last executing test programs:

6.346792596s ago: executing program 0 (id=594):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1006}, 0x94)
r2 = accept4(r0, &(0x7f0000000240)=@ax25={{0x3, @bcast}, [@null, @default, @null, @null, @null, @null, @default, @rose]}, &(0x7f00000001c0)=0x80, 0x80000)
sendmsg$nl_route_sched(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xa0000020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@deltaction={0xa4, 0x31, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5e}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000801)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000090601020000000000000000000000400900020073797a310000000005000100070000001000078007001480"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000004c0)={@local}, 0x14)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
recvmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001740)=""/4071, 0xfe7}, {&(0x7f00000012c0)=""/165, 0xa5}, {&(0x7f0000001380)=""/127, 0x7f}, {&(0x7f0000000680)=""/131, 0x83}, {&(0x7f0000000000)=""/48, 0x30}], 0x5}, 0x4}, {{&(0x7f0000000740)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000400)=""/54, 0x36}, {&(0x7f0000000a00)=""/33, 0x21}, {&(0x7f0000000b40)=""/157, 0x9d}, {&(0x7f0000000c00)=""/125, 0x7d}, {&(0x7f0000000c80)=""/129, 0x81}, {&(0x7f0000002a80)=""/4096, 0x1000}], 0x6, &(0x7f0000000dc0)=""/162, 0xa2}, 0x7}], 0x3, 0x12000, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0)

6.063784834s ago: executing program 0 (id=601):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000240)={<r4=>0x0, 0x1}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000300)={r4, 0x4, 0x7, 0x80000001}, 0x10)
shutdown(r3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @multicast})

4.359135172s ago: executing program 4 (id=611):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
close(r0)
r1 = socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
close(r0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x7, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x8000c}, 0x50) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@setlink={0x4c, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x202}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xffff, 0xfd, 0x401}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_bond\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30c64db1bcc9df8b}, 0x0)

3.939079476s ago: executing program 3 (id=616):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="b702000024000080bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadcb74220e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807909727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d658eec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3d1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cb471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7ff40007ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cfa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89125539d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e64dcb0d0d57d5aeae626d2700608bb283800000000008a4c26b16213f0d9d7c3c57413b1e5895c9c12259519274ca8fd3bce804c8176a297f28add10956f3aaa3db687abcc17d326fd3674b7680206e875332b82c1de5ff793f6971d98c787c6daef28f66b542f08eeb6c82fbe03a3dc625bddf98d2a200c94065db5d5414361a785ff39392d9b1c870d8a2287af0ee98231100efa30652f2dd84da00970b5d209c623b26770258fcf63690f17cce7a78aeba7f6cbc4c143f48b1d0a10afdc93eaaff72e6622fd4da72ca7b30cd30b568599a6b44a2dee51985d802ed8088391a6717c4d97"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x102a, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x102a, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind(r1, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x3}}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000440)="340b76235e542388314c94ffb092fe45f73f8c986973c4976cfb5e6d1d8c82244df1f513a1c1fbfa9a9f0b95aeb353c71ce43ab84de2d842a33e91ce88d884ec2a248e85b886f115b686136aaf601bbff88abe474a8494073ad74fa9adc48bb0577ba007c034067d35226a6049c20b62fef3bad5f9e53c8ea5682c0073eec76929c6d3362325fe1144dcc97ff2c5aa59dde347555cd214a311db3942deef1b9143089b894379762ff8b5e92db6ab7ff6e4fe98137ee709c44a9353840f906e9a"}, 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010"], 0xfc}}, 0x0)
sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
unshare(0x400) (async)
unshare(0x400)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

3.709070814s ago: executing program 4 (id=617):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1800000006000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="bf9228aacf6ac50c1df6a1ea493795035c14baa14d063abf4a16e4bc7c97b113710491e21a15cf199406ed9a7518487409428c43bf927aec2fb4c2be0965ee4d4454da1049999246157b8b5a516ea558ffd9dff207eb338f2424f0dcaf53cfbc480c6ba8d95a8db2f93116b050912719b2", @ANYRES64=0x0], 0x20)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r1, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000000)=""/8, 0xfffffffffffffd0b, 0x400123eb, 0x0, 0x1154103478d401ea)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xe0b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x1], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x80000000}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc850}, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001480)={'batadv_slave_1\x00', 0x4000})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4da580, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r8)
socket$inet6_tcp(0xa, 0x1, 0x0)

3.571831617s ago: executing program 3 (id=618):
r0 = socket(0x11, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000003e000100fcff07000400000001000000040000008c0001808800108009000880a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb137e"], 0xb0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r1 = socket$packet(0x11, 0x3, 0x300)
recvmmsg(r1, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/102, 0x66}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/158, 0x9e}, 0xffffff01}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x8)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141444e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f00000003c0)={'veth0_to_batadv\x00', {0x2, 0x4e22, @empty}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000440)=r6)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r10, @ANYRES16=r10, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r9, 0x8002f515, &(0x7f0000000140))
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x5, 0x0, 0x7}, {0x8, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x1, 0x0, 0x3}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000400, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xffffffc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0xfd, 0xfffffffa, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x80007f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xffdffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x1, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x85, 0x8, 0xba, 0x2, 0xc9, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x20000001, 0x2, 0xf, 0x24b9, 0x39, 0xe01, 0x1, 0x6430, 0xb, 0x8, 0x4000, 0x3, 0x7eb6, 0x3, 0x0, 0x203, 0x4, 0x9, 0xff, 0xa, 0x6, 0xf9, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0xc, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0xfffffffe, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0xc93b7bc0, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x74, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x68000)

2.585432579s ago: executing program 3 (id=626):
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10)
pselect6(0x40, &(0x7f0000000000)={0x8, 0x10, 0x100000000, 0x8, 0x2f863c72, 0x2, 0x8000}, &(0x7f00000000c0)={0x7fffffff, 0xff, 0x4, 0xffffffffffffffff, 0x200, 0x9, 0x6, 0xd}, &(0x7f0000000100)={0x2, 0x5, 0x3, 0x1, 0x4, 0x6, 0x7e, 0x4}, &(0x7f0000000140), &(0x7f0000000200)={&(0x7f0000000180)={[0x9]}, 0x8})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060e090400000000008000000200fffe09000200737932000000000900010073797a3000001b004c0004802c0001800a0001006c696d69740000001c0002800c000140000000000000000a0c000240000000000000f7431c0001800900010089617371000000000c000280090000110001000000050095431b000000000000000a00325bbfb87f13187430d6e446922cb931b8d0de97a938a5a765b2ce589b216bdf"], 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x700)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', <r6=>0x0})
socket(0x10, 0x3, 0x6)
socket(0x10, 0x3, 0x0)
r7 = gettid()
r8 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r6, @ANYBLOB="049c01000750050008001300", @ANYRES32=r7, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r3)
sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044104}, 0x20000000)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

1.779314633s ago: executing program 1 (id=630):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', <r1=>0x0}) (async)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000009000000000000000000000118110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001800b7030000000008008500000083000000bca900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0xb, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000400001000080100001800c000500cbc728c400"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008051)

1.611020338s ago: executing program 3 (id=633):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={<r1=>0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000380)=0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140), 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
r3 = socket(0x10, 0xa, 0x5)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'caif0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=<r6=>r5, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x46}}, 0x4004)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
writev(r8, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1)
recvmmsg(r9, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0xffffffffffffff21, 0x0, 0x0, &(0x7f00000005c0)=""/108, 0x6c}, 0x7fff}], 0x3fffffffffffcbe, 0xfffe, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r7, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e20, 0x4d, 0x0, @wg=@data={0x4, 0x2, 0x8, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76d"}}}}, 0x73)
r10 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000200))
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRES64=r6, @ANYRES32=r7, @ANYRES64=r0, @ANYRESHEX=r10, @ANYRES32=r10, @ANYRES64, @ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRESDEC=r2, @ANYBLOB="42bca29a5c8cd20112947db9d70f44cd38ffaa5e5f922010622181ec01ca78f1f46bae0b9d5247876636b88c701314654f5bebde2eeddad86d5950d9572093ef26e1ad0c5b272d8383a9be542575739dc9622dd4519eb287c2e9a4d4b75e924dd3482415ece828800989eb11cb231c12a882a0c91180780f971fd633f304d3dc7316c63239ff53da2129f16b68867c41c6f23cc419d23c137b84553cce093c"], 0x50}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x40, r12, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r14, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[@ANYBLOB="8709000000000000"], 0x8)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000980), r15)

1.565837449s ago: executing program 0 (id=634):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140)=0x1, 0x4)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000700080012"], 0x44}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$sock(r2, &(0x7f0000000000)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)="13c120830a54cbfe5f7a08aaa2fb57d3ec7a5ccb302308fa590a72ee67421fd01e3e065f0d3e58e01249dc4eacdd44ffd72a43acd8c890adaee49a88325a7ed4751cb1de28f2df06165f893e06f5e8a17ff2617ca5cc9c83b89340faa7eb5050eafcd68d05446f3be95a02a5fef2a19209ebecc49575a4", 0x77}, {&(0x7f0000000440)="144669092a2532af78f949d0524838ad957ed2ee389cffd2b08def45feb71aa5b910aabb4af857d9743d912b96cd55030b78d5fa609a8eb9cc912fe2735da15701925bcfbe193201840c576bc965bdb317f84ccb039a3ab8ea8f2b2c048981248dcdb3d946f05adb654ec47834a4467000862ea20fef5bf70bfe3de453ef26e2fa04fe3b800afb2e5f3078f66035d769fddaa47ebadc3a387c41e3634868b98f664a43e6f2850b86738289e5", 0xac}, {&(0x7f0000000500)="1ea3e84b0db664d531c1a4b136720351823f1d01f8b873f36f88ca669f84e5ef847b6dfd4684f22d8062b9a4f35163dd1fac37aa829796ec4bc8b402f7a6162a64dbea6b43ed1f219494850d45791545fb6f6b286b927f08eb3fcc9c9a87b257dc8c4ec06d743418c0cddeb7098229502113092a035ea583e98b56f717cf0655e1b680769fd84f63183c0b86f79ca530e891033bcd0052fb5d83746a4a826b8a2601a7d08aa8fc4ee144f09d13a8e3d807f2449c6c", 0xb5}, {&(0x7f00000006c0)="18121c222a6a4d4d1e16af7c79c865ae33981c2931f304393534efef87c38c70b41bd2858d5e2ece743f83fa4c86ebd98c993e5d8c06ba4aaa4d5532ab9c782fa7166d6e311573da22ac45e03999a826643363b3ab19493d452fec9ca9f8a21db93d5694b771212ead2a4b65cb2bbc290e9025301eee81a9a4f573cae4bd98b44e046d0e70f1b1dee5ca4f32015584104817f9d80af200209c53422d8b140b5d28f4a2c366258c5f224a1c496d6a69aa4c9817952c483697f165bfa83f42e951ca9ff5d196", 0xc5}, {&(0x7f00000005c0)="da5f1aff13a4de97e5653022939b879a96db5e6bc6efc34b39a64250f63386ff328d90f6dc600a3de82118ea0e67a2179e6c6bb1fbafdbacc6db8ec0f05be1916d86c532d50982fc75a6016120e184f3072fc16ac772203e23712a48bffe490844ad09ea4f2151463d454ab5f8eb0086cf069b53b866b9ed5d98f0aa26f1c36d62a29a213545d6301a", 0x89}, {&(0x7f00000007c0)="73bb969867f0601f2629f3838cb3f7dbe74f5fb93ecc5e8fab98549a29b87a3be7a6980429b22987e6d627eb893e081b9054c5eba77f99f184c1f8d03090e8d157d9ab4044300e362486600b84caa1de7ea8a81fc4859e50e3f0e93d1fcda5d8356a760f9f3f4c1402e05ed83217feb6191137bb125f63052c326f6ab38344e922faeeb835110a9c97a990295f996828c9a9c5ec758147a159e6", 0x9a}, {&(0x7f0000000880)="beb387c90c79816f9eb5fb885c69f57cb4beb371c1be7fa3ec2dd92630c89b79a592984319ac02a577b0c9917a8d6b88cc9e1930273766a988a5604316d5387b2ff721e4652e319948e9d7eba11caecab1af95376375268777d725fbb5b59b324d3603520ac9ca60a63f07a35f0bef4336596b04c009b5af176cdae78cd7271ca8dc29ceec8994ee2dbbe552380808b6fb3d089a16750c44adac760ed2afb484c79b94224b9f7039fcb1458dfcf19fe69efe19e6cab3cded8a1047cfccadc53ee77d4df7c8e6ee4fb0214749860da37a75625c4a57982439eba51740be0a6c68", 0xe0}], 0x7, &(0x7f0000000980)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}], 0x48}, 0x4000841)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48)
close(0x3)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r7, &(0x7f0000000900), 0x0}, 0x20)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'vlan0\x00', @multicast})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r8)
socket$unix(0x1, 0x1, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)={0x1, 0x2, [@empty, @remote]})
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r9, 0x3a, 0x1, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000a00)={<r10=>0x0, @in={{0x2, 0x4e21, @broadcast}}, [0x8be2, 0x9, 0x2000000, 0x7, 0x6, 0x81, 0x4, 0xff, 0xf60, 0x4, 0x5, 0x1, 0x800, 0x4, 0x7]}, &(0x7f0000000240)=0x100)
setsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000c00)=@assoc_value={r10}, 0x8)

1.394824738s ago: executing program 2 (id=635):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x48}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1, 0x4fc7fb9d, 0x2, 0x6f, 0x1, 0x1, '\x00', r6, r4, 0x3, 0x1, 0x5, 0x3}, 0x50)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f00000001c0), &(0x7f0000000340)=@tcp}, 0x20)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=<r8=>0x0, &(0x7f00000001c0)=0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x1, 0x40, 0xa, 0x80, 0x80, 0x87, r8}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
listen(r3, 0x0)

1.385112391s ago: executing program 1 (id=636):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="c12900007923009db87772a1f9690014000300776c6190300000000000000000000000080004003d03000014001680100001800c00040005000000ff7f0000"], 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route(r4, 0x0, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000180)={0x2, 0x5, 0xd, 0x9}, 0x8)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x2, 0x4e24, 0x0, 0xa, 0xc0, 0x20, 0xee4cab3ec1c04498, 0x0, 0xffffffffffffffff}, {0x7, 0x9, 0x1000, 0x7f, 0xffff, 0x4, 0x1, 0x10000}, {0x6, 0xd01, 0x7, 0x9}, 0x3, 0x6e6bbb, 0x1, 0x0, 0x4, 0x2}, {{@in6=@private1, 0x4d5, 0xff}, 0xa, @in6=@local, 0x0, 0x1, 0x2, 0x3, 0x3ff, 0x853, 0x1}}, 0xe8)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) (async)
syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6001010000161100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e2200169078020300000000000030b05345ff20"], 0x0) (async)
recvmmsg(r2, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfe}], 0x2, 0x10041, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae", @ANYRES64=r7], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
recvmmsg(r7, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100010000000000eec3"], 0x68}}, 0x0)

1.290634698s ago: executing program 2 (id=637):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x9, 0x5, 0x4, 0x1048, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x1}, 0x50)
ioctl$int_in(0xffffffffffffffff, 0xfc10, &(0x7f0000000200)=0x7)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
connect$netrom(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000fbdbdf25170000002c003080052102000500000014000400de067486d928a27e16fa9e9bf01d2cf00c000180220001000100000008000300", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.187089997s ago: executing program 1 (id=638):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r1=>0x0})
r2 = socket(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, 0x0)
r11 = gettid()
r12 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0)

1.169181378s ago: executing program 1 (id=639):
socket$kcm(0xf, 0x3, 0x2) (async)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) (async)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000340)=0x2) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0xfffffffd) (async)
close(r0) (async)
r2 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
close(0x3) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x8000000ffffffff)
shutdown(r5, 0x1) (async)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x80) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x64, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="4c5a1d7b44464d14aa8260bca676028f1d71e8ea6927fb0c4949d8cbfdeed9e995e058d6128dd611e93c73f158b8efb03f0b193d5b79b7e52d4d4c9a616888d4767cd5fb3cd13b63734db0810561e22fd069761f1a4cc3fc16ba1601bfb7e9f5112d640b85f7a7f9432da9ca9d95e51e0f00f234bc302dbd060fc324fd5af245411f1df76b19f9b4978f8fc74db99993bc0a886c21be4133d98bf996827bf0e69ae51540e1f53b49e63ea3c1446712d898e00bdf170127a8e0ed1ec17c5a403215f1657a9c9ebdc598bdb4a1ee7bf94d3967b374bfb52f", 0xd7}, {&(0x7f0000000580)="cff1a5110008bb3139cec59f8f99186a49d525d0fba12ccc0abe178b98323ff5256b4e9ff68c29390b1998e4ce07a20ef0b3d32dd68789dac415a63a88203e2c0604b0e91772904b6e16d74d70ed404289206cb99750c501aaa65285a3beff46ce12c53878f6a484e4d1fedbea77daf919c805ff9d2ed1de5739a48e8aa12ee96357a904bceec2c15764939c15e4c3e8e796c53005457df6c57629bd69ef20ab1b261155a340fac24179fbf317071699b75d82fc43edd4f70c33691f263c5b4bd3300d1e7b8b5c547c4b706d331c9aca0b4a5838cffdf5a8f66857d13f", 0xdd}], 0x2) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x15, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="73049ddb93dae5ddb4ff0358f1589e18400000faffffd600000000000012d7a3358b2ef0df84f9c308bb78e7785281f32f10eefb"], &(0x7f0000000340)='GPL\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x15, '\x00', 0x0, @sk_reuseport=0x28, r8, 0x8, &(0x7f0000000500)={0x40000008, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x8000009, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000001700)=[{0x2, 0x4, 0x5}, {0x2, 0x1, 0x4, 0x9}, {0x1, 0x5, 0x12, 0x4}, {0x4, 0x5, 0xc, 0x8}, {0x2, 0x5, 0x6}, {0x3, 0x4, 0x1, 0x5}, {0x0, 0x4, 0x6, 0x2}, {0x0, 0x1, 0x10, 0xc}], 0x10, 0x2}, 0x94) (async)
socket$kcm(0xa, 0x922000000003, 0x11) (async)
socket$kcm(0xa, 0x922000000004, 0x11)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000016c0)={0x2, 0x520}) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001840)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000300000032003fdf6db9adcb210a01010100000000000000002000020900000000000e000000000000000000bb000000000d0001007564703a7379d7d2f7e100002fe18138666c6fb4d1b032267efb27e43faf834a212d2477a5c270d531ee02b29685658d43b6621e5ad5025afe77c3a9fae329131ebf480abffd2ea6a3234e2537ebf4dc3f28fff82b7e5b39c9f4c7b21417d420d79d2da167e9e58313c61e1d04d29e4b711016728dbec14e768e90c16d441abc7ad9e69b6500"/212], 0x60}}, 0x0)

984.17517ms ago: executing program 2 (id=640):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r3, 0x1, 0x4, &(0x7f0000000600)=0x7, 0x1a) (async)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8008000280f10f0500080000003e120000080006"], 0x44}}, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) (async)
r6 = accept4$inet(r0, 0x0, &(0x7f0000000200), 0x80000)
sendto$inet(r6, &(0x7f0000000380)="1a0271e1a0de356b0b0d78e021ff14d36edccab000009783979d64d9cd33e1c487b0fe45b1ffa6af80b2b9abbb52c17e94ac10bc21bf6062d33c3d2c3ea03cbc766ce2a076fca22e65c4c1f57edc583a9a57021428276755d10cb64dafd83b084b646f6fbbe82eb139c6340e9249f8c84a204a2378fda52cef7ae6469933a1cb25de2037ae3ae33130b363dc6d6182097983671a063a4a039648e8aaaeaf5842ac21b09884e4266026386e6b464c089b20b4b5fadeded0b7a9f2572c8f6709622c7cef93fae64ba387f8040cdaaded1103ebce177e72cd35e7646cece3af45a9212a534c5ee5d3c9228e2b141ca2ad3a15e2", 0xf2, 0x40000840, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) (async)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

911.233379ms ago: executing program 4 (id=641):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x90)
r0 = socket$inet(0x2, 0x802, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4040028)

851.8318ms ago: executing program 0 (id=642):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
writev(r0, &(0x7f0000003500)=[{&(0x7f00000035c0)="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", 0x102}], 0x1)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50)
r3 = socket$kcm(0xa, 0x5, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64)
setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x10)
r5 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r5})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r5})
bind$alg(r2, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r6 = accept$alg(r2, 0x0, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000040)=0x800, 0x4)
close(0x3)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
recvmmsg(r6, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4081, 0xff1}], 0x1}, 0x10f}], 0x1, 0x2101, 0x0)

843.702304ms ago: executing program 4 (id=643):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0x8000, 0x8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xffffffb8, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0xf, 0x8008, 0x1, 0x8c7}, &(0x7f00000001c0)=0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7001fbdbdf250100000008000100020000002c000480050003000100000005000300020000000500030002000000050003000000000005000300010000000800020002"], 0x50}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x114, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd0, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d0cff49}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64dee84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16b6dfd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6173f511}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65fdbeaa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4de755b9}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x635aee2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62b0a049}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x14, 0x8, 0x0, 0x1, [{0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34ad4a15}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x11}, 0x48004)
ioctl$sock_netdev_private(r1, 0x8924, &(0x7f0000000040)=':')

599.25453ms ago: executing program 0 (id=644):
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x4000000}, 0x20) (async)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0204000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x31)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466", 0x6}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=""/116, 0x74}], 0x1, &(0x7f0000000100)=""/37, 0x25}, 0x40010000) (async)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))

565.213267ms ago: executing program 0 (id=645):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000002000000010000000032000000e000000200000000000000000000000023030000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2200000000ac1414bb0000000000000000000000001c0004"], 0x1ac}}, 0x0)

558.239315ms ago: executing program 1 (id=646):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = gettid()
sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001"], 0xa0}, 0x4004881)
r2 = socket$alg(0x26, 0x5, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000240)=0x6e)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x6, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_DELAY_DIST={0x7, 0x2, "6ad2a3"}, @TCA_NETEM_CORR={0x10, 0x1, {0x5, 0x5, 0x9}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETTXFILTER(r11, 0x400454d1, &(0x7f0000000080)={0x0, 0x9, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @random="9d9e25a7bf1e", @random="412d007f2c16", @multicast, @empty, @empty, @broadcast, @link_local]})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x8c2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)

438.990104ms ago: executing program 2 (id=647):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[], 0xa4}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x2a, 0x2, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
r2 = socket$kcm(0x29, 0x5, 0x0) (async)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0], 0x0, 0x8a, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000009c0)={@rand_addr, <r4=>0x0}, &(0x7f0000000a00)=0x14)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)={0x148, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x200c015}, 0x8000) (async, rerun: 64)
setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) (rerun: 64)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0)
write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83b"], 0xffe) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x4}, {0xffe0}, {0x1c, 0xfff9}}}, 0x24}}, 0x24000000) (async)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000000140)=0xfff) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
socket(0x23, 0x80000, 0x7)
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b48aaa87aa21aaaaaaaaaaaa8848"], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32)
setsockopt$inet6_IPV6_RTHDR(r10, 0x29, 0x39, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x48)

436.36597ms ago: executing program 4 (id=648):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x2}}, 0x2e)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x81, @loopback, 0x7f}, 0x1c) (async)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x81, @loopback, 0x7f}, 0x1c)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x8800}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000560b0000f8ffffffb703000008000000b7040000f6000000850000004300000095ac086f19fcd2e6d24140de75ed40a72b243ccd38bf93567975afdf35a19a935cb7ef23823cf3f653a16c312b16d2f7d1659d954863188bcc94f734ad62b0e46a4ab6bacc217e34839ab0b1b601"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000560b0000f8ffffffb703000008000000b7040000f6000000850000004300000095ac086f19fcd2e6d24140de75ed40a72b243ccd38bf93567975afdf35a19a935cb7ef23823cf3f653a16c312b16d2f7d1659d954863188bcc94f734ad62b0e46a4ab6bacc217e34839ab0b1b601"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x5, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp(0x2, 0x3, 0x2) (async)
socket$igmp(0x2, 0x3, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='signal_generate\x00', r4}, 0x18)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

402.928166ms ago: executing program 3 (id=649):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000081}, 0x44080)

220.432058ms ago: executing program 2 (id=650):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x28, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x12, {0x2}}]}, 0x28}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}}, 0x0)

161.330966ms ago: executing program 3 (id=651):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x8000, 0x5c, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64)
socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x40, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r5=>0x0}) (async, rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0)

160.821526ms ago: executing program 4 (id=652):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r2=>0x0})
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x4000044) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff24bd7000f8fbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000030000ff0012800b000100697036746e6c0000380002800400130008000100", @ANYRES32=r2, @ANYBLOB="14000200fc02000000000000000000000000000014000300fe880000000000000000000000000101"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

73.274904ms ago: executing program 2 (id=653):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140)=0x1, 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000700080012"], 0x44}}, 0x0)

0s ago: executing program 1 (id=654):
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000))
r0 = socket$netlink(0x10, 0x3, 0xe)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4004081) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4004081)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x78, r2, 0x300, 0x9, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:urandom_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4004080)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0xd, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x30}}, 0x40080)
readv(r0, &(0x7f00000027c0)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/251, 0xfb}, {&(0x7f0000002700)}, {&(0x7f0000002740)=""/108, 0x6c}], 0x5)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000002880), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000028c0)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000028c0)=<r4=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002900)=<r5=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002940)=<r6=>0x0)
sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000002a40)={&(0x7f0000002840), 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x44, r3, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8881)
sendmsg$nl_route(r0, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)=@ipv4_delroute={0x68, 0x19, 0x400, 0x70bd2a, 0x25dfdbfe, {0x2, 0x10, 0x80, 0xf, 0xfd, 0x3, 0xfd, 0x8, 0x100}, [@RTA_SPORT={0x6, 0x1c, 0x4e23}, @RTA_TABLE={0x8, 0xf, 0x24c}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x1}}, @RTA_MARK={0x8, 0x10, 0x8}, @RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_SRC={0x8, 0x2, @multicast1}, @RTA_FLOW={0x8, 0xb, 0x5}, @RTA_SRC={0x8, 0x2, @local}, @RTA_PRIORITY={0x8, 0x6, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x20044804) (async)
sendmsg$nl_route(r0, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)=@ipv4_delroute={0x68, 0x19, 0x400, 0x70bd2a, 0x25dfdbfe, {0x2, 0x10, 0x80, 0xf, 0xfd, 0x3, 0xfd, 0x8, 0x100}, [@RTA_SPORT={0x6, 0x1c, 0x4e23}, @RTA_TABLE={0x8, 0xf, 0x24c}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x1}}, @RTA_MARK={0x8, 0x10, 0x8}, @RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_SRC={0x8, 0x2, @multicast1}, @RTA_FLOW={0x8, 0xb, 0x5}, @RTA_SRC={0x8, 0x2, @local}, @RTA_PRIORITY={0x8, 0x6, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x20044804)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x884)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_FW_DOWNLOAD(r7, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d00)={0x6c, r3, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '^\\'}, @NFC_ATTR_FIRMWARE_NAME={0x2a, 0x14, 'system_u:object_r:urandom_device_t:s0\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048011)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000002e00)="f58d0650fce6b218ac111401eb6f350ab065debda308233836f7149a96b91e2d47931bd29a92cd63968340179cb7580fb61d9aa9dbfcffe6de7ca9ace51220d69faf1048882c516282b14da223e8d44944948e378fec6739ba4be85645f154d35badc02c106105342249672a52d5e86fcfeaabdaaff0654cd62a11f1794698865c47ebe4f48c1f02e7ad80194d653f6e01956c14d2f71c0be0a5fee231768a75e9e78fd1eebbd8a0552d2718b2a692f8f719fb0d1f3f63a393670bb9e7d38814a1df857800e5ab6825602bcdf71199d6780582bcb7af3285e74204b439813c01de8cfdf7bc555c2e2b3e5eab4362552be35f716730aafcb1", 0xf8) (async)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000002e00)="f58d0650fce6b218ac111401eb6f350ab065debda308233836f7149a96b91e2d47931bd29a92cd63968340179cb7580fb61d9aa9dbfcffe6de7ca9ace51220d69faf1048882c516282b14da223e8d44944948e378fec6739ba4be85645f154d35badc02c106105342249672a52d5e86fcfeaabdaaff0654cd62a11f1794698865c47ebe4f48c1f02e7ad80194d653f6e01956c14d2f71c0be0a5fee231768a75e9e78fd1eebbd8a0552d2718b2a692f8f719fb0d1f3f63a393670bb9e7d38814a1df857800e5ab6825602bcdf71199d6780582bcb7af3285e74204b439813c01de8cfdf7bc555c2e2b3e5eab4362552be35f716730aafcb1", 0xf8)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_genetlink_get_family_id$nl802154(&(0x7f0000002f00), r7) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000002f00), r7)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002f80), r0) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f80), r0)
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000003100)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000030c0)={&(0x7f0000002fc0)={0xe0, r9, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x7, 0x733d, 0x0, 0x4, 0x2, 0x7, 0x3, 0x3, 0x6, 0x7, 0x4, 0xc, 0x8, 0x6e9e, 0x6, 0x6]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x1, 0x2, 0x0, {0x8000, 0x5, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2}, 0x400, 0x40}}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_FILS_KEK={0x10, 0xf2, "a408f9592cc4d567f0819ee4"}, @crypto_settings=[@NL80211_ATTR_PMK={0x15, 0xfe, "27784faf5ef519da7f9382ff191b1925ca"}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0x24, 0x34, @random="71b9656fdb0f6b5cf7a167de7aa866782e314cff1c967348dae6f1e5c27f85b7"}, @NL80211_ATTR_SSID={0xc, 0x34, @random="f5d5e3493f1af3bf"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000031c0)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000003140), &(0x7f0000003180)='%+9llu \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003280)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000003200), &(0x7f0000003240)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003640)={0x6, 0x1d, &(0x7f0000003440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xffffffc0}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfb}, @alu={0x4, 0x0, 0x3, 0x8, 0x8, 0x1e}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @tail_call, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_fd={0x18, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003540)='GPL\x00', 0x0, 0x1d, &(0x7f0000003580)=""/29, 0x41100, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000035c0)={0x5, 0x5, 0x5, 0xc6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003600)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8}, 0x94) (async)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003640)={0x6, 0x1d, &(0x7f0000003440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xffffffc0}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfb}, @alu={0x4, 0x0, 0x3, 0x8, 0x8, 0x1e}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @tail_call, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_fd={0x18, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003540)='GPL\x00', 0x0, 0x1d, &(0x7f0000003580)=""/29, 0x41100, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000035c0)={0x5, 0x5, 0x5, 0xc6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003600)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) (async)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003780)={0x1, <r14=>0xffffffffffffffff}, 0x4)
r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000037c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003b80)=@bpf_tracing={0x1a, 0x1e, &(0x7f00000032c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3bbcf57d7f3f74da, 0x0, 0x1, 0x7, 0x9, 0x2, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @alu={0x7, 0x1, 0x7, 0x2, 0x1, 0xfffffffffffffff8, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @map_fd={0x18, 0x4, 0x1, 0x0, r10}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @ldst={0x3, 0x2, 0x4, 0x6, 0x1, 0xffffffffffffffc0}]}, &(0x7f00000033c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003400)={0x1, 0xf, 0xc0, 0x5}, 0x10, 0x5c6, r12, 0x8, &(0x7f0000003ac0)=[r13, r14, r15, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000003b00)=[{0x5, 0x2, 0x1, 0x9}, {0x3, 0x3, 0xd, 0x8}, {0x1, 0x3, 0x5}, {0x4, 0x5, 0x5}, {0x2, 0x5, 0xe, 0xc}, {0x1, 0x4, 0x6, 0x5}, {0x2, 0x3, 0x0, 0xb}, {0x3, 0x1, 0x3, 0x9}], 0x10, 0xf}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003b80)=@bpf_tracing={0x1a, 0x1e, &(0x7f00000032c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3bbcf57d7f3f74da, 0x0, 0x1, 0x7, 0x9, 0x2, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @alu={0x7, 0x1, 0x7, 0x2, 0x1, 0xfffffffffffffff8, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @map_fd={0x18, 0x4, 0x1, 0x0, r10}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @ldst={0x3, 0x2, 0x4, 0x6, 0x1, 0xffffffffffffffc0}]}, &(0x7f00000033c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003400)={0x1, 0xf, 0xc0, 0x5}, 0x10, 0x5c6, r12, 0x8, &(0x7f0000003ac0)=[r13, r14, r15, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000003b00)=[{0x5, 0x2, 0x1, 0x9}, {0x3, 0x3, 0xd, 0x8}, {0x1, 0x3, 0x5}, {0x4, 0x5, 0x5}, {0x2, 0x5, 0xe, 0xc}, {0x1, 0x4, 0x6, 0x5}, {0x2, 0x3, 0x0, 0xb}, {0x3, 0x1, 0x3, 0x9}], 0x10, 0xf}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts.
[   71.477355][ T5849] cgroup: Unknown subsys name 'net'
[   71.554138][ T5849] cgroup: Unknown subsys name 'cpuset'
[   71.567503][ T5849] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   72.990039][ T5849] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   77.098311][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   77.110745][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   77.119515][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   77.127998][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   77.135582][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   77.143450][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   77.151806][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   77.159964][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   77.168817][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.176561][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   77.186695][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   77.194321][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   77.198999][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.203693][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   77.210607][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   77.249473][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   77.257936][ T5876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   77.266075][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   77.287572][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   77.290244][ T5183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.294897][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.310463][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.318869][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.353159][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   77.361284][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   77.912436][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   78.025037][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   78.092605][ T5860] chnl_net:caif_netlink_parms(): no params data found
[   78.167497][ T5875] chnl_net:caif_netlink_parms(): no params data found
[   78.304505][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.312316][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.320236][ T5859] bridge_slave_0: entered allmulticast mode
[   78.327486][ T5859] bridge_slave_0: entered promiscuous mode
[   78.368413][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.375900][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.383887][ T5859] bridge_slave_1: entered allmulticast mode
[   78.391123][ T5859] bridge_slave_1: entered promiscuous mode
[   78.398334][ T5867] chnl_net:caif_netlink_parms(): no params data found
[   78.497362][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.506667][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.514924][ T5862] bridge_slave_0: entered allmulticast mode
[   78.522686][ T5862] bridge_slave_0: entered promiscuous mode
[   78.550337][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.562628][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.578142][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.585778][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.593216][ T5860] bridge_slave_0: entered allmulticast mode
[   78.601278][ T5860] bridge_slave_0: entered promiscuous mode
[   78.608310][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.615667][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.623331][ T5862] bridge_slave_1: entered allmulticast mode
[   78.631123][ T5862] bridge_slave_1: entered promiscuous mode
[   78.678171][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.685877][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.693549][ T5860] bridge_slave_1: entered allmulticast mode
[   78.701562][ T5860] bridge_slave_1: entered promiscuous mode
[   78.754087][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.761508][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.769803][ T5875] bridge_slave_0: entered allmulticast mode
[   78.776944][ T5875] bridge_slave_0: entered promiscuous mode
[   78.825273][ T5859] team0: Port device team_slave_0 added
[   78.835662][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.843288][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.851687][ T5875] bridge_slave_1: entered allmulticast mode
[   78.858873][ T5875] bridge_slave_1: entered promiscuous mode
[   78.878911][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.892170][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.916496][ T5859] team0: Port device team_slave_1 added
[   78.939585][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.965916][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.975376][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.983171][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.991042][ T5867] bridge_slave_0: entered allmulticast mode
[   78.998067][ T5867] bridge_slave_0: entered promiscuous mode
[   79.035921][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.074436][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.081746][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.089689][ T5867] bridge_slave_1: entered allmulticast mode
[   79.096647][ T5867] bridge_slave_1: entered promiscuous mode
[   79.115577][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.122916][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.149096][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.163678][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.174949][ T5860] team0: Port device team_slave_0 added
[   79.185460][ T5860] team0: Port device team_slave_1 added
[   79.215430][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.222896][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.249064][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.293995][ T5862] team0: Port device team_slave_0 added
[   79.303262][ T5862] team0: Port device team_slave_1 added
[   79.311625][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.324182][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.333710][ T5876] Bluetooth: hci0: command tx timeout
[   79.370480][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.377630][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.404278][ T5876] Bluetooth: hci4: command tx timeout
[   79.404288][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.420724][ T5868] Bluetooth: hci1: command tx timeout
[   79.422958][ T5880] Bluetooth: hci2: command tx timeout
[   79.427026][ T5868] Bluetooth: hci3: command tx timeout
[   79.470632][ T5875] team0: Port device team_slave_0 added
[   79.477139][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.484911][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.512439][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.566977][ T5875] team0: Port device team_slave_1 added
[   79.602293][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.609495][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.635637][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.647836][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.655114][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.681925][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.695208][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.702445][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.728595][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.754547][ T5867] team0: Port device team_slave_0 added
[   79.763817][ T5867] team0: Port device team_slave_1 added
[   79.782287][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.789407][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.816338][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.840345][ T5859] hsr_slave_0: entered promiscuous mode
[   79.846679][ T5859] hsr_slave_1: entered promiscuous mode
[   79.897443][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.905075][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.931123][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.943690][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.950765][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.977861][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.012038][ T5860] hsr_slave_0: entered promiscuous mode
[   80.018790][ T5860] hsr_slave_1: entered promiscuous mode
[   80.025050][ T5860] debugfs: 'hsr0' already exists in 'hsr'
[   80.031071][ T5860] Cannot create hsr debugfs directory
[   80.077133][ T5862] hsr_slave_0: entered promiscuous mode
[   80.083863][ T5862] hsr_slave_1: entered promiscuous mode
[   80.090266][ T5862] debugfs: 'hsr0' already exists in 'hsr'
[   80.096000][ T5862] Cannot create hsr debugfs directory
[   80.167016][ T5875] hsr_slave_0: entered promiscuous mode
[   80.173535][ T5875] hsr_slave_1: entered promiscuous mode
[   80.180277][ T5875] debugfs: 'hsr0' already exists in 'hsr'
[   80.186035][ T5875] Cannot create hsr debugfs directory
[   80.269541][ T5867] hsr_slave_0: entered promiscuous mode
[   80.275819][ T5867] hsr_slave_1: entered promiscuous mode
[   80.282699][ T5867] debugfs: 'hsr0' already exists in 'hsr'
[   80.288554][ T5867] Cannot create hsr debugfs directory
[   80.829232][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.845906][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.856527][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.875919][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   80.932585][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   80.965954][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   81.000935][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   81.013270][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   81.063027][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.093372][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.103590][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.115690][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.202101][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   81.213355][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   81.226179][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   81.236104][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   81.380823][ T5875] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   81.395790][ T5875] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   81.403101][ T5876] Bluetooth: hci0: command tx timeout
[   81.414743][ T5875] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   81.425758][ T5875] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   81.460172][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.479279][ T5876] Bluetooth: hci4: command tx timeout
[   81.479301][ T5868] Bluetooth: hci2: command tx timeout
[   81.484714][ T5879] Bluetooth: hci1: command tx timeout
[   81.490896][ T5880] Bluetooth: hci3: command tx timeout
[   81.546070][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   81.583160][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.590573][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.615558][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.622849][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.644527][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.717514][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.755930][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[   81.787540][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   81.804342][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.811571][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.857967][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.865217][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.893026][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.909027][  T134] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.916182][  T134] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.965247][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.992264][  T134] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.999553][  T134] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.025743][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   82.084081][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   82.174662][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.182121][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.196257][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.203484][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.220664][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.227888][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.252468][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.260300][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.385514][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.467740][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.636330][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.895601][ T5859] veth0_vlan: entered promiscuous mode
[   82.945912][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.985311][ T5859] veth1_vlan: entered promiscuous mode
[   83.077790][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.112266][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.141760][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.167853][ T5867] veth0_vlan: entered promiscuous mode
[   83.197672][ T5859] veth0_macvtap: entered promiscuous mode
[   83.238023][ T5859] veth1_macvtap: entered promiscuous mode
[   83.249365][ T5867] veth1_vlan: entered promiscuous mode
[   83.322252][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.332819][ T5860] veth0_vlan: entered promiscuous mode
[   83.352266][ T5875] veth0_vlan: entered promiscuous mode
[   83.364859][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.393249][ T5875] veth1_vlan: entered promiscuous mode
[   83.416639][ T5860] veth1_vlan: entered promiscuous mode
[   83.464748][  T134] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.475013][  T134] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.486625][ T5880] Bluetooth: hci0: command tx timeout
[   83.498235][  T134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.510296][  T134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.531002][ T5867] veth0_macvtap: entered promiscuous mode
[   83.554648][ T5867] veth1_macvtap: entered promiscuous mode
[   83.562515][ T5875] veth0_macvtap: entered promiscuous mode
[   83.564121][ T5868] Bluetooth: hci1: command tx timeout
[   83.568425][ T5879] Bluetooth: hci2: command tx timeout
[   83.576277][ T5880] Bluetooth: hci4: command tx timeout
[   83.580516][ T5876] Bluetooth: hci3: command tx timeout
[   83.616509][ T5875] veth1_macvtap: entered promiscuous mode
[   83.666513][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.681175][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.699380][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.735648][   T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.764024][ T5860] veth0_macvtap: entered promiscuous mode
[   83.776523][   T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.787971][   T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.801306][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.814959][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.816620][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.833045][ T5860] veth1_macvtap: entered promiscuous mode
[   83.840827][   T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.859908][ T5862] veth0_vlan: entered promiscuous mode
[   83.907189][  T134] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.917061][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.937437][ T5862] veth1_vlan: entered promiscuous mode
[   83.960572][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.969783][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.986411][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.998897][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.007057][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.024408][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.062061][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.075362][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.117205][  T134] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.128382][  T134] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.145386][ T5862] veth0_macvtap: entered promiscuous mode
[   84.156589][ T5862] veth1_macvtap: entered promiscuous mode
[   84.172957][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   84.192736][  T134] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.247241][  T134] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.297403][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.314611][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.330928][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.401064][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.485395][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.515392][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.531083][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.565415][ T5988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6'.
[   84.597708][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.618599][   T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.634395][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'.
[   84.643657][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.668448][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.681262][   T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.691836][ T5988] netlink: 'syz.0.6': attribute type 5 has an invalid length.
[   84.718006][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.737808][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.783856][ T5991] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   84.852410][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.889296][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.041656][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.076269][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.212497][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.231883][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.566091][ T5876] Bluetooth: hci0: command tx timeout
[   85.639023][ T5876] Bluetooth: hci4: command tx timeout
[   85.639107][ T5879] Bluetooth: hci1: command tx timeout
[   85.653874][ T5876] Bluetooth: hci3: command tx timeout
[   85.659506][ T5876] Bluetooth: hci2: command tx timeout
[   85.785868][ T6020] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   86.370064][ T6023] Zero length message leads to an empty skb
[   86.931958][    T9] cfg80211: failed to load regulatory.db
[   87.206978][ T6060] trusted_key: syz.2.18 sent an empty control message without MSG_MORE.
[   87.220631][ T6047] syz.1.16 (6047) used greatest stack depth: 18848 bytes left
[   87.482576][ T6066] netlink: 108 bytes leftover after parsing attributes in process `syz.1.19'.
[   87.601118][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'.
[   87.983563][ T6076] nbd: device at index 4 is going down
[   88.081202][ T6079] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.385417][ T6058] udevd[6058]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory
[   88.417938][ T6082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23'.
[   88.437644][ T6093] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.26'.
[   88.455414][ T6083] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23'.
[   88.488143][ T6089] netlink: 356 bytes leftover after parsing attributes in process `syz.4.24'.
[   89.145225][ T6123] FAULT_INJECTION: forcing a failure.
[   89.145225][ T6123] name failslab, interval 1, probability 0, space 0, times 1
[   89.155995][ T6124] sctp: [Deprecated]: syz.4.34 (pid 6124) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.155995][ T6124] Use struct sctp_sack_info instead
[   89.182821][ T6123] CPU: 0 UID: 0 PID: 6123 Comm: syz.2.35 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[   89.182848][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   89.182865][ T6123] Call Trace:
[   89.182873][ T6123]  <TASK>
[   89.182881][ T6123]  dump_stack_lvl+0x189/0x250
[   89.182913][ T6123]  ? __pfx____ratelimit+0x10/0x10
[   89.182935][ T6123]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.182956][ T6123]  ? __pfx__printk+0x10/0x10
[   89.182983][ T6123]  ? __lock_acquire+0xab9/0xd20
[   89.183019][ T6123]  should_fail_ex+0x414/0x560
[   89.183045][ T6123]  should_failslab+0xa8/0x100
[   89.183072][ T6123]  kmem_cache_alloc_noprof+0x73/0x3c0
[   89.183095][ T6123]  ? skb_clone+0x212/0x3a0
[   89.183117][ T6123]  skb_clone+0x212/0x3a0
[   89.183137][ T6123]  __netlink_deliver_tap+0x404/0x850
[   89.183172][ T6123]  ? netlink_deliver_tap+0x2e/0x1b0
[   89.183196][ T6123]  netlink_deliver_tap+0x19c/0x1b0
[   89.183219][ T6123]  netlink_unicast+0x7fa/0x9e0
[   89.183248][ T6123]  ? __pfx_netlink_unicast+0x10/0x10
[   89.183270][ T6123]  ? netlink_sendmsg+0x642/0xb30
[   89.183290][ T6123]  ? skb_put+0x11b/0x210
[   89.183324][ T6123]  netlink_sendmsg+0x805/0xb30
[   89.183356][ T6123]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.183381][ T6123]  ? aa_sock_msg_perm+0xf1/0x1d0
[   89.183407][ T6123]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   89.183426][ T6123]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.183449][ T6123]  __sock_sendmsg+0x21c/0x270
[   89.183472][ T6123]  ____sys_sendmsg+0x505/0x830
[   89.183503][ T6123]  ? __pfx_____sys_sendmsg+0x10/0x10
[   89.183534][ T6123]  ? import_iovec+0x74/0xa0
[   89.183553][ T6123]  ___sys_sendmsg+0x21f/0x2a0
[   89.183577][ T6123]  ? __pfx____sys_sendmsg+0x10/0x10
[   89.183621][ T6123]  ? __fget_files+0x2a/0x420
[   89.183644][ T6123]  ? __fget_files+0x3a0/0x420
[   89.183676][ T6123]  __x64_sys_sendmsg+0x19b/0x260
[   89.183703][ T6123]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   89.183733][ T6123]  ? __pfx_ksys_write+0x10/0x10
[   89.183752][ T6123]  ? rcu_is_watching+0x15/0xb0
[   89.183778][ T6123]  ? do_syscall_64+0xbe/0x3b0
[   89.183801][ T6123]  do_syscall_64+0xfa/0x3b0
[   89.183820][ T6123]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.183837][ T6123]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.183853][ T6123]  ? clear_bhb_loop+0x60/0xb0
[   89.183875][ T6123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.183894][ T6123] RIP: 0033:0x7f377238ebe9
[   89.183918][ T6123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.183932][ T6123] RSP: 002b:00007f3773227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   89.183955][ T6123] RAX: ffffffffffffffda RBX: 00007f37725b5fa0 RCX: 00007f377238ebe9
[   89.183968][ T6123] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[   89.183979][ T6123] RBP: 00007f3773227090 R08: 0000000000000000 R09: 0000000000000000
[   89.183988][ T6123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.183996][ T6123] R13: 00007f37725b6038 R14: 00007f37725b5fa0 R15: 00007ffd1f69b198
[   89.184025][ T6123]  </TASK>
[   89.185274][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.35'.
[   89.513485][ T6123] netlink: 'syz.2.35': attribute type 7 has an invalid length.
[   89.521858][ T6123] netlink: 'syz.2.35': attribute type 8 has an invalid length.
[   89.529674][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'.
[   89.594038][ T6123] gretap0: entered promiscuous mode
[   89.612339][ T6123] batadv_slave_1: entered promiscuous mode
[   89.647927][ T6123] erspan0: entered promiscuous mode
[   89.925675][ T6142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.40'.
[   90.135946][ T6150] netlink: 68 bytes leftover after parsing attributes in process `syz.3.42'.
[   90.154374][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'.
[   90.207189][ T6145] tipc: Started in network mode
[   90.212341][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'.
[   90.221275][ T6145] tipc: Node identity a6911a5a9207, cluster identity 4711
[   90.268848][ T6145] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.286999][ T6145] syzkaller0: entered promiscuous mode
[   90.304839][ T6145] syzkaller0: entered allmulticast mode
[   90.365126][ T6157] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   90.396352][ T6158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.45'.
[   90.417979][ T6145] tipc: Resetting bearer <eth:syzkaller0>
[   90.442476][ T6144] tipc: Resetting bearer <eth:syzkaller0>
[   90.485214][ T6144] tipc: Disabling bearer <eth:syzkaller0>
[   90.550552][ T6158] netlink: 'syz.4.45': attribute type 1 has an invalid length.
[   90.574015][ T6158] netlink: 'syz.4.45': attribute type 2 has an invalid length.
[   90.606894][ T6158] netlink: 'syz.4.45': attribute type 3 has an invalid length.
[   90.638279][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.45'.
[   90.744726][ T6172] netlink: 'syz.1.50': attribute type 4 has an invalid length.
[   90.755750][ T6174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.49'.
[   90.914189][ T6184] netlink: 'syz.4.51': attribute type 12 has an invalid length.
[   90.939458][ T6184] netlink: 'syz.4.51': attribute type 29 has an invalid length.
[   90.975872][ T6184] netlink: 148 bytes leftover after parsing attributes in process `syz.4.51'.
[   91.030199][ T6184] netlink: 59 bytes leftover after parsing attributes in process `syz.4.51'.
[   91.615189][ T6210] netlink: 36 bytes leftover after parsing attributes in process `syz.0.58'.
[   91.849560][ T6220] syzkaller0: entered promiscuous mode
[   91.855084][ T6220] syzkaller0: entered allmulticast mode
[   91.897242][ T6222] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   91.941307][ T6220] tipc: Started in network mode
[   91.949612][ T6220] tipc: Node identity 16a0fbeb7eca, cluster identity 4711
[   91.969397][ T6220] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.016489][ T6220] tipc: Resetting bearer <eth:syzkaller0>
[   92.097914][ T6218] tipc: Resetting bearer <eth:syzkaller0>
[   92.190763][ T6218] tipc: Disabling bearer <eth:syzkaller0>
[   92.233688][ T6233] wireguard0: entered promiscuous mode
[   92.246109][ T6233] wireguard0: entered allmulticast mode
[   92.288355][ T6234] 8021q: VLANs not supported on nlmon0
[   92.779727][ T6251] netlink: 'syz.2.69': attribute type 4 has an invalid length.
[   92.861537][ T6251] netlink: 'syz.2.69': attribute type 4 has an invalid length.
[   93.036406][ T6267] bridge_slave_0: left allmulticast mode
[   93.046286][ T6267] bridge_slave_0: left promiscuous mode
[   93.060304][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.106074][ T6267] bridge_slave_1: left allmulticast mode
[   93.111936][ T6267] bridge_slave_1: left promiscuous mode
[   93.117778][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.134276][ T6267] bond0: (slave bond_slave_0): Releasing backup interface
[   93.146286][ T6267] bond0: (slave bond_slave_1): Releasing backup interface
[   93.155275][ T6273] netlink: 'syz.4.75': attribute type 10 has an invalid length.
[   93.180943][ T6267] team0: Port device team_slave_0 removed
[   93.200675][ T6267] team0: Port device team_slave_1 removed
[   93.208061][ T6267] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.226048][ T6267] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.235494][ T6267] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.244341][ T6267] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.337655][ T6273] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   93.412698][ T6277] batadv1: entered promiscuous mode
[   93.427592][ T6277] batadv1: entered allmulticast mode
[   93.533240][ T6282] syzkaller0: entered promiscuous mode
[   93.548607][ T6282] syzkaller0: entered allmulticast mode
[   93.567672][ T6278] syz.4.75 (6278) used greatest stack depth: 17016 bytes left
[   93.634931][ T6282] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.674114][ T6282] tipc: Resetting bearer <eth:syzkaller0>
[   93.723138][ T6281] tipc: Resetting bearer <eth:syzkaller0>
[   93.779793][ T6281] tipc: Disabling bearer <eth:syzkaller0>
[   93.926301][ T6291] hsr_slave_1 (unregistering): left promiscuous mode
[   94.152475][ T6309] netlink: del zone limit has 4 unknown bytes
[   94.162283][ T6305] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   94.512735][ T6321] netlink: 'syz.2.92': attribute type 25 has an invalid length.
[   94.598527][   T30] audit: type=1804 audit(1754696770.020:2): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.91" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=123 res=1 errno=0
[   94.689631][   T30] audit: type=1800 audit(1754696770.050:3): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.91" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=123 res=0 errno=0
[   95.438268][ T6355] __nla_validate_parse: 7 callbacks suppressed
[   95.438287][ T6355] netlink: 3 bytes leftover after parsing attributes in process `syz.2.100'.
[   95.561617][ T6355] 0ªX¹¦À: renamed from caif0
[   95.584016][ T6355] 0ªX¹¦À: entered allmulticast mode
[   95.590772][ T6355] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[   95.736473][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'.
[   95.778740][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'.
[   95.870125][ T6368] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[   95.916678][ T6368] team0: Device ipvlan3 is already an upper device of the team interface
[   95.938030][ T6374] netlink: 36 bytes leftover after parsing attributes in process `syz.4.105'.
[   96.890548][ T6411] Illegal XDP return value 2062597120 on prog  (id 38) dev N/A, expect packet loss!
[   96.924606][ T6412] tipc: Started in network mode
[   96.991102][ T6412] tipc: Node identity d2ce76472c33, cluster identity 4711
[   97.053664][ T6423] netlink: 'syz.1.115': attribute type 1 has an invalid length.
[   97.063783][ T6412] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.086359][ T6423] netlink: 244 bytes leftover after parsing attributes in process `syz.1.115'.
[   97.129790][ T6417] syzkaller0: entered promiscuous mode
[   97.147142][ T6417] syzkaller0: entered allmulticast mode
[   97.148427][ T6419] netlink: 204 bytes leftover after parsing attributes in process `syz.2.116'.
[   97.234266][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.116'.
[   97.346199][ T6408] tipc: Resetting bearer <eth:syzkaller0>
[   97.367377][ T6431] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[   97.378006][ T6406] tipc: Resetting bearer <eth:syzkaller0>
[   97.394215][ T6406] tipc: Disabling bearer <eth:syzkaller0>
[   97.489844][ T6436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.121'.
[   97.993059][ T6457] netlink: 68 bytes leftover after parsing attributes in process `syz.3.124'.
[   98.026251][ T6455] netlink: 48 bytes leftover after parsing attributes in process `syz.1.127'.
[   98.380172][ T6473] netlink: 'syz.2.131': attribute type 7 has an invalid length.
[   98.389168][ T6473] netlink: 'syz.2.131': attribute type 8 has an invalid length.
[   98.541052][ T6477] sctp: [Deprecated]: syz.0.130 (pid 6477) Use of int in max_burst socket option.
[   98.541052][ T6477] Use struct sctp_assoc_value instead
[   99.152631][ T6498] warning: `syz.4.137' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   99.167959][ T6498] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[   99.451049][ T6501] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.656395][ T6501] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.727381][ T6531] netlink: 'syz.2.145': attribute type 7 has an invalid length.
[   99.772833][ T6531] netlink: 'syz.2.145': attribute type 8 has an invalid length.
[   99.841880][ T6501] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.987143][ T6501] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.304068][   T59] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.366367][   T59] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.421843][   T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.529472][   T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.697803][ T6564] netlink: 'syz.3.153': attribute type 83 has an invalid length.
[  100.721340][ T6569] veth0: entered promiscuous mode
[  100.735905][ T6564] Bluetooth: MGMT ver 1.23
[  100.794715][ T6574] __nla_validate_parse: 7 callbacks suppressed
[  100.794733][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'.
[  101.297477][ T6579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.321738][ T6579] syzkaller0: entered promiscuous mode
[  101.327366][ T6579] syzkaller0: entered allmulticast mode
[  101.455431][ T6577] tipc: Resetting bearer <eth:syzkaller0>
[  101.485446][ T6599] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.499969][ T6577] tipc: Disabling bearer <eth:syzkaller0>
[  101.695170][ T6612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.160'.
[  101.765067][ T6612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.160'.
[  101.765955][ T6614] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.793125][ T6621] netlink: 'syz.2.165': attribute type 32 has an invalid length.
[  101.829078][ T6623] syzkaller0: entered promiscuous mode
[  101.829856][ T6621] netlink: 60 bytes leftover after parsing attributes in process `syz.2.165'.
[  101.839926][ T6620] netlink: 27 bytes leftover after parsing attributes in process `syz.1.164'.
[  101.858958][ T6623] syzkaller0: entered allmulticast mode
[  101.941310][ T6627] netlink: 'syz.1.164': attribute type 13 has an invalid length.
[  101.962868][ T6627] netlink: 'syz.1.164': attribute type 17 has an invalid length.
[  101.968928][ T6612] erspan0: entered promiscuous mode
[  101.999447][ T6629] netlink: 'syz.3.167': attribute type 10 has an invalid length.
[  102.016167][ T6612] batadv_slave_1: entered promiscuous mode
[  102.025172][ T6612] debugfs: 'hsr1' already exists in 'hsr'
[  102.035179][ T6612] Cannot create hsr debugfs directory
[  102.055637][ T6631] tipc: Resetting bearer <eth:syzkaller0>
[  102.272129][ T6629] team0: Port device netdevsim0 added
[  102.554510][ T6637] TCP: TCP_TX_DELAY enabled
[  102.721459][ T6627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.769980][  T980] tipc: Node number set to 1751841771
[  102.779435][ T6613] tipc: Resetting bearer <eth:syzkaller0>
[  102.829681][ T6613] tipc: Disabling bearer <eth:syzkaller0>
[  102.870388][ T6659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.008698][ T6661] syzkaller0: entered promiscuous mode
[  103.051925][ T6661] syzkaller0: entered allmulticast mode
[  103.108871][ T6664] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.215467][ T6661] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.291271][ T6661] tipc: Resetting bearer <eth:syzkaller0>
[  103.338923][ T6660] tipc: Resetting bearer <eth:syzkaller0>
[  103.393914][ T6660] tipc: Disabling bearer <eth:syzkaller0>
[  103.413175][ T6680] lo: entered allmulticast mode
[  103.424431][ T6675] lo: left allmulticast mode
[  103.567437][ T6688] netlink: 'syz.2.179': attribute type 32 has an invalid length.
[  103.604178][ T6688] netlink: 60 bytes leftover after parsing attributes in process `syz.2.179'.
[  103.764747][ T6692] syzkaller1: entered promiscuous mode
[  103.786956][ T6692] syzkaller1: entered allmulticast mode
[  103.855563][ T6692] netlink: 32 bytes leftover after parsing attributes in process `syz.4.180'.
[  104.287414][ T6728] batman_adv: batadv0: Adding interface: gretap1
[  104.294556][ T6728] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.355239][ T6728] batman_adv: batadv0: Interface activated: gretap1
[  104.765499][ T6754] netlink: 'syz.4.196': attribute type 31 has an invalid length.
[  105.172372][ T6755] syzkaller1: entered promiscuous mode
[  105.183093][ T6755] syzkaller1: entered allmulticast mode
[  105.495449][ T6749] netlink: 256 bytes leftover after parsing attributes in process `syz.0.194'.
[  105.802789][ T6787] syzkaller0: entered promiscuous mode
[  105.808322][ T6787] syzkaller0: entered allmulticast mode
[  105.870105][ T6795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.202'.
[  105.922269][ T6798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.202'.
[  106.001317][ T6787] tipc: Started in network mode
[  106.006234][ T6787] tipc: Node identity 4e0c9dc394c4, cluster identity 2
[  106.039766][ T6787] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.072583][ T6787] tipc: Resetting bearer <eth:syzkaller0>
[  106.098266][ T6786] tipc: Resetting bearer <eth:syzkaller0>
[  106.156117][ T6786] tipc: Disabling bearer <eth:syzkaller0>
[  106.210636][ T6801] syzkaller0: entered promiscuous mode
[  106.219964][ T6806] netlink: 92 bytes leftover after parsing attributes in process `syz.3.205'.
[  106.239927][ T6801] syzkaller0: entered allmulticast mode
[  106.363683][ T6801] tipc: Started in network mode
[  106.372112][ T6801] tipc: Node identity 662a6805d1aa, cluster identity 4711
[  106.414985][ T6801] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.471389][ T6801] tipc: Resetting bearer <eth:syzkaller0>
[  106.516027][ T6800] tipc: Resetting bearer <eth:syzkaller0>
[  106.548017][ T6800] tipc: Disabling bearer <eth:syzkaller0>
[  106.597862][ T6817] netlink: 14 bytes leftover after parsing attributes in process `syz.3.208'.
[  106.904664][ T6827] netlink: 72 bytes leftover after parsing attributes in process `syz.0.212'.
[  107.001821][ T6817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.076712][ T6817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.129375][ T6817] bond0 (unregistering): Released all slaves
[  107.734171][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'.
[  107.762268][ T6846] netlink: 'syz.0.216': attribute type 29 has an invalid length.
[  107.771504][ T6846] netlink: 'syz.0.216': attribute type 29 has an invalid length.
[  107.959813][  T134] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.970448][  T134] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.052693][ T6867] netlink: 128 bytes leftover after parsing attributes in process `syz.4.223'.
[  108.073003][  T134] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.075370][ T6867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.223'.
[  108.086741][  T134] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.295064][ T6874] netlink: 'syz.4.227': attribute type 1 has an invalid length.
[  108.325237][ T6879] netlink: 'syz.2.225': attribute type 1 has an invalid length.
[  108.359369][ T6874] netlink: 172 bytes leftover after parsing attributes in process `syz.4.227'.
[  108.400710][ T6879] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  108.437138][ T6888] netlink: 'syz.0.229': attribute type 23 has an invalid length.
[  108.439143][ T5876] Bluetooth: hci4: command tx timeout
[  108.641999][ T6893] IPVS: Error connecting to the multicast addr
[  108.709606][ T6899] sctp: [Deprecated]: syz.2.232 (pid 6899) Use of int in max_burst socket option deprecated.
[  108.709606][ T6899] Use struct sctp_assoc_value instead
[  108.748368][ T6893] IPVS: Error connecting to the multicast addr
[  108.938186][ T6907] smc: net device bond0 applied user defined pnetid SYZ2
[  108.948109][ T6907] netlink: 14 bytes leftover after parsing attributes in process `syz.0.235'.
[  109.366910][ T6907] smc: removing net device bond0 with user defined pnetid SYZ2
[  109.393523][ T6907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  109.414494][ T6907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  109.451321][ T6907] bond0 (unregistering): Released all slaves
[  110.247722][ T6960] netlink: 'syz.1.249': attribute type 10 has an invalid length.
[  110.322987][ T6960] bond0: entered promiscuous mode
[  110.359758][ T6960] bond_slave_0: entered promiscuous mode
[  110.373156][ T6960] bond_slave_1: entered promiscuous mode
[  110.395539][ T6960] batadv0: entered promiscuous mode
[  110.416942][ T6960] debugfs: 'hsr1' already exists in 'hsr'
[  110.428294][ T6960] Cannot create hsr debugfs directory
[  110.434841][ T6960] hsr1: entered allmulticast mode
[  110.440573][ T6960] bond0: entered allmulticast mode
[  110.445845][ T6960] bond_slave_0: entered allmulticast mode
[  110.460830][ T6960] bond_slave_1: entered allmulticast mode
[  110.467263][ T6960] batadv0: entered allmulticast mode
[  110.474810][ T6960] 8021q: adding VLAN 0 to HW filter on device hsr1
[  110.503389][ T6960] bond0: left promiscuous mode
[  110.509601][ T6960] bond_slave_0: left promiscuous mode
[  110.523184][ T6960] bond_slave_1: left promiscuous mode
[  110.545490][ T6960] batadv0: left promiscuous mode
[  110.637775][ T6976] netlink: 'syz.0.254': attribute type 7 has an invalid length.
[  110.655903][ T6976] netlink: 'syz.0.254': attribute type 8 has an invalid length.
[  110.720588][ T6976] gretap0: entered promiscuous mode
[  110.734384][ T6976] batadv_slave_1: entered promiscuous mode
[  110.750390][ T6976] erspan0: entered promiscuous mode
[  110.767529][ T6976] debugfs: 'hsr1' already exists in 'hsr'
[  110.794593][ T6976] Cannot create hsr debugfs directory
[  111.203945][ T6997] netlink: 'syz.0.261': attribute type 1 has an invalid length.
[  111.754604][ T7017] __nla_validate_parse: 5 callbacks suppressed
[  111.754623][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'.
[  111.839965][ T7017] bridge0: entered promiscuous mode
[  111.845356][ T7017] bridge0: entered allmulticast mode
[  112.670972][ T7052] netlink: zone id is out of range
[  112.696664][ T7052] netlink: zone id is out of range
[  112.708870][ T7052] netlink: zone id is out of range
[  112.714031][ T7052] netlink: zone id is out of range
[  112.723337][ T7052] netlink: zone id is out of range
[  112.743559][ T7052] netlink: zone id is out of range
[  112.756921][ T7052] netlink: zone id is out of range
[  112.773983][ T7052] netlink: zone id is out of range
[  112.946282][ T7052] netlink: zone id is out of range
[  112.969526][ T7052] netlink: zone id is out of range
[  112.996201][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.277'.
[  113.025595][ T7068] netlink: 156 bytes leftover after parsing attributes in process `syz.4.277'.
[  113.066289][ T7071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.278'.
[  113.137768][ T7076] netlink: 'syz.1.278': attribute type 2 has an invalid length.
[  113.152177][ T7076] netlink: 'syz.1.278': attribute type 1 has an invalid length.
[  113.170956][ T7076] netlink: 152 bytes leftover after parsing attributes in process `syz.1.278'.
[  113.183714][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.278'.
[  113.184756][ T7072] mac80211_hwsim hwsim2 nicvf0: entered promiscuous mode
[  113.215734][ T7072] mac80211_hwsim hwsim2 nicvf0: entered allmulticast mode
[  113.342173][ T7082] netlink: 20 bytes leftover after parsing attributes in process `syz.1.282'.
[  113.361576][ T7080] netlink: 36 bytes leftover after parsing attributes in process `syz.4.281'.
[  113.372107][ T7078] tap0: tun_chr_ioctl cmd 1074025675
[  113.377615][ T7078] tap0: persist disabled
[  113.731266][ T7094] netlink: 40 bytes leftover after parsing attributes in process `syz.1.287'.
[  113.749046][ T7099] netlink: 40 bytes leftover after parsing attributes in process `syz.2.286'.
[  114.343853][ T7115] netlink: 'syz.2.295': attribute type 2 has an invalid length.
[  114.351791][ T7115] netlink: 'syz.2.295': attribute type 1 has an invalid length.
[  114.665340][ T7126] tun0: tun_chr_ioctl cmd 21731
[  114.776790][ T7134] netlink: 'syz.4.301': attribute type 6 has an invalid length.
[  114.786999][ T7132] netlink: 'syz.4.301': attribute type 6 has an invalid length.
[  115.042573][ T7147] rdma_op ffff88807c2b59f0 conn xmit_rdma 0000000000000000
[  115.486024][ T7164] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  115.504424][ T7164] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  116.963203][ T7212] syzkaller0: entered promiscuous mode
[  116.978927][ T7212] syzkaller0: entered allmulticast mode
[  117.020704][ T7213] pim6reg1: entered promiscuous mode
[  117.026198][ T7213] pim6reg1: entered allmulticast mode
[  117.076492][ T7212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.094368][ T7212] tipc: Resetting bearer <eth:syzkaller0>
[  117.108215][ T7210] tipc: Resetting bearer <eth:syzkaller0>
[  117.132653][ T7210] tipc: Disabling bearer <eth:syzkaller0>
[  117.406633][   T10] IPVS: starting estimator thread 0...
[  117.517618][ T7237] __nla_validate_parse: 7 callbacks suppressed
[  117.517640][ T7237] netlink: 52 bytes leftover after parsing attributes in process `syz.3.330'.
[  117.533809][ T7233] IPVS: using max 24 ests per chain, 57600 per kthread
[  117.647146][ T7209] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  118.025792][ T7258] syz_tun: entered allmulticast mode
[  118.051666][ T7259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.337'.
[  118.095145][ T7259] validate_nla: 1 callbacks suppressed
[  118.095164][ T7259] netlink: 'syz.3.337': attribute type 7 has an invalid length.
[  118.148750][ T7259] netlink: 'syz.3.337': attribute type 8 has an invalid length.
[  118.181924][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'.
[  118.277752][ T7271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.338'.
[  118.357585][ T7259] gretap0: entered promiscuous mode
[  118.371101][ T7259] batadv_slave_1: entered promiscuous mode
[  118.383303][ T7259] erspan0: entered promiscuous mode
[  118.395126][ T7259] debugfs: 'hsr1' already exists in 'hsr'
[  118.406702][ T7259] Cannot create hsr debugfs directory
[  118.429035][ T7271] bond0: entered promiscuous mode
[  118.444493][ T7271] bond_slave_0: entered promiscuous mode
[  118.468940][ T7271] bond_slave_1: entered promiscuous mode
[  118.480269][ T7271] bond0: left promiscuous mode
[  118.485202][ T7271] bond_slave_0: left promiscuous mode
[  118.518958][ T7271] bond_slave_1: left promiscuous mode
[  118.584072][ T7249] syz_tun: left allmulticast mode
[  118.653727][ T7289] pimreg: entered allmulticast mode
[  118.726878][ T7279] syzkaller0: entered promiscuous mode
[  118.767623][ T7279] syzkaller0: entered allmulticast mode
[  118.859679][ T7294] vlan2: entered allmulticast mode
[  118.886943][ T7294] veth1: entered allmulticast mode
[  118.939597][ T7294] batman_adv: batadv0: Adding interface: vlan2
[  118.976814][ T7294] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.018044][ T7294] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  119.196202][ T7318] netlink: 'syz.3.349': attribute type 3 has an invalid length.
[  119.221903][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.349'.
[  119.358636][ T7324] netlink: 'syz.2.350': attribute type 10 has an invalid length.
[  119.378652][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.352'.
[  119.399055][ T5876] Bluetooth: hci0: command 0x0401 tx timeout
[  119.622832][ T7324] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  120.427501][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'.
[  120.464310][ T7375] netlink: 'syz.2.362': attribute type 32 has an invalid length.
[  120.477416][ T7375] netlink: 60 bytes leftover after parsing attributes in process `syz.2.362'.
[  120.503965][ T7370] smc: adding net device bond0 with user defined pnetid SYZ2
[  120.539957][ T7372] syzkaller0: entered promiscuous mode
[  120.562547][ T7372] syzkaller0: entered allmulticast mode
[  121.325841][ T7415] netlink: 52 bytes leftover after parsing attributes in process `syz.0.373'.
[  121.533293][ T7421] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  121.556943][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'.
[  121.557260][ T7421] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  121.663996][ T7419] geneve2: entered promiscuous mode
[  121.672435][ T7419] geneve2: entered allmulticast mode
[  121.765223][ T7427] batadv1: entered allmulticast mode
[  121.775413][ T7427] 8021q: adding VLAN 0 to HW filter on device batadv1
[  122.062627][ T7437] net_ratelimit: 101 callbacks suppressed
[  122.062647][ T7437] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.503729][ T7462] netlink: 'syz.3.390': attribute type 2 has an invalid length.
[  122.608101][ T7470] vti0: entered promiscuous mode
[  122.615797][ T7478] netlink: 'syz.1.394': attribute type 1 has an invalid length.
[  122.661905][ T7471] vti0: entered promiscuous mode
[  122.738318][ T7478] bond1: entered promiscuous mode
[  122.744004][ T7478] 8021q: adding VLAN 0 to HW filter on device bond1
[  122.772077][ T7479] bond1: (slave bridge2): making interface the new active one
[  122.780004][ T7479] bridge2: entered promiscuous mode
[  122.786254][ T7479] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  122.882430][ T7482] __nla_validate_parse: 3 callbacks suppressed
[  122.882448][ T7482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.397'.
[  122.906183][ T7494] openvswitch: netlink: IP tunnel dst address not specified
[  123.037532][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.402'.
[  123.096299][ T7500] netlink: 'syz.4.402': attribute type 8 has an invalid length.
[  123.188069][ T7513] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  123.455857][ T7529] netlink: 104 bytes leftover after parsing attributes in process `syz.3.411'.
[  123.540686][ T7533] netlink: 48 bytes leftover after parsing attributes in process `syz.2.412'.
[  123.576483][ T7536] v: renamed from ip6_vti0 (while UP)
[  123.623354][ T7538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.413'.
[  123.647044][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'.
[  123.696300][ T7543] netlink: 36 bytes leftover after parsing attributes in process `syz.0.414'.
[  123.888897][ T7549] netlink: 'syz.2.415': attribute type 1 has an invalid length.
[  123.916985][ T7552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.417'.
[  123.927621][ T7549] netlink: 144 bytes leftover after parsing attributes in process `syz.2.415'.
[  123.937833][ T7552] netlink: 'syz.1.417': attribute type 7 has an invalid length.
[  123.948607][ T7549] netlink: 'syz.2.415': attribute type 2 has an invalid length.
[  123.959241][ T7552] netlink: 'syz.1.417': attribute type 8 has an invalid length.
[  123.972869][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'.
[  124.037232][ T7552] gretap0: entered promiscuous mode
[  124.062056][ T7552] batadv_slave_1: entered promiscuous mode
[  124.067543][ T7562] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  124.081709][ T7552] erspan0: entered promiscuous mode
[  124.101246][ T7552] debugfs: 'hsr1' already exists in 'hsr'
[  124.108287][ T7552] Cannot create hsr debugfs directory
[  124.338319][  T134] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[  124.745554][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.754366][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.934685][ T7600] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.963087][ T7600] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.260455][ T7600] batman_adv: batadv0: Interface deactivated: gretap1
[  125.354315][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.392732][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.462997][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.510146][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.754252][ T7650] ieee802154 phy1 wpan1: encryption failed: -22
[  126.265163][ T7675] netlink: 'syz.1.443': attribute type 7 has an invalid length.
[  126.973951][ T7699] openvswitch: netlink: Duplicate or invalid key (type 0).
[  126.981592][ T7699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.324893][ T7720] Unsupported ieee802154 address type: 0
[  127.781082][ T7746] wireguard0: entered promiscuous mode
[  127.787149][ T7746] wireguard0: entered allmulticast mode
[  127.797998][ T7615] IPVS: starting estimator thread 0...
[  127.909242][ T7751] IPVS: using max 27 ests per chain, 64800 per kthread
[  128.089450][ T7758] __nla_validate_parse: 9 callbacks suppressed
[  128.089469][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'.
[  128.184793][ T7763] netlink: 'syz.4.468': attribute type 1 has an invalid length.
[  128.257370][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.469'.
[  128.298444][ T7769] sctp: [Deprecated]: syz.4.471 (pid 7769) Use of int in max_burst socket option.
[  128.298444][ T7769] Use struct sctp_assoc_value instead
[  128.324024][ T7767] netlink: 'syz.3.469': attribute type 7 has an invalid length.
[  128.371231][ T7767] netlink: 'syz.3.469': attribute type 8 has an invalid length.
[  128.396105][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.469'.
[  128.400258][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'.
[  128.493829][ T7780] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  128.663945][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'.
[  128.944554][ T7792] syzkaller0: entered promiscuous mode
[  128.967877][ T7792] syzkaller0: entered allmulticast mode
[  129.085534][ T7772] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  129.255875][ T7772] tipc: Resetting bearer <eth:syzkaller0>
[  129.293316][ T7812] xfrm1: entered allmulticast mode
[  129.299265][ T7771] tipc: Resetting bearer <eth:syzkaller0>
[  130.173005][    T9] tipc: Node number set to 882252378
[  130.771043][ T7847] netlink: 20 bytes leftover after parsing attributes in process `syz.0.489'.
[  131.725195][ T7771] tipc: Disabling bearer <eth:syzkaller0>
[  131.737195][ T7830] netlink: 'syz.3.485': attribute type 29 has an invalid length.
[  131.962990][ T7860] syzkaller0: entered promiscuous mode
[  131.979775][ T7860] syzkaller0: entered allmulticast mode
[  132.194107][ T7876] netlink: 'syz.2.498': attribute type 1 has an invalid length.
[  132.213404][ T7876] netlink: 224 bytes leftover after parsing attributes in process `syz.2.498'.
[  132.510376][ T7890] IPv4: Oversized IP packet from 127.202.26.0
[  132.689912][ T7894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.501'.
[  133.006265][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  133.210576][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.507'.
[  133.301590][ T7931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.509'.
[  133.352545][ T7930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.510'.
[  133.421788][ T7930] netlink: 'syz.4.510': attribute type 7 has an invalid length.
[  133.498915][ T7930] netlink: 'syz.4.510': attribute type 8 has an invalid length.
[  133.517890][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'.
[  133.608397][ T7930] gretap0: entered promiscuous mode
[  133.699200][ T7930] gretap0: left promiscuous mode
[  133.743137][ T7926] "syz.0.509" (7926) uses obsolete ecb(arc4) skcipher
[  133.954586][ T7952] netlink: 'syz.1.515': attribute type 1 has an invalid length.
[  133.970566][ T7952] netlink: 'syz.1.515': attribute type 4 has an invalid length.
[  134.108663][ T7959] netlink: 'syz.4.517': attribute type 32 has an invalid length.
[  134.135539][ T7959] netlink: 60 bytes leftover after parsing attributes in process `syz.4.517'.
[  134.375403][ T7963] bridge0: port 3(netdevsim2) entered blocking state
[  134.385270][ T7963] bridge0: port 3(netdevsim2) entered disabled state
[  134.393762][ T7963] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  134.406945][ T7963] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[  134.416858][ T7963] bridge0: port 3(netdevsim2) entered blocking state
[  134.424518][ T7963] bridge0: port 3(netdevsim2) entered forwarding state
[  134.721414][ T7980] IPVS: Error joining to the multicast group
[  134.767025][ T7982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.522'.
[  134.816585][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'.
[  135.251536][ T8002] netlink: 'syz.0.527': attribute type 1 has an invalid length.
[  135.391776][ T8008] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  135.411376][ T8006] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.428103][ T8006] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.533657][ T8009] veth1: entered promiscuous mode
[  135.631776][ T8006] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.643493][ T8006] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.658113][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.529'.
[  135.747068][ T8014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.530'.
[  135.809869][ T8006] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.824347][ T8006] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.970877][ T8020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.531'.
[  136.070742][ T8006] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.109240][ T8006] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.414387][ T1343] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  136.457391][ T1343] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.537894][ T1343] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  136.558243][ T1343] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.621270][ T1343] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  136.636369][ T1343] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.691116][ T1343] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  136.719940][ T1343] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.116851][ T8062] netlink: 'syz.4.543': attribute type 1 has an invalid length.
[  137.221626][ T8068] bond1 (unregistering): Released all slaves
[  137.618012][ T8087] netlink: 'syz.4.549': attribute type 1 has an invalid length.
[  137.675401][ T8087] 8021q: adding VLAN 0 to HW filter on device bond1
[  137.707926][ T8091] bond1: (slave geneve2): making interface the new active one
[  137.727344][ T8091] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  137.795249][ T8091] tipc: Failed to remove unknown binding: 66,1,1/0:3855296888/3855296890
[  137.809618][ T8091] tipc: Failed to remove unknown binding: 66,1,1/0:3855296888/3855296890
[  137.826036][ T8091] tipc: Failed to remove unknown binding: 66,1,1/0:3855296888/3855296890
[  138.204716][ T8098] netlink: 'syz.3.552': attribute type 1 has an invalid length.
[  138.264960][ T8098] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.410528][ T8110] __nla_validate_parse: 2 callbacks suppressed
[  138.410545][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'.
[  138.505255][ T8103] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.566148][ T8103] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  138.621080][ T8103] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  138.725039][ T8119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.556'.
[  138.753674][ T8113] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.792116][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.558'.
[  138.833316][ T8098] bond0: (slave bridge2): Enslaving as an active interface with a down link
[  139.053831][ T8109] syzkaller0: entered promiscuous mode
[  139.079969][ T8109] syzkaller0: entered allmulticast mode
[  139.089492][ T8133] IPv6: Can't replace route, no match found
[  139.379433][ T8126] tipc: Resetting bearer <eth:syzkaller0>
[  139.416218][ T8133] netlink: 'syz.1.559': attribute type 15 has an invalid length.
[  139.528755][ T8134] netlink: 'syz.1.559': attribute type 15 has an invalid length.
[  139.607599][ T8102] tipc: Resetting bearer <eth:syzkaller0>
[  139.739399][ T8102] tipc: Disabling bearer <eth:syzkaller0>
[  139.843290][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.562'.
[  139.914105][ T8143] netlink: 92 bytes leftover after parsing attributes in process `syz.2.562'.
[  139.926441][ T8143] netlink: 92 bytes leftover after parsing attributes in process `syz.2.562'.
[  139.946611][ T8154] netlink: 'syz.4.564': attribute type 12 has an invalid length.
[  140.507322][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'.
[  140.526852][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'.
[  140.527818][ T1343] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.551215][ T1343] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.564558][ T1343] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.587235][ T1343] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.617935][ T8189] netlink: 26 bytes leftover after parsing attributes in process `syz.3.575'.
[  140.960924][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'.
[  141.078044][ T8217] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.089609][ T8212] syzkaller0: entered promiscuous mode
[  141.095240][ T8212] syzkaller0: entered allmulticast mode
[  141.188815][ T8212] block nbd0: server does not support multiple connections per device.
[  141.197855][ T8212] block nbd0: shutting down sockets
[  141.344706][ T8211] tipc: Resetting bearer <eth:syzkaller0>
[  141.392534][ T8211] tipc: Disabling bearer <eth:syzkaller0>
[  141.632965][ T8235] raw_sendmsg: syz.0.588 forgot to set AF_INET. Fix it!
[  141.732609][ T8235] sctp: [Deprecated]: syz.0.588 (pid 8235) Use of struct sctp_assoc_value in delayed_ack socket option.
[  141.732609][ T8235] Use struct sctp_sack_info instead
[  141.757352][ T7617] IPVS: starting estimator thread 0...
[  141.885378][ T8243] IPVS: using max 25 ests per chain, 60000 per kthread
[  141.996740][ T8262] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.252829][ T8270] syzkaller0: entered promiscuous mode
[  142.260835][ T8270] syzkaller0: entered allmulticast mode
[  142.455094][ T8281] netlink: 'syz.2.602': attribute type 1 has an invalid length.
[  142.813647][ T8296] lo: entered allmulticast mode
[  142.906267][ T8296] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  142.982451][ T8296] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  143.194584][ T8277] infiniband syz!: set active
[  143.201062][ T8277] infiniband syz!: added team_slave_0
[  143.389256][ T8277] RDS/IB: syz!: added
[  143.394206][ T8277] smc: adding ib device syz! with port count 1
[  143.647338][ T8277] smc:    ib device syz! port 1 has pnetid 
[  143.902504][ T8342] __nla_validate_parse: 9 callbacks suppressed
[  143.902523][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'.
[  143.952528][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'.
[  143.991539][ T8342] netlink: 'syz.3.610': attribute type 12 has an invalid length.
[  144.016528][ T8342] netlink: 'syz.3.610': attribute type 11 has an invalid length.
[  144.027002][ T8347] veth1_to_bond: entered allmulticast mode
[  144.114891][ T8351] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.169031][ T8348] syzkaller0: entered promiscuous mode
[  144.211290][ T8348] syzkaller0: entered allmulticast mode
[  144.388653][ T8348] tipc: Resetting bearer <eth:syzkaller0>
[  144.424627][ T8345] tipc: Resetting bearer <eth:syzkaller0>
[  144.548728][ T8345] tipc: Disabling bearer <eth:syzkaller0>
[  144.824902][ T8373] netlink: 9 bytes leftover after parsing attributes in process `syz.1.620'.
[  144.838212][ T8370] netlink: 'syz.2.619': attribute type 1 has an invalid length.
[  144.846987][ T8373] 0·: renamed from hsr0 (while UP)
[  144.859158][ T8373] 0·: entered allmulticast mode
[  144.864054][ T8373] hsr_slave_0: entered allmulticast mode
[  144.870301][ T8371] netlink: 'syz.2.619': attribute type 1 has an invalid length.
[  144.880622][ T8373] hsr_slave_1: entered allmulticast mode
[  144.888135][ T8373] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[  144.911866][ T8374] netlink: 'syz.3.618': attribute type 1 has an invalid length.
[  144.984472][ T8374] 8021q: adding VLAN 0 to HW filter on device bond1
[  145.067971][ T8377] bond1: (slave veth3): Enslaving as an active interface with a down link
[  145.523748][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.531977][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.544085][ T8391] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  145.744261][ T8399] netlink: 'syz.2.627': attribute type 1 has an invalid length.
[  145.811204][ T8399] 8021q: adding VLAN 0 to HW filter on device bond1
[  145.822211][ T8401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.627'.
[  146.094765][ T8399] bond1: (slave gretap1): making interface the new active one
[  146.104412][ T8399] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  146.177619][ T8406] netlink: 200 bytes leftover after parsing attributes in process `syz.2.628'.
[  146.209689][ T8406] netlink: 'syz.2.628': attribute type 39 has an invalid length.
[  146.287320][ T8408] netlink: 172 bytes leftover after parsing attributes in process `syz.1.629'.
[  146.866985][ T8428] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.936370][ T8435] netlink: 48 bytes leftover after parsing attributes in process `syz.1.636'.
[  147.026779][ T8428] tipc: Disabling bearer <eth:syzkaller0>
[  147.082583][ T8432] vlan0: entered promiscuous mode
[  147.092796][ T8432] vlan0: entered allmulticast mode
[  147.105386][ T8432] veth0_vlan: entered allmulticast mode
[  147.729966][ T8471] netlink: 'syz.0.645': attribute type 32 has an invalid length.
[  147.746039][ T8471] netlink: 60 bytes leftover after parsing attributes in process `syz.0.645'.
[  147.829677][ T8474] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.843401][ T8474] syzkaller0: entered promiscuous mode
[  147.857195][ T8474] syzkaller0: entered allmulticast mode
[  147.934205][ T8474] tipc: Resetting bearer <eth:syzkaller0>
[  148.072155][ T8472] tipc: Resetting bearer <eth:syzkaller0>
[  148.114092][ T8472] tipc: Disabling bearer <eth:syzkaller0>
[  148.205681][ T8498] netlink: 72 bytes leftover after parsing attributes in process `syz.4.652'.
[  148.251241][ T7622] ------------[ cut here ]------------
[  148.256971][ T7622] WARNING: CPU: 0 PID: 7622 at kernel/cgroup/rstat.c:305 css_rstat_flush+0x6d0/0x1890
[  148.266529][ T7622] Modules linked in:
[  148.270573][ T7622] CPU: 0 UID: 0 PID: 7622 Comm: kworker/0:11 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  148.282365][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  148.292411][ T7622] Workqueue: cgroup_destroy css_free_rwork_fn
[  148.298602][ T7622] RIP: 0010:css_rstat_flush+0x6d0/0x1890
[  148.304223][ T7622] Code: ff df 80 3c 08 00 74 08 4c 89 ff e8 2a 80 6a 00 4d 8b 27 4c 3b 64 24 20 74 24 e8 7b 15 07 00 e9 77 ff ff ff e8 71 15 07 00 90 <0f> 0b 90 eb be e8 66 15 07 00 4c 8b 74 24 20 e9 c5 10 00 00 e8 57
[  148.323825][ T7622] RSP: 0018:ffffc9000ee17848 EFLAGS: 00010093
[  148.329906][ T7622] RAX: ffffffff81b8963f RBX: ffff8881432b1000 RCX: ffff88807c80da00
[  148.337870][ T7622] RDX: 0000000000000000 RSI: ffffffff8be32660 RDI: ffff8880b8640f88
[  148.345835][ T7622] RBP: ffffffff8dbdcd10 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6
[  148.353970][ T7622] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffff8881432b1000
[  148.361937][ T7622] R13: 1ffff11024b84201 R14: ffff888125c21008 R15: ffffe8ffffc6af80
[  148.369907][ T7622] FS:  0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000
[  148.378829][ T7622] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  148.385398][ T7622] CR2: 00007f166db7c000 CR3: 000000002398a000 CR4: 00000000003526f0
[  148.393355][ T7622] Call Trace:
[  148.396623][ T7622]  <TASK>
[  148.399678][ T7622]  ? kasan_quarantine_put+0xdd/0x220
[  148.404960][ T7622]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.410154][ T7622]  css_rstat_exit+0xa9/0x320
[  148.414728][ T7622]  ? css_free_rwork_fn+0x88/0xb80
[  148.419740][ T7622]  ? percpu_ref_exit+0x194/0x1c0
[  148.424674][ T7622]  css_free_rwork_fn+0x90/0xb80
[  148.429526][ T7622]  ? process_scheduled_works+0x9ef/0x17b0
[  148.435232][ T7622]  ? process_scheduled_works+0x9ef/0x17b0
[  148.440941][ T7622]  process_scheduled_works+0xade/0x17b0
[  148.446639][ T7622]  ? __pfx_process_scheduled_works+0x10/0x10
[  148.452647][ T7622]  worker_thread+0x8a0/0xda0
[  148.457339][ T7622]  kthread+0x70e/0x8a0
[  148.461401][ T7622]  ? __pfx_worker_thread+0x10/0x10
[  148.466676][ T7622]  ? __pfx_kthread+0x10/0x10
[  148.471263][ T7622]  ? _raw_spin_unlock_irq+0x23/0x50
[  148.476472][ T7622]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.481680][ T7622]  ? __pfx_kthread+0x10/0x10
[  148.486448][ T7622]  ret_from_fork+0x3fc/0x770
[  148.491067][ T7622]  ? __pfx_ret_from_fork+0x10/0x10
[  148.496182][ T7622]  ? __switch_to_asm+0x39/0x70
[  148.501017][ T7622]  ? __switch_to_asm+0x33/0x70
[  148.505877][ T7622]  ? __pfx_kthread+0x10/0x10
[  148.510454][ T7622]  ret_from_fork_asm+0x1a/0x30
[  148.515234][ T7622]  </TASK>
[  148.518238][ T7622] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  148.525517][ T7622] CPU: 0 UID: 0 PID: 7622 Comm: kworker/0:11 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) 
[  148.537316][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  148.547453][ T7622] Workqueue: cgroup_destroy css_free_rwork_fn
[  148.553521][ T7622] Call Trace:
[  148.556792][ T7622]  <TASK>
[  148.559724][ T7622]  dump_stack_lvl+0x99/0x250
[  148.564308][ T7622]  ? __asan_memcpy+0x40/0x70
[  148.568976][ T7622]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.574182][ T7622]  ? __pfx__printk+0x10/0x10
[  148.578834][ T7622]  vpanic+0x281/0x750
[  148.582810][ T7622]  ? __pfx__printk+0x10/0x10
[  148.587491][ T7622]  ? __pfx_vpanic+0x10/0x10
[  148.592006][ T7622]  ? is_bpf_text_address+0x26/0x2b0
[  148.597225][ T7622]  panic+0xb9/0xc0
[  148.600941][ T7622]  ? __pfx_panic+0x10/0x10
[  148.605361][ T7622]  __warn+0x31b/0x4b0
[  148.609336][ T7622]  ? css_rstat_flush+0x6d0/0x1890
[  148.614378][ T7622]  ? css_rstat_flush+0x6d0/0x1890
[  148.619408][ T7622]  report_bug+0x2be/0x4f0
[  148.623727][ T7622]  ? css_rstat_flush+0x6d0/0x1890
[  148.628743][ T7622]  ? css_rstat_flush+0x6d0/0x1890
[  148.633768][ T7622]  ? css_rstat_flush+0x6d2/0x1890
[  148.638778][ T7622]  handle_bug+0x84/0x160
[  148.643011][ T7622]  exc_invalid_op+0x1a/0x50
[  148.647501][ T7622]  asm_exc_invalid_op+0x1a/0x20
[  148.652343][ T7622] RIP: 0010:css_rstat_flush+0x6d0/0x1890
[  148.658065][ T7622] Code: ff df 80 3c 08 00 74 08 4c 89 ff e8 2a 80 6a 00 4d 8b 27 4c 3b 64 24 20 74 24 e8 7b 15 07 00 e9 77 ff ff ff e8 71 15 07 00 90 <0f> 0b 90 eb be e8 66 15 07 00 4c 8b 74 24 20 e9 c5 10 00 00 e8 57
[  148.677667][ T7622] RSP: 0018:ffffc9000ee17848 EFLAGS: 00010093
[  148.683729][ T7622] RAX: ffffffff81b8963f RBX: ffff8881432b1000 RCX: ffff88807c80da00
[  148.691791][ T7622] RDX: 0000000000000000 RSI: ffffffff8be32660 RDI: ffff8880b8640f88
[  148.699839][ T7622] RBP: ffffffff8dbdcd10 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6
[  148.707795][ T7622] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffff8881432b1000
[  148.715771][ T7622] R13: 1ffff11024b84201 R14: ffff888125c21008 R15: ffffe8ffffc6af80
[  148.723763][ T7622]  ? css_rstat_flush+0x6cf/0x1890
[  148.728801][ T7622]  ? css_rstat_flush+0x6cf/0x1890
[  148.733919][ T7622]  ? kasan_quarantine_put+0xdd/0x220
[  148.739287][ T7622]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.744479][ T7622]  css_rstat_exit+0xa9/0x320
[  148.749053][ T7622]  ? css_free_rwork_fn+0x88/0xb80
[  148.754091][ T7622]  ? percpu_ref_exit+0x194/0x1c0
[  148.759056][ T7622]  css_free_rwork_fn+0x90/0xb80
[  148.763905][ T7622]  ? process_scheduled_works+0x9ef/0x17b0
[  148.769785][ T7622]  ? process_scheduled_works+0x9ef/0x17b0
[  148.775787][ T7622]  process_scheduled_works+0xade/0x17b0
[  148.781467][ T7622]  ? __pfx_process_scheduled_works+0x10/0x10
[  148.787643][ T7622]  worker_thread+0x8a0/0xda0
[  148.792335][ T7622]  kthread+0x70e/0x8a0
[  148.796625][ T7622]  ? __pfx_worker_thread+0x10/0x10
[  148.801744][ T7622]  ? __pfx_kthread+0x10/0x10
[  148.806332][ T7622]  ? _raw_spin_unlock_irq+0x23/0x50
[  148.811571][ T7622]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.816767][ T7622]  ? __pfx_kthread+0x10/0x10
[  148.821349][ T7622]  ret_from_fork+0x3fc/0x770
[  148.825929][ T7622]  ? __pfx_ret_from_fork+0x10/0x10
[  148.831032][ T7622]  ? __switch_to_asm+0x39/0x70
[  148.835846][ T7622]  ? __switch_to_asm+0x33/0x70
[  148.840602][ T7622]  ? __pfx_kthread+0x10/0x10
[  148.845212][ T7622]  ret_from_fork_asm+0x1a/0x30
[  148.849980][ T7622]  </TASK>
[  148.853304][ T7622] Kernel Offset: disabled
[  148.857620][ T7622] Rebooting in 86400 seconds..