last executing test programs:

6m17.562488553s ago: executing program 4 (id=695):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$nci(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="6f0001f5cbf117e1fd6c60079c3769c4bde1f9e34613b1234335ab0032656d7b8a182cf1c52b38e9ddb9f85f13bc819546b2be3d4d1aed47ddeb9ac06302054bc5193d527b8876dd856c84dc92202348f0a6e51e3095f3fd840482053b54081c683bb6374a3f3e8af058529dc2b7578b00afe08605d5a4e96dc0225f1d24d6493a"], 0x86)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trmr'], 0xa)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1}, 0x9}], 0x1, 0x7, 0x0)

6m16.572578341s ago: executing program 4 (id=708):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x10}}, 0x88}}, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f0000000100)=@can, 0x80, &(0x7f0000003080)=[{&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/146, 0x92}, {&(0x7f0000002cc0)=""/216, 0xd8}, {&(0x7f0000002dc0)=""/217, 0xd9}, {&(0x7f0000002ec0)=""/12, 0xc}, {&(0x7f0000002f00)=""/150, 0x96}, {&(0x7f0000002fc0)=""/36, 0x24}, {&(0x7f0000003000)=""/16, 0x10}, {&(0x7f0000003040)=""/3, 0x3}], 0xa, &(0x7f0000003140)=""/79, 0x4f}, 0x40)
setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000bc0)=0x8001, 0x4)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x60}, 0x1, 0x7}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000130001c30000000000000000000008", @ANYRESDEC=r0, @ANYBLOB="00ffff94240c9d4b3f5702000009"], 0x2c}}, 0x0)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000010000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x90)
write(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000ffdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="014dc09e03"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f00000014c0)={@val={0xa, 0x809b}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x2, 0x1c, 0x65, 0x0, 0xdc, 0x2, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1f, 0x7f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}}}}}, 0x36)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB="40000000170a0104000000000000000001000009094870bad81ba0725200000008000740000000010c0cdd20d8d95e6e594597230dbb0b000540000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4008044}, 0x10)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd2a, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8000000000000000}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3d8a8612b2dc18d1}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x5, 0x3, 0x0, 0x8, 0x2, 0xffffffff}]}]}, 0x13c}}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000080)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0)
read(r6, &(0x7f0000000240)=""/81, 0x51)

6m15.562846225s ago: executing program 4 (id=720):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001300)={{<r4=>0x0, 0x10001, 0x6, 0x3, 0x6fe, 0x40, 0x1000, 0x401, 0x1, 0xf72e, 0x0, 0x2, 0x9, 0x7, 0x3}})
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000002300)={r4, 0x3})
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x10, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)

6m15.008204003s ago: executing program 4 (id=726):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x50000}, 0xc090)
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1a8, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6b}, @NL80211_ATTR_REG_RULES={0xd8, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x43}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10001}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x50000000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_REG_RULES={0x8c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x31ff92ac}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x200}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa71e}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5e4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xca}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xef}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40000}, 0x2)

6m14.812897871s ago: executing program 4 (id=729):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x36}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x110}}, 0x20000800) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

6m14.511062529s ago: executing program 4 (id=735):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async)
r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000100)=0x7fff) (async)
ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000100)=0x7fff)
bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @broadcast}, 0x10)
write$cgroup_pid(r3, &(0x7f0000000180), 0x12) (async)
write$cgroup_pid(r3, &(0x7f0000000180), 0x12)
write$cgroup_freezer_state(r2, &(0x7f0000000240)='FREEZING\x00', 0x9)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0)

5m59.412789924s ago: executing program 32 (id=735):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async)
r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000100)=0x7fff) (async)
ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000100)=0x7fff)
bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @broadcast}, 0x10)
write$cgroup_pid(r3, &(0x7f0000000180), 0x12) (async)
write$cgroup_pid(r3, &(0x7f0000000180), 0x12)
write$cgroup_freezer_state(r2, &(0x7f0000000240)='FREEZING\x00', 0x9)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0)

5.077406732s ago: executing program 2 (id=5480):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000309010200000000000000e1ff000000"], 0x14}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x360, 0x228, 0x25a, 0x360, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xfe}, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0x208, 0x250, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@rt={{0x138}, {0x5, [0x7fffffff, 0x3], 0x742e, 0x4, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @local, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x11}, @local, @private0, @local, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2], 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffeeb, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e657665000020000280140007002001000000000000000000000000000008000100", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4)
getsockopt$inet6_tcp_int(r3, 0x6, 0x6, 0x0, &(0x7f0000000040))
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200))
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="00214717a78d70e8a36f7fa8543c2d9a43a4356d27e0", 0x16}], 0x1, 0x20000002, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880)

4.789672184s ago: executing program 2 (id=5483):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x3a, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050)
socket$kcm(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8", 0x1}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0)

3.944947002s ago: executing program 1 (id=5498):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = getpid()
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000b40)={'dummy0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000080)=ANY=[@ANYRES16=r6], 0xa)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r8, r7, 0x25, 0x8, @void}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r9=>0x0})
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r9, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xff}}, 0x40)
r11 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_int(r11, 0x107, 0x3, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/uts\x00')

3.792167393s ago: executing program 0 (id=5501):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0xc, 0x3, "e4edf2b75cc7c0a3"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x42201}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1138c32a1d0bbade, 0x2004}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x631bb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000)

3.735539095s ago: executing program 2 (id=5502):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}}, 0x18}}, 0x0)
pipe(&(0x7f0000000600)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000500)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0)
vmsplice(r3, &(0x7f0000000080)=[{&(0x7f0000000000)='Z%G}', 0x4}], 0x1, 0x4)
write$cgroup_subtree(r6, &(0x7f0000003100)=ANY=[], 0x10448)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006a0005f37be64a00fcdb0900000000000000000008000500", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x9, 0x2, 0xc, @private2, @empty, 0x8, 0x700, 0x3ff, 0x6}})

3.676790435s ago: executing program 1 (id=5503):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', <r1=>0x0})
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

3.668760526s ago: executing program 3 (id=5504):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_int(r1, 0x11e, 0x1, &(0x7f0000000080)=0x5, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e657665000020000280060005004e22"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = socket$inet_sctp(0x2, 0x4, 0x84)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000020100800c0001"], 0x114}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x3}, &(0x7f0000000080)=0x8)

3.565056602s ago: executing program 5 (id=5505):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=@framed={{}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00'}, 0x90)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x800)

3.528306104s ago: executing program 0 (id=5506):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4)
setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000000c0)=0xdf1, 0x4)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4)
getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0xe)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000200)={{0x2, 0x4e24, @local}, {0x1, @multicast}, 0x2, {0x2, 0x4e22, @private=0xa010101}, 'veth1_virt_wifi\x00'})
ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f00000002c0)={&(0x7f0000000280)=[{0x4, 0x2f, 0x66, 0x7}], 0x1, 0x20, 0x2, 0x1})
connect$rxrpc(r0, &(0x7f0000000300)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x3ff, @empty, 0xe6}}, 0x24)
getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000380)=0x14)
bind$packet(r0, &(0x7f00000003c0)={0x11, 0x15, r2, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000400), &(0x7f0000000440)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'dvmrp1\x00', 0x10})
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000004c0)={@broadcast, @empty, <r3=>0x0}, &(0x7f0000000500)=0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6_vti0\x00', r3, 0x4, 0x5, 0x9, 0x101, 0x8, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x3a561c00815f0ca7, 0xc1, 0x5}})
ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000640)=<r5=>0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000680)=<r6=>0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000006c0)=<r7=>0x0)
r8 = gettid()
sendmsg$nl_route(r4, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@RTM_NEWNSID={0x4c, 0x58, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_NSID={0x8}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_FD={0x8, 0x3, r0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000)
r9 = openat$cgroup_freezer_state(r1, &(0x7f0000000800), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r9)
syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xb8, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x811}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x99}]}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x34e5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000009c0)=0x9, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a40)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x70, 0x0, 0x402, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x1a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000b80)=@rose={'rose', 0x0}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000bc0)={'wlan1\x00'})

3.451049613s ago: executing program 2 (id=5507):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000309010200000000000000e1ff000000"], 0x14}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffeeb, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e657665000020000280140007002001000000000000000000000000000008000100", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4)
getsockopt$inet6_tcp_int(r3, 0x6, 0x6, 0x0, &(0x7f0000000040))
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200))
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="00214717a78d70e8a36f7fa8543c2d9a43a4356d27e0", 0x16}], 0x1, 0x20000002, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880)

3.3968651s ago: executing program 5 (id=5508):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
close(r0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)=""/67, &(0x7f00000000c0)=0x43)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0x0, 0x0}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18)
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000200)={0x0, 0x3, 0x7, 0xb8})
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'SET\x00'}, @NFTA_TARGET_INFO={0xc, 0x3, "02b51112d439c592"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xfea1}}, 0x800)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
write$6lowpan_control(r5, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xfffffd6e, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0)

3.364830953s ago: executing program 1 (id=5509):
socket$netlink(0x10, 0x3, 0x10)
r0 = socket(0x1d, 0x2, 0x6)
accept$inet(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8923, &(0x7f0000000000)={'hsr0\x00', 0x2})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0xfffffffffffffe62, r1, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x0, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS, @MPTCP_PM_ADDR_ATTR_FLAGS={0x0, 0x6, 0x4}]}]}, 0x44}, 0x5}, 0x0)

3.289815625s ago: executing program 0 (id=5510):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept$inet6(r0, 0x0, &(0x7f0000000040)) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0)
close(r4) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f00000022c0)="6d443b4ea914482aae77d6616996375558774e03398e81e8c1f9ad4c08ff031170e00a426702aff287cda731a6ef", 0x2e}], 0x2) (async)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xb, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x65, 0x1}, @func={0x8, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x30, 0x2e, 0x0, 0x6c, 0x30, 0x30]}}, &(0x7f0000000440)=""/239, 0x3f, 0xef}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="3bbce26895cba87434812140a4a0d1be47420923d454b5e667f7fc87f44a91e6233ec54de80d08a99fd6dc2a60e1a4b26f26fa6182dcacd1322a28da9d07e1ce051ce78805f60587af4a942e1ef88860b648284f541901d7c6df532ce56a608008725d8bf6e8d2b1b191accefce3ac60ca57ab38f8a3e8aec28fc92dbe1461dae4651576ad7a9d9754cb6376d5636ba90238166ad98d7bc92bcbc4c898baab404e84edec2a8e9b8c02559fe38eadb370713a84a4597bd575cd33b66fafc43ea277de9ba256"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r7}, 0x94)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r10, &(0x7f0000000880)={&(0x7f0000000300), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r6, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x2, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x400500c}, 0x4004880) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r11, @ANYBLOB="0800c300741300000800c40001000000"], 0x30}}, 0x0) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r14=>0x0}) (rerun: 64)
sendmsg$BATADV_CMD_SET_HARDIF(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x24, r13, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r14}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) (async)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@getnexthop={0x20, 0x6a, 0x501, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0xfffffff0}]}, 0x20}}, 0x0) (async, rerun: 64)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0x2, 0x5, 0x0, 0x1000}, 0x20) (rerun: 64)

3.244921704s ago: executing program 2 (id=5511):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0xa4}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f00000005c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000280)=<r5=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000300)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000340)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000380)=<r8=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000003c0)=<r9=>0x0)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40488c0}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r10=>0x0)
read$nci(r1, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80000)

3.152809727s ago: executing program 3 (id=5512):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0)
socket$kcm(0x10, 0x4, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r1, 0x0, 0x40)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfffa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x47, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x51fc, 0xb, 0x5}}}}]}, 0x40}}, 0x840)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000a80)={'erspan0\x00', <r7=>0x0, 0x7, 0x700, 0x8000, 0x81, {{0x41, 0x4, 0x3, 0x2a, 0x104, 0x64, 0x0, 0x5, 0x2f, 0x0, @remote, @local, {[@noop, @generic={0x44, 0xf, "e9264d8aacace6f2c9d6c3c386"}, @rr={0x7, 0x17, 0x24, [@dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x41}, @local, @empty]}, @cipso={0x86, 0x65, 0xffffffffffffffff, [{0x0, 0x9, "0634158bc97409"}, {0x2, 0x10, "4c10f14b3a4b68f63c4e90484c36"}, {0x3, 0x12, "297e4f3236ae17492427f6d617d97143"}, {0x0, 0x5, "34bc84"}, {0x2, 0x5, "a2e138"}, {0x6, 0xd, "6aa43c654644a45bc85f90"}, {0x7, 0x8, "29a51932c46c"}, {0x7, 0xe, "c060c02e7912e1ae4cacb052"}, {0x1, 0x7, '\tF+e*'}]}, @timestamp={0x44, 0x20, 0xaf, 0x0, 0x6, [0x7, 0x4, 0x7, 0xfffffff4, 0x23000000, 0x2, 0x5]}, @ssrr={0x89, 0x1b, 0x72, [@remote, @local, @remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x27, 0x27, [@dev={0xac, 0x14, 0x14, 0x2f}, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @empty, @private=0xa010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000580)={'vcan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', <r8=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000640)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000780)=[{}, {}], 0x10, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
r10 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xffffffffffffffa2, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xfffa, 0x2}, {}, {0x1c, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x24004000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="f401000076320350ce2f4802e5d1896862345316b4b108cb5e304d1aed8f4bd354345c34361f", @ANYRES16=0x0, @ANYBLOB="200028bd7000fbdbdf250600000028000180140002007465616d5f736c6176655f3100000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="78000180080003000000000008000300040000001400020076657468315f6d61637674617000000014000200626f6e6430000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f7465616d000000080003000100000008000100", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="34000180140002006261746164765f736c6176655f31000008000300020000001400020076657468315f746f5f6261746164760034000180080003000200000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="080003005c493d5a080003000200000050000180140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970366772657461703000000000000008000100", @ANYRES32=r9, @ANYBLOB="1400020076657468305f746f5f6873720000000028000180140002006261746164765f736c6176655f31000008000300020000000800030001000000340001801400020073797a5f74756e0000000000000000000800030003000000140002006d6163766c616e3100000000000000000c00018008000100", @ANYRES32=r11, @ANYRESHEX=0x0, @ANYRES32=r12, @ANYBLOB="14000200c4f766b3616c000000000000000000001407c6f27a170819bebedd65f9a04b315f3e482057894586d46fad73fa31e010d067b4f7ca73d13919c59f6d5adf25518b861f553f6ed00165ddcbd0869d28ead197308c81fc6a6cd2265933a23bee51d9ef725de432ec721695142803f405e93dbbf7b76b1857cefb58c1f9ce40c50b1a25c2086cc8f8a320ef2445a70cab52c0785887b32284d502212fad6cf19d2d50ed93fe659e50253badb054e4c013efcbc982"], 0x1f4}, 0x1, 0x0, 0x0, 0x4040850}, 0x60000)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r13, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r14}, 0xc)
close(0x4)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r14}, 0xc)
sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x0)

3.117227658s ago: executing program 1 (id=5513):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r3=>0x0})
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r4], 0x34}}, 0x4008000) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r4], 0x34}}, 0x4008000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000bc0)={'ip_vti0\x00', <r6=>r3, 0x7800, 0x7800, 0x3800, 0xefc, {{0xa, 0x4, 0x0, 0x12, 0x28, 0x64, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x9}, @multicast1, {[@lsrr={0x83, 0x13, 0x56, [@local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}]}}}}})
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x3, 0x2, 0x9a99, 0x8, 0x402, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x3, 0x2, 0x9a99, 0x8, 0x402, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000980)='./file0\x00', 0x0, 0x8, r1}, 0x18)
ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000000200)={{0x7, 0x5, 0x4, 0x3, 0x5}, [{0x9, 0x5, 0x3, 0x5}, {0x8, 0x4, 0xe2, 0xff}]}) (async)
ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000000200)={{0x7, 0x5, 0x4, 0x3, 0x5}, [{0x9, 0x5, 0x3, 0x5}, {0x8, 0x4, 0xe2, 0xff}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x22, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @generic={0x2, 0x2, 0x4, 0x0, 0x1}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x132}}, @alu={0x4, 0x0, 0x4, 0x0, 0x7, 0xfffffffffffffff4, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000700)='GPL\x00', 0x9, 0xf, &(0x7f0000000740)=""/15, 0x41100, 0x40, '\x00', r6, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x3, 0xf, 0x389f361c, 0x5}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000a00)=[r8, r9], &(0x7f0000000a40)=[{0x2, 0x3, 0x3}, {0x4, 0x3, 0x9, 0x2}, {0x0, 0x1, 0xf}, {0x2, 0x5, 0xf, 0x3}, {0x4, 0x3, 0x2, 0x2}, {0x1, 0x5, 0x4, 0x3}, {0x2, 0x1, 0xe, 0x25abaacdd1d84650}, {0x1, 0x4, 0xf, 0x5}, {0x5, 0x3, 0x7, 0xbe993d01117034eb}], 0x10, 0xf79}, 0x94)
r10 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r10, 0x114, 0x7, &(0x7f0000000400)={@pptp={0x18, 0x2, {0x1, @broadcast}}, {&(0x7f0000000040)=""/24, 0x18}, &(0x7f0000000080), 0x20}, 0xa0)

2.783686253s ago: executing program 5 (id=5514):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100c272d353990318a30800028004000600"], 0x38}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000002880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002840)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x21b8, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x21a4, 0x3, 0x0, 0x1, [{0x214, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x158, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8c, 0x1, "c3a73f4eeb28d01390be57c1e4db2d35540655a95dcc1e4140211f5b6e1a071f1ea90da9f5953ffcf632d46ed13437e143172a950f617f29aa82f1d09937c309c4c15b40cd562d3f782efd34a997cf152e80e9b076da882b3f5473f5330c6e58e27f39068216b5fdee8179c3156d2629b582c015fd4498612653e52f0e556da0a9fca54d951e282d"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x27, 0x1, "ae96dea2b8bafc003d4792677006c864ffe8fb9877d0e2a78dec83821a034bbc87cc20"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x12, 0x1, "82fd9f37059e96ba50540434cb22"}]}, @NFTA_SET_ELEM_KEY_END={0x7c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x38, 0x1, "791f4ad5477d92505e54f26d2809c5e68adbcd9f4704f93593d1db594c2334bd0360729c4f9bf7545b57b2e252a516c4e6aefb88"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @reject={{0xb}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8001}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x528, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x6c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x46, 0x1, "1651d34dc0b4d26df9ec9505327b017f0cfec86ccfd00c85b9fb739cc114dba2bb9318f86d7ec9d24a1a6596ab32ab5650b06672bb8fcb267e52f8574c13ed5127c1"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_USERDATA={0xb7, 0x6, 0x1, 0x0, "91ec6fe82e38c9e2ed80a2ea93bdc176b8837d8e6e19cba394eb09de6cc62e94c582ab5eaff6eb0cfb61d3b66c5a6362ffdc8cf4d088fe755ff9a3fdaa93a08ffa88d14f63d24a0a5781cccc8d188ff286ff11d1dc8796075548d823323f907bc1e2eb0f49089c9215bf1433612ff14c37c32e7c9096b75fc90e2a9393fca1d5a89837c103828e904e2951b988f1d4424c9cfeb0c7c09187cdb2cc3233067ffc337baa0a2f4416989485a3a58abfd39c38ba5b"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x2d4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x2b, 0x1, "1ac51ec8da25e48eb25155d6215f8d3e545a08c29578a097aacc7fd2f105a0a484dd565a03bf13"}, @NFTA_DATA_VALUE={0x2d, 0x1, "d8e3e30008a951c163e02e0c8c5cab8039c87d523aa6413c46a7cafd0253044aa9903f4d5e9669ec23"}, @NFTA_DATA_VALUE={0x77, 0x1, "86e5accb45ee766fd1c4369833bbc35ca0a85206a7242e0fd5639c5a4097fe5a4e2da97c86c2d27b55c7f1f75743772b83a2132f526955896a4f7a12fb7333ed90d7bd0227029110acf7194562b1bbeddce801dcef312bf1684d60e8b60e041657bee415cff763d90c8ca0480ff19571abf031"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x52, 0x1, "d0db28ba8ec7aba617a700fb7dfc34e4ba1c71dbfda849d2506c71bb128bd22ed565e3855da2b0ef6bbb5500dce87a866ece4240932b4975694968570a73974d7b579066de3d7604036555031cee"}, @NFTA_DATA_VALUE={0x5d, 0x1, "5a5899ee988a84de3d24aaf1dab56845c9c159d7e49d5783505f86f78dc2cb9d21a0b8f682efbe4fb03c3576531f9464fda13f6142768b9ad088d292130127239beedb24a24c96d574bb11d312a6ba7c9f716636eb34833c71"}]}, @NFTA_SET_ELEM_USERDATA={0xf3, 0x6, 0x1, 0x0, "432d4d055056a279b804e6b19943d48871e714005d72d8712cdec42412d9853bc6e9dadbda91373f7eede5668cc738e1cedd0d6b36598abec52a8bcf86d55f1af80062d45af052c062e4915f972e6daea86487d1e1e32edaa1f1b4080c3042a8da34720c2d0c32b574c4ceb3cc9ca68a9d07d23ae26da27ed95ca7e6fb88c67bd500f40bc17f610f944c8d961c6677bafbc7bf208ab697b1eca8831926df7fd521d083384709bc921447237074186ed468279841adb62007abf9830729a8a9ef66644149d7bc18dcd832340407e4c96ab6f9d6f308f8407b83d4e98981874e7beadc8be9127f7c5318808971f9e7d2"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3f}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40}]}, {0x294, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xa0, 0x6, 0x1, 0x0, "6ad2cb225a701be8bde783e41a01903430db992e6fd5d10af3cb9e78a4c7b7c293132fb019d7ceda272198dce123c3f43ea08dbc8e64dc1376a729ea96d3804b21ef9d4b18eddfe6a2da589679aac0f6b0107823ebe10d15d934198484b15e6966f00b46b9a15d5abe7f5d3e741737cfb0c9293f548790a71f2bf5d0b91693ef0169c53f60d6afb0144d1def65b1f45cdde682c8d03ea8ee8a25ecc8"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_ELEM_DATA={0xcc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "fd7b908ef7da655068befe527f4f328e06010fe6212ef1e2cc5180c01e996444e65b28b89c6e5f857f503a13b0"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7fffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xf0, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}]}, {0x320, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY_END={0x310, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf8, 0x1, "199aef9bf3f8dd6e260b4d74000c5f121808ae5eef19c2bb1721d5a8d796f6c97c1f90b7d3693d8e6d9eaf611b32821aebeed397eb02c12c246028d64daf66447edea7f8b8532c4f823e4533afa2c318def3481fb0eade103368f2d805f91ebc42e05b94053ebd0e454a70bee0a2ff0c8780b2563cfe5266c16bc2f1940b4cafed42ef5e0b1a6c451548c27baf4408b99c7aba0d80e7f4823dbcd564e156e8440d825c7c4abd800a2d4a845640e48f2adb5587c29bc23233b2bc6197596eba711ef3263bbb4f92130cc97df838861a60dcf7440eb8612d43ea8344348e4e345ad9a1fb03648e5c187ba121bcd2fcbeec0b4aafc6"}, @NFTA_DATA_VALUE={0x66, 0x1, "76c2846d0dcc689a1d280d32876e183c02751b7cb30d62d6c20ec5ed68923f3f1310639b63f283d8eec6ccda283cf88af63ccead008c40bc60efc3a0c85a23efcb18a53f7427cc5cd88e6c62f2a856472503cbd1ac1875324ebbba25e9026d1ba523"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "d81be8f06fe8677f07d8e5b296b1db6a7742ca8194a3676da81b263feaaa43b40aa1ac10b0"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}]}]}, {0x1230, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3b0}, @NFTA_SET_ELEM_USERDATA={0x54, 0x6, 0x1, 0x0, "64b112f9bf4b18fb1cb29011a16b2596b898d944dafd1d4e9ca2f7261270e26b0df0cacaaec2f212c1eba03cbcea074e9ed97bb534458bcee4982dc83537bdbb6f0bc23a808735815468c982711ab8ea"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_SET_ELEM_USERDATA={0xd, 0x6, 0x1, 0x0, "5c589630247b2adc2c"}, @NFTA_SET_ELEM_DATA={0x11a4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x25, 0x1, "cbf342927481dbb84a9c0e293b58eb556540966f3801dfe4a4528f1a882146d147"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x68, 0x1, "1341cbf30c63c380ba9ff471bc6ecb2f70b91827d5da345d4f7e96f53af35b7516e80e5e3c43fb600db10b248c2a995361ced10e75dd400737efbe73e2584a3f5b5545cc686c010f6e23ee60f42f0b209bc00f5fdee48731cbc72a59b8d3f2a6bb39dc78"}, @NFTA_DATA_VALUE={0xfd, 0x1, "f69f7fa246d14a06e2fdd2dbc99442ee168961bde294e1ba8b118dd9a32369d55b37cd35afbb8e11c48f7010adc93c9eccb08d8a25751cf263b51a4b32ac98b99662f48be52146f2a5851c340912c6622dc97dda6fd7f1c1db319fdbbbabc2f3e7b0fa176aea255fc2f538b495ace5a3a24bac283173fafa8e4b5488e34294f0d7141559465417586b92c5e7a4a15047018b8dd935abd273b5c71412520a0e3aedc558316a758a2de8fe07361e23d9738381f889319e98afe4a1584b96716c7cb9c4524057e03507ed1cc10290d6e0e49043ddf3b1f05b7fdcf76fdd701fac2bb23bc2cfe915c70f556d77eab8774854004036b4a3de39b762"}]}]}, {0x280, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY={0x100, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x24, 0x1, "3f52937b2012b3983a7f44b1d1e88a55cf5dd980d9894030af2a5461c8124f19"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa3, 0x1, "920aa973241a326240d4dbe9a90a97f11f390ff0992183570f7f495a59d61c198316bfe72c6779243f7709db37e7da7802a5b301b5742d140c99c50b030f36880321105d3b6979ac12733a25c2834870d32ec8c625018e31de1f9e54510d21962a6025291f1b68a0ec80f8b8748cf37be12beded12347bd76cb7374a731ca8a800909927803c3405fe002b2b50b84be913c094e533db5db4d9df49b22940e4"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x6b, 0x6, 0x1, 0x0, "961c939bb310d1267b93ca840c262d57be3c5ee8effc78a025df3575fd8922aef76bf2c5d6a952b2efc5eb2c5a34d992c25af4d6ce1e10d2e1e21aad34b0ec94c3fa02a33287370cb8cc61dd3b13622ea75dbae35101c3b0f27426c56a48ab69e812527d3d5341"}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x5c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x91}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf3}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xaa}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xef}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xfd}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x2c}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xd}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x16}]}}}]}]}]}, @NFT_MSG_DELTABLE={0x10c, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xec, 0x6, "72da47d6efd7b96233d47c1e35a4968933d72835ba37429505f64bc377d6275640b07c87036603a648069cf8d1fc10de3ed7f812e84c622c6d6af5ed473866374290a4df22cab74c518e6797760e00cae36048a1ecbb7af5ad140ce5af45351c25bc557e08038b19f60c77c18a37c4abbb08df076503a633200b0f21b33dcb250ebc3ea6e3a4b2a521bcf8850292c0bd0774f69054bd246b7c84d0abe9c77c243269e0567825fe2637028ff82abe4c1761aa0107048b27ceeb42e6c8d7e7becb7e118c7f7937dd1ede6c081367ed6d0ab968d9be96ab009323ecad52616978a545ff71751a6f6a70"}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x2320}, 0x1, 0x0, 0x0, 0x4040094}, 0x240400c1)

2.71299832s ago: executing program 1 (id=5515):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet(0x2, 0x2, 0x8)
setsockopt$inet_opts(r1, 0x0, 0x2, &(0x7f0000000140)="e471c1f408348697d148d62f2133f79ebd8e49e9e65ea92a30ed854c6a9f699f331e6efd0405308e0a6c996a9afb5b149cdf006b400f48f0dfa09634be56bdac012f5795f9a9a74452b8548a8c44f4acfce569", 0x53)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38100000", @ANYRES16=r2, @ANYBLOB="010000000000fddbdf250200000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff7f00007400000008002600e01500000800270001000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @private2}, 0x1c, 0x0}}], 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000feffffff000000000000000000000000000000f477dc51181c44b2ad2b6d46166853b0ad4ae203afc304272f39992b3a74a12b3cd08bc89ca8c869d745205ecd57955fd7f95c1043d642d86b59c61b8aabd5590533c884ce1d23b79b5ec412ecc41f85704e0ff30cd3ed19a15a6c4774ba49967be6b1a92e79fa129af26a4e60041bcdc1f99be5ea5349955c19ecfa1db06c"], 0xe)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f00000000c0)=""/6, 0x6, <r5=>0x0, &(0x7f0000000100)=""/46, 0x2e}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000580)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffc}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x54}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xe}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4008080)

2.71218328s ago: executing program 0 (id=5516):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

2.699161564s ago: executing program 3 (id=5517):
bpf$PROG_LOAD(0x2, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000c80)=0xe3, 0x4)
connect$caif(r2, &(0x7f0000000cc0), 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
r4 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x400, 0x2, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0xf909}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xb, 0x4}}, 0xe8)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000180)=0x2)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

2.549690936s ago: executing program 0 (id=5518):
r0 = socket$inet(0x2, 0x800, 0x8)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'syz_tun\x00', {0x2}, 0xfff})
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'gre0\x00', 0x4})
getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000080)={@loopback, @local, @dev}, &(0x7f00000000c0)=0xc) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20000004) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8880) (async)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x140e, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004080}, 0x24008001)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x3, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x40)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c814}, 0x20040000)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x7}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bind$isdn_base(r1, &(0x7f00000007c0)={0x22, 0xc4, 0xc, 0xb0, 0x5}, 0x6) (async)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), r1)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) (async)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r1)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x100, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r1)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000ac0)=[{}, {}], 0x2, 0x9, &(0x7f0000000b00)={[0x4]}, 0x8)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000b80), r1)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r8, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000) (async)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, r7, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x3ff, 0x9, 0x20000000, 0xb}}}}, 0x30}, 0x1, 0x0, 0x0, 0x9804}, 0x24000842) (async)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000d80), 0x101000, 0x0)
ioctl$PPPIOCCONNECT(r9, 0x4004743a, &(0x7f0000000dc0)) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e00)) (async)
r10 = socket$tipc(0x1e, 0x2, 0x0)
accept4$tipc(r10, &(0x7f0000000e40), &(0x7f0000000e80)=0x10, 0x0)

2.468798244s ago: executing program 5 (id=5519):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x9, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000006000000000000000300000018380000040000000002000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x73, &(0x7f0000000680)=""/115, 0x41100, 0x1c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x9, 0x6}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x8, 0x200, 0x4}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000007c0)=[{0x3, 0x2, 0x9, 0x5}, {0x3, 0x4, 0x1, 0x9}, {0x2, 0x2, 0x5, 0x6}, {0x5, 0xfffffffe, 0xc, 0x9}, {0x0, 0x3, 0xc}, {0x5, 0x8000005, 0x7, 0x8}], 0x10, 0x9}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000006c0)='./cgroup/cgroup.procs/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000010a40)=[0x93e6], 0x0, 0x0, 0x1}}, 0x40)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_TXQLEN={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x4c}}, 0x0)

2.29131169s ago: executing program 5 (id=5520):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, r1, 0x60b, 0x70bd28, 0x4000, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x8000000, 0x0, 0x1}, 0x400c0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x280, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x522e8c03}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f3dbac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b8b63d8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30eb1b90}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfffffb29}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x268f45a7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x14c, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ae2ec1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3446c81a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b22b90f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ddc9f5c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bf3873e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fed78f2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25634abf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7224b458}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x330e0602}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35945a05}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cb9509c}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c2a40a0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65dfab67}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d3784df}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x774624c0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ea0ead1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65cc4657}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x556523ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77547fa1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36f40454}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x85}, 0x4000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) (async)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, r1, 0x60b, 0x70bd28, 0x4000, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x8000000, 0x0, 0x1}, 0x400c0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x280, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x522e8c03}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f3dbac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b8b63d8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30eb1b90}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfffffb29}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x268f45a7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x14c, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ae2ec1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3446c81a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b22b90f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ddc9f5c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bf3873e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fed78f2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25634abf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7224b458}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x330e0602}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35945a05}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cb9509c}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c2a40a0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65dfab67}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d3784df}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x774624c0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ea0ead1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65cc4657}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x556523ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77547fa1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36f40454}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)

2.283188113s ago: executing program 3 (id=5521):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000309010200000000000000e1ff000000"], 0x14}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffeeb, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e657665000020000280140007002001000000000000000000000000000008000100", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4)
getsockopt$inet6_tcp_int(r3, 0x6, 0x6, 0x0, &(0x7f0000000040))
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200))
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="00214717a78d70e8a36f7fa8543c2d9a43a4356d27e0", 0x16}], 0x1, 0x20000002, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880)

2.228086331s ago: executing program 3 (id=5522):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8840000, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000000), r1)
connect$pppoe(r2, &(0x7f0000000300)={0x18, 0x0, {0x0, @local, 'veth0\x00'}}, 0x1e)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0)
sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000c40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000800)={0x3c8, r5, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfff}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb3a4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa0b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55ae}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24b6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcb4}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0xeafa14ded77f6744}, 0x4000814)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x80)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r2)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000440)=ANY=[@ANYBLOB="cc1a0000", @ANYRES16=r6, @ANYBLOB="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"], 0x2cc}, 0x1, 0x0, 0x0, 0x880}, 0x800)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)

60.490514ms ago: executing program 0 (id=5523):
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r0, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRESHEX=0x0, @ANYBLOB="010300000100fddbdf2526"], 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840)
sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0x6, 0x7, 0x3, 0x9}, 0x10)
accept4$nfc_llcp(r0, 0x0, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='P', 0x1}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x8, &(0x7f0000000140)=@framed={{}, [@tail_call]}, &(0x7f0000000040)='syzkaller\x00', 0x39, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14)

60.15428ms ago: executing program 5 (id=5524):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r2, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x10, 0xffff, 0x0, 0x7, 0x1})

59.697699ms ago: executing program 1 (id=5525):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'lo\x00', &(0x7f0000000480)=@ethtool_eee={0x44, 0x7, 0x2f97885b, 0xfff, 0x0, 0x8, 0x2, 0x3ff, [0x81, 0x9]}})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000000), 0x8)
sendmmsg$sock(r2, &(0x7f0000002280)=[{{&(0x7f0000000500)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8800)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000b6d2c9ea07b110980e858e7692b8ec2b5f91bf741a114285bba7b123333c69d44e76de3c75863aab08ff965a00000000000000c8d65fcaadfba3c918cf6ff5296caaee000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r4], 0x2c}}, 0x4000000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r5)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x5)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'})
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000007000000410001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007fe6fa572e78c7abbd7e0100da1f171839ffa939bd3a17eb80373d875b801ddebe0981644cc415acb10938c2b5bd8e36088eb33e2e2503ac20e8d645fbfc085d728895b32516ac2590d770b47703d27670b1a97728fb7c666a9d7cc6679f1d14e0eeac8918be156479ea12a7308ff57e6a67980265eaf3aeda84a563709d7e526c0a773bbc6435c9e524f0a1e330c28af8fd08c926bad7"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r5)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r10, <r11=>0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r11, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

52.182599ms ago: executing program 3 (id=5526):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) (async)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async, rerun: 32)
syz_emit_ethernet(0x1e, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @empty, @void, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "3e5d5cdbff740c97"}}}}, &(0x7f00000001c0)={0x0, 0x2, [0x4ee, 0x1d0, 0x2ff, 0x4e6]}) (rerun: 32)

0s ago: executing program 2 (id=5527):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=0x0], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=0x0], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x2d, 0x2, 0x0) (async)
r2 = socket(0x2d, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x1}, 0x3) (async)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x1}, 0x3)
write$bt_hci(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500"], 0x9)
socket$nl_route(0x10, 0x3, 0x0)
socket$rds(0x15, 0x5, 0x0) (async)
r4 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r5, 0x89f2, &(0x7f0000000000))
socket$tipc(0x1e, 0x2, 0x0) (async)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000040), 0x4)
sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820)
close(0x3)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0x1d, 0x0, 0x20)
ioctl$sock_ifreq(r7, 0x89a3, &(0x7f0000000080)={'geneve1\x00', @ifru_hwaddr=@broadcast})
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r4], 0x5c}}, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000210099b1000000006a7e136cfb244f2dd44d4d1640095391d3ccaf724de7dad5dfa4ba37d31187182504f18ff27045c13142b24cb8946011b4cc42e61976d2ee2d7e5a7e4f42dc4d57d01d5e556eaf66961d088d47262931fbb56a115f6a42743e75eed9270530ee63bb57b1ade4a338cb92f7a4c60bec418d2ccf94e7a0b4847c10c46991758a0e8fc4da06d19c1f05b9bccc918369360d26c28b05"], 0x14}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) (async)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000210099b1000000006a7e136cfb244f2dd44d4d1640095391d3ccaf724de7dad5dfa4ba37d31187182504f18ff27045c13142b24cb8946011b4cc42e61976d2ee2d7e5a7e4f42dc4d57d01d5e556eaf66961d088d47262931fbb56a115f6a42743e75eed9270530ee63bb57b1ade4a338cb92f7a4c60bec418d2ccf94e7a0b4847c10c46991758a0e8fc4da06d19c1f05b9bccc918369360d26c28b05"], 0x14}, 0x1, 0x0, 0x0, 0x4004011}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000140)=@newtaction={0xa8, 0x30, 0x9, 0x0, 0x0, {}, [{0x94, 0x1, [@m_skbedit={0x90, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8, 0x0, 0x0, 0xcf}}]}, {0x42, 0x6, "d9d79019de53d67116d65cc20aa80341b756ac4f78286eff8ab5ec9f0f34b8c03b03e50e45ef4419fc58ddb51f2fc598a31abc43407958ad59c0aa6f4b8b"}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

kernel console output (not intermixed with test programs):

[T19591] bond4: (slave geneve2): making interface the new active one
[  416.508786][T19591] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  416.524179][T17999] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  416.591195][T18010] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  416.639038][T18010] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  416.647517][T18010] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  416.724471][T19602] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  416.969728][T19620] netlink: 'syz.2.3845': attribute type 1 has an invalid length.
[  417.115516][T19620] 8021q: adding VLAN 0 to HW filter on device bond5
[  417.127158][T19627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3844'.
[  417.164347][T19628] 8021q: adding VLAN 0 to HW filter on device bond5
[  417.176276][T19628] bond5: (slave vcan0): The slave device specified does not support setting the MAC address
[  417.205184][T19637] netlink: 'syz.1.3848': attribute type 1 has an invalid length.
[  417.218711][T19628] bond5: (slave vcan0): Error -95 calling set_mac_address
[  417.546455][T19661] IPv6: NLM_F_CREATE should be specified when creating new route
[  417.634961][T19663] xt_hashlimit: overflow, try lower: 3/0
[  417.670667][T19666] xt_hashlimit: overflow, try lower: 3/0
[  417.741660][T19670] syzkaller1: entered promiscuous mode
[  417.748379][T19670] syzkaller1: entered allmulticast mode
[  417.852207][T19677] netlink: 'syz.1.3861': attribute type 29 has an invalid length.
[  417.870555][T19677] netlink: 'syz.1.3861': attribute type 29 has an invalid length.
[  418.095551][T19697] Bluetooth: MGMT ver 1.23
[  418.117171][T19692] bond3: entered promiscuous mode
[  418.123421][T19692] 8021q: adding VLAN 0 to HW filter on device bond3
[  418.175524][T19699] ipvlan0: entered allmulticast mode
[  418.214038][T19699] bond3: entered allmulticast mode
[  418.317287][T19692] bond3: (slave bridge5): making interface the new active one
[  418.341136][T19692] bridge5: entered promiscuous mode
[  418.359286][T19692] bridge5: entered allmulticast mode
[  418.366469][T19692] bond3: (slave bridge5): Enslaving as an active interface with an up link
[  418.526772][T19720] xt_l2tp: missing protocol rule (udp|l2tpip)
[  418.587912][T19727] xt_l2tp: missing protocol rule (udp|l2tpip)
[  418.830839][T19734] bond0: entered promiscuous mode
[  418.839124][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  418.847204][    C0] lec:lec_tx_timeout: lec0
[  418.852647][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  418.874104][T19734] gretap0: entered promiscuous mode
[  418.890906][T19734] bond0: left promiscuous mode
[  418.899219][T19734] gretap0: left promiscuous mode
[  419.372650][T19746] __nla_validate_parse: 7 callbacks suppressed
[  419.372671][T19746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3881'.
[  419.440674][T19748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3882'.
[  419.763374][T19758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3883'.
[  419.803582][T19758] vlan3: entered promiscuous mode
[  419.814728][T19758] erspan0: entered promiscuous mode
[  419.952288][T19764] sctp: [Deprecated]: syz.2.3884 (pid 19764) Use of struct sctp_assoc_value in delayed_ack socket option.
[  419.952288][T19764] Use struct sctp_sack_info instead
[  420.000286][T19766] sctp: [Deprecated]: syz.2.3884 (pid 19766) Use of struct sctp_assoc_value in delayed_ack socket option.
[  420.000286][T19766] Use struct sctp_sack_info instead
[  420.038810][T19764] sctp: [Deprecated]: syz.2.3884 (pid 19764) Use of struct sctp_assoc_value in delayed_ack socket option.
[  420.038810][T19764] Use struct sctp_sack_info instead
[  420.121085][T19770] xt_cgroup: invalid path, errno=-2
[  420.137170][T19770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3886'.
[  420.576382][T19782] validate_nla: 4 callbacks suppressed
[  420.576401][T19782] netlink: 'syz.2.3889': attribute type 8 has an invalid length.
[  420.600038][T19726] Bluetooth: hci0: command 0x0405 tx timeout
[  420.627156][T19782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3889'.
[  420.660609][T19782] bond0: entered promiscuous mode
[  420.666929][T19782] gretap0: entered promiscuous mode
[  420.674212][T19782] bond0: left promiscuous mode
[  420.681019][T19782] gretap0: left promiscuous mode
[  421.140689][T19803] syzkaller0: entered promiscuous mode
[  421.146293][T19803] syzkaller0: entered allmulticast mode
[  421.161998][T19803] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  421.308695][T19808] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3898'.
[  421.543757][T19817] netlink: 'syz.5.3902': attribute type 1 has an invalid length.
[  421.611465][T19820] netlink: 'syz.2.3903': attribute type 16 has an invalid length.
[  421.679131][T19820] netlink: 'syz.2.3903': attribute type 17 has an invalid length.
[  421.710411][T19824] netlink: 'syz.0.3904': attribute type 8 has an invalid length.
[  421.752833][T19824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3904'.
[  421.816883][T19828] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3906'.
[  421.843317][T19820] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.855047][T19820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  421.887402][T19824] gretap0: entered promiscuous mode
[  421.906839][T19824] gretap0: left promiscuous mode
[  422.210893][T19838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3907'.
[  422.326261][T19850] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3912'.
[  422.355027][T19850] macsec1: entered promiscuous mode
[  422.466554][T19854] tipc: Invalid UDP bearer configuration
[  422.466607][T19854] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  423.020429][T19890] netlink: 'syz.3.3927': attribute type 1 has an invalid length.
[  423.270649][T19900] netlink: 'syz.2.3931': attribute type 13 has an invalid length.
[  423.287236][T19904] netlink: 'syz.0.3933': attribute type 11 has an invalid length.
[  423.858970][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  423.867059][    C0] lec:lec_tx_timeout: lec0
[  423.872731][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  424.274853][T19963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  424.601499][T19980] netlink: 'syz.3.3960': attribute type 8 has an invalid length.
[  424.639147][T19980] __nla_validate_parse: 9 callbacks suppressed
[  424.639165][T19980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3960'.
[  424.694328][T19980] bond0: entered promiscuous mode
[  424.700778][T19944] netlink: 'syz.2.3947': attribute type 10 has an invalid length.
[  424.702735][T19980] bond_slave_0: entered promiscuous mode
[  424.760137][T19980] bond_slave_1: entered promiscuous mode
[  424.767386][T19980] gretap0: entered promiscuous mode
[  424.810627][T19986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3961'.
[  424.837483][T19980] bond0: left promiscuous mode
[  424.853330][T19980] bond_slave_0: left promiscuous mode
[  424.869724][T19980] bond_slave_1: left promiscuous mode
[  424.890182][T19980] gretap0: left promiscuous mode
[  424.997347][T19985] tipc: Resetting bearer <eth:syzkaller0>
[  425.351894][T19726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  425.371881][T19726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  425.383991][T19726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  425.422810][T19726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  425.448892][T19726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  425.666422][T19988] wg1 speed is unknown, defaulting to 1000
[  425.978013][T20028] netlink: 'syz.2.3969': attribute type 2 has an invalid length.
[  426.074943][T20048] netlink: 'syz.3.3973': attribute type 8 has an invalid length.
[  426.087526][T20048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3973'.
[  426.346614][T20048] bond0: entered promiscuous mode
[  426.362400][T20048] bond_slave_0: entered promiscuous mode
[  426.368471][T20048] bond_slave_1: entered promiscuous mode
[  426.385218][T20048] gretap0: entered promiscuous mode
[  426.396489][T20048] bond0: left promiscuous mode
[  426.412967][T20048] bond_slave_0: left promiscuous mode
[  426.433760][T20048] bond_slave_1: left promiscuous mode
[  426.444877][T20048] gretap0: left promiscuous mode
[  426.752531][T20040] syzkaller0: entered promiscuous mode
[  426.758169][T20040] syzkaller0: entered allmulticast mode
[  426.973149][T20084] netlink: 'syz.3.3978': attribute type 1 has an invalid length.
[  427.350985][T20104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3979'.
[  427.489702][ T5840] Bluetooth: hci2: command tx timeout
[  428.521583][T20084] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  428.659577][T20110] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3980'.
[  428.861067][T20122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3984'.
[  428.878996][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  428.887047][    C0] lec:lec_tx_timeout: lec0
[  428.892455][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  428.952547][T19988] chnl_net:caif_netlink_parms(): no params data found
[  429.129687][T20131] syzkaller0: entered promiscuous mode
[  429.135255][T20131] syzkaller0: entered allmulticast mode
[  429.569426][ T5840] Bluetooth: hci2: command tx timeout
[  430.745314][T19988] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.778005][T19988] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.799412][T19988] bridge_slave_0: entered allmulticast mode
[  430.807263][T19988] bridge_slave_0: entered promiscuous mode
[  430.818999][T19988] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.826267][T19988] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.833661][T19988] bridge_slave_1: entered allmulticast mode
[  430.842605][T19988] bridge_slave_1: entered promiscuous mode
[  430.873741][T20161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3993'.
[  430.875698][T20163] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:0
[  430.912269][T19988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.917870][T20165] netlink: 'syz.2.3995': attribute type 1 has an invalid length.
[  430.970928][T20170] IPv6: addrconf: prefix option has invalid lifetime
[  431.016319][T19988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  431.150292][T13974] IPVS: starting estimator thread 0...
[  431.239500][T20181] IPVS: using max 26 ests per chain, 62400 per kthread
[  431.257367][T19988] team0: Port device team_slave_0 added
[  431.265075][T20186] netlink: 'syz.2.4002': attribute type 2 has an invalid length.
[  431.276991][T19988] team0: Port device team_slave_1 added
[  431.443378][T19988] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.456369][T19988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.488720][T19988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.503204][T19988] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.511502][T19988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.538648][T19988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.639264][ T5840] Bluetooth: hci2: command tx timeout
[  431.666990][T20197] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4005'.
[  432.046009][T20207] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4008'.
[  432.058661][T19988] hsr_slave_0: entered promiscuous mode
[  432.066558][T19988] hsr_slave_1: entered promiscuous mode
[  432.074101][T20207] netlink: 'syz.3.4008': attribute type 2 has an invalid length.
[  432.076161][T19988] debugfs: 'hsr0' already exists in 'hsr'
[  432.087678][T19988] Cannot create hsr debugfs directory
[  432.543419][T20213] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4009'.
[  432.574785][T20218] netlink: 'syz.2.4011': attribute type 26 has an invalid length.
[  432.821290][T19988] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  432.833704][T19988] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  432.846004][T19988] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.856968][T19988] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  432.869567][T19988] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  432.936228][T20222] syzkaller0: entered allmulticast mode
[  433.096612][T20248] SET target dimension over the limit!
[  433.123898][T20230] bond0: (slave bond_slave_0): Releasing backup interface
[  433.134836][T20230] bond_slave_0: left promiscuous mode
[  433.156475][T20230] bond0: (slave bond_slave_1): Releasing backup interface
[  433.165579][T20230] bond_slave_1: left promiscuous mode
[  433.176461][T20252] netlink: 'syz.2.4021': attribute type 10 has an invalid length.
[  433.194645][T20230] team0: Port device team_slave_0 removed
[  433.223119][T20230] team0: Port device team_slave_1 removed
[  433.236911][T20255] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  433.246678][T20230] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  433.364478][T19988] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  433.375052][T19988] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  433.386362][T19988] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.403122][T19988] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  433.416041][T19988] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  433.476904][T20252] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  433.593638][T19988] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  433.608652][T19988] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  433.630254][T19988] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.646371][T19988] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  433.657880][T19988] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  433.702707][   T29] audit: type=1800 audit(1775307313.249:5): pid=20266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4027" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1060 res=0 errno=0
[  433.740112][T19726] Bluetooth: hci2: command tx timeout
[  433.753739][   T29] audit: type=1804 audit(1775307313.249:6): pid=20266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4027" name=2F6E6577726F6F742F3230352F4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1060 res=1 errno=0
[  433.899626][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  433.907800][    C0] lec:lec_tx_timeout: lec0
[  433.912885][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  433.941640][T19988] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  433.952342][T19988] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  433.993962][T19988] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.018715][T19988] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  434.044446][T19988] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  434.079506][T20276] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  434.091623][T20276] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  434.100195][T20276] gretap2: entered promiscuous mode
[  434.105505][T20276] gretap2: entered allmulticast mode
[  434.137598][T20285] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4034'.
[  434.155984][T20285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4034'.
[  434.323295][T19988] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  434.351632][T19988] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  434.373011][T19988] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  434.398093][T19988] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  434.554141][T20312] netlink: 'syz.3.4042': attribute type 8 has an invalid length.
[  434.574227][T20312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4042'.
[  434.614652][T20312] bond0: entered promiscuous mode
[  434.620154][T20312] bond_slave_0: entered promiscuous mode
[  434.626161][T20312] bond_slave_1: entered promiscuous mode
[  434.633300][T20312] gretap0: entered promiscuous mode
[  434.640436][T20312] bond0: left promiscuous mode
[  434.645281][T20312] bond_slave_0: left promiscuous mode
[  434.651149][T20312] bond_slave_1: left promiscuous mode
[  434.657728][T20312] gretap0: left promiscuous mode
[  434.665227][T20317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4044'.
[  434.705521][T19988] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.747224][T19988] 8021q: adding VLAN 0 to HW filter on device team0
[  434.796913][T18005] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.804170][T18005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.847511][T18008] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.854791][T18008] bridge0: port 2(bridge_slave_1) entered forwarding state
[  434.907505][T19988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  434.929894][T19988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  435.069227][T20330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4047'.
[  435.280613][T20345] xt_CT: You must specify a L4 protocol and not use inversions on it
[  435.409197][T19988] 8021q: adding VLAN 0 to HW filter on device batadv0
[  435.437607][T20353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4056'.
[  435.501081][T20358] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  435.811541][T20371] netlink: 'syz.3.4058': attribute type 1 has an invalid length.
[  435.861347][T20373] ip6gretap1: entered promiscuous mode
[  435.890554][T20372] ip6gretap1: left promiscuous mode
[  435.951541][T20381] syzkaller1: entered promiscuous mode
[  435.957085][T20381] syzkaller1: entered allmulticast mode
[  436.056669][T19988] veth0_vlan: entered promiscuous mode
[  436.081474][T19988] veth1_vlan: entered promiscuous mode
[  436.105861][T20393] netlink: 'syz.0.4064': attribute type 1 has an invalid length.
[  436.129414][T20393] __nla_validate_parse: 4 callbacks suppressed
[  436.129432][T20393] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4064'.
[  436.157035][T19988] veth0_macvtap: entered promiscuous mode
[  436.168170][T19988] veth1_macvtap: entered promiscuous mode
[  436.175463][T20393] netlink: 'syz.0.4064': attribute type 1 has an invalid length.
[  436.196190][T20393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4064'.
[  436.221356][T19988] batman_adv: batadv0: Interface activated: batadv_slave_0
[  436.251965][T19988] batman_adv: batadv0: Interface activated: batadv_slave_1
[  436.300796][T18008] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  436.325914][T18008] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  436.345082][T18008] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  436.393681][T18008] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.659092][T17999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.666969][T17999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.780602][T20421] tipc: Started in network mode
[  436.785642][T20421] tipc: Node identity 328cbb8a678a, cluster identity 4711
[  436.796282][T20421] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  436.816304][T18008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.839504][T20421] syzkaller0: entered promiscuous mode
[  436.848414][T18008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.867979][T20421] syzkaller0: entered allmulticast mode
[  436.888493][T20421] tipc: Resetting bearer <eth:syzkaller0>
[  436.914268][T20420] tipc: Resetting bearer <eth:syzkaller0>
[  436.988158][T20420] tipc: Disabling bearer <eth:syzkaller0>
[  437.078566][T20438] Cannot find del_set index 0 as target
[  437.266793][T20448] netlink: 'syz.0.4081': attribute type 4 has an invalid length.
[  437.315573][T20448] netlink: 'syz.0.4081': attribute type 4 has an invalid length.
[  437.476421][T20460] SET target dimension over the limit!
[  437.501325][T20460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4085'.
[  437.512297][T20460] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  437.545129][T20463] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2
[  437.597931][T20463] ip6tnl0: Caught tx_queue_len zero misconfig
[  437.655942][T20463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4087'.
[  437.750285][T20476] sctp: [Deprecated]: syz.0.4091 (pid 20476) Use of int in maxseg socket option.
[  437.750285][T20476] Use struct sctp_assoc_value instead
[  437.832940][T20482] netlink: 'syz.5.4092': attribute type 1 has an invalid length.
[  437.983762][T20482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4092'.
[  438.026746][T20482] macvlan2: entered promiscuous mode
[  438.092751][T20482] macvlan2: entered allmulticast mode
[  438.263575][T20510] bridge0: port 3(ip6gretap0) entered blocking state
[  438.270783][T20510] bridge0: port 3(ip6gretap0) entered disabled state
[  438.278663][T20510] ip6gretap0: entered allmulticast mode
[  438.291113][T20510] ip6gretap0: entered promiscuous mode
[  438.307312][T20510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4100'.
[  438.329804][T20517] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.4102'.
[  438.343076][T20510] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  438.543188][T20533] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4104'.
[  438.562691][T20533] erspan0: entered allmulticast mode
[  438.629460][T20533] netlink: 'syz.1.4104': attribute type 12 has an invalid length.
[  438.638592][T20533] netlink: 'syz.1.4104': attribute type 29 has an invalid length.
[  438.663004][T20533] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4104'.
[  438.686844][T20533] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4104'.
[  438.920177][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  438.928318][    C0] lec:lec_tx_timeout: lec0
[  438.933225][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  441.311256][T20515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  441.495983][T20550] __nla_validate_parse: 1 callbacks suppressed
[  441.496003][T20550] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4110'.
[  441.685196][T20562] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4114'.
[  441.713909][T20560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4115'.
[  441.729767][T20565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4116'.
[  442.288712][T20603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4129'.
[  442.461230][T20611] netlink: 'syz.2.4133': attribute type 1 has an invalid length.
[  442.480077][T20611] netlink: 'syz.2.4133': attribute type 2 has an invalid length.
[  442.515379][T20620] netlink: 'syz.0.4135': attribute type 1 has an invalid length.
[  442.591177][T20620] IPv6: sit1: Disabled Multicast RS
[  442.600514][T20620] sit1: entered allmulticast mode
[  442.874307][T20646] openvswitch: netlink: IP tunnel TTL not specified.
[  442.927512][T20646] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4141'.
[  442.940354][T20651] netlink: 'syz.0.4142': attribute type 1 has an invalid length.
[  442.983165][T20651] bond4: entered promiscuous mode
[  442.989350][T20651] 8021q: adding VLAN 0 to HW filter on device bond4
[  443.021300][T20652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4144'.
[  443.061229][T20651] 8021q: adding VLAN 0 to HW filter on device bond4
[  443.071938][T20651] bond4: (slave vcan1): The slave device specified does not support setting the MAC address
[  443.083252][T20651] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  443.096277][T20651] bond4: (slave vcan1): making interface the new active one
[  443.103933][T20651] vcan1: entered promiscuous mode
[  443.111093][T20651] bond4: (slave vcan1): Enslaving as an active interface with an up link
[  443.176391][T20664] x_tables: duplicate underflow at hook 1
[  443.217720][T20651] tipc: Enabling of bearer <eth:ipvlan1> rejected, failed to enable media
[  443.228426][T20664] x_tables: duplicate underflow at hook 1
[  443.374537][T20669] syzkaller0: entered promiscuous mode
[  443.386015][T20669] syzkaller0: entered allmulticast mode
[  443.463311][T20674] syzkaller0: entered promiscuous mode
[  443.472280][T20674] syzkaller0: entered allmulticast mode
[  443.948961][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  443.957029][    C0] lec:lec_tx_timeout: lec0
[  443.961864][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  444.242187][T20699] netlink: 'syz.2.4159': attribute type 8 has an invalid length.
[  444.258867][T20699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4159'.
[  444.287050][T20699] bond0: entered promiscuous mode
[  444.293671][T20699] bridge0: entered promiscuous mode
[  444.301311][T20699] gretap0: entered promiscuous mode
[  444.313284][T20699] bond0: left promiscuous mode
[  444.318330][T20699] bridge0: left promiscuous mode
[  444.325692][T20699] gretap0: left promiscuous mode
[  444.343087][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4160'.
[  444.400122][T20703] netlink: 'syz.1.4160': attribute type 5 has an invalid length.
[  444.410078][T20703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4160'.
[  444.492960][T20713] netlink: 'syz.2.4164': attribute type 1 has an invalid length.
[  444.625696][T20717] netlink: 'syz.0.4166': attribute type 1 has an invalid length.
[  444.753030][T20727] 8021q: adding VLAN 0 to HW filter on device bond6
[  444.764681][T20727] bond5: (slave bond6): making interface the new active one
[  444.777430][T20727] bond5: (slave bond6): Enslaving as an active interface with an up link
[  444.812185][T20717] bond5: (slave gretap1): Enslaving as a backup interface with an up link
[  444.833651][T20736] netlink: 'syz.2.4171': attribute type 1 has an invalid length.
[  444.848391][T20727] 8021q: adding VLAN 0 to HW filter on device bond5
[  445.095491][T20749] netlink: 'syz.3.4174': attribute type 8 has an invalid length.
[  445.137763][T20751] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  445.202522][T20749] bond0: entered promiscuous mode
[  445.208353][T20749] bond_slave_0: entered promiscuous mode
[  445.216953][T20749] bond_slave_1: entered promiscuous mode
[  445.240154][T20749] gretap0: entered promiscuous mode
[  445.259723][T20749] bond0: left promiscuous mode
[  445.264689][T20749] bond_slave_0: left promiscuous mode
[  445.281185][T20749] bond_slave_1: left promiscuous mode
[  445.295003][T20749] gretap0: left promiscuous mode
[  445.518701][T20764] bond7: (slave geneve3): making interface the new active one
[  445.528349][T20764] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  445.541923][T18009] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  445.556582][T18009] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  445.576486][T18009] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  445.597261][T20772] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20003
[  445.629099][T18009] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  445.687628][T20772] 8021q: adding VLAN 0 to HW filter on device batadv0
[  445.833928][T20772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  445.864526][T20772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  445.957397][T20772] veth1_vlan: left promiscuous mode
[  446.000297][T20772] veth0_vlan: left promiscuous mode
[  446.013864][T20772] veth0_vlan: entered promiscuous mode
[  446.039740][T20772] veth1_vlan: entered promiscuous mode
[  446.072361][T20793] sctp: [Deprecated]: syz.1.4184 (pid 20793) Use of int in maxseg socket option.
[  446.072361][T20793] Use struct sctp_assoc_value instead
[  446.072920][T20772] veth1_macvtap: left promiscuous mode
[  446.116766][T20772] veth0_macvtap: left promiscuous mode
[  446.124485][T20772] veth0_macvtap: entered promiscuous mode
[  446.132150][T20772] veth1_macvtap: entered promiscuous mode
[  446.153854][T20772] 8021q: adding VLAN 0 to HW filter on device bond1
[  446.164487][T20772] 8021q: adding VLAN 0 to HW filter on device bond2
[  446.175648][T20772] 8021q: adding VLAN 0 to HW filter on device bond3
[  446.233103][T20772] bridge3: left promiscuous mode
[  446.238254][T20772] bridge3: left allmulticast mode
[  446.248836][T20772] netdevsim netdevsim2 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  446.261740][T20772] netdevsim netdevsim2 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  446.274203][T20772] netdevsim netdevsim2 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  446.278949][    C0] hrtimer: interrupt took 374010 ns
[  446.307372][T20772] netdevsim netdevsim2 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  446.332116][T20772] bridge4: left promiscuous mode
[  446.337314][T20772] bridge4: left allmulticast mode
[  446.348181][T20772] 8021q: adding VLAN 0 to HW filter on device bond4
[  446.367057][T20772] 8021q: adding VLAN 0 to HW filter on device bond5
[  446.377773][T20772] 8021q: adding VLAN 0 to HW filter on device batadv1
[  446.391112][T20772] 8021q: adding VLAN 0 to HW filter on device bond6
[  446.400053][T20772] gretap2: left promiscuous mode
[  446.405245][T20772] gretap2: left allmulticast mode
[  446.420497][T20772] 8021q: adding VLAN 0 to HW filter on device bond7
[  446.538653][T18006] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  446.568231][T18006] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  446.609227][T20809] veth0: Caught tx_queue_len zero misconfig
[  446.633048][T18006] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  446.643244][T20812] __nla_validate_parse: 10 callbacks suppressed
[  446.643261][T20812] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4187'.
[  446.660920][T20812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4187'.
[  446.671302][T18006] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  446.704425][T20813] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4187'.
[  446.763345][T20817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4189'.
[  446.823183][T20817] bond0: entered promiscuous mode
[  446.844257][T20817] gretap0: entered promiscuous mode
[  446.870542][T20817] bond0: left promiscuous mode
[  446.894639][T20817] gretap0: left promiscuous mode
[  447.464496][T20846] ipt_REJECT: TCP_RESET invalid for non-tcp
[  447.791850][T20854] validate_nla: 7 callbacks suppressed
[  447.791869][T20854] netlink: 'syz.3.4202': attribute type 8 has an invalid length.
[  447.820916][T20854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4202'.
[  447.862844][T20854] bond0: entered promiscuous mode
[  447.867958][T20854] bond_slave_0: entered promiscuous mode
[  447.892380][T20854] bond_slave_1: entered promiscuous mode
[  447.903662][T20854] gretap0: entered promiscuous mode
[  447.973010][T20854] bond0: left promiscuous mode
[  447.982897][T20854] bond_slave_0: left promiscuous mode
[  447.995895][T20854] bond_slave_1: left promiscuous mode
[  448.031637][T20854] gretap0: left promiscuous mode
[  448.072169][T20870] vxcan1: entered allmulticast mode
[  448.174338][T20874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4207'.
[  448.212439][T20874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4207'.
[  448.235063][T20876] netlink: 'syz.3.4208': attribute type 1 has an invalid length.
[  448.370432][T20883] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  448.408291][T20885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4212'.
[  448.434188][T20881] tipc: Started in network mode
[  448.439323][T20881] tipc: Node identity ac14140f, cluster identity 4711
[  448.447963][T20881] tipc: New replicast peer: 255.255.255.255
[  448.471998][T20881] tipc: Enabled bearer <udp:syz2>, priority 10
[  448.547693][T20895] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  448.623614][T20898] netlink: 'syz.3.4215': attribute type 1 has an invalid length.
[  448.658237][T20900] xt_addrtype: ipv6 does not support BROADCAST matching
[  448.716013][T20898] 8021q: adding VLAN 0 to HW filter on device bond7
[  448.757800][T20903] bond7: (slave geneve5): making interface the new active one
[  448.803205][T20903] bond7: (slave geneve5): Enslaving as an active interface with an up link
[  448.902293][T18005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  448.925395][T20916] netlink: 'syz.1.4219': attribute type 8 has an invalid length.
[  448.926419][T18005] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  448.933845][T20916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4219'.
[  448.969000][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  448.977094][    C0] lec:lec_tx_timeout: lec0
[  448.981937][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  449.008336][T20916] bond0: entered promiscuous mode
[  449.024040][T20916] gretap0: entered promiscuous mode
[  449.038740][T20918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4220'.
[  449.039276][T20916] bond0: left promiscuous mode
[  449.091006][T20916] gretap0: left promiscuous mode
[  449.103232][T18005] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.125095][T18005] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  449.284562][T20927] netlink: 'syz.1.4224': attribute type 1 has an invalid length.
[  449.300262][T20930] x_tables: duplicate underflow at hook 2
[  449.369487][T20927] bond3: entered promiscuous mode
[  449.374968][T20927] 8021q: adding VLAN 0 to HW filter on device bond3
[  449.436051][T20940] 8021q: adding VLAN 0 to HW filter on device bond3
[  449.471064][T20940] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  449.491573][T20940] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  449.513644][T20940] bond3: (slave vcan1): making interface the new active one
[  449.525128][T20940] vcan1: entered promiscuous mode
[  449.536940][T20940] bond3: (slave vcan1): Enslaving as an active interface with an up link
[  449.591119][ T5940] tipc: Node number set to 2886997007
[  449.667052][T20960] netlink: 'syz.1.4234': attribute type 8 has an invalid length.
[  449.698794][T20959] xt_CT: You must specify a L4 protocol and not use inversions on it
[  449.751794][T20960] bond0: entered promiscuous mode
[  449.758401][T20960] gretap0: entered promiscuous mode
[  449.789106][T20960] bond0: left promiscuous mode
[  449.801204][T20960] gretap0: left promiscuous mode
[  450.015771][T20983] syzkaller0: entered promiscuous mode
[  450.025101][T20985] netlink: 'syz.1.4240': attribute type 1 has an invalid length.
[  450.033101][T20983] syzkaller0: entered allmulticast mode
[  450.136872][T20985] bond4: entered promiscuous mode
[  450.142564][T20985] 8021q: adding VLAN 0 to HW filter on device bond4
[  450.242860][T20990] veth3: entered promiscuous mode
[  450.329715][T20989] veth5: entered promiscuous mode
[  450.385586][T20985] 8021q: adding VLAN 0 to HW filter on device bond4
[  450.395494][T20985] bond4: (slave vcan2): The slave device specified does not support setting the MAC address
[  450.413667][T20985] bond4: (slave vcan2): Setting fail_over_mac to active for active-backup mode
[  450.427019][T20985] bond4: (slave vcan2): making interface the new active one
[  450.434496][T20985] vcan2: entered promiscuous mode
[  450.441554][T20985] bond4: (slave vcan2): Enslaving as an active interface with an up link
[  450.491831][T20999] netlink: 'syz.0.4244': attribute type 1 has an invalid length.
[  450.523773][T21002] netlink: 'syz.5.4243': attribute type 1 has an invalid length.
[  450.551464][T20999] bond8: entered promiscuous mode
[  450.557121][T20999] 8021q: adding VLAN 0 to HW filter on device bond8
[  450.575424][T21008] xt_CT: You must specify a L4 protocol and not use inversions on it
[  450.634339][T20999] 8021q: adding VLAN 0 to HW filter on device bond8
[  450.663490][T20999] bond8: (slave vcan2): The slave device specified does not support setting the MAC address
[  450.681072][T20999] bond8: (slave vcan2): Setting fail_over_mac to active for active-backup mode
[  450.694352][T20999] bond8: (slave vcan2): making interface the new active one
[  450.702784][T20999] vcan2: entered promiscuous mode
[  450.709839][T20999] bond8: (slave vcan2): Enslaving as an active interface with an up link
[  450.730702][T21011] bond1: (slave geneve2): making interface the new active one
[  450.740171][T21011] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  450.775358][T18005] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  450.801277][T18005] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  450.835880][T18005] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  450.857326][T21018] netlink: 'syz.1.4249': attribute type 1 has an invalid length.
[  450.866283][T18005] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  450.992031][T21020] bond0: entered promiscuous mode
[  450.997152][T21020] bond_slave_0: entered promiscuous mode
[  451.057517][T21020] bond_slave_1: entered promiscuous mode
[  451.076861][T21033] xt_l2tp: unknown flags: 10
[  451.093940][T21020] gretap0: entered promiscuous mode
[  451.131586][T21020] bond0: left promiscuous mode
[  451.144910][T21020] bond_slave_0: left promiscuous mode
[  451.156448][T21020] bond_slave_1: left promiscuous mode
[  451.189313][T21020] gretap0: left promiscuous mode
[  451.601613][T21062] bond6: entered promiscuous mode
[  451.610239][T21062] 8021q: adding VLAN 0 to HW filter on device bond6
[  451.667028][T21070] __nla_validate_parse: 16 callbacks suppressed
[  451.667047][T21070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4265'.
[  451.721577][T21068] 8021q: adding VLAN 0 to HW filter on device bond6
[  451.771562][T21068] bond6: (slave vcan3): The slave device specified does not support setting the MAC address
[  451.795564][T21087] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.4267'.
[  451.807905][T21087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4267'.
[  451.830465][T21087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  451.837774][T21087] IPv6: NLM_F_CREATE should be set when creating new route
[  451.871949][T21068] bond6: (slave vcan3): Setting fail_over_mac to active for active-backup mode
[  451.931498][T21068] bond6: (slave vcan3): making interface the new active one
[  451.939145][T21068] vcan3: entered promiscuous mode
[  451.945961][T21068] bond6: (slave vcan3): Enslaving as an active interface with an up link
[  452.059337][T21098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4271'.
[  452.096549][T21098] bond0: entered promiscuous mode
[  452.121181][T21098] bond_slave_0: entered promiscuous mode
[  452.127210][T21098] bond_slave_1: entered promiscuous mode
[  452.174028][T21098] gretap0: entered promiscuous mode
[  452.229361][T21098] bond0: left promiscuous mode
[  452.234598][T21098] bond_slave_0: left promiscuous mode
[  452.242843][T21108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4275'.
[  452.270210][T21098] bond_slave_1: left promiscuous mode
[  452.287161][T21098] gretap0: left promiscuous mode
[  452.392293][T21115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4275'.
[  452.910488][T21141] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4285'.
[  453.082160][T21146] validate_nla: 14 callbacks suppressed
[  453.082182][T21146] netlink: 'syz.1.4287': attribute type 1 has an invalid length.
[  453.184340][T21146] bond7: entered promiscuous mode
[  453.188169][T21154] Bluetooth: MGMT ver 1.23
[  453.200123][T21146] 8021q: adding VLAN 0 to HW filter on device bond7
[  453.246475][T21146] 8021q: adding VLAN 0 to HW filter on device bond7
[  453.253971][T21146] bond7: (slave vcan4): The slave device specified does not support setting the MAC address
[  453.265183][T21146] bond7: (slave vcan4): Setting fail_over_mac to active for active-backup mode
[  453.277626][T21160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4289'.
[  453.287723][T21146] bond7: (slave vcan4): making interface the new active one
[  453.287750][T21146] vcan4: entered promiscuous mode
[  453.293022][T21146] bond7: (slave vcan4): Enslaving as an active interface with an up link
[  453.353217][T21165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4291'.
[  453.367986][T21146] tipc: Enabled bearer <eth:ipvlan1>, priority 11
[  453.614846][T21181] syzkaller0: entered promiscuous mode
[  453.629337][T21181] syzkaller0: entered allmulticast mode
[  453.723220][T21181] bond9: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  453.866448][T21197] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4302'.
[  453.989175][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  453.997259][    C0] lec:lec_tx_timeout: lec0
[  454.002427][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  454.023521][T21193] syzkaller0: entered promiscuous mode
[  454.030526][T21193] syzkaller0: entered allmulticast mode
[  454.056676][T21208] netlink: 'syz.0.4304': attribute type 4 has an invalid length.
[  454.113177][T21211] netlink: 'syz.0.4304': attribute type 4 has an invalid length.
[  455.777881][T19302] tipc: Node number set to 3535221086
[  455.902904][T21236] netlink: 'syz.5.4311': attribute type 16 has an invalid length.
[  455.916767][T21237] FAULT_INJECTION: forcing a failure.
[  455.916767][T21237] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  455.922140][T21236] netlink: 'syz.5.4311': attribute type 17 has an invalid length.
[  455.951665][T21237] CPU: 0 UID: 0 PID: 21237 Comm: syz.0.4310 Not tainted syzkaller #0 PREEMPT(full) 
[  455.951693][T21237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  455.951706][T21237] Call Trace:
[  455.951715][T21237]  <TASK>
[  455.951724][T21237]  dump_stack_lvl+0xe8/0x150
[  455.951759][T21237]  should_fail_ex+0x412/0x560
[  455.951798][T21237]  _copy_to_user+0x31/0xb0
[  455.951827][T21237]  simple_read_from_buffer+0xe1/0x170
[  455.951863][T21237]  proc_fail_nth_read+0x1bb/0x230
[  455.951897][T21237]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  455.951932][T21237]  ? rw_verify_area+0x2a6/0x4d0
[  455.951953][T21237]  ? tun_chr_write_iter+0x18a/0x200
[  455.951975][T21237]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  455.952008][T21237]  vfs_read+0x20c/0xa70
[  455.952029][T21237]  ? fdget_pos+0x246/0x320
[  455.952053][T21237]  ? __pfx___mutex_lock+0x10/0x10
[  455.952083][T21237]  ? __pfx_vfs_read+0x10/0x10
[  455.952107][T21237]  ? __fget_files+0x2a/0x420
[  455.952129][T21237]  ? __fget_files+0x3a0/0x420
[  455.952147][T21237]  ? __fget_files+0x2a/0x420
[  455.952174][T21237]  ksys_read+0x150/0x270
[  455.952200][T21237]  ? __pfx_ksys_read+0x10/0x10
[  455.952235][T21237]  do_syscall_64+0x14d/0xf80
[  455.952261][T21237]  ? trace_irq_disable+0x3b/0x150
[  455.952280][T21237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.952300][T21237]  ? clear_bhb_loop+0x40/0x90
[  455.952326][T21237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.952347][T21237] RIP: 0033:0x7fd9fab5d04e
[  455.952367][T21237] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  455.952385][T21237] RSP: 002b:00007fd9fba81fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  455.952407][T21237] RAX: ffffffffffffffda RBX: 00007fd9fba826c0 RCX: 00007fd9fab5d04e
[  455.952421][T21237] RDX: 000000000000000f RSI: 00007fd9fba820a0 RDI: 0000000000000006
[  455.952434][T21237] RBP: 00007fd9fba82090 R08: 0000000000000000 R09: 0000000000000000
[  455.952445][T21237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  455.952457][T21237] R13: 00007fd9fae16038 R14: 00007fd9fae15fa0 R15: 00007fff38faec38
[  455.952491][T21237]  </TASK>
[  456.173053][T19726] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  456.180109][T19726] Bluetooth: hci0: command 0x0405 tx timeout
[  456.265084][T21242] netlink: 'syz.2.4312': attribute type 1 has an invalid length.
[  456.292722][T21236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  456.417009][T21253] netlink: 'syz.5.4315': attribute type 1 has an invalid length.
[  456.436290][T21257] netlink: 'syz.1.4316': attribute type 9 has an invalid length.
[  456.467201][T21242] 8021q: adding VLAN 0 to HW filter on device bond8
[  456.477525][T21255] x_tables: duplicate underflow at hook 1
[  456.567408][T21253] bond2: entered promiscuous mode
[  456.576493][T21253] 8021q: adding VLAN 0 to HW filter on device bond2
[  456.593127][T21267] atomic_op ffff88806cda0998 conn xmit_atomic 0000000000000000
[  456.672842][T21266] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  456.706640][T21266] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  456.822800][T21266] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  456.860739][T21266] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  456.885020][T21279] __nla_validate_parse: 3 callbacks suppressed
[  456.885040][T21279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4322'.
[  457.060767][T21279] bond8: option xmit_hash_policy: invalid value (64)
[  457.079843][T21279] bond8 (unregistering): Released all slaves
[  457.103955][T21285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4324'.
[  457.170724][T21266] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  457.191392][T21266] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  457.338798][T21266] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  457.389048][T21266] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  457.555645][T21304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4331'.
[  457.564700][T21298] bond3 (unregistering): Released all slaves
[  457.626551][T18006] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.646098][T18006] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  457.702279][T18007] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.723987][T21310] netlink: 'syz.0.4332': attribute type 1 has an invalid length.
[  457.732330][T18007] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  457.777846][T18007] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.798553][T18007] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  457.855012][T21312] bond8: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  457.877664][T21312] bond8 (unregistering): Released all slaves
[  457.940403][T18007] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.960396][T18007] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  458.072076][T21318] syzkaller0: entered promiscuous mode
[  458.084626][T21331] netlink: 'syz.5.4337': attribute type 1 has an invalid length.
[  458.088251][T21318] syzkaller0: entered allmulticast mode
[  458.230682][T21339] netlink: 'syz.1.4341': attribute type 30 has an invalid length.
[  458.283389][T21344] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4341'.
[  458.328075][T21346] xt_ecn: cannot match TCP bits for non-tcp packets
[  458.388519][T21343] xt_limit: Overflow, try lower: 604147548/4200216962
[  459.019459][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  459.027574][    C0] lec:lec_tx_timeout: lec0
[  459.032227][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  459.994331][T21339] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  460.082300][T21366] netlink: 'syz.1.4348': attribute type 2 has an invalid length.
[  460.134761][T21366] !: entered promiscuous mode
[  460.144891][T21367] netlink: 'syz.1.4348': attribute type 2 has an invalid length.
[  460.175730][T21367] !: left promiscuous mode
[  460.240630][T21376] delete_channel: no stack
[  460.486580][T21392] tipc: Enabled bearer <udp:syz2>, priority 10
[  460.623523][T21405] netlink: 788 bytes leftover after parsing attributes in process `syz.2.4357'.
[  460.942701][T21420] team0 (unregistering): Port device team_slave_0 removed
[  461.022944][T21420] team0 (unregistering): Port device team_slave_1 removed
[  461.174618][T21434] syzkaller0: entered promiscuous mode
[  461.187710][T21434] syzkaller0: entered allmulticast mode
[  461.305749][T21444] sock: sock_timestamping_bind_phc: sock not bind to device
[  461.332233][T21435] syzkaller0: entered promiscuous mode
[  461.338548][T21435] syzkaller0: entered allmulticast mode
[  461.874083][T21469] xt_CT: You must specify a L4 protocol and not use inversions on it
[  462.519359][ T5840] Bluetooth: hci6: command 0x0406 tx timeout
[  463.166081][ T5940] tipc: Node number set to 1426504586
[  463.374295][T21481] lo: Caught tx_queue_len zero misconfig
[  463.568770][T21494] tipc: Enabled bearer <udp:syz2>, priority 10
[  463.608237][T21496] syzkaller0: entered promiscuous mode
[  463.626874][T21496] syzkaller0: entered allmulticast mode
[  463.771175][T21509] block nbd1: Unsupported socket: should be TCP or UNIX.
[  463.816290][T21501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4383'.
[  463.955808][T21512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4386'.
[  464.031160][T21520] netlink: 'syz.5.4387': attribute type 8 has an invalid length.
[  464.055488][T21520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4387'.
[  464.101185][T21520] bond0: entered promiscuous mode
[  464.118710][T21520] bond_slave_0: entered promiscuous mode
[  464.147823][T21520] bond_slave_1: entered promiscuous mode
[  464.160712][T21524] xt_CT: You must specify a L4 protocol and not use inversions on it
[  464.184714][T21520] gretap0: entered promiscuous mode
[  464.191611][T21520] bond0: left promiscuous mode
[  464.196557][T21520] bond_slave_0: left promiscuous mode
[  464.204747][T21520] bond_slave_1: left promiscuous mode
[  464.212885][T21520] gretap0: left promiscuous mode
[  464.267826][T21526] bond10 (unregistering): Released all slaves
[  464.463654][T21541] netlink: 'syz.2.4392': attribute type 1 has an invalid length.
[  464.541421][T21541] bond9: entered promiscuous mode
[  464.547021][T21541] 8021q: adding VLAN 0 to HW filter on device bond9
[  464.711505][T21550] 8021q: adding VLAN 0 to HW filter on device bond9
[  464.728255][T21550] bond9: (slave vcan0): The slave device specified does not support setting the MAC address
[  464.759177][T21550] bond9: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  464.803392][T21550] bond9: (slave vcan0): making interface the new active one
[  464.829821][T21550] vcan0: entered promiscuous mode
[  464.846850][T21550] bond9: (slave vcan0): Enslaving as an active interface with an up link
[  464.918989][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5890 ms
[  464.927102][    C0] lec:lec_tx_timeout: lec0
[  464.933721][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  464.972469][T21566] bond10: option min_links: invalid value (18446744073709551614)
[  465.006913][T21566] bond10: option min_links: allowed values 0 - 2147483647
[  465.131778][T21584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4401'.
[  465.174052][T21566] bond10 (unregistering): Released all slaves
[  465.285580][T21579] pim6reg: entered allmulticast mode
[  465.474919][T21593] tipc: Enabled bearer <udp:syz2>, priority 10
[  465.566211][T21599] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  465.669168][T21607] netlink: 15930 bytes leftover after parsing attributes in process `syz.3.4407'.
[  466.087392][T21631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4413'.
[  466.208520][T21640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4415'.
[  466.413218][T21656] h: entered promiscuous mode
[  466.447583][T21656] netlink: 'syz.5.4417': attribute type 2 has an invalid length.
[  466.496488][T21665] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0
[  466.536212][T21665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4420'.
[  466.558016][T21667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4419'.
[  466.745377][T13876] tipc: Node number set to 1610608562
[  466.818883][T21661] netlink: 'syz.3.4419': attribute type 2 has an invalid length.
[  466.892493][T21683] netlink: 'syz.2.4423': attribute type 4 has an invalid length.
[  466.908213][T21661] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4419'.
[  466.933520][T21683] netlink: 'syz.2.4423': attribute type 1 has an invalid length.
[  467.059877][T21678] syzkaller0: entered promiscuous mode
[  467.066319][T21678] syzkaller0: entered allmulticast mode
[  467.824559][T21748] sctp: [Deprecated]: syz.5.4439 (pid 21748) Use of int in max_burst socket option deprecated.
[  467.824559][T21748] Use struct sctp_assoc_value instead
[  467.844179][T21750] sctp: [Deprecated]: syz.3.4440 (pid 21750) Use of int in max_burst socket option.
[  467.844179][T21750] Use struct sctp_assoc_value instead
[  468.400726][T21785] netem: incorrect ge model size
[  468.406120][T21785] netem: change failed
[  468.965591][T21812] netlink: 'syz.0.4455': attribute type 1 has an invalid length.
[  469.188527][T21819] netlink: 'syz.1.4458': attribute type 1 has an invalid length.
[  469.290299][T21828] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  469.420307][T21833] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  469.505362][T21838] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  469.543168][T21842] __nla_validate_parse: 8 callbacks suppressed
[  469.543187][T21842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4466'.
[  469.646175][T21841] delete_channel: no stack
[  469.742214][T21850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4470'.
[  469.752771][T21852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4470'.
[  469.948952][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  469.957072][    C0] lec:lec_tx_timeout: lec0
[  469.962067][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  470.027001][T21867] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4475'.
[  470.053377][T21867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4475'.
[  470.065075][T21867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4475'.
[  470.147911][T21867] sctp: [Deprecated]: syz.1.4475 (pid 21867) Use of int in maxseg socket option.
[  470.147911][T21867] Use struct sctp_assoc_value instead
[  470.237321][T21877] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4480'.
[  470.282233][T21881] netlink: 'syz.1.4482': attribute type 8 has an invalid length.
[  470.463553][T21897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4486'.
[  470.502582][T21896] gtp0: entered promiscuous mode
[  470.531631][T21896] gtp0: entered allmulticast mode
[  470.777276][T21916] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4492'.
[  470.798651][T21916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4492'.
[  470.885696][T21916] sctp: [Deprecated]: syz.5.4492 (pid 21916) Use of int in maxseg socket option.
[  470.885696][T21916] Use struct sctp_assoc_value instead
[  471.112019][T18009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.113698][T21937] syzkaller0: entered promiscuous mode
[  471.122511][T18009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.126338][T21937] syzkaller0: entered allmulticast mode
[  471.833993][T21981] openvswitch: netlink: IPv4 tunnel dst address is zero
[  471.897671][T21984] netlink: 'syz.1.4515': attribute type 3 has an invalid length.
[  471.925123][T21985] xt_ecn: cannot match TCP bits for non-tcp packets
[  471.938321][T21984] netlink: 'syz.1.4515': attribute type 1 has an invalid length.
[  472.124210][T21995] bridge0: port 4(batadv1) entered blocking state
[  472.131639][T21995] bridge0: port 4(batadv1) entered disabled state
[  472.138300][T21995] batadv1: entered allmulticast mode
[  472.146719][T21995] batadv1: entered promiscuous mode
[  472.463644][T22022] bond11: entered promiscuous mode
[  472.477628][T22022] bond11: entered allmulticast mode
[  472.485599][T22022] 8021q: adding VLAN 0 to HW filter on device bond11
[  472.609044][T18005] batman_adv: batadv1: IGMP Querier appeared
[  472.615359][T18005] batman_adv: batadv1: MLD Querier appeared
[  472.761679][ T5840] Bluetooth: hci1: command 0x0406 tx timeout
[  472.910044][T22050] sit1: entered allmulticast mode
[  472.962876][T22048] syzkaller0: entered promiscuous mode
[  472.972331][T22048] syzkaller0: entered allmulticast mode
[  473.046983][T22056] syzkaller0: entered promiscuous mode
[  473.053450][T22056] syzkaller0: entered allmulticast mode
[  473.061581][T22058] syzkaller0: entered promiscuous mode
[  473.067378][T22058] syzkaller0: entered allmulticast mode
[  473.330675][T22069] netlink: 'syz.5.4546': attribute type 1 has an invalid length.
[  473.713413][T22087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  473.889380][T22089] syzkaller0: entered promiscuous mode
[  473.898325][T22089] syzkaller0: entered allmulticast mode
[  473.994524][T22098] sctp: [Deprecated]: syz.0.4556 (pid 22098) Use of int in maxseg socket option.
[  473.994524][T22098] Use struct sctp_assoc_value instead
[  474.215757][T18005] tipc: Subscription rejected, illegal request
[  474.979145][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  474.987348][    C0] lec:lec_tx_timeout: lec0
[  474.992862][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  475.815312][T22105] IPv6: sit2: Disabled Multicast RS
[  475.836004][T22105] sit2: entered allmulticast mode
[  476.288173][T22135] __nla_validate_parse: 9 callbacks suppressed
[  476.288196][T22135] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4567'.
[  476.314255][T22134] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4568'.
[  476.330254][T22137] netlink: 'syz.2.4569': attribute type 1 has an invalid length.
[  476.348497][T22138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4567'.
[  476.349449][T22135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4567'.
[  476.385929][T22137] bond10: entered promiscuous mode
[  476.392268][T22137] 8021q: adding VLAN 0 to HW filter on device bond10
[  476.433389][T22138] sctp: [Deprecated]: syz.3.4567 (pid 22138) Use of int in maxseg socket option.
[  476.433389][T22138] Use struct sctp_assoc_value instead
[  476.516485][T22145] syzkaller0: entered promiscuous mode
[  476.523041][T22145] syzkaller0: entered allmulticast mode
[  476.538108][T22115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4560'.
[  476.752957][T22156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4574'.
[  476.875965][T22164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4577'.
[  477.077914][T22175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4579'.
[  477.090800][T22175] netlink: 'syz.3.4579': attribute type 21 has an invalid length.
[  477.157240][T22179] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4581'.
[  477.302440][T22189] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4583'.
[  477.369118][T22196] syzkaller0: entered promiscuous mode
[  477.374791][T22196] syzkaller0: entered allmulticast mode
[  477.391379][T22189] sctp: [Deprecated]: syz.0.4583 (pid 22189) Use of int in maxseg socket option.
[  477.391379][T22189] Use struct sctp_assoc_value instead
[  477.466322][T22200] netlink: 'syz.1.4588': attribute type 1 has an invalid length.
[  477.766331][T22214] netlink: 'syz.0.4594': attribute type 3 has an invalid length.
[  477.881274][T19726] Bluetooth: hci4: command 0x0406 tx timeout
[  477.912263][T22222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  478.031423][T22227] sctp: [Deprecated]: syz.2.4599 (pid 22227) Use of int in maxseg socket option.
[  478.031423][T22227] Use struct sctp_assoc_value instead
[  478.222412][T22234] syzkaller0: entered promiscuous mode
[  478.227973][T22234] syzkaller0: entered allmulticast mode
[  478.907760][T22273] tipc: Started in network mode
[  478.948839][T22273] tipc: Node identity 9afc3d944aba, cluster identity 4711
[  478.972932][T22279] sctp: [Deprecated]: syz.3.4612 (pid 22279) Use of int in maxseg socket option.
[  478.972932][T22279] Use struct sctp_assoc_value instead
[  478.979646][T22273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  479.121391][T22276] syzkaller0: entered promiscuous mode
[  479.127425][T22276] syzkaller0: entered allmulticast mode
[  479.135938][T22276] tipc: Resetting bearer <eth:syzkaller0>
[  479.257012][T18006] tipc: Resetting bearer <eth:syzkaller0>
[  479.292194][T22268] tipc: Resetting bearer <eth:syzkaller0>
[  480.002465][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  480.010629][    C0] lec:lec_tx_timeout: lec0
[  480.015353][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  481.106376][T22268] tipc: Disabling bearer <eth:syzkaller0>
[  481.258840][ T5894] tipc: Node number set to 3494264212
[  481.351248][T22335] __nla_validate_parse: 14 callbacks suppressed
[  481.351268][T22335] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4623'.
[  481.520179][T22355] netlink: 'syz.3.4629': attribute type 1 has an invalid length.
[  481.563956][T22343] netlink: 'syz.0.4625': attribute type 1 has an invalid length.
[  481.702307][T22343] 8021q: adding VLAN 0 to HW filter on device bond13
[  482.023369][T22387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4634'.
[  482.064098][T22378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4634'.
[  482.124037][T22393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  482.149803][T22378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  482.243829][T22400] netlink: 'syz.0.4637': attribute type 1 has an invalid length.
[  482.252558][T22400] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4637'.
[  482.298545][T22398] netlink: 'syz.1.4638': attribute type 12 has an invalid length.
[  482.318733][T22398] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4638'.
[  482.705767][T22419] netlink: 'syz.3.4645': attribute type 1 has an invalid length.
[  482.933636][T22432] netlink: 'syz.3.4647': attribute type 11 has an invalid length.
[  482.954867][T22432] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.4647'.
[  482.980379][T22432] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4647'.
[  483.252134][T22448] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4656'.
[  483.329181][T22453] netlink: 'syz.5.4658': attribute type 1 has an invalid length.
[  483.951950][T22484] netlink: 'syz.5.4668': attribute type 2 has an invalid length.
[  483.961535][T22485] netlink: 'syz.5.4668': attribute type 2 has an invalid length.
[  484.181853][T22503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4675'.
[  484.273012][T22503] ip6gretap0 (unregistering): left allmulticast mode
[  484.290365][T22503] ip6gretap0 (unregistering): left promiscuous mode
[  484.298937][T22503] bridge0: port 3(ip6gretap0) entered disabled state
[  484.377811][T22505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4676'.
[  484.388223][T22505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  484.403996][T22514] vcan0: tx address claim with dlc 0
[  484.649707][T22531] IPv6: NLM_F_CREATE should be specified when creating new route
[  484.893972][T22540] syzkaller1: entered promiscuous mode
[  484.902205][T22540] syzkaller1: entered allmulticast mode
[  484.985603][T22546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  485.006834][T22544] bond0: entered promiscuous mode
[  485.023121][T22544] bond_slave_0: entered promiscuous mode
[  485.029964][T22544] bond_slave_1: entered promiscuous mode
[  485.037923][T22544] bond0: left promiscuous mode
[  485.054142][T22544] bond_slave_0: left promiscuous mode
[  485.068130][T22544] bond_slave_1: left promiscuous mode
[  485.104272][T22550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  485.164438][T22553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  485.474874][T22574] netlink: 'syz.2.4698': attribute type 51 has an invalid length.
[  485.798941][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms
[  485.807117][    C0] lec:lec_tx_timeout: lec0
[  485.812814][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  485.859136][T22600] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1693146484/1693146486
[  485.868768][T22600] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1693146484/1693146485
[  485.886397][T22598] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  485.910479][T22600] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1693146484/1693146486
[  485.920262][T22601] syzkaller1: entered promiscuous mode
[  485.938656][T22600] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1693146484/1693146485
[  485.959375][T22601] syzkaller1: entered allmulticast mode
[  486.136526][T22614] vlan2: entered allmulticast mode
[  486.143210][T22614] bridge0: entered allmulticast mode
[  486.148835][T22614] bridge0: port 3(vlan2) entered blocking state
[  486.158387][T22614] bridge0: port 3(vlan2) entered disabled state
[  486.209201][T22619] netlink: 'syz.3.4708': attribute type 1 has an invalid length.
[  486.454522][T22631] __nla_validate_parse: 14 callbacks suppressed
[  486.454543][T22631] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4712'.
[  486.504680][T22631] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4712'.
[  486.581426][T22642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4717'.
[  486.663059][T22638] xt_CT: No such helper "syz0"
[  486.666917][T22647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4718'.
[  486.877573][T22658] xt_CT: You must specify a L4 protocol and not use inversions on it
[  486.941472][T22664] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4723'.
[  486.971084][T22658] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4722'.
[  486.981222][T22664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4723'.
[  487.237534][T22681] IPv6: sit1: Disabled Multicast RS
[  487.385500][T22692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4733'.
[  487.440648][T22697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4734'.
[  487.606255][T22716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4736'.
[  487.623129][T22710] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  487.637572][T22710] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  488.047146][T22740] openvswitch: netlink: Flow actions attr not present in new flow.
[  488.262939][T22750] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  488.780623][T22736] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  488.990659][T22793] sctp: [Deprecated]: syz.2.4763 (pid 22793) Use of int in maxseg socket option.
[  488.990659][T22793] Use struct sctp_assoc_value instead
[  489.694872][T22836] syzkaller0: entered promiscuous mode
[  489.739644][T22836] syzkaller0: entered allmulticast mode
[  489.750442][T22837] validate_nla: 1 callbacks suppressed
[  489.750459][T22837] netlink: 'syz.2.4779': attribute type 17 has an invalid length.
[  489.849243][T22841] netlink: 'syz.1.4782': attribute type 1 has an invalid length.
[  489.988800][T22841] bond8: entered promiscuous mode
[  489.994488][T22841] 8021q: adding VLAN 0 to HW filter on device bond8
[  490.231961][T22860] netlink: 'syz.3.4787': attribute type 9 has an invalid length.
[  490.490973][T22876] netlink: 'syz.3.4793': attribute type 8 has an invalid length.
[  490.528128][T22876] bond0: entered promiscuous mode
[  490.571697][T22876] bond_slave_0: entered promiscuous mode
[  490.578186][T22876] bond_slave_1: entered promiscuous mode
[  490.595717][T22876] gretap0: entered promiscuous mode
[  490.611015][T22876] bond0: left promiscuous mode
[  490.616082][T22876] bond_slave_0: left promiscuous mode
[  490.626448][T22876] bond_slave_1: left promiscuous mode
[  490.642238][T22876] gretap0: left promiscuous mode
[  490.667245][T22881] sctp: [Deprecated]: syz.5.4795 (pid 22881) Use of int in maxseg socket option.
[  490.667245][T22881] Use struct sctp_assoc_value instead
[  490.695133][T22879] netlink: 'syz.2.4794': attribute type 1 has an invalid length.
[  490.839029][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  490.847104][    C0] lec:lec_tx_timeout: lec0
[  490.852015][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  490.902513][T22887] syzkaller0: entered promiscuous mode
[  490.908068][T22887] syzkaller0: entered allmulticast mode
[  491.321102][T22913] netlink: 'syz.2.4807': attribute type 8 has an invalid length.
[  491.345164][T22915] sctp: [Deprecated]: syz.0.4809 (pid 22915) Use of int in maxseg socket option.
[  491.345164][T22915] Use struct sctp_assoc_value instead
[  491.396554][T22913] bond0: entered promiscuous mode
[  491.410676][T22913] bridge0: entered promiscuous mode
[  491.443484][T22913] gretap0: entered promiscuous mode
[  491.481307][T22913] bond0: left promiscuous mode
[  491.486223][T22913] bridge0: left promiscuous mode
[  491.502557][T22913] gretap0: left promiscuous mode
[  491.757735][T22939] pimreg3: entered allmulticast mode
[  491.866132][T22941] syzkaller0: entered promiscuous mode
[  491.882485][T22941] syzkaller0: entered allmulticast mode
[  492.293901][T22971] Cannot find add_set index 46338 as target
[  492.497679][T22986] netlink: 'syz.3.4830': attribute type 12 has an invalid length.
[  492.514227][T22985] netlink: 'syz.0.4829': attribute type 9 has an invalid length.
[  492.574751][T22984] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  492.729125][T23002] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  492.744361][T23005] syzkaller0: entered promiscuous mode
[  492.763852][T23005] syzkaller0: entered allmulticast mode
[  492.833791][T23012] __nla_validate_parse: 27 callbacks suppressed
[  492.833811][T23012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4836'.
[  493.186854][T23030] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4843'.
[  493.250592][T23036] netlink: 'syz.0.4845': attribute type 1 has an invalid length.
[  493.263281][T23035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  493.349778][T23035] erspan0: left allmulticast mode
[  493.869315][T23067] syzkaller0: entered promiscuous mode
[  493.882274][T23067] syzkaller0: entered allmulticast mode
[  494.236088][T23087] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4857'.
[  494.580875][T23105] sctp: [Deprecated]: syz.0.4862 (pid 23105) Use of int in maxseg socket option.
[  494.580875][T23105] Use struct sctp_assoc_value instead
[  494.668520][T23115] syzkaller0: entered promiscuous mode
[  494.680048][T23115] syzkaller0: entered allmulticast mode
[  494.712698][T23116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4864'.
[  494.905725][T23125] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4870'.
[  494.927996][T23125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4870'.
[  494.956663][T23125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4870'.
[  495.000643][T23125] sctp: [Deprecated]: syz.1.4870 (pid 23125) Use of int in maxseg socket option.
[  495.000643][T23125] Use struct sctp_assoc_value instead
[  495.357661][T23149] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.4878'.
[  495.609406][T23161] syzkaller0: entered promiscuous mode
[  495.629279][T23161] syzkaller0: entered allmulticast mode
[  495.797485][T23154] bridge3: entered promiscuous mode
[  495.811887][T23154] bridge3: entered allmulticast mode
[  495.841131][T23144] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  495.858947][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  495.867026][    C0] lec:lec_tx_timeout: lec0
[  495.871626][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  496.026130][T23178] tipc: Disabling bearer <udp:syz2>
[  496.266882][T23188] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4886'.
[  496.309709][T23188] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4886'.
[  496.485472][T23203] syzkaller0: entered promiscuous mode
[  496.491602][T23203] syzkaller0: entered allmulticast mode
[  496.718572][T23215] netlink: 'syz.5.4896': attribute type 1 has an invalid length.
[  496.861549][T23225] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  496.905891][T23227] netlink: 'syz.0.4901': attribute type 1 has an invalid length.
[  497.002115][T23227] 8021q: adding VLAN 0 to HW filter on device bond14
[  497.065541][T18008] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  497.077617][T18005] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  497.119535][T18005] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  497.128321][T18005] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  497.376776][T23248] syzkaller0: entered promiscuous mode
[  497.389293][T23248] syzkaller0: entered allmulticast mode
[  497.434336][T23258] netlink: 'syz.1.4912': attribute type 30 has an invalid length.
[  497.518173][T23258] bond9: option arp_missed_max: invalid value (0)
[  497.536519][T23268] netlink: 'syz.5.4914': attribute type 10 has an invalid length.
[  497.546112][T23258] bond9: option arp_missed_max: allowed values 1 - 255
[  497.556727][T23258] bond9 (unregistering): Released all slaves
[  497.701029][T23268] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  497.717541][T23271] batadv_slave_0: Caught tx_queue_len zero misconfig
[  497.732811][T23278] netlink: 'syz.1.4918': attribute type 1 has an invalid length.
[  497.744618][T23277] netlink: 'syz.2.4916': attribute type 1 has an invalid length.
[  497.779641][T23280] sctp: [Deprecated]: syz.3.4919 (pid 23280) Use of int in maxseg socket option.
[  497.779641][T23280] Use struct sctp_assoc_value instead
[  497.842523][T23278] bond9: entered promiscuous mode
[  497.848254][T23278] 8021q: adding VLAN 0 to HW filter on device bond9
[  497.862060][T23274] openvswitch: netlink: Actions may not be safe on all matching packets
[  497.876270][T18008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.887553][T18008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  498.128275][T23292] can: request_module (can-proto-0) failed.
[  498.341087][T23310] __nla_validate_parse: 11 callbacks suppressed
[  498.341109][T23310] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4928'.
[  498.389200][T23310] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4928'.
[  498.404047][T23319] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4932'.
[  498.617827][T23336] netlink: 'syz.1.4936': attribute type 19 has an invalid length.
[  498.635453][T23332] 
s5ÿÿø: renamed from vlan1
[  498.651417][T23336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4936'.
[  498.684778][T23336] netlink: 'syz.1.4936': attribute type 19 has an invalid length.
[  498.698619][T23336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4936'.
[  498.811001][T23343] netlink: 'syz.2.4939': attribute type 1 has an invalid length.
[  498.818798][T23343] netlink: 'syz.2.4939': attribute type 1 has an invalid length.
[  499.030558][T23359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4940'.
[  499.162007][T23365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4944'.
[  499.437804][T23378] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  499.522905][T23382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4949'.
[  499.594884][T23385] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4951'.
[  499.626758][T23386] openvswitch: netlink: Key 6 has unexpected len 16 expected 2
[  499.662950][T23385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4951'.
[  499.710002][T23385] sctp: [Deprecated]: syz.3.4951 (pid 23385) Use of int in maxseg socket option.
[  499.710002][T23385] Use struct sctp_assoc_value instead
[  500.495212][T23412] 8021q: adding VLAN 0 to HW filter on device bond11
[  500.745303][T23414] bond11: (slave veth9): Enslaving as an active interface with a down link
[  500.878949][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  500.887072][    C0] lec:lec_tx_timeout: lec0
[  500.892488][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  501.001037][T23433] syzkaller0: entered promiscuous mode
[  501.010582][T23433] syzkaller0: entered allmulticast mode
[  501.266922][T23443] bond12: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  501.354582][T23443] bond12: (slave lo): Enslaving as an active interface with an up link
[  501.427171][T23443] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  501.635567][T23459] bond11: entered promiscuous mode
[  501.692100][T23459] 8021q: adding VLAN 0 to HW filter on device bond11
[  501.760113][T23460] macvtap1: entered allmulticast mode
[  501.821481][T23465] bond11: (slave bridge4): making interface the new active one
[  501.829290][T23465] bridge4: entered promiscuous mode
[  501.836591][T23465] bond11: (slave bridge4): Enslaving as an active interface with an up link
[  502.127396][T23478] xt_CT: You must specify a L4 protocol and not use inversions on it
[  502.146051][T23477] sctp: [Deprecated]: syz.1.4971 (pid 23477) Use of int in maxseg socket option.
[  502.146051][T23477] Use struct sctp_assoc_value instead
[  502.604628][T23488] bond12: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  502.628205][T23488] bond12: (slave lo): Enslaving as an active interface with an up link
[  502.703566][T23488] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  503.538351][T23525] __nla_validate_parse: 7 callbacks suppressed
[  503.538378][T23525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4985'.
[  503.599842][T23525] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.762336][T23525] bridge_slave_0 (unregistering): left allmulticast mode
[  503.774166][T23525] bridge_slave_0 (unregistering): left promiscuous mode
[  503.810181][T23525] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.917064][T23533] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  504.305679][T23554] validate_nla: 6 callbacks suppressed
[  504.305699][T23554] netlink: 'syz.2.4991': attribute type 4 has an invalid length.
[  504.366147][T23559] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  504.534172][T23564] batadv2: entered allmulticast mode
[  504.613978][T23568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4996'.
[  504.665809][T23572] ipt_REJECT: ECHOREPLY no longer supported.
[  504.690941][T23572] ipt_REJECT: ECHOREPLY no longer supported.
[  504.773777][T23577] syzkaller0: entered promiscuous mode
[  504.821101][T23577] syzkaller0: entered allmulticast mode
[  504.925158][T23588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5004'.
[  504.993483][T23593] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.5004'.
[  505.019367][T23595] netlink: 'syz.5.5005': attribute type 1 has an invalid length.
[  505.052680][T23595] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5005'.
[  505.067113][T23595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5005'.
[  505.110066][T23595] netlink: 'syz.5.5005': attribute type 1 has an invalid length.
[  505.129365][T23595] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5005'.
[  505.138467][T23595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5005'.
[  505.203963][T23604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5007'.
[  505.288770][T23608] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  505.303536][T23609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5007'.
[  505.514369][T23604] tipc: MTU too low for tipc bearer
[  505.871795][T23648] veth0: entered promiscuous mode
[  505.886793][T23648] syzkaller1: entered allmulticast mode
[  505.909381][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  505.917507][    C0] lec:lec_tx_timeout: lec0
[  505.923060][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  505.978517][T23647] veth0: left promiscuous mode
[  506.260009][T23659] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  506.452614][T23678] netlink: 'syz.5.5032': attribute type 7 has an invalid length.
[  506.684543][T23688] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  506.781184][T23688] syzkaller0: entered promiscuous mode
[  506.786843][T23688] syzkaller0: entered allmulticast mode
[  506.793795][T23688] tipc: Resetting bearer <eth:syzkaller0>
[  506.870203][T23699] IPVS: Error connecting to the multicast addr
[  506.890962][T23688] tipc: Resetting bearer <eth:syzkaller0>
[  508.789520][T23688] tipc: Disabling bearer <eth:syzkaller0>
[  508.816559][T23728] netlink: 'syz.5.5051': attribute type 22 has an invalid length.
[  508.824629][T23728] __nla_validate_parse: 7 callbacks suppressed
[  508.824697][T23728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5051'.
[  508.990867][T23737] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5055'.
[  509.049558][T23728] netlink: 'syz.5.5051': attribute type 22 has an invalid length.
[  509.070979][T23728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5051'.
[  509.151724][T23744] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  509.222340][T23749] veth0: entered promiscuous mode
[  509.620679][T23766] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5066'.
[  509.941089][T23742] veth0: left promiscuous mode
[  509.972286][T23786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5071'.
[  510.110800][T23796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5076'.
[  510.240200][T23796] team1: entered promiscuous mode
[  510.245377][T23796] team1: entered allmulticast mode
[  510.377455][T23805] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5079'.
[  510.617271][T23829] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5084'.
[  510.651855][T23829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5084'.
[  510.792348][T23837] netlink: 'syz.3.5090': attribute type 8 has an invalid length.
[  510.800365][T23837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5090'.
[  510.810461][T23833] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode
[  510.818204][T23833] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode
[  510.845923][T23837] bond0: entered promiscuous mode
[  510.858846][T23837] bond_slave_0: entered promiscuous mode
[  510.870652][T23837] bond_slave_1: entered promiscuous mode
[  510.887546][T23837] gretap0: entered promiscuous mode
[  510.897288][T23837] bond0: left promiscuous mode
[  510.908080][T23837] bond_slave_0: left promiscuous mode
[  510.923183][T23837] bond_slave_1: left promiscuous mode
[  510.935504][T23837] gretap0: left promiscuous mode
[  510.940589][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  510.940619][    C0] lec:lec_tx_timeout: lec0
[  511.210416][T23856] syzkaller1: entered promiscuous mode
[  511.218313][T23856] syzkaller1: entered allmulticast mode
[  511.233779][T23856] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  511.431843][T23875] netlink: 'syz.2.5101': attribute type 7 has an invalid length.
[  511.577806][T23885] netlink: 'syz.0.5105': attribute type 8 has an invalid length.
[  511.820428][T23895] netlink: 'syz.3.5110': attribute type 39 has an invalid length.
[  511.840068][T23900] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  511.904321][T23895] hsr_slave_1 (unregistering): left promiscuous mode
[  512.166076][T23916] veth13: entered allmulticast mode
[  512.420020][T23937] netlink: 'syz.3.5122': attribute type 8 has an invalid length.
[  512.459819][T23937] bond0: entered promiscuous mode
[  512.464925][T23937] bond_slave_0: entered promiscuous mode
[  512.498348][T23937] bond_slave_1: entered promiscuous mode
[  512.540319][T23937] gretap0: entered promiscuous mode
[  512.566189][T23937] bond0: left promiscuous mode
[  512.576746][T23937] bond_slave_0: left promiscuous mode
[  512.598538][T23937] bond_slave_1: left promiscuous mode
[  512.627343][T23937] gretap0: left promiscuous mode
[  512.915158][T23959] netlink: 'syz.5.5128': attribute type 1 has an invalid length.
[  513.184043][T23973] bond12: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  513.606137][T24013] xt_CT: You must specify a L4 protocol and not use inversions on it
[  513.620585][T24015] netlink: 'syz.3.5145': attribute type 1 has an invalid length.
[  513.924196][T24027] __nla_validate_parse: 16 callbacks suppressed
[  513.924213][T24027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5150'.
[  514.258529][T24042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5154'.
[  514.369482][T24045] netlink: 'syz.2.5157': attribute type 1 has an invalid length.
[  514.459651][T24049] netlink: 'syz.3.5158': attribute type 1 has an invalid length.
[  514.528305][T24058] Bluetooth: MGMT ver 1.23
[  514.740023][T24071] netlink: 'syz.2.5162': attribute type 1 has an invalid length.
[  514.779786][T24071] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5162'.
[  514.819198][T24071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5162'.
[  514.843609][T24071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5162'.
[  514.886829][T24071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5162'.
[  515.234345][T24097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5170'.
[  515.268424][T24097] 8021q: adding VLAN 0 to HW filter on device bond13
[  515.474420][T24110] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  515.534862][T24112] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5174'.
[  515.785404][T24122] bridge7: entered promiscuous mode
[  515.792069][T24122] bridge7: entered allmulticast mode
[  516.232987][T24141] validate_nla: 2 callbacks suppressed
[  516.233006][T24141] netlink: 'syz.2.5185': attribute type 10 has an invalid length.
[  516.280376][T24139] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5182'.
[  516.292362][T24144] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5186'.
[  516.306046][T24141] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  516.337687][T24144] sctp: [Deprecated]: syz.5.5186 (pid 24144) Use of int in maxseg socket option.
[  516.337687][T24144] Use struct sctp_assoc_value instead
[  516.422287][T24147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  517.759746][T24200] sctp: [Deprecated]: syz.0.5198 (pid 24200) Use of int in maxseg socket option.
[  517.759746][T24200] Use struct sctp_assoc_value instead
[  517.803234][T24202] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  518.004151][T24213] team_slave_1: Caught tx_queue_len zero misconfig
[  518.113819][T24216] FAULT_INJECTION: forcing a failure.
[  518.113819][T24216] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  518.131161][T24216] CPU: 1 UID: 0 PID: 24216 Comm: syz.0.5205 Not tainted syzkaller #0 PREEMPT(full) 
[  518.131189][T24216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  518.131202][T24216] Call Trace:
[  518.131209][T24216]  <TASK>
[  518.131217][T24216]  dump_stack_lvl+0xe8/0x150
[  518.131252][T24216]  should_fail_ex+0x412/0x560
[  518.131288][T24216]  _copy_from_iter+0x1d3/0x1670
[  518.131313][T24216]  ? rcu_is_watching+0x15/0xb0
[  518.131348][T24216]  ? __pfx__copy_from_iter+0x10/0x10
[  518.131378][T24216]  ? netlink_sendmsg+0x650/0xb40
[  518.131398][T24216]  ? skb_put+0x11b/0x210
[  518.131425][T24216]  netlink_sendmsg+0x6c0/0xb40
[  518.131456][T24216]  ? __pfx_netlink_sendmsg+0x10/0x10
[  518.131481][T24216]  ? aa_sock_msg_perm+0xf1/0x1b0
[  518.131513][T24216]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  518.131540][T24216]  ____sys_sendmsg+0x972/0x9f0
[  518.131575][T24216]  ? __pfx_____sys_sendmsg+0x10/0x10
[  518.131610][T24216]  ? import_iovec+0x73/0xa0
[  518.131637][T24216]  ___sys_sendmsg+0x2a5/0x360
[  518.131667][T24216]  ? __pfx____sys_sendmsg+0x10/0x10
[  518.131729][T24216]  ? __fget_files+0x2a/0x420
[  518.131755][T24216]  ? __fget_files+0x3a0/0x420
[  518.131783][T24216]  __x64_sys_sendmsg+0x1bd/0x2a0
[  518.131812][T24216]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  518.131847][T24216]  ? __pfx_ksys_write+0x10/0x10
[  518.131880][T24216]  do_syscall_64+0x14d/0xf80
[  518.131905][T24216]  ? trace_irq_disable+0x3b/0x150
[  518.131923][T24216]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.131943][T24216]  ? clear_bhb_loop+0x40/0x90
[  518.131967][T24216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.131987][T24216] RIP: 0033:0x7fd9fab9c819
[  518.132006][T24216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  518.132023][T24216] RSP: 002b:00007fd9fba82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  518.132044][T24216] RAX: ffffffffffffffda RBX: 00007fd9fae15fa0 RCX: 00007fd9fab9c819
[  518.132059][T24216] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  518.132072][T24216] RBP: 00007fd9fba82090 R08: 0000000000000000 R09: 0000000000000000
[  518.132084][T24216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  518.132096][T24216] R13: 00007fd9fae16038 R14: 00007fd9fae15fa0 R15: 00007fff38faec38
[  518.132127][T24216]  </TASK>
[  518.429595][T24222] IPv6: NLM_F_CREATE should be specified when creating new route
[  519.015657][T24241] __nla_validate_parse: 9 callbacks suppressed
[  519.015682][T24241] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5212'.
[  519.068687][T24241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5212'.
[  519.130022][T24246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5212'.
[  519.189188][T24246] sctp: [Deprecated]: syz.2.5212 (pid 24246) Use of int in maxseg socket option.
[  519.189188][T24246] Use struct sctp_assoc_value instead
[  519.235910][T24257] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5216'.
[  519.473809][T24271] can: request_module (can-proto-5) failed.
[  519.531565][T24262] nbd1: detected capacity change from 0 to 63
[  519.679980][ T5840] block nbd1: Receive control failed (result -104)
[  519.687423][T19726] block nbd1: Receive control failed (result -32)
[  519.945851][T24298] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  520.017967][T24305] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5232'.
[  520.034601][T24306] netlink: 'syz.5.5233': attribute type 10 has an invalid length.
[  520.042915][T24305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5232'.
[  520.065225][T24305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5232'.
[  520.150770][T24306] veth0_vlan: left promiscuous mode
[  520.181033][T24306] veth0_vlan: entered promiscuous mode
[  520.203051][T24305] sctp: [Deprecated]: syz.1.5232 (pid 24305) Use of int in maxseg socket option.
[  520.203051][T24305] Use struct sctp_assoc_value instead
[  520.256034][T24306] team0: Device veth0_vlan failed to register rx_handler
[  520.331971][T24315] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  520.349387][T24315] FAULT_INJECTION: forcing a failure.
[  520.349387][T24315] name failslab, interval 1, probability 0, space 0, times 0
[  520.380559][T24315] CPU: 0 UID: 0 PID: 24315 Comm: syz.0.5238 Not tainted syzkaller #0 PREEMPT(full) 
[  520.380590][T24315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  520.380603][T24315] Call Trace:
[  520.380612][T24315]  <TASK>
[  520.380621][T24315]  dump_stack_lvl+0xe8/0x150
[  520.380657][T24315]  should_fail_ex+0x412/0x560
[  520.380696][T24315]  should_failslab+0xa8/0x100
[  520.380726][T24315]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  520.380752][T24315]  ? __alloc_skb+0x1d0/0x7d0
[  520.380773][T24315]  ? __local_bh_enable_ip+0xd0/0x130
[  520.380805][T24315]  __alloc_skb+0x1d0/0x7d0
[  520.380839][T24315]  ? netlink_ack_tlv_len+0x6c/0x210
[  520.380864][T24315]  netlink_ack+0x146/0xa50
[  520.380883][T24315]  ? __pfx_genl_rcv_msg+0x10/0x10
[  520.380913][T24315]  ? __lock_acquire+0x6b5/0x2cf0
[  520.380952][T24315]  netlink_rcv_skb+0x2b6/0x4b0
[  520.380975][T24315]  ? __pfx_genl_rcv_msg+0x10/0x10
[  520.381005][T24315]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  520.381046][T24315]  ? down_read+0x272/0x2e0
[  520.381076][T24315]  ? genl_rcv+0xd/0x40
[  520.381105][T24315]  genl_rcv+0x28/0x40
[  520.381129][T24315]  netlink_unicast+0x80f/0x9b0
[  520.381170][T24315]  ? __pfx_netlink_unicast+0x10/0x10
[  520.381204][T24315]  ? netlink_sendmsg+0x650/0xb40
[  520.381225][T24315]  ? skb_put+0x11b/0x210
[  520.381254][T24315]  netlink_sendmsg+0x813/0xb40
[  520.381287][T24315]  ? __pfx_netlink_sendmsg+0x10/0x10
[  520.381314][T24315]  ? aa_sock_msg_perm+0xf1/0x1b0
[  520.381356][T24315]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  520.381386][T24315]  ____sys_sendmsg+0x972/0x9f0
[  520.381424][T24315]  ? __pfx_____sys_sendmsg+0x10/0x10
[  520.381462][T24315]  ? import_iovec+0x73/0xa0
[  520.381492][T24315]  ___sys_sendmsg+0x2a5/0x360
[  520.381528][T24315]  ? __pfx____sys_sendmsg+0x10/0x10
[  520.381598][T24315]  ? __fget_files+0x2a/0x420
[  520.381618][T24315]  ? __fget_files+0x3a0/0x420
[  520.381647][T24315]  __x64_sys_sendmsg+0x1bd/0x2a0
[  520.381678][T24315]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  520.381717][T24315]  ? __pfx_ksys_write+0x10/0x10
[  520.381755][T24315]  do_syscall_64+0x14d/0xf80
[  520.381782][T24315]  ? trace_irq_disable+0x3b/0x150
[  520.381801][T24315]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.381832][T24315]  ? clear_bhb_loop+0x40/0x90
[  520.381860][T24315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.381882][T24315] RIP: 0033:0x7fd9fab9c819
[  520.381903][T24315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  520.381922][T24315] RSP: 002b:00007fd9fba82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  520.381944][T24315] RAX: ffffffffffffffda RBX: 00007fd9fae15fa0 RCX: 00007fd9fab9c819
[  520.381960][T24315] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  520.381974][T24315] RBP: 00007fd9fba82090 R08: 0000000000000000 R09: 0000000000000000
[  520.381988][T24315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  520.382001][T24315] R13: 00007fd9fae16038 R14: 00007fd9fae15fa0 R15: 00007fff38faec38
[  520.382037][T24315]  </TASK>
[  520.859805][T24331] ip6t_srh: unknown srh match flags  5F28
[  520.872941][T24326] bond15: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  520.892467][T24326] bond15 (unregistering): Released all slaves
[  520.900665][T24330] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  520.929110][ T5940] IPVS: starting estimator thread 0...
[  520.989226][T24332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5241'.
[  521.039048][T24335] IPVS: using max 28 ests per chain, 67200 per kthread
[  521.117086][T24339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5244'.
[  521.135178][T24342] netlink: 'syz.5.5246': attribute type 10 has an invalid length.
[  521.149008][T24344] delete_channel: no stack
[  521.154885][T24342] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5246'.
[  521.174271][T24346] netlink: 'syz.1.5249': attribute type 8 has an invalid length.
[  521.206948][T24346] bond0: entered promiscuous mode
[  521.215531][T24346] bond0: left promiscuous mode
[  521.290653][T24355] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  521.298481][T24355] FAULT_INJECTION: forcing a failure.
[  521.298481][T24355] name failslab, interval 1, probability 0, space 0, times 0
[  521.312022][T24355] CPU: 1 UID: 0 PID: 24355 Comm: syz.0.5251 Not tainted syzkaller #0 PREEMPT(full) 
[  521.312048][T24355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  521.312062][T24355] Call Trace:
[  521.312071][T24355]  <TASK>
[  521.312080][T24355]  dump_stack_lvl+0xe8/0x150
[  521.312116][T24355]  should_fail_ex+0x412/0x560
[  521.312155][T24355]  should_failslab+0xa8/0x100
[  521.312187][T24355]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  521.312214][T24355]  ? __alloc_skb+0x1d0/0x7d0
[  521.312237][T24355]  ? __local_bh_enable_ip+0xd0/0x130
[  521.312271][T24355]  __alloc_skb+0x1d0/0x7d0
[  521.312295][T24355]  ? netlink_ack_tlv_len+0x6c/0x210
[  521.312321][T24355]  netlink_ack+0x146/0xa50
[  521.312340][T24355]  ? __pfx_genl_rcv_msg+0x10/0x10
[  521.312371][T24355]  ? __lock_acquire+0x6b5/0x2cf0
[  521.312413][T24355]  netlink_rcv_skb+0x2b6/0x4b0
[  521.312447][T24355]  ? __pfx_genl_rcv_msg+0x10/0x10
[  521.312477][T24355]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  521.312519][T24355]  ? down_read+0x272/0x2e0
[  521.312548][T24355]  ? genl_rcv+0xd/0x40
[  521.312576][T24355]  genl_rcv+0x28/0x40
[  521.312602][T24355]  netlink_unicast+0x80f/0x9b0
[  521.312647][T24355]  ? __pfx_netlink_unicast+0x10/0x10
[  521.312680][T24355]  ? netlink_sendmsg+0x650/0xb40
[  521.312702][T24355]  ? skb_put+0x11b/0x210
[  521.312730][T24355]  netlink_sendmsg+0x813/0xb40
[  521.312762][T24355]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.312789][T24355]  ? aa_sock_msg_perm+0xf1/0x1b0
[  521.312824][T24355]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  521.312854][T24355]  ____sys_sendmsg+0x972/0x9f0
[  521.312892][T24355]  ? __pfx_____sys_sendmsg+0x10/0x10
[  521.312929][T24355]  ? import_iovec+0x73/0xa0
[  521.312959][T24355]  ___sys_sendmsg+0x2a5/0x360
[  521.312998][T24355]  ? __pfx____sys_sendmsg+0x10/0x10
[  521.313066][T24355]  ? __fget_files+0x2a/0x420
[  521.313085][T24355]  ? __fget_files+0x3a0/0x420
[  521.313116][T24355]  __x64_sys_sendmsg+0x1bd/0x2a0
[  521.313147][T24355]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  521.313183][T24355]  ? __pfx_ksys_write+0x10/0x10
[  521.313219][T24355]  do_syscall_64+0x14d/0xf80
[  521.313250][T24355]  ? trace_irq_disable+0x3b/0x150
[  521.313269][T24355]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.313291][T24355]  ? clear_bhb_loop+0x40/0x90
[  521.313316][T24355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.313337][T24355] RIP: 0033:0x7fd9fab9c819
[  521.313356][T24355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  521.313374][T24355] RSP: 002b:00007fd9fba82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  521.313417][T24355] RAX: ffffffffffffffda RBX: 00007fd9fae15fa0 RCX: 00007fd9fab9c819
[  521.313439][T24355] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  521.313453][T24355] RBP: 00007fd9fba82090 R08: 0000000000000000 R09: 0000000000000000
[  521.313467][T24355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  521.313479][T24355] R13: 00007fd9fae16038 R14: 00007fd9fae15fa0 R15: 00007fff38faec38
[  521.313514][T24355]  </TASK>
[  521.661201][T24361] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  522.052607][T24387] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  522.277725][T24408] FAULT_INJECTION: forcing a failure.
[  522.277725][T24408] name failslab, interval 1, probability 0, space 0, times 0
[  522.294499][T24408] CPU: 1 UID: 0 PID: 24408 Comm: syz.1.5265 Not tainted syzkaller #0 PREEMPT(full) 
[  522.294529][T24408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  522.294543][T24408] Call Trace:
[  522.294552][T24408]  <TASK>
[  522.294561][T24408]  dump_stack_lvl+0xe8/0x150
[  522.294599][T24408]  should_fail_ex+0x412/0x560
[  522.294635][T24408]  ? sock_alloc_inode+0x28/0xc0
[  522.294667][T24408]  should_failslab+0xa8/0x100
[  522.294697][T24408]  kmem_cache_alloc_lru_noprof+0x87/0x640
[  522.294730][T24408]  ? __pfx_sock_alloc_inode+0x10/0x10
[  522.294761][T24408]  sock_alloc_inode+0x28/0xc0
[  522.294793][T24408]  alloc_inode+0x6a/0x1b0
[  522.294824][T24408]  __sock_create+0x12d/0x9d0
[  522.294857][T24408]  udp_sock_create4+0xca/0x480
[  522.294889][T24408]  ? __pfx_udp_sock_create4+0x10/0x10
[  522.294917][T24408]  ? net_generic+0x1e/0x240
[  522.294944][T24408]  ? tipc_udp_media_addr_set+0x58/0x160
[  522.294986][T24408]  tipc_udp_enable+0x90a/0xbd0
[  522.295022][T24408]  ? __pfx_tipc_udp_enable+0x10/0x10
[  522.295049][T24408]  ? genl_family_rcv_msg_doit+0x22a/0x330
[  522.295140][T24408]  ? __kasan_kmalloc+0x93/0xb0
[  522.295167][T24408]  ? __kmalloc_cache_noprof+0x31c/0x660
[  522.295193][T24408]  ? __tipc_nl_bearer_enable+0xb6b/0x14a0
[  522.295219][T24408]  ? __kmalloc_cache_noprof+0x15b/0x660
[  522.295248][T24408]  __tipc_nl_bearer_enable+0xcd9/0x14a0
[  522.295288][T24408]  ? __pfx___tipc_nl_bearer_enable+0x10/0x10
[  522.295321][T24408]  ? __mutex_lock+0xd09/0x1300
[  522.295364][T24408]  ? tipc_nl_bearer_enable+0x17/0x40
[  522.295397][T24408]  ? __pfx___mutex_lock+0x10/0x10
[  522.295434][T24408]  ? __nla_parse+0x40/0x60
[  522.295462][T24408]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  522.295491][T24408]  ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0
[  522.295526][T24408]  tipc_nl_bearer_enable+0x22/0x40
[  522.295553][T24408]  genl_family_rcv_msg_doit+0x22a/0x330
[  522.295584][T24408]  ? __asan_memcpy+0x40/0x70
[  522.295609][T24408]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  522.295665][T24408]  genl_rcv_msg+0x61c/0x7a0
[  522.295700][T24408]  ? __pfx_genl_rcv_msg+0x10/0x10
[  522.295727][T24408]  ? __pfx_tipc_nl_bearer_enable+0x10/0x10
[  522.295756][T24408]  ? __lock_acquire+0x6b5/0x2cf0
[  522.295798][T24408]  netlink_rcv_skb+0x232/0x4b0
[  522.295821][T24408]  ? __pfx_genl_rcv_msg+0x10/0x10
[  522.295851][T24408]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  522.295893][T24408]  ? down_read+0x272/0x2e0
[  522.295921][T24408]  ? genl_rcv+0xd/0x40
[  522.295950][T24408]  genl_rcv+0x28/0x40
[  522.295975][T24408]  netlink_unicast+0x80f/0x9b0
[  522.296017][T24408]  ? __pfx_netlink_unicast+0x10/0x10
[  522.296051][T24408]  ? netlink_sendmsg+0x650/0xb40
[  522.296071][T24408]  ? skb_put+0x11b/0x210
[  522.296100][T24408]  netlink_sendmsg+0x813/0xb40
[  522.296134][T24408]  ? __pfx_netlink_sendmsg+0x10/0x10
[  522.296161][T24408]  ? aa_sock_msg_perm+0xf1/0x1b0
[  522.296196][T24408]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  522.296225][T24408]  ____sys_sendmsg+0x972/0x9f0
[  522.296263][T24408]  ? __pfx_____sys_sendmsg+0x10/0x10
[  522.296301][T24408]  ? import_iovec+0x73/0xa0
[  522.296336][T24408]  ___sys_sendmsg+0x2a5/0x360
[  522.296371][T24408]  ? __pfx____sys_sendmsg+0x10/0x10
[  522.296439][T24408]  ? __fget_files+0x2a/0x420
[  522.296458][T24408]  ? __fget_files+0x3a0/0x420
[  522.296490][T24408]  __x64_sys_sendmsg+0x1bd/0x2a0
[  522.296520][T24408]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  522.296558][T24408]  ? __pfx_ksys_write+0x10/0x10
[  522.296597][T24408]  do_syscall_64+0x14d/0xf80
[  522.296624][T24408]  ? trace_irq_disable+0x3b/0x150
[  522.296642][T24408]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.296664][T24408]  ? clear_bhb_loop+0x40/0x90
[  522.296691][T24408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.296712][T24408] RIP: 0033:0x7fdbcaf9c819
[  522.296732][T24408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  522.296750][T24408] RSP: 002b:00007fdbcbe4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  522.296773][T24408] RAX: ffffffffffffffda RBX: 00007fdbcb215fa0 RCX: 00007fdbcaf9c819
[  522.296789][T24408] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  522.296803][T24408] RBP: 00007fdbcbe4b090 R08: 0000000000000000 R09: 0000000000000000
[  522.296817][T24408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  522.296830][T24408] R13: 00007fdbcb216038 R14: 00007fdbcb215fa0 R15: 00007ffe48839068
[  522.296866][T24408]  </TASK>
[  522.296878][T24408] socket: no more sockets
[  522.770954][T24408] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  523.033862][T24438] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  523.193893][T24441] sctp: [Deprecated]: syz.1.5275 (pid 24441) Use of int in maxseg socket option.
[  523.193893][T24441] Use struct sctp_assoc_value instead
[  523.462031][T24462] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  523.498068][T24462] FAULT_INJECTION: forcing a failure.
[  523.498068][T24462] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  523.534489][T24465] syzkaller0: entered promiscuous mode
[  523.546745][T24462] CPU: 0 UID: 0 PID: 24462 Comm: syz.3.5282 Not tainted syzkaller #0 PREEMPT(full) 
[  523.546773][T24462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  523.546788][T24462] Call Trace:
[  523.546797][T24462]  <TASK>
[  523.546806][T24462]  dump_stack_lvl+0xe8/0x150
[  523.546842][T24462]  should_fail_ex+0x412/0x560
[  523.546880][T24462]  _copy_from_user+0x2d/0xb0
[  523.546907][T24462]  kstrtouint_from_user+0xd6/0x180
[  523.546943][T24462]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  523.546994][T24462]  proc_fail_nth_write+0x8e/0x210
[  523.547024][T24462]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  523.547062][T24462]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  523.547096][T24462]  vfs_write+0x29a/0xb90
[  523.547131][T24462]  ? __pfx_vfs_write+0x10/0x10
[  523.547157][T24462]  ? __fget_files+0x2a/0x420
[  523.547183][T24462]  ? __fget_files+0x3a0/0x420
[  523.547201][T24462]  ? __fget_files+0x2a/0x420
[  523.547231][T24462]  ksys_write+0x150/0x270
[  523.547258][T24462]  ? __pfx_ksys_write+0x10/0x10
[  523.547296][T24462]  do_syscall_64+0x14d/0xf80
[  523.547324][T24462]  ? trace_irq_disable+0x3b/0x150
[  523.547343][T24462]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.547365][T24462]  ? clear_bhb_loop+0x40/0x90
[  523.547391][T24462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.547413][T24462] RIP: 0033:0x7f86a2f5d04e
[  523.547432][T24462] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  523.547449][T24462] RSP: 002b:00007f86a3de2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  523.547471][T24462] RAX: ffffffffffffffda RBX: 00007f86a3de36c0 RCX: 00007f86a2f5d04e
[  523.547486][T24462] RDX: 0000000000000001 RSI: 00007f86a3de30a0 RDI: 0000000000000005
[  523.547500][T24462] RBP: 00007f86a3de3090 R08: 0000000000000000 R09: 0000000000000000
[  523.547513][T24462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  523.547526][T24462] R13: 00007f86a3216038 R14: 00007f86a3215fa0 R15: 00007ffd9217db18
[  523.547571][T24462]  </TASK>
[  523.753107][T24465] syzkaller0: entered allmulticast mode
[  524.277492][T24495] netlink: 'syz.3.5286': attribute type 1 has an invalid length.
[  524.362168][T24502] __nla_validate_parse: 8 callbacks suppressed
[  524.362186][T24502] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5287'.
[  524.658123][T24518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5295'.
[  524.902383][T24537] syzkaller0: entered promiscuous mode
[  524.926498][T24537] syzkaller0: entered allmulticast mode
[  525.034318][T24548] netlink: 'syz.5.5303': attribute type 1 has an invalid length.
[  525.091543][T24548] 8021q: adding VLAN 0 to HW filter on device bond7
[  525.167466][T24548] bond7: (slave geneve3): making interface the new active one
[  525.177607][T24548] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  525.273971][T24570] netlink: 'syz.3.5308': attribute type 1 has an invalid length.
[  525.317805][T24570] bond17: entered promiscuous mode
[  525.324333][T24570] 8021q: adding VLAN 0 to HW filter on device bond17
[  525.353533][T24570] 8021q: adding VLAN 0 to HW filter on device bond17
[  525.365439][T24570] bond17: (slave vcan0): The slave device specified does not support setting the MAC address
[  525.377414][T24570] bond17: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  525.390918][T24570] bond17: (slave vcan0): making interface the new active one
[  525.400216][T24570] vcan0: entered promiscuous mode
[  525.408147][T24570] bond17: (slave vcan0): Enslaving as an active interface with an up link
[  525.469550][T24574] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  525.620498][T24585] netlink: 284 bytes leftover after parsing attributes in process `syz.3.5312'.
[  525.704243][T24589] xt_hashlimit: size too large, truncated to 1048576
[  525.773155][T24594] syzkaller0: entered promiscuous mode
[  525.778839][T24594] syzkaller0: entered allmulticast mode
[  526.145793][T24610] syzkaller1: entered promiscuous mode
[  526.154441][T24610] syzkaller1: entered allmulticast mode
[  526.351729][T24624] batadv0: entered allmulticast mode
[  526.398052][T24630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5325'.
[  526.407399][T24630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5325'.
[  526.519321][T24637] bond18: entered promiscuous mode
[  526.525023][T24637] 8021q: adding VLAN 0 to HW filter on device bond18
[  526.603369][T24637] 8021q: adding VLAN 0 to HW filter on device bond18
[  526.626613][T24637] bond18: (slave vcan2): The slave device specified does not support setting the MAC address
[  526.649844][T24637] bond18: (slave vcan2): Error -95 calling set_mac_address
[  526.903377][T24668] netlink: 'syz.5.5337': attribute type 4 has an invalid length.
[  526.919384][T24671] netlink: 'syz.5.5337': attribute type 4 has an invalid length.
[  526.965237][T24675] netlink: 'syz.1.5339': attribute type 1 has an invalid length.
[  526.984700][T24675] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5339'.
[  527.099751][T24682] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  527.267290][T24688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5343'.
[  527.277850][T24697] netlink: 'syz.5.5347': attribute type 1 has an invalid length.
[  527.312963][T24697] netlink: 'syz.5.5347': attribute type 1 has an invalid length.
[  527.485169][T24705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  527.500816][T24706] gtp0: entered promiscuous mode
[  527.506720][T24706] gtp0: entered allmulticast mode
[  527.533464][T24709] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5351'.
[  527.631188][T24715] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5353'.
[  527.662853][T13974] IPVS: starting estimator thread 0...
[  527.692275][T24715] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5353'.
[  527.748999][T24716] IPVS: using max 27 ests per chain, 64800 per kthread
[  527.865120][T24723] netlink: 'syz.1.5355': attribute type 10 has an invalid length.
[  527.944039][T24723] batman_adv: batadv0: Adding interface: netdevsim0
[  527.973832][T24723] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  528.004677][T24731] block nbd2: not configured, cannot reconfigure
[  528.024951][T24723] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  528.169442][T17999] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  528.189770][T17999] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  528.198673][T17999] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  528.411739][T11846] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  528.462177][T24751] gre1: entered promiscuous mode
[  528.467200][T24751] gre1: entered allmulticast mode
[  528.532444][T24754] 8021q: VLANs not supported on ip6_vti0
[  528.770997][T13030] lec:lec_start_xmit: lec0:No lecd attached
[  528.914253][T24778] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  529.303653][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  529.405893][T24810] xt_CT: You must specify a L4 protocol and not use inversions on it
[  529.474685][T24817] netlink: 'syz.1.5384': attribute type 2 has an invalid length.
[  529.555435][T24816] xt_CT: You must specify a L4 protocol and not use inversions on it
[  529.561499][T24823] __nla_validate_parse: 8 callbacks suppressed
[  529.561518][T24823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5387'.
[  529.765781][T24836] netlink: 'syz.0.5392': attribute type 1 has an invalid length.
[  529.807731][T24836] bond16: entered promiscuous mode
[  529.813438][T24836] 8021q: adding VLAN 0 to HW filter on device bond16
[  529.858091][T24836] 8021q: adding VLAN 0 to HW filter on device bond16
[  529.873332][T24836] bond16: (slave vcan3): The slave device specified does not support setting the MAC address
[  529.895767][T24836] bond16: (slave vcan3): Setting fail_over_mac to active for active-backup mode
[  529.920942][T24836] bond16: (slave vcan3): making interface the new active one
[  529.928511][T24836] vcan3: entered promiscuous mode
[  529.935560][T24836] bond16: (slave vcan3): Enslaving as an active interface with an up link
[  530.076856][T24853] xt_CT: You must specify a L4 protocol and not use inversions on it
[  530.104584][T24851] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  530.222573][T24866] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5397'.
[  530.311881][T24868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5402'.
[  530.330327][T24868] 8021q: adding VLAN 0 to HW filter on device batadv1
[  530.345125][T24868] team0: Port device batadv1 added
[  530.370816][T24874] syzkaller0: entered promiscuous mode
[  530.385621][T24874] syzkaller0: entered allmulticast mode
[  530.458691][T24878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  530.642660][T24891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5410'.
[  530.654146][T24891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5410'.
[  530.674662][T11846] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  530.674967][T24891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5410'.
[  530.693038][T11846] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  530.703685][T18010] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  530.713316][T18010] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  530.733185][T24892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5411'.
[  530.806677][T24894] xt_CT: You must specify a L4 protocol and not use inversions on it
[  530.886250][T24896] vlan2: entered allmulticast mode
[  530.891721][T24896] bond0: entered allmulticast mode
[  530.896937][T24896] bridge0: entered allmulticast mode
[  530.902729][T24896] bridge_slave_1: entered allmulticast mode
[  530.911268][T24896] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5413'.
[  530.995535][T24896] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  531.009416][T24896] bridge0: left allmulticast mode
[  531.043831][T24896] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  531.074250][T24896] bridge_slave_1: left allmulticast mode
[  531.109226][T24896] bond0 (unregistering): Released all slaves
[  531.207520][T24902] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  531.366099][T24913] syzkaller0: entered promiscuous mode
[  531.393576][T24913] syzkaller0: entered allmulticast mode
[  531.516452][T24920] netlink: 'syz.5.5420': attribute type 3 has an invalid length.
[  531.521312][T24922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5421'.
[  531.588822][T24922] bridge_slave_1: left allmulticast mode
[  531.600512][T24922] bridge_slave_1: left promiscuous mode
[  531.619569][T24922] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.620020][T24925] xt_CT: You must specify a L4 protocol and not use inversions on it
[  531.654712][T24927] Cannot find add_set index 2 as target
[  531.667779][T24922] bridge_slave_0: left allmulticast mode
[  531.690036][T24922] bridge_slave_0: left promiscuous mode
[  531.695871][T24922] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.819869][T24923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  531.841764][T24941] netlink: 'syz.3.5424': attribute type 3 has an invalid length.
[  531.851032][T24943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5427'.
[  531.930605][T24949] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  532.101648][T24956] netlink: 'syz.3.5428': attribute type 12 has an invalid length.
[  532.432532][T24983] netlink: 'syz.0.5433': attribute type 21 has an invalid length.
[  532.726751][T25003] nbd: must specify a device to reconfigure
[  532.788410][T25006] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  533.002331][T25026] netlink: 'syz.0.5445': attribute type 11 has an invalid length.
[  533.210427][T25026] netlink: 'syz.0.5445': attribute type 11 has an invalid length.
[  533.693009][T25054] netlink: 'syz.2.5456': attribute type 14 has an invalid length.
[  533.799417][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[  533.807518][    C0] lec:lec_tx_timeout: lec0
[  533.841354][T25067] netlink: 'syz.1.5459': attribute type 1 has an invalid length.
[  533.966746][T25078] bond13: (slave geneve3): making interface the new active one
[  533.975748][T25078] bond13: (slave geneve3): Enslaving as an active interface with an up link
[  534.084316][T25078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  534.096415][T25078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.107534][T25078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  534.120899][T25078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.143487][T25078] tipc: Resetting bearer <eth:ipvlan1>
[  534.152961][T25078] tipc: Resetting bearer <eth:ipvlan1>
[  534.171157][T25078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  534.184384][T25078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.225084][T11846] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0
[  534.240524][T25067] 8021q: adding VLAN 0 to HW filter on device bond13
[  534.265711][T11846] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0
[  534.299914][T11846] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0
[  534.339504][T11846] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0
[  534.749437][T25111] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  534.809879][T25110] tipc: Disabling bearer <eth:syzkaller0>
[  534.838154][T25115] __nla_validate_parse: 15 callbacks suppressed
[  534.838176][T25115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5475'.
[  534.882915][T25115] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:0
[  534.902045][T25115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5475'.
[  535.083407][T25130] sctp: [Deprecated]: syz.2.5479 (pid 25130) Use of int in maxseg socket option.
[  535.083407][T25130] Use struct sctp_assoc_value instead
[  535.188467][T25139] xt_CT: You must specify a L4 protocol and not use inversions on it
[  536.014505][T25181] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  536.034666][T25182] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  536.120298][T25184] xt_CT: You must specify a L4 protocol and not use inversions on it
[  536.455955][T25206] netlink: 'syz.5.5500': attribute type 5 has an invalid length.
[  536.490666][T25206] netlink: 'syz.5.5500': attribute type 5 has an invalid length.
[  536.639772][T25216] macsec2: entered promiscuous mode
[  536.914155][T25232] Cannot find add_set index 46338 as target
[  536.963434][T25234] : renamed from hsr0 (while UP)
[  537.107064][T25246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  537.195530][T25258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5512'.
[  537.227527][T25259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5513'.
[  537.241006][T25243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5511'.
[  537.285284][T25257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5513'.
[  537.361265][T25245] tipc: Disabling bearer <eth:syzkaller0>
[  537.621011][T25279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5517'.
[  537.657970][T25279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5517'.
[  537.711140][T25279] bond17: (slave vcan0): Releasing backup interface
[  537.740409][T25279] vcan0 (unregistering): left promiscuous mode
[  537.751269][T25279] bond17: Destroying bond
[  537.773360][T25279] bond17 (unregistering): Released all slaves
[  537.828579][T25288] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  537.846916][T25288] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  537.858011][T25288] gretap2: entered promiscuous mode
[  537.864214][T25288] gretap2: entered allmulticast mode
[  538.049202][T25299] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  540.032923][T25260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  540.245490][T25310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5526'.
[  540.266380][T25310] 
[  540.268757][T25310] ======================================================
[  540.275783][T25310] WARNING: possible circular locking dependency detected
[  540.282836][T25310] syzkaller #0 Not tainted
[  540.287277][T25310] ------------------------------------------------------
[  540.294331][T25310] syz.3.5526/25310 is trying to acquire lock:
[  540.300423][T25310] ffff888045e10b98 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300
[  540.309383][T25310] 
[  540.309383][T25310] but task is already holding lock:
[  540.316791][T25310] ffff88802a6085a0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  540.326224][T25310] 
[  540.326224][T25310] which lock already depends on the new lock.
[  540.326224][T25310] 
[  540.336645][T25310] 
[  540.336645][T25310] the existing dependency chain (in reverse order) is:
[  540.345676][T25310] 
[  540.345676][T25310] -> #6 (&q->elevator_lock){+.+.}-{4:4}:
[  540.353528][T25310]        __mutex_lock+0x19f/0x1300
[  540.358672][T25310]        elevator_change+0x1b3/0x450
[  540.363977][T25310]        elevator_set_none+0xb5/0x140
[  540.369380][T25310]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  540.375762][T25310]        nbd_start_device+0x17f/0xb10
[  540.381166][T25310]        nbd_genl_connect+0x165b/0x1cf0
[  540.386739][T25310]        genl_family_rcv_msg_doit+0x22a/0x330
[  540.392840][T25310]        genl_rcv_msg+0x61c/0x7a0
[  540.397882][T25310]        netlink_rcv_skb+0x232/0x4b0
[  540.403182][T25310]        genl_rcv+0x28/0x40
[  540.407713][T25310]        netlink_unicast+0x80f/0x9b0
[  540.413027][T25310]        netlink_sendmsg+0x813/0xb40
[  540.418332][T25310]        ____sys_sendmsg+0x972/0x9f0
[  540.423643][T25310]        ___sys_sendmsg+0x2a5/0x360
[  540.428857][T25310]        __x64_sys_sendmsg+0x1bd/0x2a0
[  540.434341][T25310]        do_syscall_64+0x14d/0xf80
[  540.439478][T25310]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.445918][T25310] 
[  540.445918][T25310] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  540.454556][T25310]        blk_alloc_queue+0x546/0x680
[  540.459867][T25310]        __blk_mq_alloc_disk+0x197/0x390
[  540.465526][T25310]        nbd_dev_add+0x499/0xb50
[  540.470485][T25310]        nbd_init+0x168/0x1f0
[  540.475178][T25310]        do_one_initcall+0x250/0x8d0
[  540.480483][T25310]        do_initcall_level+0x104/0x190
[  540.485966][T25310]        do_initcalls+0x59/0xa0
[  540.490839][T25310]        kernel_init_freeable+0x2a6/0x3e0
[  540.496584][T25310]        kernel_init+0x1d/0x1d0
[  540.501459][T25310]        ret_from_fork+0x51e/0xb90
[  540.506591][T25310]        ret_from_fork_asm+0x1a/0x30
[  540.511909][T25310] 
[  540.511909][T25310] -> #4 (fs_reclaim){+.+.}-{0:0}:
[  540.519145][T25310]        fs_reclaim_acquire+0x71/0x100
[  540.524635][T25310]        __kmalloc_cache_node_noprof+0x46/0x6b0
[  540.530895][T25310]        create_worker+0x113/0x7e0
[  540.536024][T25310]        workqueue_prepare_cpu+0xe4/0x170
[  540.541761][T25310]        cpuhp_invoke_callback+0x445/0x860
[  540.547593][T25310]        _cpu_up+0x2ce/0x5b0
[  540.552205][T25310]        cpu_up+0x1d2/0x220
[  540.556732][T25310]        cpuhp_bringup_mask+0xb2/0x1a0
[  540.562204][T25310]        cpuhp_bringup_cpus_parallel+0x109/0x120
[  540.568548][T25310]        bringup_nonboot_cpus+0x17/0x30
[  540.574110][T25310]        smp_init+0x32/0x110
[  540.578712][T25310]        kernel_init_freeable+0x288/0x3e0
[  540.584457][T25310]        kernel_init+0x1d/0x1d0
[  540.589319][T25310]        ret_from_fork+0x51e/0xb90
[  540.594447][T25310]        ret_from_fork_asm+0x1a/0x30
[  540.599752][T25310] 
[  540.599752][T25310] -> #3 (cpu_hotplug_lock){++++}-{0:0}:
[  540.607509][T25310]        cpus_read_lock+0x42/0x160
[  540.612646][T25310]        static_key_slow_inc+0x12/0x30
[  540.618139][T25310]        nbd_genl_reconfigure+0x132f/0x1ea0
[  540.624049][T25310]        genl_family_rcv_msg_doit+0x22a/0x330
[  540.630139][T25310]        genl_rcv_msg+0x61c/0x7a0
[  540.635181][T25310]        netlink_rcv_skb+0x232/0x4b0
[  540.640475][T25310]        genl_rcv+0x28/0x40
[  540.644993][T25310]        netlink_unicast+0x80f/0x9b0
[  540.650299][T25310]        netlink_sendmsg+0x813/0xb40
[  540.655610][T25310]        ____sys_sendmsg+0x972/0x9f0
[  540.660919][T25310]        ___sys_sendmsg+0x2a5/0x360
[  540.666163][T25310]        __x64_sys_sendmsg+0x1bd/0x2a0
[  540.671659][T25310]        do_syscall_64+0x14d/0xf80
[  540.676797][T25310]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.683233][T25310] 
[  540.683233][T25310] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[  540.690926][T25310]        __mutex_lock+0x19f/0x1300
[  540.696066][T25310]        nbd_queue_rq+0x37b/0x1100
[  540.701195][T25310]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  540.707284][T25310]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  540.714159][T25310]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  540.720683][T25310]        blk_mq_run_hw_queue+0x348/0x4f0
[  540.726342][T25310]        blk_mq_dispatch_list+0xd16/0xe10
[  540.732080][T25310]        blk_mq_flush_plug_list+0x48d/0x570
[  540.737996][T25310]        __blk_flush_plug+0x3ed/0x4d0
[  540.743389][T25310]        __submit_bio+0x28d/0x580
[  540.748433][T25310]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  540.754608][T25310]        block_read_full_folio+0x599/0x830
[  540.760440][T25310]        filemap_read_folio+0x137/0x3b0
[  540.766004][T25310]        do_read_cache_folio+0x358/0x590
[  540.771653][T25310]        read_part_sector+0xb6/0x2b0
[  540.776961][T25310]        adfspart_check_ICS+0xa5/0xa40
[  540.782438][T25310]        bdev_disk_changed+0x7ba/0x1550
[  540.788012][T25310]        blkdev_get_whole+0x380/0x510
[  540.793418][T25310]        bdev_open+0x31e/0xd30
[  540.798230][T25310]        blkdev_open+0x470/0x610
[  540.803201][T25310]        do_dentry_open+0x785/0x14e0
[  540.808516][T25310]        vfs_open+0x3b/0x340
[  540.813131][T25310]        path_openat+0x2e08/0x3860
[  540.818276][T25310]        do_file_open+0x23e/0x4a0
[  540.823322][T25310]        do_sys_openat2+0x113/0x200
[  540.828551][T25310]        __x64_sys_openat+0x138/0x170
[  540.833952][T25310]        do_syscall_64+0x14d/0xf80
[  540.839088][T25310]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.845527][T25310] 
[  540.845527][T25310] -> #1 (&cmd->lock){+.+.}-{4:4}:
[  540.852760][T25310]        __mutex_lock+0x19f/0x1300
[  540.857909][T25310]        nbd_queue_rq+0xc6/0x1100
[  540.862971][T25310]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  540.869068][T25310]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  540.875952][T25310]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  540.882492][T25310]        blk_mq_run_hw_queue+0x348/0x4f0
[  540.888154][T25310]        blk_mq_dispatch_list+0xd16/0xe10
[  540.893894][T25310]        blk_mq_flush_plug_list+0x48d/0x570
[  540.899805][T25310]        __blk_flush_plug+0x3ed/0x4d0
[  540.905383][T25310]        __submit_bio+0x28d/0x580
[  540.910442][T25310]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  540.916622][T25310]        block_read_full_folio+0x599/0x830
[  540.922460][T25310]        filemap_read_folio+0x137/0x3b0
[  540.928031][T25310]        do_read_cache_folio+0x358/0x590
[  540.933714][T25310]        read_part_sector+0xb6/0x2b0
[  540.939022][T25310]        adfspart_check_ICS+0xa5/0xa40
[  540.944615][T25310]        bdev_disk_changed+0x7ba/0x1550
[  540.950209][T25310]        blkdev_get_whole+0x380/0x510
[  540.955610][T25310]        bdev_open+0x31e/0xd30
[  540.960399][T25310]        blkdev_open+0x470/0x610
[  540.965365][T25310]        do_dentry_open+0x785/0x14e0
[  540.970702][T25310]        vfs_open+0x3b/0x340
[  540.975322][T25310]        path_openat+0x2e08/0x3860
[  540.980546][T25310]        do_file_open+0x23e/0x4a0
[  540.985592][T25310]        do_sys_openat2+0x113/0x200
[  540.990823][T25310]        __x64_sys_openat+0x138/0x170
[  540.996231][T25310]        do_syscall_64+0x14d/0xf80
[  541.001373][T25310]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.007807][T25310] 
[  541.007807][T25310] -> #0 (set->srcu){.+.+}-{0:0}:
[  541.014958][T25310]        __lock_acquire+0x15a5/0x2cf0
[  541.020360][T25310]        lock_sync+0x9d/0x120
[  541.025099][T25310]        __synchronize_srcu+0xca/0x300
[  541.030587][T25310]        elevator_switch+0x1e8/0x7a0
[  541.035894][T25310]        elevator_change+0x2cc/0x450
[  541.041289][T25310]        elevator_set_default+0x36c/0x430
[  541.047030][T25310]        blk_register_queue+0x366/0x430
[  541.052599][T25310]        __add_disk+0x677/0xd50
[  541.057476][T25310]        add_disk_fwnode+0xfb/0x480
[  541.062785][T25310]        nbd_dev_add+0x72c/0xb50
[  541.067756][T25310]        nbd_genl_connect+0x962/0x1cf0
[  541.073232][T25310]        genl_family_rcv_msg_doit+0x22a/0x330
[  541.079332][T25310]        genl_rcv_msg+0x61c/0x7a0
[  541.084384][T25310]        netlink_rcv_skb+0x232/0x4b0
[  541.089684][T25310]        genl_rcv+0x28/0x40
[  541.094216][T25310]        netlink_unicast+0x80f/0x9b0
[  541.099528][T25310]        netlink_sendmsg+0x813/0xb40
[  541.104830][T25310]        ____sys_sendmsg+0x972/0x9f0
[  541.110139][T25310]        ___sys_sendmsg+0x2a5/0x360
[  541.115445][T25310]        __x64_sys_sendmsg+0x1bd/0x2a0
[  541.120929][T25310]        do_syscall_64+0x14d/0xf80
[  541.126071][T25310]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.132516][T25310] 
[  541.132516][T25310] other info that might help us debug this:
[  541.132516][T25310] 
[  541.142757][T25310] Chain exists of:
[  541.142757][T25310]   set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock
[  541.142757][T25310] 
[  541.156438][T25310]  Possible unsafe locking scenario:
[  541.156438][T25310] 
[  541.163908][T25310]        CPU0                    CPU1
[  541.169286][T25310]        ----                    ----
[  541.174666][T25310]   lock(&q->elevator_lock);
[  541.179281][T25310]                                lock(&q->q_usage_counter(io)#50);
[  541.187214][T25310]                                lock(&q->elevator_lock);
[  541.194348][T25310]   sync(set->srcu);
[  541.198260][T25310] 
[  541.198260][T25310]  *** DEADLOCK ***
[  541.198260][T25310] 
[  541.206432][T25310] 6 locks held by syz.3.5526/25310:
[  541.211661][T25310]  #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  541.219898][T25310]  #1: ffffffff8fc3dc88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  541.228904][T25310]  #2: ffff888096bfd1d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480
[  541.239325][T25310]  #3: ffff88802a608630 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x115/0x430
[  541.249223][T25310]  #4: ffff88802a608098 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[  541.260243][T25310]  #5: ffff88802a6085a0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  541.270104][T25310] 
[  541.270104][T25310] stack backtrace:
[  541.276200][T25310] CPU: 0 UID: 0 PID: 25310 Comm: syz.3.5526 Not tainted syzkaller #0 PREEMPT(full) 
[  541.276221][T25310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  541.276232][T25310] Call Trace:
[  541.276240][T25310]  <TASK>
[  541.276249][T25310]  dump_stack_lvl+0xe8/0x150
[  541.276274][T25310]  print_circular_bug+0x2e1/0x300
[  541.276303][T25310]  check_noncircular+0x12e/0x150
[  541.276331][T25310]  __lock_acquire+0x15a5/0x2cf0
[  541.276354][T25310]  ? check_path+0x21/0x40
[  541.276380][T25310]  ? lockdep_unlock+0x5d/0xd0
[  541.276399][T25310]  ? __lock_acquire+0x146e/0x2cf0
[  541.276421][T25310]  ? __synchronize_srcu+0xb6/0x300
[  541.276441][T25310]  lock_sync+0x9d/0x120
[  541.276462][T25310]  ? __synchronize_srcu+0xb6/0x300
[  541.276484][T25310]  __synchronize_srcu+0xca/0x300
[  541.276504][T25310]  ? do_raw_spin_lock+0x12b/0x2f0
[  541.276520][T25310]  ? __pfx___synchronize_srcu+0x10/0x10
[  541.276545][T25310]  ? read_tsc+0x9/0x20
[  541.276562][T25310]  ? ktime_get_mono_fast_ns+0x2af/0x2d0
[  541.276582][T25310]  ? synchronize_srcu+0x20d/0x270
[  541.276603][T25310]  elevator_switch+0x1e8/0x7a0
[  541.276623][T25310]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  541.276648][T25310]  elevator_change+0x2cc/0x450
[  541.276668][T25310]  ? do_raw_spin_unlock+0xf5/0x210
[  541.276686][T25310]  elevator_set_default+0x36c/0x430
[  541.276708][T25310]  ? __pfx_elevator_set_default+0x10/0x10
[  541.276733][T25310]  ? disk_register_independent_access_ranges+0x2db/0x380
[  541.276752][T25310]  ? blk_crypto_sysfs_register+0x11c/0x170
[  541.276771][T25310]  blk_register_queue+0x366/0x430
[  541.276798][T25310]  __add_disk+0x677/0xd50
[  541.276830][T25310]  ? down_read+0x272/0x2e0
[  541.276855][T25310]  add_disk_fwnode+0xfb/0x480
[  541.276882][T25310]  nbd_dev_add+0x72c/0xb50
[  541.276904][T25310]  ? __pfx_nbd_dev_add+0x10/0x10
[  541.276931][T25310]  ? bpf_lsm_capable+0x9/0x20
[  541.276955][T25310]  ? security_capable+0x7e/0x2c0
[  541.276980][T25310]  ? radix_tree_lookup+0x25c/0x290
[  541.276999][T25310]  nbd_genl_connect+0x962/0x1cf0
[  541.277023][T25310]  ? __pfx_nbd_genl_connect+0x10/0x10
[  541.277044][T25310]  ? rcu_is_watching+0x15/0xb0
[  541.277067][T25310]  ? trace_kmalloc+0x2a/0x110
[  541.277087][T25310]  ? __nla_parse+0x40/0x60
[  541.277106][T25310]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  541.277133][T25310]  genl_family_rcv_msg_doit+0x22a/0x330
[  541.277158][T25310]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  541.277186][T25310]  ? __lock_acquire+0x6b5/0x2cf0
[  541.277209][T25310]  genl_rcv_msg+0x61c/0x7a0
[  541.277233][T25310]  ? __pfx_genl_rcv_msg+0x10/0x10
[  541.277253][T25310]  ? __pfx_nbd_genl_connect+0x10/0x10
[  541.277271][T25310]  ? __lock_acquire+0x6b5/0x2cf0
[  541.277296][T25310]  netlink_rcv_skb+0x232/0x4b0
[  541.277313][T25310]  ? __pfx_genl_rcv_msg+0x10/0x10
[  541.277334][T25310]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  541.277357][T25310]  ? down_read+0x272/0x2e0
[  541.277379][T25310]  ? genl_rcv+0xd/0x40
[  541.277400][T25310]  genl_rcv+0x28/0x40
[  541.277418][T25310]  netlink_unicast+0x80f/0x9b0
[  541.277447][T25310]  ? __pfx_netlink_unicast+0x10/0x10
[  541.277472][T25310]  ? netlink_sendmsg+0x650/0xb40
[  541.277487][T25310]  ? skb_put+0x11b/0x210
[  541.277507][T25310]  netlink_sendmsg+0x813/0xb40
[  541.277528][T25310]  ? __pfx_netlink_sendmsg+0x10/0x10
[  541.277546][T25310]  ? aa_sock_msg_perm+0xf1/0x1b0
[  541.277575][T25310]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  541.277595][T25310]  ____sys_sendmsg+0x972/0x9f0
[  541.277616][T25310]  ? futex_unqueue+0x211/0x240
[  541.277638][T25310]  ? __pfx_____sys_sendmsg+0x10/0x10
[  541.277662][T25310]  ? import_iovec+0x73/0xa0
[  541.277682][T25310]  ___sys_sendmsg+0x2a5/0x360
[  541.277705][T25310]  ? __pfx____sys_sendmsg+0x10/0x10
[  541.277728][T25310]  ? futex_wait+0x29a/0x380
[  541.277764][T25310]  ? __fget_files+0x2a/0x420
[  541.277778][T25310]  ? __fget_files+0x3a0/0x420
[  541.277796][T25310]  __x64_sys_sendmsg+0x1bd/0x2a0
[  541.277823][T25310]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  541.277848][T25310]  ? rcu_is_watching+0x15/0xb0
[  541.277876][T25310]  do_syscall_64+0x14d/0xf80
[  541.277898][T25310]  ? trace_irq_disable+0x3b/0x150
[  541.277913][T25310]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.277929][T25310]  ? clear_bhb_loop+0x40/0x90
[  541.277948][T25310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.277965][T25310] RIP: 0033:0x7f86a2f9c819
[  541.277981][T25310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  541.277996][T25310] RSP: 002b:00007f86a3de3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  541.278014][T25310] RAX: ffffffffffffffda RBX: 00007f86a3215fa0 RCX: 00007f86a2f9c819
[  541.278027][T25310] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004
[  541.278038][T25310] RBP: 00007f86a3032c91 R08: 0000000000000000 R09: 0000000000000000
[  541.278048][T25310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  541.278058][T25310] R13: 00007f86a3216038 R14: 00007f86a3215fa0 R15: 00007ffd9217db18
[  541.278078][T25310]  </TASK>
[  541.902442][T25320] udevd[25320]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  541.914565][T25320] udevd[25320]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  550.040617][ T1919] block nbd1: Connection timed out, retrying (0/2 alive)
[  550.047782][ T1919] block nbd1: Connection timed out, retrying (0/2 alive)
[  550.055504][ T1919] block nbd1: Connection timed out, retrying (0/2 alive)
[  550.062842][ T1919] block nbd1: Connection timed out, retrying (0/2 alive)
[  550.070158][   T11] block nbd1: Dead connection, failed to find a fallback
[  550.077225][   T11] block nbd1: shutting down sockets
[  550.083186][   T11] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.092832][   T11] Buffer I/O error on dev nbd1, logical block 2, async page read
[  550.100651][   T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.110658][   T11] Buffer I/O error on dev nbd1, logical block 1, async page read
[  550.118419][   T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.128451][   T11] Buffer I/O error on dev nbd1, logical block 0, async page read
[  550.137080][   T11] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.147093][   T11] Buffer I/O error on dev nbd1, logical block 3, async page read
[  550.155276][T24133] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.165043][T24133] Buffer I/O error on dev nbd1, logical block 0, async page read
[  550.173574][T24133] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.183121][T24133] Buffer I/O error on dev nbd1, logical block 1, async page read
[  550.190976][T24133] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.201158][T24133] Buffer I/O error on dev nbd1, logical block 2, async page read
[  550.209027][T24133] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.218524][T24133] Buffer I/O error on dev nbd1, logical block 3, async page read
[  550.226384][T24133] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.236766][T24133] Buffer I/O error on dev nbd1, logical block 0, async page read
[  550.244648][T24133] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.254197][T24133] Buffer I/O error on dev nbd1, logical block 1, async page read
[  550.263116][T24133] ldm_validate_partition_table(): Disk read failed.
[  550.270101][T24133] Dev nbd1: unable to read RDB block 0
[  550.276038][T24133]  nbd1: unable to read partition table
[  550.284852][T24133] ldm_validate_partition_table(): Disk read failed.