last executing test programs:

4m25.949468109s ago: executing program 2 (id=5594):
r0 = gettid()
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)={0x118, 0x33, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r0}, @generic="65bbd98f0977045c9bcca9e2e7a9f92f37e28301d1aad19691a8a2867c1fed2c1ff7b4cc76dd42f846dcabb8b675c205ea53cc3f8729afad52221045261351ea13ab0ff64b995603787541b7cd0be4cb9034dae29a6f44e7e20047ce39a43482ab26b437b4fbc87022ff6d7b1d30b93ec91c8eeec196a79856a7ab3ab613b9f25eb8bfeb01d31393ec82cad6e9254d309fc5883ab0ddf4a8a560b718e256b1f746f5e1288e5754a5a6e57f0d0ef980e8f415c1832d0a35b36634aaa695cb671e5e34415cb49d779738c70efc54ef6028513db7355534230fdcb28a2472b196e7b345c80c214e165f7c6195c620f211725c", @typed={0x8, 0x160, 0x0, 0x0, @pid=r0}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

4m25.739245347s ago: executing program 2 (id=5597):
r0 = socket(0x40000000015, 0x5, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @mcast2, 0x3}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28)
r1 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_cred(r2, 0x1, 0x4d, 0x0, &(0x7f00000002c0)=0x5f)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095", @ANYRESDEC=r2, @ANYRES16=r2, @ANYRES16=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
socket(0x400000000010, 0x4, 0xfffffffa)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8000})
r4 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r4, 0x0, 0x20, &(0x7f00000012c0)="15020000", 0x4)
ioctl$FIOCLEX(r3, 0x5451)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x28000600)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendfile(0xffffffffffffffff, r6, &(0x7f00000003c0)=0x7fffffff, 0x5)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004cc0)={0x12f4, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x12da, 0x1, 0x0, 0x1, [@generic="1064598c3382549b51d045c198b8dd44d1d2e0638a3e330986e2a8cbce4d18bb3fe217a3ac833cef2910aeb269801db463affee4165e394e2766ba", @generic="2e029df8de122d4e72bdd40b4ee9f0f753b3645c6d15fefe4ee276", @typed={0x41, 0xf5, 0x0, 0x0, @binary="26b9a4c058667782000bb6861b67cf785e07f8c7e998c4b2cfc54c7ee94cd599253f951e2266b268ef916c9013e2ba277e161441e5a53fa95470f4ac0b"}, @nested={0x4, 0xe8}, @nested={0x1237, 0x9f, 0x0, 0x1, [@nested={0x8, 0x2f, 0x0, 0x1, [@nested={0x4, 0x159}]}, @generic="c2ddcd436c46840ffd91109eace01481647c839584490a447e6b08cd79893d2121fbcb965dad9e2dfed8c5d5d60b4cb48ac25c0b514b7e1444cf8eb4638b0cc963534bf3e1c8ea089fea4e834a529e7919ec05082cf59b4750fa1118dfdd5fc6c7617c5140d0791588a5a39358c9b76d19ae31d6636e629cdfba49960af0aab08f02d1a9b4ea5b19c67e386800ec019399c1187dfdca3a897194be19559a47836da931da4226a49554d536a761e887b8a18077ff923c84dfe8e034e85ded43b198688066bceb755eced189756dc79964b099f531e5", @generic="ce583e5be546fe79fe2ebcd90771ebe2b0a85bdc9e96458cf9dfa8ef23ec656b651987bf4865e7e85a3eeb7a2984079fe9b8f37158ffecb3786c17a5f5c98f6612d8eebca4859ec3b0a224552dd311943724ff00a62cf5fa6ee8d4bb39dcfa85b6db0b8fb83c39528fc5164ddebdd6f0b97736a5662515a1ff6be7a7993af7152a61", @nested={0x10d3, 0xb5, 0x0, 0x1, [@typed={0x14, 0x11d, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="bf0512d09252fa6d6d2139f5b0872b9976ebb10731f5501612d27235e62a3c6c92049aca97f01ccc9e713a320b3d0eec33fc90968a4bceeeec2bb39b18635f5b95d48bc0ea61cfb353738c88171996967f148889bb90c716d280f7701f0183d3f1de9eee49ec23f38015b06dd2f4d0049a7ca6af53ed4bb2013941788239d7e1397736aeac97ff85bccb27ab2800ac9a07570eafb77b89d17bba5857fa4b34071b635e453a2d2c", @typed={0xffe, 0x98, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x7e}, @typed={0x8, 0xd5, 0x0, 0x0, @fd}, @typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xa010101}]}]}]}]}, 0x12f4}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)

4m24.181232109s ago: executing program 2 (id=5604):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x404, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3d8, 0x4, 0x0, 0x1, [{0x3d4, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x3c4, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_INFO={0x1a4, 0x3, "a84de5500945d136b8f5e5738a143809b993ac1fc72931b5bf84777672541703a0ef5adbc68ef209d3751de5c620c9233f8f0c744811318b62d9a10fc9e61d9fc5335e4a81877581acc4533fcca3be755c00984775cff3f3364037ed2bfba7ebfaf848e38e271cc293fd3f349f2b3f7fadfa18ef79ad37edc6128a3c1ce13299818d6db74c2f85f7c882a029bcaa35392e1b5ca067bdefc9b75314bf248549d6550217c4b7128762c3cf1d97b8a012819bd44f2091d17d1280d2ba6fa31a857e459cd5dc29beef86bcf09fa2784f98d892b7b24565337cbcdafeab909937850d9abc39a5691912049a40c0b47d7f8054ab02b662a4a8ec1c12854a2305c4b5945b443f89989916332a345536b5e4002596450dd265d99a68e4595b5957a31fe8d0fa8cfe7deecf42fc7be586f9ede55afedf2e930b9e473ea4fef179afef14d16e37d9470c59113d5272c587c4e328fa94c0d9b36f27a48c60033e20f8413d85288c866c9a51a42641fc8ecee483d3bcfbd6fcc237d6cf2805a80490f92df8d073fe2223c0315dda393d171c27c48c6a6d4bad49cc43876dbf61cdae5aca099a"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x42c}}, 0x4048010) (async)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d)

4m23.973992538s ago: executing program 2 (id=5608):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x1cabb6a95775ebd6, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a0056bc4e1adb43024956bded109d2e3c6f81a9688d828ffc08a653a51ba1a954b01308e5aa3b03c768185153f50d809a6520c4a6cedb68374f51b175b45fbb1a1647dbbaff4e29589e4fc6c2d96b424f1e528fe04cdb1158fa614713f8f32a0fcd25940354f39e650a3e5c5254aec7ee12d39969b434aad0949f873dd064f94aa099683c596f6df1", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000400)={@remote, @multicast1}, 0xc)
sendmmsg(r0, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}})
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="79b6717cbed092d3aba06c000900002537a9401c0012800b00010067726574617000000c0042800600000000010000"], 0x3c}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f00000000c0)=0x773, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)

4m23.274802354s ago: executing program 2 (id=5612):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r1)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001700000048000680440006"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)

4m22.953461631s ago: executing program 2 (id=5614):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac141400060003004c"], 0x40}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x0, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYRESHEX=r1], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240000d2)
bind$llc(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x50, 0x0, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r7 = socket(0x15, 0x5, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
getsockopt(r7, 0x200000000114, 0x2716, &(0x7f0000c35fff), &(0x7f0000000300))
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002bbd7000fedbdf25020000000500ac40c42200000900010073797a32000000000900010073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8000)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

4m7.910298014s ago: executing program 32 (id=5614):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac141400060003004c"], 0x40}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x0, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYRESHEX=r1], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240000d2)
bind$llc(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x50, 0x0, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r7 = socket(0x15, 0x5, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
getsockopt(r7, 0x200000000114, 0x2716, &(0x7f0000c35fff), &(0x7f0000000300))
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002bbd7000fedbdf25020000000500ac40c42200000900010073797a32000000000900010073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8000)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

2m31.19667939s ago: executing program 0 (id=6534):
unshare(0xe040400)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, 0x0, 0x301, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], &(0x7f0000000000)=""/28, 0x56, 0x1c, 0x1}, 0x28)
accept$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000006800"], 0x1c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x13, 0x0, &(0x7f0000000580)='GPL\x00', 0x8, 0x25, &(0x7f00000005c0)=""/37, 0x41100, 0x1d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x4, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xfffff9b7}, 0x94)
r2 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000180)={0x1})
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000440)="cd", 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x20004800)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="6d9311000000f8dbdf25010000000c00030003000000000000000800"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000100), 0x4)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b7020000c54a4530bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b706000008ffffffcf6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a1a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2dff0f000000000000bf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d71289516a684aa2c5c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4ea0583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635f0a3ebd3aed120e4500c16e6c9dc729f2cb4ff5106419291d4222980b49ddb9527ce785822d8f4e227bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880b9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694a47f7236dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x2, 0x0)

2m30.874632185s ago: executing program 0 (id=6538):
epoll_create1(0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
accept4(r1, &(0x7f00000000c0)=@tipc=@id, &(0x7f0000000140)=0x80, 0x800) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x4c, r3, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044080}, 0x0)

2m29.889971907s ago: executing program 0 (id=6549):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000400000000800000008000100677470000c00028008000101", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x4e24, 0x0, 0x4e24, 0x0, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x33}, @in6=@private2, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xdb}, {0x0, 0x200000000003, 0x0, 0x1}, {0x2}, 0x0, 0x1, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0xfffffffffffffc2d, 0x1, {{'sha256\x00'}, 0x0, "ece8ffff067541ea4fc9bf5f87347286b2b392362ea5007d983f8e79ff2a9ee0e988e19dca8c2199411efc96aba3e6b0"}}]}, 0x180}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async, rerun: 64)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r5, 0x0) (async)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002800)=ANY=[@ANYBLOB="30000000101401002cbd7000fddbdf2508001d00"], 0x30}}, 0x24001850) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x1, 0x2e38, 0x10000})

2m29.683257161s ago: executing program 0 (id=6554):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={<r2=>r0, &(0x7f0000000000)='-/*[[}:/(:^\'(\x00', 0x0, &(0x7f0000000040)={@_ha_fsid={[0x8d6c, 0x7fff]}, {0x7f8a, 0x5, 0x4, 0x3}}, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0xfffffffa})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r4, 0x917, 0x70bd2c, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}]}, 0x1c}}, 0x8800)
connect$pptp(r2, &(0x7f00000003c0)={0x18, 0x2, {0x1, @loopback}}, 0x1e)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x34, r4, 0x801, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048040}, 0x40870)
close(r1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000031d414000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0x44, 0x6, 0x480, 0x98, 0x1e0, 0x0, 0x310, 0x310, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x278}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x4}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x10}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x10}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0)

2m29.410063218s ago: executing program 0 (id=6559):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x30000009, 0xa5f, 0xfff}, @remote, @loopback, 0xff000000, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$l2tp6(r2, &(0x7f0000000100)="094bc903e202cf42ffbe466c7365eab6c87eafce0bc9dfe2a3b95d358affacdd0662cf61c26435c1c75f18c0dc6fd029d3d8d60f0f80b0a422bd2c7fe8d9e84701d5d668b8ca48f18af542be661c", 0x4e, 0x10, &(0x7f0000000180)={0xa, 0x0, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x3}, 0x20)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={<r3=>0x0, 0x2}, &(0x7f0000000040)=0x8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r4, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r5, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000002180)='-', 0x1}], 0x2}}], 0x2, 0x4000000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x8}, &(0x7f00000000c0)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18020000ffff00000000000003000000850000005500000095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

2m29.218478826s ago: executing program 0 (id=6561):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000240)=0x100000001, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c005}, 0x4008090)
unshare(0x400)
r2 = socket(0x1, 0x80802, 0x0)
shutdown(r2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005"], 0x34}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x28, r9, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x2)
bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000001c0)="3663e208cbd19c09c8c744be76e18e61c5f454712d3a23a9bc7d496800d08588e6ee4b76c6c2f986330e548a1afb4922b2e5541c32855f5235a0749cf371e9", 0x3f)
ioctl$OCFS2_IOC_UNRESVSP64(r3, 0x4030582b, &(0x7f0000000080)={0x1, 0x2, 0x40, 0xff, 0xffffffff, 0xb})
r10 = accept4(r3, 0x0, 0x0, 0x800)
r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
close(r11)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x28000000)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1", 0x22}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52", 0x1c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg$can_bcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/106, 0x6a}], 0x1}, 0x12153)

2m14.005876996s ago: executing program 33 (id=6561):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000240)=0x100000001, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c005}, 0x4008090)
unshare(0x400)
r2 = socket(0x1, 0x80802, 0x0)
shutdown(r2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005"], 0x34}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x28, r9, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x2)
bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000001c0)="3663e208cbd19c09c8c744be76e18e61c5f454712d3a23a9bc7d496800d08588e6ee4b76c6c2f986330e548a1afb4922b2e5541c32855f5235a0749cf371e9", 0x3f)
ioctl$OCFS2_IOC_UNRESVSP64(r3, 0x4030582b, &(0x7f0000000080)={0x1, 0x2, 0x40, 0xff, 0xffffffff, 0xb})
r10 = accept4(r3, 0x0, 0x0, 0x800)
r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
close(r11)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x28000000)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1", 0x22}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52", 0x1c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg$can_bcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/106, 0x6a}], 0x1}, 0x12153)

2.685912893s ago: executing program 5 (id=7533):
syz_emit_ethernet(0x7e, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x1, 0x81, 0x0, 0x84, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x3d, 0x3, [{0x0, 0x12, "08009a8c5903040000527c706ca03a06"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x5, "cfa11c"}]}]}}}}}}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
readv(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280)=r2, 0x4)
r3 = getpid()
sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x64, &(0x7f0000000440)=[{&(0x7f00000004c0)="e60d", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee00}}}], 0x20, 0x10}, 0x10044001)
write$cgroup_pid(r0, &(0x7f0000000400), 0x12)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8)
clock_gettime(0x0, &(0x7f00000090c0)={<r4=>0x0, <r5=>0x0})
recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000040)=@caif, 0x80, &(0x7f0000004580)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/140, 0x8c}, {&(0x7f0000002380)=""/98, 0x62}, {&(0x7f0000002400)=""/28, 0x1c}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/56, 0x38}, {&(0x7f0000003480)=""/250, 0xfa}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x8, &(0x7f0000004600)=""/60, 0x3c}, 0x3}, {{&(0x7f0000004640)=@alg, 0x80, &(0x7f0000005880)=[{&(0x7f00000046c0)=""/3, 0x3}, {&(0x7f0000004700)=""/37, 0x25}, {&(0x7f0000004740)=""/189, 0xbd}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/79, 0x4f}], 0x5, &(0x7f0000005900)=""/117, 0x75}, 0x9}, {{&(0x7f0000005980)=@caif=@util, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000005a00)=""/123, 0x7b}, {&(0x7f0000005a80)=""/155, 0x9b}, {&(0x7f0000005b40)=""/36, 0x24}, {&(0x7f0000005b80)=""/37, 0x25}, {&(0x7f0000005bc0)}, {&(0x7f0000005c00)=""/80, 0x50}, {&(0x7f0000005c80)}], 0x7, &(0x7f0000005d40)=""/209, 0xd1}, 0xfff}, {{&(0x7f0000005e40)=@in, 0x80, &(0x7f0000006000)=[{&(0x7f0000005ec0)=""/54, 0x36}, {&(0x7f0000005f00)=""/200, 0xc8}], 0x2, &(0x7f0000006040)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f0000008280)=[{&(0x7f0000007040)=""/75, 0x4b}, {&(0x7f00000070c0)=""/89, 0x59}, {&(0x7f0000007140)=""/200, 0xc8}, {&(0x7f0000007240)=""/51, 0x33}, {&(0x7f0000007280)=""/4096, 0x1000}], 0x5}, 0x5}, {{&(0x7f0000008300)=@ax25={{}, [@default, @remote, @bcast, @null, @bcast, @netrom, @rose, @bcast]}, 0x80, &(0x7f0000008500)=[{&(0x7f0000008380)=""/199, 0xc7}, {&(0x7f0000008480)=""/15, 0xf}, {&(0x7f00000084c0)=""/32, 0x20}], 0x3, &(0x7f0000008540)=""/95, 0x5f}, 0x2}, {{&(0x7f00000085c0)=@ax25={{0x3, @default}, [@null, @null, @rose, @netrom, @null, @default, @bcast, @null]}, 0x80, &(0x7f0000008640)}, 0x930a}, {{&(0x7f0000008680)=@rc={0x1f, @none}, 0x80, &(0x7f0000008b00)=[{&(0x7f0000008700)=""/213, 0xd5}, {&(0x7f0000008800)=""/140, 0x8c}, {&(0x7f00000088c0)=""/3, 0x3}, {&(0x7f0000008900)=""/80, 0x50}, {&(0x7f0000008980)=""/82, 0x52}, {&(0x7f0000008a00)=""/223, 0xdf}], 0x6, &(0x7f0000008b80)=""/152, 0x98}, 0x79}, {{&(0x7f0000008c40)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000008e00)=[{&(0x7f0000008cc0)=""/224, 0xe0}, {&(0x7f0000008dc0)}], 0x2, &(0x7f0000008e40)=""/61, 0x3d}, 0x1}], 0x9, 0x10000, &(0x7f0000009100)={r4, r5+60000000})
recvmsg(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffe7f, 0x0}, 0x62)

2.542303752s ago: executing program 5 (id=7535):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x22020600)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
vmsplice(r4, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0xd)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x23}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0)
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00442c2f"], 0xfdef)

2.377097283s ago: executing program 4 (id=7537):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000580)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x8b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c001880080001400100000000000000000000020800034000000002240001801400018008000100e000000108000200e00000010c000280050001000000000004001640440010"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000500)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00108025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fa4eb2f71ebaede447dc8f6f61c6615fcf740adda4853b2d23adb370000001e0106"], 0x184}}, 0x0)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="240182995db59bdc92c6ee1f098b2fc2b86d21d8ad924e36966884220ff780f094b5c0cabc6a77a3f7a599867b34dc6b3aa847508ddb7002cd632905dfc36ec7f5f9e9a944e8b0a6bd5d5a034dfb247171f5f324f2349fb2d9c0abc97f2987fb81cbac6f2d6c5701df1ed74276fda348174be286ef0840f33836e0dae43ccd74189efbc949da5fbdb8ed9746936737cd261f5189fd605cc9493593b124310dc8425241cd7b4b1d56", @ANYRES16=r4, @ANYBLOB="000326bd7000fddbdf250200000014000200677265746170300000000000000000000900030073797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004080}, 0x4048010)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x9, 0x70bd2a, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x84)
getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14)

2.165552952s ago: executing program 4 (id=7541):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{<r2=>r0, &(0x7f0000000000)='\x00', 0x80, &(0x7f0000000040)={@align=0x29, {0xfff3, 0xa4, 0x9, 0x81}}, 0x9, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0x8}, {[0x200, 0x0, 0x40, 0x9]}, 0x0, 0x49, &(0x7f0000000280)=""/73})
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000380)={<r3=>0x0, 0x2f, "d7068777862990f77c46c7d63071ad5d5ddb668474abbb03335667e9a66a49d2f262caffa230da027d982dd2d21239"}, &(0x7f00000003c0)=0x37)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000400)={r3, 0x6be, 0xc5, "621db6ed087c52ffdda6d48cafee3224cc6a5cb619dfe46228e709d83fe1664ab584d437baa6707790df04c490193ffeadc5bff457980b8dd4b9e68936be95267a2e20006ff2fe43abd47da0ae8972cc215b7a3d5b1d342b150f2ff78b500b4465d32419e68cdc06b0ebe806df1c966f0a7e5aca8e66ea986971100035dc6a7c5ac2885e3802a39633c63b46fdd31a0ce52c1e3ba3c8bb7b5a8db92d61b2e99ba97072950818f791449c92560eb1209c55eb4b3af57f7110567b8a35074c210536f8901a7f"}, 0xcd)

2.046889306s ago: executing program 6 (id=7544):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180500000800000000000000030000aedd00850000000e000000950000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async, rerun: 32)
syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x0, 0xb9, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000280)={r4, &(0x7f00000002c0), &(0x7f00000002c0)=""/10, 0x2}, 0x20)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) (async)
r6 = socket$inet(0x2, 0x5, 0x0) (async, rerun: 32)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32)
sendmsg$sock(r7, 0x0, 0x44000) (async)
ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000dc0)={0x0, @sco={0x1f, @none}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xc}, @generic={0x1d, "3f4f2d1b339f3c12404b956ae0b2"}, 0x648, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb, 0x5, 0x6}) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000003d40)=""/149, 0x95}, {0x0}, {0x0}, {0x0}, {&(0x7f0000004040)=""/143, 0x8f}, {&(0x7f0000000300)=""/139, 0x8b}], 0x6}, 0x9}], 0x1, 0x2042, 0x0) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffeffffa}}], 0x18}, 0x20000000)
sendmmsg$inet(r8, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r9 = socket(0xa, 0x5, 0x0) (rerun: 32)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) (async, rerun: 64)
r10 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000111401072bbd7000fddbdf2508000700"], 0x18}}, 0x84) (async)
shutdown(r6, 0x0) (async)
recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
getpeername$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000c, 0x80010, r0, 0x0)

1.976107573s ago: executing program 3 (id=7545):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f00000005c0)="e9", &(0x7f0000000440)=""/130}, 0x20)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a310000000005000400000000001400078008001240000100000800114000000000050001000600000005000500000000000d000300686173683a6d6163"], 0x5c}}, 0x4004804)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000040000000800000001"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000002000000fd100000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xd}, 0x94)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040803}, 0x4000010)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c80)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14b, 0x14b, 0x7, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x5}, @fwd={0x4}, @typedef={0x4}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x5, 0x1}, @typedef={0xa, 0x0, 0x0, 0x8, 0x3}, @fwd={0xe}, @struct={0x2, 0x1, 0x0, 0x4, 0x1, 0x6, [{0x0, 0x4, 0x3}]}, @enum64={0x9, 0x7, 0x0, 0x13, 0x1, 0x3, [{0xf, 0xffff, 0x39a}, {0x10, 0x2, 0xffff}, {0x7, 0x1, 0x10}, {0x1, 0xfff, 0x1}, {0x6, 0x2, 0x3}, {0x1, 0x7fffffff, 0x9}, {0x10, 0xfffffff8}]}, @datasec={0x4, 0x1, 0x0, 0xf, 0x1, [{0x1, 0x8, 0x4}], '>'}, @datasec={0xb, 0x8, 0x0, 0xf, 0x2, [{0x2, 0x100, 0x3}, {0x5, 0x7, 0x9}, {0x2, 0x5a4e, 0x7ff}, {0x1, 0x3000, 0x2}, {0x3, 0x8000, 0xe00}, {0x4, 0x7ff, 0x7fffffff}, {0x3, 0x1, 0xd}, {0x1, 0x1ff}], "d7ac"}]}, {0x0, [0x0, 0x5f, 0x61, 0x61, 0x2e]}}, &(0x7f0000000c80)=""/4096, 0x16b, 0x1000, 0x1, 0x7f, 0x10000}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001cc0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xd, '\x00', 0x0, r6, 0x3, 0x5, 0x4}, 0x50)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "9e5efe44", "2fd978cbd6bf3b5d"}, 0x28)
setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f0000000040), 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)

1.881734271s ago: executing program 4 (id=7546):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000208500000017000000bf91000000000000b7020000210000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000440)}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r9)
write$cgroup_devices(r9, &(0x7f00000005c0)=ANY=[], 0xfffffeff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r11}, 0xc)
recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x49, &(0x7f0000000600)=r6, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40001)
write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0800080000030600cdfde4d3f26d29fa0400400045a3002c00650000401190780a4e264e200018907804000000ff0700007f0000000000000000000000000000d477a414349c74f7fa1628323cccfaa6d43d7aaa5dd26540fb144f1dc869226b36"], 0xfdef)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a3000000000a8000000090a010400000000000000000700000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000d640012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c0001400000000000000087340001800a0001006c696d6974000000240002800c000240000021af00000000d2360c00014000000000000000070800044000000001080003400000011014000000100001000000000000000000058400f0"], 0xf0}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800)

1.776743958s ago: executing program 5 (id=7548):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x7, 0x300000, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x7800, 0x8, 0x3, 0x4}})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newnexthop={0x58, 0x68, 0x400, 0x70bd27, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x1}, [@NHA_OIF={0x8}, @NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xfffffffd}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xae0}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x6}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0xc9}}, @NHA_ID={0x8}]}, 0x58}}, 0x8000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="08ac0f0008ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000000)="c9085cc8ddf2ceaba809ad869671fbf37e2c8f485431a58f41730a90c013ddea135fed212416c538feea6b8ad1f5e7cac965e4a0af")
sendmsg(r0, &(0x7f0000001540)={&(0x7f0000000180)=@rc={0x1f, @none, 0x80}, 0x80, &(0x7f0000001400)=[{&(0x7f00000002c0)="0fd65d5a10852ad04c206024170b9d80d17e64118f2b3797a77afedf6523bc6957ee82491c4a3cb64f79b526aeeb25fe10d8f455a698205cd33d18da3cee19f2be90b1e75ab176871b9332bcec2dbc629ccecdcd8fb83f2c1e2716633a47ff7578f8d52486ed252e33e3ca61815264e367efc8ac34c4873647e9b7400f384a5f65065b5a40811c88dde059ccf0ba134f9b5c60608b8d7d7f69e3f8dc", 0x9c}, {&(0x7f0000000380)="f564b8621582fa1e28e8c2d2a5c612182bbf65786bee2f1072f9ad0ec583266fcf00beb8c9209c", 0x27}, {&(0x7f0000000400)="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", 0x1000}], 0x3, &(0x7f0000001440)=[{0x10, 0x0, 0x9}, {0xf0, 0x10e, 0x3, "b37b2b05b2284b06bf5d76e24dca0cdb3141ca78789a9bef1e48d9aab82918e40370faa56cac2539b1dcc11a35755bb84b665f8225bbe9f366050fd7d4df25b26410adf8cd7036e4133e61c04bef855946faadcc448c78a5102424b5f35553d1488af3249b519e991951ab50a87b830249d6aaa79ca0ad624a81ebd1798300b11920b571812b922f0b7b1c1ae5f583639555bec818129859a03e277bb7574d203b066053fae5e96f34b9d806666b8585808c8d1921adbac49612b01001bf82c413b4efb40efa519a541b7eaba7e6a7bbe73acdb4087ebb0a97d54b"}], 0x100}, 0x40)

1.721558135s ago: executing program 3 (id=7549):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket(0x1d, 0x2, 0x6)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={0xffffffffffffffff, r5, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r6, 0xffffffffffffffff, 0x4}, 0x7)
r7 = socket(0x0, 0x80000, 0xff)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @multicast2}], 0x20)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r8=>0x0})
r9 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r8, 0x2, {0x3}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0)

1.685372107s ago: executing program 1 (id=7550):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff)
r0 = socket(0x2, 0x80805, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x3c, 0x9, 0x5, 0x18, 0x10000}, 0x14) (async)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x3c, 0x9, 0x5, 0x18, 0x10000}, 0x14)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c200008fe04c80600010000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20004800) (async)
sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c200008fe04c80600010000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20004800)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x4000) (async)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x4000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r8)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0xcc, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0xa0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb168}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8001}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040)
unshare(0x2020600)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r9=>0x0})
r10 = socket$packet(0x11, 0x2, 0x300)
r11 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r11)
getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0xfffffffe, {0x0, 0x0, 0x0, r12, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r11)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(r10, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0xa888, r12, 0x7}, 0x14, 0x0}}], 0x1, 0x80)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xdd}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004004}, 0x0)

1.653002817s ago: executing program 6 (id=7551):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010) (async)
sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x2b}, {}, {0x4, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) (async)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x103, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18)
syz_emit_ethernet(0xbe, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0xb0, 0x0, 0x0, 0x5, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x71, 0x1, [{0x0, 0xc, "00fcba8c599d2a81fb52"}, {0x0, 0x9, "789607671442eb"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x2, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x5, 0xa, "6580a9e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f4696706000000a95e"}]}, @timestamp_addr={0x44, 0xc, 0xdf, 0x1, 0x5, [{@multicast1, 0x8}]}]}}}}}}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0xfbffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x17}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}]}, 0x3c}}, 0x20000000) (async)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x94, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xdc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'wlan0\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd251}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'wla\x170\x13'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x61}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '{}++*:'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x8094}, 0x4)
r7 = socket(0x10, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async)
sendmsg$ETHTOOL_MSG_WOL_SET(r7, 0x0, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000080)="a86f7dc18cbd2b671b1ddcf2f7ef630dd4d042f8a4915de5965cd3cdafacfb7dee7fcd6f4481ad8840f8ce8466862368bb1d5fe887acec4315ab1c6136", &(0x7f0000000100)=@udp6=r7}, 0x20)

1.521573264s ago: executing program 5 (id=7552):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf4, r1, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x91}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0xf4}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)

1.384578011s ago: executing program 6 (id=7553):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a00000000000600003f0000000000000000000000000000001400200000000000000000000000ffffac1414bb05002200"/94], 0x64}}, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff}) (async, rerun: 32)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="880000001a000100000000000000000002000000000000000000000008001f"], 0x88}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', <r5=>0x0}) (async, rerun: 32)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10)
setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000300)) (async)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r5, 0x0, r0}, 0x10) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) (async)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r10, 0x11, 0x13, 0x0, &(0x7f0000000100)) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$packet(0x11, 0x2, 0x300) (async)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x4000, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x81}, 0x0)

1.326710424s ago: executing program 5 (id=7554):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x4, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000250009012cbd7000f9ffffff020000000400030008003f00", @ANYRES32, @ANYBLOB="0aab763638e9f7d71b3d527acccb4ab1f8f98a5bb49f317ac8b7eae79d206e3f3efbd4bb76e0ae9be316771780636ec798bfb33f4d52b772148dec23b85ca06222d90000830000000000000000000000e9b6722f08fb3b157f74be5f4b2926736c3571794d9867471db46b72bff3f88d4bbf46631e7e3c60e23e7311c5d99af292f7df748d0c21f82ce7855b1c161da7540416ff0f97c729b4e65c2c7d2f2ac827dce45743a346771fbdfca67c8dac88d220ad788e58faaebd44de0ef0cd279a2f0680ed56ba4255c04349a630791e1481d8bef44e5018ceb0d8ac6a0c41670f512d93fa98cf81565abe9883d48708fa"], 0x20}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r10, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r10, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11)

1.213317883s ago: executing program 1 (id=7555):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000011006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000702080005000b00e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000040), 0x10)
sendmsg$netlink(r2, &(0x7f0000005d80)={&(0x7f0000000100)=@proc={0x1d, 0x0, 0x25dfdbfc, 0x20000000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f00000001c0)=ANY=[], 0x28}, {&(0x7f0000000340)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x44011}, 0x40830)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x18, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x4, 0x6}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)

1.089169383s ago: executing program 6 (id=7556):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000000dd6288319ccc225de300000000000000000000f7ffffff00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000047c0000040042801c0001800600060088a80000100007"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
socket$inet_tcp(0x2, 0x1, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="78e70400e8ff072b47a962c2ef88b0000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)

1.061421228s ago: executing program 3 (id=7557):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_ifreq(r2, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00', @ifru_data=&(0x7f0000000300)="51422328fa825500"})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x4048010)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x11040042}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa0, 0x2, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xfff}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x41}, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101e6ffffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d61746368000000200002800c00030006000000000000b40800010063707500080002"], 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3f2d}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004801}, 0x4000004)

990.042742ms ago: executing program 1 (id=7558):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002d00070100000000ffdbdf25037c00000800018004"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400108006000a00240000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xf5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x1, 0x7, 0x8}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xff}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8001}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x2050)

899.460852ms ago: executing program 6 (id=7559):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', <r1=>0x0})
r2 = socket(0x8000000010, 0x2, 0x0)
write(r2, &(0x7f00000002c0)="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", 0xfc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000008d2b2b0400ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108)
r4 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0xce22, @remote}, 'bridge_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000000)={0x1d, r1}, 0x10)
sendmmsg$unix(r5, &(0x7f0000000300), 0x0, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000ad5300000014001280090001007665746800000000040002800a0001000000001da640d800"], 0x40}}, 0x0)
close(0xffffffffffffffff)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @dev={0xfe, 0x80, '\x00', 0x5}, 0x3}, 0x1c)
bind$vsock_stream(r7, &(0x7f0000000440), 0x10)
listen(r7, 0x5)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r9, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)

711.272361ms ago: executing program 3 (id=7560):
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

565.375751ms ago: executing program 4 (id=7561):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002020800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x1}, 0x28) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x39}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bond0\x00', <r5=>0x0})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r7, 0x701, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) (async)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x7, 0x6}, @mss={0x2, 0x3}, @mss={0x2, 0xec0}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @mss={0x2, 0xfff}, @sack_perm, @mss={0x2, 0x9}], 0x8) (async)
r9 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r9, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8800000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000fffe00026000128009000100766c616e0000f7ff4f0002800600010000000000100003800c0001000200000005000000040003800600050081000000280004800c00010006000000000000000c00010001000000b60000000c000100507000001000000008000500", @ANYRES32=r5], 0x88}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

553.941401ms ago: executing program 3 (id=7562):
syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaabb86dd60f53a0400403a0000000000000000000000000000000000ff72bcd002000000000000000000000000000102"], 0x0)
socket(0x10, 0x80002, 0x0) (async)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x10, 0x0)
bind$llc(r1, &(0x7f0000000400)={0x1a, 0x30a, 0x8, 0x0, 0xfa, 0x2, @multicast}, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe, 0x1}]}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000a40)={0x0, ""/256, 0x0, 0x0, <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES64=r3, @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.stat\x00', 0x26e1, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000100)=r9, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r10, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x200}, [@jmp={0x5, 0x0, 0xb, 0x4, 0x9, 0xfffffffffffffff4, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000280)='syzkaller\x00', 0xff, 0x66, &(0x7f0000000880)=""/102, 0x41000, 0x4, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000004c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500), &(0x7f0000000540)=[{0x1, 0x2, 0xd}, {0x4, 0x0, 0x4000020, 0xa}, {0x1, 0x10000005, 0x1, 0x1}, {0x4, 0x1, 0x8, 0x5}, {0x1, 0x3, 0xd, 0x3}, {0x5, 0x2, 0xf}, {0x4, 0x1, 0x5, 0xb}, {0x4, 0x5, 0xf, 0x2}], 0x10, 0x10}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) (async)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async)
sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000000500))
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r13, 0x21, 0x85, 0xcf, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098ed6ed8951ff86c092399a8d11b76c5e00"/133, &(0x7f00000008c0)=""/206, 0x1000, 0x0, 0x1a, 0x64, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf3c", 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014a3dcd55c030000000000008500000005000000bf09000000000000c6090100000003e70600000006000000180100002020702500000000002020207b9af8ff00000000ae9100000000000037010000f8ffffffb702000008000000b70300000000000114000000060000005c93000000000000b5030000b68f3f208500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014a3dcd55c030000000000008500000005000000bf09000000000000c6090100000003e70600000006000000180100002020702500000000002020207b9af8ff00000000ae9100000000000037010000f8ffffffb702000008000000b70300000000000114000000060000005c93000000000000b5030000b68f3f208500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)

509.750986ms ago: executing program 1 (id=7563):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)={0x3c, r4, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x228}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4040004)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)={0x354, r4, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x2e}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xf73c}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}, @NL80211_ATTR_PEER_MEASUREMENTS={0x318, 0x111, 0x0, 0x1, {0x314, 0x5, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x251}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x1c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x38113305}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ca0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x174, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xae94}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x354}, 0x1, 0x0, 0x0, 0x20000004}, 0xc0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x28011, r1, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x2000)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r6, 0x29, 0x42, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="202c020000000000300012800b00010065727370616e00002000028008000400ffffff7f060002"], 0x50}}, 0x0)

409.271718ms ago: executing program 4 (id=7564):
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x402, 0x80, 0x14f82c0b, <r0=>0x0}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={r0, 0x4ca8}, 0x8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x20040080)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000002c0)={r0, 0x1}, &(0x7f0000000300)=0x8)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r8, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@getstat={0xe0, 0x15, 0x10, 0x70bd25, 0x25dfdbfd, {{'seqiv(generic-gcm-aesni)\x00'}, '\x00', '\x00', 0x400, 0x2000}, ["", "", "", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x9c1298d4f7c983a8}, 0x24008051)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r4)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, r9, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfb}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xbc}]}, 0xdc}, 0x1, 0x0, 0x0, 0xa8c0}, 0x8010)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_ADD(r10, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r11, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004800)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000840), 0x4)
r12 = accept4$inet(0xffffffffffffffff, &(0x7f0000000880)={0x2, 0x0, @multicast2}, &(0x7f00000008c0)=0x10, 0x0)
sendto$inet(r12, &(0x7f0000000900)="7164f02b5b02041b4046ebc13fa414677da891b3c5f269f9c3b26be1496b282735e03d", 0x23, 0x800, 0x0, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
r14 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r14, 0x84, 0x76, &(0x7f0000000940)={r0, 0xe1d}, &(0x7f0000000980)=0x8)
r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4)
ppoll(&(0x7f0000000a00)=[{r15, 0x441}, {r7, 0x50}, {r8, 0x4488}, {r13, 0x5040}], 0x4, &(0x7f0000000a40), &(0x7f0000000a80)={[0x3]}, 0x8)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000ac0)="7703c6143c5dec7e2009187c7d4587428e263456cdae7aa31ae6a4851b9467a726cbface852cd3423fb58f153ebe49804f8353214a379b2d2beb8a3b5843758203a42e5d874014461592c126e100d5063d93cf99826473d28c228941b973565bf13076b959cb9fb0368aaf81a0c7a0a14bf0ecf7b347b8fb4ba0a90a632dbee506bba82f5932a6d636d6464f316b6eb0de9f6391b7df73ce06ce6f66", 0x9c)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r12, 0x6, 0x21, &(0x7f0000000b80)="b85c46038944510d04bedfabfde9431f", 0x10)
sendmsg$nl_route_sched(r13, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)=@getchain={0x54, 0x66, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xcaaf1138e2efd8a8, 0xa}, {0xffff, 0x2}, {0x2, 0x6}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xfea}, {0x8, 0xb, 0x40}, {0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x61}, 0x10)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r14, 0x84, 0x16, &(0x7f0000000d00)={0x2, [0x8, 0x1]}, 0x8)
ioctl$XFS_IOC_GETBMAPA(0xffffffffffffffff, 0xc020582c, &(0x7f0000000dc0)={0x6795, 0x8000000000000001, 0x8, 0x1, 0xfffffffc})

315.4251ms ago: executing program 1 (id=7565):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003dc0)) (rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000004300)={'sit0\x00', &(0x7f0000004280)={'syztnl1\x00', 0x0, 0x20, 0x80, 0xe, 0x7, {{0xd, 0x4, 0x0, 0x32, 0x34, 0x67, 0x0, 0x10, 0x4, 0x0, @local, @loopback, {[@ssrr={0x89, 0x1b, 0x9, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010101]}, @ra={0x94, 0x4}]}}}}})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004340)={'ip6gre0\x00'})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000007f40)={'syztnl1\x00', &(0x7f0000007ec0)={'ip6_vti0\x00', 0x0, 0x2b, 0x40, 0xc, 0x4d, 0x1a, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8, 0x80, 0xe, 0x8bb}}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x3c}}, 0x20000010) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) (async, rerun: 32)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) (async, rerun: 32)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7e}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000081}, 0x800) (rerun: 32)

313.662238ms ago: executing program 5 (id=7566):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000019c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000008927b80000000074000000740000000700000002000000000000110400000001000000050000000000000a030000000b00000000000007000000006c000000000500000d0000000010000000050000000b00000003000000100000000300000001000000040000000000000004000000020000000000000800000000060000000000000b00000000005f00018f0043eaf9c63500d4801c95c891742f838f854eaf55f3ddf0b1c6382ce96949b80d8d98382d8662"], &(0x7f00000009c0)=""/4096, 0x93, 0x1000, 0x0, 0x8}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, r0}, 0x94)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000004, 0x42072, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000100000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

305.04379ms ago: executing program 3 (id=7567):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
sendmsg$can_j1939(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x40, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x8, 0x1, @private=0xa010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
recvmsg(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x101)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10)
syz_extract_tcp_res(&(0x7f0000000280)={<r10=>0x41424344}, 0x7c0, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000380)={@random="68c4e5304ce4", @random="33cffa99ad9b", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "45bd1b", 0x34, 0x6, 0x0, @mcast1, @local, {[], {{0x4e21, 0x4001, 0x41424344, r10, 0x0, 0x0, 0xd, 0x2, 0xfffc, 0x0, 0x0, {[@generic={0x3, 0x2}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x8, 0x8001}, @sack={0x5, 0xe, [0xd8, 0x9b5, 0xffffcdee]}]}}}}}}}}, 0x0)
r11 = socket$tipc(0x1e, 0x5, 0x0)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
bind$tipc(r11, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10)
sendmsg$tipc(r11, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x340, 0x11, 0x148, 0x340, 0x0, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x80, 0x6, 0x88000000, 0x3, 0x7, 0x0, 0x8}, {0x100000000000000}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x3ff, 0x0, '\x00', {0x6}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {0xff}}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x9, 'snmp\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560)

25.398616ms ago: executing program 6 (id=7568):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', <r2=>0x0, 0x4, 0x8, 0x0, 0x3, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x2f}, 0x7800, 0x40, 0x8, 0x4}})
sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@allocspi={0x1dc, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x0, 0x33}, @in6=@empty, {0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@sa={0xe4, 0x6, {{@in=@private=0xa010102, @in=@rand_addr=0x64010100, 0x4e20, 0x101, 0x4e21, 0x3cf, 0xa, 0x20, 0x20, 0x33, r2}, {@in=@multicast2, 0x4d3, 0x32}, @in6=@local, {0x80000000, 0x1, 0x5, 0x900000000, 0x9, 0x1fd, 0x1, 0xfffffffffffffff9}, {0x1, 0x3, 0x0, 0x10001}, {0x7fffffff, 0x9, 0x8}, 0x70bd2d, 0x34ff, 0x2, 0x3, 0xef, 0x26}}]}, 0x1dc}}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r3}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x4)
bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4)
write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc6}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
socket$inet(0x2, 0x1, 0x0) (async)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) (async)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async)
connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x0, 0x3, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x2f}, 0x7800, 0x40, 0x8, 0x4}}) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@allocspi={0x1dc, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x0, 0x33}, @in6=@empty, {0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@sa={0xe4, 0x6, {{@in=@private=0xa010102, @in=@rand_addr=0x64010100, 0x4e20, 0x101, 0x4e21, 0x3cf, 0xa, 0x20, 0x20, 0x33, r2}, {@in=@multicast2, 0x4d3, 0x32}, @in6=@local, {0x80000000, 0x1, 0x5, 0x900000000, 0x9, 0x1fd, 0x1, 0xfffffffffffffff9}, {0x1, 0x3, 0x0, 0x10001}, {0x7fffffff, 0x9, 0x8}, 0x70bd2d, 0x34ff, 0x2, 0x3, 0xef, 0x26}}]}, 0x1dc}}, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r3}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) (async)
socket$netlink(0x10, 0x3, 0x4) (async)
bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) (async)
write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc6}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) (async)

14.18262ms ago: executing program 1 (id=7569):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=@newtaction={0x18, 0x76, 0x1, 0x70bd2b, 0x25d7dbfc, {}, [{0x4}]}, 0x18}}, 0x0)

0s ago: executing program 4 (id=7570):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002100000426bd7000fedbdf2502142000050000081400000008000200ffffffff08000d000400000008000200e00000020c000c400000000020000006"], 0x40}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8041}, 0x40)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

T31328] tipc: Resetting bearer <eth:syzkaller0>
[  805.280631][T31352] tipc: Failed to remove unknown binding: 66,0,0/0:1130981791/1130981793
[  805.304379][T31352] tipc: Failed to remove unknown binding: 66,0,0/0:1130981791/1130981792
[  805.353475][T31352] tipc: Failed to remove unknown binding: 66,0,0/0:1130981791/1130981793
[  805.390213][T31352] tipc: Failed to remove unknown binding: 66,0,0/0:1130981791/1130981792
[  808.282206][T31328] tipc: Disabling bearer <eth:syzkaller0>
[  808.328101][ T5761] tipc: Node number set to 1375233283
[  808.349648][T31361] ip6tnl1: entered promiscuous mode
[  808.358043][T31361] ip6tnl1: entered allmulticast mode
[  808.438090][T31372] bridge0: entered allmulticast mode
[  808.564486][T31386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6479'.
[  808.682437][T31386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6479'.
[  808.709790][T31387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6477'.
[  808.932956][T31403] sctp: [Deprecated]: syz.0.6483 (pid 31403) Use of int in max_burst socket option.
[  808.932956][T31403] Use struct sctp_assoc_value instead
[  808.947748][T31395] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6481'.
[  809.248723][T31413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6485'.
[  809.612318][T31428] netlink: 'syz.3.6490': attribute type 21 has an invalid length.
[  809.642692][T31428] netlink: 'syz.3.6490': attribute type 22 has an invalid length.
[  809.683999][T31428] netlink: 'syz.3.6490': attribute type 23 has an invalid length.
[  809.694107][T31428] netlink: 'syz.3.6490': attribute type 25 has an invalid length.
[  809.708152][T31428] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6490'.
[  809.846417][T31444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6495'.
[  809.933900][T31448] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  809.947833][T31447] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  809.964122][T31450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6496'.
[  809.977828][T31453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6496'.
[  809.987655][T31448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6494'.
[  810.034711][T31447] ���: renamed from bond_slave_0
[  810.286496][T31466] netlink: 'syz.3.6498': attribute type 29 has an invalid length.
[  810.310153][T31461] netlink: 'syz.3.6498': attribute type 29 has an invalid length.
[  810.819846][T31494] netlink: 'syz.1.6505': attribute type 2 has an invalid length.
[  810.847477][T31495] netlink: 'syz.1.6505': attribute type 2 has an invalid length.
[  810.987320][T31505] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  811.208827][T31515] netlink: 'syz.4.6510': attribute type 1 has an invalid length.
[  811.392436][T31515] 8021q: adding VLAN 0 to HW filter on device bond5
[  811.417689][T31516] tipc: Started in network mode
[  811.449193][T31516] tipc: Node identity ac14140f, cluster identity 4711
[  811.495734][T31516] tipc: New replicast peer: 172.30.0.1
[  811.517830][T31516] tipc: Enabled bearer <udp:syz2>, priority 5
[  811.548076][T31511] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  811.605900][T31523] macvlan2: entered promiscuous mode
[  811.633663][T31523] macvlan2: entered allmulticast mode
[  811.662534][T31541] xt_hashlimit: size too large, truncated to 1048576
[  811.666995][T31523] bond5: entered promiscuous mode
[  811.692640][T31523] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  811.700794][T15476] IPVS: starting estimator thread 0...
[  811.711538][T31523] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  811.747755][T31523] bond5: left promiscuous mode
[  811.804935][T31544] IPVS: using max 39 ests per chain, 93600 per kthread
[  812.319837][T31568] netlink: 'syz.1.6522': attribute type 1 has an invalid length.
[  812.338320][T31565] syzkaller0: entered promiscuous mode
[  812.358089][T31565] syzkaller0: entered allmulticast mode
[  812.386697][ T5638] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  812.586526][T31568] 8021q: adding VLAN 0 to HW filter on device bond1
[  812.634619][T13880] tipc: Node number set to 2886997007
[  812.676195][T31576] bond1: (slave veth11): Enslaving as an active interface with a down link
[  812.685735][T31577] syzkaller1: entered promiscuous mode
[  812.691511][T31577] syzkaller1: entered allmulticast mode
[  812.794032][T31568] bond1: (slave veth13): Enslaving as an active interface with a down link
[  813.014751][T31588] x_tables: duplicate underflow at hook 4
[  813.179971][T31592] syzkaller0: entered promiscuous mode
[  813.255271][T31592] syzkaller0: entered allmulticast mode
[  813.288380][T31599] IPVS: dh: TCP 172.20.20.170:0 - no destination available
[  813.551586][T31610] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  813.609200][T31608] __nla_validate_parse: 7 callbacks suppressed
[  813.609218][T31608] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6532'.
[  813.609623][T31610] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  813.628552][T31608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6532'.
[  813.681509][T31608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6532'.
[  813.708841][T31610] tipc: Enabled bearer <udp:syz0>, priority 5
[  814.044089][T31625] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  814.084210][T31641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6540'.
[  814.223243][T31637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6539'.
[  814.699817][T31667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6546'.
[  814.750344][T31667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6546'.
[  814.883466][T31677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6549'.
[  814.935075][T31677] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6549'.
[  814.963621][T31686] batadv_slave_1: entered promiscuous mode
[  815.049635][T31693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6552'.
[  815.062647][T31686] batadv_slave_1: left promiscuous mode
[  815.135316][T31703] validate_nla: 1 callbacks suppressed
[  815.135335][T31703] netlink: 'syz.4.6556': attribute type 1 has an invalid length.
[  815.172986][T31701] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  815.255495][T31703] 8021q: adding VLAN 0 to HW filter on device bond6
[  815.326319][T31703] 8021q: adding VLAN 0 to HW filter on device bond6
[  815.341700][T31703] bond6: (slave gre1): The slave device specified does not support setting the MAC address
[  815.354232][T31703] bond6: (slave gre1): Error -95 calling set_mac_address
[  815.413099][T31714] netlink: 'syz.1.6557': attribute type 6 has an invalid length.
[  815.448478][T31714] netlink: 'syz.1.6557': attribute type 5 has an invalid length.
[  815.481866][T31716] gretap2: entered promiscuous mode
[  815.496890][T31716] bond6: (slave gretap2): making interface the new active one
[  815.506445][T31716] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  815.528065][T31718] macvlan2: entered promiscuous mode
[  815.533465][T31718] macvlan2: entered allmulticast mode
[  815.540356][T31718] bond6: entered promiscuous mode
[  815.546284][T31718] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  815.557193][T31718] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  815.569334][T31718] bond6: left promiscuous mode
[  815.649590][T31727] netlink: 'syz.5.6562': attribute type 10 has an invalid length.
[  815.668400][T31714] netlink: 'syz.1.6557': attribute type 6 has an invalid length.
[  815.676865][T31727] team0: Port device veth1_to_hsr added
[  815.724787][T31714] netlink: 'syz.1.6557': attribute type 5 has an invalid length.
[  815.900841][T31725] bond1 (unregistering): Released all slaves
[  815.915642][T31742] openvswitch: netlink: Flow actions attr not present in new flow.
[  815.946544][T31743] openvswitch: netlink: Flow actions attr not present in new flow.
[  815.962186][T31745] netlink: 'syz.1.6566': attribute type 21 has an invalid length.
[  816.055883][T31748] vlan2: entered allmulticast mode
[  816.062152][T31748] bond0: entered allmulticast mode
[  816.068070][T31748] bond_slave_0: entered allmulticast mode
[  816.074069][T31748] bond_slave_1: entered allmulticast mode
[  816.105320][T31748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  816.114250][T31748] bond_slave_0: left allmulticast mode
[  816.126860][T31748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  816.136979][T31748] bond_slave_1: left allmulticast mode
[  816.145906][T31748] bond0 (unregistering): Released all slaves
[  816.795338][T31764] netlink: 'syz.3.6570': attribute type 18 has an invalid length.
[  818.646177][T31727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  818.995254][T31780] __nla_validate_parse: 10 callbacks suppressed
[  818.995274][T31780] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6575'.
[  819.045071][T31780] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6575'.
[  819.197759][T31788] mac80211_hwsim hwsim79 wlan0: entered promiscuous mode
[  819.280736][T31788] batman_adv: batadv0: Adding interface: wlan0
[  819.338298][T31788] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1552 would solve the problem.
[  819.411679][T31795] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6578'.
[  819.422039][T31788] batman_adv: batadv0: Interface activated: wlan0
[  819.442872][T31791] netlink: 'syz.1.6579': attribute type 12 has an invalid length.
[  819.491902][T31795] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6578'.
[  820.317212][T31812] tipc: Started in network mode
[  820.335089][T31812] tipc: Node identity 080211000001, cluster identity 4711
[  820.363035][T31812] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  820.411350][T31812] mac80211_hwsim hwsim77 syzkaller0: entered promiscuous mode
[  820.431902][T31817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6585'.
[  820.442584][T31812] mac80211_hwsim hwsim77 syzkaller0: entered allmulticast mode
[  820.502688][T31812] tipc: Resetting bearer <eth:syzkaller0>
[  820.740227][T31834] syz.4.6591: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  820.784815][T31834] CPU: 1 UID: 0 PID: 31834 Comm: syz.4.6591 Not tainted syzkaller #0 PREEMPT(full) 
[  820.784843][T31834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  820.784856][T31834] Call Trace:
[  820.784865][T31834]  <TASK>
[  820.784875][T31834]  dump_stack_lvl+0xe8/0x150
[  820.784910][T31834]  warn_alloc+0x249/0x340
[  820.784942][T31834]  ? stack_trace_save+0xa9/0x100
[  820.784979][T31834]  ? __pfx_warn_alloc+0x10/0x10
[  820.785017][T31834]  ? kasan_save_track+0x4f/0x80
[  820.785046][T31834]  ? kasan_save_track+0x3e/0x80
[  820.785073][T31834]  ? __kasan_kmalloc+0x93/0xb0
[  820.785102][T31834]  ? __kmalloc_cache_noprof+0x31c/0x660
[  820.785130][T31834]  ? xskq_create+0x56/0x170
[  820.785276][T31834]  ? xsk_setsockopt+0x54c/0x990
[  820.785304][T31834]  ? do_sock_setsockopt+0x17c/0x1b0
[  820.785328][T31834]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  820.785349][T31834]  ? do_syscall_64+0x174/0x580
[  820.785376][T31834]  __vmalloc_node_range_noprof+0x132/0x1750
[  820.785440][T31834]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  820.785477][T31834]  ? __kasan_kmalloc+0x93/0xb0
[  820.785514][T31834]  vmalloc_user_noprof+0xad/0xe0
[  820.785544][T31834]  ? xskq_create+0xbf/0x170
[  820.785576][T31834]  xskq_create+0xbf/0x170
[  820.785610][T31834]  xsk_init_queue+0x8a/0xe0
[  820.785644][T31834]  xsk_setsockopt+0x54c/0x990
[  820.785677][T31834]  ? __pfx_xsk_setsockopt+0x10/0x10
[  820.785706][T31834]  ? __pfx_aa_sk_perm+0x10/0x10
[  820.785742][T31834]  ? aa_sock_opt_perm+0xff/0x1a0
[  820.785775][T31834]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  820.785803][T31834]  ? __pfx_xsk_setsockopt+0x10/0x10
[  820.785834][T31834]  do_sock_setsockopt+0x17c/0x1b0
[  820.785861][T31834]  __x64_sys_setsockopt+0x13d/0x1b0
[  820.785886][T31834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.785910][T31834]  do_syscall_64+0x174/0x580
[  820.785932][T31834]  ? trace_irq_disable+0x3b/0x140
[  820.785964][T31834]  ? clear_bhb_loop+0x40/0x90
[  820.785990][T31834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.786012][T31834] RIP: 0033:0x7f80a9d9ce59
[  820.786033][T31834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  820.786054][T31834] RSP: 002b:00007f80aad07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  820.786076][T31834] RAX: ffffffffffffffda RBX: 00007f80aa016090 RCX: 00007f80a9d9ce59
[  820.786090][T31834] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  820.786103][T31834] RBP: 00007f80a9e32d6f R08: 0000000000000004 R09: 0000000000000000
[  820.786118][T31834] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  820.786131][T31834] R13: 00007f80aa016128 R14: 00007f80aa016090 R15: 00007ffccf8b37c8
[  820.786165][T31834]  </TASK>
[  820.787145][T31834] Mem-Info:
[  820.915604][T31845] netlink: 220 bytes leftover after parsing attributes in process `syz.5.6593'.
[  820.974534][T31834] active_anon:9037 inactive_anon:0 isolated_anon:0
[  820.974534][T31834]  active_file:3540 inactive_file:40276 isolated_file:0
[  820.974534][T31834]  unevictable:768 dirty:159 writeback:0
[  820.974534][T31834]  slab_reclaimable:13393 slab_unreclaimable:199093
[  820.974534][T31834]  mapped:36052 shmem:1424 pagetables:3627
[  820.974534][T31834]  sec_pagetables:0 bounce:0
[  820.974534][T31834]  kernel_misc_reclaimable:0
[  820.974534][T31834]  free:1178165 free_pcp:25985 free_cma:0
[  821.199678][T31834] Node 0 active_anon:36048kB inactive_anon:0kB active_file:14160kB inactive_file:160908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:58192kB dirty:636kB writeback:0kB shmem:4160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18320kB pagetables:14360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  821.236890][T31834] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:90016kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  821.262783][T31832] netlink: 'syz.4.6591': attribute type 10 has an invalid length.
[  821.320936][T31834] Node 0 DMA free:11196kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:68kB local_pcp:24kB free_cma:0kB
[  821.337308][T31832] team0: Port device dummy0 added
[  821.359714][T31834] lowmem_reserve[]: 0 2492 2493 2493 2493
[  821.365723][T31834] Node 0 DMA32 free:1076080kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35948kB inactive_anon:0kB active_file:14160kB inactive_file:160908kB unevictable:1536kB writepending:636kB zspages:0kB present:3129332kB managed:2552556kB mlocked:0kB bounce:0kB free_pcp:38512kB local_pcp:18904kB free_cma:0kB
[  821.404695][   T24] tipc: Node number set to 134418688
[  821.442710][T31834] lowmem_reserve[]: 0 0 0 0 0
[  821.467360][T31834] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  821.510740][T31832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6591'.
[  821.527010][T31834] lowmem_reserve[]: 0 0 0 0 0
[  821.541351][T31832] openvswitch: netlink: Message has 2 unknown bytes.
[  821.574987][T31834] Node 1 Normal free:3624672kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:65880kB local_pcp:31476kB free_cma:0kB
[  821.629117][T31862] netlink: 'syz.5.6596': attribute type 16 has an invalid length.
[  821.635748][T31834] lowmem_reserve[]: 0 0 0 0 0
[  821.637262][T31832] netlink: 'syz.4.6591': attribute type 10 has an invalid length.
[  821.641701][T31834] Node 0 DMA: 1*4kB (U) 1*8kB (U) 
[  821.649832][T31862] netlink: 'syz.5.6596': attribute type 17 has an invalid length.
[  821.696285][T31834] 1*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (M) 1*4096kB (U) = 11196kB
[  821.709888][T31862] 8021q: adding VLAN 0 to HW filter on device bond0
[  821.725979][T31834] Node 0 DMA32: 6422*4kB (UME) 8303*8kB (UME) 4654*16kB (UME) 174*32kB (UME) 68*64kB (UME) 1065*128kB (UME) 797*256kB (UM) 452*512kB (UM) 158*1024kB (UM) 81*2048kB (UM) 0*4096kB = 1075952kB
[  821.738731][T31862] 8021q: adding VLAN 0 to HW filter on device team0
[  821.772946][T31862] 8021q: adding VLAN 0 to HW filter on device batadv0
[  821.774537][T31834] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  821.804566][T31834] Node 1 Normal: 5*4kB (UM) 8*8kB (UM) 10*16kB (UM) 9*32kB (UM) 14*64kB (UM) 9*128kB (UM) 7*256kB (UM) 11*512kB (UM) 8*1024kB (UM) 9*2048kB (U) 876*4096kB (UM) = 3624724kB
[  821.864502][T31834] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  821.890247][T31834] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  821.913128][T31834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  821.925939][T31834] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  821.975573][T31834] 45236 total pagecache pages
[  822.005311][T31834] 0 pages in swap cache
[  822.021388][T31834] Free swap  = 124996kB
[  822.034214][T31834] Total swap = 124996kB
[  822.045721][T31834] 2097051 pages RAM
[  822.049617][T31862] geneve2: left promiscuous mode
[  822.055242][T31834] 0 pages HighMem/MovableOnly
[  822.060019][T31862] geneve2: left allmulticast mode
[  822.065737][T31834] 427129 pages reserved
[  822.071498][T31834] 0 pages cma reserved
[  822.079170][T31862] 8021q: adding VLAN 0 to HW filter on device bond4
[  822.094342][T31862] bond5: left promiscuous mode
[  822.103930][T31862] ipvlan2: left allmulticast mode
[  822.109191][T31862] bond5: left allmulticast mode
[  822.114699][T31862] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  822.131213][T31862] mac80211_hwsim hwsim77 syzkaller0: left promiscuous mode
[  822.138703][T31862] mac80211_hwsim hwsim77 syzkaller0: left allmulticast mode
[  822.164796][T31832] team0: Port device dummy0 removed
[  822.174713][T31832] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  822.299710][T31867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6598'.
[  822.349714][T31867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6598'.
[  822.368193][T31867] netlink: 'syz.3.6598': attribute type 14 has an invalid length.
[  823.547176][T31908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6610'.
[  823.709284][T31910] veth15: entered allmulticast mode
[  823.750238][T31910] bond0: (slave veth15): Enslaving as an active interface with an up link
[  823.780995][T31911] bond0 (unregistering): (slave veth15): Releasing backup interface
[  823.799283][T31911] bond0 (unregistering): Released all slaves
[  824.221319][T31940] netlink: 'syz.1.6615': attribute type 1 has an invalid length.
[  824.348513][T31948] netlink: 'syz.1.6615': attribute type 83 has an invalid length.
[  824.413312][T31940] 8021q: adding VLAN 0 to HW filter on device bond0
[  824.803743][T31969] lo speed is unknown, defaulting to 1000
[  825.024125][T31982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6627'.
[  825.135714][ T5897] IPVS: starting estimator thread 0...
[  825.222498][T31988] xt_hashlimit: size too large, truncated to 1048576
[  825.235605][T31987] IPVS: using max 30 ests per chain, 72000 per kthread
[  825.301678][T31991] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.368260][T31995] netlink: 'syz.1.6629': attribute type 1 has an invalid length.
[  825.402584][T31995] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6629'.
[  825.409327][T31991] bridge_slave_0 (unregistering): left allmulticast mode
[  825.454229][T31991] bridge_slave_0 (unregistering): left promiscuous mode
[  825.476946][T31991] bridge0: port 1(bridge_slave_0) entered disabled state
[  826.279792][T32030] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6637'.
[  826.357648][T32035] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6637'.
[  826.368546][T32026] bond6: option packets_per_slave: invalid value (1048582)
[  826.376352][T32026] bond6: option packets_per_slave: allowed values 0 - 65535
[  826.392629][T32026] bond6 (unregistering): Released all slaves
[  826.520965][T32037] erspan0: entered promiscuous mode
[  826.603223][T32044] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6641'.
[  826.618272][T32045] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6641'.
[  829.356661][T32038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  829.567343][T32076] netlink: 'syz.4.6646': attribute type 1 has an invalid length.
[  830.014946][T32091] netlink: 51 bytes leftover after parsing attributes in process `syz.1.6650'.
[  830.172955][T32115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6655'.
[  830.473258][T32128] syzkaller1: entered promiscuous mode
[  830.479923][T32128] syzkaller1: entered allmulticast mode
[  830.524389][T32124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6657'.
[  830.835392][T23776] udevd[23776]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  831.017063][T32141] netlink: 'syz.4.6661': attribute type 21 has an invalid length.
[  831.044854][T32141] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6661'.
[  831.082415][T32141] netlink: 'syz.4.6661': attribute type 4 has an invalid length.
[  831.118954][T32141] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6661'.
[  831.133976][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  831.146833][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  831.156895][T32150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6663'.
[  831.167550][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  831.180333][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  831.190795][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  831.304043][T32150] ipvlan2: entered allmulticast mode
[  831.312822][T32150] gretap0: entered allmulticast mode
[  831.660991][T32168] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6667'.
[  831.679320][T32168] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6667'.
[  831.715237][T32168] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6667'.
[  831.994195][T32183] netlink: 'syz.3.6669': attribute type 6 has an invalid length.
[  832.015355][T32186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6668'.
[  832.188815][T32195] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6672'.
[  832.245908][T32190] ip_vti0: entered promiscuous mode
[  832.410229][T32145] lo speed is unknown, defaulting to 1000
[  832.675499][T32206] syzkaller0: entered promiscuous mode
[  832.695472][T32206] syzkaller0: entered allmulticast mode
[  832.783322][T32206] netlink: 'syz.4.6676': attribute type 3 has an invalid length.
[  833.082830][T32200] lo speed is unknown, defaulting to 1000
[  833.181388][T32233] veth1: entered promiscuous mode
[  833.198201][T32233] macsec1: entered promiscuous mode
[  833.204213][T32233] macsec1: entered allmulticast mode
[  833.210871][T32233] veth1: entered allmulticast mode
[  833.265444][ T5638] Bluetooth: hci4: command tx timeout
[  833.411595][T32241] bridge0: entered allmulticast mode
[  833.557249][T32253] netlink: 'syz.3.6683': attribute type 9 has an invalid length.
[  833.675476][T32260] nbd: nbd64 already in use
[  833.990224][T23776] udevd[23776]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  834.466589][T32277] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  834.477540][T32281] syzkaller0: entered promiscuous mode
[  834.483105][T32281] syzkaller0: entered allmulticast mode
[  834.503226][T32145] bridge0: port 1(bridge_slave_0) entered blocking state
[  834.525928][T32145] bridge0: port 1(bridge_slave_0) entered disabled state
[  834.539995][T32145] bridge_slave_0: entered allmulticast mode
[  834.560830][T32145] bridge_slave_0: entered promiscuous mode
[  834.570106][T32281] tipc: Resetting bearer <eth:syzkaller0>
[  834.601460][T32281] tipc: Disabling bearer <eth:syzkaller0>
[  834.629401][T32145] bridge0: port 2(bridge_slave_1) entered blocking state
[  834.642663][T32145] bridge0: port 2(bridge_slave_1) entered disabled state
[  834.653989][T32145] bridge_slave_1: entered allmulticast mode
[  834.664124][T32145] bridge_slave_1: entered promiscuous mode
[  834.770642][T32292] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  834.821419][T32145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  834.834118][T32292] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  834.854386][T32145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  834.954297][T32145] team0: Port device team_slave_0 added
[  834.984025][T32145] team0: Port device team_slave_1 added
[  835.111653][T32145] batman_adv: batadv0: Adding interface: batadv_slave_0
[  835.123309][T32145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  835.159443][T32145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  835.253704][T32145] batman_adv: batadv0: Adding interface: batadv_slave_1
[  835.267307][T32145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  835.308759][T32315] __nla_validate_parse: 10 callbacks suppressed
[  835.308777][T32315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6700'.
[  835.315890][T32145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  835.345282][ T5638] Bluetooth: hci4: command tx timeout
[  835.364672][T32317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6700'.
[  835.373699][T32317] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6700'.
[  835.383114][T32317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6700'.
[  835.396942][T32317] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6700'.
[  835.437435][T32317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6700'.
[  835.485340][T32145] hsr_slave_0: entered promiscuous mode
[  835.501217][T32145] hsr_slave_1: entered promiscuous mode
[  835.515430][T32145] debugfs: 'hsr0' already exists in 'hsr'
[  835.533007][T32145] Cannot create hsr debugfs directory
[  835.659862][T32315] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6700'.
[  835.942185][T32332] openvswitch: netlink: IP tunnel dst address not specified
[  836.234162][T32346] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6710'.
[  836.251232][T32344] smc: net device hsr0 applied user defined pnetid SYZ2
[  836.266946][T32347] netlink: 'syz.3.6709': attribute type 1 has an invalid length.
[  836.347676][T32350] netlink: 'syz.4.6711': attribute type 3 has an invalid length.
[  836.381445][T32347] 8021q: adding VLAN 0 to HW filter on device bond3
[  836.401922][T32344] macvlan2: entered promiscuous mode
[  836.407660][T32344] macvlan2: entered allmulticast mode
[  836.413368][T32344] bond3: entered allmulticast mode
[  836.419551][T32344] bond3: entered promiscuous mode
[  836.425089][T32352] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6711'.
[  836.439021][T32344] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  836.464102][T32344] team0: Port device macvlan2 added
[  836.516163][T32354] netlink: zone id is out of range
[  836.521475][T32354] netlink: zone id is out of range
[  836.527239][T32354] netlink: zone id is out of range
[  836.532498][T32354] netlink: zone id is out of range
[  836.538569][T32347] bond3: (slave ip6gretap1): making interface the new active one
[  836.538707][T32354] netlink: zone id is out of range
[  836.558361][T32354] netlink: zone id is out of range
[  836.559236][T32347] ip6gretap1: entered promiscuous mode
[  836.563570][T32354] netlink: zone id is out of range
[  836.575520][T32355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6712'.
[  836.585787][T32347] ip6gretap1: entered allmulticast mode
[  836.597646][T32347] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  836.609911][T32352] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  836.623963][T32352] bond0 (unregistering): Released all slaves
[  836.897992][T32145] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  836.923298][T32362] netlink: 'syz.1.6714': attribute type 3 has an invalid length.
[  836.949953][T32145] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  836.976478][T32145] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  836.990601][T32145] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  836.999553][T32145] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  837.012751][T32145] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  837.033448][T32145] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  837.066050][T32145] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  837.260973][T32380] netlink: 'syz.5.6718': attribute type 2 has an invalid length.
[  837.412964][T32145] 8021q: adding VLAN 0 to HW filter on device bond0
[  837.425501][ T5638] Bluetooth: hci4: command tx timeout
[  837.538616][T32145] 8021q: adding VLAN 0 to HW filter on device team0
[  837.595609][T32392] ip6gre2: entered promiscuous mode
[  837.602915][T32392] ip6gre2: entered allmulticast mode
[  837.632033][T23586] bridge0: port 1(bridge_slave_0) entered blocking state
[  837.639250][T23586] bridge0: port 1(bridge_slave_0) entered forwarding state
[  837.685751][T32404] netlink: 'syz.4.6723': attribute type 10 has an invalid length.
[  837.697175][T23583] bridge0: port 2(bridge_slave_1) entered blocking state
[  837.704395][T23583] bridge0: port 2(bridge_slave_1) entered forwarding state
[  837.856423][T32410] netlink: 'syz.3.6726': attribute type 13 has an invalid length.
[  837.876032][T32410] netlink: 'syz.3.6726': attribute type 11 has an invalid length.
[  838.756746][T32145] 8021q: adding VLAN 0 to HW filter on device batadv0
[  838.780722][T32447] netlink: 'syz.1.6733': attribute type 1 has an invalid length.
[  839.173417][T32145] veth0_vlan: entered promiscuous mode
[  839.211593][T32145] veth1_vlan: entered promiscuous mode
[  839.338014][T32145] veth0_macvtap: entered promiscuous mode
[  839.382471][T32145] veth1_macvtap: entered promiscuous mode
[  839.490860][T32145] batman_adv: batadv0: Interface activated: batadv_slave_0
[  839.508475][ T5638] Bluetooth: hci4: command tx timeout
[  839.569200][T32145] batman_adv: batadv0: Interface activated: batadv_slave_1
[  839.757141][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  839.819723][T23586] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  839.861026][T23586] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  839.884130][T23586] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  840.361332][T11019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  840.388280][T11019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  840.789941][T32482] tipc: Resetting bearer <eth:syzkaller0>
[  841.002257][T32482] batman_adv: batadv0: Interface deactivated: wlan0
[  841.362876][ T5638] Bluetooth: hci1: command 0x0406 tx timeout
[  841.560934][T32496] __nla_validate_parse: 14 callbacks suppressed
[  841.560969][T32496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6745'.
[  841.633793][T32496] vlan0: entered promiscuous mode
[  842.112914][T32495] netlink: 'syz.5.6745': attribute type 1 has an invalid length.
[  842.615410][T32504] batadv1: entered promiscuous mode
[  842.673131][T32504] batadv1: entered allmulticast mode
[  842.727793][T32510] netlink: 'syz.4.6750': attribute type 2 has an invalid length.
[  842.802222][T32511] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6750'.
[  842.863695][T32512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6750'.
[  844.222437][T23586] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  844.998229][T32535] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  845.067338][T23586] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  845.435735][T32539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6758'.
[  845.519547][T32542] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  845.543392][T32544] netlink: 'syz.4.6759': attribute type 10 has an invalid length.
[  845.921691][T32542] bridge0: port 2(bridge_slave_1) entered disabled state
[  846.142398][T32552] netlink: 480 bytes leftover after parsing attributes in process `syz.4.6762'.
[  846.204176][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  846.212818][T32552] netlink: 480 bytes leftover after parsing attributes in process `syz.4.6762'.
[  846.250330][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  846.283827][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  846.330201][T32149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  846.340867][T32149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  847.092217][T23586] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  847.391075][T32579] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6765'.
[  847.400358][T32574] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component
[  847.620753][T23586] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  847.871858][T32573] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  847.884726][T32585] netlink: 'syz.1.6766': attribute type 21 has an invalid length.
[  847.923076][T32585] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6766'.
[  847.951953][T32588] netlink: 'syz.4.6767': attribute type 1 has an invalid length.
[  848.005185][T32589] netlink: 'syz.1.6766': attribute type 21 has an invalid length.
[  848.058426][T32589] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6766'.
[  848.331025][T32588] 8021q: adding VLAN 0 to HW filter on device bond0
[  848.389173][T32585] netlink: 'syz.1.6766': attribute type 4 has an invalid length.
[  848.427296][T32585] netlink: 'syz.1.6766': attribute type 5 has an invalid length.
[  848.464229][T32585] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6766'.
[  848.473736][T32149] Bluetooth: hci4: command tx timeout
[  848.729181][T32590] bond0: (slave gretap3): making interface the new active one
[  848.805382][T32590] bond0: (slave gretap3): Enslaving as an active interface with an up link
[  848.829045][T32589] netlink: 'syz.1.6766': attribute type 4 has an invalid length.
[  848.874954][T32589] netlink: 'syz.1.6766': attribute type 5 has an invalid length.
[  848.899184][T32589] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6766'.
[  849.114501][T32606] netlink: 4988 bytes leftover after parsing attributes in process `syz.4.6771'.
[  849.179503][T32606] net_ratelimit: 3724 callbacks suppressed
[  849.179522][T32606] openvswitch: netlink: Flow actions attr not present in new flow.
[  849.284293][T32605] 8021q: adding VLAN 0 to HW filter on device batadv1
[  849.324297][T32605] team0: Port device batadv1 added
[  849.662988][T32620] netlink: 'syz.4.6775': attribute type 3 has an invalid length.
[  849.889311][T32623] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  849.992907][T32616] syzkaller0: entered promiscuous mode
[  850.037698][T32616] syzkaller0: entered allmulticast mode
[  850.103447][T32616] tipc: Resetting bearer <eth:syzkaller0>
[  850.156035][T32626] --map-set only usable from mangle table
[  850.227911][T32628] syzkaller0: entered promiscuous mode
[  850.250307][T32628] syzkaller0: entered allmulticast mode
[  850.309242][T32621] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  850.422211][T32633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6776'.
[  850.442938][T32633] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6776'.
[  850.463483][T32633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6776'.
[  850.499080][T32615] tipc: Resetting bearer <eth:syzkaller0>
[  850.554133][T32149] Bluetooth: hci4: command tx timeout
[  850.575308][T32637] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6778'.
[  850.655388][T32615] tipc: Disabling bearer <eth:syzkaller0>
[  851.068955][T32647] netlink: 'syz.1.6779': attribute type 3 has an invalid length.
[  851.315604][T23586] bridge_slave_1: left allmulticast mode
[  851.329725][T23586] bridge_slave_1: left promiscuous mode
[  851.353296][T23586] bridge0: port 2(bridge_slave_1) entered disabled state
[  851.391252][T23586] bridge_slave_0: left allmulticast mode
[  851.398239][T23586] bridge_slave_0: left promiscuous mode
[  851.404101][T23586] bridge0: port 1(bridge_slave_0) entered disabled state
[  851.804202][T23586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  851.829634][T23586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  851.847749][T23586] bond0 (unregistering): Released all slaves
[  851.869992][T32637] gretap0: entered promiscuous mode
[  852.299857][T32656] openvswitch: netlink: IP tunnel dst address not specified
[  852.651122][T32149] Bluetooth: hci4: command tx timeout
[  852.699267][T32663] xt_hashlimit: size too large, truncated to 1048576
[  852.730551][T32664] xt_hashlimit: size too large, truncated to 1048576
[  852.776154][T32554] lo speed is unknown, defaulting to 1000
[  853.121714][T32664] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  853.441324][T32677] netlink: 'syz.5.6785': attribute type 1 has an invalid length.
[  853.727858][T32677] 8021q: adding VLAN 0 to HW filter on device bond6
[  853.819480][T32688] __nla_validate_parse: 1 callbacks suppressed
[  853.819499][T32688] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6785'.
[  854.442105][T32697] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6789'.
[  854.705772][T32149] Bluetooth: hci4: command tx timeout
[  854.837943][T32705] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6791'.
[  854.894032][T32707] rdma_op ffff8880b0f831f0 conn xmit_rdma 0000000000000000
[  854.932703][ T5297] 8021q: adding VLAN 0 to HW filter on device eth1
[  855.589239][T32723] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6796'.
[  855.600204][T32734] geneve0: entered promiscuous mode
[  855.707473][T32723] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  855.903426][T23586] hsr_slave_0: left promiscuous mode
[  855.941374][T23586] hsr_slave_1: left promiscuous mode
[  855.962482][T23586] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  855.985895][T23586] batman_adv: batadv0: Removing interface: batadv_slave_0
[  856.015106][T32752] netlink: 'syz.5.6800': attribute type 4 has an invalid length.
[  856.038226][T23586] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  856.053638][T23586] batman_adv: batadv0: Removing interface: batadv_slave_1
[  856.081608][T32748] netlink: 'syz.5.6800': attribute type 4 has an invalid length.
[  856.110361][T23586] veth1_macvtap: left promiscuous mode
[  856.128956][T23586] veth0_macvtap: left promiscuous mode
[  856.177557][T23586] veth1_vlan: left promiscuous mode
[  856.198214][T32765] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6802'.
[  856.198349][T23586] veth0_vlan: left promiscuous mode
[  856.225751][T32765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6802'.
[  856.712434][T32149] Bluetooth: hci6: command 0x0406 tx timeout
[  856.845882][T23586] team0 (unregistering): Port device team_slave_1 removed
[  856.887554][T23586] team0 (unregistering): Port device team_slave_0 removed
[  857.109495][T32746] netlink: 'syz.1.6799': attribute type 3 has an invalid length.
[  857.459319][  T336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6807'.
[  858.162609][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2
[  858.239260][ T1178] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  858.295531][ T1178] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  858.316882][ T1178] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  858.458531][ T1178] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  858.870992][  T369] netlink: 'syz.1.6816': attribute type 1 has an invalid length.
[  859.016217][  T369] bond2: entered promiscuous mode
[  859.021785][  T369] 8021q: adding VLAN 0 to HW filter on device bond2
[  859.086111][  T376] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6817'.
[  859.136663][  T373] 8021q: adding VLAN 0 to HW filter on device bond2
[  859.178391][  T373] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  859.229962][  T387] netlink: 'syz.4.6818': attribute type 9 has an invalid length.
[  859.241721][  T373] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  859.277695][  T387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6818'.
[  859.333594][  T373] bond2: (slave vti0): making interface the new active one
[  859.360873][  T373] vti0: entered promiscuous mode
[  859.390009][  T373] bond2: (slave vti0): Enslaving as an active interface with an up link
[  859.443035][  T396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6819'.
[  859.646758][  T398] bridge0: port 1(veth3) entered blocking state
[  859.653469][  T398] bridge0: port 1(veth3) entered disabled state
[  859.660794][  T398] veth3: entered allmulticast mode
[  859.684299][  T398] veth3: entered promiscuous mode
[  859.728815][  T392] bridge0: port 2(veth0_to_bond) entered blocking state
[  859.749660][  T392] bridge0: port 2(veth0_to_bond) entered disabled state
[  859.774820][  T392] veth0_to_bond: entered allmulticast mode
[  859.824854][  T392] veth0_to_bond: entered promiscuous mode
[  859.923908][  T396] bridge0: port 3(veth5) entered blocking state
[  859.930723][  T396] bridge0: port 3(veth5) entered disabled state
[  859.937364][  T396] veth5: entered allmulticast mode
[  859.943686][  T396] veth5: entered promiscuous mode
[  859.979130][  T408] bridge3: entered promiscuous mode
[  859.985807][  T408] bridge3: entered allmulticast mode
[  859.993330][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3
[  860.000448][  T412] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6821'.
[  860.151212][T32554] bridge0: port 1(bridge_slave_0) entered blocking state
[  860.182002][T32554] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.211616][T32554] bridge_slave_0: entered allmulticast mode
[  860.236262][T32554] bridge_slave_0: entered promiscuous mode
[  860.251111][T32554] bridge0: port 2(bridge_slave_1) entered blocking state
[  860.263311][T32554] bridge0: port 2(bridge_slave_1) entered disabled state
[  860.270936][T32554] bridge_slave_1: entered allmulticast mode
[  860.279772][T32554] bridge_slave_1: entered promiscuous mode
[  860.350606][T32554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  860.370926][T32554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  860.420820][T32554] team0: Port device team_slave_0 added
[  860.437572][T32554] team0: Port device team_slave_1 added
[  860.500934][T32554] batman_adv: batadv0: Adding interface: batadv_slave_0
[  860.508342][T32554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  860.534780][T32554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  860.566658][T32554] batman_adv: batadv0: Adding interface: batadv_slave_1
[  860.573620][T32554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  860.608788][T32554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  860.706477][T32554] hsr_slave_0: entered promiscuous mode
[  860.726295][T32554] hsr_slave_1: entered promiscuous mode
[  860.732482][T32554] debugfs: 'hsr0' already exists in 'hsr'
[  860.740216][T32554] Cannot create hsr debugfs directory
[  861.828959][  T369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  861.903597][T32554] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  862.008569][T32554] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  862.032956][T32554] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  862.081645][T32554] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  862.121078][  T446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6828'.
[  862.135790][  T446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6828'.
[  862.150199][T32554] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  862.168682][  T446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6828'.
[  862.257004][T32554] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  862.285646][T32554] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  862.320116][T32554] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  862.668520][  T484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6835'.
[  862.722696][T32554] 8021q: adding VLAN 0 to HW filter on device bond0
[  862.776534][T32554] 8021q: adding VLAN 0 to HW filter on device team0
[  862.835083][T23586] bridge0: port 1(bridge_slave_0) entered blocking state
[  862.842291][T23586] bridge0: port 1(bridge_slave_0) entered forwarding state
[  862.892058][T23586] bridge0: port 2(bridge_slave_1) entered blocking state
[  862.899285][T23586] bridge0: port 2(bridge_slave_1) entered forwarding state
[  863.597721][  T509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6841'.
[  864.034379][  T543] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  864.181081][  T550] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[  864.340653][T32554] 8021q: adding VLAN 0 to HW filter on device batadv0
[  864.501317][  T564] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6852'.
[  864.585270][  T569] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6853'.
[  864.608233][  T569] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6853'.
[  865.400178][T32554] veth0_vlan: entered promiscuous mode
[  865.420523][  T608] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6862'.
[  865.450152][T32554] veth1_vlan: entered promiscuous mode
[  866.007950][  T620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6863'.
[  866.042926][T32554] veth0_macvtap: entered promiscuous mode
[  866.073157][  T624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6864'.
[  866.094439][T32554] veth1_macvtap: entered promiscuous mode
[  866.128268][  T624] netlink: 'syz.3.6864': attribute type 3 has an invalid length.
[  866.163311][T32554] batman_adv: batadv0: Interface activated: batadv_slave_0
[  866.168327][  T624] netlink: 'syz.3.6864': attribute type 16 has an invalid length.
[  866.208965][T32554] batman_adv: batadv0: Interface activated: batadv_slave_1
[  866.218403][  T624] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6864'.
[  866.235911][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  866.246725][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  866.299980][T11019] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  866.371527][T11019] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  866.421811][T11019] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  866.461507][T11019] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  866.545013][  T323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  866.822469][T11019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  866.858128][T11019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  867.000998][  T646] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  867.054294][  T646] syzkaller0: entered promiscuous mode
[  867.080132][  T646] syzkaller0: entered allmulticast mode
[  867.129221][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  867.169241][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  867.220472][  T646] tipc: Resetting bearer <eth:syzkaller0>
[  867.270645][T13882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  867.279249][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  867.319561][  T644] tipc: Resetting bearer <eth:syzkaller0>
[  867.442706][  T644] tipc: Disabling bearer <eth:syzkaller0>
[  867.740129][  T674] xt_TCPMSS: Only works on TCP SYN packets
[  867.791713][  T676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6874'.
[  867.886431][  T675] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6873'.
[  867.999126][  T683] netlink: 'syz.3.6876': attribute type 1 has an invalid length.
[  868.088482][  T684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6876'.
[  868.306356][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.314793][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.422207][  T683] 8021q: adding VLAN 0 to HW filter on device bond4
[  869.011415][  T716] syzkaller0: entered promiscuous mode
[  869.037291][  T716] syzkaller0: entered allmulticast mode
[  869.348764][T13880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  869.357154][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  869.436564][  T724] xt_hashlimit: size too large, truncated to 1048576
[  869.528983][  T725] __nla_validate_parse: 2 callbacks suppressed
[  869.529063][  T725] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6885'.
[  869.585023][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  869.728351][  T739] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  869.837665][  T740] netlink: 'syz.6.6887': attribute type 10 has an invalid length.
[  869.863684][  T740] 8021q: adding VLAN 0 to HW filter on device team0
[  869.889505][  T740] bond0: (slave team0): Enslaving as an active interface with an up link
[  870.386599][T13880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.394995][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.480522][  T760] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6891'.
[  870.627547][  T771] erspan0: entered promiscuous mode
[  870.884378][  T792] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6898'.
[  870.917978][  T792] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6898'.
[  870.971371][  T791] dvmrp1: entered allmulticast mode
[  871.050698][  T799] netlink: 'syz.6.6900': attribute type 16 has an invalid length.
[  871.093744][  T802] netlink: 'syz.4.6901': attribute type 10 has an invalid length.
[  871.117765][  T799] netlink: 'syz.6.6900': attribute type 17 has an invalid length.
[  871.131355][  T802] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6901'.
[  871.154407][  T796] bridge0: port 1(bridge_slave_0) entered disabled state
[  871.193014][  T796] bridge0: port 2(bridge_slave_1) entered disabled state
[  871.252494][  T810] netlink: 'syz.1.6903': attribute type 1 has an invalid length.
[  871.263985][  T811] netlink: 'syz.1.6903': attribute type 1 has an invalid length.
[  871.313259][  T799] bridge0: port 1(bridge_slave_0) entered blocking state
[  871.320432][  T799] bridge0: port 1(bridge_slave_0) entered forwarding state
[  871.333895][  T799] bridge0: port 2(bridge_slave_1) entered blocking state
[  871.341113][  T799] bridge0: port 2(bridge_slave_1) entered forwarding state
[  871.426228][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  871.436260][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  871.543122][  T815] IPVS: Error connecting to the multicast addr
[  871.635655][  T818] netlink: 'syz.1.6905': attribute type 1 has an invalid length.
[  871.777390][  T833] xt_time: invalid argument - start or stop time greater than 23:59:59
[  871.793533][  T833] netlink: 'syz.6.6906': attribute type 21 has an invalid length.
[  871.828055][  T836] x_tables: duplicate underflow at hook 2
[  871.955726][  T818] bond3: (slave bridge4): making interface the new active one
[  871.973321][  T818] bond3: (slave bridge4): Enslaving as an active interface with an up link
[  871.986983][  T837] netlink: 'syz.4.6910': attribute type 287 has an invalid length.
[  872.060261][  T831] netlink: 'syz.5.6909': attribute type 1 has an invalid length.
[  872.068461][ T5642] Bluetooth: hci5: command 0x0406 tx timeout
[  872.110573][  T842] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6909'.
[  872.148082][  T845] syz.4.6911: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  872.196829][  T845] CPU: 1 UID: 0 PID: 845 Comm: syz.4.6911 Not tainted syzkaller #0 PREEMPT(full) 
[  872.196862][  T845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  872.196877][  T845] Call Trace:
[  872.196887][  T845]  <TASK>
[  872.196897][  T845]  dump_stack_lvl+0xe8/0x150
[  872.196929][  T845]  warn_alloc+0x249/0x340
[  872.196962][  T845]  ? stack_trace_save+0xa9/0x100
[  872.196998][  T845]  ? __pfx_warn_alloc+0x10/0x10
[  872.197036][  T845]  ? kasan_save_track+0x4f/0x80
[  872.197062][  T845]  ? kasan_save_track+0x3e/0x80
[  872.197088][  T845]  ? __kasan_kmalloc+0x93/0xb0
[  872.197116][  T845]  ? __kmalloc_cache_noprof+0x31c/0x660
[  872.197145][  T845]  ? xskq_create+0x56/0x170
[  872.197175][  T845]  ? xsk_setsockopt+0x54c/0x990
[  872.197202][  T845]  ? do_sock_setsockopt+0x17c/0x1b0
[  872.197225][  T845]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  872.197246][  T845]  ? do_syscall_64+0x174/0x580
[  872.197273][  T845]  __vmalloc_node_range_noprof+0x132/0x1750
[  872.197333][  T845]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  872.197368][  T845]  ? __kasan_kmalloc+0x93/0xb0
[  872.197402][  T845]  vmalloc_user_noprof+0xad/0xe0
[  872.197432][  T845]  ? xskq_create+0xbf/0x170
[  872.197464][  T845]  xskq_create+0xbf/0x170
[  872.197498][  T845]  xsk_init_queue+0x8a/0xe0
[  872.197530][  T845]  xsk_setsockopt+0x54c/0x990
[  872.197570][  T845]  ? __pfx_xsk_setsockopt+0x10/0x10
[  872.197600][  T845]  ? __pfx_aa_sk_perm+0x10/0x10
[  872.197633][  T845]  ? aa_sock_opt_perm+0xff/0x1a0
[  872.197668][  T845]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  872.197695][  T845]  ? __pfx_xsk_setsockopt+0x10/0x10
[  872.197726][  T845]  do_sock_setsockopt+0x17c/0x1b0
[  872.197754][  T845]  __x64_sys_setsockopt+0x13d/0x1b0
[  872.197780][  T845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  872.197804][  T845]  do_syscall_64+0x174/0x580
[  872.197826][  T845]  ? trace_irq_disable+0x3b/0x140
[  872.197857][  T845]  ? clear_bhb_loop+0x40/0x90
[  872.197882][  T845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  872.197903][  T845] RIP: 0033:0x7f80a9d9ce59
[  872.197922][  T845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  872.197941][  T845] RSP: 002b:00007f80aad28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  872.197963][  T845] RAX: ffffffffffffffda RBX: 00007f80aa015fa0 RCX: 00007f80a9d9ce59
[  872.197979][  T845] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  872.197993][  T845] RBP: 00007f80a9e32d6f R08: 0000000000000004 R09: 0000000000000000
[  872.198007][  T845] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  872.198021][  T845] R13: 00007f80aa016038 R14: 00007f80aa015fa0 R15: 00007ffccf8b37c8
[  872.198053][  T845]  </TASK>
[  872.198074][  T845] Mem-Info:
[  872.475754][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.484091][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.517221][  T852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6913'.
[  872.530637][  T849] netlink: 'syz.4.6911': attribute type 10 has an invalid length.
[  872.539519][  T845] active_anon:9195 inactive_anon:0 isolated_anon:0
[  872.539519][  T845]  active_file:3540 inactive_file:40299 isolated_file:0
[  872.539519][  T845]  unevictable:3618 dirty:244 writeback:0
[  872.539519][  T845]  slab_reclaimable:13739 slab_unreclaimable:197834
[  872.539519][  T845]  mapped:46091 shmem:4274 pagetables:3688
[  872.539519][  T845]  sec_pagetables:0 bounce:0
[  872.539519][  T845]  kernel_misc_reclaimable:0
[  872.539519][  T845]  free:1144252 free_pcp:45867 free_cma:0
[  872.577411][  T849] team0: Port device dummy0 added
[  872.632731][  T854] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.6913'.
[  872.647644][  T849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6911'.
[  872.658274][  T849] netlink: 'syz.4.6911': attribute type 10 has an invalid length.
[  872.666572][  T845] Node 0 active_anon:36780kB inactive_anon:0kB active_file:14160kB inactive_file:161000kB unevictable:13736kB isolated(anon):0kB isolated(file):0kB mapped:70568kB dirty:976kB writeback:0kB shmem:16360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19288kB pagetables:14604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  872.695283][  T854] bridge: RTM_NEWNEIGH with invalid ether address
[  872.725891][  T845] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110592kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  872.770607][  T845] Node 0 DMA free:11196kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:68kB local_pcp:24kB free_cma:0kB
[  872.816557][  T854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6913'.
[  872.856681][  T845] lowmem_reserve[]: 0 2492 2493 2493 2493
[  872.863851][  T861] ipt_rpfilter: unknown options
[  872.881209][  T845] Node 0 DMA32 free:954788kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36588kB inactive_anon:0kB active_file:14160kB inactive_file:161000kB unevictable:13820kB writepending:980kB zspages:0kB present:3129332kB managed:2552556kB mlocked:12288kB bounce:0kB free_pcp:113920kB local_pcp:48348kB free_cma:0kB
[  873.101933][  T849] team0: Port device dummy0 removed
[  873.137446][  T867] netlink: 'syz.3.6914': attribute type 2 has an invalid length.
[  873.157909][  T845] lowmem_reserve[]: 0 0 0 0 0
[  873.203721][  T845] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  873.286346][  T867] netlink: 'syz.3.6914': attribute type 2 has an invalid length.
[  873.523136][  T845] lowmem_reserve[]: 0 0 0 0 0
[  873.631182][  T845] Node 1 Normal free:3557208kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:63760kB local_pcp:32568kB free_cma:0kB
[  873.794736][  T845] lowmem_reserve[]: 0 0 0 0 0
[  873.804060][  T845] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (M) 1*4096kB (U) = 11196kB
[  873.868909][  T845] Node 0 DMA32: 2345*4kB (UM) 8275*8kB (UME) 2953*16kB (UME) 184*32kB (UME) 63*64kB (UME) 519*128kB (UM) 796*256kB (UM) 449*512kB (UME) 158*1024kB (UM) 76*2048kB (UM) 0*4096kB = 950284kB
[  873.942451][  T845] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  874.022701][  T845] Node 1 Normal: 8*4kB (UM) 11*8kB (UM) 10*16kB (UM) 12*32kB (UM) 17*64kB (UM) 13*128kB (UM) 10*256kB (UM) 14*512kB (UM) 11*1024kB (UM) 11*2048kB (U) 855*4096kB (M) = 3549016kB
[  874.145500][  T845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  874.212352][  T845] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  874.269669][  T845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  874.305163][  T845] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  874.374923][  T845] 45281 total pagecache pages
[  874.379923][  T845] 0 pages in swap cache
[  874.408752][  T845] Free swap  = 124996kB
[  874.438340][  T845] Total swap = 124996kB
[  874.476036][  T845] 2097051 pages RAM
[  874.502963][  T845] 0 pages HighMem/MovableOnly
[  874.534391][  T845] 427129 pages reserved
[  874.566225][  T845] 0 pages cma reserved
[  874.641513][ T5736] net_ratelimit: 4 callbacks suppressed
[  874.641530][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.655990][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.960572][  T884] __nla_validate_parse: 1 callbacks suppressed
[  874.960593][  T884] netlink: 92 bytes leftover after parsing attributes in process `syz.6.6920'.
[  875.120539][  T326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  875.187104][  T883] vlan3: entered promiscuous mode
[  875.315597][  T883] hsr0: entered promiscuous mode
[  875.454911][  T883] vlan3: entered allmulticast mode
[  875.460900][  T883] hsr0: entered allmulticast mode
[  875.478696][  T883] hsr_slave_0: entered allmulticast mode
[  875.503470][  T883] hsr_slave_1: entered allmulticast mode
[  875.685924][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  875.694360][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  876.840074][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  876.849010][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.070199][  T932] netlink: 'syz.5.6929': attribute type 8 has an invalid length.
[  877.214397][  T935] Bluetooth: MGMT ver 1.23
[  877.764106][  T908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  877.832239][  T908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  878.073534][  T958] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6934'.
[  878.252479][  T965] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  878.264287][  T929] mac80211_hwsim hwsim77 syzkaller0: entered promiscuous mode
[  878.328607][  T929] mac80211_hwsim hwsim77 syzkaller0: entered allmulticast mode
[  878.681733][  T908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  878.716453][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.725044][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.765519][  T908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  878.935699][  T980] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6937'.
[  878.979132][  T981] netlink: 'syz.4.6936': attribute type 1 has an invalid length.
[  878.991084][  T962] lo speed is unknown, defaulting to 1000
[  878.997531][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  879.474012][  T976] bond7: entered promiscuous mode
[  879.495564][  T976] 8021q: adding VLAN 0 to HW filter on device bond7
[  879.830988][T13882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  879.839880][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  879.875283][  T908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  879.915025][  T908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  880.161578][  T973] bond7: (slave gretap4): making interface the new active one
[  880.375647][  T973] bond7: (slave gretap4): Enslaving as an active interface with an up link
[  880.480695][  T977] macvlan3: entered promiscuous mode
[  880.534116][  T977] macvlan3: entered allmulticast mode
[  880.649784][  T977] bond7: (slave macvlan3): Error -98 calling set_mac_address
[  880.831020][  T994] syzkaller1: tun_chr_ioctl cmd 1074025677
[  880.864190][  T994] syzkaller1: Refused to change device type
[  880.992024][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  881.000587][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  881.516707][  T908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  881.527582][  T908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  881.940326][ T1010] lo speed is unknown, defaulting to 1000
[  882.006643][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.015128][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.052231][ T1016] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6944'.
[  882.097623][  T328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.251138][ T1003] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  882.281161][ T1003] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  882.449952][ T1003] tipc: Resetting bearer <eth:syzkaller0>
[  882.521461][ T1003] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  882.566935][ T1003] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  882.689610][ T1178] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  882.698630][ T1003] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  882.720930][ T1003] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  882.730851][ T1178] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  882.889893][ T1003] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  882.919658][ T1003] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  883.011700][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  883.028723][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  883.109744][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.118583][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.228016][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  883.252072][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  883.282104][ T1003] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  883.335418][ T1003] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  883.629717][T11019] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  883.649936][T11019] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  883.702430][ T1003] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  883.753486][ T1003] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  884.221918][T13882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  884.713822][ T1042] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0
[  885.111570][  T323] net_ratelimit: 1 callbacks suppressed
[  885.111587][  T323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  885.182430][ T1044] netlink: 'syz.1.6950': attribute type 1 has an invalid length.
[  885.396726][ T1044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6950'.
[  885.411076][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  885.419854][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  885.515761][ T1044] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6950'.
[  885.661559][ T1044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6950'.
[  885.759015][ T1044] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6950'.
[  885.788442][ T1044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6950'.
[  885.974276][ T1071] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6954'.
[  886.032724][ T1073] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6953'.
[  886.560458][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  886.569259][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  886.852224][ T1088] 8021q: adding VLAN 0 to HW filter on device bond8
[  886.931687][ T1095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6956'.
[  887.715857][ T1135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6962'.
[  887.751239][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  887.760114][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.092641][  T328] IPVS: starting estimator thread 0...
[  888.225048][  T328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.314610][ T1138] IPVS: using max 26 ests per chain, 62400 per kthread
[  888.861831][T13880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.870725][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.081544][ T1151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6966'.
[  889.323957][ T1164] netlink: 'syz.6.6969': attribute type 1 has an invalid length.
[  889.545681][ T1172] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6970'.
[  889.681172][ T1164] bond1: entered promiscuous mode
[  889.718768][ T1164] 8021q: adding VLAN 0 to HW filter on device bond1
[  890.149309][ T1157] sctp: [Deprecated]: syz.3.6966 (pid 1157) Use of int in max_burst socket option.
[  890.149309][ T1157] Use struct sctp_assoc_value instead
[  890.538082][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  891.085375][ T1199] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6977'.
[  891.176894][ T1200] netlink: 'syz.3.6977': attribute type 1 has an invalid length.
[  891.409945][ T1197] lo speed is unknown, defaulting to 1000
[  891.432788][ T1211] openvswitch: netlink: Flow key attr not present in new flow.
[  891.778568][ T1221] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6983'.
[  892.286412][ T1228] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6985'.
[  893.729492][ T1251] veth0: entered promiscuous mode
[  893.762385][ T1250] veth0: left promiscuous mode
[  894.199967][ T1259] netlink: 'syz.3.6994': attribute type 13 has an invalid length.
[  894.318090][ T1260] IPVS: rr: FWM 3 0x00000003 - no destination available
[  894.411181][ T1268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6996'.
[  895.131105][ T1276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6998'.
[  895.725792][ T1291] netlink: 'syz.5.7001': attribute type 1 has an invalid length.
[  895.840556][ T1291] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.7001'.
[  895.962959][ T1297] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7003'.
[  896.229491][  T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  896.379472][  T323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  896.968369][T13880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  896.977110][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  897.011323][ T1296] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  897.339607][ T1317] syzkaller0: entered promiscuous mode
[  897.351970][ T1317] syzkaller0: entered allmulticast mode
[  897.411157][ T1294] tipc: Disabling bearer <eth:syzkaller0>
[  897.724936][ T1333] netlink: 'syz.5.7006': attribute type 5 has an invalid length.
[  898.164445][    C0] sched: DL replenish lagged too much
[  898.961936][ T1352] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  899.193842][ T1358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7012'.
[  899.278330][T15476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.287270][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.750478][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.848444][ T1370] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7015'.
[  900.431186][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  900.439719][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  900.595452][ T1390] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7019'.
[  900.819891][ T1398] netlink: 'syz.1.7022': attribute type 1 has an invalid length.
[  901.336222][ T1398] bond4: entered promiscuous mode
[  901.375384][ T1417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7025'.
[  901.401721][ T1398] bond4: entered allmulticast mode
[  901.426789][  T331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  901.435618][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  901.440181][ T1398] 8021q: adding VLAN 0 to HW filter on device bond4
[  901.827103][ T1404] erspan1: entered allmulticast mode
[  901.902150][ T1404] bond4: (slave erspan1): making interface the new active one
[  901.986159][T23586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  902.034661][ T1404] erspan1: entered promiscuous mode
[  902.122018][ T1404] bond4: (slave erspan1): Enslaving as an active interface with an up link
[  902.268608][ T1411] syz.1.7022 (1411) used obsolete PPPIOCDETACH ioctl
[  902.292430][ T1427] netlink: 'syz.6.7026': attribute type 30 has an invalid length.
[  902.374240][ T1417] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  902.488352][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  902.505454][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  902.675341][ T1443] netlink: 'syz.5.7028': attribute type 1 has an invalid length.
[  902.798104][ T1443] netlink: 228 bytes leftover after parsing attributes in process `syz.5.7028'.
[  903.535656][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  903.544182][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  903.762755][ T1462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7030'.
[  904.559133][T13880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  904.567915][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  904.690398][ T1472] bond0: (slave team0): Releasing backup interface
[  904.844894][ T1472] bridge_slave_0: left allmulticast mode
[  904.892321][ T1472] bridge_slave_0: left promiscuous mode
[  904.919653][ T1472] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.991194][ T1472] bridge_slave_1: left allmulticast mode
[  905.032258][ T1472] bridge_slave_1: left promiscuous mode
[  905.062827][ T1472] bridge0: port 2(bridge_slave_1) entered disabled state
[  905.080239][  T326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  905.219641][ T1472] bond0: (slave bond_slave_0): Releasing backup interface
[  905.334837][ T1472] bond0: (slave bond_slave_1): Releasing backup interface
[  905.498637][ T1472] team0: Port device team_slave_0 removed
[  905.527911][ T1472] team0: Port device team_slave_1 removed
[  905.541385][ T1472] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  905.549570][ T1472] batman_adv: batadv0: Removing interface: batadv_slave_0
[  905.573547][ T1472] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  905.586876][ T1472] batman_adv: batadv0: Removing interface: batadv_slave_1
[  905.673384][ T1480] pimreg: entered allmulticast mode
[  905.742340][ T1481] pimreg: left allmulticast mode
[  906.665570][T13880] net_ratelimit: 3 callbacks suppressed
[  906.665590][T13880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  906.679948][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  907.581263][ T1529] netlink: 'syz.1.7052': attribute type 1 has an invalid length.
[  907.691508][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  907.700325][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  907.705741][ T1529] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7052'.
[  907.745224][T11016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  908.757132][  T331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  908.765693][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.239011][ T1575] macsec0: entered promiscuous mode
[  909.279888][ T1576] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7064'.
[  909.374020][ T1572] macsec0: left promiscuous mode
[  909.441101][ T1580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7067'.
[  909.537052][ T1580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7067'.
[  909.755937][ T1581] batman_adv: batadv0: Removing interface: wlan0
[  909.859727][T13882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.868296][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  910.503525][ T1596] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  910.717629][ T1615] lo speed is unknown, defaulting to 1000
[  911.373704][ T1630] netlink: 124 bytes leftover after parsing attributes in process `syz.5.7079'.
[  911.905256][  T331] net_ratelimit: 4 callbacks suppressed
[  911.905273][  T331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  911.919681][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  911.928582][ T1651] bridge_slave_1: entered promiscuous mode
[  912.508431][ T1661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  912.511763][ T1647] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.644132][ T1673] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7092'.
[  912.668373][ T1673] openvswitch: netlink: Key type 769 is out of range max 32
[  912.842575][ T1675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7093'.
[  912.949192][ T1677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7094'.
[  912.963232][  T331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  912.971591][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  913.001097][ T1677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7094'.
[  913.044982][ T1684] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7096'.
[  913.074998][ T1677] netlink: 'syz.4.7094': attribute type 15 has an invalid length.
[  913.139865][ T1647] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  913.221586][ T1684] bond5: entered allmulticast mode
[  913.259172][ T1688] syzkaller0: left promiscuous mode
[  913.271878][ T1688] syzkaller0: left allmulticast mode
[  913.461947][ T1647] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  913.505299][ T3296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  913.777389][ T1647] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  913.986002][  T331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  913.994440][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  914.219485][   T35] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  914.232788][ T1734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  914.299847][ T1734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7107'.
[  914.300618][   T35] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  914.406143][   T35] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  914.456796][  T141] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  914.545104][ T1687] infiniband syz1: set down
[  914.569016][ T1687] infiniband syz1: added bond0
[  914.665709][ T1687] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  914.681760][ T1687] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  914.701173][ T1687] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  914.741788][ T1687] RDS/IB: syz1: added
[  914.747134][ T1687] smc: adding ib device syz1 with port count 1
[  914.753668][ T1687] smc:    ib device syz1 port 1 has pnetid SYZ0 (user defined)
[  915.439156][ T1785] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  915.453342][ T1786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7118'.
[  915.498029][ T1788] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7117'.
[  915.534895][ T1782] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7116'.
[  915.910625][ T1800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7121'.
[  915.946015][ T1803] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.7123'.
[  916.295144][ T1817] C: renamed from veth1_to_team
[  916.332762][ T1817] netlink: 'syz.4.7124': attribute type 1 has an invalid length.
[  917.105670][ T5766] net_ratelimit: 10 callbacks suppressed
[  917.105690][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  917.120120][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  917.400977][ T1845] vlan2: entered promiscuous mode
[  917.430388][ T1845] hsr0: entered promiscuous mode
[  917.466091][ T1845] vlan2: entered allmulticast mode
[  917.477226][ T1845] hsr0: entered allmulticast mode
[  917.492778][ T1854] IPVS: set_ctl: invalid protocol: 29 172.30.9.2:20001
[  917.494601][ T1845] hsr_slave_0: entered allmulticast mode
[  917.560895][ T1845] hsr_slave_1: entered allmulticast mode
[  917.719351][ T1853] hsr_slave_0: left promiscuous mode
[  917.755919][ T1853] hsr_slave_1: left promiscuous mode
[  918.148071][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  918.156780][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  918.941954][ T1901] netlink: 'syz.1.7144': attribute type 1 has an invalid length.
[  918.984388][ T1902] bridge1: entered promiscuous mode
[  919.038183][ T1902] bridge1: entered allmulticast mode
[  919.071516][ T1902] team0: Port device bridge1 added
[  919.115860][ T1902] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20000
[  919.198087][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  919.206743][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  919.240850][ T1897] bridge2: entered promiscuous mode
[  919.257054][ T1897] bridge2: entered allmulticast mode
[  919.266035][  T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  919.316470][ T1897] team0: Port device bridge2 added
[  919.492428][ T1920] ipt_ECN: cannot use operation on non-tcp rule
[  920.096352][ T1947] netlink: 'syz.1.7154': attribute type 10 has an invalid length.
[  920.116840][ T1947] __nla_validate_parse: 4 callbacks suppressed
[  920.116858][ T1947] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7154'.
[  920.161453][ T1945] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7153'.
[  920.198390][ T1947] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7154'.
[  920.227499][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.235917][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.298905][ T1951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7155'.
[  920.451984][ T1954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7156'.
[  920.751114][ T1964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7159'.
[  921.266999][  T331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.469939][ T1989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7167'.
[  921.840185][ T2004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7172'.
[  921.990054][ T2006] netlink: 'syz.3.7173': attribute type 2 has an invalid length.
[  921.998282][ T2006] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7173'.
[  922.304733][ T5766] net_ratelimit: 1 callbacks suppressed
[  922.304749][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  922.318756][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  922.327574][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  922.435876][ T2015] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7177'.
[  923.093775][ T2035] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  923.131441][ T2035] batman_adv: batadv0: Removing interface: batadv_slave_0
[  923.162618][ T2035] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  923.195125][ T2035] batman_adv: batadv0: Removing interface: batadv_slave_1
[  923.355472][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  923.363843][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.340719][ T2069] veth0: entered promiscuous mode
[  924.381490][ T2068] veth0: left promiscuous mode
[  924.396030][  T331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.404356][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.413222][ T3296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.687075][ T2077] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  924.909866][ T2089] netlink: 'syz.1.7198': attribute type 1 has an invalid length.
[  925.004270][ T2098] xt_hashlimit: size too large, truncated to 1048576
[  925.032142][ T2089] 8021q: adding VLAN 0 to HW filter on device bond5
[  925.061312][ T2096] netlink: 'syz.3.7201': attribute type 3 has an invalid length.
[  925.096871][ T2094] bond5: entered promiscuous mode
[  925.116899][ T2096] nbd: nbd3 already in use
[  925.127615][ T2089] __nla_validate_parse: 10 callbacks suppressed
[  925.127631][ T2089] netlink: 22472 bytes leftover after parsing attributes in process `syz.1.7198'.
[  925.145439][ T2096] block nbd3: NBD_DISCONNECT
[  925.150663][ T2096] block nbd3: Send disconnect failed -32
[  925.160649][ T2096] block nbd3: shutting down sockets
[  925.229598][ T2104] bond5: (slave dummy0): making interface the new active one
[  925.255021][ T2104] dummy0: entered promiscuous mode
[  925.263252][ T2104] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  925.303659][ T2096] siw: device registration error -23
[  925.351419][ T2096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7201'.
[  925.424744][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.433111][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.534788][ T2117] netlink: 'syz.1.7204': attribute type 1 has an invalid length.
[  925.650244][ T2129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7207'.
[  925.674206][ T2117] 8021q: adding VLAN 0 to HW filter on device bond6
[  925.682662][ T2129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7207'.
[  925.719774][ T2131] netlink: 120 bytes leftover after parsing attributes in process `syz.6.7206'.
[  925.777139][ T2121] bond6: (slave veth17): Enslaving as a backup interface with a down link
[  925.822171][ T2128] bond5: (slave dummy0): Releasing active interface
[  925.858205][ T2128] dummy0: left promiscuous mode
[  926.142429][ T2154] netlink: 212344 bytes leftover after parsing attributes in process `syz.6.7212'.
[  926.520908][ T2171] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7218'.
[  926.653048][ T2179] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  926.660354][ T2179] IPv6: NLM_F_CREATE should be set when creating new route
[  926.683742][ T2173] batadv_slave_0: Caught tx_queue_len zero misconfig
[  926.708484][ T2170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  926.752751][ T2173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7218'.
[  927.014735][ T2193] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  927.159881][ T2197] netlink: 'syz.6.7223': attribute type 13 has an invalid length.
[  927.299476][ T2213] xt_connbytes: Forcing CT accounting to be enabled
[  927.425618][  T328] net_ratelimit: 3 callbacks suppressed
[  927.425636][  T328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  927.453875][ T2210] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7223'.
[  927.531082][  T331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  927.539591][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  927.910499][ T2237] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7231'.
[  928.288772][ T2250] bond6 (unregistering): Released all slaves
[  928.403178][ T2254] netlink: 'syz.6.7236': attribute type 1 has an invalid length.
[  928.437831][ T2260] lo speed is unknown, defaulting to 1000
[  928.546503][T13880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  928.555243][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  928.597697][ T2267] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  929.038576][ T2288] Cannot find add_set index 0 as target
[  929.527057][   T29] audit: type=1804 audit(1780816274.112:30): pid=2304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7248" name="/newroot/245/cgroup.controllers" dev="tmpfs" ino=1270 res=1 errno=0
[  929.576079][   T29] audit: type=1800 audit(1780816274.112:31): pid=2304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7248" name="cgroup.controllers" dev="tmpfs" ino=1270 res=0 errno=0
[  929.598492][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  929.607128][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  929.616796][   T29] audit: type=1804 audit(1780816274.132:32): pid=2304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7248" name="/newroot/245/cgroup.controllers" dev="tmpfs" ino=1270 res=1 errno=0
[  930.146173][ T3296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.258073][ T2287] veth1: left allmulticast mode
[  930.280752][ T2287] bond3: left allmulticast mode
[  930.287908][ T2287] ip6gretap1: left allmulticast mode
[  930.293561][ T2287] bond3: left promiscuous mode
[  930.299836][ T2287] ip6gretap1: left promiscuous mode
[  930.386761][  T137] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  930.407934][  T137] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  930.427923][  T137] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  930.454847][  T137] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  930.502580][ T2309] __nla_validate_parse: 3 callbacks suppressed
[  930.502599][ T2309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7250'.
[  930.521345][ T2309] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7250'.
[  930.537498][ T2309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7250'.
[  930.628017][  T331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.649897][ T2321] netlink: 120 bytes leftover after parsing attributes in process `syz.6.7252'.
[  930.769599][ T2314] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7251'.
[  930.786724][ T2314] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7251'.
[  931.113426][ T2335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7256'.
[  931.145124][ T2335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7256'.
[  931.228762][ T3296] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  931.244762][ T2335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7256'.
[  931.258256][ T3296] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  931.272523][ T2335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7256'.
[  931.294914][ T3296] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  931.327157][ T3296] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  931.618055][ T2352] IPv6: NLM_F_CREATE should be specified when creating new route
[  931.828634][ T2367] RDS: rds_bind could not find a transport for ::ffff:172.20.20.27, load rds_tcp or rds_rdma?
[  932.594962][ T2381] sctp: [Deprecated]: syz.1.7268 (pid 2381) Use of int in maxseg socket option.
[  932.594962][ T2381] Use struct sctp_assoc_value instead
[  932.629870][ T2380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  932.687749][ T2380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  932.707654][  T331] net_ratelimit: 4 callbacks suppressed
[  932.707671][  T331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  932.721940][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  933.189736][  T326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  933.240559][ T2404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  933.756745][  T331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  933.765504][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  934.425213][ T2446] netlink: 'syz.5.7283': attribute type 11 has an invalid length.
[  934.514178][ T2447] gtp0: entered promiscuous mode
[  934.532338][ T2447] gtp0: entered allmulticast mode
[  934.547605][ T2447] team0: Device gtp0 is of different type
[  934.786215][T13880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  934.794894][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  934.798864][ T2471] netlink: 'syz.6.7287': attribute type 1 has an invalid length.
[  935.151587][ T2490] netlink: 'syz.3.7290': attribute type 2 has an invalid length.
[  935.512594][ T2511] batadv_slave_0: Caught tx_queue_len zero misconfig
[  935.557693][ T2512] syzkaller0: entered promiscuous mode
[  935.573108][ T2512] syzkaller0: entered allmulticast mode
[  935.607541][ T2522] __nla_validate_parse: 5 callbacks suppressed
[  935.607560][ T2522] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7299'.
[  935.686740][ T2525] bridge_slave_1: entered promiscuous mode
[  935.813214][ T2527] debugfs: '1��^!�Y������
[  935.813214][ T2527] 3�UH�5r�Bn���\' already exists in 'ieee80211'
[  935.834288][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  935.843022][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  935.967469][ T2536] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7304'.
[  935.977053][ T2537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7303'.
[  936.110582][T24015] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  936.131641][T24015] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  936.159312][T24015] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  936.170040][T24015] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  936.172716][ T2540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7305'.
[  936.199789][ T2540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7305'.
[  936.267484][ T2551] netlink: 'syz.6.7308': attribute type 7 has an invalid length.
[  936.283323][ T2540] netlink: 'syz.3.7305': attribute type 3 has an invalid length.
[  936.305737][ T2540] netlink: 'syz.3.7305': attribute type 4 has an invalid length.
[  936.333531][ T2540] netlink: 'syz.3.7305': attribute type 4 has an invalid length.
[  936.536700][ T2553] lo speed is unknown, defaulting to 1000
[  936.563803][ T2560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7310'.
[  936.616993][ T2565] netlink: 'syz.4.7310': attribute type 10 has an invalid length.
[  936.786371][ T2571] netlink: 120 bytes leftover after parsing attributes in process `syz.6.7312'.
[  936.799780][ T2527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7301'.
[  936.889333][ T2575] x_tables: duplicate underflow at hook 1
[  936.994212][ T2580] syzkaller0: entered promiscuous mode
[  937.011998][ T2580] syzkaller0: entered allmulticast mode
[  937.204979][ T2583] netlink: 'syz.5.7315': attribute type 10 has an invalid length.
[  937.235055][ T2583] 8021q: adding VLAN 0 to HW filter on device team0
[  937.277659][ T2583] bond0: (slave team0): Enslaving as an active interface with an up link
[  937.358500][ T2585] bond0: Caught tx_queue_len zero misconfig
[  937.505334][ T2590] netlink: 'syz.5.7317': attribute type 1 has an invalid length.
[  937.530327][ T2590] netlink: 'syz.5.7317': attribute type 3 has an invalid length.
[  937.897576][ T2605] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7321'.
[  937.907235][T13880] net_ratelimit: 3 callbacks suppressed
[  937.907250][T13880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  937.921478][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  938.175723][ T2617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7323'.
[  938.927885][ T2624] bond4: option packets_per_slave: invalid value (1986356271)
[  938.935516][ T2624] bond4: option packets_per_slave: allowed values 0 - 65535
[  938.945664][T11007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  938.946570][ T2624] bond4 (unregistering): Released all slaves
[  938.954003][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  939.087665][ T2654] lo: Caught tx_queue_len zero misconfig
[  941.676012][  T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  942.383027][ T2698] validate_nla: 1 callbacks suppressed
[  942.383044][ T2698] netlink: 'syz.3.7341': attribute type 10 has an invalid length.
[  942.402975][ T2701] xt_time: invalid argument - start or stop time greater than 23:59:59
[  942.878414][ T2736] __nla_validate_parse: 5 callbacks suppressed
[  942.878432][ T2736] netlink: 112 bytes leftover after parsing attributes in process `syz.6.7351'.
[  943.132197][ T2740] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7345'.
[  943.352507][ T2749] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7352'.
[  943.374296][ T2749] netlink: 'syz.6.7352': attribute type 3 has an invalid length.
[  943.603527][ T2767] xt_hashlimit: overflow, try lower: 9/9223372036854775808
[  943.626088][ T2768] netlink: 'syz.3.7358': attribute type 11 has an invalid length.
[  943.658389][ T2768] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7358'.
[  943.812931][ T2783] netlink: 112 bytes leftover after parsing attributes in process `syz.5.7362'.
[  943.841783][ T2784] netlink: 'syz.6.7360': attribute type 1 has an invalid length.
[  944.230415][  T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  944.239109][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  944.318122][ T2808] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7369'.
[  944.491076][ T2816] syzkaller0: entered promiscuous mode
[  944.508749][ T2816] syzkaller0: entered allmulticast mode
[  944.575069][ T2816] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  944.628323][ T2816] tipc: Resetting bearer <eth:syzkaller0>
[  944.662107][ T2828] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7374'.
[  944.688875][ T2814] tipc: Resetting bearer <eth:syzkaller0>
[  944.843739][ T2814] tipc: Disabling bearer <eth:syzkaller0>
[  944.874566][ T2841] netlink: 'syz.5.7375': attribute type 10 has an invalid length.
[  944.895442][ T2841] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7375'.
[  944.949570][ T2841] team0: Port device geneve1 added
[  944.974044][T24015] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  945.016505][T11016] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  945.022780][ T2844] netlink: 'syz.4.7377': attribute type 7 has an invalid length.
[  945.052042][T11016] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  945.086307][T11016] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  945.221533][ T2856] netlink: 136 bytes leftover after parsing attributes in process `syz.1.7379'.
[  945.231960][ T2856] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  945.513939][ T2879] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7386'.
[  946.116691][ T2901] netlink: 'syz.4.7393': attribute type 3 has an invalid length.
[  946.340250][ T2909] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  946.361654][ T2906] lo speed is unknown, defaulting to 1000
[  946.766181][ T2933] netlink: 'syz.5.7401': attribute type 1 has an invalid length.
[  946.987442][ T2920] lo speed is unknown, defaulting to 1000
[  947.218204][ T2944] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  947.289627][ T2944] bond8: (slave lo): Enslaving as an active interface with an up link
[  947.299120][ T2944] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  947.316080][ T2948] tipc: Started in network mode
[  947.325949][ T2948] tipc: Node identity ac14140f, cluster identity 4711
[  947.366782][ T2948] tipc: New replicast peer: 172.30.0.7
[  947.380509][ T2948] tipc: Enabled bearer <udp:syz2>, priority 5
[  947.404714][ T2950] tipc: Disabling bearer <udp:syz2>
[  947.429078][ T3296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  947.560538][   T29] audit: type=1804 audit(1780816292.142:33): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7406" name="/newroot/340/cgroup.controllers" dev="tmpfs" ino=1756 res=1 errno=0
[  947.575183][ T2954] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  947.636819][ T2954] syzkaller0: entered promiscuous mode
[  947.637646][   T29] audit: type=1800 audit(1780816292.142:34): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7406" name="cgroup.controllers" dev="tmpfs" ino=1756 res=0 errno=0
[  947.652960][ T2954] syzkaller0: entered allmulticast mode
[  947.738950][ T2954] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  947.939270][ T2954] tipc: Resetting bearer <eth:syzkaller0>
[  948.157599][ T2952] tipc: Resetting bearer <eth:syzkaller0>
[  948.585186][ T2952] tipc: Disabling bearer <eth:syzkaller0>
[  948.723249][  T331] tipc: Node number set to 2886997007
[  949.115729][ T3011] ip_vti0: left promiscuous mode
[  949.179403][ T3011] 8021q: adding VLAN 0 to HW filter on device bond0
[  949.211563][ T3011] 8021q: adding VLAN 0 to HW filter on device batadv0
[  949.267952][ T3021] __nla_validate_parse: 9 callbacks suppressed
[  949.267972][ T3021] netlink: 116 bytes leftover after parsing attributes in process `syz.4.7423'.
[  949.307800][ T3011] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  949.323012][ T3011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  949.349874][ T3011] veth1_vlan: left promiscuous mode
[  949.391644][ T3011] vlan0: left promiscuous mode
[  949.405832][ T3011] veth1_vlan: entered promiscuous mode
[  949.443571][ T3011] veth1_macvtap: left promiscuous mode
[  949.463860][ T3011] veth0_macvtap: left promiscuous mode
[  949.471005][ T3011] veth0_macvtap: entered promiscuous mode
[  949.478870][ T3011] veth1_macvtap: entered promiscuous mode
[  949.491901][ T3011] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  949.501514][ T3011] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  949.517002][ T3011] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  949.529831][ T3011] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  949.555198][ T3011] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  949.709710][ T3009] tipc: Enabled bearer <eth:vlan0>, priority 16
[  949.990194][  T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  949.998695][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  950.304904][ T3047] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  950.422070][ T3051] dvmrp8: entered allmulticast mode
[  950.849230][ T3074] netlink: 'syz.4.7435': attribute type 39 has an invalid length.
[  950.893178][ T3075] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7434'.
[  951.093727][ T3078] netlink: 'syz.1.7436': attribute type 21 has an invalid length.
[  951.130582][ T3080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7437'.
[  951.153894][ T3078] netlink: 'syz.1.7436': attribute type 20 has an invalid length.
[  951.168799][ T3078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7436'.
[  951.396852][ T3078] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  951.480141][ T3084] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  951.639988][ T3095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7441'.
[  951.993604][ T3113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7445'.
[  952.200652][ T3122] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7448'.
[  952.415689][ T3136] netlink: 144 bytes leftover after parsing attributes in process `syz.6.7452'.
[  952.473314][ T3136] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7452'.
[  952.496062][ T3135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7449'.
[  952.709579][ T3151] netlink: 'syz.5.7455': attribute type 1 has an invalid length.
[  952.718396][ T3152] x_tables: duplicate underflow at hook 2
[  952.767297][ T3143] ip6tnl0: Caught tx_queue_len zero misconfig
[  952.938782][ T3151] 8021q: adding VLAN 0 to HW filter on device bond9
[  952.952408][ T3165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  952.959691][ T3165] IPv6: NLM_F_CREATE should be set when creating new route
[  952.967004][ T3165] IPv6: NLM_F_CREATE should be set when creating new route
[  952.974258][ T3165] IPv6: NLM_F_CREATE should be set when creating new route
[  953.007113][ T3153] vlan4: entered allmulticast mode
[  953.016640][ T3153] bond9: entered allmulticast mode
[  953.051368][ T3157] bond9: (slave geneve4): making interface the new active one
[  953.070275][ T3157] geneve4: entered allmulticast mode
[  953.092704][ T3157] bond9: (slave geneve4): Enslaving as an active interface with an up link
[  953.109558][ T3171] x_tables: duplicate underflow at hook 2
[  953.186013][T11021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  953.305602][ T3174] netlink: 'syz.1.7461': attribute type 30 has an invalid length.
[  953.412037][ T3174] bond7: option arp_missed_max: invalid value (0)
[  953.423913][ T3182] xt_hashlimit: Unknown mode mask 3FFFF, kernel too old?
[  953.433074][ T3174] bond7: option arp_missed_max: allowed values 1 - 255
[  953.461629][ T3174] bond7 (unregistering): Released all slaves
[  953.502983][ T3176] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  953.525476][ T3180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  953.630367][ T3176] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  953.886987][ T3187] lo speed is unknown, defaulting to 1000
[  953.923072][ T3176] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  954.077880][ T3176] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  954.190018][ T3210] vlan2: entered allmulticast mode
[  954.212449][ T3210] bond0: entered allmulticast mode
[  954.340032][T24015] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  954.359319][ T3188] __nla_validate_parse: 3 callbacks suppressed
[  954.359338][ T3188] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7465'.
[  954.418683][T24015] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  954.463808][T23586] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  954.531194][T11021] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  954.617685][ T3215] lo speed is unknown, defaulting to 1000
[  955.527154][ T3256] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  955.612468][ T3262] netlink: 292 bytes leftover after parsing attributes in process `syz.4.7485'.
[  955.747382][T24015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.830539][ T3267] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7487'.
[  956.134288][ T3275] netlink: 'syz.4.7489': attribute type 1 has an invalid length.
[  956.258559][ T3278] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7490'.
[  956.330411][ T3280] netlink: 'syz.4.7491': attribute type 15 has an invalid length.
[  956.359797][ T3280] netlink: 666 bytes leftover after parsing attributes in process `syz.4.7491'.
[  957.369105][ T3321] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7499'.
[  957.722941][ T3336] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7502'.
[  957.870345][ T3343] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7504'.
[  958.303138][ T3355] sctp: [Deprecated]: syz.3.7508 (pid 3355) Use of int in max_burst socket option.
[  958.303138][ T3355] Use struct sctp_assoc_value instead
[  958.353264][ T3355] netlink: 'syz.3.7508': attribute type 1 has an invalid length.
[  958.373161][ T3355] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7508'.
[  958.443230][ T3364] netlink: 'syz.4.7509': attribute type 1 has an invalid length.
[  958.549239][ T3364] 8021q: adding VLAN 0 to HW filter on device bond10
[  958.579155][ T3355] lo speed is unknown, defaulting to 1000
[  958.632570][ T3371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7512'.
[  958.673074][ T3369] bond10: (slave veth3): Enslaving as an active interface with a down link
[  958.737404][ T3371] macsec1: entered promiscuous mode
[  958.749503][ T3371] macsec1: entered allmulticast mode
[  958.966554][T11004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.020908][ T3385] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!�Y������
[  959.020908][ T3385] 3�UH�5r�Bn���\'
[  959.068309][ T3385] CPU: 1 UID: 0 PID: 3385 Comm: syz.5.7515 Not tainted syzkaller #0 PREEMPT(full) 
[  959.068334][ T3385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  959.068346][ T3385] Call Trace:
[  959.068355][ T3385]  <TASK>
[  959.068364][ T3385]  dump_stack_lvl+0xe8/0x150
[  959.068396][ T3385]  sysfs_warn_dup+0x8e/0xa0
[  959.068422][ T3385]  sysfs_do_create_link_sd+0xc0/0x110
[  959.068449][ T3385]  device_add_class_symlinks+0x1cf/0x240
[  959.068484][ T3385]  device_add+0x475/0xbb0
[  959.068515][ T3385]  wiphy_register+0x1fb1/0x2fe0
[  959.068555][ T3385]  ? __pfx_wiphy_register+0x10/0x10
[  959.068581][ T3385]  ? __pfx_netdev_run_todo+0x10/0x10
[  959.068607][ T3385]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  959.068639][ T3385]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  959.068674][ T3385]  ieee80211_register_hw+0x3c53/0x4910
[  959.068709][ T3385]  ? ieee80211_register_hw+0x1921/0x4910
[  959.068760][ T3385]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  959.068785][ T3385]  ? __asan_memset+0x22/0x50
[  959.068809][ T3385]  ? __hrtimer_setup+0x1b7/0x260
[  959.068833][ T3385]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  959.068857][ T3385]  mac80211_hwsim_new_radio+0x3306/0x57b0
[  959.068909][ T3385]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  959.068934][ T3385]  ? __asan_memcpy+0x40/0x70
[  959.068963][ T3385]  hwsim_new_radio_nl+0xd96/0xfa0
[  959.069001][ T3385]  genl_family_rcv_msg_doit+0x22a/0x330
[  959.069036][ T3385]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  959.069076][ T3385]  ? bpf_lsm_capable+0x9/0x20
[  959.069094][ T3385]  ? security_capable+0x7e/0x2c0
[  959.069128][ T3385]  genl_rcv_msg+0x61c/0x7a0
[  959.069161][ T3385]  ? __pfx_genl_rcv_msg+0x10/0x10
[  959.069186][ T3385]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  959.069207][ T3385]  ? __pfx_ref_tracker_free+0x10/0x10
[  959.069242][ T3385]  netlink_rcv_skb+0x232/0x4b0
[  959.069265][ T3385]  ? __pfx_genl_rcv_msg+0x10/0x10
[  959.069293][ T3385]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  959.069335][ T3385]  ? down_read+0x270/0x2e0
[  959.069357][ T3385]  ? genl_rcv+0xd/0x40
[  959.069383][ T3385]  genl_rcv+0x28/0x40
[  959.069405][ T3385]  netlink_unicast+0x75c/0x8e0
[  959.069438][ T3385]  netlink_sendmsg+0x813/0xb40
[  959.069470][ T3385]  ? __pfx_netlink_sendmsg+0x10/0x10
[  959.069497][ T3385]  ? aa_sock_msg_perm+0xf1/0x1b0
[  959.069526][ T3385]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  959.069553][ T3385]  ____sys_sendmsg+0x972/0x9f0
[  959.069582][ T3385]  ? __might_fault+0xaf/0x130
[  959.069613][ T3385]  ? __pfx_____sys_sendmsg+0x10/0x10
[  959.069645][ T3385]  ? import_iovec+0x73/0xa0
[  959.069673][ T3385]  ___sys_sendmsg+0x2a5/0x360
[  959.069694][ T3385]  ? __lock_acquire+0x6b5/0x2cf0
[  959.069721][ T3385]  ? __pfx____sys_sendmsg+0x10/0x10
[  959.069751][ T3385]  ? futex_wake+0x4ac/0x580
[  959.069805][ T3385]  ? __fget_files+0x2a/0x420
[  959.069828][ T3385]  ? __fget_files+0x3a0/0x420
[  959.069862][ T3385]  __x64_sys_sendmsg+0x1bd/0x2a0
[  959.069887][ T3385]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  959.069919][ T3385]  ? rcu_is_watching+0x15/0xb0
[  959.069951][ T3385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  959.069972][ T3385]  do_syscall_64+0x174/0x580
[  959.069992][ T3385]  ? trace_irq_disable+0x3b/0x140
[  959.070018][ T3385]  ? clear_bhb_loop+0x40/0x90
[  959.070042][ T3385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  959.070060][ T3385] RIP: 0033:0x7f124619ce59
[  959.070079][ T3385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  959.070095][ T3385] RSP: 002b:00007f1246fb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  959.070116][ T3385] RAX: ffffffffffffffda RBX: 00007f1246415fa0 RCX: 00007f124619ce59
[  959.070130][ T3385] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000009
[  959.070142][ T3385] RBP: 00007f1246232d6f R08: 0000000000000000 R09: 0000000000000000
[  959.070154][ T3385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  959.070165][ T3385] R13: 00007f1246416038 R14: 00007f1246415fa0 R15: 00007ffc7a16a2b8
[  959.070199][ T3385]  </TASK>
[  959.510288][ T3382] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  959.511530][ T3383] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  959.677556][ T3386] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!�Y������
[  959.677556][ T3386] 3�UH�5r�Bn���\'
[  959.693472][ T3386] CPU: 1 UID: 0 PID: 3386 Comm: syz.5.7515 Not tainted syzkaller #0 PREEMPT(full) 
[  959.693507][ T3386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  959.693519][ T3386] Call Trace:
[  959.693527][ T3386]  <TASK>
[  959.693535][ T3386]  dump_stack_lvl+0xe8/0x150
[  959.693563][ T3386]  sysfs_warn_dup+0x8e/0xa0
[  959.693586][ T3386]  sysfs_do_create_link_sd+0xc0/0x110
[  959.693611][ T3386]  device_add_class_symlinks+0x1cf/0x240
[  959.693644][ T3386]  device_add+0x475/0xbb0
[  959.693673][ T3386]  wiphy_register+0x1fb1/0x2fe0
[  959.693707][ T3386]  ? __pfx_wiphy_register+0x10/0x10
[  959.693727][ T3386]  ? __pfx_netdev_run_todo+0x10/0x10
[  959.693749][ T3386]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  959.693780][ T3386]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  959.693813][ T3386]  ieee80211_register_hw+0x3c53/0x4910
[  959.693849][ T3386]  ? ieee80211_register_hw+0x1921/0x4910
[  959.693898][ T3386]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  959.693923][ T3386]  ? __asan_memset+0x22/0x50
[  959.693947][ T3386]  ? __hrtimer_setup+0x1b7/0x260
[  959.693968][ T3386]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  959.693991][ T3386]  mac80211_hwsim_new_radio+0x3306/0x57b0
[  959.694041][ T3386]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  959.694065][ T3386]  ? __asan_memcpy+0x40/0x70
[  959.694094][ T3386]  hwsim_new_radio_nl+0xd96/0xfa0
[  959.694130][ T3386]  genl_family_rcv_msg_doit+0x22a/0x330
[  959.694164][ T3386]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  959.694201][ T3386]  ? bpf_lsm_capable+0x9/0x20
[  959.694218][ T3386]  ? security_capable+0x7e/0x2c0
[  959.694252][ T3386]  genl_rcv_msg+0x61c/0x7a0
[  959.694283][ T3386]  ? __pfx_genl_rcv_msg+0x10/0x10
[  959.694308][ T3386]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  959.694329][ T3386]  ? __pfx_ref_tracker_free+0x10/0x10
[  959.694362][ T3386]  netlink_rcv_skb+0x232/0x4b0
[  959.694387][ T3386]  ? __pfx_genl_rcv_msg+0x10/0x10
[  959.694412][ T3386]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  959.694451][ T3386]  ? down_read+0x270/0x2e0
[  959.694471][ T3386]  ? genl_rcv+0xd/0x40
[  959.694505][ T3386]  genl_rcv+0x28/0x40
[  959.694527][ T3386]  netlink_unicast+0x75c/0x8e0
[  959.694561][ T3386]  netlink_sendmsg+0x813/0xb40
[  959.694594][ T3386]  ? __pfx_netlink_sendmsg+0x10/0x10
[  959.694620][ T3386]  ? aa_sock_msg_perm+0xf1/0x1b0
[  959.694648][ T3386]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  959.694676][ T3386]  ____sys_sendmsg+0x972/0x9f0
[  959.694697][ T3386]  ? __might_fault+0xaf/0x130
[  959.694727][ T3386]  ? __pfx_____sys_sendmsg+0x10/0x10
[  959.694758][ T3386]  ? import_iovec+0x73/0xa0
[  959.694784][ T3386]  ___sys_sendmsg+0x2a5/0x360
[  959.694804][ T3386]  ? __lock_acquire+0x6b5/0x2cf0
[  959.694829][ T3386]  ? __pfx____sys_sendmsg+0x10/0x10
[  959.694858][ T3386]  ? futex_wait+0x2a2/0x390
[  959.694912][ T3386]  ? __fget_files+0x2a/0x420
[  959.694933][ T3386]  ? __fget_files+0x3a0/0x420
[  959.694966][ T3386]  __x64_sys_sendmsg+0x1bd/0x2a0
[  959.694990][ T3386]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  959.695020][ T3386]  ? rcu_is_watching+0x15/0xb0
[  959.695051][ T3386]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  959.695071][ T3386]  do_syscall_64+0x174/0x580
[  959.695091][ T3386]  ? trace_irq_disable+0x3b/0x140
[  959.695116][ T3386]  ? clear_bhb_loop+0x40/0x90
[  959.695138][ T3386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  959.695156][ T3386] RIP: 0033:0x7f124619ce59
[  959.695174][ T3386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  959.695190][ T3386] RSP: 002b:00007f1246f8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  959.695210][ T3386] RAX: ffffffffffffffda RBX: 00007f1246416090 RCX: 00007f124619ce59
[  959.695223][ T3386] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000009
[  959.695236][ T3386] RBP: 00007f1246232d6f R08: 0000000000000000 R09: 0000000000000000
[  959.695247][ T3386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  959.695258][ T3386] R13: 00007f1246416128 R14: 00007f1246416090 R15: 00007ffc7a16a2b8
[  959.695291][ T3386]  </TASK>
[  960.204681][ T3403] netlink: 'syz.6.7518': attribute type 1 has an invalid length.
[  960.362918][ T3406] __nla_validate_parse: 1 callbacks suppressed
[  960.362938][ T3406] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7518'.
[  960.500114][ T3405] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  960.511820][T11021] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  960.512022][ T3406] 8021q: adding VLAN 0 to HW filter on device bond5
[  960.607283][ T3415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7522'.
[  960.728899][T11004] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  960.743332][ T3420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  960.879191][ T3419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7522'.
[  960.997651][ T3427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7524'.
[  961.027294][ T3427] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20002
[  961.293882][ T3435] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7526'.
[  961.510206][T11021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  961.864151][ T3451] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  962.111884][ T3451] A link change request failed with some changes committed already. Interface gretap1 may have been left with an inconsistent configuration, please check.
[  962.255029][ T3462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7535'.
[  962.403966][ T3469] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7537'.
[  962.424814][ T3469] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7537'.
[  962.461967][ T3472] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7539'.
[  962.597636][ T3476] vxcan2: entered allmulticast mode
[  962.703385][ T3481] macsec2: entered promiscuous mode
[  962.893104][ T3488] bridge0: entered allmulticast mode
[  963.139989][ T3510] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7551'.
[  963.287130][ T3513] ip6gretap1: entered promiscuous mode
[  963.614305][ T3533] netlink: 'syz.5.7554': attribute type 3 has an invalid length.
[  963.700467][ T3540] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  963.836182][ T3546] openvswitch: netlink: IPv4 tun info is not correct
[  963.919672][ T3550] netlink: 'syz.6.7559': attribute type 12 has an invalid length.
[  964.629945][ T3582] xt_hashlimit: max too large, truncated to 1048576
[  964.707153][   T30] INFO: task syz.0.6561:31723 blocked for more than 143 seconds.
[  964.720940][T11016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  964.749302][   T30]       Not tainted syzkaller #0
[  964.769961][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  964.806778][   T30] task:syz.0.6561      state:D stack:27168 pid:31723 tgid:31722 ppid:30237  task_flags:0x400140 flags:0x00080002
[  964.841317][   T30] Call Trace:
[  964.853063][   T30]  <TASK>
[  964.863589][   T30]  __schedule+0x1821/0x5740
[  964.881957][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  964.899374][   T30]  ? __pfx___schedule+0x10/0x10
[  964.915561][   T30]  ? schedule+0x90/0x360
[  964.930834][   T30]  schedule+0x164/0x360
[  964.952508][   T30]  schedule_preempt_disabled+0x13/0x30
[  964.976941][   T30]  __mutex_lock+0x7f7/0x1550
[  964.992484][   T30]  ? __mutex_lock+0x608/0x1550
[  965.006613][   T30]  ? nfsd_nl_version_set_doit+0xcd/0x7a0
[  965.018952][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  965.029964][   T30]  nfsd_nl_version_set_doit+0xcd/0x7a0
[  965.042538][   T30]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  965.065143][   T30]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  965.076406][   T30]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  965.094519][   T30]  genl_family_rcv_msg_doit+0x22a/0x330
[  965.100182][   T30]  ? __asan_memcpy+0x40/0x70
[  965.105726][   T30]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  965.124535][   T30]  ? bpf_lsm_capable+0x9/0x20
[  965.129276][   T30]  ? security_capable+0x7e/0x2c0
[  965.134228][   T30]  genl_rcv_msg+0x61c/0x7a0
[  965.144582][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  965.154695][   T30]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  965.164520][   T30]  ? __pfx_ref_tracker_free+0x10/0x10
[  965.169960][   T30]  netlink_rcv_skb+0x232/0x4b0
[  965.174874][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  965.179943][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  965.185435][   T30]  ? down_read+0x270/0x2e0
[  965.189895][   T30]  ? genl_rcv+0xd/0x40
[  965.193979][   T30]  genl_rcv+0x28/0x40
[  965.198309][   T30]  netlink_unicast+0x75c/0x8e0
[  965.203124][   T30]  netlink_sendmsg+0x813/0xb40
[  965.208033][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  965.213339][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  965.218431][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  965.223760][   T30]  ____sys_sendmsg+0x972/0x9f0
[  965.228642][   T30]  ? __might_fault+0xaf/0x130
[  965.233348][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  965.238911][   T30]  ? import_iovec+0x73/0xa0
[  965.243457][   T30]  ___sys_sendmsg+0x2a5/0x360
[  965.248269][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  965.253226][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  965.264929][   T30]  ? futex_wake+0x4ac/0x580
[  965.269535][   T30]  ? __fget_files+0x2a/0x420
[  965.274139][   T30]  ? __fget_files+0x3a0/0x420
[  965.284565][   T30]  __x64_sys_sendmsg+0x1bd/0x2a0
[  965.294520][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  965.304525][   T30]  ? rcu_is_watching+0x15/0xb0
[  965.310851][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  965.317267][   T30]  do_syscall_64+0x174/0x580
[  965.321904][   T30]  ? trace_irq_disable+0x3b/0x140
[  965.327422][   T30]  ? clear_bhb_loop+0x40/0x90
[  965.332142][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  965.338179][   T30] RIP: 0033:0x7fc2c119ce59
[  965.342626][   T30] RSP: 002b:00007fc2c2113028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  965.363493][   T30] RAX: ffffffffffffffda RBX: 00007fc2c1415fa0 RCX: 00007fc2c119ce59
[  965.371717][   T30] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000004
[  965.379884][   T30] RBP: 00007fc2c1232d6f R08: 0000000000000000 R09: 0000000000000000
[  965.388033][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  965.396294][   T30] R13: 00007fc2c1416038 R14: 00007fc2c1415fa0 R15: 00007ffc60138598
[  965.404316][   T30]  </TASK>
[  965.407662][   T30] 
[  965.407662][   T30] Showing all locks held in the system:
[  965.443565][   T30] 1 lock held by khungtaskd/30:
[  965.455171][   T30]  #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  965.475797][   T30] 3 locks held by kworker/1:1/46:
[  965.486238][   T30]  #0: ffff8880b873b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150
[  965.496419][   T30]  #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  965.505478][   T30]  #2: ffffffff8ea81140 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40
[  965.515711][   T30] 2 locks held by getty/5388:
[  965.520394][   T30]  #0: ffff888036b900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  965.530296][   T30]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  965.540849][   T30] 1 lock held by syz-executor/5619:
[  965.547216][   T30]  #0: ffff8880b863b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150
[  965.557480][   T30] 2 locks held by kworker/u8:14/11007:
[  965.562962][   T30]  #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  965.575151][   T30]  #1: ffffc9000e0d7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  965.589532][   T30] 2 locks held by syz.2.5614/27702:
[  965.595069][   T30]  #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  965.603323][   T30]  #1: ffffffff8ec8b2c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  965.613631][   T30] 2 locks held by syz.0.6561/31723:
[  965.618936][   T30]  #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  965.627309][   T30]  #1: ffffffff8ec8b2c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0
[  965.637494][   T30] 
[  965.639840][   T30] =============================================
[  965.639840][   T30] 
[  965.648505][   T30] NMI backtrace for cpu 1
[  965.648520][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  965.648539][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  965.648550][   T30] Call Trace:
[  965.648557][   T30]  <TASK>
[  965.648565][   T30]  dump_stack_lvl+0xe8/0x150
[  965.648591][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  965.648700][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  965.648730][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  965.648757][   T30]  sys_info+0x135/0x170
[  965.648804][   T30]  watchdog+0xfd3/0x1030
[  965.648842][   T30]  ? watchdog+0x1c9/0x1030
[  965.648873][   T30]  kthread+0x389/0x470
[  965.648897][   T30]  ? __pfx_watchdog+0x10/0x10
[  965.648920][   T30]  ? __pfx_kthread+0x10/0x10
[  965.648944][   T30]  ret_from_fork+0x514/0xb70
[  965.648976][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  965.648994][   T30]  ? __switch_to+0xc79/0x1410
[  965.649021][   T30]  ? __pfx_kthread+0x10/0x10
[  965.649045][   T30]  ret_from_fork_asm+0x1a/0x30
[  965.649079][   T30]  </TASK>
[  965.649087][   T30] Sending NMI from CPU 1 to CPUs 0:
[  965.760561][    C0] NMI backtrace for cpu 0
[  965.760579][    C0] CPU: 0 UID: 0 PID: 5619 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  965.760597][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  965.760607][    C0] RIP: 0033:0x7f98df07a5d0
[  965.760624][    C0] Code: 56 49 89 f6 41 55 41 54 41 bc 04 00 00 00 55 48 89 fd 53 48 83 ec 18 4c 8d 6c 24 0c 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <8b> 7d 00 4c 89 e2 4b 8d 74 3d 00 4c 29 fa e8 ed 18 12 00 48 89 c3
[  965.760638][    C0] RSP: 002b:00007fff12f78970 EFLAGS: 00000202
[  965.760653][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f98df157fd7
[  965.760664][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  965.760673][    C0] RBP: 00007fff12f78e20 R08: 0000000000000000 R09: 0000000000000000
[  965.760684][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004
[  965.760694][    C0] R13: 00007fff12f7897c R14: 00007fff12f78a10 R15: 0000000000000000
[  965.760705][    C0] FS:  0000555565eea540 GS:  0000000000000000
[  965.864008][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  965.870867][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  965.879968][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  965.890007][   T30] Call Trace:
[  965.893273][   T30]  <TASK>
[  965.896192][   T30]  vpanic+0x56c/0xa60
[  965.900163][   T30]  ? __pfx___schedule+0x10/0x10
[  965.904999][   T30]  ? __pfx_vpanic+0x10/0x10
[  965.909489][   T30]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  965.915646][   T30]  panic+0xc5/0xd0
[  965.919379][   T30]  ? __pfx_panic+0x10/0x10
[  965.923812][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  965.929196][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  965.935352][   T30]  watchdog+0x102c/0x1030
[  965.939680][   T30]  ? watchdog+0x1c9/0x1030
[  965.944092][   T30]  kthread+0x389/0x470
[  965.948152][   T30]  ? __pfx_watchdog+0x10/0x10
[  965.952820][   T30]  ? __pfx_kthread+0x10/0x10
[  965.957399][   T30]  ret_from_fork+0x514/0xb70
[  965.961990][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  965.967089][   T30]  ? __switch_to+0xc79/0x1410
[  965.971762][   T30]  ? __pfx_kthread+0x10/0x10
[  965.976347][   T30]  ret_from_fork_asm+0x1a/0x30
[  965.981111][   T30]  </TASK>
[  965.984390][   T30] Kernel Offset: disabled
[  965.988711][   T30] Rebooting in 86400 seconds..