last executing test programs:

7m27.022402733s ago: executing program 1 (id=2180):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000002c0)=@ethtool_sset_info={0x37, 0xfff, 0x81}}) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3ef}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_LINK={0x2, 0x5, r6}]}, 0x30}}, 0x884)

7m26.801501055s ago: executing program 1 (id=2182):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x1, 0x1, 0x3, 0xa5c, 0x802}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b32, &(0x7f0000000040)) (async)
ioctl(r0, 0x8b32, &(0x7f0000000040))
r1 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x12, @dev, @mcast2, 0x10, 0x0, 0x0, 0x7}})
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="000000000000f40be4d594754ae19ca211a70000170000000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r2, @ANYBLOB="000000000000000066000000000000001800000000000000000000000000000095000000000000002e91c7c357fded2d95"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r2, @ANYBLOB="000000000000000066000000000000001800000000000000000000000000000095000000000000002e91c7c357fded2d95"], &(0x7f0000000000)='GPL\x00'}, 0x94)

7m26.545624476s ago: executing program 1 (id=2185):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0xfe}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x4000880)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private0, 0x5}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}]}, &(0x7f0000000180)=0x30)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x44, r3, 0x1, 0x0, 0xfffffffe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xffff0ff1}]}, 0x44}}, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, r4, 0x4, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0xc0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

7m26.402530216s ago: executing program 1 (id=2186):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = accept$unix(r0, 0x0, &(0x7f0000000140)=0x4f)
sendto$unix(r6, &(0x7f0000000280)="39141337cfa3a48b8832babe411deefdf74b277b003ea6a63ea233597827d301c4b8eda085a210d6691d9d7b9e94096c8f1bddccee9c92822179490f00d1d93c27950ed9573d31d3448ed6ce4a546bdf8845f390bcca831b29519540f7144d187cf4da7bbb1f078a31dc24e6e3dd66acb2c2f4dd90838f204bed94f838fdcf071380dfc29aa3a7", 0x87, 0x24000004, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020702500000000002020207baaf8ff00000000bd4106000000000047010000f8ffffffb702000008000000b7030000000000008500002dd10000001801000020786c250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e61, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10)
listen(r5, 0x7)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0)
socket(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) (async)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
accept$unix(r0, 0x0, &(0x7f0000000140)=0x4f) (async)
sendto$unix(r6, &(0x7f0000000280)="39141337cfa3a48b8832babe411deefdf74b277b003ea6a63ea233597827d301c4b8eda085a210d6691d9d7b9e94096c8f1bddccee9c92822179490f00d1d93c27950ed9573d31d3448ed6ce4a546bdf8845f390bcca831b29519540f7144d187cf4da7bbb1f078a31dc24e6e3dd66acb2c2f4dd90838f204bed94f838fdcf071380dfc29aa3a7", 0x87, 0x24000004, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020702500000000002020207baaf8ff00000000bd4106000000000047010000f8ffffffb702000008000000b7030000000000008500002dd10000001801000020786c250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e61, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) (async)
listen(r5, 0x7) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "1cb315f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}]}}]}, 0x154}}, 0x0) (async)

7m26.129794271s ago: executing program 1 (id=2187):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe21, 0x4, @private2={0xfc, 0x2, '\x00', 0xe}, 0x7}, 0x1c) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008035"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, 0xffffffffffffffff, 0x5, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r3, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) (async)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1ff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x48010)
ioctl(r1, 0x8b2c, &(0x7f0000000040))

7m25.908455367s ago: executing program 1 (id=2188):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async)
getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000003500)=[{&(0x7f0000000300)="aaf9cbbebec1c21b2b97fe8378b1a6f9b362b0ce28d64dcae763a477474cd92e109fff8cbeb8da39e130c0e87879555d7d691c5ffa0ac0", 0x37}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f0000003500)=[{&(0x7f0000000300)="aaf9cbbebec1c21b2b97fe8378b1a6f9b362b0ce28d64dcae763a477474cd92e109fff8cbeb8da39e130c0e87879555d7d691c5ffa0ac0", 0x37}], 0x1)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a)

7m25.630797869s ago: executing program 32 (id=2188):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async)
getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000003500)=[{&(0x7f0000000300)="aaf9cbbebec1c21b2b97fe8378b1a6f9b362b0ce28d64dcae763a477474cd92e109fff8cbeb8da39e130c0e87879555d7d691c5ffa0ac0", 0x37}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f0000003500)=[{&(0x7f0000000300)="aaf9cbbebec1c21b2b97fe8378b1a6f9b362b0ce28d64dcae763a477474cd92e109fff8cbeb8da39e130c0e87879555d7d691c5ffa0ac0", 0x37}], 0x1)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a)

6.231718819s ago: executing program 5 (id=6590):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000002000010027bd7000000000000a0080800000f4031600000014000200fc02"], 0x30}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000240)="89e7ee2c78dad9b4b473fec988ca", 0xe}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bbfc11", 0x19}], 0x2)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x1, 0x0, 0x3, 0x1fb, 0x3, 0xf}, 0x1c)
recvmmsg$unix(r5, &(0x7f00000019c0)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/116, 0x74}], 0x1, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000940)=""/112, 0x70}, {&(0x7f00000009c0)=""/149, 0x95}, {&(0x7f0000000a80)=""/106, 0x6a}, {&(0x7f0000000b00)=""/168, 0xa8}, {&(0x7f0000000bc0)=""/166, 0xa6}, {&(0x7f0000000c80)=""/11, 0xb}], 0x6, &(0x7f0000000d40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000d80), 0x6e, &(0x7f0000000e00), 0x0, &(0x7f0000000e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x158}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001040)=""/201, 0xc9}, {&(0x7f0000001140)=""/84, 0x54}], 0x2, &(0x7f0000001200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f0000001340)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000013c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001400)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001480)=""/193, 0xc1}, {&(0x7f0000001580)=""/7, 0x7}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/134, 0x86}, {&(0x7f0000001680)=""/189, 0xbd}, {&(0x7f0000001740)=""/237, 0xed}, {&(0x7f0000001840)=""/201, 0xc9}], 0x7}}], 0x6, 0x0, 0x0)
r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5)
ioctl$SIOCAX25ADDUID(r7, 0x89e1, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_buf(r1, 0x0, 0x2a, &(0x7f0000000440)=""/148, &(0x7f0000000380)=0x94)
socket$vsock_stream(0x28, 0x1, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r8)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000077ce0d49aba939c8e799a7beb465162d95d69a19c29bbb77832935dfc0d15abf598e59fc851d7f26698bcd565081bbcf456aa47c", @ANYRES16=r9, @ANYBLOB="01002abd7000ffdbdf252500000005002e00f70000000a0001007770616e3100000005002b0002000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800)
r10 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x30, r7, 0xa63e000)
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000040)={0x5, 0x5, 0x2, 0x0, 0x0, [{{r5}, 0x200}, {{r6}, 0x4}]})
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xfffffffffffffec5, &(0x7f0000000400)=[{&(0x7f0000000180)="ce8a5529d0b116e4bdcabe1a4f7efe63735974911cfa004830be0d491ac9db4effbcbee3a1c0a08df56ef4100b768dc8ab9a791fd550d48d40d4d28ffc3ddff10d10bdd58209f39b0fda65b215ad16c751ad8206a6727101e5da687efdece4", 0x5f}], 0x1}}], 0x1, 0x9200000000000000)

6.038781481s ago: executing program 2 (id=6592):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c00"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000003c000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)
r6 = socket(0x10, 0x3, 0x0)
close(r5)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x104}}, 0x2404c840)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg(r8, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0xffb9, 0x4004044)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in6=@empty}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000000180)=0xe8)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xeb, 0x1, 0x62}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)

4.012995598s ago: executing program 2 (id=6598):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, 0x0, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x10, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

4.01157946s ago: executing program 5 (id=6599):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req={0x2, 0xff, 0x17d, 0xe}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006200028008004040bdf144ba"], 0x3c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000001b00))
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x102a, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)="f5", 0x1}], 0x1}}], 0x2, 0x2400c004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r8, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000007c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000003c80)={0x1030, r8, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_OURS={0x100c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x1030}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x1a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaa2734aaaaaaaa000000008100450007000000000000008809"], 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x0, 0x70, 0x0, [{@dev}, {@dev}, {@initdev}, {@multicast1}, {@remote}, {@broadcast}, {@initdev}]}})
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0xb, &(0x7f00000004c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x1}], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000002c80)=""/4096, 0x41000, 0x4, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2d097, r0, 0x0, &(0x7f0000000600)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000000700)=r10)
sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0)

3.860837782s ago: executing program 5 (id=6602):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x18)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
setsockopt$sock_int(r4, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x200008, 0x3, 0x0, 0x0, 0x5e6d, 0x9}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100))
openat$cgroup_ro(r3, &(0x7f0000000240)='memory.events\x00', 0x7a05, 0x1700)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f00000006c0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)}, 0x2021)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

3.77837346s ago: executing program 2 (id=6603):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$inet(0xa, 0x801, 0x84) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b2101008000000000000000000004"], 0x48) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async, rerun: 64)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req={0x6, 0x58273004, 0x4, 0x6}, 0x10) (async)
write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f7508003900", 0x25)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000090000000300002001"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0x25) (async)
r10 = accept(r1, 0x0, 0x0)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="08002dbd7000ffdbdf253700000008000300", @ANYRES32=r12, @ANYBLOB="08002201ac0100000800570001800000080057000600000008005700000000000800a10803000000080027000200000008002600161700010800a00025830000"], 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x45061) (async)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x48850, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
shutdown(r1, 0x2)
close(r0)

3.757101425s ago: executing program 3 (id=6606):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f60)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00 \x00'/21], 0x48)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x9, @remote, 0x5}], 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000), 0x4)
setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r2, r2], 0x0, 0x10, 0x1000}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000875a0000040000000100000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r4, @ANYBLOB="0000000000000000000000008000"/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r5, 0x0, 0x8000000}, 0x27)

3.627034229s ago: executing program 2 (id=6607):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @sched_cls}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f000000000000000000e400", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000200), 0x10)
sendmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000000400"/16, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r1, @ANYRES64=0xea60, @ANYBLOB="0000000040ead119a336af4748b674ee9944aed9605a968946b63b655af397aba4b0552051102448e10bd8f08d19c0be2d6355c73b4d98d2e6df9263770be74aa535705c0c4c1c6cc40772ac968d6589461ab4758762b02166800c8e0a301a420200a9f85ee6089fd3df28"], 0x48}}, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='/'], 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x20, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0x1}, {0x4, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x161042, 0x0)
ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000000380)={0x2, &(0x7f0000000100)=[{0x50, 0x8, 0x0, 0x7}, {0x6, 0x93, 0x0, 0x2}]})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
write$ppp(r10, &(0x7f0000000000)="4fa1efc4c7aa", 0x6)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r11)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r12 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmmsg$inet(r8, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0xffffffffffffff55, 0x0, 0x8, {r13, @multicast2, @private=0xa010102}}}], 0x20}}], 0x27, 0x8880)

3.562027755s ago: executing program 4 (id=6609):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x1000000, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001800c00028005000100000000002c000180140003"], 0x50}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x9, 0xb2, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x401, 'syz1\x00'})
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0)
mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r6, 0x5c2a7000)
openat$cgroup_int(r6, &(0x7f0000000040)='cpu.weight.nice\x00', 0x2, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)

3.507418797s ago: executing program 0 (id=6610):
socket$inet_icmp(0x2, 0x2, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8e32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000008c0)={0x1, 0x0, 0x1000, 0x53, &(0x7f0000000740)="a0d840aef6cbab6fc90051467fc377be32d13c7898ac9dd9345b07e3d551e33eeb84591b3ff8c27f40dc51e43fd7c1650308322fa58ee728368deddb10297c045ea8005362b68e3343c1a6172ba593a1886354", 0xdf, 0x0, &(0x7f00000007c0)="09d27189435836da704c293588e61ee04ecef6323c298acab3543d1aaf62c5ea2862256faeed65d1bfa7bdbba8ceaaee61bbc11e9941ee9dca3c35ab23e0cb930e71bd17ddfbdc2734dbacf60fb50f5f9a62fc69cff65199481cceefa382b0a26cf4f539336c86dacaf4bbc9ece3c1db8ae0d78572c246fcba0da7c12df5dd959e33bfb1d4680a10aa98726644aba13d896e1e6d808d11e2e1182bb6faf23c114147936c5fe61d8a7deca7b4594afdcca7498590e4988d092a5cd899fb1eb4fdea755991be13d9c024629982fff1865cc8988533b07a9bdd02db5dce98b226"})
write$tun(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="000080f3ffffffffffffaaaaaaaaaa038100080008004961008d006500000506907800000000ac1414bb4410bb10fffffffb0000000300000002863e000000030207843a0972420010fe7818baa15dc604aaf30bb9f82c02072468107b62000acdb3fef8488a22190602050eb61492be868222efc075028d00000000000000000000000000000000000000004e2100004e22000000000000000200000000a82782fe8ed6368c58e2cc94637f17603fb0e7b8917333a1f929126e4035cfa90f75bbd7e7a776637ba3575c63556adcfeb65984230ba489e028cbf2a9e748ad5253d1671614e84f31fffe51b82934e96512510c0000000000"], 0xa3)
connect$llc(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(fcrypt-generic)\x00'}, 0x58)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c000180060001002af300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x6, 0xfff1}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r10 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r10, &(0x7f0000000480)="80230baeec67ba64e7daf68823259ee8831700800000210ee7decd7a0000786349bc2dcb571563d2946032cf7679077928f7aa30377af049738da20da4cbfff73659c16edb55adcfac4a4d368c93eae2442e00ccc584a2526605977f14e1539756ef51c3335835dbb7b72a455f9b24118fe8eb354365fe5bd7d56906586d3042b17ba35ed7efcb564a6e2edda91b865f83abb1c3a437376878e93baa0e9e80a2874eeb46c015f97aa1", 0xa9, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

3.315916656s ago: executing program 4 (id=6611):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg(r3, &(0x7f0000009140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='K', 0x1}], 0x1}}], 0x1, 0x40000)
sendmmsg(r3, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000cc0)="dc", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[], 0x10}}], 0x2, 0x4048814)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000100000000850000009e0000009500"/32], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080), 0x0)
readv(r4, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1)
setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)

2.876224296s ago: executing program 5 (id=6612):
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x80000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c001780040001"], 0x138}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c)
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1120, 0x37}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x24048001)
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x88a8}, @val={0x0, 0x0, 0x19, 0x7, 0x101, 0x3}, @ipv6=@tcp={0x2, 0x6, '4\be', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @dev={0xfe, 0x80, '\x00', 0x2d}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x2, 0x0, 0x3}}}}}, 0x4a)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x0)

2.665298131s ago: executing program 3 (id=6613):
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="8a9156de0000000000000000000000001811000093865f07a8abac0cb2be1cd700631a78c579ecef1a4bc5733d8be7be7dd3d579988b9436c9edfefa961865252a9ff3cc21409720ab17245ac2863da5423a9edc963da921c791747a467f742f33d942e54d5d9cfd7bd476c18e74578271bd4a127f947efd03f43e86ed929f088a137f87e680", @ANYRES32=r1, @ANYRESDEC=r1], 0x0, 0xffffaa1b, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1a00000008000000080000000180000004800000", @ANYRES32=r2, @ANYBLOB="0200000000000004000000000000000000040000006f6fb4b0167a515ee5868703f3dcdd2357d1b0ea82a3fcf88e4d2b799333059fd40f7b90f7dc88633f6895ee36ac1d3dffd170bb20dcf663e3c2382370911368082bf9b8eba65ab82aec098c09f17aedd0e2768ff24b54d5c003461ba8423f01cd548cedf5a9c262172e3b266cf0aecec363d2beb226a437a9d8e73faeea76e683a062a934551c952271673bbfcac097d0072cc1fd6e02478e600efdec8cfb713a1392fa556bfd8c5332e08a5f3ea0ad63f44d0cd196e315acd115b0", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000500"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DONE(r4, 0x0, 0xc9, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0xe0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'bond_slave_0\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x6, 0x8}, {0x0, 0x5, 0x4}, {0x0, 0x2, 0x1}, 0x98, 0x9}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [0x0, 0xffffff00], 'wg1\x00', 'gre0\x00', {0xff}, {0xff}}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x7ff, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x358)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800003acbc87054daa0779866b98156ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10)
bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
socket$tipc(0x1e, 0x0, 0x0)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffffffd}}, 0x10)
r8 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r8, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4)
r9 = accept4(r3, 0x0, 0x0, 0x800)
recvmsg$qrtr(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8)
pipe(&(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
tee(r11, r10, 0xa000000000000000, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000280), &(0x7f0000000400)='%pK    \x00'}, 0x20)

1.296362993s ago: executing program 4 (id=6614):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x105, &(0x7f0000001700)=""/261, 0x40f00, 0x48}, 0x94)

1.25764263s ago: executing program 5 (id=6615):
syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b007d624d339fa9d22cb6de324ff596f"}]}}}}}}}}, 0x0) (async)
socket(0x0, 0x2, 0xfffffffc)

1.198469252s ago: executing program 2 (id=6616):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7000000080000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x64, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e3de3d804ccca4030000000000000000000000009543501eebd9e28958764400001712f8"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000440))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_mreqn(r7, 0x0, 0x24, 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.197810635s ago: executing program 3 (id=6617):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0)
sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x601, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x40)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x44, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x50880}, 0x4080)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x8)
getsockopt$ax25_int(r3, 0x101, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
writev(r2, &(0x7f0000000700)=[{&(0x7f0000000100)="0232e6003953b008fefa8ce2d4c1c866321c084bb58c3dd1666a19af3c73704fb3e64365", 0x24}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffef5, &(0x7f00000001c0)=[{&(0x7f0000000800)="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", 0x9c}], 0x1}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000100000000000000000008000000ac1e1f0105000d"], 0x20}], 0x1}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000d80)=""/190, 0xbe}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)=""/226, 0xe2}], 0x5}, 0x3}], 0x1, 0x40010001, 0x0)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r2, 0x4, '\x00', 0x0, r2, 0x1, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@jmp={0x5, 0x0, 0x4, 0x1, 0x7, 0xffffffffffffffff, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x92, &(0x7f0000000400)=""/146, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x37, r2, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x0, 0x9, 0x10}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000640)=[r2, r2, r2], &(0x7f0000000980)=[{0x3, 0x2, 0xc, 0x2}, {0x4, 0x5, 0x5, 0x6}], 0x10, 0x5}, 0x94)
sendmmsg$inet(r6, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="0c1874268c0000bd3f4c2ee4c3e4fdfea05e8e04a1a42a60557fb65e7388442bcb546079b365311561bb95fb1aff7128184ea4ca0f437142f62b8f3200e2eb47d44e67968ef5a2b24506d380fd62fac61aa99133d75de2774168ed1224dee2e650791e490c7c3f514a1b39c61d40894d45c2205a1d988b31cd6dc9ba0908fb6e4cd35d064b5085cd470e8282240c64159ba4b6b084446629f37ec8700db7d6dea32c10c93f7f19f2de78816ca02e67b7ab59f59fdf2bea3156f5938df17892e404e8ae", 0x6e}], 0x1, 0x0, 0x0, 0x2000000}}], 0x800000000000369, 0x44000)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x84, @rand_addr=0x640100bf, 0x4e20, 0x3, 'nq\x00', 0x1, 0xa7e, 0x70}, 0x2c)

1.173374423s ago: executing program 4 (id=6618):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xba82}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000280)={0xfffffffffffffffd, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r2, 0xa21, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffb}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x3}}}, 0x24}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c0002800600020020"], 0x50}, 0x1, 0x0, 0x0, 0x2400c81c}, 0x20000010)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socketpair(0x1d, 0x2, 0x6, &(0x7f0000000180))

1.140937343s ago: executing program 3 (id=6619):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r1=>0x0})
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
socket(0x11, 0x3, 0x0)
unshare(0x22020600)
socket(0x15, 0x5, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000)

1.08598423s ago: executing program 0 (id=6620):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c0, 0x108, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x2f0, 0xffffffff, 0xffffffff, 0x2f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xffffff00], 'bond_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x3a, 0x2, 0x6, 0x8}, 0x0, 0xe0, 0x108, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x8, {0xffc0000000}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3b}}}, {{@ipv6={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'syzkaller0\x00', 'bridge_slave_1\x00', {}, {}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2c, 0x10, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000080)=""/262, 0x37, 0x106, 0x9}, 0x28)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010000000000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="4000000010800000280012800e0001006970366772657461700000001400028006000e00"], 0x48}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="110000001d00070f000000000000000007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071107c000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x79}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xd}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

1.030578847s ago: executing program 5 (id=6621):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r2, 0xb852, 0x0, 0x8, 0x926c, 0xa}, 0x14)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200400c5, 0x0, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$igmp(0x2, 0x3, 0x2)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
r6 = socket(0xa, 0x3, 0xff)
sendto$inet6(r6, 0x0, 0x0, 0x10000880, &(0x7f0000000140)={0xa, 0x4e60, 0x2, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x2}, 0x1c)
unshare(0x62040200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3a, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x20, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d04a0f1d0d47b2", 0x10)

932.238608ms ago: executing program 3 (id=6622):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}}, 0x0, 0x42, 0x0, 0x1, 0x4}, 0x28)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r0}, 0x18)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket$nl_netfilter(0x10, 0x3, 0xc)
write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270000004600003f00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c400f0e94a6f05020000d58838000300000000000000"], 0xfd6c)
shutdown(r0, 0x1)

862.43931ms ago: executing program 0 (id=6623):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) (async)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000))
r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ebf6ffff0000000008000000911191000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) (rerun: 32)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 32)
bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async, rerun: 32)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYBLOB="e245bbf6b04f9e9e62a058bf192f328a30d695c3dcd50f206d0edeb8861a0d046d18f49cc0dc7a68500051384f2bfdc399fb942e09eb7c9706863c7a86082594dc036c05b8eb34b4a192a254d22915785be99c06091e8d8f", @ANYRESHEX=r4], 0x12f4}, 0x1, 0x0, 0x0, 0x4044014}, 0x4000)
recvmsg$unix(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0) (async)
recvmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4081, 0xff1}], 0x1}, 0x1) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) (async)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000008a", @ANYRESDEC, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000180)=<r10=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=<r11=>0x0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, 'NLBL_CIPSOv4\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, 'NLBL_CIPSOv4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4)
socket$netlink(0x10, 0x3, 0x0) (async)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)

844.70039ms ago: executing program 4 (id=6624):
r0 = socket$igmp6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @loopback, 0x10001}, 0x1c) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000c, 0x11, r1, 0x80000000) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0xe, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r3 = socket$rxrpc(0x21, 0x2, 0x6)
recvfrom$rxrpc(r3, &(0x7f0000000180)=""/2, 0x2, 0x2101, &(0x7f00000001c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x1845, @private0, 0xe}}, 0x24) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6084000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)=@deltaction={0x2b0, 0x31, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfd64}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc0a}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x61}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa0000000}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x40}, 0x20000011)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000580)='hybla', 0x5) (async)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f00000005c0), &(0x7f0000000600)=0xc) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000640)=[@mss={0x2, 0x4d}, @sack_perm, @sack_perm, @sack_perm, @timestamp, @window={0x3, 0x2, 0x2803}, @timestamp, @sack_perm, @mss={0x2, 0x9}], 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_SOCK_GET(r5, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x158, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfb15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffe01}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x97}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff80000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5518}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async)
r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000900), 0x0)
setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000940)=0x4, 0x4) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000009, 0x30, r2, 0xc200000)
r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000b00)={0x0, r2}, 0x8)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x45, 0x0, 0x4a, 0x4}]}, {0x0, [0x0, 0x0]}}, &(0x7f00000009c0)=""/217, 0x38, 0xd9, 0x0, 0xc, 0x10000, @value=r7}, 0x28) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), r5)
sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r10, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x91}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20}, 0x4)
ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000c80)) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r5)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r11, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44880}, 0x4000001) (async)
getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000e00)={'broute\x00', 0x0, 0x0, 0x0, [0x7a80, 0xc2e, 0xf9, 0x9, 0x8001, 0xfffffffffffff800]}, &(0x7f0000000e80)=0x78)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000ec0)={0x3, [0x0, 0x0, 0x0]}) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000f00)={@any, 0x9996}) (async)
sendmsg$FOU_CMD_ADD(r8, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, 0x0, 0xb18, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

530.264145ms ago: executing program 0 (id=6625):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000380), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newneigh={0x38, 0x1c, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x18}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00'}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x38}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
accept(0xffffffffffffffff, &(0x7f0000000640)=@x25={0x9, @remote}, &(0x7f0000000540)=0x80)
socket$unix(0x1, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x800)
socket$inet_icmp(0x2, 0x2, 0x1)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x4, 0x9, 0xb, @mcast1, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x8000, 0x8, 0xfffffffc, 0x3}})

422.731156ms ago: executing program 3 (id=6626):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x10}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001500)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffff, 0xb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x4}, {0x0, 0x1000, 0x3, 0x4, 0x8}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4208}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)={0x16c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @CTA_ID={0x8}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x830}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd00}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80a}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x881}, @CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xed5e}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x401}]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x7}]}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2004}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000000}, 0x31970cf637540c02)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x1f4, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x6}]}}}]}, 0x3c}}, 0x0)

419.043381ms ago: executing program 2 (id=6627):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x3, 0x4, 0x7, 0x0, 0x0, 0x1], [0x7, 0xf6]}})
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r0, 0x1, 0x20000000, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfa}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}]}, 0x3c}}, 0x42080)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x7, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x81}, @TCA_ROUTE4_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000880)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x9, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}}, 0x4008800)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r8 = socket(0x10, 0x3, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0x4}, {0xe, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40c04}, 0x40c4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000240)={'tunl0\x00', <r10=>0x0, 0x80, 0x7800, 0x45, 0x6, {{0x33, 0x4, 0x0, 0x6, 0xcc, 0x68, 0x0, 0x9b, 0x2f, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x10}, {[@generic={0x82, 0xb, "c64bd40a83b06f544e"}, @end, @timestamp_addr={0x44, 0x24, 0x8b, 0x1, 0x8, [{@multicast1, 0x8}, {@broadcast, 0x1}, {@broadcast, 0x2}, {@broadcast, 0x6}]}, @generic={0x86, 0x12, "2d05af259fdbed815b2e29c5bccb82d9"}, @cipso={0x86, 0x75, 0x2, [{0x7, 0xb, "ad194f04961fcfa350"}, {0x6, 0x8, "3c473a423ef7"}, {0x7, 0x6, "95fa7140"}, {0x2, 0xe, "95a8d5c8b54418b7c08467c8"}, {0x7, 0x12, "dcc181b1f26254bd21b02f5a1454faf8"}, {0x0, 0xc, "66f32a7c7bff35d52099"}, {0x0, 0x11, "f18d8d60047369a0283b2610d6c45e"}, {0x0, 0xb, "babe5df17a6dc866d2"}, {0x0, 0xe, "74fff56b24d039c989eae829"}]}]}}}}})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={<r11=>0x0, @rand_addr, @multicast2}, &(0x7f00000001c0)=0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0}}, 0x10)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r14=>0x0}}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r15=>0x0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl0\x00', <r16=>0x0, 0x8, 0x1, 0x4, 0x68, {{0xf, 0x4, 0x0, 0x8, 0x3c, 0x65, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@lsrr={0x83, 0x27, 0xce, [@broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, @empty, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @local, @multicast2]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl1\x00', <r17=>0x0, 0x7800, 0x40, 0x9, 0x488eb6e8, {{0x3b, 0x4, 0x0, 0x6, 0xec, 0x64, 0x0, 0x10, 0x29, 0x0, @remote, @private=0xa010102, {[@ra={0x94, 0x4}, @generic={0x88, 0xe, "1c66fceadabd84cd9d2afe0d"}, @noop, @timestamp_addr={0x44, 0xc, 0x20, 0x1, 0x2, [{@private=0xa010101, 0x9}]}, @timestamp_prespec={0x44, 0x34, 0xdc, 0x3, 0x8, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9}, {@empty, 0x7}, {@private=0xa010100, 0x2b}, {@loopback, 0x6}, {@multicast2, 0x4}]}, @timestamp={0x44, 0x18, 0x9c, 0x0, 0x3, [0x3, 0x1, 0x9, 0x6, 0xa]}, @rr={0x7, 0xb, 0x3e, [@multicast1, @remote]}, @lsrr={0x83, 0x1b, 0x44, [@empty, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @cipso={0x86, 0x47, 0x2, [{0x5, 0x4, "51e3"}, {0x2, 0x10, "d46e10af18bd9cb6cea59ddcf4c6"}, {0x2, 0x5, "0e0f2b"}, {0x0, 0x5, "dfba28"}, {0x0, 0x9, "e62f439b46a603"}, {0x1, 0x10, "de1eb04c3bc4cfc4170d9b16cb10"}, {0x5, 0xa, "bf610d57599bd9c4"}]}]}}}}})
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x1a0, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x80001}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000800000000000000000000711027000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

304.841867ms ago: executing program 0 (id=6628):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x1e, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x487}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0x6, 0x2, 0xa, 0x44, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x10, 0xc526, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000200)=[0xffffffffffffffff], &(0x7f0000000240)=[{0x4, 0x3, 0xb, 0x6}, {0x4, 0x5, 0xa, 0x7}, {0x3, 0x5, 0x5, 0x2}, {0x0, 0x1, 0x4, 0x1}, {0x0, 0x3, 0x4, 0x2}], 0x10, 0x3ff}, 0x94)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x8, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x4}, @typedef={0x5}, @volatile={0xc, 0x0, 0x0, 0x9, 0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x1}, @union={0xe, 0x3, 0x0, 0x5, 0x1, 0x8, [{0x3, 0x1}, {0x4, 0x4, 0x10}, {0xc, 0x3, 0xa}]}]}, {0x0, [0x0, 0x5f, 0x0, 0x30, 0x0, 0x30]}}, &(0x7f0000000400)=""/178, 0x80, 0xb2, 0x0, 0xffff8000, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x59}, 0x94)

304.10957ms ago: executing program 4 (id=6629):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000300)={0x40, 0x0, 0x0, 0x0, 0x65})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0000a2af42f9a3bc8cc779aef42a760008001300", @ANYRES32=r3, @ANYBLOB="0c0f00000500005e16137ef8a3eadcd8c1fb8ba5f3dc06e2837e2b4490a30b0c8621b7e748b6cc8b2c8295c060dbcea19317a4a3f689e40e513e"], 0x28}, 0x1, 0x0, 0x0, 0x40008c0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
syz_emit_ethernet(0xaf, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0017010000000000000000000000000000ff0200000000000000000000000000010004c9101a"], 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x94, r1, 0x400, 0x70bd29, 0x25dfdbbb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x2, 0x0, 0x0, {0x81, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x6, 0x7}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x300, 0x3, 0x5, 0x0, {0x80000001, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x7, 0xf}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="085f995d02df"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1000, 0x1, 0x0, 0x0, {0x1000000000000, 0x4, 0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0xffffff81, 0x7}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8014}, 0x20048010)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x30, 0x1ff}, 0x8)
sendto$inet6(r5, &(0x7f00000004c0)="d7", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000180)=0x4)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x2000000000032, 0xffffffffffffffff, 0x0)

262.840853ms ago: executing program 0 (id=6630):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)={0x77359400})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010202001400020077673200000000000000000000000000090001"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) (async)
sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, 0x0, 0x28004818)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x40)

0s ago: executing program 33 (id=6629):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000300)={0x40, 0x0, 0x0, 0x0, 0x65})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0000a2af42f9a3bc8cc779aef42a760008001300", @ANYRES32=r3, @ANYBLOB="0c0f00000500005e16137ef8a3eadcd8c1fb8ba5f3dc06e2837e2b4490a30b0c8621b7e748b6cc8b2c8295c060dbcea19317a4a3f689e40e513e"], 0x28}, 0x1, 0x0, 0x0, 0x40008c0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
syz_emit_ethernet(0xaf, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0017010000000000000000000000000000ff0200000000000000000000000000010004c9101a"], 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x94, r1, 0x400, 0x70bd29, 0x25dfdbbb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x2, 0x0, 0x0, {0x81, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x6, 0x7}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x300, 0x3, 0x5, 0x0, {0x80000001, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x7, 0xf}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="085f995d02df"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1000, 0x1, 0x0, 0x0, {0x1000000000000, 0x4, 0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0xffffff81, 0x7}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8014}, 0x20048010)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x30, 0x1ff}, 0x8)
sendto$inet6(r5, &(0x7f00000004c0)="d7", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000180)=0x4)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x2000000000032, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  567.782846][T26678] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5362'.
[  567.810328][T26558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  567.895366][T26687] veth1_to_bridge: Caught tx_queue_len zero misconfig
[  568.127179][T26558] hsr_slave_0: entered promiscuous mode
[  568.135569][T26558] hsr_slave_1: entered promiscuous mode
[  568.142075][T26558] debugfs: 'hsr0' already exists in 'hsr'
[  568.148224][T26558] Cannot create hsr debugfs directory
[  568.167466][T26694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5366'.
[  568.195159][T26694] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5366'.
[  568.234693][T26695] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  568.242248][T26695] syzkaller0: entered promiscuous mode
[  568.249089][T26695] syzkaller0: entered allmulticast mode
[  568.270645][T26695] tipc: Resetting bearer <eth:syzkaller0>
[  568.304622][T26695] tipc: Resetting bearer <eth:syzkaller0>
[  568.339816][T26695] tipc: Disabling bearer <eth:syzkaller0>
[  568.483105][T26706] sctp: [Deprecated]: syz.2.5372 (pid 26706) Use of int in max_burst socket option.
[  568.483105][T26706] Use struct sctp_assoc_value instead
[  568.499254][T26707] syz.3.5370: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  568.520562][T26707] CPU: 0 UID: 0 PID: 26707 Comm: syz.3.5370 Not tainted syzkaller #0 PREEMPT(full) 
[  568.520586][T26707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  568.520595][T26707] Call Trace:
[  568.520601][T26707]  <TASK>
[  568.520607][T26707]  dump_stack_lvl+0x189/0x250
[  568.520635][T26707]  ? __pfx_dump_stack_lvl+0x10/0x10
[  568.520653][T26707]  ? __pfx__printk+0x10/0x10
[  568.520671][T26707]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  568.520692][T26707]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  568.520715][T26707]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  568.520733][T26707]  warn_alloc+0x214/0x310
[  568.520755][T26707]  ? stack_depot_save_flags+0x40/0x860
[  568.520783][T26707]  ? __pfx_warn_alloc+0x10/0x10
[  568.520807][T26707]  ? kasan_save_track+0x3e/0x80
[  568.520829][T26707]  ? __kasan_kmalloc+0x93/0xb0
[  568.520852][T26707]  ? xsk_setsockopt+0x4dc/0x8d0
[  568.520872][T26707]  ? do_sock_setsockopt+0x17c/0x1b0
[  568.520887][T26707]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  568.520900][T26707]  ? do_syscall_64+0xfa/0xfa0
[  568.520918][T26707]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.520941][T26707]  __vmalloc_node_range_noprof+0x125/0x12d0
[  568.521003][T26707]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  568.521029][T26707]  ? __kasan_kmalloc+0x93/0xb0
[  568.521058][T26707]  vmalloc_user_noprof+0xad/0xf0
[  568.521080][T26707]  ? xskq_create+0xbf/0x170
[  568.521104][T26707]  xskq_create+0xbf/0x170
[  568.521130][T26707]  xsk_init_queue+0xb0/0x110
[  568.521155][T26707]  xsk_setsockopt+0x4dc/0x8d0
[  568.521177][T26707]  ? __pfx_xsk_setsockopt+0x10/0x10
[  568.521200][T26707]  ? __pfx_aa_sk_perm+0x10/0x10
[  568.521223][T26707]  ? aa_sock_opt_perm+0xff/0x1b0
[  568.521249][T26707]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  568.521265][T26707]  ? __pfx_xsk_setsockopt+0x10/0x10
[  568.521293][T26707]  do_sock_setsockopt+0x17c/0x1b0
[  568.521316][T26707]  __x64_sys_setsockopt+0x13f/0x1b0
[  568.521341][T26707]  do_syscall_64+0xfa/0xfa0
[  568.521362][T26707]  ? lockdep_hardirqs_on+0x9c/0x150
[  568.521384][T26707]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.521400][T26707]  ? clear_bhb_loop+0x60/0xb0
[  568.521421][T26707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.521438][T26707] RIP: 0033:0x7f1fab98f6c9
[  568.521454][T26707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  568.521468][T26707] RSP: 002b:00007f1fac818038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  568.521487][T26707] RAX: ffffffffffffffda RBX: 00007f1fabbe5fa0 RCX: 00007f1fab98f6c9
[  568.521500][T26707] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  568.521511][T26707] RBP: 00007f1faba11f91 R08: 0000000000000004 R09: 0000000000000000
[  568.521522][T26707] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  568.521533][T26707] R13: 00007f1fabbe6038 R14: 00007f1fabbe5fa0 R15: 00007fffcbd95d38
[  568.521567][T26707]  </TASK>
[  568.522632][T26707] Mem-Info:
[  568.830095][T26558] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  568.830955][T26707] active_anon:9507 inactive_anon:0 isolated_anon:0
[  568.830955][T26707]  active_file:3564 inactive_file:40087 isolated_file:0
[  568.830955][T26707]  unevictable:768 dirty:217 writeback:0
[  568.830955][T26707]  slab_reclaimable:12785 slab_unreclaimable:160667
[  568.830955][T26707]  mapped:29460 shmem:1381 pagetables:1048
[  568.830955][T26707]  sec_pagetables:0 bounce:0
[  568.830955][T26707]  kernel_misc_reclaimable:0
[  568.830955][T26707]  free:1247859 free_pcp:15442 free_cma:0
[  568.886468][T26707] Node 0 active_anon:38028kB inactive_anon:0kB active_file:14256kB inactive_file:160148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117840kB dirty:864kB writeback:0kB shmem:3988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14640kB pagetables:4064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  568.923887][T26707] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  568.983636][T26707] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  569.018523][T26707] lowmem_reserve[]: 0 2505 2505 2505 2505
[  569.034281][T26707] Node 0 DMA32 free:1071868kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38168kB inactive_anon:0kB active_file:14256kB inactive_file:160148kB unevictable:1536kB writepending:864kB zspages:0kB present:3129332kB managed:2565132kB mlocked:0kB bounce:0kB free_pcp:52156kB local_pcp:21172kB free_cma:0kB
[  569.076715][T26558] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.092101][T26707] lowmem_reserve[]: 0 0 0 0 0
[  569.098005][T26707] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  569.128485][T26707] lowmem_reserve[]: 0 0 0 0 0
[  569.133242][T26707] Node 1 Normal free:3904208kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10048kB local_pcp:0kB free_cma:0kB
[  569.168542][T26707] lowmem_reserve[]: 0 0 0 0 0
[  569.176510][T26707] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  569.192360][T26707] Node 0 DMA32: 1111*4kB (UM) 610*8kB (UME) 453*16kB (UM) 740*32kB (UME) 127*64kB (UME) 186*128kB (UME) 71*256kB (UM) 55*512kB (UME) 45*1024kB (UME) 3*2048kB (UME) 220*4096kB (UM) = 1071868kB
[  569.214551][T26558] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.239031][T26729] netlink: 'syz.4.5375': attribute type 9 has an invalid length.
[  569.249777][T26707] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  569.262533][T26707] Node 1 Normal: 140*4kB (UME) 36*8kB (UME) 38*16kB (UME) 213*32kB (UME) 58*64kB (UME) 14*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3904208kB
[  569.284202][T26707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  569.294758][T26707] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  569.304435][T26707] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  569.340186][T26707] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  569.347390][T26558] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.359800][T26731] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5376'.
[  569.373411][T26707] 45005 total pagecache pages
[  569.378119][T26707] 0 pages in swap cache
[  569.387934][T26707] Free swap  = 124996kB
[  569.392111][T26707] Total swap = 124996kB
[  569.402992][T26707] 2097051 pages RAM
[  569.409002][T26707] 0 pages HighMem/MovableOnly
[  569.419131][T26707] 424126 pages reserved
[  569.424367][T26707] 0 pages cma reserved
[  569.536174][T26741] sctp: [Deprecated]: syz.3.5382 (pid 26741) Use of int in max_burst socket option.
[  569.536174][T26741] Use struct sctp_assoc_value instead
[  569.634255][ T5824] Bluetooth: hci4: command tx timeout
[  569.675966][T26748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5380'.
[  569.765909][T26748] 8021q: adding VLAN 0 to HW filter on device bond8
[  569.785578][T26758] set match dimension is over the limit!
[  569.789766][T26759] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  569.798977][T26759] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  569.911606][T26558] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  569.958815][T26748] mac80211_hwsim hwsim51 syzkaller0: left promiscuous mode
[  569.973916][T26748] mac80211_hwsim hwsim51 syzkaller0: left allmulticast mode
[  569.984828][T26748] tipc: Resetting bearer <eth:syzkaller0>
[  569.991768][T26558] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  570.047933][T26558] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  570.082042][T26771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5386'.
[  570.108084][T26558] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  570.169203][T26785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5386'.
[  570.317335][T26775] ip6tnl4: entered allmulticast mode
[  570.580656][T26793] wg1 speed is unknown, defaulting to 1000
[  570.672413][T26558] 8021q: adding VLAN 0 to HW filter on device bond0
[  570.714847][T26558] 8021q: adding VLAN 0 to HW filter on device team0
[  570.745374][T16642] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.752540][T16642] bridge0: port 1(bridge_slave_0) entered forwarding state
[  570.798811][T16642] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.806077][T16642] bridge0: port 2(bridge_slave_1) entered forwarding state
[  571.009813][T26820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5395'.
[  571.139788][T26820] 8021q: adding VLAN 0 to HW filter on device bond9
[  571.202708][T26828] bond0: left promiscuous mode
[  571.239386][T26828] bond0: left allmulticast mode
[  571.285862][T26828] 8021q: adding VLAN 0 to HW filter on device bond0
[  571.328470][T26828] bond9: (slave bond0): Enslaving as an active interface with an up link
[  571.495938][T26831] bond9 (unregistering): (slave bond0): Releasing backup interface
[  571.515156][T26831] bond9 (unregistering): Released all slaves
[  571.661013][T26845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5400'.
[  571.684249][T26845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5400'.
[  571.684447][T26848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5400'.
[  571.724639][ T5824] Bluetooth: hci4: command tx timeout
[  571.726593][T26848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5400'.
[  573.526629][T26869] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5406'.
[  573.541268][T26869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5406'.
[  573.636200][T26871] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  573.682931][T26558] 8021q: adding VLAN 0 to HW filter on device batadv0
[  573.765418][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5405'.
[  573.978862][T26871] wg1 speed is unknown, defaulting to 1000
[  574.467360][T26890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  574.474659][T26890] IPv6: NLM_F_CREATE should be set when creating new route
[  574.603178][T26896] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5411'.
[  574.664439][T26558] veth0_vlan: entered promiscuous mode
[  574.725732][T26558] veth1_vlan: entered promiscuous mode
[  574.947998][T26558] veth0_macvtap: entered promiscuous mode
[  574.968656][T26901] wg1 speed is unknown, defaulting to 1000
[  574.969351][T26906] lo: entered promiscuous mode
[  575.018631][T26906] gre0: entered promiscuous mode
[  575.026139][T26906] gretap0: entered promiscuous mode
[  575.032455][T26906] erspan0: entered promiscuous mode
[  575.038541][T26906] erspan0: left allmulticast mode
[  575.047289][T26906] ip_vti0: entered promiscuous mode
[  575.054225][T26906] ip6_vti0: entered promiscuous mode
[  575.060977][T26906] sit0: entered promiscuous mode
[  575.069989][T26906] ip6tnl0: entered promiscuous mode
[  575.083958][T26906] ip6gre0: entered promiscuous mode
[  575.090727][T26906] syz_tun: entered promiscuous mode
[  575.097947][T26906] ip6gretap0: entered promiscuous mode
[  575.105170][T26906] bridge0: entered promiscuous mode
[  575.111265][T26906] .`: entered promiscuous mode
[  575.116438][T26906] bond_slave_0: entered promiscuous mode
[  575.122344][T26906] bond_slave_1: entered promiscuous mode
[  575.129058][T26906] dummy0: entered promiscuous mode
[  575.144445][T26906] 8021q: adding VLAN 0 to HW filter on device .`
[  575.154122][T26906] nlmon0: entered promiscuous mode
[  575.162175][T26906] caif0: entered promiscuous mode
[  575.167759][T26906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  575.491481][T26903] bond9: option arp_all_targets: invalid value (3)
[  575.503178][T26903] bond9 (unregistering): Released all slaves
[  575.607549][T26558] veth1_macvtap: entered promiscuous mode
[  575.676188][T26558] batman_adv: batadv0: Interface activated: batadv_slave_0
[  575.706458][T26558] batman_adv: batadv0: Interface activated: batadv_slave_1
[  575.788001][T19400] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  575.828772][T19400] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  575.846807][T26918] nbd: must specify at least one socket
[  575.857754][T19400] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  575.912418][T19400] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  575.940034][T26926] netlink: 'syz.4.5416': attribute type 18 has an invalid length.
[  576.165314][T26933] netlink: 'syz.4.5419': attribute type 1 has an invalid length.
[  576.174073][T26932] netlink: 'syz.4.5419': attribute type 1 has an invalid length.
[  576.411267][T26932] bond9: entered promiscuous mode
[  576.429524][T26932] bond9: entered allmulticast mode
[  576.449196][T26932] 8021q: adding VLAN 0 to HW filter on device bond9
[  576.483674][T26931] macvlan3: entered promiscuous mode
[  576.489011][T26931] macvlan3: entered allmulticast mode
[  576.516398][T26931] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  576.639154][T19399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  576.655704][T19399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  576.784133][T10340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  576.797596][T10340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  577.772498][T26988] wg1 speed is unknown, defaulting to 1000
[  577.796872][T26990] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20002
[  577.835687][T26996] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20002
[  578.251697][T16641] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  578.318559][T27015] netlink: 'syz.4.5438': attribute type 3 has an invalid length.
[  578.465868][T16641] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  578.536504][T27022] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  578.677874][T27028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5440'.
[  578.687950][T27028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5440'.
[  578.712211][T16641] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  578.871761][T27044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5445'.
[  579.011959][T16641] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  579.065757][T27048] ip6tnl2: entered allmulticast mode
[  579.073005][T27053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5448'.
[  579.109846][T27053] team0: entered promiscuous mode
[  579.115324][T27053] team_slave_0: entered promiscuous mode
[  579.121174][T27053] team_slave_1: entered promiscuous mode
[  579.150022][T27053] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  579.198437][T27053] team0: left promiscuous mode
[  579.209454][T27053] team_slave_0: left promiscuous mode
[  579.219413][T27053] team_slave_1: left promiscuous mode
[  579.229215][T27064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5450'.
[  579.270281][T27067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5447'.
[  579.357176][T27054] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  579.416880][T27067] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  579.460079][T27071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5451'.
[  579.525260][T27074] netlink: 'syz.4.5452': attribute type 16 has an invalid length.
[  579.546234][T27071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5451'.
[  579.585620][T27049] tipc: Resetting bearer <eth:syzkaller0>
[  579.639876][T27049] tipc: Disabling bearer <eth:syzkaller0>
[  579.691156][T27081] No such timeout policy "syz1"
[  579.910797][T27088] netlink: 'syz.5.5457': attribute type 1 has an invalid length.
[  579.936331][T27090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5456'.
[  580.036336][T27097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5460'.
[  580.412456][T16641] bond1 (unregistering): (slave gretap1): Releasing active interface
[  581.035833][T16641] bond0 (unregistering): Released all slaves
[  581.138192][T16641] bond1 (unregistering): Released all slaves
[  581.240993][T16641] bond2 (unregistering): Released all slaves
[  581.344898][T16641] bond3 (unregistering): (slave wireguard0): Releasing backup interface
[  581.353877][T16641] wireguard0: left promiscuous mode
[  581.360927][T16641] bond3 (unregistering): (slave wireguard1): Releasing backup interface
[  581.371107][T16641] bond3 (unregistering): Released all slaves
[  581.402909][T27093] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  581.414414][T27093] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  581.428984][T27093] bond1: (slave vcan1): making interface the new active one
[  581.437572][T27093] bond1: (slave vcan1): Enslaving as an active interface with an up link
[  581.490127][T27099] bond1: (slave vcan2): The slave device specified does not support setting the MAC address
[  581.503060][T27099] bond1: (slave vcan2): Enslaving as a backup interface with an up link
[  581.513832][T27101] 8021q: adding VLAN 0 to HW filter on device bond1
[  581.547990][T27105] batman_adv: batadv0: Adding interface: vlan3
[  581.556353][T27105] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  581.586378][T27105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  581.597697][T27105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.613219][T27105] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active
[  581.636186][T16641] : left promiscuous mode
[  581.787829][T16641] tipc: Left network mode
[  582.040639][T27132] tipc: Started in network mode
[  582.047993][T27132] tipc: Node identity eedc1889a813, cluster identity 4711
[  582.056181][T27132] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  582.161568][T27132] tipc: Disabling bearer <eth:syzkaller0>
[  582.243453][T27151] netlink: 'syz.2.5471': attribute type 8 has an invalid length.
[  582.285906][T27152] bond6: entered promiscuous mode
[  582.296185][T27152] 8021q: adding VLAN 0 to HW filter on device bond6
[  582.345821][T27164] Cannot find set identified by id 0 to match
[  582.465193][T27152] bond6 (unregistering): Released all slaves
[  582.680718][T27173] delete_channel: no stack
[  582.880783][T27190] block nbd3: Unsupported socket: should be TCP or UNIX.
[  582.898281][T27190] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  583.555436][T27197] batadv_slave_0: left promiscuous mode
[  583.569047][T27197] vxcan3: left allmulticast mode
[  583.575124][T27197] tipc: Resetting bearer <eth:syzkaller0>
[  583.737630][T27197] bond5: left promiscuous mode
[  583.763664][T27197] bridge3: left promiscuous mode
[  583.772976][T27197] bond5: left allmulticast mode
[  583.790097][T27197] bridge3: left allmulticast mode
[  583.804722][T27197] ip6tnl2: left promiscuous mode
[  583.811894][T27197] bond7: left promiscuous mode
[  583.820094][T27197] ip6tnl4: left allmulticast mode
[  583.827515][T27197] bond9: left promiscuous mode
[  583.832366][T27197] bond9: left allmulticast mode
[  583.871282][T16641] hsr_slave_0: left promiscuous mode
[  583.884815][T16641] hsr_slave_1: left promiscuous mode
[  583.957798][T16641] veth1_to_hsr: left allmulticast mode
[  583.963599][T16641] veth1_to_hsr: left promiscuous mode
[  585.409657][T27213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  585.418842][T27226] lo: Caught tx_queue_len zero misconfig
[  585.433072][T27226] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  585.509501][T27218] syzkaller0: entered promiscuous mode
[  585.525095][T27218] syzkaller0: entered allmulticast mode
[  585.535693][T27242] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode
[  585.570466][T27242] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode
[  585.590642][T27242] tipc: Resetting bearer <eth:syzkaller0>
[  585.654513][T27218] tipc: Resetting bearer <eth:syzkaller0>
[  585.736561][T27218] tipc: Disabling bearer <eth:syzkaller0>
[  585.869293][T27271] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  585.899199][T27271] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  586.237075][T27266] 
@0Ù: renamed from bond_slave_1
[  586.302726][T27278] __nla_validate_parse: 12 callbacks suppressed
[  586.302743][T27278] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5502'.
[  586.504141][T27288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5504'.
[  586.542729][T27288] xt_CT: You must specify a L4 protocol and not use inversions on it
[  586.698833][T27293] netlink: 'syz.4.5506': attribute type 29 has an invalid length.
[  586.715934][T27293] netlink: 'syz.4.5506': attribute type 29 has an invalid length.
[  586.758585][T27293] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5506'.
[  586.783191][T27297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5508'.
[  587.210536][T27297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5508'.
[  587.282955][T16641] IPVS: stop unused estimator thread 0...
[  587.389990][T27324] netlink: 'syz.4.5514': attribute type 1 has an invalid length.
[  587.648529][T27344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5517'.
[  587.669840][T27344] bridge_slave_1: left allmulticast mode
[  587.678172][T27344] bridge_slave_1: left promiscuous mode
[  587.685984][T27344] bridge0: port 2(bridge_slave_1) entered disabled state
[  587.697858][T27344] bridge_slave_0: left allmulticast mode
[  587.704527][T27344] bridge_slave_0: left promiscuous mode
[  587.710333][T27344] bridge0: port 1(bridge_slave_0) entered disabled state
[  587.720941][T27347] netlink: 'syz.0.5521': attribute type 13 has an invalid length.
[  587.759620][T27347] netlink: 'syz.0.5521': attribute type 17 has an invalid length.
[  588.051743][T27352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5523'.
[  588.152909][T27347] dummy0: left promiscuous mode
[  588.161680][T27347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  588.179593][ T5902] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  588.199482][T27355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5524'.
[  588.237468][T27355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5524'.
[  588.262444][T27349] wg1 speed is unknown, defaulting to 1000
[  588.290958][T27355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5524'.
[  588.476103][T10328] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  588.500544][T10328] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  588.603528][ T5902] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  588.620990][T27370] netlink: 'syz.3.5526': attribute type 5 has an invalid length.
[  588.751309][T27363] wg1 speed is unknown, defaulting to 1000
[  589.234229][ T5942] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  589.504746][T27400] syzkaller0: entered promiscuous mode
[  589.513968][T27400] syzkaller0: entered allmulticast mode
[  589.556423][T27404] vlan4: entered allmulticast mode
[  589.569245][T27404] veth1: entered allmulticast mode
[  590.139108][T27423] wg1 speed is unknown, defaulting to 1000
[  590.261880][T27428] wg1 speed is unknown, defaulting to 1000
[  590.520768][T27456] netlink: 'syz.2.5548': attribute type 11 has an invalid length.
[  591.254950][T27479] netlink: 'syz.2.5556': attribute type 1 has an invalid length.
[  591.428438][T27479] 8021q: adding VLAN 0 to HW filter on device bond9
[  591.436536][T27482] netlink: 'syz.2.5556': attribute type 41 has an invalid length.
[  591.603010][T27483] syzkaller0: entered promiscuous mode
[  591.621571][T27483] syzkaller0: entered allmulticast mode
[  591.979540][T27497] netlink: 'syz.2.5559': attribute type 11 has an invalid length.
[  591.987848][T27497] netlink: 'syz.2.5559': attribute type 11 has an invalid length.
[  591.996728][T27497] __nla_validate_parse: 15 callbacks suppressed
[  591.996744][T27497] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5559'.
[  592.596329][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  593.648767][T27505] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  594.168388][T27533] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5571'.
[  594.206836][T27529] wg1 speed is unknown, defaulting to 1000
[  594.370526][T27547] netlink: 404 bytes leftover after parsing attributes in process `syz.0.5574'.
[  594.397745][T27547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5574'.
[  594.428691][T27547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5574'.
[  594.452473][T27547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5574'.
[  594.728369][T27557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5576'.
[  594.812443][T27560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5577'.
[  594.958511][T27572] wg1 speed is unknown, defaulting to 1000
[  594.988352][T27569] wg1 speed is unknown, defaulting to 1000
[  595.049430][T27574] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  595.149533][T27576] IPVS: fo: FWM 3 0x00000003 - no destination available
[  595.199633][T27576] batadv0: Caught tx_queue_len zero misconfig
[  595.584610][T27594] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5584'.
[  595.652806][T27594] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5584'.
[  597.671482][T27623] xfrm2: entered allmulticast mode
[  597.941290][T27632] geneve1: entered promiscuous mode
[  598.038333][T27632] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  598.114833][T27636] syzkaller0: entered promiscuous mode
[  598.133651][T27636] syzkaller0: entered allmulticast mode
[  598.153237][T27638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5596'.
[  598.164519][T27638] openvswitch: netlink: Key type 58 is out of range max 32
[  598.232340][T27632] tipc: Resetting bearer <eth:syzkaller0>
[  598.276029][T27631] tipc: Resetting bearer <eth:syzkaller0>
[  598.332475][T27631] tipc: Disabling bearer <eth:syzkaller0>
[  598.367945][T27645] netlink: 'syz.0.5600': attribute type 3 has an invalid length.
[  598.393732][T27645] netlink: 'syz.0.5600': attribute type 3 has an invalid length.
[  598.647751][T27659] wg1 speed is unknown, defaulting to 1000
[  599.064381][T27671] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  599.690210][T27680] xt_policy: neither incoming nor outgoing policy selected
[  600.489681][T27702] netlink: 'syz.5.5616': attribute type 1 has an invalid length.
[  600.593994][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  600.697050][T27705] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5617'.
[  600.726026][T27705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5617'.
[  600.819505][T27705] bond10: option arp_validate: invalid value (24)
[  600.830378][T27705] bond10 (unregistering): Released all slaves
[  601.107900][T27716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  601.129552][T27716] syzkaller0: entered promiscuous mode
[  601.154085][T27716] syzkaller0: entered allmulticast mode
[  601.304631][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  601.365008][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  601.397975][T27717] tipc: Resetting bearer <eth:syzkaller0>
[  601.487904][T27717] tipc: Disabling bearer <eth:syzkaller0>
[  601.524503][T27736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5625'.
[  601.543560][T27736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5625'.
[  601.573136][T27737] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5626'.
[  601.593815][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  601.601760][T27736] netlink: 'syz.5.5625': attribute type 18 has an invalid length.
[  601.605989][T27738] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5626'.
[  601.697046][T27742] lo: Caught tx_queue_len zero misconfig
[  601.811512][T27746] netlink: 'syz.0.5628': attribute type 11 has an invalid length.
[  601.844219][T27746] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5628'.
[  601.881842][T27746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  601.890794][T27746] syzkaller0: entered promiscuous mode
[  601.897311][T27746] syzkaller0: entered allmulticast mode
[  601.936463][T27748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5629'.
[  602.006799][T27751] tipc: Resetting bearer <eth:syzkaller0>
[  602.032468][T27750] geneve4: entered promiscuous mode
[  602.400409][T27745] tipc: Resetting bearer <eth:syzkaller0>
[  602.438520][T27745] tipc: Disabling bearer <eth:syzkaller0>
[  602.461874][T27768] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5634'.
[  602.475354][T27771] veth1_vlan: left promiscuous mode
[  602.750866][T27782] tipc: Resetting bearer <eth:syzkaller0>
[  603.218023][T27789] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5640'.
[  603.559985][T27794] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  604.052982][T27814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5650'.
[  604.144902][T27822] syzkaller1: entered promiscuous mode
[  604.150498][T27822] syzkaller1: entered allmulticast mode
[  604.450386][T27834] 8021q: adding VLAN 0 to HW filter on device bond11
[  604.674931][T27844] wg1 speed is unknown, defaulting to 1000
[  604.721062][T27849] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5659'.
[  604.784464][T27862] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5662'.
[  606.230386][T27895] wg1 speed is unknown, defaulting to 1000
[  606.332046][T27926] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5678'.
[  606.440337][T27926] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5678'.
[  606.830735][T27945] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  606.832115][T27942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5682'.
[  606.868256][T27945] syzkaller1: entered promiscuous mode
[  606.874653][T27945] syzkaller1: entered allmulticast mode
[  607.491335][T27965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5690'.
[  607.621799][T27972] netlink: 'syz.2.5691': attribute type 1 has an invalid length.
[  607.757455][T27972] bond10: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  607.826658][T27972] 8021q: adding VLAN 0 to HW filter on device bond10
[  607.836583][T16640] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  607.901555][T27990] netlink: 'syz.0.5698': attribute type 5 has an invalid length.
[  607.932167][T27972] veth9: entered promiscuous mode
[  607.968678][T27972] bond10: (slave veth9): Enslaving as a backup interface with a down link
[  607.993784][T16640] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  608.066681][T27986] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  608.096852][T27983] syzkaller0: entered promiscuous mode
[  608.102758][T27983] syzkaller0: entered allmulticast mode
[  608.124143][T27983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5696'.
[  608.167598][T27983] tipc: Resetting bearer <eth:syzkaller0>
[  608.181360][T27983] Cannot find add_set index 2 as target
[  608.211892][T27982] tipc: Resetting bearer <eth:syzkaller0>
[  608.254291][T27982] tipc: Disabling bearer <eth:syzkaller0>
[  608.286319][T28016] netlink: 'syz.2.5701': attribute type 32 has an invalid length.
[  608.316947][T28016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5701'.
[  608.412077][T28016] bond11: Setting coupled_control to off (0)
[  608.599980][T27985] wg1 speed is unknown, defaulting to 1000
[  608.909264][T28059] netlink: 'syz.0.5712': attribute type 4 has an invalid length.
[  608.956718][T28059] netlink: 'syz.0.5712': attribute type 4 has an invalid length.
[  608.972532][T28063] TCP: TCP_TX_DELAY enabled
[  608.988455][T28064] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5714'.
[  609.360010][T28083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5719'.
[  609.431600][T28081] syzkaller1: entered promiscuous mode
[  609.437439][T28081] syzkaller1: entered allmulticast mode
[  610.287633][T28095] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5724'.
[  611.199858][T28104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5726'.
[  611.235010][T28100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5727'.
[  611.381365][T28113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5730'.
[  611.600919][T28122] FAULT_INJECTION: forcing a failure.
[  611.600919][T28122] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  611.650046][T28122] CPU: 0 UID: 0 PID: 28122 Comm: syz.2.5734 Not tainted syzkaller #0 PREEMPT(full) 
[  611.650070][T28122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  611.650080][T28122] Call Trace:
[  611.650088][T28122]  <TASK>
[  611.650096][T28122]  dump_stack_lvl+0x189/0x250
[  611.650123][T28122]  ? __pfx____ratelimit+0x10/0x10
[  611.650148][T28122]  ? __pfx_dump_stack_lvl+0x10/0x10
[  611.650170][T28122]  ? __pfx__printk+0x10/0x10
[  611.650189][T28122]  ? __might_fault+0xb0/0x130
[  611.650225][T28122]  should_fail_ex+0x414/0x560
[  611.650254][T28122]  _copy_from_user+0x2d/0xb0
[  611.650277][T28122]  ___sys_sendmsg+0x158/0x2a0
[  611.650300][T28122]  ? __pfx____sys_sendmsg+0x10/0x10
[  611.650357][T28122]  ? __fget_files+0x2a/0x420
[  611.650373][T28122]  ? __fget_files+0x3a0/0x420
[  611.650400][T28122]  __x64_sys_sendmsg+0x19b/0x260
[  611.650423][T28122]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  611.650453][T28122]  ? __pfx_ksys_write+0x10/0x10
[  611.650484][T28122]  ? do_syscall_64+0xbe/0xfa0
[  611.650512][T28122]  do_syscall_64+0xfa/0xfa0
[  611.650533][T28122]  ? lockdep_hardirqs_on+0x9c/0x150
[  611.650556][T28122]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.650572][T28122]  ? clear_bhb_loop+0x60/0xb0
[  611.650602][T28122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.650620][T28122] RIP: 0033:0x7f97d218f6c9
[  611.650635][T28122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  611.650650][T28122] RSP: 002b:00007f97d2fb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  611.650670][T28122] RAX: ffffffffffffffda RBX: 00007f97d23e5fa0 RCX: 00007f97d218f6c9
[  611.650683][T28122] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006
[  611.650694][T28122] RBP: 00007f97d2fb0090 R08: 0000000000000000 R09: 0000000000000000
[  611.650704][T28122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  611.650713][T28122] R13: 00007f97d23e6038 R14: 00007f97d23e5fa0 R15: 00007ffc267c5528
[  611.650743][T28122]  </TASK>
[  612.220336][T28150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5741'.
[  612.245614][T28150] netlink: 'syz.4.5741': attribute type 10 has an invalid length.
[  612.248520][T28143] wg1 speed is unknown, defaulting to 1000
[  612.284504][T28150] `: Cannot enslave team device to itself
[  612.479830][T28164] netlink: 'syz.4.5746': attribute type 4 has an invalid length.
[  612.491139][T28164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5746'.
[  612.806122][T28176] netlink: 'syz.4.5749': attribute type 29 has an invalid length.
[  612.839783][T28176] netlink: 'syz.4.5749': attribute type 29 has an invalid length.
[  612.889597][T28176] netlink: 392 bytes leftover after parsing attributes in process `syz.4.5749'.
[  613.127832][T28187] bond12: option min_links: invalid value (18446744073709551612)
[  613.136036][T28187] bond12: option min_links: allowed values 0 - 2147483647
[  613.149168][T28187] bond12 (unregistering): Released all slaves
[  613.194171][T28157] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  613.255149][T28191] bridge0: port 2(batadv2) entered blocking state
[  613.268064][T28191] bridge0: port 2(batadv2) entered disabled state
[  613.285271][T28191] batadv2: entered allmulticast mode
[  613.293950][T28191] batadv2: entered promiscuous mode
[  613.309879][T28192] bridge0: port 3(batadv3) entered blocking state
[  613.320468][T28192] bridge0: port 3(batadv3) entered disabled state
[  613.327939][T28192] batadv3: entered allmulticast mode
[  613.335859][T28192] batadv3: entered promiscuous mode
[  613.361326][T28204] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  613.491657][T28211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  613.714176][T10324] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  613.724003][T10324] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  613.762570][T28225] tunl0: entered promiscuous mode
[  613.784602][T28225] netlink: 'syz.4.5766': attribute type 4 has an invalid length.
[  613.804155][T10324] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  613.810490][T28225] __nla_validate_parse: 1 callbacks suppressed
[  613.810506][T28225] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5766'.
[  613.814045][T10324] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  613.904480][T28230] wg1 speed is unknown, defaulting to 1000
[  613.972450][T28233] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5767'.
[  614.221276][T28241] x_tables: duplicate underflow at hook 4
[  614.259113][T28236] wg1 speed is unknown, defaulting to 1000
[  614.295768][T28241] syz_tun: entered allmulticast mode
[  614.394853][T28245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5770'.
[  614.605037][T28245] syz_tun (unregistering): left allmulticast mode
[  614.672940][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  614.692100][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  614.700390][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  614.709309][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  614.717255][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  614.797409][T28253] bridge5: entered promiscuous mode
[  614.812954][T28253] bridge5: entered allmulticast mode
[  614.843720][T28243] wg1 speed is unknown, defaulting to 1000
[  614.872082][T28255] wg1 speed is unknown, defaulting to 1000
[  615.066256][T28246] wg1 speed is unknown, defaulting to 1000
[  615.336794][T28267] xfrm1: entered allmulticast mode
[  615.415441][T28272] netlink: 'syz.0.5776': attribute type 11 has an invalid length.
[  615.424460][T28272] netlink: 'syz.0.5776': attribute type 11 has an invalid length.
[  615.453391][T28272] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5776'.
[  615.825378][T28276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5778'.
[  615.979282][T28279] netlink: 'syz.0.5777': attribute type 4 has an invalid length.
[  615.997767][T28281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5779'.
[  616.055538][T28279] bond0 (unregistering): Released all slaves
[  616.106991][T28289] netlink: 'syz.5.5780': attribute type 1 has an invalid length.
[  616.587859][T28255] chnl_net:caif_netlink_parms(): no params data found
[  616.594465][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  616.834874][ T5824] Bluetooth: hci1: command tx timeout
[  616.861361][T28313] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20001
[  617.090889][T28255] bridge0: port 1(bridge_slave_0) entered blocking state
[  617.098648][T28255] bridge0: port 1(bridge_slave_0) entered disabled state
[  617.110608][T28255] bridge_slave_0: entered allmulticast mode
[  617.120207][T28255] bridge_slave_0: entered promiscuous mode
[  617.162629][T28255] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.171056][T28255] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.178591][T28255] bridge_slave_1: entered allmulticast mode
[  617.191612][T28255] bridge_slave_1: entered promiscuous mode
[  617.288602][T28255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  617.340261][T28255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  617.652991][T28255] team0: Port device team_slave_0 added
[  617.710845][T28255] team0: Port device team_slave_1 added
[  617.811273][T28335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  617.823691][T28336] syzkaller0: entered promiscuous mode
[  617.829483][T28336] syzkaller0: entered allmulticast mode
[  617.871871][T28255] batman_adv: batadv0: Adding interface: batadv_slave_0
[  617.879919][T28255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  617.908393][T28255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  617.930127][T28255] batman_adv: batadv0: Adding interface: batadv_slave_1
[  617.939693][T28255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  617.966418][T28255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  618.008960][T28340] tipc: Resetting bearer <eth:syzkaller0>
[  618.029446][T28333] tipc: Resetting bearer <eth:syzkaller0>
[  618.049550][T28333] tipc: Disabling bearer <eth:syzkaller0>
[  618.111681][T28255] hsr_slave_0: entered promiscuous mode
[  618.120829][T28255] hsr_slave_1: entered promiscuous mode
[  618.130930][T28255] debugfs: 'hsr0' already exists in 'hsr'
[  618.177280][T28255] Cannot create hsr debugfs directory
[  618.352049][T28349] pim6reg1: entered promiscuous mode
[  618.373671][T28349] pim6reg1: entered allmulticast mode
[  618.402302][T28354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5796'.
[  618.413770][T28354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5796'.
[  618.422714][T28354] nbd: socks must be embedded in a SOCK_ITEM attr
[  618.480094][T28356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5795'.
[  618.495027][T28356] batman_adv: batadv0: Removing interface: batadv_slave_0
[  618.502973][T28356] batman_adv: batadv0: Removing interface: batadv_slave_1
[  618.511167][T28356] batman_adv: batadv0: Removing interface: vlan5
[  618.616572][T28255] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  618.635764][T28255] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.668594][T28351] wg1 speed is unknown, defaulting to 1000
[  618.744592][T28368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5799'.
[  618.767206][T28255] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  618.801512][T28255] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.806799][T28371] netlink: 'syz.5.5800': attribute type 1 has an invalid length.
[  618.842117][T28373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5801'.
[  618.856221][T28373] netlink: 'syz.3.5801': attribute type 11 has an invalid length.
[  618.896915][T28371] bond2: entered promiscuous mode
[  618.902500][T28371] 8021q: adding VLAN 0 to HW filter on device bond2
[  618.915476][ T5824] Bluetooth: hci1: command tx timeout
[  618.964143][T28255] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  618.974528][T28255] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.011053][T28371] bond2: (slave bridge1): making interface the new active one
[  619.018945][T28371] bridge1: entered promiscuous mode
[  619.025539][T28371] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  619.118824][T28255] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  619.129142][T28255] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.407129][T28255] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  619.445067][T28255] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  619.494586][T28386] wg1 speed is unknown, defaulting to 1000
[  619.495589][T28255] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  619.536004][T28255] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  619.626069][T28413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5807'.
[  619.855563][T28420] netlink: 'syz.3.5810': attribute type 21 has an invalid length.
[  619.974814][T28420] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5810'.
[  620.030539][T28255] 8021q: adding VLAN 0 to HW filter on device bond0
[  620.115184][T28255] 8021q: adding VLAN 0 to HW filter on device team0
[  620.137166][T10328] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.144388][T10328] bridge0: port 1(bridge_slave_0) entered forwarding state
[  620.259622][T10324] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.266867][T10324] bridge0: port 2(bridge_slave_1) entered forwarding state
[  620.486726][T28255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  620.817368][T28447] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5814'.
[  620.996426][ T5824] Bluetooth: hci1: command tx timeout
[  621.177404][T28462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5818'.
[  621.264850][T28452] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.340526][T28255] 8021q: adding VLAN 0 to HW filter on device batadv0
[  621.377586][T28452] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.398809][T28473] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5821'.
[  621.508023][T28452] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.548289][T28255] veth0_vlan: entered promiscuous mode
[  621.578272][T28255] veth1_vlan: entered promiscuous mode
[  621.608459][T28452] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.614655][T28482] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5825'.
[  621.639014][T28482] netlink: 'syz.4.5825': attribute type 13 has an invalid length.
[  621.648066][T28482] netlink: 'syz.4.5825': attribute type 17 has an invalid length.
[  621.661437][T28482] tunl0: left promiscuous mode
[  621.685949][T28482] 8021q: adding VLAN 0 to HW filter on device `
[  621.699097][T28482] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  621.757667][T28255] veth0_macvtap: entered promiscuous mode
[  621.773061][T28255] veth1_macvtap: entered promiscuous mode
[  621.819429][T16639] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  621.836678][T28482] wg1 speed is unknown, defaulting to 1000
[  621.857266][T10338] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  621.877877][T28255] batman_adv: batadv0: Interface activated: batadv_slave_0
[  621.913088][T28255] batman_adv: batadv0: Interface activated: batadv_slave_1
[  621.930182][T10348] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  621.967502][T10314] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  621.998796][T16639] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  622.010875][T28490] netlink: 'syz.0.5827': attribute type 1 has an invalid length.
[  622.019987][T28492] netlink: 'syz.0.5827': attribute type 1 has an invalid length.
[  622.030930][T16639] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  622.058713][T16639] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  622.101565][T16639] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  622.339747][T28494] wg1 speed is unknown, defaulting to 1000
[  622.358981][T10324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.395609][T10324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.487532][T28510] netlink: 'syz.3.5831': attribute type 13 has an invalid length.
[  622.495648][T10338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.514926][T10338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.521049][T28510] netlink: 'syz.3.5831': attribute type 17 has an invalid length.
[  622.717490][T28510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  622.819804][T28514] wg1 speed is unknown, defaulting to 1000
[  622.883207][T28524] syzkaller0: entered promiscuous mode
[  622.903633][T28524] syzkaller0: entered allmulticast mode
[  623.073965][ T5824] Bluetooth: hci1: command tx timeout
[  626.116482][T28541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5840'.
[  626.126603][T28541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5840'.
[  626.136539][T28541] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5840'.
[  626.856551][T28555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5844'.
[  627.001368][T10314] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  627.081788][T28555] wg1 speed is unknown, defaulting to 1000
[  628.077074][T28569] ip6tnl0: Caught tx_queue_len zero misconfig
[  628.230005][T28576] netlink: 'syz.0.5848': attribute type 30 has an invalid length.
[  628.310352][T28576] syzkaller1: tun_chr_ioctl cmd 1074025677
[  628.324251][T28576] syzkaller1: linktype set to 0
[  628.532263][T28581] 8021q: VLANs not supported on ip_vti0
[  628.692517][T28597] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5855'.
[  628.715311][T28598] netlink: 'syz.3.5853': attribute type 8 has an invalid length.
[  628.733530][T28598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5853'.
[  628.895673][T28598] bond0: entered promiscuous mode
[  628.928751][T28598] bond0: left promiscuous mode
[  629.005215][T28613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5860'.
[  629.022596][T28619] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  629.140673][T28613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5860'.
[  629.244626][T28631] syz_tun: entered allmulticast mode
[  629.343775][T28631] syz_tun: left allmulticast mode
[  629.381470][T28638] netlink: 'syz.4.5866': attribute type 10 has an invalid length.
[  629.555273][T28647] sctp: [Deprecated]: syz.5.5868 (pid 28647) Use of int in maxseg socket option.
[  629.555273][T28647] Use struct sctp_assoc_value instead
[  629.570782][T28646] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5869'.
[  629.698483][T28651] bond0: (slave rose0): Enslaving as an active interface with an up link
[  630.318835][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  630.338465][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  630.347185][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  630.368796][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  630.383968][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  630.438945][T28688] netlink: 'syz.2.5880': attribute type 1 has an invalid length.
[  630.462325][T28688] netlink: 'syz.2.5880': attribute type 7 has an invalid length.
[  630.480158][T28688] netlink: 'syz.2.5880': attribute type 8 has an invalid length.
[  630.494102][T28688] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5880'.
[  630.508709][T28688] NCSI netlink: No device for ifindex 65584
[  630.522187][T28679] wg1 speed is unknown, defaulting to 1000
[  631.088829][T28679] chnl_net:caif_netlink_parms(): no params data found
[  631.241962][T28730] tipc: Started in network mode
[  631.247147][T28730] tipc: Node identity ca6efe14b2e3, cluster identity 4711
[  631.254622][T28730] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  631.289085][T28730] tipc: Disabling bearer <eth:syzkaller0>
[  631.331577][T28679] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.353546][T28679] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.360848][T28679] bridge_slave_0: entered allmulticast mode
[  631.369026][T28679] bridge_slave_0: entered promiscuous mode
[  631.378053][T28737] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  631.386027][T28736] syzkaller0: entered promiscuous mode
[  631.391720][T28736] syzkaller0: entered allmulticast mode
[  631.408368][T28679] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.421697][T28679] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.429382][T28679] bridge_slave_1: entered allmulticast mode
[  631.440887][T28679] bridge_slave_1: entered promiscuous mode
[  631.472781][T28745] __nla_validate_parse: 2 callbacks suppressed
[  631.472799][T28745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5894'.
[  631.490163][T28746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5894'.
[  631.572127][T28736] tipc: Resetting bearer <eth:syzkaller0>
[  631.588523][T28679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  631.627071][T28735] tipc: Resetting bearer <eth:syzkaller0>
[  631.654674][T28735] tipc: Disabling bearer <eth:syzkaller0>
[  631.678219][T28757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5897'.
[  631.679010][T28679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  631.788098][T28757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5897'.
[  631.821878][T28679] team0: Port device team_slave_0 added
[  631.865306][T28757] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  631.880221][T28679] team0: Port device team_slave_1 added
[  631.986972][T28679] batman_adv: batadv0: Adding interface: batadv_slave_0
[  631.998686][T28679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  632.030156][T28679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  632.043566][T28772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5901'.
[  632.060654][T28679] batman_adv: batadv0: Adding interface: batadv_slave_1
[  632.069969][T28679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  632.097128][T28679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  632.141554][T28772] wg1 speed is unknown, defaulting to 1000
[  632.198814][T28679] hsr_slave_0: entered promiscuous mode
[  632.207119][T28679] hsr_slave_1: entered promiscuous mode
[  632.214119][T28679] debugfs: 'hsr0' already exists in 'hsr'
[  632.220069][T28679] Cannot create hsr debugfs directory
[  632.433698][ T5824] Bluetooth: hci3: command tx timeout
[  632.503496][T28787] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5906'.
[  632.512832][T28787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5906'.
[  632.573688][T28787] netlink: 31 bytes leftover after parsing attributes in process `syz.5.5906'.
[  632.584206][T28787] netlink: 'syz.5.5906': attribute type 3 has an invalid length.
[  632.592121][T28787] netlink: 'syz.5.5906': attribute type 2 has an invalid length.
[  632.607207][T28787] netlink: 31 bytes leftover after parsing attributes in process `syz.5.5906'.
[  632.617090][T28787] netlink: 'syz.5.5906': attribute type 2 has an invalid length.
[  632.668119][T28792] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  632.838871][T28679] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  632.850488][T28679] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.937067][T28810] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  633.052472][T28679] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  633.063520][T28679] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.229478][T28679] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  633.277482][T28679] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.341245][T28828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5917'.
[  633.398844][T28834] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  633.431280][T28835] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  633.481101][T28679] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  633.493189][T28679] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.702068][T28679] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  633.714913][T28679] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  633.730683][T28679] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  633.743187][T28679] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  633.848982][T28679] 8021q: adding VLAN 0 to HW filter on device bond0
[  633.871174][T28679] 8021q: adding VLAN 0 to HW filter on device team0
[  633.927331][T10338] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.934562][T10338] bridge0: port 1(bridge_slave_0) entered forwarding state
[  633.945730][T10338] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.952954][T10338] bridge0: port 2(bridge_slave_1) entered forwarding state
[  634.019573][T28856] Cannot find add_set index 0 as target
[  634.098443][T28856] bridge0: port 2(bridge_slave_1) entered disabled state
[  634.106245][T28856] bridge0: port 1(bridge_slave_0) entered disabled state
[  634.230411][T28856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  634.248658][T28856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  634.482509][T10348] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  634.509632][T10348] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  634.522238][ T5824] Bluetooth: hci3: command tx timeout
[  634.533045][T10348] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  634.542119][T10348] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  634.773055][T28679] 8021q: adding VLAN 0 to HW filter on device batadv0
[  634.895790][T28679] veth0_vlan: entered promiscuous mode
[  634.945047][T28679] veth1_vlan: entered promiscuous mode
[  635.065367][T28679] veth0_macvtap: entered promiscuous mode
[  635.088986][T28679] veth1_macvtap: entered promiscuous mode
[  635.178160][T28679] batman_adv: batadv0: Interface activated: batadv_slave_0
[  635.223993][T28679] batman_adv: batadv0: Interface activated: batadv_slave_1
[  635.262442][ T6798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  635.283382][ T6798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  635.321173][ T6798] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  635.351128][ T6798] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  635.378570][T28894] netlink: 'syz.5.5932': attribute type 1 has an invalid length.
[  635.534229][T10338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  635.547941][T10338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  635.593680][T10348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  635.608152][T10348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  636.376231][T28939] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  636.477450][T28943] __nla_validate_parse: 5 callbacks suppressed
[  636.477469][T28943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5944'.
[  636.494973][T28943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5944'.
[  636.535077][T28943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5944'.
[  636.598848][ T5824] Bluetooth: hci3: command tx timeout
[  636.645636][T28949] netlink: 'syz.2.5946': attribute type 21 has an invalid length.
[  636.670681][T28949] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5946'.
[  636.740557][T28949] netlink: 'syz.2.5946': attribute type 5 has an invalid length.
[  636.750031][T28949] netlink: 'syz.2.5946': attribute type 6 has an invalid length.
[  636.777546][T28949] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5946'.
[  637.079487][T28965] netlink: 'syz.2.5949': attribute type 39 has an invalid length.
[  637.476416][T28976] bond1: entered allmulticast mode
[  637.506192][T28981] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  637.566415][T28979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5953'.
[  637.682233][   T10] IPVS: starting estimator thread 0...
[  637.795649][T28986] IPVS: using max 27 ests per chain, 64800 per kthread
[  637.812965][T28990] vlan2: entered promiscuous mode
[  637.838833][T28990] vlan2: entered allmulticast mode
[  637.856805][T28990] hsr_slave_1: entered allmulticast mode
[  638.058099][T29001] batman_adv: batadv0: Adding interface: ip6gretap1
[  638.091911][T29001] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  638.142906][T29005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5961'.
[  638.154800][T29001] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active
[  638.191692][T29000] syzkaller1: entered promiscuous mode
[  638.222142][T29000] syzkaller1: entered allmulticast mode
[  638.271218][T29012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5963'.
[  638.303616][T29012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5963'.
[  638.568056][T29034] xt_TCPMSS: Only works on TCP SYN packets
[  638.627296][T29037] syz_tun: entered allmulticast mode
[  638.646098][T29037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5970'.
[  638.676448][ T5824] Bluetooth: hci3: command tx timeout
[  638.691895][T29037] syz_tun (unregistering): left allmulticast mode
[  638.802641][T29048] Ï: option downdelay: invalid value (18446744073709547007)
[  638.810318][T29048] Ï: option downdelay: allowed values 0 - 2147483647
[  638.818695][T29048] Ï (unregistering): Released all slaves
[  639.244649][T29080] pimreg: entered allmulticast mode
[  639.273000][   T10] IPVS: starting estimator thread 0...
[  639.339410][T29092] netlink: 'syz.4.5984': attribute type 11 has an invalid length.
[  639.388481][T29084] IPVS: using max 29 ests per chain, 69600 per kthread
[  639.489557][T29097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  639.896872][T29127] netlink: 'syz.0.5993': attribute type 9 has an invalid length.
[  639.917290][T29128] netlink: 'syz.5.5994': attribute type 30 has an invalid length.
[  639.964921][T29127] netlink: 'syz.0.5993': attribute type 11 has an invalid length.
[  639.982294][T29127] netlink: 'syz.0.5993': attribute type 12 has an invalid length.
[  639.987811][T29128] bond3: option arp_missed_max: invalid value (0)
[  639.997269][T29128] bond3: option arp_missed_max: allowed values 1 - 255
[  640.019938][T29128] bond3 (unregistering): Released all slaves
[  640.301748][T29142] tipc: Cannot configure node identity twice
[  640.363103][T29139] netlink: 'syz.0.5997': attribute type 1 has an invalid length.
[  640.515787][T29152] netlink: 'syz.4.6002': attribute type 1 has an invalid length.
[  640.557558][T29154] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  640.706565][T29163] wg1 speed is unknown, defaulting to 1000
[  640.852348][T29177] netlink: 'syz.5.6009': attribute type 10 has an invalid length.
[  640.890934][T29177] team0: Port device geneve0 added
[  641.035505][T29184] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  641.059770][T29186] openvswitch: netlink: IP tunnel dst address not specified
[  641.269887][T29189] wg1 speed is unknown, defaulting to 1000
[  641.546474][T29192] netlink: 'syz.5.6013': attribute type 11 has an invalid length.
[  641.568194][T29192] __nla_validate_parse: 10 callbacks suppressed
[  641.568212][T29192] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6013'.
[  642.397371][T29213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6019'.
[  642.712182][T29217] wg1 speed is unknown, defaulting to 1000
[  643.243622][T29238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6025'.
[  643.263021][T29239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6023'.
[  643.272481][T29239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6023'.
[  643.384842][T29236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6026'.
[  643.535366][T29244] bond1: Removing last arp target with arp_interval on
[  643.615825][T29243] bond2: Removing last arp target with arp_interval on
[  643.655977][T29232] wg1 speed is unknown, defaulting to 1000
[  643.877398][T29256] wg1 speed is unknown, defaulting to 1000
[  643.900335][T29258] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9
[  644.096223][T29266] netlink: 'syz.2.6030': attribute type 3 has an invalid length.
[  644.104485][T29266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6030'.
[  644.116420][T29266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6030'.
[  644.134167][T29266] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6030'.
[  644.252799][T29272] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6031'.
[  644.530718][T29287] dvmrp1: tun_chr_ioctl cmd 1074812118
[  645.956003][T29351] batadv_slave_1: entered promiscuous mode
[  645.963773][T29350] batadv_slave_1: left promiscuous mode
[  646.036126][T29354] wg1 speed is unknown, defaulting to 1000
[  646.113054][T29361] lo: entered allmulticast mode
[  646.145278][T29361] dvmrp1: entered allmulticast mode
[  646.588901][T29379] __nla_validate_parse: 4 callbacks suppressed
[  646.588917][T29379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6061'.
[  646.905124][T29380] bridge0: port 2(bridge_slave_1) entered disabled state
[  646.912864][T29380] bridge0: port 1(bridge_slave_0) entered disabled state
[  646.956216][T29384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6062'.
[  647.139299][T29380] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  647.152216][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  647.157309][T29380] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  647.162781][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  647.180260][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  647.187284][T29380] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  647.197456][T29394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6064'.
[  647.197918][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  647.213072][T29380] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  647.215757][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  647.409559][T10324] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  647.432160][T29397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6066'.
[  647.443006][T29400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6065'.
[  647.466884][T29397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6066'.
[  647.506521][T10324] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  647.522384][T10324] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  647.554015][T10324] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  647.615721][T29392] wg1 speed is unknown, defaulting to 1000
[  648.176562][T29437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6074'.
[  648.188818][T29437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6074'.
[  648.208931][T29437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6074'.
[  648.234961][T29437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6074'.
[  648.510107][T29449] batman_adv: batadv0: Removing interface: batadv_slave_0
[  648.563983][T29456] netlink: 'syz.4.6079': attribute type 20 has an invalid length.
[  648.752458][T29451] wg1 speed is unknown, defaulting to 1000
[  649.243643][ T5824] Bluetooth: hci0: command tx timeout
[  651.323474][ T5824] Bluetooth: hci0: command tx timeout
[  651.468984][T10348] bond4 (unregistering): (slave ip6erspan0): Releasing active interface
[  651.547364][T29489] xt_l2tp: v2 doesn't support IP mode
[  651.716274][T10348] bond3 (unregistering): (slave geneve2): Releasing active interface
[  652.158033][T10348] bond1 (unregistering): Released all slaves
[  652.263666][T10348] bond2 (unregistering): Released all slaves
[  652.278431][T10348] bond3 (unregistering): Released all slaves
[  652.382142][T10348] bond4 (unregistering): Released all slaves
[  652.484183][T10348] bond5 (unregistering): (slave veth5): Releasing backup interface
[  652.492828][T10348] bond5 (unregistering): Released all slaves
[  652.590750][T10348] bond6 (unregistering): (slave batadv1): Releasing active interface
[  652.599775][T10348] bond6 (unregistering): Released all slaves
[  652.611581][T29392] chnl_net:caif_netlink_parms(): no params data found
[  652.630680][T29488] __nla_validate_parse: 40 callbacks suppressed
[  652.630699][T29488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6086'.
[  652.722022][T29497] netlink: 'syz.3.6088': attribute type 2 has an invalid length.
[  652.785260][T10348] : left promiscuous mode
[  652.890431][T10348] tipc: Disabling bearer <udp:s>
[  652.899401][T10348] tipc: Left network mode
[  652.998756][T29512] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6091'.
[  653.264336][T29392] bridge0: port 1(bridge_slave_0) entered blocking state
[  653.271717][T29392] bridge0: port 1(bridge_slave_0) entered disabled state
[  653.272354][T29518] netlink: 596 bytes leftover after parsing attributes in process `syz.5.6093'.
[  653.279396][T29392] bridge_slave_0: entered allmulticast mode
[  653.295424][T29392] bridge_slave_0: entered promiscuous mode
[  653.320379][T29392] bridge0: port 2(bridge_slave_1) entered blocking state
[  653.328079][T29392] bridge0: port 2(bridge_slave_1) entered disabled state
[  653.335538][T29392] bridge_slave_1: entered allmulticast mode
[  653.342705][T29392] bridge_slave_1: entered promiscuous mode
[  653.393869][ T5824] Bluetooth: hci0: command tx timeout
[  653.406373][T29392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  653.419362][T29392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  653.474296][T29392] team0: Port device team_slave_0 added
[  653.484819][T29392] team0: Port device team_slave_1 added
[  653.619936][T29392] batman_adv: batadv0: Adding interface: batadv_slave_0
[  653.653798][T29392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  653.724158][T29392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  653.775716][T29525] netlink: 'syz.4.6097': attribute type 1 has an invalid length.
[  653.824427][T29525] bond13: entered promiscuous mode
[  653.829952][T29525] 8021q: adding VLAN 0 to HW filter on device bond13
[  653.838091][T29392] batman_adv: batadv0: Adding interface: batadv_slave_1
[  653.845471][T29392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  653.873581][T29392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  653.901506][T10348] hsr_slave_0: left promiscuous mode
[  653.909004][T10348] hsr_slave_1: left promiscuous mode
[  654.021753][T29536] tipc: Failed to remove unknown binding: 66,1,1/0:3630159384/3630159386
[  654.032848][T29536] tipc: Failed to remove unknown binding: 66,1,1/0:3630159384/3630159386
[  654.045267][T29536] tipc: Failed to remove unknown binding: 66,1,1/0:3630159384/3630159386
[  654.150796][T29539] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6099'.
[  654.930991][T29392] hsr_slave_0: entered promiscuous mode
[  654.966501][T29392] hsr_slave_1: entered promiscuous mode
[  654.974267][T29392] debugfs: 'hsr0' already exists in 'hsr'
[  654.980023][T29392] Cannot create hsr debugfs directory
[  655.240854][T10348] IPVS: stop unused estimator thread 0...
[  655.473613][ T5824] Bluetooth: hci0: command tx timeout
[  655.682212][T29392] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  655.696703][T29392] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  655.706539][   T24] IPVS: starting estimator thread 0...
[  655.716363][T29575] IPVS: fo: FWM 3 0x00000003 - no destination available
[  655.729131][T29392] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  655.747062][T29392] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  655.803600][T29574] IPVS: using max 32 ests per chain, 76800 per kthread
[  655.919669][T29585] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6109'.
[  655.982677][T29591] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6109'.
[  656.030787][T29592] pim6reg: entered allmulticast mode
[  656.111774][T29592] pim6reg: left allmulticast mode
[  656.338475][T29392] 8021q: adding VLAN 0 to HW filter on device bond0
[  656.397572][T29392] 8021q: adding VLAN 0 to HW filter on device team0
[  656.445374][ T6798] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.452543][ T6798] bridge0: port 1(bridge_slave_0) entered forwarding state
[  656.800088][T29615] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6116'.
[  656.809826][T29615] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6116'.
[  656.860523][T10313] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.867778][T10313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  657.009287][T29619] syzkaller1: entered promiscuous mode
[  657.023759][T29619] syzkaller1: entered allmulticast mode
[  657.112179][T29632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6119'.
[  657.275275][T29641] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  657.764718][T29651] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  657.828267][T29392] 8021q: adding VLAN 0 to HW filter on device batadv0
[  657.928362][T29392] veth0_vlan: entered promiscuous mode
[  657.956636][T29392] veth1_vlan: entered promiscuous mode
[  657.971781][T29658] xt_CT: No such helper "snmp"
[  658.015821][T29392] veth0_macvtap: entered promiscuous mode
[  658.039726][T29392] veth1_macvtap: entered promiscuous mode
[  658.085251][T29392] batman_adv: batadv0: Interface activated: batadv_slave_0
[  658.100949][T29392] batman_adv: batadv0: Interface activated: batadv_slave_1
[  658.117704][T10313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  658.127618][T10313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  658.149233][T10313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  658.166264][T10313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  658.272233][T29666] netlink: 'syz.4.6127': attribute type 39 has an invalid length.
[  658.292807][T29668] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6128'.
[  658.304334][T29668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6128'.
[  658.350470][T10348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  658.370652][T10348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  658.509628][T29682] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6131'.
[  658.654313][T10324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  658.687603][T10324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  658.941959][T29704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6137'.
[  659.048922][T29704] bridge0: entered promiscuous mode
[  659.049441][T29710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6137'.
[  659.093741][T29704] macsec1: entered allmulticast mode
[  659.114773][T29704] bridge0: entered allmulticast mode
[  659.133054][T29704] bridge0: port 3(macsec1) entered blocking state
[  659.149779][T29704] bridge0: port 3(macsec1) entered disabled state
[  659.170288][T29704] bridge0: left allmulticast mode
[  659.176243][T29704] bridge0: left promiscuous mode
[  659.452809][T29726] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  659.505125][T29726] tipc: Resetting bearer <eth:syzkaller0>
[  659.745354][T29724] tipc: Disabling bearer <eth:syzkaller0>
[  660.084994][T29744] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6148'.
[  660.103570][T29744] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  660.214714][T29747] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6148'.
[  660.255466][T29747] netlink: 'syz.5.6148': attribute type 13 has an invalid length.
[  660.293932][T29747] netlink: 'syz.5.6148': attribute type 17 has an invalid length.
[  660.498365][T29758] netlink: 'syz.4.6147': attribute type 11 has an invalid length.
[  660.510356][T29747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  660.527912][T29758] netlink: 'syz.4.6147': attribute type 11 has an invalid length.
[  660.539499][T29763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  660.580279][T29758] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6147'.
[  661.216529][T29792] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  661.304425][T29796] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6159'.
[  661.327225][T29794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6158'.
[  661.357280][T29794] netlink: 'syz.2.6158': attribute type 3 has an invalid length.
[  661.936767][T29814] FAULT_INJECTION: forcing a failure.
[  661.936767][T29814] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  661.983619][T29814] CPU: 0 UID: 0 PID: 29814 Comm: syz.2.6164 Not tainted syzkaller #0 PREEMPT(full) 
[  661.983645][T29814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  661.983656][T29814] Call Trace:
[  661.983665][T29814]  <TASK>
[  661.983673][T29814]  dump_stack_lvl+0x189/0x250
[  661.983703][T29814]  ? __pfx____ratelimit+0x10/0x10
[  661.983726][T29814]  ? __pfx_dump_stack_lvl+0x10/0x10
[  661.983749][T29814]  ? __pfx__printk+0x10/0x10
[  661.983768][T29814]  ? __might_fault+0xb0/0x130
[  661.983805][T29814]  should_fail_ex+0x414/0x560
[  661.983843][T29814]  _copy_from_user+0x2d/0xb0
[  661.983868][T29814]  kstrtouint_from_user+0xc4/0x170
[  661.983891][T29814]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  661.983929][T29814]  proc_fail_nth_write+0x88/0x200
[  661.983952][T29814]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  661.983980][T29814]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  661.984004][T29814]  vfs_write+0x27e/0xb30
[  661.984038][T29814]  ? __pfx_vfs_write+0x10/0x10
[  661.984063][T29814]  ? __fget_files+0x2a/0x420
[  661.984086][T29814]  ? __fget_files+0x3a0/0x420
[  661.984102][T29814]  ? __fget_files+0x2a/0x420
[  661.984129][T29814]  ksys_write+0x145/0x250
[  661.984155][T29814]  ? __pfx_ksys_write+0x10/0x10
[  661.984183][T29814]  ? do_syscall_64+0xbe/0xfa0
[  661.984212][T29814]  do_syscall_64+0xfa/0xfa0
[  661.984235][T29814]  ? lockdep_hardirqs_on+0x9c/0x150
[  661.984259][T29814]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.984277][T29814]  ? clear_bhb_loop+0x60/0xb0
[  661.984300][T29814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.984317][T29814] RIP: 0033:0x7fd6de38e17f
[  661.984335][T29814] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  661.984350][T29814] RSP: 002b:00007fd6dc5f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  661.984370][T29814] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd6de38e17f
[  661.984383][T29814] RDX: 0000000000000001 RSI: 00007fd6dc5f60a0 RDI: 0000000000000004
[  661.984395][T29814] RBP: 00007fd6dc5f6090 R08: 0000000000000000 R09: 0000000000000000
[  661.984406][T29814] R10: 0000000000000074 R11: 0000000000000293 R12: 0000000000000001
[  661.984418][T29814] R13: 00007fd6de5e6038 R14: 00007fd6de5e5fa0 R15: 00007fff6c39fb88
[  661.984452][T29814]  </TASK>
[  662.392969][T29821] syz_tun: entered allmulticast mode
[  662.792816][T29839] geneve0: mtu less than device minimum
[  663.135541][T29820] syz_tun: left allmulticast mode
[  663.867629][T29869] __nla_validate_parse: 1 callbacks suppressed
[  663.867647][T29869] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6177'.
[  664.280988][T29888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6181'.
[  664.937214][T29906] netlink: 'syz.3.6185': attribute type 11 has an invalid length.
[  665.522468][T29920] C: renamed from team_slave_0
[  665.532350][T29920] netlink: 'syz.4.6187': attribute type 4 has an invalid length.
[  665.549710][T29920] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6187'.
[  665.560480][T29920] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  665.842573][T29927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6189'.
[  665.917979][T29933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6190'.
[  665.985491][T29924] team0 (unregistering): Port device team_slave_0 removed
[  666.002713][T29924] team0 (unregistering): Port device team_slave_1 removed
[  666.169035][T29937] netlink: 'syz.3.6190': attribute type 83 has an invalid length.
[  666.229842][T29941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6192'.
[  666.786430][T29956] x_tables: duplicate underflow at hook 2
[  667.228697][T29966] batadv1: entered promiscuous mode
[  667.295135][T29969] batman_adv: batadv0: Adding interface: vlan2
[  667.301332][T29969] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.333501][T29969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  667.345013][T29969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  667.363627][T29969] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  667.426552][T29974] netlink: 'syz.5.6202': attribute type 1 has an invalid length.
[  667.435576][T29974] netlink: 'syz.5.6202': attribute type 3 has an invalid length.
[  667.443693][T29974] netlink: 172 bytes leftover after parsing attributes in process `syz.5.6202'.
[  667.452851][T29974] NCSI netlink: No device for ifindex 813332851
[  667.829252][T29981] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6205'.
[  668.194261][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.317691][T29995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6208'.
[  668.369257][T29996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6208'.
[  668.407675][T29995] bond_slave_0: entered promiscuous mode
[  668.413884][T29995] bond_slave_1: entered promiscuous mode
[  668.429316][T29995] macvtap1: entered promiscuous mode
[  668.453505][T29995] bond0: entered promiscuous mode
[  668.466988][T29995] macvtap1: entered allmulticast mode
[  668.472425][T29995] bond0: entered allmulticast mode
[  668.488011][T29995] bond_slave_0: entered allmulticast mode
[  668.495444][T29995] bond_slave_1: entered allmulticast mode
[  668.506279][T29995] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  668.526782][T29996] bond0: left allmulticast mode
[  668.531926][T29996] bond_slave_0: left allmulticast mode
[  668.537727][T29996] bond_slave_1: left allmulticast mode
[  668.550352][T29996] bond0: left promiscuous mode
[  668.558984][T29996] bond_slave_0: left promiscuous mode
[  668.564873][T29996] bond_slave_1: left promiscuous mode
[  668.638561][T30010] netlink: 'syz.5.6213': attribute type 2 has an invalid length.
[  668.801437][T30004] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.809217][T30004] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.937149][T30004] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  668.958597][T30004] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  669.074046][T10331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.111097][T30014] vlan3: entered allmulticast mode
[  669.116691][T30014] dummy0: entered allmulticast mode
[  669.158193][ T6798] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.176114][ T6798] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.218182][ T6798] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.233752][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.251452][ T6798] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.592895][T30039] __nla_validate_parse: 3 callbacks suppressed
[  669.592913][T30039] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6220'.
[  670.273922][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.354513][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.362681][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.256867][T10314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.273411][T10314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  671.313905][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.634417][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  672.358494][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  672.727862][T30105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6237'.
[  672.769874][T30105] 8021q: adding VLAN 0 to HW filter on device bond1
[  672.860350][T30109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6237'.
[  672.915309][T10338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  672.922773][T30109] bond1: (slave macsec1): Error -34 calling dev_set_mtu
[  673.051810][T30116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6239'.
[  673.068694][T30116] vlan3: entered promiscuous mode
[  673.091847][T30116] bond0: entered promiscuous mode
[  673.112103][T30116] bond_slave_0: entered promiscuous mode
[  673.139745][T30116] bond_slave_1: entered promiscuous mode
[  673.219419][T30119] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  673.240451][T30119] bond2 (unregistering): Released all slaves
[  673.394159][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.554273][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.009961][T30160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6249'.
[  674.030566][T30163] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  674.044823][T30160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6249'.
[  674.056922][T30160] netlink: 'syz.2.6249': attribute type 7 has an invalid length.
[  674.117399][T30167] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  674.603444][T17408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.698898][T30198] syzkaller1: tun_chr_ioctl cmd 1074025677
[  674.730448][T30198] syzkaller1: linktype set to 1
[  674.835087][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.876453][T30198] syzkaller1: tun_chr_ioctl cmd 1074025673
[  675.027039][T30219] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.6262'.
[  675.110860][T30222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6262'.
[  675.634105][T17408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.758170][T30249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  675.821465][T30241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6267'.
[  675.875391][T30255] Bluetooth: MGMT ver 1.23
[  675.914431][T30241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6267'.
[  675.915189][T30256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  675.946014][ T6798] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  675.954517][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.993287][ T6798] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  676.052961][ T6798] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  676.090918][ T6798] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[  676.180914][T30272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6276'.
[  676.216360][T30272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6276'.
[  676.312849][T30279] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6275'.
[  676.465427][T30281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6277'.
[  676.603468][T30286] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6277'.
[  676.675131][T30286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6277'.
[  676.763417][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  677.395280][T17408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.074622][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  678.088237][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  678.097502][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  678.108075][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  678.118284][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  678.565302][T30339] syzkaller0: entered promiscuous mode
[  678.581110][T30339] syzkaller0: entered allmulticast mode
[  678.642278][T30344] netlink: 'syz.0.6293': attribute type 28 has an invalid length.
[  678.675322][T10331] net_ratelimit: 3 callbacks suppressed
[  678.675341][T10331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.699987][T30344] netlink: 'syz.0.6293': attribute type 3 has an invalid length.
[  678.834702][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.894563][T30344] netlink: 'syz.0.6293': attribute type 10 has an invalid length.
[  678.916201][T30344] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  679.336988][T30355] xt_CT: No such helper "syz0"
[  679.374856][T30321] chnl_net:caif_netlink_parms(): no params data found
[  679.657064][T30376] nbd: nbd0 already in use
[  679.666195][T30376] block nbd0: NBD_DISCONNECT
[  679.670990][T30376] block nbd0: Send disconnect failed -32
[  679.703369][T30376] block nbd0: shutting down sockets
[  679.804208][T30321] bridge0: port 1(bridge_slave_0) entered blocking state
[  679.811370][T30321] bridge0: port 1(bridge_slave_0) entered disabled state
[  679.833950][T30321] bridge_slave_0: entered allmulticast mode
[  679.885575][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.900760][T30321] bridge_slave_0: entered promiscuous mode
[  679.934847][T30321] bridge0: port 2(bridge_slave_1) entered blocking state
[  679.964765][T30321] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.972082][T30321] bridge_slave_1: entered allmulticast mode
[  680.023451][T30321] bridge_slave_1: entered promiscuous mode
[  680.154657][T30321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  680.169290][T30321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  680.194645][ T5824] Bluetooth: hci2: command tx timeout
[  680.288423][T30402] __nla_validate_parse: 5 callbacks suppressed
[  680.288449][T30402] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6304'.
[  680.341102][T30321] team0: Port device team_slave_0 added
[  680.380671][T30321] team0: Port device team_slave_1 added
[  680.455129][T30321] batman_adv: batadv0: Adding interface: batadv_slave_0
[  680.462199][T30321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  680.495428][T30321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  680.510298][T30407] tipc: Started in network mode
[  680.515661][T30407] tipc: Node identity d2f711465c12, cluster identity 4711
[  680.522947][T30407] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  680.538992][T30321] batman_adv: batadv0: Adding interface: batadv_slave_1
[  680.554664][T30321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  680.581212][T30321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  680.594706][T30406] syzkaller0: entered promiscuous mode
[  680.595554][T10338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.600511][T30406] syzkaller0: entered allmulticast mode
[  680.634261][T30407] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6306'.
[  680.767306][T30321] hsr_slave_0: entered promiscuous mode
[  680.795270][T30321] hsr_slave_1: entered promiscuous mode
[  680.801814][T30321] debugfs: 'hsr0' already exists in 'hsr'
[  680.823566][T30321] Cannot create hsr debugfs directory
[  680.829517][T30422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6310'.
[  680.835732][T30425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6310'.
[  680.872569][T30405] tipc: Resetting bearer <eth:syzkaller0>
[  680.901450][T30405] tipc: Disabling bearer <eth:syzkaller0>
[  680.924233][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.714506][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.953489][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.980234][T30458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6319'.
[  682.204001][T30467] netlink: 'syz.3.6321': attribute type 3 has an invalid length.
[  682.273409][ T5824] Bluetooth: hci2: command tx timeout
[  682.369609][T30475] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6323'.
[  682.379717][T30473] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6322'.
[  682.420354][T30321] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  682.434109][T10324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.446395][T30321] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  682.489222][T30473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6322'.
[  682.498778][T30321] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  682.537538][T30321] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  682.849907][T30321] 8021q: adding VLAN 0 to HW filter on device bond0
[  682.871548][T30500] openvswitch: netlink: Unknown nsh attribute 0
[  682.878461][T30500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  682.935939][T30321] 8021q: adding VLAN 0 to HW filter on device team0
[  682.950327][T10328] bridge0: port 1(bridge_slave_0) entered blocking state
[  682.957541][T10328] bridge0: port 1(bridge_slave_0) entered forwarding state
[  683.011562][T10328] bridge0: port 2(bridge_slave_1) entered blocking state
[  683.018763][T10328] bridge0: port 2(bridge_slave_1) entered forwarding state
[  683.071884][T30321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  683.486011][T30321] 8021q: adding VLAN 0 to HW filter on device batadv0
[  683.658473][T30522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6333'.
[  683.936496][T30503] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6328'.
[  684.033980][   T10] net_ratelimit: 2 callbacks suppressed
[  684.033996][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.064540][T30545] netlink: 'syz.0.6338': attribute type 13 has an invalid length.
[  684.126111][T30545] netlink: 'syz.0.6338': attribute type 17 has an invalid length.
[  684.246968][T30555] x_tables: ip_tables: osf match: only valid for protocol 6
[  684.276059][T30545] 8021q: adding VLAN 0 to HW filter on device bond0
[  684.299602][T30545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  684.364820][ T5824] Bluetooth: hci2: command tx timeout
[  684.439934][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.448124][T10338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.544014][T30561] netlink: 'syz.3.6342': attribute type 11 has an invalid length.
[  684.577837][T30321] veth0_vlan: entered promiscuous mode
[  684.610717][T30321] veth1_vlan: entered promiscuous mode
[  684.740671][T30563] 8021q: VLANs not supported on ipvlan1
[  684.786461][T30563] macsec1: entered promiscuous mode
[  684.792690][T30563] macsec1: entered allmulticast mode
[  684.901543][T30321] veth0_macvtap: entered promiscuous mode
[  684.925060][T30321] veth1_macvtap: entered promiscuous mode
[  684.978616][T30321] batman_adv: batadv0: Interface activated: batadv_slave_0
[  685.006166][T30321] batman_adv: batadv0: Interface activated: batadv_slave_1
[  685.035706][T10314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  685.060311][T10314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  685.074642][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.109001][T10314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  685.141763][T10314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  685.296231][T10324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  685.323397][T10324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  685.392111][T10338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  685.416118][T10338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  685.484759][T30569] __nla_validate_parse: 2 callbacks suppressed
[  685.484776][T30569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6344'.
[  685.646877][T30576] Bluetooth: MGMT ver 1.23
[  685.708663][T30576] wireguard0: entered promiscuous mode
[  685.731398][T10324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.762969][T30584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6348'.
[  685.930098][T30597] netlink: 'syz.2.6351': attribute type 11 has an invalid length.
[  685.945453][T30584] batman_adv: batadv0: Removing interface: vlan2
[  686.002501][T30584] batman_adv: batadv0: Removing interface: batadv_slave_1
[  686.124514][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  686.435438][ T5824] Bluetooth: hci2: command tx timeout
[  687.027124][   T30] audit: type=1800 audit(1762725924.280:11): pid=30652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6366" name="blkio.bfq.time_recursive" dev="tmpfs" ino=322 res=0 errno=0
[  687.156760][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.169783][T30639] team0 (unregistering): Port device team_slave_0 removed
[  687.180401][T30639] team0 (unregistering): Port device team_slave_1 removed
[  687.192262][T30639] team0 (unregistering): Port device geneve0 removed
[  687.210441][T30659] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  687.236623][T30659] tipc: Enabled bearer <udp:syz0>, priority 26
[  687.447964][T30671] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  687.455775][T30671] syzkaller0: entered promiscuous mode
[  687.461259][T30671] syzkaller0: entered allmulticast mode
[  687.474519][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.559954][T30680] tipc: Resetting bearer <eth:syzkaller0>
[  687.578085][T30676] syzkaller0: entered promiscuous mode
[  687.593394][T30676] syzkaller0: entered allmulticast mode
[  687.612693][T30684] delete_channel: no stack
[  687.623844][T30669] tipc: Resetting bearer <eth:syzkaller0>
[  687.634674][T10338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.694589][T30669] tipc: Disabling bearer <eth:syzkaller0>
[  687.850595][T30692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6380'.
[  687.869267][T30692] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  687.891095][T30692] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  687.914060][T30692] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  688.234396][   T10] tipc: Node number set to 2397376838
[  688.590400][T30736] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  688.809418][T30736] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  688.942033][T30736] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.035461][T30736] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.244554][ T5902] net_ratelimit: 3 callbacks suppressed
[  689.244572][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  689.264670][T10328] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  689.387482][T10331] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  689.400591][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[  689.557732][T10331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  689.571534][ T6798] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  689.720196][ T6798] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  689.728757][ T6798] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  689.784871][ T6798] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  689.818577][ T6798] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  689.937058][ T6798] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  690.283628][T17408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.337228][T30798] netlink: 19 bytes leftover after parsing attributes in process `syz.2.6403'.
[  690.375137][T30798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6403'.
[  690.838795][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.081186][T30813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.092196][T30813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.111403][T30813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.134518][T30813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.158766][T30813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.180154][T30813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.392256][T30824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6409'.
[  691.437836][T30822] bridge3: entered promiscuous mode
[  691.462215][T30822] bridge3: entered allmulticast mode
[  691.482844][ T5824] Bluetooth: hci2: command 0x0405 tx timeout
[  691.539374][T30822] team0: Port device bridge3 added
[  691.565047][T30821] bridge4: entered promiscuous mode
[  691.570505][T30821] bridge4: entered allmulticast mode
[  691.583738][T30821] team0: Port device bridge4 added
[  692.054008][T30853] tipc: Started in network mode
[  692.058925][T30853] tipc: Node identity 2a74f88fb192, cluster identity 4711
[  692.070635][T30853] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  692.096405][T30851] syzkaller0: entered promiscuous mode
[  692.126448][T30851] syzkaller0: entered allmulticast mode
[  692.191440][T30845] tipc: Resetting bearer <eth:syzkaller0>
[  692.237049][T30841] tipc: Resetting bearer <eth:syzkaller0>
[  692.313823][T30868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6418'.
[  692.379620][T30841] tipc: Disabling bearer <eth:syzkaller0>
[  692.467968][T30868] 8021q: adding VLAN 0 to HW filter on device bond3
[  692.531820][T30872] 8021q: adding VLAN 0 to HW filter on device bond3
[  692.539600][T30872] bond3: (slave sit1): The slave device specified does not support setting the MAC address
[  692.551431][T30872] bond3: (slave sit1): Error -95 calling set_mac_address
[  694.448942][ T5902] net_ratelimit: 1025 callbacks suppressed
[  694.448959][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  694.586531][T30932] syzkaller0: entered promiscuous mode
[  694.599490][T30932] syzkaller0: entered allmulticast mode
[  694.678572][T10331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  694.894569][T30943] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.6438'.
[  694.976512][T30943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6438'.
[  695.486673][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  695.979283][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  695.989077][T30970] xt_TCPMSS: Only works on TCP SYN packets
[  696.043016][T30972] sctp: [Deprecated]: syz.3.6445 (pid 30972) Use of struct sctp_assoc_value in delayed_ack socket option.
[  696.043016][T30972] Use struct sctp_sack_info instead
[  696.109433][T30967] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6445'.
[  696.347204][T30985] bond3: option all_slaves_active: invalid value (13)
[  696.366302][T30985] bond3 (unregistering): Released all slaves
[  696.417577][T30992] netlink: 'syz.4.6451': attribute type 1 has an invalid length.
[  696.535890][T17408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.606664][T10314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.923653][T31017] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6457'.
[  697.159956][T31029] tipc: Trying to set illegal importance in message
[  697.553657][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.574339][T31047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6462'.
[  697.840859][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.875723][T31046] nbd0: detected capacity change from 0 to 63
[  697.906212][T31049] bond4: entered promiscuous mode
[  697.911288][T31049] bond4: entered allmulticast mode
[  697.917168][T31049] 8021q: adding VLAN 0 to HW filter on device bond4
[  697.946413][ T5824] block nbd0: Receive control failed (result -32)
[  698.326062][T31066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6469'.
[  698.473591][T31066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6469'.
[  698.525016][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.533185][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.662329][T31077] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6472'.
[  698.781391][T31066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6469'.
[  698.903369][T31086] netlink: 'syz.2.6472': attribute type 1 has an invalid length.
[  698.911141][T31086] netlink: 'syz.2.6472': attribute type 4 has an invalid length.
[  698.919746][T31086] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6472'.
[  698.939993][T31086] netlink: 'syz.2.6472': attribute type 1 has an invalid length.
[  698.988441][T31086] netlink: 'syz.2.6472': attribute type 4 has an invalid length.
[  699.013322][T31086] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6472'.
[  699.131523][T31094] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6477'.
[  699.194724][T31096] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6478'.
[  699.644441][ T5902] net_ratelimit: 2 callbacks suppressed
[  699.644460][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.795643][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.674971][T17408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.897592][T31151] syzkaller0: entered promiscuous mode
[  700.903104][T31151] syzkaller0: entered allmulticast mode
[  701.102397][T31165] netem: change failed
[  701.116911][T31166] tipc: Failed to remove unknown binding: 66,1,1/0:2935420479/2935420481
[  701.146859][T31166] tipc: Failed to remove unknown binding: 66,1,1/0:2935420479/2935420481
[  701.166767][T31166] tipc: Failed to remove unknown binding: 66,1,1/0:2935420479/2935420481
[  701.202364][T31165] bond2: option ad_select: invalid value (34)
[  701.210769][T31165] bond2 (unregistering): Released all slaves
[  701.659163][T31194] netlink: 'syz.2.6505': attribute type 21 has an invalid length.
[  701.667821][T31194] netlink: 'syz.2.6505': attribute type 4 has an invalid length.
[  701.690896][T31194] netlink: 'syz.2.6505': attribute type 5 has an invalid length.
[  701.717357][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.725998][T17408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.736235][T10314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.914465][T31200] 8021q: adding VLAN 0 to HW filter on device bond2
[  701.934541][T31200] bond0: (slave bond2): Enslaving as an active interface with an up link
[  701.949848][T31212] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  702.049714][T31203] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  702.114306][T31222] IPVS: set_ctl: invalid protocol: 41 10.1.1.1:5
[  702.121241][T31222] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  702.168299][T31218] syzkaller0: entered promiscuous mode
[  702.203335][T31218] syzkaller0: entered allmulticast mode
[  702.302020][T31231] bond1: option mode: unable to set because the bond device has slaves
[  702.354856][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.528476][T31245] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  702.540840][T31247] __nla_validate_parse: 8 callbacks suppressed
[  702.540858][T31247] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6520'.
[  702.567607][T31245] tipc: Resetting bearer <eth:syzkaller0>
[  702.621052][T31244] tipc: Disabling bearer <eth:syzkaller0>
[  702.756838][T17408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.774574][T31262] netlink: del zone limit has 4 unknown bytes
[  702.799644][T31262] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6523'.
[  702.834120][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  704.500698][T31270] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.509244][T31270] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.613763][T31287] syzkaller1: entered promiscuous mode
[  704.619272][T31287] syzkaller1: entered allmulticast mode
[  704.723014][T31301] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6532'.
[  704.732865][T31301] net_ratelimit: 4 callbacks suppressed
[  704.732880][T31301] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  704.763471][T31294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6529'.
[  704.775965][T31305] netlink: 'syz.3.6531': attribute type 12 has an invalid length.
[  704.834323][T17408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  704.932433][T31316] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6536'.
[  705.405945][T31339] bridge2: the hash_elasticity option has been deprecated and is always 16
[  705.437985][T31339] bridge2: entered allmulticast mode
[  705.560186][T10314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  705.646242][T31347] x_tables: duplicate underflow at hook 1
[  705.873576][T17408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  706.154741][T31378] netlink: 584 bytes leftover after parsing attributes in process `syz.5.6551'.
[  706.431226][T31393] dvmrp1: tun_chr_ioctl cmd 1074025680
[  706.917449][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.011692][T31422] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6561'.
[  707.060027][T31424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6562'.
[  707.367979][T31444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.429176][T31406] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6556'.
[  707.474470][T10338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.943145][T31462] netlink: 'syz.0.6572': attribute type 2 has an invalid length.
[  707.955592][T17408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.115778][T10338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.187936][T31477] bridge4: entered allmulticast mode
[  708.385309][T31484] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6576'.
[  708.567610][T31489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6577'.
[  708.595012][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.628044][T31489] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  708.758687][T31493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6578'.
[  708.767984][T31493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6578'.
[  708.787607][T31493] netlink: 58 bytes leftover after parsing attributes in process `syz.0.6578'.
[  708.856621][T31489] batman_adv: batadv0: Removing interface: batadv_slave_1
[  709.295122][T31497] tipc: Started in network mode
[  709.300733][T31497] tipc: Node identity dacb85a44ae4, cluster identity 4711
[  709.308561][T31497] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  709.471627][T31497] tipc: Disabling bearer <eth:syzkaller0>
[  709.781341][T31515] team0: Port device team_slave_0 removed
[  710.034919][   T10] net_ratelimit: 3 callbacks suppressed
[  710.034937][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.051232][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.109530][T31523] syzkaller0: entered promiscuous mode
[  710.123027][T31523] syzkaller0: entered allmulticast mode
[  710.133745][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.248602][T31532] netlink: 'syz.5.6585': attribute type 4 has an invalid length.
[  710.352558][T31542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6587'.
[  710.445854][T31542] bond5: option broadcast_neighbor: invalid value (5)
[  710.455745][T31542] bond5 (unregistering): Released all slaves
[  710.518886][T31549] macsec2: entered allmulticast mode
[  710.524764][T31549] macsec0: entered allmulticast mode
[  710.583471][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.627966][T10338] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  710.635959][T10338] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  710.660353][ T5902] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  710.668691][T10338] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  710.688995][T10331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.732522][T31565] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6594'.
[  710.788626][T31571] syzkaller0: entered promiscuous mode
[  710.795203][T31571] syzkaller0: entered allmulticast mode
[  710.807380][T10338] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  710.816200][T10338] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  710.825129][T31547] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  710.833478][T31568] syz_tun: entered allmulticast mode
[  710.851593][T10338] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  710.902605][T31546] tipc: Resetting bearer <eth:syzkaller0>
[  710.923462][ T5902] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  710.971324][T31576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6596'.
[  711.089816][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.563671][   T10] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  711.883664][ T5942] tipc: Node number set to 1187977353
[  712.115133][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  712.511412][T31546] tipc: Disabling bearer <eth:syzkaller0>
[  712.524639][T31565] dvmrp8: entered allmulticast mode
[  712.646900][T31587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6599'.
[  712.664913][T31586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6598'.
[  712.744034][T31591] Can't find ip_set type hash:n
[  712.840713][T31600] syzkaller0: entered promiscuous mode
[  712.846480][T31600] syzkaller0: entered allmulticast mode
[  712.881191][T31601] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  713.155827][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.234831][T10338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.734402][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.837532][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  715.156078][T10313] net_ratelimit: 3 callbacks suppressed
[  715.156096][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  715.233754][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  715.559547][T31674] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  715.586494][T31671] __nla_validate_parse: 4 callbacks suppressed
[  715.586511][T31671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6618'.
[  715.589628][T31674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6620'.
[  715.653071][T31671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6618'.
[  715.797339][T10324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  715.911991][   T30] audit: type=1800 audit(1762725953.160:12): pid=31676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6616" name="memory.events" dev="tmpfs" ino=869 res=0 errno=0
[  716.191428][T30321] syz_tun (unregistering): left allmulticast mode
[  716.275497][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.394514][T31700] bond5: option primary_reselect: invalid value (6)
[  716.406421][T31700] bond5 (unregistering): Released all slaves
[  716.437492][T10313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.587392][ T6798] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.652211][ T6798] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.771292][ T6798] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.960327][ T6798] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.054947][T28255] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  717.066880][T28255] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  717.075295][T28255] CPU: 1 UID: 0 PID: 28255 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  717.084822][T28255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  717.094863][T28255] RIP: 0010:klist_remove+0x14a/0x340
[  717.100143][T28255] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 79 6e e8 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 5a 6e e8 f6 49 8b 44 24 58 48 89 44 24 08
[  717.119738][T28255] RSP: 0018:ffffc9001a7ff820 EFLAGS: 00010202
[  717.125794][T28255] RAX: 000000000000000b RBX: ffff888020b7bc80 RCX: 0000000000000000
[  717.133748][T28255] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  717.141700][T28255] RBP: ffffc9001a7ff920 R08: ffffffff8f639383 R09: 1ffffffff1ec7270
[  717.149656][T28255] R10: dffffc0000000000 R11: fffffbfff1ec7271 R12: 0000000000000000
[  717.157610][T28255] R13: 1ffff1100a9b4b8c R14: ffff888054da5c60 R15: dffffc0000000000
[  717.165587][T28255] FS:  0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000
[  717.174500][T28255] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  717.181065][T28255] CR2: 0000200000001880 CR3: 000000000dd38000 CR4: 00000000003526f0
[  717.189021][T28255] Call Trace:
[  717.192285][T28255]  <TASK>
[  717.195200][T28255]  ? __pfx_klist_remove+0x10/0x10
[  717.200226][T28255]  ? __pfx_kobject_move+0x10/0x10
[  717.205231][T28255]  ? do_raw_spin_unlock+0x122/0x240
[  717.210423][T28255]  ? get_device_parent+0x366/0x3a0
[  717.215518][T28255]  device_move+0x193/0x700
[  717.219923][T28255]  hci_conn_del_sysfs+0xb8/0x170
[  717.224844][T28255]  hci_conn_del+0xc33/0x11b0
[  717.229430][T28255]  hci_conn_hash_flush+0x191/0x230
[  717.234524][T28255]  hci_dev_close_sync+0xaef/0x1330
[  717.239625][T28255]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  717.245158][T28255]  ? up_write+0x1c4/0x420
[  717.249474][T28255]  hci_unregister_dev+0x21a/0x510
[  717.254482][T28255]  vhci_release+0x152/0x1a0
[  717.258965][T28255]  ? __pfx_vhci_release+0x10/0x10
[  717.263970][T28255]  __fput+0x44c/0xa70
[  717.267939][T28255]  task_work_run+0x1d4/0x260
[  717.272516][T28255]  ? __pfx_task_work_run+0x10/0x10
[  717.277609][T28255]  ? do_exit+0x6b0/0x2300
[  717.281936][T28255]  ? kmem_cache_free+0x19b/0x690
[  717.286885][T28255]  do_exit+0x6b5/0x2300
[  717.291041][T28255]  ? count_memcg_event_mm+0x21/0x260
[  717.296317][T28255]  ? __pfx_do_exit+0x10/0x10
[  717.300896][T28255]  ? _raw_spin_unlock_irq+0x23/0x50
[  717.306083][T28255]  ? lockdep_hardirqs_on+0x9c/0x150
[  717.311270][T28255]  do_group_exit+0x21c/0x2d0
[  717.315846][T28255]  __x64_sys_exit_group+0x3f/0x40
[  717.320864][T28255]  x64_sys_call+0x21f7/0x2200
[  717.325523][T28255]  do_syscall_64+0xfa/0xfa0
[  717.330016][T28255]  ? lockdep_hardirqs_on+0x9c/0x150
[  717.335200][T28255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  717.341246][T28255]  ? clear_bhb_loop+0x60/0xb0
[  717.345909][T28255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  717.351782][T28255] RIP: 0033:0x7fd6de38f6c9
[  717.356181][T28255] Code: Unable to access opcode bytes at 0x7fd6de38f69f.
[  717.363181][T28255] RSP: 002b:00007fff6c39fdf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  717.371583][T28255] RAX: ffffffffffffffda RBX: 00007fd6de41385d RCX: 00007fd6de38f6c9
[  717.379535][T28255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  717.387486][T28255] RBP: 00007fd6de41386f R08: 00007fff6c39db97 R09: 00000000000927c0
[  717.395527][T28255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  717.403483][T28255] R13: 00000000000927c0 R14: 00000000000aee91 R15: 00007fff6c39ffa0
[  717.411445][T28255]  </TASK>
[  717.414458][T28255] Modules linked in:
[  717.418727][T28255] ---[ end trace 0000000000000000 ]---
[  717.426440][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.510939][T28255] RIP: 0010:klist_remove+0x14a/0x340
[  717.516648][T28255] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 79 6e e8 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 5a 6e e8 f6 49 8b 44 24 58 48 89 44 24 08
[  717.536479][T28255] RSP: 0018:ffffc9001a7ff820 EFLAGS: 00010202
[  717.542564][T28255] RAX: 000000000000000b RBX: ffff888020b7bc80 RCX: 0000000000000000
[  717.551183][T28255] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  717.559426][T28255] RBP: ffffc9001a7ff920 R08: ffffffff8f639383 R09: 1ffffffff1ec7270
[  717.567845][T28255] R10: dffffc0000000000 R11: fffffbfff1ec7271 R12: 0000000000000000
[  717.576114][T28255] R13: 1ffff1100a9b4b8c R14: ffff888054da5c60 R15: dffffc0000000000
[  717.584189][T28255] FS:  0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000
[  717.593132][T28255] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  717.599930][T28255] CR2: 00007f8256395000 CR3: 000000000dd38000 CR4: 00000000003526f0
[  717.608363][T28255] Kernel panic - not syncing: Fatal exception
[  717.614728][T28255] Kernel Offset: disabled
[  717.619052][T28255] Rebooting in 86400 seconds..