last executing test programs:

2m55.735136264s ago: executing program 2 (id=2367):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfffffff8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000600)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x0, 0x0, 0x3, 0x7, 0xf, 0xffffffffffffffff}, {0x9, 0x5, 0x0, 0x200, 0x1ff, 0x7ff}], ['\x00', '\x00', '\x00', '\x00', '\x00']})
socket(0x2a, 0x2, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfffffff8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000600)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x0, 0x0, 0x3, 0x7, 0xf, 0xffffffffffffffff}, {0x9, 0x5, 0x0, 0x200, 0x1ff, 0x7ff}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) (async)

2m55.440160605s ago: executing program 2 (id=2369):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r0, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x10122, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000c0003006e657466657673696d3000000000000014000000110001000000000000"], 0xa4}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="016f0800010000070000140000004500010000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba00000090780018090300050a00000000000000000808d58838068b910000001816a9a8fde0ed5f40b3a1a0099685ae39c4f48710f17132a71d17a7316aece4f7731e448933d900f2c0460701c9cdf3b124ac0d2bde9ccc8c005ce5dd6db10fd319eb385bc217ad336c2e94c8ad2c058cd7bc121629d67ba0d69493449d76041df71d40906efc75a0fa0d929416ed027377c2123e142ba45c796dcb1b02e142a225bd502cc87bdca59c5d918fac5b1b8205a0353922e9f0a3968943c52a8c8bd0f0a0f0973b19b17b5011ecf03ee6691121ef4f53b40079e8ef165e621c0303"], 0x10e)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0)
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000068000171af827f7cc01c5e0f2ba4aa00fcfffffffeffffff0a000000000000000600070003000000"], 0x20}}, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=r1, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES64=r8], 0x90}, 0x1, 0x0, 0x0, 0x4044805}, 0x24004051)

2m54.975417556s ago: executing program 2 (id=2375):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg(r0, &(0x7f0000005200)=[{{&(0x7f0000000100)=@nl=@unspec, 0x80, 0x0}}, {{&(0x7f00000015c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f0000000080)}}], 0x2, 0x4000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000000080104000000000000000007000007140004800800024000000009080001000000fa2e050003002f00000006000240080500000600024008050000090001"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000020801"], 0x14}, 0x1, 0x0, 0x0, 0x404c080}, 0x80080)
socket$inet6_sctp(0xa, 0x5, 0x84)

2m54.8128774s ago: executing program 2 (id=2378):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000003c0)=[{0x4, 0x5, 0xb, 0xb}, {0x2, 0x4, 0x7, 0x4}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x2, 0x5, 0xa}, {0x4, 0x1, 0xe, 0x1}], 0x10, 0x9}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
ioctl$sock_bt_hci(r0, 0x400448e3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600800a00000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

2m54.560135814s ago: executing program 2 (id=2382):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001e80)=@newtaction={0x1950, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x193c, 0x1, [@m_bpf={0xb0, 0x1, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x2, 0x6, 0x3, 0x6}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x74, 0x6, "5bfa41fddfc1529ad99968997567a4b09ab92e1e77b25915eb1df2558e1f7f0ccf020bcc9a7e71d34fd459508e3396ee835ac93bf9429174ef2011c7447d28c5910ce5e3c61c4da1ee1fdf64dff6067995a1082a74e0ea80f752535e55be43286fbcaffa406c4e5b0a5bfcf6ffcbfb9b"}, {0xc}, {0xc}}}, @m_police={0x1888, 0x2, 0x0, 0x0, {{0xb}, {0x185c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x4, 0x7, 0x96d, 0xfffffff9, 0x3f, 0x8, 0x2, 0x800, 0xb8, 0x2, 0x9, 0x10000, 0x8, 0x87c, 0x2, 0xf9, 0x5, 0xff00000, 0x8, 0xe, 0x8, 0x1f, 0x6, 0x94, 0x9, 0x7dd9, 0x0, 0x80000001, 0x9, 0x3, 0x9, 0x0, 0x5, 0x1, 0x6, 0x0, 0x8, 0x2, 0x7, 0x1ff, 0xfffffff8, 0x10, 0x7fffffff, 0x4, 0xba, 0x2, 0x8, 0x0, 0x42, 0x2, 0x80000001, 0x2, 0xfffffffb, 0x9, 0x9, 0x4, 0x8, 0x9, 0x3, 0xfff, 0x4, 0x7, 0x1be1866a, 0x40000000, 0x2, 0xb7, 0x401, 0x4, 0x7f, 0xa, 0x8, 0x1ff, 0x7970, 0xffffffff, 0x0, 0x2, 0x8, 0x10001, 0x3, 0x3, 0x5, 0x9559, 0x2, 0x2, 0x10001, 0x9, 0x2, 0x7, 0x8, 0xffff530f, 0x7, 0x6003, 0x0, 0x3, 0x800, 0xfff, 0xffffffff, 0x67, 0x200, 0x80f, 0x8001, 0xc000, 0x4, 0x10000, 0xa, 0xb, 0x6, 0x2, 0x1, 0x2, 0xdd9d, 0x0, 0x4, 0x0, 0x401, 0x7, 0x5, 0x0, 0x788, 0x9, 0x7, 0x9000, 0xa, 0x8, 0xfffffff5, 0x3, 0x6, 0x6, 0x2, 0x4, 0x5, 0x6, 0x5, 0x401, 0x1, 0x2, 0x7fffffff, 0x1, 0x6, 0xd, 0x8, 0x5, 0x7, 0x2, 0x5, 0x2, 0x2, 0x9, 0x7, 0x8, 0x1, 0x6, 0x8, 0x6, 0xfff, 0x4, 0xaa, 0x0, 0x1, 0xfff, 0x690, 0x5, 0x9, 0x7, 0x8, 0x4, 0x5, 0x0, 0x8001, 0x2, 0x101, 0x3, 0x5, 0x9, 0xffffffff, 0x1, 0x1, 0x80, 0x2, 0x9, 0x7, 0x5, 0x9, 0x5, 0x5, 0x8, 0xffffffff, 0xa, 0x7, 0x4, 0x5, 0x0, 0x0, 0x8, 0x8, 0x74dafc95, 0x2, 0xffff, 0xfffff801, 0xffff, 0x8000, 0x5, 0x0, 0x23, 0xc44c, 0x4, 0x9, 0x81, 0x8, 0xffff8001, 0x3, 0x8, 0x7, 0xfffffffd, 0x0, 0x100, 0x1, 0xf, 0xfffffff6, 0x8, 0xffffffff, 0xfffffff7, 0x80000001, 0x3ff, 0x9, 0x1, 0x336, 0x9, 0xffffffff, 0x1e6000, 0xc, 0xbc, 0x9, 0x401, 0x3, 0x1, 0x5, 0x3, 0x40, 0xd, 0xff89, 0x8, 0x6, 0x100, 0x5, 0x10000, 0x8001, 0x9, 0x6, 0x4, 0x46, 0x8001, 0x8, 0x1b4, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x1000, 0x2, 0xb, 0xffe00000, 0x277, 0x39, 0x231, 0x3, 0xe84b, 0xffffffd2, 0x8, 0x7, 0x1, 0x4, 0x4, 0x5, 0x1, 0xf79c, 0x7e5f9f7e, 0x5, 0x3, 0xffffff14, 0x6, 0x7ff, 0x1, 0x4, 0x200, 0x8, 0x5, 0x1000, 0x3, 0x0, 0x6, 0x4, 0x4, 0xa4c2, 0x8, 0x2, 0x94, 0x8, 0x1, 0x8, 0xe, 0x8, 0xed, 0x8, 0x1, 0x4, 0x7, 0xffff0000, 0x7, 0x9, 0x10001, 0x2, 0x1, 0xfffffbff, 0x2, 0x19, 0x8000, 0x1, 0x9, 0x954, 0x2, 0x5, 0x6, 0x7, 0xfffffffd, 0x3, 0x3, 0x1, 0x9, 0x6, 0x7fffffff, 0x5106, 0x4, 0x8001, 0x3, 0xd, 0x5, 0xb92, 0x9, 0x8, 0xffffff60, 0x1, 0x9, 0x3e, 0x5, 0x1, 0x6, 0x5, 0x615fe0b8, 0x201f, 0x3, 0x9ca, 0x3, 0x2, 0xffffff18, 0x2, 0x2, 0x7f, 0xa, 0x1, 0x8001, 0x3, 0xf3c, 0x9, 0x7, 0x5, 0x12, 0x3, 0x4, 0x8, 0x1a, 0x8, 0x7, 0x3a2, 0x3, 0x9, 0xdc7, 0x1a, 0x53f2f6b4, 0x7, 0xd1, 0xc, 0x8, 0x2642, 0x33, 0x2, 0x8, 0xffff, 0x3, 0x1, 0x4, 0xfffffffd, 0x3ff, 0xff, 0x4, 0x0, 0x4, 0x1, 0x6, 0x4, 0x4, 0x7, 0xfb, 0x6, 0xffffaf71, 0x8, 0xffffffff, 0x4, 0x0, 0xffffffff, 0x8, 0x7, 0x2a2, 0xfffff0c9, 0x22, 0xd, 0x7, 0xe, 0xfffffff1, 0x80000000, 0x7, 0x0, 0x1000, 0xdf, 0x10001, 0x0, 0xb3, 0x5, 0x9, 0x635, 0x4, 0x4, 0x9, 0xd8, 0x7, 0x6, 0x2, 0xa9, 0x5, 0x11d, 0x5, 0x101, 0xff, 0x8, 0x401, 0xc, 0x6, 0x1, 0x8f, 0xff, 0x0, 0x10, 0x7, 0x7fffffff, 0x7, 0x5, 0x2, 0xc8d, 0x8, 0x81, 0x2, 0xd, 0x1, 0xe, 0x3, 0x5, 0x8, 0xee94, 0x265, 0x4, 0x7, 0x6, 0x1, 0xffffffff, 0x9, 0x10001, 0x1ff, 0x7, 0x3, 0x6, 0x4, 0x7fff, 0x2, 0x1, 0x5, 0x0, 0x1, 0x0, 0x1, 0x7, 0x45b0, 0x837, 0x7, 0x4, 0x79a511ae, 0x8, 0x9, 0x2, 0x8, 0x8000, 0x765, 0x6, 0x7fffffff, 0x9, 0x5, 0x6, 0x8, 0x1, 0x9, 0x4, 0x2, 0x1, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x5, 0x8, 0x2, 0x7, 0x127ffb8, 0x51, 0x80000001, 0x6, 0x5, 0x3, 0x8, 0x9, 0x8, 0x7, 0x7, 0x4a, 0x40, 0x4, 0x9, 0x6, 0x1, 0xc, 0x8, 0x9, 0x5, 0x4, 0x23e, 0xa2b8, 0x6, 0x9, 0xb, 0x5, 0x8, 0x0, 0x2, 0x34, 0x144a, 0x10, 0x9, 0x4, 0x1, 0x4, 0xe, 0x7f, 0xfffffffe, 0x2, 0x80000000, 0x9, 0x42280000, 0x322b, 0x6, 0x6, 0x7, 0x0, 0x0, 0x6, 0x8, 0x44e4, 0x717, 0x5, 0x1, 0x2, 0xbd5, 0x69a, 0x3ff, 0x1000, 0x3, 0x3, 0x9, 0x0, 0x81, 0x6, 0x0, 0x7, 0x1, 0x8, 0x9, 0x8, 0x900, 0xd354, 0x4, 0x0, 0x7, 0x101, 0x7, 0x6, 0xfffffc01, 0x91, 0x9, 0x9, 0x7, 0x7, 0x5, 0x101, 0x80000000, 0x8, 0x7047ccaf, 0x80, 0xfffffffb, 0x1b, 0x9, 0x4, 0x1, 0x6, 0xb5, 0x100, 0x8, 0x8, 0xa, 0xd38, 0x4, 0xffff0000, 0x6, 0x20b, 0x3, 0x0, 0x7, 0xffff, 0x3, 0x5, 0xffffff04, 0x8, 0x7, 0x7ff, 0x8001, 0x10000, 0x6, 0x1, 0x8000, 0x7e600000, 0x2, 0x4, 0x9, 0x6, 0x4, 0x1, 0xbfcb, 0x8, 0x7, 0x3, 0x4, 0x2, 0x10000, 0xe4, 0xc, 0x5, 0xffff74e7, 0x1, 0x1, 0x7f, 0x2, 0x9, 0x5, 0x9f8, 0x0, 0x97, 0x1, 0x2, 0xb481, 0x8, 0x5, 0x7, 0xfffffffc, 0x7fffffff, 0x6, 0xfff, 0x82e3100, 0x1, 0x40, 0x80, 0x3, 0x0, 0x1, 0x9, 0x0, 0x2, 0x9, 0x0, 0x7, 0x7, 0x3, 0x7, 0x6, 0x9, 0x3, 0x52a, 0x100, 0x2563, 0x7, 0x8, 0x80000001, 0xffffff6f, 0x5, 0x10000, 0x80, 0x1, 0x400, 0x401, 0x80000000, 0x1, 0x6, 0x7fff, 0xfffffffd, 0x4, 0x24, 0x8001, 0xf5, 0x86, 0x8, 0x6, 0x96d, 0x525, 0x3, 0x2, 0x2, 0x7fff, 0x8329, 0x4, 0x2, 0x1, 0x4, 0xfe, 0x2, 0xfffeffff, 0x2, 0xb3, 0x6, 0x400, 0x6, 0x81, 0x10, 0xa, 0xcec, 0x2, 0x3, 0x0, 0x0, 0x38, 0x0, 0x3, 0x3, 0x2, 0x5, 0x1, 0x6, 0x621a, 0x5, 0xe3, 0x3, 0x8, 0x3, 0x8, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x4, 0x8, 0x7, 0x3, 0x2, 0x7, 0x9, 0x1ff, 0xfffffffc, 0x1, 0x8, 0x7, 0x3, 0x6, 0x0, 0x7, 0x97, 0xffffffff, 0x7, 0xa, 0x3, 0x10000, 0x8, 0xf3e00000, 0x4, 0x5, 0x3, 0x211, 0x0, 0x22d7, 0xfffffffb, 0x7fff, 0x1, 0x4, 0x3, 0x7, 0x7, 0x200000, 0x7, 0xc, 0x8, 0x0, 0x3, 0x6, 0x6, 0x3, 0xffffffff, 0x0, 0x8000, 0xfffffffe, 0x0, 0x6, 0xffff8001, 0x9, 0x400, 0x8, 0x3, 0x5, 0x1, 0x7, 0x4, 0xa4, 0x5851, 0x5, 0xfffffff9, 0x9, 0x80000001, 0x6, 0x4, 0x2, 0xfff, 0x2f5e8000, 0x7ff, 0x8, 0x6, 0x477, 0x6, 0x8, 0x3, 0x9, 0xfff, 0x8, 0x9, 0x3ff, 0x1, 0xe00b, 0x8, 0x9, 0x3ff, 0xbb0, 0x4, 0x1ff, 0x7, 0x7, 0x0, 0x9, 0x8, 0x3, 0x8001, 0x10000, 0x1, 0xf, 0x8, 0x9f9210d, 0x6, 0x10, 0x8001, 0x1, 0xfffffffd, 0xa0, 0x3ff, 0xb015, 0x9, 0x103c8ed4, 0x2, 0x3, 0x4, 0x5, 0x7, 0x81, 0xb, 0x10001, 0x5, 0x8, 0xfbd6, 0x6, 0x1, 0xa3, 0x9, 0x2, 0xf, 0x400, 0x4c6, 0x1, 0x4, 0x7f, 0x80000001, 0xe, 0x7ff, 0xc87b, 0xfff, 0xfffffffe, 0x8, 0x9, 0x1, 0x80000001, 0x80, 0x8, 0x100, 0x8, 0x5, 0xffffffff, 0xc, 0x80000000, 0x3, 0x9, 0x6, 0x81, 0x200, 0x3, 0xfff, 0xffffffff, 0xffff, 0x6, 0x1, 0x55, 0x6, 0xca, 0x0, 0x3, 0x3, 0x5f, 0xa64b, 0x5, 0x70, 0x8, 0x7, 0x9, 0x9, 0x0, 0x3, 0x8313, 0x7ff, 0xfffffff8, 0xf, 0x7, 0x9, 0x80, 0x80000001, 0xfffff7fd, 0x1, 0x86, 0x3, 0x1, 0x47, 0x1, 0xfffffffd, 0x9, 0x7ff, 0x1000, 0x5, 0x60, 0x3, 0xcd8, 0xfffffffd, 0x4, 0xf2, 0x2, 0x6cf, 0xf93d, 0xa0df, 0x3, 0x4, 0x8, 0x5, 0x10000, 0xe699, 0x8, 0x1, 0x4, 0x8, 0x9, 0x81, 0x7, 0x5, 0x7fffffff, 0x0, 0xb, 0x37db5a5, 0xfffffff7, 0x31, 0x5, 0x9, 0x2a7, 0x9, 0x9, 0x7, 0xfffffff9, 0x2, 0x7, 0x80, 0x2, 0x1, 0x5, 0x8, 0x3, 0x2, 0x4, 0x2, 0x65eb, 0x521, 0x4, 0x1991, 0x7, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x8, 0x8, 0xdbae, 0x6, 0x100, 0x3, 0x3, 0x1, 0x4f2aa0b8, 0x1ff, 0x1, 0x6, 0xc1, 0x8, 0x7, 0xfffffffb, 0x1, 0x4, 0x9, 0x6, 0x1, 0x2fa98e60, 0x0, 0xfffffff9, 0x4, 0x2, 0x1, 0xf39, 0x6, 0x5, 0x3, 0x5, 0x0, 0x5, 0x8, 0x3, 0x10, 0x9, 0x8, 0x0, 0x5, 0x0, 0xe9, 0x9, 0x4, 0xa74, 0x4, 0x101, 0x401, 0x3, 0x1, 0x2, 0x1, 0x2, 0x8, 0x4, 0x2, 0xad60, 0x400, 0x8, 0x1, 0x3, 0x8, 0x6, 0xcc, 0x595, 0x3, 0xfffffff9, 0x3ff, 0x4, 0x2, 0x3, 0x5, 0x6, 0x5, 0x1000, 0x3, 0x8, 0x10000, 0x9, 0x0, 0x0, 0x7fff8, 0x5, 0x7b83, 0x800, 0x4, 0x7, 0x401, 0x0, 0xffffffee, 0x7, 0x5, 0x6, 0x3, 0x5bd0, 0x800, 0x4, 0x4, 0x1, 0xfff, 0xff, 0xf, 0x6, 0x4, 0x80, 0x7, 0x1, 0x5bc0, 0x6, 0x2, 0x4, 0x4, 0x0, 0x6, 0xa, 0x800, 0x80, 0x11, 0x6, 0x3, 0x9, 0x6, 0x8000, 0x3, 0x6, 0x5, 0x2c4a, 0x2b, 0x6, 0x6, 0xe6, 0x73e8, 0x100, 0x8, 0x3, 0x440, 0x400000, 0xd534, 0x80000000, 0x10000, 0x9, 0x100, 0x1, 0x9, 0x6, 0x2, 0xff2, 0xeea, 0x2, 0x1, 0x7, 0x8, 0x8, 0x9, 0x9fe, 0x3, 0xfffffe00, 0x80000001, 0x4, 0x6, 0x6, 0x5, 0x1, 0x0, 0x1000, 0x8, 0x5, 0x9, 0xffffb4d0, 0x4, 0xffff2734, 0x1, 0x401, 0x6, 0x10001, 0x80, 0xee, 0x35, 0xfffffffd, 0x200, 0xb, 0x8, 0x3, 0x67, 0x5, 0x6, 0x0, 0x0, 0x800, 0x5, 0x1, 0x8570, 0x3, 0x2, 0x0, 0x1, 0xffff, 0x2, 0x9, 0x4c5a, 0x7, 0x7fff, 0x6, 0xc00, 0xfff, 0x1, 0x4, 0x2, 0x6, 0x5, 0x0, 0xfffffff9, 0x1, 0x2, 0x8b4, 0x2, 0x2ea, 0x3, 0x7, 0x5, 0x6, 0x0, 0x2a, 0x2, 0xff, 0xa, 0x4, 0xe587e8e, 0x4, 0xfffffffa, 0x200, 0x5, 0x7fff, 0x3, 0x7fffffff, 0x81, 0xc235, 0x5, 0x40, 0x9, 0x3ff, 0x8, 0x9, 0x1, 0x0, 0x5, 0x1, 0x976a, 0x200, 0x401, 0x0, 0x3, 0xfff, 0x5d]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x5, 0x80000000, 0x2, 0x9, 0x4, 0xd, 0x5f44, 0x7, 0xdc, 0x84c1, 0x6, 0x3, 0xda, 0x2, 0x7b1a67ce, 0x4, 0x60, 0xba22, 0x1, 0x4, 0x40, 0xa5d5, 0x7, 0x2, 0x401, 0xe, 0x8, 0x6, 0x1e02, 0x5, 0x5, 0x6, 0x71d, 0x3, 0x5, 0x6, 0x7c, 0x8, 0x7, 0xb, 0xfffffff7, 0x401, 0x5, 0x6, 0x81, 0x7, 0x11, 0x7fffffff, 0x5, 0x2, 0xf, 0x0, 0x6, 0xb00, 0x5, 0x8, 0x0, 0x8, 0x4, 0x513cba4e, 0xfbc, 0xf, 0x8000, 0xffffffff, 0x63, 0x4, 0xffffff00, 0xffffffff, 0x800, 0x7, 0x1, 0x5, 0xfffffffa, 0x5, 0x6, 0x6, 0x222, 0x10, 0x4, 0x400, 0x7, 0x80, 0x559c, 0x91, 0x8, 0x7, 0x2, 0x6, 0x81, 0x40, 0x5, 0x2, 0x3, 0x53, 0xa7, 0x3, 0x3, 0xae75, 0x8, 0x9, 0x3, 0x10001, 0x6, 0x2, 0x7, 0x1, 0x3, 0x2, 0x999, 0x5000, 0x9, 0x6, 0x7fffffff, 0x68, 0x7fffffff, 0x86, 0x3, 0x10001, 0x7, 0xc, 0xd8d7, 0x9, 0x56dd0f4a, 0x8cf9, 0x0, 0x9, 0x80, 0xe, 0xffffff7f, 0xed2, 0x4, 0xb, 0x4, 0x60, 0x1, 0xb, 0x80, 0x6, 0x8, 0xa, 0x4, 0x9, 0x4, 0xf, 0xe3a4, 0x7, 0x101, 0xfffff680, 0x7, 0xfe19, 0x7, 0x10cbc00, 0x6, 0x4, 0x6, 0x6, 0x1000, 0x2, 0xd6, 0x3, 0x6, 0xfffffffe, 0x8, 0x19dd, 0x5, 0xc, 0x10, 0x4, 0x3, 0x8, 0x23, 0x3, 0x8, 0x8, 0x1, 0x8, 0xa82, 0x8, 0xffffffff, 0x57ded38a, 0xffffffff, 0x400000, 0x8, 0x7, 0xd, 0x401, 0xb, 0x3, 0xedd0, 0xf, 0x3, 0xdd05, 0x1, 0x8001, 0x4, 0x0, 0x40800000, 0xb, 0x5, 0x8, 0x1, 0xffffffc0, 0xf, 0x1, 0x5, 0xa1, 0x4, 0x401, 0x6, 0x7f0, 0x0, 0x100, 0x40, 0x10000, 0x1, 0x10000, 0x10, 0x2, 0xfffffffe, 0x9, 0x1, 0x7, 0x2, 0x6, 0x40, 0x7, 0x2, 0xfffffffa, 0x1, 0x6, 0x2, 0xffffadb6, 0x1, 0xd3f, 0xd, 0x0, 0x6a51359a, 0x1, 0x200, 0x10001, 0x9, 0x7, 0x4, 0x6, 0x70, 0x2db, 0x5469, 0xff, 0x9, 0x9, 0x5, 0x13ce5352, 0x7, 0x5a29, 0x9]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1950}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

2m54.396628159s ago: executing program 2 (id=2386):
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x819, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r0, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020ded4c9310457da979fa4388dd60154c23004923f7779ccd9606613089b740e01af8b422a04ea9e9c2e65e081c183f2283700c3bad0f9af818f4c6c2151fa1829480e9212644c17193f4e978c3c43133a3b29546754a2845fd8cc1b4125a01ad819b2cd475d", 0x7f, 0xe044, 0x0, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003, {0x2}}, 0x18)
r3 = socket(0x1d, 0x2, 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r6=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000480)={<r11=>r3})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r11)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r12 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r12, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r6, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r6, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="a00000000206010200000000000000000a00000a050000000000000000000500020000000500050003000000050001000708000016000300686173efbb6e65742c706f72742c6e65740000003c0007800c00028008000140ac1e000106001414aa1800028014000240fe020000000000000000000000000001050005000a0009000e00030862d1ca69746d61703a697000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000002}, 0x81)
close(0x3) (async)
close(0x3)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)

2m39.354206681s ago: executing program 32 (id=2386):
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x819, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r0, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020ded4c9310457da979fa4388dd60154c23004923f7779ccd9606613089b740e01af8b422a04ea9e9c2e65e081c183f2283700c3bad0f9af818f4c6c2151fa1829480e9212644c17193f4e978c3c43133a3b29546754a2845fd8cc1b4125a01ad819b2cd475d", 0x7f, 0xe044, 0x0, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003, {0x2}}, 0x18)
r3 = socket(0x1d, 0x2, 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r6=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000480)={<r11=>r3})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r11)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r12 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r12, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r6, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r6, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="a00000000206010200000000000000000a00000a050000000000000000000500020000000500050003000000050001000708000016000300686173efbb6e65742c706f72742c6e65740000003c0007800c00028008000140ac1e000106001414aa1800028014000240fe020000000000000000000000000001050005000a0009000e00030862d1ca69746d61703a697000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000002}, 0x81)
close(0x3) (async)
close(0x3)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)

1m35.95836597s ago: executing program 3 (id=3110):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r1 = socket(0x2a, 0x2, 0xfffffffe)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20040894)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x40800)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@gettfilter={0x24, 0x2e, 0x100, 0x70b92b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0xfff1, 0xffea}, {0x10, 0xd}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001580)=@newtfilter={0x68, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xa, 0x3}, {}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xe}}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_ACT={0x4}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x652f}, @TCA_FLOW_MASK={0x8, 0x6, 0x7}]}}]}, 0x68}}, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x80000)
recvmsg$qrtr(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f00000000c0)=""/25, 0x19}], 0x3, 0x0, 0x0, 0x3}, 0x38, 0x40000020)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @remote}}, [0xfffffffffffffff8, 0x100000000, 0x0, 0x6, 0x100000001, 0x7, 0x0, 0x9, 0x3, 0x8, 0x3, 0x26, 0x70e, 0x41e, 0x800]}, &(0x7f00000004c0)=0x100)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20008041}, 0x4000)
recvmmsg(r7, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003d80)=""/4102, 0x1006}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000003d00)=""/91, 0x5b}, {&(0x7f0000000440)=""/210, 0xd2}], 0x6}, 0x101}], 0x4, 0x40010020, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000869b8f62236c4d58ed17cf00000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000fcffffff0000000000000000000000000c0015005a0735008100"/137], 0xc4}}, 0x2c000010)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000001bc0)=0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000600000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x40, r10, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x40}}, 0x20000000)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000540)={'vxcan1\x00'})

1m35.732459918s ago: executing program 5 (id=3114):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x100, @dev, 0x34}]}, &(0x7f0000002100)=0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14)
setsockopt(r1, 0x0, 0x2c, 0x0, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x440, 0x1f0, 0x298, 0xffffffff, 0x0, 0x0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, &(0x7f0000000200), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @local, 0xffffffff, 0xffffff00, 'macsec0\x00', 'wg1\x00', {}, {0xff}, 0x1, 0x0, 0x62}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0xa, 0x8, 0x1}}, @common=@set={{0x40}, {{0x0, [0x1, 0x1, 0x1, 0x0, 0x6, 0x1], 0x2, 0x1}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id=0x65, @port=0x4e23}}}, {{@ip={@empty, @empty, 0xffffff00, 0xffffff00, 'macvtap0\x00', 'hsr0\x00', {0xff}, {0xff}, 0x88, 0x1, 0x18}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x33, "e10d", 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @multicast2, @broadcast, @port=0x4e23, @icmp_id=0x68}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {}, {}, 0x2e, 0x0, 0x68}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x12, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @icmp_id=0x66, @icmp_id=0x68}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x25}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xffffffff, 'erspan0\x00', 'veth0_to_bond\x00', {0x80}, {0xff}, 0x84, 0x2}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x4, 0x0, 0x3, 0x0, 0x1, 0x2], 0x0, 0x2}}}, @common=@icmp={{0x28}, {0x3, "e5d1", 0x82}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @remote, @port=0x4e24, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xca)
ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f0000000180)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x3, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000327bd7000fbdbdf2514000000050018000100000005000c000100000008000700070000000800070009000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000001)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000c0605000000000000000000020000030900020073797a30000000000500010007000000050001"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)

1m34.990307318s ago: executing program 3 (id=3120):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0xb, [@struct={0x3, 0x1, 0x0, 0x4, 0x1, 0x1, [{0x0, 0x2, 0x6}]}, @const={0x3, 0x0, 0x0, 0xa, 0x2}, @const, @float={0x4, 0x0, 0x0, 0x10, 0xc}, @volatile={0x10, 0x0, 0x0, 0x9, 0x5}, @union={0xd, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x10, 0x5, 0x3ff800}]}]}, {0x0, [0x30, 0x2e, 0x0, 0x51, 0x5f, 0x61, 0x5f, 0x61, 0x5f]}}, &(0x7f00000001c0), 0x83, 0x0, 0x1, 0x2e1}, 0x28)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540), 0x50) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x60}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 64)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x5}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffee8}, 0x94) (async, rerun: 64)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$key(0xf, 0x3, 0x2)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff0200000000000000000000000000017f000001000000000000000000000000fffffffd000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000010000000001000000002b000000fc0000000000bd220000000000000000000000000000000500000000000000000200000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000200000000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e00"], 0x104}}, 0x80) (async, rerun: 32)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000000000000c00"], 0x50}}, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90)

1m34.744647204s ago: executing program 3 (id=3121):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140))
r1 = socket(0x400000000010, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r2=>0x0}, &(0x7f00000000c0)=0xc)
ioctl$TUNSETGROUP(r0, 0x400454ce, r2)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {0x0, 0x0, 0x0, 0x1000000}, {0x0, 0xfffffffffffffffd}}, {{@in=@multicast2, 0x0, 0x6c}, 0x2, @in=@empty}}, 0xe8)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x3}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x8, 0x6, 0x40, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24008000)

1m34.725760674s ago: executing program 5 (id=3122):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$fou(0x0, r0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc01000000ba1e07ad112e901f0000007f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffff000000005000110000000000000000000000000000000000fe8000000000000000000000000000bbac1e000100000000000000000000000000000000000000000000000000000000000000000000000002000a00"], 0xa0}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x19, @null, @rose={'rose', 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})

1m32.546192008s ago: executing program 5 (id=3123):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = socket$nl_generic(0x11, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="61a000fe00000000691086000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000012c0)=ANY=[@ANYBLOB="58060000", @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x658}}, 0x200080d0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="06000074", @ANYRES16=r6, @ANYBLOB="000129bd7000fbdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x3d8}, 0x1, 0x0, 0x0, 0x4008090}, 0x40080)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x240400c4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000)
socket$nl_route(0x10, 0x3, 0x0)

1m32.250601103s ago: executing program 3 (id=3127):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff0000000071107100000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x7}]}}}]}, 0x3c}}, 0x8841)

1m32.133887002s ago: executing program 5 (id=3128):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x58}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x5c}}, 0x0)
socket(0x1f, 0x800, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x58}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x5c}}, 0x0) (async)
socket(0x1f, 0x800, 0x9) (async)

1m31.985257298s ago: executing program 5 (id=3131):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='GPL\x00'}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'veth1\x00'})

1m31.969348699s ago: executing program 1 (id=3132):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4)
sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x14, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8001}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}, @ldst={0x1, 0x1, 0x4, 0x2, 0xa, 0xfffffffffffffff4, 0x10}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000280)='GPL\x00', 0x3, 0xc, &(0x7f00000002c0)=""/12, 0x41100, 0x47, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000006c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0xa, 0x1fffc00, 0x3}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000740)=[{0x5, 0x4, 0x4, 0xc}, {0x1, 0x1, 0xd, 0xb}], 0x10, 0x9}, 0x94)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000240), 0x4)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="850000090000000000be000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)
bpf$PROG_LOAD(0x1c, &(0x7f0000000480)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r5, 0x1}, 0x14}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r6)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x40080d1}, 0x20004860)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xa4, r8, 0x1, 0x440000, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x88, 0x1, '\xbbP\xd5\xb1\xfaBx\xc3\xbf\xc9\xd0\x85\xedB\x06\xca\xa6\xa7\x11?\xbe\x8f\x86\x9e\x9f\x02\xdd\xff\x18\xef\x85L\xc3AIG\x14\x97\x9ac\x89b\x98\xbf)\xb0\x00\x83J\x84\x8f\x12\xc2\xac\xc0H\xf1\xe7\xfcz\xe2\xdc\xdbK\xf7A\nS\x01\b\x00\xc2Y\a>\xc9\x80\xf1-\xe5\x96\x9d,4\xe2T8yUN@3\xdeme\xa4\x03\xb9\x1f?\x1bp\x99\x04\xed\xc0k\xcf\xb3Qj\xa8\xe4I\x11\xf6>\f\xc2\xbf\xa5\xc5\xc4\xc2\xdeE\x1f\xc70\xe6WZ'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0xa4}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) (async)
sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x14, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8001}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}, @ldst={0x1, 0x1, 0x4, 0x2, 0xa, 0xfffffffffffffff4, 0x10}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000280)='GPL\x00', 0x3, 0xc, &(0x7f00000002c0)=""/12, 0x41100, 0x47, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000006c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0xa, 0x1fffc00, 0x3}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000740)=[{0x5, 0x4, 0x4, 0xc}, {0x1, 0x1, 0xd, 0xb}], 0x10, 0x9}, 0x94) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) (async)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000240), 0x4) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="850000090000000000be000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) (async)
bpf$PROG_LOAD(0x1c, &(0x7f0000000480)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r5, 0x1}, 0x14}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r6) (async)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x40080d1}, 0x20004860) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) (async)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xa4, r8, 0x1, 0x440000, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x88, 0x1, '\xbbP\xd5\xb1\xfaBx\xc3\xbf\xc9\xd0\x85\xedB\x06\xca\xa6\xa7\x11?\xbe\x8f\x86\x9e\x9f\x02\xdd\xff\x18\xef\x85L\xc3AIG\x14\x97\x9ac\x89b\x98\xbf)\xb0\x00\x83J\x84\x8f\x12\xc2\xac\xc0H\xf1\xe7\xfcz\xe2\xdc\xdbK\xf7A\nS\x01\b\x00\xc2Y\a>\xc9\x80\xf1-\xe5\x96\x9d,4\xe2T8yUN@3\xdeme\xa4\x03\xb9\x1f?\x1bp\x99\x04\xed\xc0k\xcf\xb3Qj\xa8\xe4I\x11\xf6>\f\xc2\xbf\xa5\xc5\xc4\xc2\xdeE\x1f\xc70\xe6WZ'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0xa4}}, 0x0) (async)

1m31.912622794s ago: executing program 3 (id=3133):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c)
close(r4)
syz_emit_ethernet(0x27e, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x1e, 0x4, 0x0, 0x2, 0x270, 0x65, 0x0, 0xd0, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010102, {[@lsrr={0x83, 0xb, 0x2c, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x4, 0xde, 0x0, 0x7}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x55, [@local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x38}, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x1c, 0x3, 0x9, [{@multicast1, 0x80}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x205b}, {@local, 0x3}, {@empty, 0x3}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x9c, 0x2, [], "9e19a940f11b0f3c5bb093709ab211f4fe0f299d721df9c2b9b9edd389dc53c8fa55c8861142f97d9214c5cdfe88a43df385b61d19f46df2664ba22d9b7a4f1dda9a75c3b2dfa8970d9941424cb8ac68216c37addeda15d8b917e328615b22c844fc8bcf735b974ad8cd130377b46befa660179be77837fe52037c3f562bc645710ff811cf4073e085094885d7bfa92634dcd7e8fd49206ceb0b3249"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x3, 0x7, 0x831], "52dca077d2d342275e0727a403a48589267d1b8ebac458c221e0b9d3698d78059c88a982bdf495ce125626cbda428ce14a1046ff374afd715d27a11460f03c5c943db9cc4d32b138660f0832a9a8610399ddbdebcf4ace8be2ca025ce1921789fd651d51f8fbc507b8"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x9], "78164aac3833fee7d4e90457e1be779206a247c948c1a844f6057fa62cd45c821dbe28d200e1a2622fbb1d9e5ce5617d76182d58bac5065c3bc813f98cbc361cd4eb74ac66603e1e0bf9aca7c7cdbda26be31b47dffa2e5167b76192ebafd6a3cc9d1d2e40c372addffd5452c646e8ed5ca78a5c45fd67837b22e44bf965194cd882859d5c1f242e08b8a4"}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0x4, 0x2, 0x1, 0x1, 0x0, 0x3}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x1, {{0x3, 0x2, 0x8, 0x1, 0x1, 0x1, 0x6, 0xf}, 0x2, {0xdb0, 0x400, 0x0, 0x1a, 0x1, 0x0, 0x2, 0x1}}}, {0x8, 0x6558, 0x4, "69ff1772b10590afb820fa4aaf4787c49d95c15a5c6a3a5e475d9f45"}}}}}}, &(0x7f0000000000)={0x1, 0x3, [0xe42, 0x527, 0x8d, 0x26b]})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
listen(r1, 0x8)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4000)
sendto$packet(r0, &(0x7f0000000500)="330520000a00160006007ef52f55", 0xe, 0x0, &(0x7f00000003c0)={0x11, 0x5, r5, 0x1, 0x5f, 0x6, @random='\x00\r\x005\x00'}, 0x14)

1m31.804322413s ago: executing program 0 (id=3134):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002040)={0x4c, r7, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x4c}}, 0x804)
sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0), r8)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001780), r10)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r10, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x38, r11, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x44000)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r13=>0x0})
r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r14, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r14, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x20008040)
r15 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@updsa={0x154, 0x1a, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x154}}, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001a00)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="7b0400078000000000f67cb8b0e811d35a3a"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4040034)

1m31.676654419s ago: executing program 3 (id=3135):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}}, 0x0)
r1 = socket$inet(0x2, 0x3, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={<r4=>0x0}, &(0x7f0000000000)=0x14)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r4, 0x40002b5}, 0x8)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='vlan0\x00', 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00')
unshare(0x6a040000)
r5 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r5, 0x61d9, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, 0x0}}], 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}}, 0x0) (async)
socket$inet(0x2, 0x3, 0x4) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket(0x2, 0x80805, 0x0) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000140)=@assoc_value, &(0x7f0000000000)=0x14) (async)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r4, 0x40002b5}, 0x8) (async)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='vlan0\x00', 0x10) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') (async)
unshare(0x6a040000) (async)
socket(0x8, 0x3, 0x0) (async)
ioctl$sock_netrom_SIOCADDRT(r5, 0x61d9, 0x0) (async)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) (async)
sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, 0x0}}], 0x1, 0x0) (async)

1m31.500686628s ago: executing program 1 (id=3136):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket(0x1e, 0x805, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000)
connect$tipc(r1, &(0x7f0000000000)=@id, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
close(r3)

1m31.486581599s ago: executing program 5 (id=3137):
r0 = socket$inet6(0xa, 0x5, 0x0)
socket$inet6(0xa, 0x5, 0x0) (async)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
socket$inet6(0xa, 0x5, 0x0) (async)
r2 = socket$inet6(0xa, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000) (async)
unshare(0x6a040000)
socket$netlink(0x10, 0x3, 0x8000000004)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x83, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x90, [0x0, 0x0, 0x0, 0x8, 0x7fffffffffffffff, 0x80000200], 0x0, 0x0, 0x20001100}, &(0x7f0000000040)=0x78)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)

1m31.283724786s ago: executing program 4 (id=3138):
r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000}, 0x18)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl2\x00', <r3=>0x0, 0x4, 0x0, 0x4, 0x2, 0x25, @private2, @loopback, 0x40, 0x40, 0x5, 0xd2cb}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, r1, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
openat$cgroup_subtree(r5, &(0x7f00000000c0), 0x2, 0x0)
preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x300f000, 0xe, 0x0, &(0x7f0000000300)="00fda518984624ffb2c59f00d925", 0x0, 0x70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m31.024408369s ago: executing program 1 (id=3139):
r0 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028007000910000003ba1000f000000480003004cf91ea72799708ed9bcfab906fa10d62b0453f12fc26e268d351f162f7f745a3881f9ea64d1690641527faac7c534ea1bc4d18ef0c1b0b11c5dae2b7dc193e9c4cc91a5e3f17f50eab43952ac1bf48df62fb1dbeb2a62", @ANYRES32=r3, @ANYBLOB="0500330001000000"], 0x24}}, 0x80)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040))
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r7, &(0x7f0000000000)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=[@fadd={0x58, 0x114, 0x6, {{0x7, 0x2}, &(0x7f0000001080)=0x3, &(0x7f0000001180)=0x9, 0x1, 0x4, 0x12000000000000, 0x5, 0x6b, 0x6}}], 0x58, 0x20000005}, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x72, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r9, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r9, 0x0, 0x0, 0x0)
sendto$inet(r8, 0x0, 0x0, 0x800, 0x0, 0x0)
recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10}, 0x94)

1m31.016824375s ago: executing program 0 (id=3140):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0x10, r1}, 0x18)
ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0)

1m30.742473843s ago: executing program 4 (id=3141):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'})

1m30.583938424s ago: executing program 0 (id=3142):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bc000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x19}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x39}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}, 0x1, 0x0, 0x0, 0x48010}, 0x40) (async)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x7ff, 0x3, 'TX%'}, 0xb)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}}, 0x0)

1m30.392591556s ago: executing program 4 (id=3143):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x28}}, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}]}}]}, 0x44}}, 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@setneightbl={0x30, 0x43, 0x100, 0x70bd27, 0x25dfdbff, {0x2}, [@NDTA_GC_INTERVAL={0xc}, @NDTA_THRESH1={0x8, 0x2, 0xa}, @NDTA_THRESH1={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c040}, 0x800)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0xfffffffffffffef4, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x71}}}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_a, @broadcast, @initial, {0x3}, @value=@ver_80211n={0x0, 0x3}}, @addba_req={0x3, 0x0, {0x1, {0x1, 0x1, 0x4, 0x81}, 0x7, {0xa, 0xf89}}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48801}, 0x14)

1m30.199670476s ago: executing program 0 (id=3144):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="63a8e7e0a3c5bf86629291896b3d03ed5c9d8581d07f87806fd2147d0bfbc6c1a6a6297125f46f8ea0f6df21e60982c182ed6c070c7740c4642d22f515b1d6b9076f7051c33d", 0x46}, {&(0x7f0000000380)="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", 0xff}, {&(0x7f0000000080)="3350f77c262ec5e992be6a9e", 0xc}, {&(0x7f0000000480)="ab897382b6df986c359c41dd398a98874e2826543b54fee10f406802885dffe9f3d88a09c618824794b09378abd8e8702abc112e214f5897ffa6579e018fa62cfdcf414fa43eab4e7305003e266817a0", 0x50}], 0x4}, 0x24000000)

1m29.945451669s ago: executing program 1 (id=3145):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x900, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x8f3}], 0x1, 0x10040, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6tnl0\x00', <r3=>0x0, 0x2f, 0x1, 0xd5, 0xffff, 0x30, @ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x80, 0xe, 0x2}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
sendmmsg$inet6(r2, &(0x7f0000000580)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="9fa0c816ee85ce7ecf73df34c39a719e389bbd165dfeb593255b8dab0e01eca955bc44509ab338cb51a0853d04b0329e806776d230c9ea1f7947d4fa2ba7a76b7dc9831e145e99e87b9054f93076", 0x4e}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x809}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000340)="fe1b67c27351b4e86b9f45c0b6847045d6b256771fd3d5355dc37bf9ae556ea706872c33a74f6095661d1fff010dd77abe726889f01872134d1040606a9129f6c6d1890a4c25daf9bf73", 0x4a}], 0x1, &(0x7f0000000d00)=[@hopopts_2292={{0x68, 0x29, 0x36, {0x1d, 0x9, '\x00', [@pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0x4}, @calipso={0x7, 0x10, {0x1, 0x2, 0xfc, 0x8, [0x4]}}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x19}, @jumbo={0xc2, 0x4, 0x3ff}, @jumbo={0xc2, 0x4, 0xa9}]}}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x3c, 0x1d, '\x00', [@generic={0x9, 0xac, "35ce87f37c4200fb11c83574e07baf57f963331c41eb759d1d155dac97a0f02d48c7a39ef614b6648a02e17e0fbfa4187a4a4b8d3628732c49c5f909113a75642b8a5fd04d28d31913e0532aa1c71ee35e9c9c44a3e601cb30af82a53e3cd829311386e9b221434ad7bcc954f9b994148b7890b73ccc9db93c1039c741e83cf32696eda2ce8d305661358d64990f0dd7941fe7f8d27b94586176092452960669bcc818668cf9b608860548b1"}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x30, {0x0, 0xa, 0x2, 0x1000, [0xffffffffffff0000, 0x7, 0x1, 0x8, 0x8000000000000001]}}, @jumbo={0xc2, 0x4, 0x6}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r3}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r4}}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x4, 0x9, '\x00', [@pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x8a}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x3}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x89, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8}]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x3b, 0x1, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x5a0e}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @dstopts={{0x60, 0x29, 0x37, {0x62, 0x8, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x2, 0x7ff, [0xfffffffffffffffd, 0x5, 0x3, 0x9, 0x8a2, 0x4, 0x1]}}, @padn={0x1, 0x1, [0x0]}]}}}], 0x310}}], 0x2, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [], [], 'veth0_macvtap\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x403}}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@mcast2, [0xffffff00, 0xffffffff, 0xff000000, 0x677600862d7518af], @ipv4=@multicast1, [0xffffffff, 0xffffffff, 0xffffffff], 0x4d5, 0x3502, 0x32, 0x0, 0x6, 0x4}, {@ipv6=@private0, [0x1fffffffe, 0xff, 0xff000000], @ipv6=@empty, [0xff000000, 0x0, 0xff, 0xff], 0x4d2, 0x3501, 0x1d, 0x0, 0x1b, 0x3}, {@ipv4=@broadcast, [0x0, 0xffffff00, 0xff000000, 0xffffff00], @ipv6=@mcast2, [0x0, 0xff, 0xffff00, 0xffffff00], 0x4d2, 0x3501, 0xd5, 0x1}, {@ipv6=@remote, [0xff, 0xffffffff, 0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0xff000000, 0x0, 0xffffff00, 0x968dcf91dbb7ce5], 0x4d1, 0x3503, 0x3a, 0x1, 0xb, 0x6}], 0x7}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)

1m29.880400952s ago: executing program 4 (id=3146):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="200100001900010400000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000200102000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x120}}, 0x0)
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a0002"], 0x48}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newnexthop={0x34, 0x68, 0x200, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x3, 0x0, 0xa}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8, 0x5, r4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x14010)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r7, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000340)=""/238, 0xee}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000007c0)=""/236, 0xec}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}], 0x4, 0x4022, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r8=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r8, 0x3}, 0x8)
getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r8, 0x80000001}, &(0x7f0000000180)=0x8)

1m29.774083605s ago: executing program 0 (id=3147):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x856}]}}}]}, 0x48}}, 0x0)

1m29.547185427s ago: executing program 1 (id=3148):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x7}]}}}]}, 0x3c}}, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64)
r2 = socket$tipc(0x1e, 0xa, 0x0) (rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000000c0)=0x3, 0x4) (async, rerun: 32)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xdc, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x9, 0xe, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}, [@lifetime_val={0x24, 0x9, {0x10001, 0x4088, 0xfffffffffffffffe, 0x7fff}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8419}, 0x0) (async)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4004800)

1m29.320677989s ago: executing program 0 (id=3149):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
r1 = socket(0x80000000000000a, 0x2, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x4d, 0x0, &(0x7f0000000140)) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x1, 0x4fc34febd88dce84, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x9, 0x1}, 0x24, 0x3, 0x0, 0x0, "b3f3977f7f02d0de100f60dbb8411104d7083c34a7fb805d0db92d7774e6d9083d92a51fcc14b37a34d142de05289818e27a3b586f163144d23a1f995d95769f"}}, 0x80}, 0x2, 0x0, 0x0, 0x10000800}, 0x1) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x1000000, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x34}}, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x92, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffffffffff163064dd6055b51d891c0000081600000000000000000002aa0000c0010000001f000000000000000000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000990780001"], 0x0)

1m29.059034548s ago: executing program 4 (id=3150):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x14)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @initdev, <r2=>0x0}, &(0x7f0000000100)=0xc)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
connect$l2tp6(r4, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x44}}, 0x48040)
sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
bind$packet(r1, &(0x7f0000000140)={0x11, 0x1a, r2, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0)

1m28.684510204s ago: executing program 1 (id=3151):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x81b21000)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r6=>0x0})
r7 = socket(0x2a, 0x2, 0x9)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x800, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x40000000, {0x0, 0x0, 0x0, r8, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xfa}}]}, 0x2c}}, 0x24008000)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf252900000008000300", @ANYRES32=r6, @ANYBLOB="1c002d80"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040)

1m24.4215054s ago: executing program 4 (id=3152):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='d'], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp(0x2, 0x3, 0x2)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0)

0s ago: executing program 33 (id=3137):
r0 = socket$inet6(0xa, 0x5, 0x0)
socket$inet6(0xa, 0x5, 0x0) (async)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
socket$inet6(0xa, 0x5, 0x0) (async)
r2 = socket$inet6(0xa, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000) (async)
unshare(0x6a040000)
socket$netlink(0x10, 0x3, 0x8000000004)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x83, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x90, [0x0, 0x0, 0x0, 0x8, 0x7fffffffffffffff, 0x80000200], 0x0, 0x0, 0x20001100}, &(0x7f0000000040)=0x78)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)

kernel console output (not intermixed with test programs):

33 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¨É^C%uOQxq‹Øïc–W~²Îe ©3ÏU2OáæñDåZn±ñŸÏ¹œåÁÁú]¨´.á#âº,°Àk…‹,¬»NO²@ÄfªÐ1¡"9ÔóBöBéé‹7kÔq[L˜Âã�	{¼ã�Zž½î1MhpYœnlY%ýJ3ÚÛ*�½GsÆ­0盈¢BQ4“ÝE�Ôýœ†7øN¿u!Å®'
[  270.236548][T13737] netlink: 'syz.4.2263': attribute type 24 has an invalid length.
[  270.397758][T13750] openvswitch: netlink: IPv6 tunnel dst address is zero
[  270.445294][T13749] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.526722][T13756] delete_channel: no stack
[  270.610161][T13756] ip6t_REJECT: ECHOREPLY is not supported
[  271.725117][    C1] bridge0: port 1(dummy0) entered forwarding state
[  271.731762][    C1] bridge0: topology change detected, propagating
[  271.743516][   T55] block nbd0: Possible stuck request ffff888025a65080: control (read@0,1024B). Runtime 150 seconds
[  271.754433][   T55] block nbd0: Possible stuck request ffff888025a65240: control (read@1024,1024B). Runtime 150 seconds
[  271.755470][T13789] __nla_validate_parse: 13 callbacks suppressed
[  271.755491][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2277'.
[  271.765611][   T55] block nbd0: Possible stuck request ffff888025a65400: control (read@2048,1024B). Runtime 150 seconds
[  271.765651][   T55] block nbd0: Possible stuck request ffff888025a655c0: control (read@3072,1024B). Runtime 150 seconds
[  271.861461][T13789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2277'.
[  272.039420][T13809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2285'.
[  272.237534][T13823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2289'.
[  272.243831][T13822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2287'.
[  272.254596][T13824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2289'.
[  272.921696][T13867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2301'.
[  273.106131][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2303'.
[  273.922077][T13901] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  274.058821][T13907] SET target dimension over the limit!
[  274.330692][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2320'.
[  274.558573][T13934] veth7: entered allmulticast mode
[  274.657836][T13933] IPVS: set_ctl: invalid protocol: 69 172.30.1.1:20002
[  274.745514][T13945] sctp: [Deprecated]: syz.4.2327 (pid 13945) Use of int in maxseg socket option.
[  274.745514][T13945] Use struct sctp_assoc_value instead
[  274.860542][T13945] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2327'.
[  275.207245][T13972] netlink: 'syz.2.2334': attribute type 17 has an invalid length.
[  275.660247][T13996] netlink: 'syz.3.2344': attribute type 21 has an invalid length.
[  275.699996][T13996] IPv6: NLM_F_CREATE should be specified when creating new route
[  275.749077][T13996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  275.756461][T13996] IPv6: NLM_F_CREATE should be set when creating new route
[  275.763809][T13996] IPv6: NLM_F_CREATE should be set when creating new route
[  275.771180][T13996] IPv6: NLM_F_CREATE should be set when creating new route
[  276.260607][T14022] sctp: [Deprecated]: syz.2.2352 (pid 14022) Use of struct sctp_assoc_value in delayed_ack socket option.
[  276.260607][T14022] Use struct sctp_sack_info instead
[  276.279108][T14022] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  276.313787][T14024] set match dimension is over the limit!
[  276.840523][T14045] __nla_validate_parse: 6 callbacks suppressed
[  276.840548][T14045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2358'.
[  277.009842][T14053] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2361'.
[  277.341760][T14066] netlink: 'syz.3.2365': attribute type 3 has an invalid length.
[  277.616460][T14076] gtp1: entered promiscuous mode
[  277.621521][T14076] gtp1: entered allmulticast mode
[  277.746942][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2369'.
[  277.769915][T14086] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2370'.
[  277.840529][T14088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2371'.
[  278.285343][ T5855] Bluetooth: hci1: command 0x0406 tx timeout
[  278.346315][T14110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2377'.
[  278.363614][T14112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.432921][T14113] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2380'.
[  278.462594][T14113] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2380'.
[  278.700650][T14127] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  278.709635][T14127] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  278.718723][T14127] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  278.727588][T14127] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  278.767397][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2386'.
[  278.773996][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2386'.
[  278.897589][T14128] xt_CT: No such helper "syz0"
[  281.996376][T14213] __nla_validate_parse: 1 callbacks suppressed
[  281.996399][T14213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2405'.
[  282.073040][T14217] openvswitch: netlink: IP tunnel dst address not specified
[  282.464969][T14230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2410'.
[  282.684898][T14240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2413'.
[  282.791139][T14245] netlink: 'syz.3.2414': attribute type 1 has an invalid length.
[  282.800938][T14245] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2414'.
[  282.816885][T14245] nbd: illegal input index 1048576
[  282.828520][T14249] netlink: 'syz.4.2412': attribute type 12 has an invalid length.
[  282.849479][T14249] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255)
[  283.121436][T14265] netlink: 'syz.0.2418': attribute type 11 has an invalid length.
[  283.135015][T14264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2418'.
[  283.577705][T14293] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2422'.
[  283.657833][T14300] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2425'.
[  283.848009][T14310] macvtap1: entered promiscuous mode
[  283.857909][T14310] vlan0: entered promiscuous mode
[  283.863910][T14310] macvtap1: entered allmulticast mode
[  283.869354][T14310] vlan0: entered allmulticast mode
[  283.875525][T14310] veth0_vlan: entered allmulticast mode
[  283.886134][T14310] vlan0: left allmulticast mode
[  283.891047][T14310] veth0_vlan: left allmulticast mode
[  283.899126][T14310] vlan0: left promiscuous mode
[  284.014244][T14315] SET target dimension over the limit!
[  284.030521][T14315] macvlan3: entered promiscuous mode
[  284.036535][T14315] macvlan3: entered allmulticast mode
[  284.221135][T14321] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  284.350194][T14324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2434'.
[  284.430510][T14333] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2436'.
[  284.498575][T14335] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.699757][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'.
[  284.853107][T14351] netlink: 'syz.4.2442': attribute type 7 has an invalid length.
[  284.945787][T14356] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) !
[  284.982940][T14356] netlink: 'syz.4.2443': attribute type 1 has an invalid length.
[  285.519618][T14390] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  285.562258][T14391] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  285.657829][T14402] macvtap1: entered allmulticast mode
[  285.680382][T14402] veth0_macvtap: entered allmulticast mode
[  285.910507][T14402] netlink: zone id is out of range
[  285.918970][T14402] netlink: zone id is out of range
[  285.930706][T14402] netlink: zone id is out of range
[  285.936707][T14402] netlink: zone id is out of range
[  285.942302][T14402] netlink: zone id is out of range
[  285.952848][T14402] netlink: zone id is out of range
[  285.961008][T14402] netlink: zone id is out of range
[  285.971634][T14402] netlink: zone id is out of range
[  286.732563][T14458] veth9: entered allmulticast mode
[  286.759106][T14451] ªªªªªª†³?ÂHº: entered promiscuous mode
[  286.778498][T14451] netlink: 'syz.3.2474': attribute type 2 has an invalid length.
[  286.962185][T14450] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode
[  287.293619][T14482] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  287.490013][T14489] net_ratelimit: 18 callbacks suppressed
[  287.490035][T14489] openvswitch: netlink: Message has -1 unknown bytes.
[  287.546650][T14491] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  287.584426][T14494] xt_TCPMSS: Only works on TCP SYN packets
[  287.593241][T14494] xt_ecn: cannot match TCP bits for non-tcp packets
[  287.611441][T14494] netlink: 'syz.4.2486': attribute type 29 has an invalid length.
[  287.620378][T14494] __nla_validate_parse: 13 callbacks suppressed
[  287.620397][T14494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2486'.
[  287.645871][T14494] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.2486'.
[  287.702219][T14498] netlink: 'syz.1.2487': attribute type 1 has an invalid length.
[  287.762310][T14501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'.
[  287.767411][T14498] 8021q: adding VLAN 0 to HW filter on device bond3
[  287.783021][T14502] netlink: ct family unspecified
[  287.796951][T14501] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2487'.
[  287.809019][T14504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2489'.
[  287.814786][T14502] openvswitch: netlink: Actions may not be safe on all matching packets
[  287.862317][T14498] macvlan4: entered promiscuous mode
[  287.871787][T14498] macvlan4: entered allmulticast mode
[  287.879223][T14498] bond3: entered promiscuous mode
[  287.886446][T14498] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  287.899576][T14498] bond3: left promiscuous mode
[  287.979580][T14512] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2491'.
[  288.015224][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'.
[  288.387599][T14532] bridge_slave_0: left allmulticast mode
[  288.406055][T14532] bridge_slave_0: left promiscuous mode
[  288.412141][T14532] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.921197][T14532] bridge_slave_1: left allmulticast mode
[  288.930996][T14532] bridge_slave_1: left promiscuous mode
[  288.952063][T14532] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.088975][T14532] bond6: (slave veth0_to_bond): Releasing active interface
[  289.098867][T14532] bond6: (slave vlan2): making interface the new active one
[  289.109929][T14532] veth1: entered promiscuous mode
[  289.119582][T14532] vlan2: entered promiscuous mode
[  289.137574][T14532] bond0: (slave bond_slave_0): Releasing backup interface
[  289.155992][T14532] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.164855][T14532] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.174516][T14532] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.182026][T14532] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.204716][T14532] bond5: (slave ip6gretap1): Removing an active aggregator
[  289.212947][T14532] bond5: (slave ip6gretap1): Releasing backup interface
[  289.221940][T14532] ip6gretap1: left promiscuous mode
[  289.237627][T14532] ip6gretap1: left allmulticast mode
[  289.259894][T14532] bond6: (slave veth5): Releasing active interface
[  289.267600][T14532] bond6: (slave veth5): the permanent HWaddr of slave - 8e:ad:ef:a3:10:d2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  289.304121][T14532] bond6: (slave vlan2): Releasing active interface
[  289.310946][T14532] vlan2: left promiscuous mode
[  289.318371][T14532] veth1: left promiscuous mode
[  289.330173][T14532] bond7: (slave bond8): Releasing backup interface
[  289.341283][T14532] bond7: (slave bond8): the permanent HWaddr of slave - 6a:58:7e:f9:4e:3a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  289.359283][T14532] bond7: (slave gretap1): making interface the new active one
[  289.381283][T14532] bond7: (slave gretap1): Releasing backup interface
[  289.541891][T14552] syz.0.2504: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  289.586101][T14552] CPU: 1 UID: 0 PID: 14552 Comm: syz.0.2504 Not tainted 6.16.0-rc6-syzkaller-00145-g14822f782700 #0 PREEMPT(full) 
[  289.586134][T14552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  289.586165][T14552] Call Trace:
[  289.586174][T14552]  <TASK>
[  289.586191][T14552]  dump_stack_lvl+0x189/0x250
[  289.586228][T14552]  ? __pfx_dump_stack_lvl+0x10/0x10
[  289.586255][T14552]  ? __pfx__printk+0x10/0x10
[  289.586285][T14552]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  289.586314][T14552]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  289.586345][T14552]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  289.586377][T14552]  warn_alloc+0x214/0x310
[  289.586405][T14552]  ? __pfx_warn_alloc+0x10/0x10
[  289.586436][T14552]  ? __get_vm_area_node+0x28f/0x300
[  289.586469][T14552]  ? fq_pie_init+0x430/0x840
[  289.586498][T14552]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  289.586560][T14552]  ? up_write+0x1c4/0x420
[  289.586585][T14552]  ? tcf_block_get_ext+0x8d4/0x17d0
[  289.586617][T14552]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  289.586656][T14552]  ? rcu_is_watching+0x15/0xb0
[  289.586683][T14552]  ? fq_pie_init+0x430/0x840
[  289.586705][T14552]  ? fq_pie_init+0x430/0x840
[  289.586726][T14552]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  289.586759][T14552]  ? fq_pie_init+0x430/0x840
[  289.586783][T14552]  ? tcf_block_get+0x67/0xa0
[  289.586808][T14552]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[  289.586843][T14552]  fq_pie_init+0x430/0x840
[  289.586872][T14552]  ? __pfx_fq_pie_init+0x10/0x10
[  289.586896][T14552]  qdisc_create+0x7a9/0xea0
[  289.586931][T14552]  tc_modify_qdisc+0x1538/0x20e0
[  289.586976][T14552]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  289.587036][T14552]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  289.587059][T14552]  rtnetlink_rcv_msg+0x77c/0xb70
[  289.587092][T14552]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  289.587119][T14552]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  289.587144][T14552]  ? ref_tracker_free+0x63a/0x7d0
[  289.587165][T14552]  ? __copy_skb_header+0xa7/0x550
[  289.587206][T14552]  ? __pfx_ref_tracker_free+0x10/0x10
[  289.587241][T14552]  netlink_rcv_skb+0x208/0x470
[  289.587271][T14552]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  289.587300][T14552]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  289.587343][T14552]  ? netlink_deliver_tap+0x2e/0x1b0
[  289.587370][T14552]  ? netlink_deliver_tap+0x2e/0x1b0
[  289.587405][T14552]  netlink_unicast+0x759/0x8e0
[  289.587446][T14552]  netlink_sendmsg+0x805/0xb30
[  289.587486][T14552]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.587519][T14552]  ? aa_sock_msg_perm+0x94/0x160
[  289.587542][T14552]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  289.587564][T14552]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.587595][T14552]  __sock_sendmsg+0x21c/0x270
[  289.587623][T14552]  ____sys_sendmsg+0x505/0x830
[  289.587660][T14552]  ? __pfx_____sys_sendmsg+0x10/0x10
[  289.587702][T14552]  ? import_iovec+0x74/0xa0
[  289.587736][T14552]  ___sys_sendmsg+0x21f/0x2a0
[  289.587772][T14552]  ? __pfx____sys_sendmsg+0x10/0x10
[  289.587846][T14552]  ? __fget_files+0x2a/0x420
[  289.587864][T14552]  ? __fget_files+0x3a0/0x420
[  289.587895][T14552]  __x64_sys_sendmsg+0x19b/0x260
[  289.587932][T14552]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  289.587976][T14552]  ? rcu_is_watching+0x15/0xb0
[  289.588006][T14552]  ? do_syscall_64+0xbe/0x3b0
[  289.588035][T14552]  do_syscall_64+0xfa/0x3b0
[  289.588057][T14552]  ? lockdep_hardirqs_on+0x9c/0x150
[  289.588078][T14552]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.588099][T14552]  ? clear_bhb_loop+0x60/0xb0
[  289.588124][T14552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.588145][T14552] RIP: 0033:0x7fbe1f18e9a9
[  289.588163][T14552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.588190][T14552] RSP: 002b:00007fbe2003a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  289.588212][T14552] RAX: ffffffffffffffda RBX: 00007fbe1f3b5fa0 RCX: 00007fbe1f18e9a9
[  289.588228][T14552] RDX: 000000002000400c RSI: 0000200000000300 RDI: 0000000000000007
[  289.588242][T14552] RBP: 00007fbe1f210d69 R08: 0000000000000000 R09: 0000000000000000
[  289.588256][T14552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  289.588267][T14552] R13: 0000000000000000 R14: 00007fbe1f3b5fa0 R15: 00007ffef22a40a8
[  289.588298][T14552]  </TASK>
[  289.588306][T14552] Mem-Info:
[  290.037236][T14552] active_anon:4953 inactive_anon:0 isolated_anon:0
[  290.037236][T14552]  active_file:1331 inactive_file:39908 isolated_file:0
[  290.037236][T14552]  unevictable:768 dirty:54 writeback:0
[  290.037236][T14552]  slab_reclaimable:11645 slab_unreclaimable:126929
[  290.037236][T14552]  mapped:29256 shmem:1364 pagetables:1108
[  290.037236][T14552]  sec_pagetables:0 bounce:0
[  290.037236][T14552]  kernel_misc_reclaimable:0
[  290.037236][T14552]  free:1294763 free_pcp:13857 free_cma:0
[  290.084280][T14552] Node 0 active_anon:19812kB inactive_anon:0kB active_file:5324kB inactive_file:159428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117024kB dirty:216kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13568kB pagetables:4296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  290.136703][T14552] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  290.179706][T14552] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  290.210028][T14552] lowmem_reserve[]: 0 2498 2500 2500 2500
[  290.216118][T14552] Node 0 DMA32 free:1261412kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19768kB inactive_anon:0kB active_file:5324kB inactive_file:157848kB unevictable:1536kB writepending:216kB present:3129332kB managed:2558500kB mlocked:0kB bounce:0kB free_pcp:38284kB local_pcp:20492kB free_cma:0kB
[  290.266695][T14552] lowmem_reserve[]: 0 0 1 1 1
[  290.271737][T14552] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  290.302078][T14552] lowmem_reserve[]: 0 0 0 0 0
[  290.311119][T14552] Node 1 Normal free:3902268kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16696kB local_pcp:4472kB free_cma:0kB
[  290.359676][T14552] lowmem_reserve[]: 0 0 0 0 0
[  290.365702][T14552] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  290.379521][T14552] Node 0 DMA32: 274*4kB (UME) 253*8kB (ME) 152*16kB (UM) 290*32kB (UME) 175*64kB (UME) 125*128kB (UME) 83*256kB (UME) 44*512kB (UME) 18*1024kB (UM) 5*2048kB (UM) 280*4096kB (UM) = 1261360kB
[  290.399609][T14552] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  290.412973][T14552] Node 1 Normal: 139*4kB (UM) 40*8kB (UME) 39*16kB (UME) 131*32kB (UME) 48*64kB (UME) 8*128kB (UME) 5*256kB (UM) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3902268kB
[  290.432749][T14552] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  290.443128][T14552] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  290.453830][T14552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  290.464485][T14552] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  290.475629][T14552] 42599 total pagecache pages
[  290.480359][T14552] 0 pages in swap cache
[  290.485387][T14552] Free swap  = 124996kB
[  290.489600][T14552] Total swap = 124996kB
[  290.495013][T14552] 2097051 pages RAM
[  290.498979][T14552] 0 pages HighMem/MovableOnly
[  290.504422][T14552] 425384 pages reserved
[  290.509824][T14552] 0 pages cma reserved
[  290.643912][T14578] xt_socket: unknown flags 0x50
[  290.649525][T14580] xt_socket: unknown flags 0x50
[  290.777017][T14587] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  290.800579][T14587] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  291.194363][T14613] vlan1: entered allmulticast mode
[  291.199656][T14613] veth0_vlan: entered allmulticast mode
[  291.279377][T14608] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  291.418758][T14622] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2524'.
[  291.889426][T14652] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.062659][T14661] xt_hashlimit: size too large, truncated to 1048576
[  292.093602][T14656] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2534'.
[  292.170613][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2535'.
[  292.401036][T14669] Bluetooth: MGMT ver 1.23
[  292.600441][T14677] netlink: 'syz.4.2540': attribute type 10 has an invalid length.
[  292.771793][T14688] __nla_validate_parse: 2 callbacks suppressed
[  292.771813][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2544'.
[  292.791607][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2544'.
[  293.040808][T14704] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2548'.
[  293.188819][T14710] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2550'.
[  293.226083][T14713] SET target dimension over the limit!
[  293.241271][T14713] netlink: 'syz.0.2552': attribute type 1 has an invalid length.
[  293.254720][T14710] netlink: zone id is out of range
[  293.265391][T14710] netlink: zone id is out of range
[  293.278850][T14710] netlink: get zone limit has 8 unknown bytes
[  293.289095][T14716] netlink: 'syz.3.2553': attribute type 1 has an invalid length.
[  293.307212][T14716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2553'.
[  293.416936][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2555'.
[  293.543008][T14734] 
: renamed from veth0_vlan (while UP)
[  293.958707][T14752] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  294.003705][T14752] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.111522][T14752] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  294.134911][T14759] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2565'.
[  294.147254][T14752] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.284950][T14752] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  294.296415][T14752] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.310967][T14762] SET target dimension over the limit!
[  294.337284][T14762] xt_CT: You must specify a L4 protocol and not use inversions on it
[  294.340695][T14762] xt_bpf: check failed: parse error
[  294.416228][T14752] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  294.443568][ T5855] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  294.447694][T14752] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.450330][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  294.568062][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  294.578740][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  294.588157][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  294.598937][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  294.613461][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  294.680304][T14766] vxcan1 speed is unknown, defaulting to 1000
[  294.733879][T14752] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  294.742780][T14752] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.785472][T14752] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  294.799847][T14752] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.831342][T14752] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  294.848825][T14752] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.879775][T14752] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  294.892542][T14752] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.027543][T14777] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2571'.
[  295.074311][T14778] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  295.272394][T14787] netlink: 'syz.0.2574': attribute type 11 has an invalid length.
[  295.300409][T14786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2573'.
[  295.308873][T14787] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2574'.
[  295.372336][T14786] erspan0: entered promiscuous mode
[  295.385421][T14786] erspan0: left promiscuous mode
[  295.589687][T14803] netlink: 'syz.3.2579': attribute type 1 has an invalid length.
[  295.616073][T14802] xfrm1: entered allmulticast mode
[  295.677086][T14766] chnl_net:caif_netlink_parms(): no params data found
[  296.097573][T14766] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.129802][T14766] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.148972][T14766] bridge_slave_0: entered allmulticast mode
[  296.167631][T14766] bridge_slave_0: entered promiscuous mode
[  296.180231][T14833] netlink: 'syz.0.2584': attribute type 5 has an invalid length.
[  296.181306][T14766] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.196365][T14766] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.203979][T14766] bridge_slave_1: entered allmulticast mode
[  296.213183][T14766] bridge_slave_1: entered promiscuous mode
[  296.380132][T14766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  296.391228][T14840] netlink: 'syz.4.2587': attribute type 1 has an invalid length.
[  296.402552][T14766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.412988][T14845] x_tables: duplicate underflow at hook 2
[  296.556770][T14766] team0: Port device team_slave_0 added
[  296.576567][T14766] team0: Port device team_slave_1 added
[  296.684087][ T5855] Bluetooth: hci5: command tx timeout
[  296.707249][T14766] batman_adv: batadv0: Adding interface: batadv_slave_0
[  296.736489][T14766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.764991][T14766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.785917][T14766] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.793560][T14766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.820629][T14766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.080028][T14766] hsr_slave_0: entered promiscuous mode
[  297.104668][T14766] hsr_slave_1: entered promiscuous mode
[  297.107568][T14876] xt_ct_set_helper: 10 callbacks suppressed
[  297.107593][T14876] xt_CT: You must specify a L4 protocol and not use inversions on it
[  297.111283][T14766] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  297.163794][T14766] Cannot create hsr debugfs directory
[  297.558825][T14884] vxcan1 speed is unknown, defaulting to 1000
[  297.909173][T14766] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  297.956019][T14766] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  297.988429][T14766] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  298.031016][T14766] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  298.253030][T14922] __nla_validate_parse: 9 callbacks suppressed
[  298.253055][T14922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2609'.
[  298.296346][T14889] vxcan1 speed is unknown, defaulting to 1000
[  298.345775][T14922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2609'.
[  298.401971][T14766] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.493011][T14766] 8021q: adding VLAN 0 to HW filter on device team0
[  298.517877][T14933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.535187][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.542537][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.753023][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.760369][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.772192][ T5855] Bluetooth: hci5: command tx timeout
[  298.889417][T14943] netlink: 'syz.4.2616': attribute type 1 has an invalid length.
[  298.896104][T14766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  298.931701][T14943] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2616'.
[  298.969809][T14943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2616'.
[  299.038521][T14945] macvtap1: entered promiscuous mode
[  299.087947][T14945] vlan0: entered promiscuous mode
[  299.097723][T14945] macvtap1: entered allmulticast mode
[  299.145498][T14945] vlan0: entered allmulticast mode
[  299.151545][T14945] 
: entered allmulticast mode
[  299.338250][T14959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2619'.
[  299.359139][T14955] netlink: 552 bytes leftover after parsing attributes in process `syz.4.2618'.
[  299.369439][T14955] openvswitch: netlink: Flow key attr not present in new flow.
[  299.656314][T14963] xt_CT: No such helper "syz0"
[  299.839938][T14978] netlink: 'syz.1.2623': attribute type 1 has an invalid length.
[  299.957801][T14980] bond4: entered promiscuous mode
[  299.972711][T14980] bond4: entered allmulticast mode
[  299.993138][T14980] 8021q: adding VLAN 0 to HW filter on device bond4
[  300.055672][T14980] netlink: 'syz.1.2623': attribute type 1 has an invalid length.
[  300.148687][T14978] ip6gretap1: entered promiscuous mode
[  300.162498][T14978] ip6gretap1: entered allmulticast mode
[  300.169904][T14978] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  300.180917][ T2981] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  300.255405][T14766] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.368820][   T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  300.618325][T14993] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  300.633972][T14993] IPVS: set_ctl: invalid protocol: 136 172.20.20.65:20003
[  300.652133][T14995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2627'.
[  300.688909][T14995] openvswitch: netlink: Flow key attr not present in new flow.
[  300.731631][T15002] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.844370][ T5855] Bluetooth: hci5: command tx timeout
[  301.075953][T15016] netlink: 'syz.4.2631': attribute type 13 has an invalid length.
[  301.165570][T14766] veth0_vlan: entered promiscuous mode
[  301.196980][T14766] veth1_vlan: entered promiscuous mode
[  301.377426][T14766] veth0_macvtap: entered promiscuous mode
[  301.425329][T14766] veth1_macvtap: entered promiscuous mode
[  301.496471][T14766] batman_adv: batadv0: Interface activated: batadv_slave_0
[  301.628296][T14766] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.657307][T14766] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.687298][T14766] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.700199][T14766] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.709902][T14766] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.804990][   T55] block nbd0: Possible stuck request ffff888025a65080: control (read@0,1024B). Runtime 180 seconds
[  301.816690][   T55] block nbd0: Possible stuck request ffff888025a65240: control (read@1024,1024B). Runtime 180 seconds
[  301.830600][   T55] block nbd0: Possible stuck request ffff888025a65400: control (read@2048,1024B). Runtime 180 seconds
[  301.843518][   T55] block nbd0: Possible stuck request ffff888025a655c0: control (read@3072,1024B). Runtime 180 seconds
[  301.944402][T15057] netlink: 'syz.3.2641': attribute type 3 has an invalid length.
[  302.128199][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.148672][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.161258][T15068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2646'.
[  302.268618][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.310703][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.549719][T15090] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2650'.
[  302.866968][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2655'.
[  302.924083][ T5855] Bluetooth: hci5: command tx timeout
[  303.126246][T15106] netlink: 'syz.0.2653': attribute type 12 has an invalid length.
[  303.186072][T15118] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  303.272008][T15118] vti0: entered promiscuous mode
[  303.328122][T15127] warn_alloc: 1 callbacks suppressed
[  303.328144][T15127] syz.4.2661: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  303.377567][T15127] CPU: 0 UID: 0 PID: 15127 Comm: syz.4.2661 Not tainted 6.16.0-rc6-syzkaller-00145-g14822f782700 #0 PREEMPT(full) 
[  303.377601][T15127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  303.377616][T15127] Call Trace:
[  303.377625][T15127]  <TASK>
[  303.377635][T15127]  dump_stack_lvl+0x189/0x250
[  303.377671][T15127]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.377698][T15127]  ? __pfx__printk+0x10/0x10
[  303.377728][T15127]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  303.377757][T15127]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  303.377788][T15127]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  303.377820][T15127]  warn_alloc+0x214/0x310
[  303.377841][T15127]  ? stack_depot_save_flags+0x40/0x900
[  303.377869][T15127]  ? __pfx_warn_alloc+0x10/0x10
[  303.377891][T15127]  ? kasan_save_track+0x4f/0x80
[  303.377926][T15127]  ? xskq_create+0x56/0x170
[  303.377946][T15127]  ? xsk_init_queue+0xb0/0x110
[  303.377970][T15127]  ? xsk_setsockopt+0x43f/0x710
[  303.378000][T15127]  ? do_sock_setsockopt+0x17c/0x1b0
[  303.378029][T15127]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  303.378059][T15127]  ? do_syscall_64+0xfa/0x3b0
[  303.378081][T15127]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.378112][T15127]  __vmalloc_node_range_noprof+0x125/0x12f0
[  303.378181][T15127]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  303.378221][T15127]  ? __kasan_kmalloc+0x93/0xb0
[  303.378255][T15127]  vmalloc_user_noprof+0xad/0xf0
[  303.378287][T15127]  ? xskq_create+0xbf/0x170
[  303.378310][T15127]  xskq_create+0xbf/0x170
[  303.378335][T15127]  xsk_init_queue+0xb0/0x110
[  303.378359][T15127]  xsk_setsockopt+0x43f/0x710
[  303.378395][T15127]  ? __pfx_xsk_setsockopt+0x10/0x10
[  303.378432][T15127]  ? __fget_files+0x2a/0x420
[  303.378452][T15127]  ? aa_sock_opt_perm+0x74/0x110
[  303.378477][T15127]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  303.378500][T15127]  ? __pfx_xsk_setsockopt+0x10/0x10
[  303.378535][T15127]  do_sock_setsockopt+0x17c/0x1b0
[  303.378572][T15127]  __x64_sys_setsockopt+0x13f/0x1b0
[  303.378610][T15127]  do_syscall_64+0xfa/0x3b0
[  303.378632][T15127]  ? lockdep_hardirqs_on+0x9c/0x150
[  303.378654][T15127]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.378675][T15127]  ? clear_bhb_loop+0x60/0xb0
[  303.378701][T15127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.378723][T15127] RIP: 0033:0x7f5b1dd8e9a9
[  303.378742][T15127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.378762][T15127] RSP: 002b:00007f5b1eb64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  303.378785][T15127] RAX: ffffffffffffffda RBX: 00007f5b1dfb5fa0 RCX: 00007f5b1dd8e9a9
[  303.378801][T15127] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  303.378813][T15127] RBP: 00007f5b1de10d69 R08: 0000000000000004 R09: 0000000000000000
[  303.378826][T15127] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  303.378838][T15127] R13: 0000000000000000 R14: 00007f5b1dfb5fa0 R15: 00007ffeb7f7bea8
[  303.378872][T15127]  </TASK>
[  303.379850][T15127] Mem-Info:
[  303.687629][T15127] active_anon:8624 inactive_anon:0 isolated_anon:0
[  303.687629][T15127]  active_file:1331 inactive_file:39916 isolated_file:0
[  303.687629][T15127]  unevictable:768 dirty:102 writeback:0
[  303.687629][T15127]  slab_reclaimable:11929 slab_unreclaimable:131271
[  303.687629][T15127]  mapped:35452 shmem:4232 pagetables:1215
[  303.687629][T15127]  sec_pagetables:0 bounce:0
[  303.687629][T15127]  kernel_misc_reclaimable:0
[  303.687629][T15127]  free:1276842 free_pcp:11875 free_cma:0
[  303.754597][T15127] Node 0 active_anon:34796kB inactive_anon:0kB active_file:5324kB inactive_file:159460kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141808kB dirty:404kB writeback:0kB shmem:15992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14000kB pagetables:4824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  303.809669][T15127] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  303.891072][T15127] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  303.959712][T15127] lowmem_reserve[]: 0 2498 2500 2500 2500
[  303.985102][T15127] Node 0 DMA32 free:1186336kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36752kB inactive_anon:0kB active_file:5324kB inactive_file:157880kB unevictable:1536kB writepending:400kB present:3129332kB managed:2558500kB mlocked:0kB bounce:0kB free_pcp:31332kB local_pcp:18324kB free_cma:0kB
[  304.042887][T15127] lowmem_reserve[]: 0 0 1 1 1
[  304.052948][T15127] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  304.105552][T15127] lowmem_reserve[]: 0 0 0 0 0
[  304.110606][T15127] Node 1 Normal free:3903060kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15936kB local_pcp:3936kB free_cma:0kB
[  304.147826][T15127] lowmem_reserve[]: 0 0 0 0 0
[  304.152732][T15127] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  304.200360][T15127] Node 0 DMA32: 2*4kB (UE) 2*8kB (UE) 1*16kB (M) 2*32kB (UM) 25*64kB (M) 23*128kB (M) 16*256kB (UM) 21*512kB (UM) 19*1024kB (UM) 4*2048kB (UM) 278*4096kB (UM) = 1185832kB
[  304.233812][T15127] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  304.253181][T15127] Node 1 Normal: 201*4kB (UM) 40*8kB (UME) 39*16kB (UME) 148*32kB (UME) 48*64kB (UME) 8*128kB (UME) 5*256kB (UM) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3903060kB
[  304.276959][T15127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  304.288011][T15127] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  304.325939][T15153] xt_hashlimit: size too large, truncated to 1048576
[  304.360504][T15127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  304.387103][T15154] __nla_validate_parse: 4 callbacks suppressed
[  304.387124][T15154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2670'.
[  304.403603][T15127] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  304.403633][T15127] 45400 total pagecache pages
[  304.403644][T15127] 0 pages in swap cache
[  304.403653][T15127] Free swap  = 124996kB
[  304.403663][T15127] Total swap = 124996kB
[  304.403674][T15127] 2097051 pages RAM
[  304.403683][T15127] 0 pages HighMem/MovableOnly
[  304.403692][T15127] 425384 pages reserved
[  304.403702][T15127] 0 pages cma reserved
[  304.897252][T15170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2674'.
[  304.922408][T15171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2675'.
[  304.932701][T15170] netlink: 'syz.0.2674': attribute type 5 has an invalid length.
[  304.944553][T15170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2674'.
[  305.012161][T15176] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2677'.
[  305.057389][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2677'.
[  305.089780][T15180] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  305.131071][T15181] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20000
[  305.178806][T15183] vxcan1 speed is unknown, defaulting to 1000
[  305.480135][ T3579] bond4: (slave ip6gretap1): link status up again after 0 ms
[  305.505200][T15202] netlink: 'syz.3.2685': attribute type 1 has an invalid length.
[  305.513708][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2685'.
[  305.522962][ T3579] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  305.663475][ T3498] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  305.784015][   T12] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  305.895390][ T2981] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  306.055137][T15231] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2690'.
[  306.116399][ T3498] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  306.268472][T15238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2692'.
[  306.334844][ T3498] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  306.466624][   T13] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  306.616421][ T2991] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  306.923911][ T5855] Bluetooth: hci5: command tx timeout
[  307.491407][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2706'.
[  308.072666][T15325] nftables ruleset with unbound chain
[  308.549367][T15342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.634647][T15342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.660453][T15342] bond0 (unregistering): Released all slaves
[  308.756124][T15350] netlink: 'syz.4.2723': attribute type 4 has an invalid length.
[  308.942164][T15374] x_tables: duplicate entry at hook 2
[  309.044555][T15384] netlink: 'syz.3.2730': attribute type 10 has an invalid length.
[  309.651109][T15410] __nla_validate_parse: 57 callbacks suppressed
[  309.651131][T15410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2737'.
[  309.913007][T15428] vxcan1 speed is unknown, defaulting to 1000
[  309.977151][T15432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2737'.
[  310.002494][T15433] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 !
[  310.154811][ T3579] net_ratelimit: 27 callbacks suppressed
[  310.154835][ T3579] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  310.494307][T14981] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  310.603987][T15440] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  310.727532][T15440] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  310.944690][ T3529] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  311.059640][   T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  311.090308][   T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  311.091245][T15440] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  311.114333][   T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  311.131743][   T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  311.146110][   T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  311.232142][T15465] vxcan1 speed is unknown, defaulting to 1000
[  311.272519][ T3529] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  311.464097][T15440] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  311.598085][ T3529] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  311.721394][T15484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2754'.
[  311.750373][T15484] xt_l2tp: invalid flags combination: c
[  311.971003][ T3529] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  312.184818][ T3529] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  312.274828][   T64] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  312.341792][ T3529] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  312.525717][ T3529] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  312.576465][T15465] chnl_net:caif_netlink_parms(): no params data found
[  312.790727][T15465] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.805248][T15465] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.855662][T15465] bridge_slave_0: entered allmulticast mode
[  312.865228][T15465] bridge_slave_0: entered promiscuous mode
[  312.892471][T15465] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.909304][T15465] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.917445][T15465] bridge_slave_1: entered allmulticast mode
[  312.929107][T15465] bridge_slave_1: entered promiscuous mode
[  313.109174][T15532] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2761'.
[  313.109724][T15535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2762'.
[  313.166761][T15465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  313.205528][ T3529] bond0: left allmulticast mode
[  313.210683][ T3529] bond0: left promiscuous mode
[  313.248764][   T51] Bluetooth: hci6: command tx timeout
[  313.257924][ T3529] bridge0: port 1(bond0) entered disabled state
[  313.349949][T15545] xt_policy: neither incoming nor outgoing policy selected
[  313.788535][    C0] vcan0: j1939_tp_rxtimer: 0xffff888034707c00: rx timeout, send abort
[  313.968133][ T3529] bond10 (unregistering): (slave gretap3): Releasing active interface
[  314.289419][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805a594c00: rx timeout, send abort
[  314.298053][    C0] vcan0: j1939_tp_rxtimer: 0xffff888034707c00: abort rx timeout. Force session deactivation
[  314.608181][T15569] delete_channel: no stack
[  314.651186][ T3529] bond1 (unregistering): Released all slaves
[  314.797750][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805a594c00: abort rx timeout. Force session deactivation
[  314.828197][ T3529] bond2 (unregistering): Released all slaves
[  314.960670][ T3529] bond3 (unregistering): Released all slaves
[  314.980354][ T3529] bond4 (unregistering): (slave bond5): Releasing backup interface
[  314.989289][ T3529] bond4 (unregistering): Released all slaves
[  315.129181][ T3529] bond5 (unregistering): Released all slaves
[  315.145879][ T3529] bond6 (unregistering): Released all slaves
[  315.162888][ T3529] bond7 (unregistering): Released all slaves
[  315.185372][ T3529] bond8 (unregistering): Released all slaves
[  315.207871][ T3529] bond9 (unregistering): Released all slaves
[  315.323594][   T51] Bluetooth: hci6: command tx timeout
[  315.359476][ T3529] bond0 (unregistering): Released all slaves
[  315.480512][ T3529] bond10 (unregistering): Released all slaves
[  315.497825][ T3529] bond11 (unregistering): Released all slaves
[  315.527961][T15465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.556457][T15454] net_ratelimit: 3 callbacks suppressed
[  315.556481][T15454] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  315.644050][T15568] gre1: entered promiscuous mode
[  315.650319][T15568] gre1: entered allmulticast mode
[  315.704092][T15571] netlink: 'syz.0.2770': attribute type 3 has an invalid length.
[  315.988504][T15589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2775'.
[  316.061733][T15465] team0: Port device team_slave_0 added
[  316.144400][ T3529] tipc: Disabling bearer <eth:ipvlan0>
[  316.158005][T15604] No such timeout policy "syz0"
[  316.260866][ T3529] tipc: Left network mode
[  316.270663][T15465] team0: Port device team_slave_1 added
[  316.289468][T15600] netlink: 1044 bytes leftover after parsing attributes in process `syz.5.2778'.
[  316.391502][ T3529] IPVS: stopping master sync thread 9361 ...
[  316.398139][T15610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2780'.
[  316.578331][T15617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2781'.
[  316.663046][T15465] batman_adv: batadv0: Adding interface: batadv_slave_0
[  316.688352][T15465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.742181][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2784'.
[  316.761944][T15465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  316.784802][T15619] bridge0: entered allmulticast mode
[  316.792001][T15622] bridge_slave_1: left allmulticast mode
[  316.805396][T15622] bridge_slave_1: left promiscuous mode
[  316.815548][T15622] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.927912][T15622] bridge_slave_0: left allmulticast mode
[  316.934647][T15622] bridge_slave_0: left promiscuous mode
[  316.940889][T15622] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.972033][T15622] bridge0 (unregistering): left allmulticast mode
[  317.138720][T15465] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.151427][T15465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.227341][T15465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.249689][T15630] lo: entered allmulticast mode
[  317.403408][   T51] Bluetooth: hci6: command tx timeout
[  317.450767][T15644] IPv6: NLM_F_CREATE should be specified when creating new route
[  317.569491][   T49] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  317.776383][T15465] hsr_slave_0: entered promiscuous mode
[  317.783070][T15465] hsr_slave_1: entered promiscuous mode
[  317.812278][T15465] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  317.838585][T15465] Cannot create hsr debugfs directory
[  317.862438][T15666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2798'.
[  317.981804][T15664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2799'.
[  317.984476][T15440] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  317.993335][T15652] vxcan1 speed is unknown, defaulting to 1000
[  318.223079][T15664] batman_adv: batadv0: Removing interface: batadv_slave_1
[  318.363036][ T3529] hsr_slave_0: left promiscuous mode
[  318.431371][ T3529] hsr_slave_1: left promiscuous mode
[  318.438217][T15680] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  318.513699][ T3529] veth0_macvtap: left allmulticast mode
[  318.827592][T15693] xt_check_target: 23 callbacks suppressed
[  318.827625][T15693] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING
[  318.860130][T15692] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2809'.
[  318.860892][ T3529] vlan1 (unregistering): left allmulticast mode
[  318.881049][ T3529] veth0_vlan (unregistering): left allmulticast mode
[  318.904936][T15693] Cannot find del_set index 17 as target
[  319.070254][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2810'.
[  319.483533][   T51] Bluetooth: hci6: command tx timeout
[  320.204818][ T1142] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  320.421098][T15707] netlink: 'syz.0.2812': attribute type 1 has an invalid length.
[  320.432017][T15707] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2812'.
[  320.598964][ T1142] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  320.724384][ T1142] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  320.753645][ T3529] IPVS: stop unused estimator thread 0...
[  320.864350][T15454] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  320.981793][T15720] netlink: 'syz.5.2817': attribute type 1 has an invalid length.
[  320.990511][ T3529] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  321.074483][T15725] __nla_validate_parse: 2 callbacks suppressed
[  321.074499][T15725] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2818'.
[  321.096383][T15722] bond1: (slave gretap1): making interface the new active one
[  321.107181][T15722] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  321.140065][ T3529] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  321.426201][T15465] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  321.456282][ T3529] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  321.476856][T15465] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  321.495848][T15465] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  321.519364][T15465] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  321.594133][   T49] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  321.831823][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2825'.
[  321.873070][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2827'.
[  321.893005][T15764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2827'.
[  321.903478][T15454] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  321.911521][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2827'.
[  322.007166][T15769] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) !
[  322.091970][T15769] tipc: Started in network mode
[  322.100156][T15772] x_tables: ip_tables: ah match: only valid for protocol 51
[  322.105289][T15769] tipc: Node identity ea633360fa7f, cluster identity 4711
[  322.155063][T15769] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.184692][T15770] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  322.282410][T15770] tipc: Resetting bearer <eth:syzkaller0>
[  322.317132][T15770] tipc: Disabling bearer <eth:syzkaller0>
[  322.394247][T15776] syzkaller0: entered promiscuous mode
[  322.399824][T15776] syzkaller0: entered allmulticast mode
[  322.412794][T15465] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.701786][T15785] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2834'.
[  323.208597][T15800] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  324.417148][T15812] No such timeout policy "syz0"
[  324.971543][T15465] 8021q: adding VLAN 0 to HW filter on device team0
[  325.083930][   T64] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  325.137164][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.145458][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state
[  325.197482][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.204742][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  325.294130][T15833] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2845'.
[  325.409942][T15833] netlink: 'syz.5.2845': attribute type 1 has an invalid length.
[  325.426016][T15833] netlink: 'syz.5.2845': attribute type 3 has an invalid length.
[  325.435222][T15833] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2845'.
[  325.494705][T15453] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  325.624686][ T3529] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  325.754166][   T49] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  325.878901][   T49] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  325.880650][T15857] netlink: 'syz.5.2849': attribute type 83 has an invalid length.
[  325.910093][T15856] netlink: 'syz.5.2849': attribute type 83 has an invalid length.
[  325.951567][T15856] netlink: 'syz.5.2849': attribute type 1 has an invalid length.
[  325.988421][T15856] netlink: 'syz.5.2849': attribute type 3 has an invalid length.
[  325.998382][T15465] 8021q: adding VLAN 0 to HW filter on device batadv0
[  326.035165][ T3529] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  326.044791][T15856] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2849'.
[  326.084329][T15856] NCSI netlink: No device for ifindex 131080
[  326.184576][   T49] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  326.353838][T15453] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  326.501535][T15882] xt_l2tp: v2 sid > 0xffff: 262144
[  326.516103][T15440] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  326.665817][T15440] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  326.784437][   T49] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  326.923958][T15453] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  327.289608][T15465] veth0_vlan: entered promiscuous mode
[  327.331488][T15465] veth1_vlan: entered promiscuous mode
[  327.415679][T15465] veth0_macvtap: entered promiscuous mode
[  327.437105][T15465] veth1_macvtap: entered promiscuous mode
[  327.481155][T15465] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.538473][T15465] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.556539][T15465] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.567435][T15465] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.578931][T15465] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.590289][T15465] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  327.590293][T15922] sctp: [Deprecated]: syz.3.2866 (pid 15922) Use of struct sctp_assoc_value in delayed_ack socket option.
[  327.590293][T15922] Use struct sctp_sack_info instead
[  327.651350][T15926] ip6t_srh: unknown srh match flags  4001
[  327.923884][T15454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  327.959955][T15454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.071194][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2871'.
[  328.082630][T15942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2871'.
[  328.111649][T15942] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2871'.
[  328.156678][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.165698][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.373742][T15956] IPVS: set_ctl: invalid protocol: 79 100.1.1.0:20002
[  328.398960][T15957] IPVS: set_ctl: invalid protocol: 79 100.1.1.0:20002
[  328.710104][T15963] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2878'.
[  328.746026][T15967] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2879'.
[  328.795689][T15973] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.056932][T15982] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2883'.
[  329.139488][T15984] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2883'.
[  329.175375][T15988] netlink: 'syz.3.2886': attribute type 3 has an invalid length.
[  329.223494][T15988] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2886'.
[  329.267572][T15991] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2887'.
[  329.491667][T15998] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2891'.
[  329.508050][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  329.517896][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  329.526664][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  329.564990][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  329.576788][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  329.758409][T16001] vxcan1 speed is unknown, defaulting to 1000
[  330.723768][T15453] net_ratelimit: 25 callbacks suppressed
[  330.723790][T15453] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  330.820537][T16001] chnl_net:caif_netlink_parms(): no params data found
[  330.905574][ T3529] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  331.158730][T16001] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.176330][T16064] netlink: 'syz.5.2906': attribute type 83 has an invalid length.
[  331.184964][T16001] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.192450][T16001] bridge_slave_0: entered allmulticast mode
[  331.202633][T16001] bridge_slave_0: entered promiscuous mode
[  331.248989][T16001] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.281139][T16001] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.292970][T16001] bridge_slave_1: entered allmulticast mode
[  331.319565][T16001] bridge_slave_1: entered promiscuous mode
[  331.468222][T16001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.493870][ T1142] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  331.520868][T16001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.643756][ T5855] Bluetooth: hci0: command tx timeout
[  331.680586][T16001] team0: Port device team_slave_0 added
[  331.727509][T16092] netlink: zone id is out of range
[  331.748921][T16001] team0: Port device team_slave_1 added
[  331.779822][T16092] netlink: zone id is out of range
[  331.786132][T16092] netlink: zone id is out of range
[  331.791640][T16092] netlink: zone id is out of range
[  331.798789][T15454] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  331.807777][T16092] netlink: zone id is out of range
[  331.807843][ T5855] Bluetooth: hci2: command 0x0406 tx timeout
[  331.847479][T16092] netlink: zone id is out of range
[  331.891480][   T55] block nbd0: Possible stuck request ffff888025a65080: control (read@0,1024B). Runtime 210 seconds
[  331.903007][   T55] block nbd0: Possible stuck request ffff888025a65240: control (read@1024,1024B). Runtime 210 seconds
[  331.914852][   T55] block nbd0: Possible stuck request ffff888025a65400: control (read@2048,1024B). Runtime 210 seconds
[  331.927747][   T55] block nbd0: Possible stuck request ffff888025a655c0: control (read@3072,1024B). Runtime 210 seconds
[  331.987567][T16001] batman_adv: batadv0: Adding interface: batadv_slave_0
[  332.003540][T16001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.048353][T16001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.063554][T16100] bond0: entered allmulticast mode
[  332.068773][T16100] bond_slave_0: entered allmulticast mode
[  332.101475][T16104] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  332.120706][T16100] bond_slave_1: entered allmulticast mode
[  332.171823][T16001] batman_adv: batadv0: Adding interface: batadv_slave_1
[  332.202403][T16001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.261982][T16001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.446849][T16001] hsr_slave_0: entered promiscuous mode
[  332.461028][T16001] hsr_slave_1: entered promiscuous mode
[  332.477268][T16001] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  332.508049][T16001] Cannot create hsr debugfs directory
[  332.828118][T16134] IPv6: sit1: Disabled Multicast RS
[  332.865328][T16134] sit1: entered allmulticast mode
[  333.328518][T16151] __nla_validate_parse: 21 callbacks suppressed
[  333.328541][T16151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2927'.
[  333.685686][T16001] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  333.700008][T16001] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  333.723040][T16001] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  333.724561][ T5855] Bluetooth: hci0: command tx timeout
[  333.754281][T16001] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  334.014123][T16177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2934'.
[  334.015036][T16001] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.057893][T16001] 8021q: adding VLAN 0 to HW filter on device team0
[  334.078781][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.086058][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.146619][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.153912][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.260821][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805cad9c00: rx timeout, send abort
[  334.562134][T16198] netlink: 'syz.0.2940': attribute type 1 has an invalid length.
[  334.701411][T16203] bond7: (slave bridge4): making interface the new active one
[  334.719262][T16203] bond7: (slave bridge4): Enslaving as an active interface with an up link
[  334.760961][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805cada000: rx timeout, send abort
[  334.770388][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805cad9c00: abort rx timeout. Force session deactivation
[  334.788448][T16001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  334.899924][T16210] netlink: 'syz.4.2941': attribute type 1 has an invalid length.
[  334.913735][T16210] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2941'.
[  334.935620][T16210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2941'.
[  334.957913][T16210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2941'.
[  334.970322][T16001] veth0_vlan: entered promiscuous mode
[  335.011464][T16001] veth1_vlan: entered promiscuous mode
[  335.030655][T16210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2941'.
[  335.066488][T16210] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2941'.
[  335.123539][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2941'.
[  335.145483][T16210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2941'.
[  335.182741][T16001] veth0_macvtap: entered promiscuous mode
[  335.235470][T16210] vlan2: entered promiscuous mode
[  335.256810][T16210] geneve0: entered promiscuous mode
[  335.269387][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805cada000: abort rx timeout. Force session deactivation
[  335.301656][T16001] veth1_macvtap: entered promiscuous mode
[  335.449960][T16001] batman_adv: batadv0: Interface activated: batadv_slave_0
[  335.492305][T16001] batman_adv: batadv0: Interface activated: batadv_slave_1
[  335.535786][T16001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  335.573444][T16001] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  335.597567][T16001] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  335.627063][T16001] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  335.804184][ T5855] Bluetooth: hci0: command tx timeout
[  335.845231][ T3529] net_ratelimit: 24 callbacks suppressed
[  335.845253][ T3529] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  336.063467][   T49] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  336.080706][T16251] netlink: 'syz.4.2952': attribute type 1 has an invalid length.
[  336.172024][T16250] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.182742][T16250] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.227265][T15440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.235904][T15453] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  336.273928][T15440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.344942][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.355435][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.404550][T15440] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  336.435561][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2877'.
[  336.513481][T15440] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  336.627858][T15453] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  336.708179][T16266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  336.725719][T16263] syzkaller0: entered promiscuous mode
[  336.731271][T16263] syzkaller0: entered allmulticast mode
[  336.794212][T15453] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  336.893702][T16263] tipc: Resetting bearer <eth:syzkaller0>
[  337.029362][T16263] tipc: Disabling bearer <eth:syzkaller0>
[  337.423900][   T64] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  337.632712][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  337.657390][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  337.667462][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  337.675752][T15440] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  337.678163][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  337.691328][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  337.798464][T15453] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  337.830740][T15453] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.864245][ T3529] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  337.883579][   T51] Bluetooth: hci0: command tx timeout
[  337.923639][T16292] vxcan1 speed is unknown, defaulting to 1000
[  338.009202][T15453] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  338.041014][T15453] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.145954][T15453] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  338.185227][T15453] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.351507][T15453] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  338.388933][T15453] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.571468][T16320] syzkaller0: entered promiscuous mode
[  338.596248][T16320] syzkaller0: entered allmulticast mode
[  339.732164][   T51] Bluetooth: hci3: command tx timeout
[  341.080596][T15449] net_ratelimit: 2 callbacks suppressed
[  341.080613][T15449] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  341.230857][T16349] __nla_validate_parse: 4 callbacks suppressed
[  341.230880][T16349] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.2978'.
[  341.261146][T16351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2980'.
[  341.816261][   T51] Bluetooth: hci3: command tx timeout
[  342.688975][T15453] bond0 (unregistering): Released all slaves
[  342.707419][T15453] bond1 (unregistering): Released all slaves
[  342.841163][T15453] bond2 (unregistering): Released all slaves
[  342.859269][T15453] bond3 (unregistering): Released all slaves
[  342.876985][T15453] bond4 (unregistering): Released all slaves
[  343.008605][T15453] bond5 (unregistering): Released all slaves
[  343.148537][T15453] bond6 (unregistering): Released all slaves
[  343.290953][T15453] bond7 (unregistering): Released all slaves
[  343.438985][T15453] bond8 (unregistering): Released all slaves
[  343.454169][T15454] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  343.507092][T16353] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  343.516998][T16353] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  343.526656][T16353] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  343.536117][T16353] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  343.564468][ T3529] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  343.643280][T15453] : left promiscuous mode
[  343.880465][T16377] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  343.902577][T16391] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2985'.
[  343.903330][   T51] Bluetooth: hci3: command tx timeout
[  343.934139][ T3529] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  343.976838][T15453] tipc: Disabling bearer <eth:vlan1>
[  344.032995][T15453] tipc: Left network mode
[  344.083518][T15440] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  344.224094][T15441] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  344.274346][T16292] chnl_net:caif_netlink_parms(): no params data found
[  344.310664][T16402] netlink: 'syz.5.2989': attribute type 4 has an invalid length.
[  344.342168][T16402] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2989'.
[  344.353498][T16408] netlink: 'syz.1.2991': attribute type 10 has an invalid length.
[  344.393675][T15441] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  344.455830][T16408] 8021q: adding VLAN 0 to HW filter on device team0
[  344.476720][T16408] bond0: (slave team0): Enslaving as an active interface with an up link
[  344.512882][T16402] : renamed from bond0 (while UP)
[  344.694990][T16422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2994'.
[  344.942028][T16292] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.959617][T16292] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.969684][T16292] bridge_slave_0: entered allmulticast mode
[  344.989198][T16292] bridge_slave_0: entered promiscuous mode
[  345.024084][   T64] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  345.052175][T16292] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.068415][T16292] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.086343][T16292] bridge_slave_1: entered allmulticast mode
[  345.101914][T16292] bridge_slave_1: entered promiscuous mode
[  345.297625][T16292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.332281][T16292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.471245][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2997'.
[  345.639776][T16292] team0: Port device team_slave_0 added
[  345.690000][T16292] team0: Port device team_slave_1 added
[  345.866089][ T3529] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  345.966133][   T51] Bluetooth: hci3: command tx timeout
[  346.063199][T16469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3006'.
[  346.102583][T16471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3007'.
[  346.114280][T16469] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  346.121933][T16469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.259212][T16460] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.269025][T15441] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  346.345626][T16480] openvswitch: netlink: Unknown key attributes 2
[  346.373056][T16481] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3007'.
[  346.421985][T16483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3010'.
[  346.525089][T15453] hsr_slave_0: left promiscuous mode
[  346.532856][T15453] hsr_slave_1: left promiscuous mode
[  346.557347][T15453] veth1_macvtap: left promiscuous mode
[  346.564868][T15453] veth0_macvtap: left promiscuous mode
[  346.571967][T15453] veth1_vlan: left promiscuous mode
[  346.580144][T15453] 
: left promiscuous mode
[  346.781905][T15453] pimreg (unregistering): left allmulticast mode
[  347.641643][T16292] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.649771][T16292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.676516][T16292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  347.697446][T16483] geneve2: entered promiscuous mode
[  347.787032][T16292] batman_adv: batadv0: Adding interface: batadv_slave_1
[  347.800894][T16292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.836095][T16292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.028703][T16292] hsr_slave_0: entered promiscuous mode
[  348.053124][T16292] hsr_slave_1: entered promiscuous mode
[  348.070466][T16292] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  348.102709][T16292] Cannot create hsr debugfs directory
[  348.114323][   T64] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  348.181152][T16503] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3016'.
[  348.208867][T16503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3016'.
[  348.229092][T16503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3016'.
[  348.481015][T16515] ip6erspan0: entered promiscuous mode
[  348.562700][T16516] netlink: 'syz.0.3019': attribute type 10 has an invalid length.
[  348.575147][   T64] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  348.577098][T15453] IPVS: stop unused estimator thread 0...
[  348.604650][T16516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3019'.
[  348.658454][T16516] dummy0: entered promiscuous mode
[  348.669297][T16516] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  348.789364][T16526] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  348.831745][T16526] bridge1: the hash_elasticity option has been deprecated and is always 16
[  348.877663][ T3529] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  348.905056][T16530] netlink: 'syz.0.3024': attribute type 10 has an invalid length.
[  349.065037][T16540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3026'.
[  349.090545][T16537] bond0: entered promiscuous mode
[  349.098805][T16537] batadv0: entered promiscuous mode
[  349.107768][T16537] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  349.128005][T16537] Cannot create hsr debugfs directory
[  349.148431][T16537] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  349.206452][T16537] 8021q: adding VLAN 0 to HW filter on device hsr0
[  349.230796][T16546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3027'.
[  349.250611][T16537] bond0: left promiscuous mode
[  349.256770][T16537] batadv0: left promiscuous mode
[  349.490768][T16554] netlink: 'syz.5.3031': attribute type 1 has an invalid length.
[  349.709659][T16563] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  349.757259][T16292] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  349.831093][T16292] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  349.878853][T16292] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  349.923637][T16292] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  350.033013][T16575] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  350.051601][T16575] syzkaller0: entered promiscuous mode
[  350.068801][T16575] syzkaller0: entered allmulticast mode
[  350.165400][T16586] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3040'.
[  350.174541][T16575] tipc: Resetting bearer <eth:syzkaller0>
[  350.393133][T16573] tipc: Resetting bearer <eth:syzkaller0>
[  350.422412][T16573] tipc: Disabling bearer <eth:syzkaller0>
[  350.547768][T16292] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.566046][T16598] netlink: 'syz.5.3043': attribute type 21 has an invalid length.
[  350.587536][T16598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3043'.
[  350.655315][T16292] 8021q: adding VLAN 0 to HW filter on device team0
[  350.682960][T16601] netlink: 'syz.4.3045': attribute type 10 has an invalid length.
[  350.688596][T15440] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.698051][T15440] bridge0: port 1(bridge_slave_0) entered forwarding state
[  350.764302][T16601] geneve1: entered allmulticast mode
[  350.770703][T16601] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  350.795411][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.802635][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  350.898565][T16609] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20000
[  351.144264][T15441] net_ratelimit: 7 callbacks suppressed
[  351.144286][T15441] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  351.295634][ T3529] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  351.406863][T15453] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  351.478652][T16634] netlink: 'syz.1.3057': attribute type 29 has an invalid length.
[  351.546244][T16634] __nla_validate_parse: 4 callbacks suppressed
[  351.546265][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3057'.
[  351.606801][T16637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3054'.
[  351.624174][ T3529] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  351.653945][T16634] netlink: 'syz.1.3057': attribute type 10 has an invalid length.
[  351.678556][T16640] netlink: 'syz.1.3057': attribute type 29 has an invalid length.
[  351.742001][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3057'.
[  351.846128][T16634] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  351.875160][T15453] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  351.932156][T16639] vxcan1 speed is unknown, defaulting to 1000
[  351.951734][T16292] 8021q: adding VLAN 0 to HW filter on device batadv0
[  352.021987][T16649] netlink: 'syz.0.3059': attribute type 2 has an invalid length.
[  352.133190][T16658] netlink: 'syz.0.3059': attribute type 1 has an invalid length.
[  352.304064][T15453] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  352.397854][T16292] veth0_vlan: entered promiscuous mode
[  352.447846][T16292] veth1_vlan: entered promiscuous mode
[  352.575749][ T1142] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  352.651665][T16292] veth0_macvtap: entered promiscuous mode
[  352.766866][ T1142] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  352.801100][T16292] veth1_macvtap: entered promiscuous mode
[  352.907968][T16292] batman_adv: batadv0: Interface activated: batadv_slave_0
[  352.973517][T16292] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.060325][T16292] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.070939][T16292] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.085481][T16292] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.095899][T16292] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.108599][T16680] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3068'.
[  353.184013][T15440] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  353.359199][T15449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.367658][T15440] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  353.389497][T15449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.466073][T16692] netlink: 'syz.0.3072': attribute type 15 has an invalid length.
[  353.473688][T15449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.482601][T16692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3072'.
[  353.507582][T15449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.516446][T16694] netlink: 'syz.0.3072': attribute type 15 has an invalid length.
[  353.537602][T16694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3072'.
[  353.795366][T16697] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2956'.
[  353.858098][T16705] bridge0: port 3(veth0_to_bridge) entered blocking state
[  353.877896][T16705] bridge0: port 3(veth0_to_bridge) entered disabled state
[  353.911864][T16705] veth0_to_bridge: entered allmulticast mode
[  353.946749][T16705] veth0_to_bridge: entered promiscuous mode
[  353.971184][T16705] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  354.014621][T16705] bridge0: port 3(veth0_to_bridge) entered blocking state
[  354.022547][T16705] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  354.555447][T16730] validate_nla: 1 callbacks suppressed
[  354.555469][T16730] netlink: 'syz.5.3081': attribute type 10 has an invalid length.
[  354.580291][ T5967] IPVS: starting estimator thread 0...
[  354.589016][T16731] netlink: 'syz.3.3083': attribute type 4 has an invalid length.
[  354.601535][T16730] veth0_macvtap: left promiscuous mode
[  354.636976][T16733] vxcan1 speed is unknown, defaulting to 1000
[  354.695350][T16734] IPVS: using max 25 ests per chain, 60000 per kthread
[  354.887806][T16741] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.900196][T16741] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.032665][T16741] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  355.047637][T16741] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.192087][T16741] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  355.227504][T16741] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.385643][T16741] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  355.397166][T16741] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.607148][T16760] IPv6: NLM_F_CREATE should be specified when creating new route
[  355.698100][T16741] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  355.707934][T16741] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.847724][T16741] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  355.875625][T16741] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.949539][T16741] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  355.968927][T16741] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  356.048412][T16741] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  356.083687][T16741] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  356.175016][T15449] net_ratelimit: 15 callbacks suppressed
[  356.175041][T15449] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  356.305411][ T1142] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  356.420829][T15441] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  356.544492][T15453] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  356.609014][T16795] netlink: 19 bytes leftover after parsing attributes in process `syz.5.3100'.
[  356.638034][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3100'.
[  356.674665][T15453] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  356.794168][T15453] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  356.816902][T16802] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3104'.
[  356.834060][T16807] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3104'.
[  356.850750][T16804] nbd: must specify a size in bytes for the device
[  356.904675][ T3579] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  357.027754][ T3579] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  357.139339][T16821] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3108'.
[  357.166499][T15449] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  357.288899][T16832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3110'.
[  357.294505][ T3579] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  357.350221][T16831] pimreg3: entered allmulticast mode
[  357.567136][T16849] x_tables: duplicate underflow at hook 1
[  357.624657][T16849] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3114'.
[  357.930045][T16861] netlink: 'syz.4.3119': attribute type 7 has an invalid length.
[  357.958997][T16861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3119'.
[  358.609367][   T51] Bluetooth: hci3: command 0x0405 tx timeout
[  360.639168][T16894] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3123'.
[  360.872617][T16901] netlink: 'syz.0.3125': attribute type 4 has an invalid length.
[  361.285349][T15449] net_ratelimit: 11 callbacks suppressed
[  361.285374][T15449] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  361.325720][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  361.338594][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  361.351163][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  361.363861][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  361.376460][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  361.389032][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  361.401622][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  361.414219][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  361.426891][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  361.895514][T16927] vxcan1 speed is unknown, defaulting to 1000
[  362.292535][T16945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3139'.
[  362.359372][T16948] atomic_op ffff88807a9d9198 conn xmit_atomic 0000000000000000
[  362.402117][T16945] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  362.429122][   T55] block nbd0: Possible stuck request ffff888025a65080: control (read@0,1024B). Runtime 240 seconds
[  362.457928][   T55] block nbd0: Possible stuck request ffff888025a65240: control (read@1024,1024B). Runtime 240 seconds
[  362.464571][T16945] batman_adv: batadv0: Removing interface: batadv_slave_0
[  362.501825][   T55] block nbd0: Possible stuck request ffff888025a65400: control (read@2048,1024B). Runtime 240 seconds
[  362.550631][T16945] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  362.574429][   T55] block nbd0: Possible stuck request ffff888025a655c0: control (read@3072,1024B). Runtime 240 seconds
[  362.591188][T16945] batman_adv: batadv0: Removing interface: batadv_slave_1
[  362.669127][T16954] x_tables: ip_tables: udp match: only valid for protocol 17
[  363.042165][T16959] netlink: 'syz.0.3144': attribute type 10 has an invalid length.
[  363.182144][T16940] vxcan1 speed is unknown, defaulting to 1000
[  363.349441][T16964] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  363.429356][T16965] bond0: (slave bond_slave_1): Releasing backup interface
[  363.472029][T16965] bond_slave_1: left allmulticast mode
[  363.547260][T16966] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3146'.
[  363.622581][T16965] sctp: [Deprecated]: syz.4.3146 (pid 16965) Use of struct sctp_assoc_value in delayed_ack socket option.
[  363.622581][T16965] Use struct sctp_sack_info instead
[  364.186262][T16971] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  364.205849][T16983] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3150'.
[  364.243395][T16977] tc_dump_action: action bad kind
[  364.259397][T16983] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3150'.
[  364.299877][T16983] netlink: 'syz.4.3150': attribute type 6 has an invalid length.
[  364.336047][T16984] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  364.347016][T16983] netlink: 'syz.4.3150': attribute type 5 has an invalid length.
[  364.392436][T16983] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3150'.
[  364.417014][T16938] vxcan1 speed is unknown, defaulting to 1000
[  366.293776][    C1] net_ratelimit: 9955 callbacks suppressed
[  366.293799][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  366.312329][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  366.324897][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  366.337435][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  366.350072][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  366.362691][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  366.375250][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  366.387793][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  366.400409][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  366.413098][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  368.103220][    C1] sched: DL replenish lagged too much
[  371.303400][    C1] net_ratelimit: 10136 callbacks suppressed
[  371.303424][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  371.321873][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  371.334452][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  371.346999][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  371.359498][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  371.372741][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  371.385249][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  371.397771][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  371.410250][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  371.422686][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  376.313590][    C1] net_ratelimit: 10460 callbacks suppressed
[  376.313623][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  376.332098][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  376.344534][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  376.357008][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  376.369529][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  376.382061][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  376.394519][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  376.406951][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  376.419533][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  376.432168][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  381.323631][    C1] net_ratelimit: 10151 callbacks suppressed
[  381.323654][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  381.342035][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  381.355237][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  381.367742][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  381.380294][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  381.392830][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  381.405245][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  381.417734][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  381.430288][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  381.442750][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  386.333832][    C1] net_ratelimit: 10416 callbacks suppressed
[  386.333856][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  386.352488][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  386.365128][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  386.377609][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  386.390174][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  386.402750][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  386.415373][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  386.427855][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  386.440360][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  386.453031][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  391.343350][    C1] net_ratelimit: 10201 callbacks suppressed
[  391.343375][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  391.361860][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  391.374390][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  391.386938][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  391.399530][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  391.412001][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  391.424444][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  391.437040][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  391.449622][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  391.462178][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  396.353560][    C1] net_ratelimit: 10334 callbacks suppressed
[  396.353586][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  396.372227][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  396.385730][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  396.398251][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  396.410805][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  396.423446][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  396.435925][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  396.448442][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  396.461062][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  396.473574][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  401.363579][    C1] net_ratelimit: 9975 callbacks suppressed
[  401.363610][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  401.382036][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  401.394487][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  401.406975][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  401.419499][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  401.431931][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  401.444325][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  401.456767][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  401.469261][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  401.481768][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.373418][    C1] net_ratelimit: 10547 callbacks suppressed
[  406.373443][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  406.391829][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.404379][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.416911][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.429433][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.441853][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  406.454425][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  406.466946][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  406.479390][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  406.491836][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  411.383416][    C1] net_ratelimit: 10424 callbacks suppressed
[  411.383440][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  411.402036][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  411.414575][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  411.427028][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  411.439605][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  411.452153][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  411.464612][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  411.477071][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  411.489557][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  411.502141][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  416.393353][    C1] net_ratelimit: 10331 callbacks suppressed
[  416.393375][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  416.411903][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  416.424380][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  416.436834][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  416.449398][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  416.462085][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  416.474538][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  416.487126][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  416.499675][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  416.512151][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  421.403370][    C1] net_ratelimit: 10214 callbacks suppressed
[  421.403392][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  421.421812][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  421.434265][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  421.446859][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  421.459406][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  421.472016][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  421.484472][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  421.497030][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  421.509639][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  421.522205][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  426.413722][    C1] net_ratelimit: 10229 callbacks suppressed
[  426.413747][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  426.432308][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  426.444805][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  426.457307][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  426.469809][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  426.482357][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  426.494909][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  426.507380][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  426.519951][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  426.532523][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  431.424005][    C1] net_ratelimit: 10061 callbacks suppressed
[  431.424029][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  431.443466][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  431.456123][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  431.468687][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  431.481283][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  431.493874][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  431.506499][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  431.519157][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  431.531736][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  431.544369][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  436.433304][    C1] net_ratelimit: 10189 callbacks suppressed
[  436.433328][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  436.451953][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  436.464472][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  436.477030][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  436.489494][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  436.502032][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  436.516120][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  436.528677][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  436.541247][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  436.553802][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  440.445235][ T5860] Bluetooth: hci6: command 0x0406 tx timeout
[  441.443281][    C1] net_ratelimit: 10559 callbacks suppressed
[  441.443305][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.452747][T14981] bond4: (slave ip6gretap1): failed to get link speed/duplex
[  441.461750][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.462309][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.462756][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.463110][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  441.463638][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  441.464069][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  441.464416][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  441.464920][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.453349][    C1] net_ratelimit: 10852 callbacks suppressed
[  446.453381][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.471804][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  446.484295][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  446.496821][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  446.509269][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  446.521683][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.534125][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.546818][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.559308][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  446.571850][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  451.463205][    C1] net_ratelimit: 10371 callbacks suppressed
[  451.463229][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  451.481765][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  451.494317][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  451.506866][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  451.520634][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  451.533302][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  451.545870][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  451.558364][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  451.570833][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  451.583494][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  455.412642][ T5861] Bluetooth: hci0: command 0x0406 tx timeout
[  456.473709][    C1] net_ratelimit: 10069 callbacks suppressed
[  456.473734][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  456.492196][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  456.504736][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  456.517304][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  456.529933][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  456.542399][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  456.554854][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  456.567382][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  456.579791][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  456.592176][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  461.483384][    C1] net_ratelimit: 10103 callbacks suppressed
[  461.483409][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  461.501966][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  461.514659][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  461.527136][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  461.539599][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  461.552072][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  461.564649][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  461.577158][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  461.589749][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  461.602316][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  466.493336][    C1] net_ratelimit: 10029 callbacks suppressed
[  466.493361][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  466.512042][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  466.524507][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  466.536975][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  466.549462][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  466.562069][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  466.574737][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  466.587294][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  466.599767][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  466.612295][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  471.503555][    C1] net_ratelimit: 10331 callbacks suppressed
[  471.503581][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  471.522238][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  471.534705][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  471.547269][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  471.559820][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  471.571876][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  471.571898][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P16938/1:b..l
[  471.572528][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=62917, q=1448 ncpus=2)
[  471.572558][    C1] task:syz.5.3137      state:R  running task     stack:26152 pid:16938 tgid:16936 ppid:14766  task_flags:0x400140 flags:0x00004006
[  471.572639][    C1] Call Trace:
[  471.572647][    C1]  <TASK>
[  471.572666][    C1]  __schedule+0x16f5/0x4d00
[  471.572716][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  471.572752][    C1]  ? preempt_schedule_irq+0xb5/0x150
[  471.572782][    C1]  ? __pfx___schedule+0x10/0x10
[  471.572823][    C1]  ? preempt_schedule_irq+0xaa/0x150
[  471.572851][    C1]  preempt_schedule_irq+0xb5/0x150
[  471.572875][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  471.572899][    C1]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[  471.572946][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  471.572977][    C1]  irqentry_exit+0x6f/0x90
[  471.572999][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  471.573030][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  471.573055][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 9b 93 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  471.573075][    C1] RSP: 0018:ffffc9000bbdee58 EFLAGS: 00000206
[  471.573095][    C1] RAX: 6d65f4e2aea2a300 RBX: 0000000000000000 RCX: 6d65f4e2aea2a300
[  471.573113][    C1] RDX: 0000000000000000 RSI: ffffffff8db83b34 RDI: ffffffff8be28c00
[  471.573129][    C1] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5
[  471.573154][    C1] R10: ffffc9000bbdf018 R11: ffffffff81ad0050 R12: 0000000000000002
[  471.573169][    C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246
[  471.573188][    C1]  ? unwind_next_frame+0xa5/0x2390
[  471.573215][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  471.573248][    C1]  ? unwind_next_frame+0xa5/0x2390
[  471.573295][    C1]  ? unwind_next_frame+0xa5/0x2390
[  471.573321][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.573346][    C1]  ? unwind_next_frame+0xa5/0x2390
[  471.573372][    C1]  unwind_next_frame+0xc2/0x2390
[  471.573397][    C1]  ? unwind_next_frame+0xa5/0x2390
[  471.573431][    C1]  ? unwind_next_frame+0xa5/0x2390
[  471.573459][    C1]  ? do_syscall_64+0xfa/0x3b0
[  471.573491][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  471.573524][    C1]  arch_stack_walk+0x11c/0x150
[  471.573561][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.573592][    C1]  stack_trace_save+0x9c/0xe0
[  471.573623][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  471.573661][    C1]  ? stack_depot_save_flags+0x40/0x900
[  471.573692][    C1]  kasan_save_track+0x3e/0x80
[  471.573721][    C1]  ? kasan_save_track+0x3e/0x80
[  471.573748][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  471.573775][    C1]  ? __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  471.573808][    C1]  ? kstrdup+0x42/0x100
[  471.573829][    C1]  ? __kernfs_new_node+0x9c/0x7e0
[  471.573851][    C1]  ? kernfs_new_node+0x102/0x210
[  471.573873][    C1]  ? __kernfs_create_file+0x4b/0x2e0
[  471.573901][    C1]  ? sysfs_add_file_mode_ns+0x238/0x300
[  471.573931][    C1]  ? internal_create_group+0x66d/0x1110
[  471.573952][    C1]  ? sysfs_create_groups+0x59/0x120
[  471.573972][    C1]  ? ib_setup_port_attrs+0xd96/0x2070
[  471.574002][    C1]  ? add_one_compat_dev+0x3d6/0x5c0
[  471.574028][    C1]  ? rdma_dev_init_net+0x1dd/0x270
[  471.574053][    C1]  ? ops_init+0x359/0x5c0
[  471.574081][    C1]  ? setup_net+0x219/0x4b0
[  471.574106][    C1]  ? copy_net_ns+0x31b/0x4d0
[  471.574132][    C1]  ? create_new_namespaces+0x3f3/0x720
[  471.574163][    C1]  ? unshare_nsproxy_namespaces+0x11c/0x170
[  471.574186][    C1]  ? ksys_unshare+0x4c8/0x8c0
[  471.574216][    C1]  ? __x64_sys_unshare+0x38/0x50
[  471.574245][    C1]  ? do_syscall_64+0xfa/0x3b0
[  471.574268][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.574337][    C1]  __kasan_kmalloc+0x93/0xb0
[  471.574371][    C1]  __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  471.574404][    C1]  ? __kernfs_new_node+0x9c/0x7e0
[  471.574434][    C1]  kstrdup+0x42/0x100
[  471.574460][    C1]  __kernfs_new_node+0x9c/0x7e0
[  471.574483][    C1]  ? __lock_acquire+0xab9/0xd20
[  471.574515][    C1]  ? __pfx___kernfs_new_node+0x10/0x10
[  471.574541][    C1]  ? kernfs_root+0x1c/0x230
[  471.574570][    C1]  ? kernfs_root+0x1c/0x230
[  471.574592][    C1]  ? kernfs_root+0x1c/0x230
[  471.574611][    C1]  ? kernfs_root+0x1c/0x230
[  471.574639][    C1]  kernfs_new_node+0x102/0x210
[  471.574670][    C1]  __kernfs_create_file+0x4b/0x2e0
[  471.574704][    C1]  sysfs_add_file_mode_ns+0x238/0x300
[  471.574748][    C1]  internal_create_group+0x66d/0x1110
[  471.574784][    C1]  ? kobject_add+0x155/0x220
[  471.574814][    C1]  ? __pfx_internal_create_group+0x10/0x10
[  471.574843][    C1]  ? rcu_is_watching+0x15/0xb0
[  471.574875][    C1]  sysfs_create_groups+0x59/0x120
[  471.574901][    C1]  ib_setup_port_attrs+0xd96/0x2070
[  471.574969][    C1]  ? __pfx_ib_setup_port_attrs+0x10/0x10
[  471.575002][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  471.575035][    C1]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  471.575083][    C1]  ? device_add+0x70b/0xb50
[  471.575122][    C1]  add_one_compat_dev+0x3d6/0x5c0
[  471.575164][    C1]  rdma_dev_init_net+0x1dd/0x270
[  471.575193][    C1]  ? __pfx_rdma_dev_init_net+0x10/0x10
[  471.575234][    C1]  ops_init+0x359/0x5c0
[  471.575278][    C1]  setup_net+0x219/0x4b0
[  471.575310][    C1]  ? __pfx_setup_net+0x10/0x10
[  471.575342][    C1]  ? copy_net_ns+0x304/0x4d0
[  471.575370][    C1]  ? down_read_killable+0x1d1/0x350
[  471.575405][    C1]  copy_net_ns+0x31b/0x4d0
[  471.575439][    C1]  create_new_namespaces+0x3f3/0x720
[  471.575471][    C1]  ? security_capable+0x7e/0x2e0
[  471.575505][    C1]  unshare_nsproxy_namespaces+0x11c/0x170
[  471.575535][    C1]  ksys_unshare+0x4c8/0x8c0
[  471.575575][    C1]  ? __pfx_ksys_unshare+0x10/0x10
[  471.575607][    C1]  ? rcu_is_watching+0x15/0xb0
[  471.575646][    C1]  __x64_sys_unshare+0x38/0x50
[  471.575677][    C1]  do_syscall_64+0xfa/0x3b0
[  471.575701][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  471.575724][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.575747][    C1]  ? clear_bhb_loop+0x60/0xb0
[  471.575775][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.575798][    C1] RIP: 0033:0x7f545fd8e9a9
[  471.575818][    C1] RSP: 002b:00007f5460bc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  471.575842][    C1] RAX: ffffffffffffffda RBX: 00007f545ffb6080 RCX: 00007f545fd8e9a9
[  471.575859][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  471.575873][    C1] RBP: 00007f545fe10d69 R08: 0000000000000000 R09: 0000000000000000
[  471.575888][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  471.575902][    C1] R13: 0000000000000000 R14: 00007f545ffb6080 R15: 00007ffc62f988c8
[  471.575939][    C1]  </TASK>
[  471.575950][    C1] rcu: rcu_preempt kthread starved for 3744 jiffies! g62917 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  471.575975][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  471.575987][    C1] rcu: RCU grace-period kthread stack dump:
[  471.575996][    C1] task:rcu_preempt     state:R  running task     stack:27128 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  471.576071][    C1] Call Trace:
[  471.576079][    C1]  <TASK>
[  471.576093][    C1]  __schedule+0x16f5/0x4d00
[  471.576125][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  471.576173][    C1]  ? schedule+0x165/0x360
[  471.576196][    C1]  ? __lock_acquire+0xab9/0xd20
[  471.576220][    C1]  ? __pfx___schedule+0x10/0x10
[  471.576262][    C1]  ? schedule+0x91/0x360
[  471.576288][    C1]  schedule+0x165/0x360
[  471.576318][    C1]  schedule_timeout+0x12b/0x270
[  471.576351][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  471.576381][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  471.576418][    C1]  ? __pfx_process_timeout+0x10/0x10
[  471.576456][    C1]  ? prepare_to_swait_event+0x341/0x380
[  471.576497][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[  471.576537][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  471.576563][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  471.576584][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  471.576626][    C1]  ? finish_swait+0xcd/0x1f0
[  471.576661][    C1]  rcu_gp_kthread+0x99/0x390
[  471.576688][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  471.576713][    C1]  ? __kthread_parkme+0x7b/0x200
[  471.576742][    C1]  ? __kthread_parkme+0x1a1/0x200
[  471.576779][    C1]  kthread+0x70e/0x8a0
[  471.576814][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  471.576837][    C1]  ? __pfx_kthread+0x10/0x10
[  471.576871][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  471.576906][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  471.576927][    C1]  ? __pfx_kthread+0x10/0x10
[  471.576961][    C1]  ret_from_fork+0x3fc/0x770
[  471.576989][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  471.577020][    C1]  ? __switch_to_asm+0x39/0x70
[  471.577049][    C1]  ? __switch_to_asm+0x33/0x70
[  471.577077][    C1]  ? __pfx_kthread+0x10/0x10
[  471.577111][    C1]  ret_from_fork_asm+0x1a/0x30
[  471.577165][    C1]  </TASK>
[  471.577175][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  471.577198][    C1] Sending NMI from CPU 1 to CPUs 0:
[  471.577234][    C0] NMI backtrace for cpu 0
[  471.577255][    C0] CPU: 0 UID: 0 PID: 3415 Comm: kworker/R-bat_e Not tainted 6.16.0-rc6-syzkaller-00145-g14822f782700 #0 PREEMPT(full) 
[  471.577278][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  471.577290][    C0] Workqueue: bat_events batadv_tt_purge
[  471.577309][    C0] RIP: 0010:stack_trace_consume_entry+0x0/0x280
[  471.577335][    C0] Code: 75 0e 48 8d 65 f0 5b 41 5e 5d c3 cc cc cc cc cc e8 b5 87 c0 09 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 ba 00 00
[  471.577351][    C0] RSP: 0018:ffffc90000006c80 EFLAGS: 00000286
[  471.577366][    C0] RAX: ffffffff8a50bb18 RBX: ffffc90000006d40 RCX: 6ce01deceb53b200
[  471.577380][    C0] RDX: 0000000000000001 RSI: ffffffff8a50bb18 RDI: ffffc90000006d40
[  471.577392][    C0] RBP: ffffc90000006d10 R08: ffffc90000007538 R09: 0000000000000000
[  471.577411][    C0] R10: ffffc90000006cd8 R11: ffffffff81ad0050 R12: ffff888030c98000
[  471.577425][    C0] R13: ffff8880430ce3c0 R14: ffffffff81ad0050 R15: ffffc90000006c88
[  471.577438][    C0] FS:  0000000000000000(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000
[  471.577452][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  471.577463][    C0] CR2: 000055557058d5c8 CR3: 000000000df38000 CR4: 00000000003526f0
[  471.577480][    C0] Call Trace:
[  471.577486][    C0]  <IRQ>
[  471.577492][    C0]  arch_stack_walk+0x110/0x150
[  471.577519][    C0]  ? br_nf_pre_routing_finish_ipv6+0x948/0xd00
[  471.577548][    C0]  stack_trace_save+0x9c/0xe0
[  471.577573][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  471.577608][    C0]  ? stack_depot_save_flags+0x40/0x900
[  471.577628][    C0]  kasan_save_track+0x3e/0x80
[  471.577649][    C0]  ? kasan_save_track+0x3e/0x80
[  471.577670][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  471.577693][    C0]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  471.577717][    C0]  ? kmalloc_reserve+0xbd/0x290
[  471.577741][    C0]  ? __alloc_skb+0x142/0x2d0
[  471.577763][    C0]  ? fdb_notify+0xa6/0x160
[  471.577778][    C0]  ? br_fdb_update+0x4c8/0x690
[  471.577793][    C0]  ? br_handle_frame_finish+0x573/0x19b0
[  471.577814][    C0]  ? br_nf_hook_thresh+0x3c3/0x4a0
[  471.577864][    C0]  __kasan_slab_alloc+0x6c/0x80
[  471.577889][    C0]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  471.577915][    C0]  ? kmalloc_reserve+0xbd/0x290
[  471.577942][    C0]  kmalloc_reserve+0xbd/0x290
[  471.577969][    C0]  __alloc_skb+0x142/0x2d0
[  471.577996][    C0]  fdb_notify+0xa6/0x160
[  471.578013][    C0]  br_fdb_update+0x4c8/0x690
[  471.578033][    C0]  ? __pfx_br_fdb_update+0x10/0x10
[  471.578057][    C0]  br_handle_frame_finish+0x573/0x19b0
[  471.578087][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  471.578117][    C0]  ? ip6t_do_table+0x1db/0x1560
[  471.578145][    C0]  ? nf_hook_slow+0x176/0x220
[  471.578171][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  471.578194][    C0]  br_nf_hook_thresh+0x3c3/0x4a0
[  471.578222][    C0]  ? __pfx_br_nf_hook_thresh+0x10/0x10
[  471.578245][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  471.578267][    C0]  ? nf_nat_ipv6_in+0x1fc/0x2b0
[  471.578295][    C0]  br_nf_pre_routing_finish_ipv6+0x948/0xd00
[  471.578319][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  471.578347][    C0]  ? br_nf_pre_routing_ipv6+0x42f/0x6b0
[  471.578371][    C0]  br_nf_pre_routing_ipv6+0x37e/0x6b0
[  471.578403][    C0]  ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10
[  471.578429][    C0]  ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10
[  471.578453][    C0]  ? br_nf_pre_routing+0x720/0x1470
[  471.578480][    C0]  ? __pfx_br_nf_pre_routing+0x10/0x10
[  471.578501][    C0]  br_handle_frame+0x982/0x14c0
[  471.578530][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  471.578551][    C0]  ? rcu_lockdep_current_cpu_online+0x37/0x120
[  471.578578][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  471.578599][    C0]  ? __pfx_rcu_read_lock_bh_held+0x10/0x10
[  471.578627][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  471.578650][    C0]  __netif_receive_skb_core+0x10de/0x4180
[  471.578678][    C0]  ? ip6_mc_input+0x9c3/0xbe0
[  471.578702][    C0]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  471.578722][    C0]  ? ip6_rcv_finish+0x29a/0x2d0
[  471.578751][    C0]  ? NF_HOOK+0x30c/0x3a0
[  471.578776][    C0]  ? skb_orphan+0xaf/0xd0
[  471.578799][    C0]  ? process_backlog+0x2d5/0x14f0
[  471.578823][    C0]  ? process_backlog+0x2d5/0x14f0
[  471.578848][    C0]  __netif_receive_skb+0x72/0x380
[  471.578871][    C0]  ? process_backlog+0x2d5/0x14f0
[  471.578895][    C0]  process_backlog+0x60e/0x14f0
[  471.578927][    C0]  ? __pfx_process_backlog+0x10/0x10
[  471.578950][    C0]  ? do_raw_spin_lock+0x121/0x290
[  471.578979][    C0]  __napi_poll+0xc7/0x480
[  471.578997][    C0]  ? net_rx_action+0x46d/0xe30
[  471.579022][    C0]  net_rx_action+0x707/0xe30
[  471.579056][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  471.579101][    C0]  handle_softirqs+0x286/0x870
[  471.579124][    C0]  ? do_softirq+0xec/0x180
[  471.579147][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  471.579172][    C0]  ? batadv_tt_purge+0x4d1/0x9e0
[  471.579190][    C0]  do_softirq+0xec/0x180
[  471.579208][    C0]  </IRQ>
[  471.579213][    C0]  <TASK>
[  471.579220][    C0]  ? __pfx_do_softirq+0x10/0x10
[  471.579245][    C0]  ? lockdep_softirqs_on+0x13b/0x1c0
[  471.579263][    C0]  __local_bh_enable_ip+0x17d/0x1c0
[  471.579284][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  471.579305][    C0]  ? do_raw_spin_unlock+0x122/0x240
[  471.579331][    C0]  ? batadv_tt_purge+0x4d1/0x9e0
[  471.579349][    C0]  batadv_tt_purge+0x4d1/0x9e0
[  471.579370][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  471.579391][    C0]  process_scheduled_works+0xae1/0x17b0
[  471.579434][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  471.579461][    C0]  ? assign_work+0x381/0x410
[  471.579483][    C0]  rescuer_thread+0x53c/0xdd0
[  471.579509][    C0]  ? rescuer_thread+0xbb/0xdd0
[  471.579543][    C0]  kthread+0x70e/0x8a0
[  471.579569][    C0]  ? __pfx_rescuer_thread+0x10/0x10
[  471.579592][    C0]  ? __pfx_kthread+0x10/0x10
[  471.579618][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  471.579646][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  471.579663][    C0]  ? __pfx_kthread+0x10/0x10
[  471.579688][    C0]  ret_from_fork+0x3fc/0x770
[  471.579708][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  471.579730][    C0]  ? __switch_to_asm+0x39/0x70
[  471.579753][    C0]  ? __switch_to_asm+0x33/0x70
[  471.579775][    C0]  ? __pfx_kthread+0x10/0x10
[  471.579800][    C0]  ret_from_fork_asm+0x1a/0x30
[  471.579834][    C0]  </TASK>
[  473.089869][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  473.102367][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  473.114860][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  473.127528][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  473.139980][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  476.513477][    C1] net_ratelimit: 7115 callbacks suppressed
[  476.513500][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  476.531877][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  476.544352][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  476.556842][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  476.569356][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  476.581798][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  476.594309][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  476.606803][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:37:a3:d3:f4:81, vlan:0)
[  476.619259][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  476.631676][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  481.523361][    C1] net_ratelimit: 9950 callbacks suppressed
[  481.523386][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  481.541851][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  481.554319][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)