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  761.537946][  T613] Bluetooth: hci0: Opcode 0x080f failed: -4
[  761.631604][  T688] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7840'.
[  761.677123][  T690] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7839'.
[  783.946917][  T712] syzkaller0: entered promiscuous mode
[  783.952579][  T712] syzkaller0: entered allmulticast mode
[  784.049763][  T719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7849'.
[  784.161749][  T730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7852'.
[  784.371004][  T743] netlink: 'syz.1.7853': attribute type 28 has an invalid length.
[  784.409335][  T743] netlink: 'syz.1.7853': attribute type 3 has an invalid length.
[  784.425780][  T743] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7853'.
[  784.436331][  T745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7856'.
[  784.671136][  T767] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20002
[  784.701921][  T777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7858'.
[  784.969487][  T792] netlink: 'syz.5.7864': attribute type 2 has an invalid length.
[  784.990501][  T794] netlink: 'syz.2.7865': attribute type 1 has an invalid length.
[  785.017927][  T792] �9: entered promiscuous mode
[  785.150165][  T798] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address
[  785.162059][  T798] bond7: (slave vxcan5): Error -95 calling set_mac_address
[  785.229313][  T794] bond7: (slave bridge4): Enslaving as an active interface with a down link
[  785.256002][  T802] bond7: (slave gretap1): making interface the new active one
[  785.265381][  T802] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  785.290019][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  785.431649][  T808] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  785.456059][  T812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7869'.
[  785.473509][  T809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  785.547122][  T816] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7874'.
[  785.591336][  T819] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7873'.
[  785.807314][  T830] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  785.834495][  T830] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7878'.
[  785.929442][  T840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7880'.
[  786.340897][  T866] netlink: zone id is out of range
[  786.355018][  T866] netlink: zone id is out of range
[  786.360267][  T866] netlink: zone id is out of range
[  786.374250][  T866] netlink: zone id is out of range
[  786.384702][  T866] netlink: zone id is out of range
[  786.389870][  T866] netlink: zone id is out of range
[  786.410107][  T866] netlink: zone id is out of range
[  786.424644][  T866] netlink: zone id is out of range
[  786.435236][  T866] netlink: zone id is out of range
[  787.321792][  T928] tipc: Started in network mode
[  787.341729][  T928] tipc: Node identity 2a4251a89667, cluster identity 4711
[  787.364141][  T928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  787.395478][  T943] syzkaller0: entered promiscuous mode
[  787.417737][  T943] syzkaller0: entered allmulticast mode
[  787.569225][  T928] tipc: Resetting bearer <eth:syzkaller0>
[  787.602515][  T926] tipc: Resetting bearer <eth:syzkaller0>
[  787.627597][  T926] tipc: Disabling bearer <eth:syzkaller0>
[  787.917293][  T976] ip6tnl0: Caught tx_queue_len zero misconfig
[  788.755646][ T1036] xt_connbytes: Forcing CT accounting to be enabled
[  789.281212][ T1087] __nla_validate_parse: 9 callbacks suppressed
[  789.281235][ T1087] netlink: 116 bytes leftover after parsing attributes in process `syz.6.7944'.
[  789.400841][ T1093] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7947'.
[  789.411868][ T1090] netlink: 'syz.4.7945': attribute type 4 has an invalid length.
[  789.432123][ T1090] netlink: 'syz.4.7945': attribute type 4 has an invalid length.
[  789.475626][ T1098] netlink: 'syz.6.7948': attribute type 1 has an invalid length.
[  789.487327][ T1098] netlink: 14 bytes leftover after parsing attributes in process `syz.6.7948'.
[  789.505284][ T1099] netlink: 220 bytes leftover after parsing attributes in process `syz.5.7946'.
[  789.568092][ T1103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7950'.
[  789.923089][ T1098] bond0 (unregistering): (slave 
1!��): Releasing backup interface
[  789.934802][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  789.945315][ T1098] bond0 (unregistering): Released all slaves
[  790.142865][ T1126] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7955'.
[  790.156544][ T1123] xt_ecn: cannot match TCP bits for non-tcp packets
[  790.164809][ T1126] gre0: entered allmulticast mode
[  790.180074][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7956'.
[  790.231305][ T1136] netlink: 'syz.6.7956': attribute type 83 has an invalid length.
[  790.266534][ T1132] netlink: 'syz.6.7956': attribute type 83 has an invalid length.
[  790.327741][ T1140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7959'.
[  790.503576][ T1152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7964'.
[  790.697593][ T1167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7968'.
[  790.954102][ T1175] tipc: Started in network mode
[  790.968049][T22750] net_ratelimit: 13 callbacks suppressed
[  790.968070][T22750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.985056][ T1175] tipc: Node identity d2d503800e34, cluster identity 4711
[  790.992451][ T1175] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  791.001723][ T1175] syzkaller0: entered promiscuous mode
[  791.007592][ T1175] syzkaller0: entered allmulticast mode
[  791.040996][ T1174] netlink: 'syz.2.7970': attribute type 1 has an invalid length.
[  791.066420][ T1175] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  791.135677][T25813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  791.145860][T22722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  791.156163][T12455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  791.206243][ T1175] tipc: Resetting bearer <eth:syzkaller0>
[  791.223948][ T1172] tipc: Resetting bearer <eth:syzkaller0>
[  791.305397][ T1172] tipc: Disabling bearer <eth:syzkaller0>
[  791.529888][ T1198] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  791.594636][ T1197] tipc: Resetting bearer <eth:syzkaller0>
[  791.785122][T25815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  791.796236][T22750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  791.811143][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  791.822144][T22722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  791.830592][T22722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  791.863142][ T6094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  791.920095][ T1220] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  792.453441][ T1232] netlink: 'syz.5.7985': attribute type 1 has an invalid length.
[  792.462482][ T1232] netlink: 'syz.5.7985': attribute type 2 has an invalid length.
[  792.471430][ T1232] netlink: 'syz.5.7985': attribute type 1 has an invalid length.
[  792.479673][ T1232] netlink: 'syz.5.7985': attribute type 2 has an invalid length.
[  793.627411][ T1197] tipc: Disabling bearer <eth:syzkaller0>
[  793.638358][ T1215] team0: Caught tx_queue_len zero misconfig
[  794.096173][ T1265] gretap0: refused to change device tx_queue_len
[  794.168108][ T1273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  794.186706][ T1269] veth1_macvtap: left promiscuous mode
[  794.192389][ T1269] macsec0: entered promiscuous mode
[  794.371083][ T1269] tipc: Disabling bearer <eth:syzkaller0>
[  794.452239][ T1297] __nla_validate_parse: 14 callbacks suppressed
[  794.452259][ T1297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8000'.
[  794.505706][ T1299] set match dimension is over the limit!
[  794.527398][ T1299] gtp0: entered promiscuous mode
[  794.532599][ T1299] gtp0: entered allmulticast mode
[  794.557033][ T1308] tunl0: entered promiscuous mode
[  794.576156][ T1308] gre0: entered promiscuous mode
[  794.591005][ T1308] gre0: left allmulticast mode
[  794.640588][ T1308] 0��{X��: entered promiscuous mode
[  794.649682][ T1308] 0��{X��: left allmulticast mode
[  794.681446][ T1308] ip_vti0: entered promiscuous mode
[  794.764852][ T1314] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8006'.
[  794.872313][ T1326] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8009'.
[  794.883311][ T1326] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8009'.
[  794.914071][ T1326] netlink: 31 bytes leftover after parsing attributes in process `syz.5.8009'.
[  794.945944][ T1326] validate_nla: 2 callbacks suppressed
[  794.945964][ T1326] netlink: 'syz.5.8009': attribute type 3 has an invalid length.
[  794.989822][ T1326] netlink: 'syz.5.8009': attribute type 2 has an invalid length.
[  795.016954][ T1326] netlink: 31 bytes leftover after parsing attributes in process `syz.5.8009'.
[  795.406029][ T1351] netlink: 'syz.2.8015': attribute type 33 has an invalid length.
[  795.448536][ T1351] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  795.462013][ T1351] bond8 (unregistering): Released all slaves
[  795.489996][ T1357] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  795.984986][ T1389] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8029'.
[  796.007147][T12455] net_ratelimit: 14 callbacks suppressed
[  796.007168][T12455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.118640][ T1401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8029'.
[  796.334465][ T1407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8033'.
[  796.352828][ T1409] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8035'.
[  796.476501][ T1417] netlink: 'syz.4.8038': attribute type 1 has an invalid length.
[  796.538083][ T1417] 8021q: adding VLAN 0 to HW filter on device bond6
[  796.590920][ T1421] 8021q: adding VLAN 0 to HW filter on device bond6
[  796.598937][ T1421] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  796.611074][ T1421] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  796.741122][ T1417] 8021q: adding VLAN 0 to HW filter on device bond6
[  797.005397][ T1436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.014102][ T1436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.022412][ T1436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.030619][ T1436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.038797][ T1436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.047017][ T1436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.055286][ T1436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.063484][ T1436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.071760][ T1436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.521100][ T1447] vlan1: entered promiscuous mode
[  797.531553][ T1447] geneve1: entered promiscuous mode
[  797.539478][ T1447] vlan1: entered allmulticast mode
[  797.545289][ T1447] geneve1: entered allmulticast mode
[  797.628932][ T1454] netlink: 'syz.2.8051': attribute type 4 has an invalid length.
[  798.098529][ T1492] dvmrp0: entered allmulticast mode
[  798.108441][ T1492] ip6t_srh: unknown srh match flags  4000
[  798.268595][ T1505] tipc: Enabled bearer <eth:bridge0>, priority 20
[  798.278367][ T1510] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  798.287572][ T1505] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  798.381668][ T1510] syzkaller0: entered promiscuous mode
[  798.403400][ T1510] syzkaller0: entered allmulticast mode
[  798.442836][ T1510] tipc: Resetting bearer <eth:syzkaller0>
[  798.551438][ T1505] tipc: Resetting bearer <eth:syzkaller0>
[  799.287031][T22722] tipc: Node number set to 3167453398
[  799.558527][ T1551] ip6t_srh: unknown srh match flags  5F28
[  800.474675][ T1505] tipc: Disabling bearer <eth:syzkaller0>
[  800.494826][ T1535] bridge2: entered allmulticast mode
[  800.570136][ T1557] __nla_validate_parse: 7 callbacks suppressed
[  800.570161][ T1557] netlink: 596 bytes leftover after parsing attributes in process `syz.4.8075'.
[  800.738820][ T1565] netlink: 'syz.1.8077': attribute type 12 has an invalid length.
[  800.767760][ T1565] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8077'.
[  800.875557][ T1576] netlink: 'syz.6.8082': attribute type 11 has an invalid length.
[  800.886801][T23596] Bluetooth: hci2: command 0x0406 tx timeout
[  800.975782][ T1584] xt_TPROXY: Can be used only with -p tcp or -p udp
[  800.987446][ T1586] netlink: 23 bytes leftover after parsing attributes in process `syz.1.8083'.
[  801.034511][ T1586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8083'.
[  801.062906][ T1586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8083'.
[  801.115269][ T1586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8083'.
[  801.165083][ T1586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8083'.
[  801.176636][ T1586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8083'.
[  801.203489][ T1586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8083'.
[  801.238418][ T1586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8083'.
[  801.364905][   T24] net_ratelimit: 3331 callbacks suppressed
[  801.364927][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.395522][ T1610] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  801.404348][ T1610] tipc: Enabled bearer <udp:syz0>, priority 10
[  801.645692][ T1623] vlan2: entered promiscuous mode
[  801.651177][ T1623] vlan2: entered allmulticast mode
[  801.657040][ T1623] hsr_slave_1: entered allmulticast mode
[  801.667181][ T1626] SET target dimension over the limit!
[  801.686839][T12455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.869054][ T1638] ksmbd: Unknown IPC event: 1, ignore.
[  801.918455][ T1643] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  802.002682][ T1643] batman_adv: batadv0: Removing interface: batadv_slave_1
[  802.121044][ T1645] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  802.281449][ T1667] netlink: 'syz.1.8105': attribute type 1 has an invalid length.
[  802.311573][ T1667] netlink: 'syz.1.8105': attribute type 1 has an invalid length.
[  802.501080][ T1684] netlink: 'syz.5.8111': attribute type 24 has an invalid length.
[  802.509334][ T1682] netlink: 'syz.5.8111': attribute type 24 has an invalid length.
[  802.518193][T22722] tipc: Node number set to 3015400893
[  802.667269][ T1697] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  802.685467][ T1697] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  802.706944][ T1699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.725363][T22722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.830976][ T1706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  803.293495][ T1740] wg1: entered promiscuous mode
[  803.301707][ T1740] wg1: entered allmulticast mode
[  803.313601][ T6094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.364884][ T6094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.610865][ T1760] netlink: 'syz.6.8137': attribute type 4 has an invalid length.
[  803.755928][ T1762] can: request_module (can-proto-0) failed.
[  803.773972][T22722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.893793][ T1776] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  804.483442][ T1813] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  804.505714][ T1813] syzkaller0: entered promiscuous mode
[  804.511244][ T1813] syzkaller0: entered allmulticast mode
[  804.550841][ T1813] tipc: Resetting bearer <eth:syzkaller0>
[  804.562265][ T1812] tipc: Resetting bearer <eth:syzkaller0>
[  804.605437][ T1812] tipc: Disabling bearer <eth:syzkaller0>
[  804.721832][ T1776] tipc: Disabling bearer <eth:syzkaller0>
[  804.741347][ T1828] netlink: 'syz.5.8159': attribute type 15 has an invalid length.
[  804.766537][ T1830] netlink: 'syz.2.8160': attribute type 10 has an invalid length.
[  804.809440][ T1830] batadv0: entered allmulticast mode
[  805.007458][ T1842] netlink: 'syz.6.8165': attribute type 12 has an invalid length.
[  805.017605][ T1842] netlink: 'syz.6.8165': attribute type 29 has an invalid length.
[  805.719350][ T1872] __nla_validate_parse: 29 callbacks suppressed
[  805.719370][ T1872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8178'.
[  805.738842][ T1872] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8178'.
[  805.853613][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  805.878494][ T1880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  805.887908][ T1887] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  806.109937][ T1903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  806.159628][ T1903] syzkaller0: entered promiscuous mode
[  806.179508][ T1903] syzkaller0: entered allmulticast mode
[  806.326138][ T1915] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8187'.
[  806.370474][ T1912] pim6reg1: entered promiscuous mode
[  806.377834][ T1912] pim6reg1: entered allmulticast mode
[  806.393512][ T1914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  806.407553][T22750] net_ratelimit: 20 callbacks suppressed
[  806.407574][T22750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.451322][ T1918] Unknown options in mask b7f2
[  806.459007][ T1920] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  806.684917][ T1929] syzkaller0: entered promiscuous mode
[  806.690539][ T1929] syzkaller0: entered allmulticast mode
[  806.705517][ T1928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  806.723204][ T1903] tipc: Resetting bearer <eth:syzkaller0>
[  806.748475][ T1897] tipc: Resetting bearer <eth:syzkaller0>
[  806.781637][ T1897] tipc: Disabling bearer <eth:syzkaller0>
[  806.800340][ T1930] tipc: Resetting bearer <eth:syzkaller0>
[  806.828382][ T1930] tipc: Disabling bearer <eth:syzkaller0>
[  806.886405][T22722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.973781][ T1943] validate_nla: 1 callbacks suppressed
[  806.973803][ T1943] netlink: 'syz.2.8196': attribute type 4 has an invalid length.
[  807.341246][ T1963] syzkaller0: entered allmulticast mode
[  807.458532][ T1974] netlink: 'syz.2.8207': attribute type 11 has an invalid length.
[  807.474867][ T1974] netlink: 228 bytes leftover after parsing attributes in process `syz.2.8207'.
[  807.499894][ T1974] netlink: 'syz.2.8207': attribute type 11 has an invalid length.
[  807.530588][ T1974] netlink: 228 bytes leftover after parsing attributes in process `syz.2.8207'.
[  807.675246][ T1984] 
[  807.677647][ T1984] ======================================================
[  807.679281][ T1988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8211'.
[  807.684684][ T1984] WARNING: possible circular locking dependency detected
[  807.684710][ T1984] syzkaller #0 Not tainted
[  807.684724][ T1984] ------------------------------------------------------
[  807.684733][ T1984] syz.6.8212/1984 is trying to acquire lock:
[  807.718037][ T1984] ffffffff8f4262d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0
[  807.727381][ T1984] 
[  807.727381][ T1984] but task is already holding lock:
[  807.734754][ T1984] ffff88802767c870 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  807.744098][ T1984] 
[  807.744098][ T1984] which lock already depends on the new lock.
[  807.744098][ T1984] 
[  807.754507][ T1984] 
[  807.754507][ T1984] the existing dependency chain (in reverse order) is:
[  807.763545][ T1984] 
[  807.763545][ T1984] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  807.771576][ T1984]        lock_acquire+0x120/0x360
[  807.776639][ T1984]        _raw_spin_lock_bh+0x36/0x50
[  807.781939][ T1984]        nr_rt_device_down+0x12a/0x720
[  807.787409][ T1984]        nr_device_event+0x137/0x150
[  807.792800][ T1984]        notifier_call_chain+0x1b6/0x3e0
[  807.798443][ T1984]        __dev_notify_flags+0x18d/0x2e0
[  807.803995][ T1984]        netif_change_flags+0xe8/0x1a0
[  807.809500][ T1984]        dev_change_flags+0x130/0x260
[  807.814884][ T1984]        dev_ioctl+0x7b4/0x1150
[  807.819748][ T1984]        sock_do_ioctl+0x22c/0x300
[  807.824868][ T1984]        sock_ioctl+0x576/0x790
[  807.829726][ T1984]        __se_sys_ioctl+0xfc/0x170
[  807.834850][ T1984]        do_syscall_64+0xfa/0xfa0
[  807.839893][ T1984]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.846314][ T1984] 
[  807.846314][ T1984] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  807.854154][ T1984]        lock_acquire+0x120/0x360
[  807.859189][ T1984]        _raw_spin_lock_bh+0x36/0x50
[  807.864488][ T1984]        nr_rt_device_down+0xa9/0x720
[  807.869960][ T1984]        nr_device_event+0x137/0x150
[  807.875259][ T1984]        notifier_call_chain+0x1b6/0x3e0
[  807.880908][ T1984]        __dev_notify_flags+0x18d/0x2e0
[  807.886468][ T1984]        netif_change_flags+0xe8/0x1a0
[  807.891943][ T1984]        dev_change_flags+0x130/0x260
[  807.897368][ T1984]        dev_ioctl+0x7b4/0x1150
[  807.902335][ T1984]        sock_do_ioctl+0x22c/0x300
[  807.907457][ T1984]        sock_ioctl+0x576/0x790
[  807.912327][ T1984]        __se_sys_ioctl+0xfc/0x170
[  807.917449][ T1984]        do_syscall_64+0xfa/0xfa0
[  807.922490][ T1984]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.928934][ T1984] 
[  807.928934][ T1984] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  807.936886][ T1984]        validate_chain+0xb9b/0x2140
[  807.942186][ T1984]        __lock_acquire+0xab9/0xd20
[  807.947459][ T1984]        lock_acquire+0x120/0x360
[  807.952488][ T1984]        _raw_spin_lock_bh+0x36/0x50
[  807.957784][ T1984]        nr_remove_neigh+0x25/0xe0
[  807.962918][ T1984]        nr_add_node+0x1d9f/0x2570
[  807.968036][ T1984]        nr_rt_ioctl+0xc12/0xd50
[  807.972977][ T1984]        sock_do_ioctl+0xdc/0x300
[  807.978010][ T1984]        sock_ioctl+0x576/0x790
[  807.982952][ T1984]        __se_sys_ioctl+0xfc/0x170
[  807.988078][ T1984]        do_syscall_64+0xfa/0xfa0
[  807.993123][ T1984]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.999542][ T1984] 
[  807.999542][ T1984] other info that might help us debug this:
[  807.999542][ T1984] 
[  808.010029][ T1984] Chain exists of:
[  808.010029][ T1984]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  808.010029][ T1984] 
[  808.023858][ T1984]  Possible unsafe locking scenario:
[  808.023858][ T1984] 
[  808.031406][ T1984]        CPU0                    CPU1
[  808.036789][ T1984]        ----                    ----
[  808.042168][ T1984]   lock(&nr_node->node_lock);
[  808.046948][ T1984]                                lock(nr_node_list_lock);
[  808.054070][ T1984]                                lock(&nr_node->node_lock);
[  808.061366][ T1984]   lock(nr_neigh_list_lock);
[  808.066069][ T1984] 
[  808.066069][ T1984]  *** DEADLOCK ***
[  808.066069][ T1984] 
[  808.074210][ T1984] 1 lock held by syz.6.8212/1984:
[  808.079229][ T1984]  #0: ffff88802767c870 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  808.089090][ T1984] 
[  808.089090][ T1984] stack backtrace:
[  808.094982][ T1984] CPU: 1 UID: 0 PID: 1984 Comm: syz.6.8212 Not tainted syzkaller #0 PREEMPT(full) 
[  808.095004][ T1984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  808.095014][ T1984] Call Trace:
[  808.095021][ T1984]  <TASK>
[  808.095029][ T1984]  dump_stack_lvl+0x189/0x250
[  808.095059][ T1984]  ? __pfx_dump_stack_lvl+0x10/0x10
[  808.095084][ T1984]  ? __pfx__printk+0x10/0x10
[  808.095099][ T1984]  ? stack_trace_save+0x9c/0xe0
[  808.095128][ T1984]  print_circular_bug+0x2ee/0x310
[  808.095153][ T1984]  check_noncircular+0x134/0x160
[  808.095177][ T1984]  validate_chain+0xb9b/0x2140
[  808.095208][ T1984]  __lock_acquire+0xab9/0xd20
[  808.095228][ T1984]  ? nr_remove_neigh+0x25/0xe0
[  808.095250][ T1984]  lock_acquire+0x120/0x360
[  808.095265][ T1984]  ? nr_remove_neigh+0x25/0xe0
[  808.095290][ T1984]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  808.095314][ T1984]  ? nr_remove_neigh+0x25/0xe0
[  808.095341][ T1984]  _raw_spin_lock_bh+0x36/0x50
[  808.095364][ T1984]  ? nr_remove_neigh+0x25/0xe0
[  808.095386][ T1984]  nr_remove_neigh+0x25/0xe0
[  808.095409][ T1984]  nr_add_node+0x1d9f/0x2570
[  808.095432][ T1984]  ? __asan_memcpy+0x40/0x70
[  808.095456][ T1984]  ? nr_call_to_digi+0x126/0x1b0
[  808.095478][ T1984]  nr_rt_ioctl+0xc12/0xd50
[  808.095504][ T1984]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  808.095523][ T1984]  ? lockdep_hardirqs_on+0x9c/0x150
[  808.095552][ T1984]  ? apparmor_capable+0x137/0x1b0
[  808.095576][ T1984]  ? capable+0x89/0xe0
[  808.095595][ T1984]  ? nr_ioctl+0x1b1/0x3b0
[  808.095612][ T1984]  sock_do_ioctl+0xdc/0x300
[  808.095637][ T1984]  ? __pfx_sock_do_ioctl+0x10/0x10
[  808.095666][ T1984]  sock_ioctl+0x576/0x790
[  808.095688][ T1984]  ? __pfx_sock_ioctl+0x10/0x10
[  808.095711][ T1984]  ? __fget_files+0x3a0/0x420
[  808.095726][ T1984]  ? __fget_files+0x2a/0x420
[  808.095743][ T1984]  ? bpf_lsm_file_ioctl+0x9/0x20
[  808.095774][ T1984]  ? __pfx_sock_ioctl+0x10/0x10
[  808.095794][ T1984]  __se_sys_ioctl+0xfc/0x170
[  808.095817][ T1984]  do_syscall_64+0xfa/0xfa0
[  808.095841][ T1984]  ? lockdep_hardirqs_on+0x9c/0x150
[  808.095864][ T1984]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  808.095880][ T1984]  ? clear_bhb_loop+0x60/0xb0
[  808.095899][ T1984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  808.095916][ T1984] RIP: 0033:0x7f807d18f6c9
[  808.095932][ T1984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  808.095947][ T1984] RSP: 002b:00007f807df64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  808.095966][ T1984] RAX: ffffffffffffffda RBX: 00007f807d3e5fa0 RCX: 00007f807d18f6c9
[  808.095978][ T1984] RDX: 00002000000001c0 RSI: 000000000000890b RDI: 000000000000000d
[  808.095990][ T1984] RBP: 00007f807d211f91 R08: 0000000000000000 R09: 0000000000000000
[  808.096000][ T1984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  808.096010][ T1984] R13: 00007f807d3e6038 R14: 00007f807d3e5fa0 R15: 00007ffcf2c00bf8
[  808.096031][ T1984]  </TASK>
[  808.113754][ T1988] ipt_REJECT: TCP_RESET invalid for non-tcp
[  808.142174][ T1989] netlink: 'syz.4.8213': attribute type 12 has an invalid length.
[  808.147146][T22722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.160728][ T1989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8213'.
[  808.426458][ T6094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.204550][ T5837] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  809.204890][T23596] Bluetooth: hci2: command 0x0406 tx timeout
[  809.216986][T12455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.444617][ T6094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.255642][T22722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.285615][T12455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.244872][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.334873][T22722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.485446][ T6094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.365093][T22722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.525925][T22750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.407105][T22722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.444987][T22721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.526403][ T6094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.316896][T25810] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  816.485049][T22722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.367052][ T6094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.534734][T22722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog