last executing test programs:

1m45.503491257s ago: executing program 1 (id=2810):
write(0xffffffffffffffff, &(0x7f0000000000)="64ecf9eaf0400ea33689d9ebcb3c37b33924a1447f217525314a8541e2975ec413d91849c0ccd2ef1c5f128defdcb64ace5679d1e17889c63f4de2c5358d9b7d9c0a79ef6d23301d5bd01a4b0d13da0a883fe834db4d52a47cd4f33ac229112b26628293def8f18505f4826109e7a5bf17abc21fcf48e96ae303cd25903fbee26e91da983e8fbf2c4b6aea7b621d1ca210868e707e58ef051803e4b17707e77a8a1b40ddbbf977c762016d4588fa2acf56f7b85c42192942c59ec09820c69d4a933a", 0xc2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_netdev_private(r0, 0x8920, &(0x7f00000000c0))
r1 = getpid()
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x32, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ac4000000060a0b0400000000000000000200fffe980004802800018008000100666962001c000280080003400000000608000240000000020800014000000009200001800700010063740000140002800800024000000011080004400000000c400001800d00010073796e70726f7879000000002c000280050002000700000005000200090000000600014090100400050002000200000006000140000800000c00018008000100647570000900010073797a30000000000900020073797a32"], 0x100}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000180)=0x80e6fd, 0x4)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, 0x1401, 0x444aae248103e803, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
r6 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000000)={0x33}, 0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000240)=0x8)

1m44.369979441s ago: executing program 1 (id=2825):
socket(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000000000000000000300000085100000030000001800000004000000000000b8000080009500000000000000180100002020692500000000002020207b1af8ff00000000bfa1004000000000070100009fedffffb702000008000000b70300000900000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet6(0xa, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000000880)=@ethtool_stats={0x11}})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x3, 0xeffc}, &(0x7f0000000080)=0x90)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8}, {0xfff2}, {0xfff1, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x48, &(0x7f0000000100)=0x6, 0x4)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1a000000002800001800348014f802757e88fd09c2310000000000000000000014"], 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r10=>0x0]}, &(0x7f0000000040)=0x8)
unshare(0x6a040000)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000040)={r10, 0x101}, 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000004c0)={r10, @in6={{0xa, 0x4e24, 0x2, @mcast1, 0xf}}}, 0x84)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB="05"], 0x10)
close(0x3)

1m39.34852961s ago: executing program 1 (id=2850):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x3a, 0xffffffffffffffd0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x27)

1m39.083935697s ago: executing program 1 (id=2855):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000180)=0x1, 0x8)
bind$vsock_stream(r1, &(0x7f0000000940), 0x10)
close(0x3)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
r3 = accept4(r0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r3)
r4 = socket$kcm(0x29, 0x5, 0x0)
r5 = socket(0x1e, 0x805, 0x0)
connect$tipc(r5, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3, {0x9}}, 0x10)
connect$tipc(r5, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x3}}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000206010100000000000000000000000805000100070000000900020073797a310000000014000780050015009e0000000800120000000000050005000200000005000400010000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x4004080}, 0x20004000)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020000007a31000000000800410073697700140033"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)

1m38.843989635s ago: executing program 1 (id=2859):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000400)=0x4, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
close(0x3)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'ip6gre0\x00', 0x4000})
pipe(&(0x7f0000000600)={<r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
splice(r3, 0x0, r4, 0x0, 0x1100000000f336, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYRESHEX=r0], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c01250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10)

1m38.63551606s ago: executing program 1 (id=2864):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000) (async)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x7, 0x7, 0xffffffffffffffff, 0x10001, 0xf777, 0x6})
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000180)=0x1) (async)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000180)=0x1)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async)
connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r5, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004000}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan4\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan3\x00', <r9=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r7, 0xa28786fbf885a01, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4478f38ec0ed3c98}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r10, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7, 0x5a}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40014}, 0x4011)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r13, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa4a4}]}]}, 0x4c}}, 0x880) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r13, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa4a4}]}]}, 0x4c}}, 0x880)
sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x118, r10, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xec, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1b, 0x2, "6b8f99a4ca39041fb2ef1420171d853a47fe95e91b7c2a"}}, {0x9c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x98, 0x1, "a1355aec59d3f72b6d2c379157182cd95968e0bf17250eba6b965e4b26cd78936bd9b950f7cf98411a81908f1e98772e85b78cac93363071f9dac2c2f33edfac85ef1a3640b472ee4462ce6cc45fceb5af58f55e1b168c1c35b09ec5535ba38cca9ce68a43f18a7b1ee1f9c1eec63f19f33ea2cacc9d6a745ebb086c493ffc587c90ab7dd370d5dd1aa476a6fb3073376dc4a1c9"}}, {0x2c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x28, 0x1, "52d7182afc227d0134fccd6ce156acd34f1b371d74a6b106f8d6f5d48b35fc5c3e6331e7"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x10000}]}, 0x118}}, 0x4000)
r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f0000000bc0))
r15 = syz_genetlink_get_family_id$team(&(0x7f0000000c40), r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={0xffffffffffffffff, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[0x0], ""/16, <r16=>0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0], 0x0, 0xb3, &(0x7f0000000d40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000fc0)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001000)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r12, &(0x7f0000001800)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001200)={0x594, r15, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r16}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r17}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcd}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x45d5, 0x7f, 0x84}, {0x7, 0xb, 0x0, 0x4}, {0xffff, 0x0, 0x6, 0x83b7}, {0x1, 0x3, 0x0, 0x7fffffff}, {0x2, 0x7f, 0xc, 0x401}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaaca}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8}, {0x110, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x10, 0x40, 0x4, 0xfffffff9}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0xd2, 0x7b, 0x200}, {0x3, 0x9, 0x3, 0x657}, {0x1, 0x7f, 0x8, 0x7fffffff}, {0x4, 0x7, 0x6, 0xa}, {0x3, 0x8, 0x31, 0x1}]}}}]}}]}, 0x594}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000080) (async)
sendmsg$TEAM_CMD_PORT_LIST_GET(r12, &(0x7f0000001800)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001200)={0x594, r15, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r16}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r17}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcd}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x45d5, 0x7f, 0x84}, {0x7, 0xb, 0x0, 0x4}, {0xffff, 0x0, 0x6, 0x83b7}, {0x1, 0x3, 0x0, 0x7fffffff}, {0x2, 0x7f, 0xc, 0x401}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaaca}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8}, {0x110, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x10, 0x40, 0x4, 0xfffffff9}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0xd2, 0x7b, 0x200}, {0x3, 0x9, 0x3, 0x657}, {0x1, 0x7f, 0x8, 0x7fffffff}, {0x4, 0x7, 0x6, 0xa}, {0x3, 0x8, 0x31, 0x1}]}}}]}}]}, 0x594}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000080)

1m38.274494148s ago: executing program 32 (id=2864):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000) (async)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x7, 0x7, 0xffffffffffffffff, 0x10001, 0xf777, 0x6})
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000180)=0x1) (async)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000180)=0x1)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async)
connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r5, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004000}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan4\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan3\x00', <r9=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r7, 0xa28786fbf885a01, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4478f38ec0ed3c98}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r10, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7, 0x5a}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40014}, 0x4011)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r13, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa4a4}]}]}, 0x4c}}, 0x880) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r13, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa4a4}]}]}, 0x4c}}, 0x880)
sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x118, r10, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xec, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1b, 0x2, "6b8f99a4ca39041fb2ef1420171d853a47fe95e91b7c2a"}}, {0x9c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x98, 0x1, "a1355aec59d3f72b6d2c379157182cd95968e0bf17250eba6b965e4b26cd78936bd9b950f7cf98411a81908f1e98772e85b78cac93363071f9dac2c2f33edfac85ef1a3640b472ee4462ce6cc45fceb5af58f55e1b168c1c35b09ec5535ba38cca9ce68a43f18a7b1ee1f9c1eec63f19f33ea2cacc9d6a745ebb086c493ffc587c90ab7dd370d5dd1aa476a6fb3073376dc4a1c9"}}, {0x2c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x28, 0x1, "52d7182afc227d0134fccd6ce156acd34f1b371d74a6b106f8d6f5d48b35fc5c3e6331e7"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x10000}]}, 0x118}}, 0x4000)
r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f0000000bc0))
r15 = syz_genetlink_get_family_id$team(&(0x7f0000000c40), r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={0xffffffffffffffff, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[0x0], ""/16, <r16=>0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0], 0x0, 0xb3, &(0x7f0000000d40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000fc0)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001000)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r12, &(0x7f0000001800)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001200)={0x594, r15, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r16}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r17}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcd}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x45d5, 0x7f, 0x84}, {0x7, 0xb, 0x0, 0x4}, {0xffff, 0x0, 0x6, 0x83b7}, {0x1, 0x3, 0x0, 0x7fffffff}, {0x2, 0x7f, 0xc, 0x401}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaaca}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8}, {0x110, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x10, 0x40, 0x4, 0xfffffff9}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0xd2, 0x7b, 0x200}, {0x3, 0x9, 0x3, 0x657}, {0x1, 0x7f, 0x8, 0x7fffffff}, {0x4, 0x7, 0x6, 0xa}, {0x3, 0x8, 0x31, 0x1}]}}}]}}]}, 0x594}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000080) (async)
sendmsg$TEAM_CMD_PORT_LIST_GET(r12, &(0x7f0000001800)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001200)={0x594, r15, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r16}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r17}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcd}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x45d5, 0x7f, 0x84}, {0x7, 0xb, 0x0, 0x4}, {0xffff, 0x0, 0x6, 0x83b7}, {0x1, 0x3, 0x0, 0x7fffffff}, {0x2, 0x7f, 0xc, 0x401}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaaca}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8}, {0x110, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x10, 0x40, 0x4, 0xfffffff9}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0xd2, 0x7b, 0x200}, {0x3, 0x9, 0x3, 0x657}, {0x1, 0x7f, 0x8, 0x7fffffff}, {0x4, 0x7, 0x6, 0xa}, {0x3, 0x8, 0x31, 0x1}]}}}]}}]}, 0x594}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000080)

2.832363953s ago: executing program 3 (id=3455):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x200}]}}]}, 0x40}}, 0x20040084) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x200}]}}]}, 0x40}}, 0x20040084)
r5 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x4, 0x10}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r6}]}}]}, 0x38}}, 0x4000080)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x4, 0x2, 0xf, 0x6, 0x0, 0x3, 0x2, 0x6, 0x1, 0x4], 0x3, [0x8b, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@gettaction={0x48, 0x32, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xd}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r13, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@gettaction={0x48, 0x32, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xd}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x48}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x34}}], 0x18}, 0x240040c4)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r14 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r14, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r14, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r14, &(0x7f0000007fc0), 0x800001d, 0x300)

2.583527763s ago: executing program 2 (id=3458):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x1000}, 0x0)

2.331437042s ago: executing program 2 (id=3460):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}]}, @NFT_MSG_NEWCHAIN={0x124, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xfd, 0xc, "fd1fb35f23abf5e4030668625907564e1946fa19fb9ad7e4ed5d25b5910b9725f87ae63986cbeab9fec7aee763c8b24103c13263c4cee1a36b193defdf72155d7e1155c174c0530b0d28cf5fbfb354735359729474c68c596672c84838668ec17927261ff6c05a9245aec9705c483338b44a2111e77f64112050b6c568de4252f9c16420e3b061e0869cd5341d7bb50e9f256bd94882f8e09020766864cf465154caf48d8808e660ba94a19e0c7c41d3a387ff2ea9564ac19f7cfad7ffc20bcf9cbacbec106d3d4028cdc689d0ab5fe6500982abc39d1cf20030b07fb34d53fa9b2e2405221a44f8f5fb4db6098e1859694f0174d88e45685a"}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6004}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x90, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0xc44611b2547f8793}, @NFTA_TABLE_USERDATA={0x65, 0x6, "09ec0968ab8abecc5b5ca1ad1ea34a566abefde993a0f9c8b213b0c3e7e9e3bea8a5f345cc54bc014d39ed2814e55f077dcf3b50fbbe6733ca85e2b963d4d6790002214df9b15c69eb97161495f9af6504c75d30f236f7d007a938aa0041c05f59"}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x110, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_USERDATA={0xe8, 0xd, 0x1, 0x0, "334807d6fe8755a543327efa23058d870ec3dafa31adcabf97ec2a57a596a4a8ae885066cf257c4b612969bc42adac33f4743a047627c83bb1d2e29bf9997cf9421c930b2acea596a7ebfc33a58a6ceb4a1a12676758e45f2e66d246ef291c7fccb741f0dec9a10f56886506b70959c85a88f26c4510bff9a404c774583c850290a77c20500880b99874afeb9a7caea0e7aa6c8f08bcf80e587e33b0fdbc0ab85078446daead65593c79898cfaa20d6fe2ff4860c2d4a16c05b5db7f0bdca1ef5f222d4d00c4bfb4af1ff727a0f80593866f29c9d12e1ec1519baffaef98ec9544b3ef0e"}, @NFTA_SET_TIMEOUT={0xc}]}, @NFT_MSG_NEWTABLE={0x27c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "278bbeb1f9f4b99a5c51b7166713d3e5d07b4eda377b84629c6bab157fe0ca9f332524bab8c47bc3d7dff6e7bd13dd75ee3d6a4a14b9e6fe00f6ec700c34d0d545891d0009c7669c60da84416d4fea48e1520046c280a9c90a1c71bf1f198f07f5f17d02de67cad7a0f7c72615c8e07edb07888dbdd38b3f3d1dc486894ddacfb8834b5e5391cee508c0ac6d88f7f8c1b6580a825cfa07ce0be30de6f0def88ff9ecec51c86d5e603960127d2c2980eb46c9e02a369464b87d"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xc7, 0x6, "d49c23037d4c9dc2822b5efcd7d49243bb5131110b8d4f925271da144710707fcfacc54559dc1df3290b2cc1c53d2e5f024eb0e2547c7e833dcf906d181ab632d34a34289eb2876f24f8dd05732ca5b21b3d6b5e1e8560297869d82f70978e74d28948563d0ad6c78fe4b9c3c809e54f3901bc7b8311bef51468d2695e2a307ef1107599bcde981f834faed487fe898b322ad711f799d032b9cf6b3fcc0bf274d9b46dcb4c847b30f5f32aa6a37baa8392c1c091c2229b6f12b35c626a322a3a516a11"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x74, 0x6, "76c479f849e94bfd0a5d5671e9c5ef49a65217eb5931628767026400d46abab12c1093c2e93033b74dfc2d2c4dcc249928c993bebe1cd807acdb58f64fd2582dbccdc5e22f31d9c455144e1cd0b5f33e80ed8d98f214457c814dc64cffdb896634b8ff4a4029d0eb75755c2586a247b5"}, @NFTA_TABLE_USERDATA={0x27, 0x6, "ae2e6ab6652dc2e221bee265777e25124b64ec61132ac8732135b0d5b0b693ff8c3604"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x644}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_stats})

2.146173136s ago: executing program 2 (id=3462):
unshare(0x28040680)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x28040680)
unshare(0x24020400)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44010)
ioctl$int_in(r3, 0x5421, &(0x7f0000000280)=0x2)
listen(r4, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r9, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r9, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xb0}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20016e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x40050)
socket$inet6(0xa, 0x5, 0x0)

2.035629411s ago: executing program 3 (id=3464):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, <r0=>0x0}, &(0x7f0000000040)=0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000001200), &(0x7f0000001240)}, 0x20)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000012c0), 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x11, 0x3ff, 0x8, 0x3, 0x20000, 0x1, 0x690c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50)
pipe(&(0x7f0000001380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001440)={0x1b, 0x0, 0x0, 0xaa3c, 0x0, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x14, 0x1004, 0x5, 0x100, 0x802, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@bloom_filter={0x1e, 0xde8, 0x32b, 0x91d, 0x880, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0x1b, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x65}, [@generic={0x10, 0x0, 0x1, 0x7e, 0x7ff}, @alu={0x4, 0x1, 0x4, 0xb, 0xb, 0xa2d4843f6df20124}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x1000, &(0x7f00000001c0)=""/4096, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000015c0)=[r1, r2, r3, r4, r6, r7, r8, r9], &(0x7f0000001600)=[{0x2, 0x2, 0x5}, {0x5, 0x5, 0xa, 0x269c1b9b889f2a4e}, {0x3, 0x2, 0x1, 0x1}, {0x1, 0x2, 0x5, 0x6}, {0x3, 0x4, 0x1, 0xb}, {0x4, 0x5, 0x9, 0x1}], 0x10, 0x1}, 0x94)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001740)="a8642ca1f572ab8f27cded2d11d088b5f83cb6290916c62402f85f13f28de5570d0d0e5428ad384a8fcd41177e674fed12c5db3514df7dde4902903ad46d0241460ba63ef6ab1bf1598d0cc823b15e868e7d3622f01850a682486482de9f77ffa72bee5f75a7be9b1c9d3898f3f311d7734f1ec2adba668a66e950f42fc12aafe7134d7d93a0a11ff2d947ee2ecd0873942015f2f9fbe0263ea7a129076b78bf2ebfa202f8cb2f778f6bba1b616aca9f7dce80b525dbff5c99c18e624be3f9e5ab378afd525c436f7430dbf81a3c4fc9b87d1a9ffdc0992c4813389142275dd4edaab652d4f673c290ad824affd83ccb", 0xf0}, {&(0x7f0000001840)="d8376c8b486662f63693b686f3d6912171d04a93ed36fba81d4064096d900f8c57fd89cbea80c728a722a223ae295887f321cff40a83397f698108c023378ba619f636e929c1e83995e88fa5829091", 0x4f}], 0x2, 0x0, 0x0, 0x11}, 0x2000044)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
poll(&(0x7f0000001940)=[{r4, 0x4200}, {r8, 0x2001}, {r10, 0x280}, {r8, 0x2}, {r5, 0x8000}, {r4, 0x4040}], 0x6, 0xfffffff0)
syz_genetlink_get_family_id$devlink(&(0x7f0000001980), r4)
r11 = accept4(r2, &(0x7f00000019c0)=@ll={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001a40)=0x80, 0x0)
ioctl$SIOCAX25DELUID(r11, 0x89e2, &(0x7f0000001a80)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r0})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000001ac0)={0x1, [0x0]})
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000001b00)=<r13=>0x0)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001b40)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x7fff, 0x4e20, 0x400, 0xa, 0x0, 0x80, 0x25, r12, r13}, {0x5, 0xd3, 0x9d5d, 0x3, 0x6, 0xfffffffffffffff9, 0x7, 0x6}, {0x6, 0x9, 0x4, 0xfffffffffffffffd}, 0xd, 0x6e6bbd, 0x2, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x4d2, 0xff}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x2, 0x31, 0xc76, 0xfffff98a, 0xfff}}, 0xe8)
bind$xdp(r2, &(0x7f0000001c40)={0x2c, 0x1, r12, 0x2f, r5}, 0x10)
r14 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r14, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001c80)="5d8d8065c8d74e49f907ac785ebacf6891e14b845c2b3e9176a6427b3da77f801440be24890546e0da51ae2de4b84954c5af9702ffd28af054a3db5651bdb26864b16434ce873d59517be1df2ca3c7298c45606881df672ca488e2613b63c13f315a086c1293ed35d757ff31a936e45e86d5bcf75c11c68a43a7487903bc85b8a13da2f76ebd060970662822184dd45eba3b908c2e90502af33c700a05eb75f3550b6983fcb9f00ca2190df8f9534766f2581147465bdbc13a93f898034712", 0xbf}, {&(0x7f0000001d40)="8306b42e64fc4da889336000faf9b006222c8e7e860e32577605331af35ec9538099d28d9820d34945f8f38d309b622736ef3d4bb23fedc5ef38117dac56135996c7d0926e8623d0f3b5c17e285786efee96572f1a04c6140deb2f3a369f0d970398dbefe931e5ea4b7412d2fcd0337c3882733f1e085f84b22681543f72138a6f4f1a25d06bce9695922d07adafd93d223ef94c96c43fa032790c70867f1b88ae69d71e4a8a34a05b08d8fb54ca72afcb187c09447d", 0xb6}, {&(0x7f0000001e00)="cfeb5879046449c13c2abe75d6e6a66b051fa4adf3e50601c73c0a8cb981331f70e6481966dfbd36caf5543065fad044c81a20ac6e42dbd4842cfb693a53997b50aa63da0dd8cb313bdcbe3d5088e363c7f1d69032e61a358c4c9f691fa5cf4269face357172c42863106cdc1ea80ce118828115240d1af747dab3d687830ccc22505af7ce44c0b015df9ec7c65d5bb718da675c324e68c22c911638c31dbd91c7acd63b23", 0xa5}, {&(0x7f0000001ec0)="f0aa092f89035666a56d0e73875c5d5477ba29f66ab4e7e139a681a41cdd5734077f2e807f3041244a328c4ab8726370a0d87ddfbb83a87fa58869c70a3d59a2ea16489690cbec189033dcd81761670c0a9415b0c031761c99af587c680b31d3541dc2e91ecea9f88a8834ac3eb4fb4cc00fb4afca7ac2fdbcc2d20d11a4493ad04f7a64dd3562124b13ad71a5ab3f25b8a95c80d4eddc32802bdb60", 0x9c}, {&(0x7f0000001f80)="48e6171930409252ca25878ec160e295c28d4ca34980f8d05d6683778f32708911a44a52a8d985cef15bb7ce2defad035056f46196d05b1917e604f8756a30769df300cbbf79a09004c5", 0x4a}], 0x5}, 0x8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0))
ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000002100)=r12)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002140)={r2}, 0x4)
r15 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r15, 0x6, 0xd, &(0x7f0000002180)='dctcp', 0x5)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002540)={r4, 0x0, 0xa5, 0xb5, &(0x7f00000021c0)="d9d848ca6a7be6af6500e8fa7e4695ab7cea2e6cac29afe543b346943bca48a381d079dec7a7bfc9234a67e6e0207d600f542ac47082e64ec788341ce63ea37e67dc1fbc9a2d8d2e5aa8fcd6f4e6b47549e40b7b7fa6d38d9363c5ef5b972c0b3821b67d019326aaa3d2ed4cc27a302663d67c0a316a743872504eaed60c290ca53ed7a3d1350cade4cd45ab25c690a1a0e13207b066b74604fbcaef6a0612121ce1af2850", &(0x7f0000002280)=""/181, 0x9, 0x0, 0xe7, 0xd3, &(0x7f0000002340)="e6bc1de591f02079ea1d5ebb15c415b956ae10ebc0fd1843b052b206974b50c06fc292de1bd5847a58d224d1dadbdacdd6801b302fbea461c7f52926101bf8cbc9fb38549e251131c6d435bd576c0a21bf1c3d0a185fd4ec17971c9b0349b950b30b7e45563ef2d84403dcbb11f0e8fb7c8db591b010c906061a4b327514bbfb8ac7cc0306287f192339c423e5c59ba425e0b5dd938b7bbf40f1b29f7cb377099096f80ffb95b18ff43b643d1287b5172b91e29464f8e8b20460e88088d87a65d503c2a9eb2a404721f764e2a2fb8cf4f22420984f17420fbe73429fc813b3418c1ff052851477", &(0x7f0000002440)="9c77a12bf9b36cd3200d0e678e2e028eeb12e420ab9865dd41683deab1872f77e5de88ff2e05b84323a15c21229002fbc1a80ebe9e9b874709c7baedecc64601a9a7672d1babda86a997d6903fb5f1f5c6259d9a547b5dda4691c8efa8cbb7cfeb99e16f1e5121bcb7984130f4f902354a90b36bf276c8af0e05b1e84cfe3b0dc28acc1bab9aca0fa63ea5c47ccdb43b2ae10e5bb99cf55c617c67cc170e1a4d8c9e64e383ff1c04fe94e2e98791224f7bf769e9c7271a8321d88e54d875eb30ebccd0c90f1ce268dfc279777c61f5f5235fbb", 0x7, 0x0, 0x1}, 0x50)
ioctl$SIOCPNADDRESOURCE(r5, 0x89e0, &(0x7f00000025c0))

1.980997255s ago: executing program 0 (id=3465):
socket$alg(0x26, 0x5, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
sendmmsg$alg(r1, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c", 0x1}], 0x1, 0x0, 0x0, 0x8010}], 0x1, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r4, 0x0, 0x0, 0x800) (async)
r5 = accept4(r4, 0x0, 0x0, 0x800)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r1, @ANYRES64=r5, @ANYRES16], 0x31)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7, 0x0, 0x7fffffff}, 0x18)
epoll_create(0x9) (async)
r8 = epoll_create(0x9)
epoll_pwait(r8, &(0x7f00000004c0)=[{}], 0x1, 0x102, &(0x7f0000000200)={[0xff]}, 0x8) (async)
epoll_pwait(r8, &(0x7f00000004c0)=[{}], 0x1, 0x102, &(0x7f0000000200)={[0xff]}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.937277518s ago: executing program 2 (id=3466):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r2=>0x0})
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90)
r4 = socket(0x10, 0x3, 0x0)
unshare(0x8000400)
accept4$netrom(r4, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$unix(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000040)="af354bddc761ddde01f6f3a5", 0xc}], 0x1, 0x0, 0x0, 0x40050}, 0x840)
pipe(&(0x7f00000045c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f0000000140)=[{&(0x7f00000000c0)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0x4)
r9 = socket$inet(0x2, 0x3, 0x7f)
setsockopt$inet_int(r9, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r9, &(0x7f0000000040)={0x2, 0x20, @remote}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
splice(r7, 0x0, r9, 0x0, 0x8000, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r6], 0x20}}, 0x8080)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r3], 0x34}}, 0x4008000)

1.795751515s ago: executing program 0 (id=3467):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x1f}})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'bond_slave_1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x13)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @mcast2, 0x7}, 0xf)
sendto(r5, &(0x7f0000000440)="3f67d8f6db40f3a79f6dec6e2e9bd5978a514b5f7338fdd29925f01932b1559b20ed3f0fc3b68d66f358eb338ac2e951f8b4ae1a37544a15a0d325291919736f752795ff85dcb076c41f2d37f5f635c2c2555a7fdc8f2542fcc789c0bdb33f0822ed25608582c3dedbe07ba72ecc73b4321c450cd150c66d48c4532ecc076ae449578d9d80845eea0da72f422e8ce665c83dde85f1b99b5bd7e789f070759a73a4d1", 0xa2, 0x4085, 0x0, 0x0)
sendto$inet6(r5, &(0x7f0000000140)="1b22", 0x2, 0x800, 0x0, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc)
getpid()
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r6], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x6, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10)
sendmmsg(r8, &(0x7f0000000180), 0x4000190, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4044080}, 0x30)
socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000200001d15755fc0000000000020020000300000400000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20054824)

1.792886215s ago: executing program 3 (id=3468):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xd4}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x19)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xd4}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x19) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) (async)

1.737684069s ago: executing program 3 (id=3469):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r1, 0xfc2ef000)
socket(0x2c, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRES32=r3], &(0x7f0000000380), 0x46, 0x0, 0x1, 0x2}, 0x28)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500000100000000000000000a0000000800ff00", @ANYRES32, @ANYBLOB="657342941bc67c6e56ee000057db43ea5f"], 0x1c}}, 0x20000080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000003ebfa4653981b67a5a95000701feffffff00000000017c0000040042800c00018006000600800a00000800028004001280"], 0x2c}, 0x1, 0x0, 0x0, 0x4048000}, 0xc000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002bc0)=@delchain={0x4c, 0x65, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x4}, @TCA_BPF_FD={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x1d8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x4000000, 0x0, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
mmap(&(0x7f0000039000/0x400000)=nil, 0x400000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1a, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"/686, @ANYRES32=r3, @ANYRES64=r0, @ANYBLOB="4d3d5ce762b9d95dd0b2543ce5f32fd2f061c874e2c7cffb816c85f6a3d16da4af36cadc15e2d47d9382a941d77f9f98431d4815d761874eb61dcca44602cdfbd339ce78027e3f1631046890f55e43", @ANYRESHEX=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10000}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
unshare(0x8040600)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)

1.577542435s ago: executing program 2 (id=3470):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_SRC={0x14, 0x2, @private2}]}, 0x30}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={r3, 0xb, "c2c82ab5572f8bacbc7c5f"}, &(0x7f00000001c0)=0x13)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x2, 0x4, 0xa4, 0x1, 0x400}, 0x50)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socketpair(0x1a, 0x2, 0x0, &(0x7f0000000000))
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4000004}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000a0850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x81, 0x5, 0x3, 0x2, r4, 0x198, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0xd}, 0x50)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xd, 0x4}, {0x4, 0x1}, {0xb, 0x1}]}]}, {0x0, [0x30, 0x30, 0x2e]}}, &(0x7f0000000400)=""/166, 0x41, 0xa6, 0x1, 0x81}, 0x28)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}, @func={0x1, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x5f]}}, &(0x7f00000005c0)=""/2, 0x37, 0x2, 0x1, 0x383ab887}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x1, 0x5, 0x5, 0x8002, r7, 0xd94, '\x00', 0x0, r8, 0x4, 0x1, 0x5, 0xe, @value=r9}, 0x50)

1.519349709s ago: executing program 5 (id=3471):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000))
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0x3dc, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MEDIA={0x138, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdfe6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9e3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x83c0}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xec}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8fd}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb8b}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x644}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbc7e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe0e900}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb84}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x4}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x401, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4080010)
r3 = socket$packet(0x11, 0x0, 0x300)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'ip6gre0\x00', <r4=>0x0, 0x4, 0xd, 0x5, 0x4, 0x1, @empty, @dev={0xfe, 0x80, '\x00', 0x10}, 0x1, 0x20, 0xe, 0x9}})
bind$packet(r3, &(0x7f0000000700)={0x11, 0x11, r4}, 0x14)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000740)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000780)=0x20)
r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r6, 0x400442c9, &(0x7f00000007c0)={0x7ff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}})
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$rxrpc(0x21, 0x2, 0x0)
sendto$rxrpc(r7, &(0x7f0000000800)="cb27c349c6f0aa9d973bfec6ff3e98930cf99c11324fb1b39edfb980257e87eb5fa55ca45d6aa4eda57a9713bf1e1fd2c1ef384dd319824cd5a8afe80b17145d0faed069687dd9f94b3711fe7324c2498db8bc28b14588706561d3dbc9", 0x5d, 0x80, &(0x7f0000000880)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x800, @empty, 0x1}}, 0x24)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'ip_vti0\x00', <r8=>r4, 0x7800, 0x8, 0xe9eb, 0x8c6, {{0xe, 0x4, 0x1, 0x3, 0x38, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@rr={0x7, 0x13, 0xac, [@dev={0xac, 0x14, 0x14, 0x13}, @remote, @loopback, @broadcast]}, @lsrr={0x83, 0xf, 0x4c, [@rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0x36}]}, @end]}}}}})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x6c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20008000)
sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000ac0)="088c3954c156a30be79587863ba75d1f8e3babfc744df3fef5f2fbf18669016bbb9907e3a1cd909b111519b1c3b63e2267bbec121ec99dc1226cc45473c4b79497ba32b0a332c72190ab1cd77767356e3039aa33a021e4523cf8e5327fc9d936781e557b0d731b511984f55e4b7537bf2278b5a09bf344bf47e39cc2438489beb6a9bf31f050504bbc8a4e028e5ada9124ce61db691d331bbee9501d09babd104d07c5eb4cc88d69d057a4a92b1352d9148634d936aba137261a648ca00973263403f2366cb6dcca5a58a044ec5f5fe682adb4aaf4e6bb70a8bdc5", 0xdb, 0x0, &(0x7f0000000bc0)={0xa, 0x0, 0x53aa, @dev={0xfe, 0x80, '\x00', 0x2b}, 0xffff, 0x4}, 0x20)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40800)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000d40), r9)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r10, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r11)
socket$inet6(0xa, 0x6, 0x2)
recvmsg(r5, &(0x7f0000002100)={&(0x7f0000000e80)=@caif=@rfm, 0x80, &(0x7f0000002040)=[{&(0x7f0000000f00)=""/178, 0xb2}, {&(0x7f0000000fc0)=""/101, 0x65}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x3, &(0x7f0000002080)=""/67, 0x43}, 0x40002000)
r12 = socket$pptp(0x18, 0x1, 0x2)
ioctl$PPPIOCGMRU(r12, 0x80047453, &(0x7f0000002140))

1.410762428s ago: executing program 4 (id=3473):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0)
recvmsg$can_bcm(r0, &(0x7f0000000540)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000140)=""/52, 0x34}, {&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/225, 0xe1}], 0x6, &(0x7f0000000440)=""/206, 0xce}, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$rds(0x15, 0x5, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="3800000040000701feffffff0000000001780000040042800c00018006000600800a0000140002800d001480040005"], 0x38}, 0x1, 0x0, 0x0, 0x488d5}, 0xc000)

1.356089274s ago: executing program 3 (id=3474):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=<r1=>r0], 0x20}, 0x1, 0x0, 0x0, 0x4040050}, 0x2400c014) (async)
socket$netlink(0x10, 0x3, 0x6) (async, rerun: 64)
epoll_create1(0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0)
socket(0x14, 0x1, 0x4) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x2c}}, 0x0) (async)
r4 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r8=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000000c0)={r8, 0x5, 0x30, 0x5, 0x80000000}, &(0x7f0000000100)=0x18)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000140}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="0001f0bd70ff00000000000000000c00060d2e3008000217050000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x10)

1.307475179s ago: executing program 0 (id=3475):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'gre0\x00', {}, 0xff}) (async)
close(r0) (async)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000080)) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e20, @broadcast}, {0x306, @local}, 0x2, {0x2, 0x4e20, @broadcast}, 'pim6reg0\x00'})
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000180)={@empty, @remote}) (async)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f00000001c0)) (async, rerun: 64)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x800)
socket$rds(0x15, 0x5, 0x0)
ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000400)={{r2}, 0x5, &(0x7f00000003c0)=[0x1, 0xfffffffffffff001, 0x5000, 0x7fffffffffffffff, 0x7fff], 0x10, 0x55175ccf8692ef48}) (async)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r4)
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x284, r6, 0x400, 0x70bd2d, 0x8, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd0a}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd84a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x86}]}, @TIPC_NLA_NODE={0x13c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe5, 0x3, "e1f99d058617e4bd84fab61ce990307f278eb00b879a3832d168804cb3acfcdccc8d7203a1090e962db62cf73de9404001c5b0a04ec1bf1b1e6c970fb6d235781e0fd66cf2d6c6c9e662310291ad015501b610eaa2348b4b7d6ae4e8504cfba2a8f67f103339de754c71795f93e77d72f8ea8ce96a976e2ce1c120cf18f1b7a900bfec67f299b6b50c9437d5dbb5e6ee66c1738f4ddab75b7bd70e3cdbf77903b7a4815cba9736793d358784b17b67a8aadbb05a236c43373e2046cea07878d91251888b9ce7d0945ad1141b33a7ea951ccd0e4ee701b2c5429e1f8e2151ebac00"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "c678d92a4eefd9c6210ad40c7101f176b4f6e08b3d8b8fd4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r4)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x14000800)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000980)={0x1, 0x4}) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r4) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000b00)={'tunl0\x00', &(0x7f0000000a40)={'gre0\x00', <r9=>0x0, 0x1, 0x0, 0x20d5, 0x3, {{0x26, 0x4, 0x1, 0x0, 0x98, 0x68, 0x0, 0x5, 0x29, 0x0, @loopback, @multicast1, {[@timestamp_addr={0x44, 0x2c, 0x36, 0x1, 0x9, [{@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x4}, {@rand_addr=0x64010101}, {@multicast1, 0xec}]}, @noop, @timestamp_addr={0x44, 0x54, 0x62, 0x1, 0x9, [{@multicast2, 0x1}, {@broadcast, 0x1}, {@multicast2, 0x80000000}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x9}, {@multicast1, 0xe}, {@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast2, 0xe6}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x1000}]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x54, r8, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004005) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000c40), 0x80001, 0x0)
sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80808}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xd0, r6, 0x100, 0x6, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x271c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004}, 0x24008845) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000e40)) (async)
bind$vsock_stream(r4, &(0x7f0000000e80)={0x28, 0x0, 0x2711, @host}, 0x10)

1.245403325s ago: executing program 4 (id=3476):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_FDB={0x4}]}, 0x30}}, 0x0) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async, rerun: 32)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (rerun: 32)

1.16374974s ago: executing program 0 (id=3477):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3c, 0x1, 0x4, 0x6dd1, 0x4000212a, 0x40000004, 0x6, 0x2, 0x1}})
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002700)={{{@in6=@rand_addr=' \x01\x00', @in6=@remote, 0x4e20, 0xfffb, 0x4e21, 0x1, 0x2, 0x20, 0x0, 0x62}, {0x1, 0x7, 0x0, 0x5, 0x7fff, 0x7, 0xfff, 0x70}, {0x8, 0x3, 0x8, 0x2cc}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x32}, 0x2, @in=@loopback, 0x0, 0x2, 0x0, 0xf8, 0x6, 0x6, 0xaec3}}, 0xe8)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
recvmmsg(0xffffffffffffffff, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000006200)=""/4096, 0x1000}], 0x1}}], 0x2, 0x60, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x23328fa3312a3cb, 0x4000000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x30b042, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x100, 0x3, 0x6361, 0xfffffff8, 0xfffffffd, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x10001, 0x3, 0x8}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xc}, {0xd, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x100, 0xac7, 0x5, 0x1, 0x3ff, 0xff, 0x4, 0x6, 0x4}}}}]}, 0x58}}, 0x4010804)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14)
r11 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x10)
poll(&(0x7f0000000240)=[{r0, 0x33}, {r1, 0x248}, {0xffffffffffffffff, 0x14cc}, {r0, 0x10}, {r11, 0x10a2}, {r0, 0x450}], 0x6, 0x9)

1.043790892s ago: executing program 3 (id=3478):
socket(0xa, 0x80000, 0x1)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="1b408ceb5d818960553bdcee6501e5e4e86943e81dfc0c6750a01a9c934a164f59284e22359a7f8a3bb51a1f33dec70d680baee62681e70a2872631b5ee970d150cdf45b30e0a7e57605f9097d29362ce4b2d5e447c9a417bac826264a0b61bdcd0a13e9ae4efc39285b5c7832f70837fe5ac402f65a25971dde632beea63814ee0c10ad1ca55be73f35edab66c7369d65eda56565d3debe857df145e8feae0f0154807763201c4188713aedf6f448a8317505515d6772fc573fb1f95ac7", @ANYRES16=r5, @ANYBLOB="020024bd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c004}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)=<r7=>0x0)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=<r11=>0x0)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)=<r12=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000240)=<r13=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000280)=<r14=>0x0)
sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x4c}}, 0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r15=>0x0)
r16 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002200000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r16, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r15], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="5004010104040306d7a289cdb3011a167a7b6b8438ec8f"], 0x7)

1.031922797s ago: executing program 5 (id=3479):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, &(0x7f0000000040)="9fd49b6cbfefd5aae0c09be66a5ee5969fa4159cc21542f476826e1c11157d274eeed8fc53ee48e584df8cacaa6e5a0eb487bc91944eade111a0a75a015a2ba1e0bab555364a72f7692ea5777b5c99941341c141dd84eb24d295579d5ebfcff6ed525f64371c8e22ef", 0x69, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local, 0x10001}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x38835094}}], 0x18}}], 0x2, 0x4000800)

982.935931ms ago: executing program 4 (id=3480):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000020000007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf86000000000000070800", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000002000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xf, 0x4, 0x4, 0x2}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2c}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f00000004000000040000001500000000000000ef4ef342bc809e232756f045ab1d75a368cb2e6100273bdab89a51d6227513756fa00c9ef3af57e76fc505a5813e7df2603a6e44966e0006c338033da843ddc04a6879298405bcd5bee894edecdee4624535a6dee47c00f3fd40ebc2fa1d37bb087f300288aed39618e341c183db7be9666c5652cca2d3495e4ba6e45790e08d1ed97d14123c45276caeca6a42bbcafbe11aa4510fc98146de3b025bda519ab9b1d455a9f5b2f6d0480259a4513d71995cfb95752631113346345a6b846e9555fd19a0dcce6ab6432f9fb3183bab59f5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@bloom_filter={0x1e, 0x0, 0x8000, 0xffffffff, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x2}, 0x50)
r7 = socket$packet(0x11, 0x3, 0x300)
sendmmsg$sock(r7, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0xff, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000200)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}}], 0x1, 0x4)
bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3, 0x4}}, 0x10)
bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
r8 = socket$tipc(0x1e, 0x5, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r10 = socket$tipc(0x1e, 0x5, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r9, 0x2, 0x5, 0x1}, 0x50)
sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x1, 0x80000009}, 0x80}}, 0x10, 0x0}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&\x00'], 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r5, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$TIPC_GROUP_LEAVE(r10, 0x10f, 0x88)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={<r12=>0x0, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x7ff, @private1, 0xe}, @in={0x2, 0x4e24, @local}]}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x84, &(0x7f00000001c0)={r12, @in6={{0xa, 0x4e21, 0x8e3, @private1, 0x8}}}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

862.49073ms ago: executing program 5 (id=3481):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9", 0x10}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000440)=""/15, 0xf}, {&(0x7f0000001940)=""/4107, 0x100b}], 0x2}, 0x2d}], 0x1, 0x142, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r7}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r5, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)
sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x74, r5, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x47}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x8c0}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0xd0, 0x1a0, 0xd0, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0x0, 0xffffff00, 0xffffff00], 'veth0_to_bridge\x00', 'macvlan0\x00', {}, {}, 0x88, 0x40, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x6}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffff00], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r12=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000018c0)=@newtfilter={0x124, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r12, {0xf}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xf8, 0x2, [@TCA_U32_SEL={0xf4, 0x5, {0x1, 0xd3, 0xe, 0x1, 0x6, 0x9, 0x200, 0x168f8f3e, [{0x9, 0x7f, 0x20, 0x9}, {0x2e5, 0x7, 0xffff, 0x3ff}, {0x0, 0x4, 0x8000, 0xd40d}, {0x200, 0x8, 0x3}, {0x3, 0x0, 0x41, 0x7fffffff}, {0x2, 0xcaba, 0x9, 0x1}, {0xfffffffb, 0x1, 0x7, 0x7}, {0x1, 0x0, 0x2, 0x1}, {0xffffffff, 0x9, 0x5, 0x7f}, {0x3e1e, 0x7, 0x4, 0x6}, {0x9, 0x8, 0x800, 0x4}, {0x2, 0xfff, 0x1000, 0x1}, {0x2, 0x0, 0x9, 0x7}, {0x1, 0xffff, 0xaaf, 0x7}]}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0xccd4ddef28bd690b}, 0x40094)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, 0x1, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c001}, 0x48000)

744.115269ms ago: executing program 4 (id=3482):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000008000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e21, @empty}], 0x20)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0x1, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000280)="f4000900062b2b25fe800000000000", 0xf}, {&(0x7f00000003c0)="60a0bde683e82c39d5cbb2b625ca1cd9e0ac9ab9e22b196120", 0x19}], 0x2}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28)
recvfrom$inet6(r4, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0)
splice(r4, 0x0, r3, 0x0, 0x10000008ebe, 0x6)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r6 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000540)=""/81, 0x51, 0x0, &(0x7f0000001700)=""/4109, 0x100d}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

699.071483ms ago: executing program 0 (id=3483):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
socket$can_raw(0x1d, 0x3, 0x1)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0xb, 0x4, 0x100002)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x36, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf507}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x1, 0xb, 0x6, 0x9, 0x18, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x9, 0x4, 0x0, 0x6, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @cb_func, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884)

604.1015ms ago: executing program 5 (id=3484):
socketpair(0x22, 0x2, 0x2, &(0x7f0000000000))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0xfffc) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
close(0xffffffffffffffff) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) (async)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) (async)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async)
syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c0000fd510000fb02907800000000e000030000009078006400d2b3bff4cffaee6304a35c3d0528f283397685cf998b7181e484b64e4060ea93527becbb6dec01fe7db43e9aa080f6efe815f07df8655390d66b57dc8fd61dda5190511c26e13b63eae35c4806b19479360fd0a8f1d50f4800a9d8f13395b52cd44dbc4ea0bbf2f449b1174a6272f257b20f5b476ff52be0157e192c9a2c3be567b4fa32f4e8e281902231e3c72305f8e442c9b29a3cdd441832fa634280da14bd1b81f79fa00d70303d7a68c7551c6388c4affb2ab0369ed2ea32567c6b13ddb7f41a"], 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) (async)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x1fc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x1, 0x8, 0x3, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x2c}}, 0x51) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
sendto$inet6(r0, &(0x7f0000000280)='2', 0xffffffffffffff2b, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x10002, @empty, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla', 0x5) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x2}}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x30]}}, 0x0, 0x3f, 0x0, 0x1, 0x1}, 0x28)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) (async)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01072bbd700000000000051a0400b9b2672f31772de2995f3847e31601ddd70c61c6f186ed2d251e4c612b2e18ec8c82df1e5e9fbace3960b0aec9b2ea176f4f62c2693a3e862fb8de9b4b3c13fe4a5152728972df47212f26c01f096609280500f048b59554a5"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
socket(0x10, 0x803, 0x0)

600.409679ms ago: executing program 2 (id=3485):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x400000000000009)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000240), 0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x0, 0x10}, 0xe)
shutdown(r0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="82003300d000000008021100000108021100000050505050505000000d018220400604f2ffffff0802110000010000000008021100000141000000010000800083254001ec08021100000000000000ffffffffffff0100008001fcffff080211000000dc00000084027f007e15070c07080211000001e8050000040000000300000000003adb08c5c2ee83a947c817df3f42f2c5378087824f7e2188f007045031efe5b6c42b26ce63631cf3414e68f5025ecd9757b848d49238ee79389116d86fae6235c10c0bca5ca5fefef814056d687a5d762fae3b84e8754e4f78d96ab51c19d35cc886bac0b170d3218835"], 0xa0}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x1b)
ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040))
syz_emit_ethernet(0x5e, &(0x7f0000000740)=ANY=[@ANYBLOB="aa0000aaaaaaffffffffffff86dd604dd318f5cba873820e30cfc30abba700280600fc000000000000000000000000000001fe8000000000000000000000000000aa4e214001", @ANYRES64=r0, @ANYRESOCT=r2, @ANYBLOB="a0020000907800000302fe06e2d4c3d9080a00000008000080010502", @ANYRESHEX=r3], 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e26, 0x6, @mcast1, 0xa}]}, &(0x7f0000000240)=0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=r3, @ANYRESHEX=r1, @ANYRESOCT], 0x50)
socket(0x10, 0x2, 0x0)
unshare(0x28000600)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x3, 0x300)
unshare(0x3c020400)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000005001000050000000500000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f00000003c0), &(0x7f0000000100)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, &(0x7f0000000100), &(0x7f0000000680)=""/179}, 0x20)

500.39763ms ago: executing program 4 (id=3486):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x8, 0xfff1}, {0xffff, 0x3}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffff7, 0x7ffff7ff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0xb, 0x1a, 0x3, 0xd0b, 0x38f4}}, @TCA_GRED_STAB={0x8, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)

489.724464ms ago: executing program 5 (id=3487):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', <r1=>0x0})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'vlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
r6 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r6], 0x3c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x190}, 0x800)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9000, @loopback}], 0x1c)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r7, 0x84, 0x73, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f)
syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES16=r3], 0x40}}, 0x4008054)

314.651617ms ago: executing program 4 (id=3488):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
read(r4, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
socket$unix(0x1, 0x5, 0x0)
r8 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000040))
r11 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r9)
sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x60, r11, 0x1, 0x50bd29, 0x0, {0x1, 0x6c00000000000000}}, 0x60}, 0x1, 0xf000, 0x0, 0x400c004}, 0x4800)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0)
r12 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
sendmmsg$inet6(r12, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0)
r13 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r8, &(0x7f0000000200)={0xa0000004})

41.877373ms ago: executing program 0 (id=3489):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xc4, 0x0, 0x9, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x40, r2, 0x1, 0x0, 0x1, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x40}}, 0x40048a4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xc4, 0x0, 0x9, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x40, r2, 0x1, 0x0, 0x1, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x40}}, 0x40048a4) (async)

0s ago: executing program 5 (id=3490):
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x800)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0x1ff, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x4, 0x0, 0x8, 0x40000}, {0x6}]}, 0x10)

kernel console output (not intermixed with test programs):

nvalid length.
[  509.731290][T14669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2132'.
[  509.801518][T14637] wg1 speed is unknown, defaulting to 1000
[  509.919236][T14671] vxcan3: entered allmulticast mode
[  510.542966][T14686] Cannot find del_set index 4 as target
[  510.770494][T14679] wg1 speed is unknown, defaulting to 1000
[  511.204133][T14711] __nla_validate_parse: 1 callbacks suppressed
[  511.204155][T14711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2143'.
[  511.240381][T14711] netlink: 'syz.3.2143': attribute type 7 has an invalid length.
[  511.248190][T14711] netlink: 'syz.3.2143': attribute type 8 has an invalid length.
[  511.271896][T14711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2143'.
[  511.487123][T14717] lo: left promiscuous mode
[  511.501829][T14717] tunl0: left promiscuous mode
[  511.521020][T14717] gre0: left promiscuous mode
[  511.554951][T14717] gretap0: left promiscuous mode
[  511.641711][T14717] erspan0: left promiscuous mode
[  511.654878][T14717] ip_vti0: left promiscuous mode
[  511.662504][T14717] ip6_vti0: left promiscuous mode
[  511.672074][T14717] sit0: left promiscuous mode
[  511.726883][T14717] ip6tnl0: left promiscuous mode
[  511.767061][T14717] ip6gre0: left promiscuous mode
[  511.782445][T14717] syz_tun: left promiscuous mode
[  511.841663][T14717] vcan0: left promiscuous mode
[  511.849943][T14717] bond0: left promiscuous mode
[  511.862554][T14717] dummy0: left promiscuous mode
[  511.891590][T14717] nlmon0: left promiscuous mode
[  511.904436][T14717] caif0: left promiscuous mode
[  511.929673][T14717] macsec1: left promiscuous mode
[  511.937037][T14717] macsec1: left allmulticast mode
[  511.946468][T14717] veth5: left allmulticast mode
[  512.009585][T14717] vlan4: left promiscuous mode
[  512.015226][T14717] vlan4: left allmulticast mode
[  512.020736][T14717] bridge0: left allmulticast mode
[  512.040773][T14702] wg1 speed is unknown, defaulting to 1000
[  512.434062][T14736] netlink: 408 bytes leftover after parsing attributes in process `syz.3.2149'.
[  512.934512][T14722] wg1 speed is unknown, defaulting to 1000
[  513.893021][T14781] syzkaller0: entered promiscuous mode
[  513.939005][T14781] syzkaller0: entered allmulticast mode
[  513.964702][T14785] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  514.093079][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2161'.
[  514.125920][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2161'.
[  515.742412][T14834] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2168'.
[  515.862066][T14836] netlink: 'syz.2.2169': attribute type 1 has an invalid length.
[  515.963246][T14836] bond6: (slave gretap3): making interface the new active one
[  515.995557][T14836] bond6: (slave gretap3): Enslaving as an active interface with an up link
[  516.421084][T14805] wg1 speed is unknown, defaulting to 1000
[  516.497978][T14866] netlink: 16370 bytes leftover after parsing attributes in process `syz.1.2175'.
[  516.648645][T14869] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  516.704817][T14869] syzkaller0: entered promiscuous mode
[  516.711648][T14869] syzkaller0: entered allmulticast mode
[  516.735746][T14868] tipc: Resetting bearer <eth:syzkaller0>
[  518.292636][T14868] tipc: Disabling bearer <eth:syzkaller0>
[  518.301660][T14859] wg1 speed is unknown, defaulting to 1000
[  518.318795][ T5892] tipc: Node number set to 3240442711
[  518.683206][T14879] wg1 speed is unknown, defaulting to 1000
[  518.753431][T14889] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  518.764394][T14895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2182'.
[  519.050456][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2187'.
[  519.482913][T14916] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.2188'.
[  519.498839][T14917] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.2188'.
[  519.998033][T14933] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2192'.
[  520.092359][T14935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2192'.
[  520.234129][T14935] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  520.332405][T14935] bond5 (unregistering): Released all slaves
[  520.507113][T14921] wg1 speed is unknown, defaulting to 1000
[  521.140912][T14967] bond7: entered promiscuous mode
[  521.157508][T14967] 8021q: adding VLAN 0 to HW filter on device bond7
[  521.645505][T14979] bond3: option arp_validate: invalid value (18446744073491447809)
[  521.658165][T14979] bond3 (unregistering): Released all slaves
[  521.667588][T14986] netlink: 'syz.0.2203': attribute type 13 has an invalid length.
[  522.425336][T15014] netlink: 'syz.0.2212': attribute type 1 has an invalid length.
[  522.526546][T15014] 8021q: adding VLAN 0 to HW filter on device bond3
[  522.735340][T15020] veth5: entered promiscuous mode
[  522.814762][T15020] bond3: (slave veth5): Enslaving as an active interface with a down link
[  523.496568][T15045] ip6gre2: entered promiscuous mode
[  523.510479][T15045] ip6gre2: entered allmulticast mode
[  523.522336][ T6223] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  523.546162][ T6223] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  523.554330][ T5892] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  523.630389][ T5892] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  524.016419][T15067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2226'.
[  524.163979][T15069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2228'.
[  524.328672][T15081] netlink: 'syz.3.2227': attribute type 12 has an invalid length.
[  524.350288][T15081] netlink: 'syz.3.2227': attribute type 4 has an invalid length.
[  524.367877][T15084] netlink: 'syz.1.2232': attribute type 15 has an invalid length.
[  524.377975][T15084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2232'.
[  524.470310][ T5892] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  524.829318][T15102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2237'.
[  524.851489][T15104] netlink: 'syz.2.2238': attribute type 6 has an invalid length.
[  525.438897][T15123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  525.496874][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2246'.
[  525.657459][T15138] netlink: 1372 bytes leftover after parsing attributes in process `syz.2.2244'.
[  525.678755][T15139] netlink: 'syz.2.2244': attribute type 10 has an invalid length.
[  525.994607][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2248'.
[  526.016903][T15148] vxcan3: entered promiscuous mode
[  526.128750][T15150] netlink: 'syz.3.2249': attribute type 1 has an invalid length.
[  526.145665][T15150] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2249'.
[  526.411418][T15162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2251'.
[  527.520199][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  527.567358][T15137] wg1 speed is unknown, defaulting to 1000
[  527.643997][T15165] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  528.031135][T15189] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2257'.
[  528.349474][T15200] netlink: 'syz.3.2263': attribute type 1 has an invalid length.
[  528.368586][T15200] netlink: 'syz.3.2263': attribute type 2 has an invalid length.
[  528.472555][T15178] wg1 speed is unknown, defaulting to 1000
[  528.528069][   T30] audit: type=1800 audit(1766743028.579:10): pid=15211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2265" name="3" dev="tmpfs" ino=2432 res=0 errno=0
[  528.777624][T15221] netlink: 'syz.3.2267': attribute type 1 has an invalid length.
[  528.864459][T15221] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  529.408284][T15246] syzkaller1: entered promiscuous mode
[  529.443421][T15246] syzkaller1: entered allmulticast mode
[  529.534442][   T30] audit: type=1804 audit(1766743029.579:11): pid=15258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2276" name="/newroot/474/cgroup.controllers" dev="tmpfs" ino=2453 res=1 errno=0
[  529.786796][   T30] audit: type=1800 audit(1766743029.579:12): pid=15258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2276" name="cgroup.controllers" dev="tmpfs" ino=2453 res=0 errno=0
[  529.908639][   T30] audit: type=1800 audit(1766743029.589:13): pid=15258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2276" name="cgroup.controllers" dev="tmpfs" ino=2453 res=0 errno=0
[  530.287028][T15247] wg1 speed is unknown, defaulting to 1000
[  530.297545][T15277] netlink: 'syz.4.2280': attribute type 1 has an invalid length.
[  530.305624][T15277] netlink: 'syz.4.2280': attribute type 2 has an invalid length.
[  530.321640][T15277] __nla_validate_parse: 3 callbacks suppressed
[  530.321661][T15277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2280'.
[  530.404555][T15274] eql: remember to turn off Van-Jacobson compression on your slave devices
[  530.441584][T15274] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  530.588038][T15292] netlink: 'syz.4.2284': attribute type 11 has an invalid length.
[  530.605829][T15293] openvswitch: netlink: Message has -2 unknown bytes.
[  530.630261][T15293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  530.643727][T15294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2285'.
[  530.972650][T15278] wg1 speed is unknown, defaulting to 1000
[  530.982437][T15309] tipc: New replicast peer: 255.255.255.255
[  531.008510][T15309] tipc: Enabled bearer <udp:s>, priority 10
[  531.280570][T15321] geneve3: entered promiscuous mode
[  531.286063][T15321] geneve3: entered allmulticast mode
[  531.522175][T15332] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2294'.
[  532.065645][T15347] netlink: 'syz.0.2297': attribute type 1 has an invalid length.
[  532.097567][T12298] tipc: Node number set to 2409205401
[  532.314584][T15359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2302'.
[  532.515496][T15365] ip6tnl3: entered allmulticast mode
[  532.616758][T15371] syzkaller0: entered promiscuous mode
[  532.640217][T15371] syzkaller0: entered allmulticast mode
[  532.668673][T15368] nbd: couldn't find device at index 536870912
[  532.683386][T15374] netlink: 'syz.1.2307': attribute type 11 has an invalid length.
[  532.692561][T15374] netlink: 'syz.1.2307': attribute type 11 has an invalid length.
[  532.701332][T15374] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2307'.
[  532.763518][T15376] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.2308'.
[  532.779525][T15377] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.2308'.
[  532.901719][T15380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2309'.
[  532.914162][T15382] netlink: 'syz.1.2310': attribute type 3 has an invalid length.
[  532.929765][T15382] netlink: 'syz.1.2310': attribute type 2 has an invalid length.
[  532.972093][T15382] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2310'.
[  532.981768][T15382] netlink: 'syz.1.2310': attribute type 9 has an invalid length.
[  532.989687][T15382] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2310'.
[  533.162277][T15382] bond9: entered promiscuous mode
[  533.167362][T15382] bond9: entered allmulticast mode
[  533.196102][T15382] 8021q: adding VLAN 0 to HW filter on device bond9
[  533.440454][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.551478][T15415] netlink: 'syz.3.2320': attribute type 10 has an invalid length.
[  535.054480][T15415] batadv_slave_1: entered promiscuous mode
[  535.062021][T15415] bridge0: port 1(batadv_slave_1) entered blocking state
[  535.069204][T15415] bridge0: port 1(batadv_slave_1) entered disabled state
[  535.076806][T15415] batadv_slave_1: entered allmulticast mode
[  535.403486][T15454] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  535.549948][T15431] wg1 speed is unknown, defaulting to 1000
[  535.615063][T15459] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  535.628619][T15471] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  536.116219][T15488] __nla_validate_parse: 3 callbacks suppressed
[  536.116239][T15488] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2335'.
[  536.160336][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  536.448085][T15497] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2337'.
[  536.468339][T15498] netlink: 'syz.3.2339': attribute type 10 has an invalid length.
[  536.517102][T15499] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.533143][T15499] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.548786][T15507] netlink: 'syz.3.2339': attribute type 10 has an invalid length.
[  536.551168][T15506] netlink: 'syz.3.2339': attribute type 10 has an invalid length.
[  536.626611][T15507] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  536.671485][T15494] netlink: 'syz.1.2338': attribute type 9 has an invalid length.
[  536.679391][T15494] netlink: 'syz.1.2338': attribute type 11 has an invalid length.
[  536.689115][T15494] netlink: 'syz.1.2338': attribute type 12 has an invalid length.
[  536.707830][T15494] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2338'.
[  536.740210][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2338'.
[  537.036027][T15532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  537.047849][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2349'.
[  537.073081][T15530] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2348'.
[  537.304427][T15543] netlink: 'syz.4.2352': attribute type 3 has an invalid length.
[  537.370994][T15543] veth1: entered promiscuous mode
[  537.389509][T15550] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  537.460895][T15555] netlink: 'syz.0.2354': attribute type 9 has an invalid length.
[  537.469030][T15555] netlink: 'syz.0.2354': attribute type 7 has an invalid length.
[  537.616846][T15563] C: renamed from lo
[  537.648512][T15563] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  537.838337][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2360'.
[  537.914427][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2360'.
[  537.924699][T15567] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2360'.
[  538.172497][T15587] lo speed is unknown, defaulting to 1000
[  538.185559][T15587] lo speed is unknown, defaulting to 1000
[  538.199166][T15587] lo speed is unknown, defaulting to 1000
[  538.470618][ T5827] Bluetooth: hci4: command 0x0406 tx timeout
[  538.902957][T15587] infiniband syz0: set active
[  538.907790][T12298] lo speed is unknown, defaulting to 1000
[  538.920220][T15587] infiniband syz0: added lo
[  539.151010][T15587] RDS/IB: syz0: added
[  539.155166][T15587] smc: adding ib device syz0 with port count 1
[  539.198806][T15587] smc:    ib device syz0 port 1 has pnetid SYZ0 (user defined)
[  539.226504][T14730] lo speed is unknown, defaulting to 1000
[  539.236148][T15587] lo speed is unknown, defaulting to 1000
[  539.257452][T15617] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 

Ï€ã,ÄûÔxµ…üb©)%ë�	]ô‚3DûLÌ¥
[  539.913851][T15628] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  540.161960][T15627] bond0: (slave syz_tun): Releasing backup interface
[  540.174702][T15627] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  540.194943][T15587] lo speed is unknown, defaulting to 1000
[  540.780906][T15646] xt_hashlimit: max too large, truncated to 1048576
[  540.788377][T15647] xt_hashlimit: max too large, truncated to 1048576
[  540.853137][T15587] lo speed is unknown, defaulting to 1000
[  541.014274][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2380'.
[  541.298362][T15644] wg1 speed is unknown, defaulting to 1000
[  541.542351][T15587] lo speed is unknown, defaulting to 1000
[  541.646514][T15679] validate_nla: 2 callbacks suppressed
[  541.646536][T15679] netlink: 'syz.3.2385': attribute type 10 has an invalid length.
[  541.675192][T15679] bridge0: port 2(macsec0) entered blocking state
[  541.688727][T15679] bridge0: port 2(macsec0) entered disabled state
[  541.696242][T15679] macsec0: entered allmulticast mode
[  541.703144][T15679] veth1_macvtap: entered allmulticast mode
[  541.714640][T15679] macsec0: entered promiscuous mode
[  541.751453][T15683] openvswitch: netlink: Message has 572 unknown bytes.
[  541.803596][T15683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  541.911256][T15690] netlink: 'syz.3.2389': attribute type 10 has an invalid length.
[  541.946038][T15692] netlink: 'syz.0.2388': attribute type 13 has an invalid length.
[  541.956223][T15685] bond4: option arp_validate: invalid value (18446744073491447809)
[  541.966763][T15685] bond4 (unregistering): Released all slaves
[  542.012673][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2391'.
[  542.184164][T15692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  542.297029][T15692] veth1_to_hsr: left allmulticast mode
[  542.366872][T15644] lo speed is unknown, defaulting to 1000
[  542.369125][ T6226] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  542.415775][ T6226] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  542.445364][ T6226] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  542.484802][ T6226] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  542.493474][ T6226] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  542.503022][ T6226] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  542.511999][ T6226] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  542.520802][ T6226] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  542.529242][ T6226] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  542.559890][ T6226] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  542.576148][ T6226] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  542.612898][ T6226] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  542.662938][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2394'.
[  542.994203][   T30] audit: type=1800 audit(1766743043.049:14): pid=15715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2396" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2479 res=0 errno=0
[  543.051871][T15587] lo speed is unknown, defaulting to 1000
[  543.176482][T15724] syzkaller0: entered promiscuous mode
[  543.183363][T15724] syzkaller0: entered allmulticast mode
[  543.778201][T15733] syz_tun: entered allmulticast mode
[  543.797536][T15723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2396'.
[  543.890645][T15723] netlink: 'syz.0.2396': attribute type 1 has an invalid length.
[  543.901145][T15723] netlink: 'syz.0.2396': attribute type 2 has an invalid length.
[  543.909280][T15723] netlink: 'syz.0.2396': attribute type 3 has an invalid length.
[  543.917886][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2396'.
[  544.121965][T15739] bond0: Caught tx_queue_len zero misconfig
[  544.401145][T15732] wg1 speed is unknown, defaulting to 1000
[  544.445761][T15732] lo speed is unknown, defaulting to 1000
[  544.541722][T15752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2406'.
[  544.661176][T15752] netlink: 'syz.4.2406': attribute type 1 has an invalid length.
[  544.670950][T15731] syz_tun: left allmulticast mode
[  544.704200][T15753] netlink: 'syz.4.2406': attribute type 1 has an invalid length.
[  544.741724][T15752] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.2406'.
[  544.759065][T15747] wg1 speed is unknown, defaulting to 1000
[  544.770865][T15753] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.2406'.
[  544.804632][T15757] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  544.942679][T15769] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2410'.
[  544.967756][T15768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2410'.
[  544.984034][T15764] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2409'.
[  545.115991][T15747] lo speed is unknown, defaulting to 1000
[  545.186980][T15779] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING
[  545.235713][T15779] x_tables: ip6_tables: mh match: only valid for protocol 135
[  545.438654][T15787] veth0: entered promiscuous mode
[  545.478587][T15787] veth0 (unregistering): left promiscuous mode
[  546.113066][T15808] block nbd4: Unsupported socket: should be TCP or UNIX.
[  546.843512][T15840] netlink: 'syz.0.2429': attribute type 83 has an invalid length.
[  547.241931][T15859] __nla_validate_parse: 4 callbacks suppressed
[  547.241954][T15859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2434'.
[  547.706902][T15881] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2441'.
[  547.730296][T15880] team0: No ports can be present during mode change
[  547.867407][T15873] wg1 speed is unknown, defaulting to 1000
[  547.897971][T15873] lo speed is unknown, defaulting to 1000
[  547.992842][   T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  548.607248][T15920] bond7: Unable to set down delay as MII monitoring is disabled
[  548.629596][T15920] bond7 (unregistering): Released all slaves
[  548.666963][T15944] IPv6: NLM_F_REPLACE set, but no existing node found!
[  548.819917][ T6223] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.847363][ T6223] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.856070][ T6223] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.920034][ T6223] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  549.246254][T15955] bond10: option ad_select: invalid value (34)
[  549.318779][T15955] bond10 (unregistering): Released all slaves
[  549.898424][T15971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2463'.
[  550.132125][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2465'.
[  550.245208][T15984] nbd4: detected capacity change from 0 to 32
[  550.252853][ T5827] block nbd4: Receive control failed (result -22)
[  550.270994][T15952] netlink: 'syz.0.2456': attribute type 6 has an invalid length.
[  550.271046][T15142] block nbd4: Dead connection, failed to find a fallback
[  550.329452][T15142] block nbd4: shutting down sockets
[  550.370591][T15142] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.410393][T15142] Buffer I/O error on dev nbd4, logical block 0, async page read
[  550.418426][T15142] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.440674][T15142] Buffer I/O error on dev nbd4, logical block 0, async page read
[  550.448636][T15142] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.493757][T15142] Buffer I/O error on dev nbd4, logical block 0, async page read
[  550.530148][T15142] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.539848][T15142] Buffer I/O error on dev nbd4, logical block 0, async page read
[  550.610891][T15142] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.640077][T15142] Buffer I/O error on dev nbd4, logical block 0, async page read
[  550.648039][T15142] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.674407][T15142] Buffer I/O error on dev nbd4, logical block 0, async page read
[  550.699707][T15142] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.710641][T15998] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  550.750153][T15142] Buffer I/O error on dev nbd4, logical block 0, async page read
[  550.797912][T15142] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.822119][T15142] Buffer I/O error on dev nbd4, logical block 0, async page read
[  550.887031][T15142] ldm_validate_partition_table(): Disk read failed.
[  550.910628][T15142] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.930791][T15142] Buffer I/O error on dev nbd4, logical block 0, async page read
[  550.941629][T15142] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  550.968800][T15142] Buffer I/O error on dev nbd4, logical block 0, async page read
[  551.010786][T15142] Dev nbd4: unable to read RDB block 0
[  551.016710][T15142]  nbd4: unable to read partition table
[  551.024462][T15949] wg1 speed is unknown, defaulting to 1000
[  551.054144][T15142] ldm_validate_partition_table(): Disk read failed.
[  551.070753][T15949] lo speed is unknown, defaulting to 1000
[  551.077210][T15142] Dev nbd4: unable to read RDB block 0
[  551.101767][T15142]  nbd4: unable to read partition table
[  551.256630][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2477'.
[  551.284665][T16020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2477'.
[  551.439186][T16023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2478'.
[  551.525150][T16026] netlink: 'syz.1.2479': attribute type 10 has an invalid length.
[  551.615196][T16028] dummy0: entered promiscuous mode
[  551.621003][T16028] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  551.663828][T16028] vlan1: entered promiscuous mode
[  551.668992][T16028] bond0: entered promiscuous mode
[  551.761952][T16034] openvswitch: netlink: Key type 198 is out of range max 32
[  552.113219][T16048] bond7: option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4)
[  552.155112][T16048] bond7 (unregistering): Released all slaves
[  552.728077][T16072] syzkaller1: entered promiscuous mode
[  552.743421][T16072] syzkaller1: entered allmulticast mode
[  552.992103][T16079] netlink: 'syz.3.2494': attribute type 1 has an invalid length.
[  553.110815][T16085] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2495'.
[  553.140706][T16054] wg1 speed is unknown, defaulting to 1000
[  553.151868][T16054] lo speed is unknown, defaulting to 1000
[  553.199430][T16087] netlink: 'syz.2.2496': attribute type 3 has an invalid length.
[  553.237499][T16087] netlink: 'syz.2.2496': attribute type 7 has an invalid length.
[  553.271587][T16087] netlink: 'syz.2.2496': attribute type 8 has an invalid length.
[  553.319196][T16087] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2496'.
[  553.396874][T16096] syzkaller1: entered promiscuous mode
[  553.409463][T16096] syzkaller1: entered allmulticast mode
[  553.787963][T16103] syzkaller1: entered promiscuous mode
[  553.800407][T16103] syzkaller1: entered allmulticast mode
[  553.872013][T16114] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2502'.
[  553.881390][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2502'.
[  553.904243][T16114] bridge_slave_0: entered promiscuous mode
[  553.914514][T16114] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  554.016573][T16112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2503'.
[  554.095575][T16126] netlink: 'syz.4.2505': attribute type 1 has an invalid length.
[  554.249681][T16127] bond7: entered promiscuous mode
[  554.264454][T16127] bond7: entered allmulticast mode
[  554.271064][T16127] 8021q: adding VLAN 0 to HW filter on device bond7
[  554.389675][T16143] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2509'.
[  554.436867][T16144] geneve2: entered promiscuous mode
[  554.453861][ T6174] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  554.467113][T16143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2509'.
[  554.482988][ T6174] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  554.535910][ T6174] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  554.578390][ T6174] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  554.826081][T16161] netlink: 'syz.2.2513': attribute type 32 has an invalid length.
[  555.037420][T16171] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2515'.
[  555.336883][T16181] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  555.900654][T16190] netlink: 'syz.4.2518': attribute type 1 has an invalid length.
[  555.998950][T16190] 8021q: adding VLAN 0 to HW filter on device bond8
[  556.054995][T16190] veth3: entered promiscuous mode
[  556.084941][T16190] bond8: (slave veth3): Enslaving as an active interface with a down link
[  556.141659][T16191] erspan0: entered allmulticast mode
[  556.215278][T16191] bond8: (slave erspan0): making interface the new active one
[  556.263673][T16191] erspan0: entered promiscuous mode
[  556.284455][T16191] bond8: (slave erspan0): Enslaving as an active interface with an up link
[  556.375767][T16190] bond8: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  556.426421][T16212] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2521'.
[  556.621663][T16215] netlink: 'syz.0.2521': attribute type 4 has an invalid length.
[  556.653000][T16218] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2523'.
[  556.680348][T16218] netlink: 'syz.2.2523': attribute type 6 has an invalid length.
[  556.691538][T16218] netlink: 'syz.2.2523': attribute type 5 has an invalid length.
[  556.991014][T16221] bond9 (unregistering): Released all slaves
[  557.724742][T16229] wg1 speed is unknown, defaulting to 1000
[  557.734878][T16229] lo speed is unknown, defaulting to 1000
[  557.995626][T16259] syzkaller0: entered promiscuous mode
[  558.033977][T16259] syzkaller0: entered allmulticast mode
[  558.079010][T16254] wg1 speed is unknown, defaulting to 1000
[  558.379704][T16254] lo speed is unknown, defaulting to 1000
[  558.497988][T16268] Cannot find del_set index 4 as target
[  558.541625][T16268] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  559.126620][T16257] wg1 speed is unknown, defaulting to 1000
[  559.149844][T16257] lo speed is unknown, defaulting to 1000
[  559.410588][T16291] xt_hashlimit: invalid interval
[  560.112080][T16285] wg1 speed is unknown, defaulting to 1000
[  560.227395][T16285] lo speed is unknown, defaulting to 1000
[  560.461331][T16296] __nla_validate_parse: 4 callbacks suppressed
[  560.461355][T16296] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2540'.
[  560.840145][   T30] audit: type=1800 audit(1766743060.889:15): pid=16303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2543" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2795 res=0 errno=0
[  560.935243][T16305] delete_channel: no stack
[  562.255346][T16342] validate_nla: 3 callbacks suppressed
[  562.255380][T16342] netlink: 'syz.0.2552': attribute type 29 has an invalid length.
[  562.340774][T16343] netlink: 'syz.0.2552': attribute type 29 has an invalid length.
[  563.141839][T16336] wg1 speed is unknown, defaulting to 1000
[  563.153433][T16336] lo speed is unknown, defaulting to 1000
[  563.179539][T16377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2563'.
[  563.220240][T16377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2563'.
[  563.912501][T16353] wg1 speed is unknown, defaulting to 1000
[  563.936803][T16353] lo speed is unknown, defaulting to 1000
[  563.982132][T16398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2570'.
[  564.010479][T16398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2570'.
[  564.489183][T16417] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2574'.
[  564.945350][T16429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2576'.
[  564.970855][T16429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2576'.
[  565.615594][T16438] netlink: 'syz.0.2577': attribute type 30 has an invalid length.
[  565.880887][T16438] bond4: option arp_missed_max: invalid value (0)
[  565.887409][T16438] bond4: option arp_missed_max: allowed values 1 - 255
[  565.916295][T16438] bond4 (unregistering): Released all slaves
[  566.237906][T16457] openvswitch: netlink: Invalid VLAN frame
[  566.901608][T16480] tipc: New replicast peer: 255.255.255.255
[  566.922970][T16480] tipc: Enabled bearer <udp:syz2>, priority 10
[  566.951478][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2589'.
[  567.250278][T16491] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0
[  567.511087][  T259] erspan0: left promiscuous mode
[  567.566578][T16506] veth0: entered promiscuous mode
[  567.654954][T16510] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2597'.
[  567.789686][T16504] veth0: left promiscuous mode
[  568.126818][T16523] syzkaller0: entered promiscuous mode
[  568.141636][T16523] syzkaller0: entered allmulticast mode
[  568.162971][T16483] wg1 speed is unknown, defaulting to 1000
[  568.192320][T16483] lo speed is unknown, defaulting to 1000
[  568.372938][T16533] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  568.489124][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2607'.
[  568.517703][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2607'.
[  568.691193][T16551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2609'.
[  570.219915][T16559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2611'.
[  570.252832][T16555] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  570.671986][T16574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2615'.
[  570.734521][T16549] wg1 speed is unknown, defaulting to 1000
[  570.773736][T16549] lo speed is unknown, defaulting to 1000
[  571.128607][T16595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2621'.
[  571.699803][T16593] netlink: 'syz.4.2622': attribute type 6 has an invalid length.
[  571.886793][T16612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2625'.
[  571.937532][T16618] netlink: 'syz.0.2626': attribute type 3 has an invalid length.
[  571.947161][T16617] netlink: 'syz.0.2626': attribute type 3 has an invalid length.
[  572.023443][T16601] wg1 speed is unknown, defaulting to 1000
[  572.044288][T16601] lo speed is unknown, defaulting to 1000
[  572.348529][T16625] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2628'.
[  572.451374][T16629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2629'.
[  572.638851][T16638] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2631'.
[  573.223789][T16649] pimreg: entered allmulticast mode
[  573.248576][T16648] pimreg: left allmulticast mode
[  573.500029][T16665] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  573.713116][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2638'.
[  574.277662][T16642] wg1 speed is unknown, defaulting to 1000
[  574.331053][T16642] lo speed is unknown, defaulting to 1000
[  574.432369][T16643] wg1 speed is unknown, defaulting to 1000
[  574.563875][T16698] netlink: 'syz.0.2645': attribute type 39 has an invalid length.
[  574.921425][T16708] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2648'.
[  574.961094][T16708] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2648'.
[  574.980448][T16708] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  575.025947][T16643] lo speed is unknown, defaulting to 1000
[  575.201997][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2650'.
[  575.285279][T16717] 8021q: adding VLAN 0 to HW filter on device bond10
[  575.398982][T16722] bond10: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  575.715997][T16735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2655'.
[  576.971529][T16753] wg1 speed is unknown, defaulting to 1000
[  576.977989][T16788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2667'.
[  577.017376][T16753] lo speed is unknown, defaulting to 1000
[  577.136916][T16793] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  577.440429][T16799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2670'.
[  577.772819][T16825] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2674'.
[  577.805938][T16825] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2674'.
[  577.850165][T16825] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2674'.
[  577.947679][T16830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2675'.
[  578.030879][T16830] macvlan1: entered promiscuous mode
[  578.036254][T16830] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  578.061877][T16830] macvlan1: entered allmulticast mode
[  578.079102][T16831] gretap2: entered promiscuous mode
[  578.088360][T16831] batman_adv: batadv0: Adding interface: gretap2
[  578.097649][T16831] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  578.155802][T16831] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active
[  578.203296][T16835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2677'.
[  578.331113][T16803] wg1 speed is unknown, defaulting to 1000
[  578.374176][T16803] lo speed is unknown, defaulting to 1000
[  578.504891][T16845] netlink: 'syz.2.2679': attribute type 1 has an invalid length.
[  579.609113][T16881] veth10: entered promiscuous mode
[  579.619189][T16881] veth10: entered allmulticast mode
[  580.003528][T16903] Bluetooth: MGMT ver 1.23
[  580.091017][T16890] syzkaller1: entered promiscuous mode
[  580.099130][T16890] syzkaller1: entered allmulticast mode
[  581.142501][T16948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2703'.
[  581.298729][T16935] wg1 speed is unknown, defaulting to 1000
[  581.344202][T16935] lo speed is unknown, defaulting to 1000
[  581.449485][T16960] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2706'.
[  581.611878][T16967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2709'.
[  581.806453][T16983] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2713'.
[  581.992776][T16987] syzkaller0: entered promiscuous mode
[  581.998636][T16987] syzkaller0: entered allmulticast mode
[  582.037406][T16992] netlink: 'syz.4.2716': attribute type 83 has an invalid length.
[  582.727495][T17020] syzkaller0: entered promiscuous mode
[  582.741620][T17020] syzkaller0: entered allmulticast mode
[  582.930505][T17024] __nla_validate_parse: 2 callbacks suppressed
[  582.930525][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2724'.
[  582.982230][T17027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2724'.
[  583.181773][T17030] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2726'.
[  583.216473][T17030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  583.271515][T17021] wg1 speed is unknown, defaulting to 1000
[  583.281718][T17021] lo speed is unknown, defaulting to 1000
[  583.487840][T17037] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  584.103612][T17062] netlink: 'syz.0.2735': attribute type 4 has an invalid length.
[  584.259117][T17069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2739'.
[  584.907239][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2745'.
[  584.997119][T17103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'.
[  585.027432][T17106] netlink: 'syz.0.2748': attribute type 1 has an invalid length.
[  585.053027][T17106] netlink: 'syz.0.2748': attribute type 1 has an invalid length.
[  585.070512][T17103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2747'.
[  585.082720][T17061] wg1 speed is unknown, defaulting to 1000
[  585.103354][T17103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2747'.
[  585.134971][T17061] lo speed is unknown, defaulting to 1000
[  585.274852][T17103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2747'.
[  585.297280][T17116] netlink: 'syz.0.2750': attribute type 3 has an invalid length.
[  585.299048][T17103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2747'.
[  585.526546][T17121] bond8: option min_links: invalid value (18446744073709551612)
[  585.553720][T17121] bond8: option min_links: allowed values 0 - 2147483647
[  585.594557][T17121] bond8 (unregistering): Released all slaves
[  585.742343][T17127] pim6reg1: entered promiscuous mode
[  585.747715][T17127] pim6reg1: entered allmulticast mode
[  585.961950][T17133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  586.085692][T17064] wg1 speed is unknown, defaulting to 1000
[  586.142565][T17064] lo speed is unknown, defaulting to 1000
[  586.785464][T17143] wg1 speed is unknown, defaulting to 1000
[  586.820873][T17163] netlink: 'syz.2.2762': attribute type 1 has an invalid length.
[  586.829009][T17143] lo speed is unknown, defaulting to 1000
[  587.703036][T17160] wg1 speed is unknown, defaulting to 1000
[  587.714119][T17162] wg1 speed is unknown, defaulting to 1000
[  587.801217][T17162] lo speed is unknown, defaulting to 1000
[  588.357149][T17185] __nla_validate_parse: 4 callbacks suppressed
[  588.357169][T17185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2767'.
[  588.469643][T17160] lo speed is unknown, defaulting to 1000
[  590.395562][T17244] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2783'.
[  590.425599][T17244] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  590.451899][T17244] 0ªî{X¹¦: entered allmulticast mode
[  590.469478][T17244] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  591.002109][T17270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2789'.
[  591.064506][T17241] wg1 speed is unknown, defaulting to 1000
[  591.077219][T17241] lo speed is unknown, defaulting to 1000
[  591.160952][T17275] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2792'.
[  591.250474][T17278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2793'.
[  591.412679][T17285] macsec1: entered allmulticast mode
[  591.418340][T17285] macsec0: entered allmulticast mode
[  591.502671][T17286] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2796'.
[  591.533587][T17290] netlink: 'syz.2.2798': attribute type 12 has an invalid length.
[  592.200382][T17297] netlink: 'syz.4.2800': attribute type 1 has an invalid length.
[  592.212120][T17297] netlink: 14343 bytes leftover after parsing attributes in process `syz.4.2800'.
[  592.299219][T17302] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2802'.
[  592.396401][T17293] netlink: 'syz.2.2799': attribute type 10 has an invalid length.
[  592.424290][T17293] 8021q: adding VLAN 0 to HW filter on device batadv0
[  592.448647][T17293] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  592.627724][T17318] dvmrp0: entered allmulticast mode
[  592.796067][T17326] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2808'.
[  592.937732][T17331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.077358][T17331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.133078][T17349] x_tables: duplicate underflow at hook 3
[  593.197108][T17331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.224686][T17357] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  593.224981][T17348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  593.318027][T17364] tap0: tun_chr_ioctl cmd 1074025677
[  593.327686][T17364] tap0: linktype set to 1
[  593.335272][T17364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2819'.
[  593.406176][T17331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.461324][T17368] bridge5: port 1(vlan0) entered disabled state
[  593.632602][ T3840] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  593.697359][ T6174] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  593.735218][T17378] xt_policy: neither incoming nor outgoing policy selected
[  593.742340][T17374] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2821'.
[  593.762550][   T34] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  593.839382][ T3840] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  593.856095][T17377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2821'.
[  594.090608][T17390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2825'.
[  594.362621][T17399] xt_connbytes: Forcing CT accounting to be enabled
[  594.421818][T17381] wg1 speed is unknown, defaulting to 1000
[  594.452697][T17381] lo speed is unknown, defaulting to 1000
[  594.571344][T17406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2829'.
[  594.989025][T17390] wg1 speed is unknown, defaulting to 1000
[  595.008108][T17390] lo speed is unknown, defaulting to 1000
[  595.516670][T17396] wg1 speed is unknown, defaulting to 1000
[  596.800161][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  597.187520][T17396] lo speed is unknown, defaulting to 1000
[  597.478175][T17440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2839'.
[  598.308947][T17469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2847'.
[  599.120426][T17478] Can't find ip_set type 
[  599.195224][T17490] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2853'.
[  599.204746][T17490] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2853'.
[  599.392886][T17503] netlink: 'syz.2.2857': attribute type 39 has an invalid length.
[  599.983919][T17506] wg1 speed is unknown, defaulting to 1000
[  599.993504][T17506] lo speed is unknown, defaulting to 1000
[  600.282476][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  600.293545][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  600.301921][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  600.316061][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  600.325460][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  600.422867][T17547] netlink: 508 bytes leftover after parsing attributes in process `syz.2.2872'.
[  600.445610][T17547] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2872'.
[  600.667031][T17542] wg1 speed is unknown, defaulting to 1000
[  600.686485][T17542] lo speed is unknown, defaulting to 1000
[  600.970750][T17557] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.2874'.
[  601.010795][T17557] openvswitch: netlink: Missing key (keys=40, expected=100)
[  601.235848][T17565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2877'.
[  601.248271][T17565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2877'.
[  601.782886][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2886'.
[  601.816576][T17599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2886'.
[  601.836764][T17542] chnl_net:caif_netlink_parms(): no params data found
[  601.961609][T17609] netlink: 'syz.0.2888': attribute type 1 has an invalid length.
[  601.994929][T17609] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  602.058545][T17542] bridge0: port 1(bridge_slave_0) entered blocking state
[  602.084706][T17542] bridge0: port 1(bridge_slave_0) entered disabled state
[  602.094235][T17542] bridge_slave_0: entered allmulticast mode
[  602.106984][T17542] bridge_slave_0: entered promiscuous mode
[  602.116433][T17542] bridge0: port 2(bridge_slave_1) entered blocking state
[  602.133505][T17542] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.150341][T17542] bridge_slave_1: entered allmulticast mode
[  602.167170][T17542] bridge_slave_1: entered promiscuous mode
[  602.233756][T17628] netlink: 'syz.0.2891': attribute type 3 has an invalid length.
[  602.250143][T17628] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2891'.
[  602.323678][T17542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  602.358929][T17542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  602.402546][   T52] Bluetooth: hci1: command tx timeout
[  602.612612][T17619] wg1 speed is unknown, defaulting to 1000
[  602.629581][T17542] team0: Port device team_slave_0 added
[  602.637849][T17619] lo speed is unknown, defaulting to 1000
[  602.653443][T17542] team0: Port device team_slave_1 added
[  602.711491][T17648] netlink: 'syz.2.2895': attribute type 33 has an invalid length.
[  602.722587][T17638] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  602.736538][T17642] veth0: entered promiscuous mode
[  602.787589][T17542] batman_adv: batadv0: Adding interface: batadv_slave_0
[  602.796327][T17542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  602.823792][T17542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  602.868985][T17637] tipc: Disabling bearer <eth:syzkaller0>
[  602.921405][T17542] batman_adv: batadv0: Adding interface: batadv_slave_1
[  602.929271][T17542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  602.976931][T17542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  603.120208][T17639] wg1 speed is unknown, defaulting to 1000
[  603.191370][T17542] hsr_slave_0: entered promiscuous mode
[  603.201526][T17542] hsr_slave_1: entered promiscuous mode
[  603.238517][T17639] lo speed is unknown, defaulting to 1000
[  603.323628][T17634] veth0: left promiscuous mode
[  603.412001][T17656] IPv6: NLM_F_CREATE should be specified when creating new route
[  603.620379][T17648] wg1 speed is unknown, defaulting to 1000
[  603.707231][T17648] lo speed is unknown, defaulting to 1000
[  603.745209][T17663] netlink: 'syz.0.2900': attribute type 1 has an invalid length.
[  603.797619][T17663] 8021q: adding VLAN 0 to HW filter on device bond5
[  603.846570][T17665] bond5: (slave veth7): Enslaving as an active interface with a down link
[  604.067706][T17663] bond5 (unregistering): (slave veth7): Releasing active interface
[  604.084305][T17663] bond5 (unregistering): Released all slaves
[  604.470457][   T52] Bluetooth: hci1: command tx timeout
[  604.603695][T17542] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  604.818804][T17542] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  604.843419][T17542] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  604.888681][T17542] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  605.139470][T17668] wg1 speed is unknown, defaulting to 1000
[  605.202014][T17542] 8021q: adding VLAN 0 to HW filter on device bond0
[  605.213419][T17668] lo speed is unknown, defaulting to 1000
[  605.263930][T17542] 8021q: adding VLAN 0 to HW filter on device team0
[  605.325627][T17683] veth1_to_bond: entered allmulticast mode
[  605.341309][T17524] bridge0: port 1(bridge_slave_0) entered blocking state
[  605.348560][T17524] bridge0: port 1(bridge_slave_0) entered forwarding state
[  605.414633][T17684] __nla_validate_parse: 4 callbacks suppressed
[  605.414653][T17684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2904'.
[  605.506872][T17684] veth1_to_bond (unregistering): left allmulticast mode
[  605.535671][T17524] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.542995][T17524] bridge0: port 2(bridge_slave_1) entered forwarding state
[  605.975918][T17701] netlink: 'syz.4.2909': attribute type 1 has an invalid length.
[  606.113886][T17701] bridge0: port 1(veth0_to_bridge) entered blocking state
[  606.121652][T17701] bridge0: port 1(veth0_to_bridge) entered disabled state
[  606.136927][T17701] veth0_to_bridge: entered allmulticast mode
[  606.158012][T17701] veth0_to_bridge: entered promiscuous mode
[  606.288869][T17542] 8021q: adding VLAN 0 to HW filter on device batadv0
[  606.406124][T17708] xt_TPROXY: Can be used only with -p tcp or -p udp
[  606.438819][T17710] syzkaller0: entered promiscuous mode
[  606.444793][T17710] syzkaller0: entered allmulticast mode
[  606.537026][T17713] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.2913'.
[  606.550403][   T52] Bluetooth: hci1: command tx timeout
[  606.573746][T17713] netlink: Unknown conntrack attr (type=2304, max=9)
[  606.823442][T17725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2917'.
[  606.844250][T17725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2917'.
[  606.876019][T17725] netlink: 'syz.2.2917': attribute type 36 has an invalid length.
[  607.085711][T17738] syzkaller1: entered promiscuous mode
[  607.105092][T17738] syzkaller1: entered allmulticast mode
[  607.220918][T17542] veth0_vlan: entered promiscuous mode
[  607.326813][T17542] veth1_vlan: entered promiscuous mode
[  607.437535][T17542] veth0_macvtap: entered promiscuous mode
[  607.477022][T17542] veth1_macvtap: entered promiscuous mode
[  607.595833][T17542] batman_adv: batadv0: Interface activated: batadv_slave_0
[  607.655898][T17542] batman_adv: batadv0: Interface activated: batadv_slave_1
[  607.787417][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  607.832044][T17746] wg1 speed is unknown, defaulting to 1000
[  607.891308][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  607.924840][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  607.953464][T17746] lo speed is unknown, defaulting to 1000
[  608.054894][T17765] netlink: 'syz.2.2925': attribute type 21 has an invalid length.
[  608.066856][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  608.311701][T17769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  608.351626][T17773] sctp: [Deprecated]: syz.2.2928 (pid 17773) Use of int in max_burst socket option deprecated.
[  608.351626][T17773] Use struct sctp_assoc_value instead
[  608.376601][ T6174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  608.383329][T17773] sctp: [Deprecated]: syz.2.2928 (pid 17773) Use of int in max_burst socket option deprecated.
[  608.383329][T17773] Use struct sctp_assoc_value instead
[  608.423557][ T6174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  608.440335][T17773] sctp: [Deprecated]: syz.2.2928 (pid 17773) Use of int in max_burst socket option deprecated.
[  608.440335][T17773] Use struct sctp_assoc_value instead
[  608.500311][T17773] sctp: [Deprecated]: syz.2.2928 (pid 17773) Use of int in max_burst socket option deprecated.
[  608.500311][T17773] Use struct sctp_assoc_value instead
[  608.536677][T17773] sctp: [Deprecated]: syz.2.2928 (pid 17773) Use of int in max_burst socket option deprecated.
[  608.536677][T17773] Use struct sctp_assoc_value instead
[  608.553685][T17773] sctp: [Deprecated]: syz.2.2928 (pid 17773) Use of int in max_burst socket option deprecated.
[  608.553685][T17773] Use struct sctp_assoc_value instead
[  608.578345][  T377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  608.588641][  T377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  608.606807][T17773] sctp: [Deprecated]: syz.2.2928 (pid 17773) Use of int in max_burst socket option deprecated.
[  608.606807][T17773] Use struct sctp_assoc_value instead
[  608.630577][   T52] Bluetooth: hci1: command tx timeout
[  608.637224][T17773] sctp: [Deprecated]: syz.2.2928 (pid 17773) Use of int in max_burst socket option deprecated.
[  608.637224][T17773] Use struct sctp_assoc_value instead
[  608.664742][T17773] sctp: [Deprecated]: syz.2.2928 (pid 17773) Use of int in max_burst socket option deprecated.
[  608.664742][T17773] Use struct sctp_assoc_value instead
[  608.738962][T17773] sctp: [Deprecated]: syz.2.2928 (pid 17773) Use of int in max_burst socket option deprecated.
[  608.738962][T17773] Use struct sctp_assoc_value instead
[  608.888625][T17761] wg1 speed is unknown, defaulting to 1000
[  608.912901][T17761] lo speed is unknown, defaulting to 1000
[  609.134620][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2930'.
[  609.738775][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  609.751942][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  609.760109][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  609.771291][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  609.779768][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  610.320501][ T5826] syz_tun (unregistering): left allmulticast mode
[  610.690387][T17817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2937'.
[  610.701989][T17796] wg1 speed is unknown, defaulting to 1000
[  610.916038][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2939'.
[  610.934957][T17796] lo speed is unknown, defaulting to 1000
[  610.961201][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2939'.
[  611.189226][T17833] netlink: 'syz.3.2941': attribute type 1 has an invalid length.
[  611.207980][T17833] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2941'.
[  611.229392][T17833] NCSI netlink: No device for ifindex 0
[  611.830657][   T52] Bluetooth: hci5: command tx timeout
[  611.845088][  T377] vlan2: left promiscuous mode
[  611.863781][  T377] bridge0: port 3(vlan2) entered disabled state
[  611.901423][  T377] bridge_slave_1: left allmulticast mode
[  611.907432][  T377] bridge_slave_1: left promiscuous mode
[  611.938005][  T377] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.958103][  T377] bridge_slave_0: left promiscuous mode
[  611.964147][  T377] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.985649][T17840] xt_hashlimit: size too large, truncated to 1048576
[  611.995850][T17840] xt_hashlimit: max too large, truncated to 1048576
[  612.048027][T17840] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  612.356909][  T377] dvmrp0 (unregistering): left allmulticast mode
[  612.378160][  T377] bond2 (unregistering): (slave geneve3): Releasing active interface
[  612.840367][  T377] bond0 (unregistering): left promiscuous mode
[  612.847358][  T377] bond_slave_0: left promiscuous mode
[  612.853164][  T377] bond_slave_1: left promiscuous mode
[  612.858720][  T377] team0: left promiscuous mode
[  612.863646][  T377] team_slave_0: left promiscuous mode
[  612.869280][  T377] team_slave_1: left promiscuous mode
[  612.877675][  T377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  612.886910][  T377] bond_slave_0: left allmulticast mode
[  612.893870][  T377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  612.903487][  T377] bond_slave_1: left allmulticast mode
[  612.910495][  T377] bond0 (unregistering): (slave team0): Releasing backup interface
[  612.918967][  T377] team0: left allmulticast mode
[  612.924286][  T377] team_slave_0: left allmulticast mode
[  612.929805][  T377] team_slave_1: left allmulticast mode
[  612.936079][  T377] bond0 (unregistering): Released all slaves
[  612.951704][  T377] bond1 (unregistering): Released all slaves
[  613.055596][  T377] bond2 (unregistering): Released all slaves
[  613.158417][  T377] bond3 (unregistering): (slave veth5): Releasing active interface
[  613.167357][  T377] bond3 (unregistering): Released all slaves
[  613.181446][  T377] bond4 (unregistering): Released all slaves
[  613.329155][  T377] : left promiscuous mode
[  613.411006][T17852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  613.454501][  T377] tipc: Left network mode
[  613.912888][   T52] Bluetooth: hci5: command tx timeout
[  614.192135][T17796] chnl_net:caif_netlink_parms(): no params data found
[  614.301415][T17883] netlink: 'syz.3.2952': attribute type 22 has an invalid length.
[  614.315315][T17868] syzkaller0: entered allmulticast mode
[  614.330400][T17883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2952'.
[  614.339806][T17881] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  614.493563][T17887] bond1: entered promiscuous mode
[  614.498762][T17887] bond1: entered allmulticast mode
[  614.506089][T17887] 8021q: adding VLAN 0 to HW filter on device bond1
[  614.616410][T17873] tipc: Resetting bearer <eth:syzkaller0>
[  614.657084][T17867] tipc: Disabling bearer <eth:syzkaller0>
[  614.702358][T17903] netlink: 'syz.5.2956': attribute type 10 has an invalid length.
[  614.755279][T17904] netlink: 'syz.5.2956': attribute type 10 has an invalid length.
[  614.782485][T17796] bridge0: port 1(bridge_slave_0) entered blocking state
[  614.793270][T17796] bridge0: port 1(bridge_slave_0) entered disabled state
[  614.801372][T17796] bridge_slave_0: entered allmulticast mode
[  614.809386][T17796] bridge_slave_0: entered promiscuous mode
[  614.858527][T17903] team0: Failed to send options change via netlink (err -105)
[  614.866806][T17903] team0: Port device dummy0 added
[  614.875017][T17904] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  614.896493][T17904] team0: Failed to send options change via netlink (err -105)
[  614.907227][T17904] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  614.918508][T17904] team0: Port device dummy0 removed
[  614.934342][T17904] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  614.944679][T17796] bridge0: port 2(bridge_slave_1) entered blocking state
[  614.953230][T17796] bridge0: port 2(bridge_slave_1) entered disabled state
[  614.960833][T17796] bridge_slave_1: entered allmulticast mode
[  614.984363][T17796] bridge_slave_1: entered promiscuous mode
[  615.011113][T17906] netlink: 'syz.3.2957': attribute type 7 has an invalid length.
[  615.133451][T17796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  615.219113][T17796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  615.456383][T17796] team0: Port device team_slave_0 added
[  615.456818][T17927] netlink: 640 bytes leftover after parsing attributes in process `syz.2.2962'.
[  615.477747][T17929] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2961'.
[  615.500405][T17796] team0: Port device team_slave_1 added
[  615.505194][T17927] netlink: 640 bytes leftover after parsing attributes in process `syz.2.2962'.
[  615.731588][T17931] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  615.776505][T17796] batman_adv: batadv0: Adding interface: batadv_slave_0
[  615.794295][T17796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  615.856744][T17796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  615.911481][  T377] dummy0: left promiscuous mode
[  615.950263][  T377] hsr_slave_0: left promiscuous mode
[  615.990238][   T52] Bluetooth: hci5: command tx timeout
[  615.994216][  T377] hsr_slave_1: left promiscuous mode
[  616.015009][  T377] batman_adv: batadv0: Removing interface: batadv_slave_0
[  616.028797][T17944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2966'.
[  616.042097][  T377] batman_adv: batadv0: Removing interface: batadv_slave_1
[  616.538855][  T377] team0 (unregistering): Port device team_slave_1 removed
[  616.594325][  T377] team0 (unregistering): Port device team_slave_0 removed
[  616.967591][T17796] batman_adv: batadv0: Adding interface: batadv_slave_1
[  616.975500][T17796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  617.002492][T17796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  617.026068][T17922] wg1 speed is unknown, defaulting to 1000
[  617.082424][T17954] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2968'.
[  617.094693][T17922] lo speed is unknown, defaulting to 1000
[  617.194923][T17796] hsr_slave_0: entered promiscuous mode
[  617.220793][T17796] hsr_slave_1: entered promiscuous mode
[  617.227427][T17796] debugfs: 'hsr0' already exists in 'hsr'
[  617.234358][T17796] Cannot create hsr debugfs directory
[  617.272734][T17957] netlink: 'syz.3.2969': attribute type 10 has an invalid length.
[  617.587085][T17969] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2973'.
[  617.620664][T17969] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2973'.
[  617.823590][T17969] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2973'.
[  617.833395][T17969] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2973'.
[  618.072260][   T52] Bluetooth: hci5: command tx timeout
[  618.179114][T17978] bond2: Unable to set peer notification delay as MII monitoring is disabled
[  618.192894][T17978] bond2 (unregistering): Released all slaves
[  618.405484][  T377] IPVS: stop unused estimator thread 0...
[  618.426009][T17982] netlink: 'syz.5.2976': attribute type 3 has an invalid length.
[  618.725973][T17995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2980'.
[  618.773824][   T52] block nbd5: Receive control failed (result -107)
[  618.789059][T17997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2980'.
[  619.365872][T18015] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2986'.
[  619.384756][T18015] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2986'.
[  619.404211][T17796] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  619.436289][T17998] wg1 speed is unknown, defaulting to 1000
[  619.443717][T17796] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  619.474874][T17998] lo speed is unknown, defaulting to 1000
[  619.483380][T17796] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  619.518332][T17796] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  619.885921][T18040] openvswitch: netlink: Flow actions attr not present in new flow.
[  619.978719][T17796] 8021q: adding VLAN 0 to HW filter on device bond0
[  620.072102][T17796] 8021q: adding VLAN 0 to HW filter on device team0
[  620.139511][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.147349][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state
[  620.211965][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.219197][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state
[  620.295680][T18025] wg1 speed is unknown, defaulting to 1000
[  620.598767][T18025] lo speed is unknown, defaulting to 1000
[  620.940118][T17796] 8021q: adding VLAN 0 to HW filter on device batadv0
[  621.021827][T17796] veth0_vlan: entered promiscuous mode
[  621.038884][T17796] veth1_vlan: entered promiscuous mode
[  621.067753][T18064] netlink: 'syz.5.2996': attribute type 1 has an invalid length.
[  621.090324][T18063] netlink: 'syz.5.2996': attribute type 1 has an invalid length.
[  621.104083][T17796] veth0_macvtap: entered promiscuous mode
[  621.108632][T18037] siw: device registration error -23
[  621.189099][T18064] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  621.227101][T18063] 8021q: adding VLAN 0 to HW filter on device bond2
[  621.353066][T17796] veth1_macvtap: entered promiscuous mode
[  621.603642][T17796] batman_adv: batadv0: Interface activated: batadv_slave_0
[  621.654389][T17796] batman_adv: batadv0: Interface activated: batadv_slave_1
[  621.702300][T17524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  621.722810][T17524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  621.819170][T17524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  621.948995][T17524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  621.966389][T18082] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  622.241492][ T6223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.262957][ T6223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.308274][T18070] wg1 speed is unknown, defaulting to 1000
[  622.369705][T18070] lo speed is unknown, defaulting to 1000
[  622.383651][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.397389][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.522698][T18089] xt_CONNSECMARK: invalid mode: 66
[  622.691882][T18091] syzkaller1: entered promiscuous mode
[  622.697442][T18091] syzkaller1: entered allmulticast mode
[  623.013114][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  623.025109][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  623.041264][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  623.051477][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  623.070853][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  624.310938][T18130] __nla_validate_parse: 5 callbacks suppressed
[  624.310963][T18130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3013'.
[  624.341565][T18130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3013'.
[  624.373999][T18132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3013'.
[  624.407844][T18101] wg1 speed is unknown, defaulting to 1000
[  624.512162][T18114] wg1 speed is unknown, defaulting to 1000
[  624.528593][T18101] lo speed is unknown, defaulting to 1000
[  624.828293][T18135] syzkaller0: entered promiscuous mode
[  624.845561][T18135] syzkaller0: entered allmulticast mode
[  625.110950][   T52] Bluetooth: hci0: command tx timeout
[  625.211908][T18114] lo speed is unknown, defaulting to 1000
[  625.400189][T18112] wg1 speed is unknown, defaulting to 1000
[  625.423201][T18139] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  625.455036][T18139] syzkaller0: entered promiscuous mode
[  625.480601][T18139] syzkaller0: entered allmulticast mode
[  625.544996][T18139] tipc: Resetting bearer <eth:syzkaller0>
[  625.610838][T18138] tipc: Resetting bearer <eth:syzkaller0>
[  625.658705][T18138] tipc: Disabling bearer <eth:syzkaller0>
[  625.828575][T18101] chnl_net:caif_netlink_parms(): no params data found
[  625.837389][T18147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3018'.
[  625.967757][T18112] lo speed is unknown, defaulting to 1000
[  626.371312][T18101] bridge0: port 1(bridge_slave_0) entered blocking state
[  626.379382][T18101] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.396055][T18101] bridge_slave_0: entered allmulticast mode
[  626.405512][T18101] bridge_slave_0: entered promiscuous mode
[  626.445635][T18101] bridge0: port 2(bridge_slave_1) entered blocking state
[  626.453484][T18101] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.464643][T18101] bridge_slave_1: entered allmulticast mode
[  626.479618][T18101] bridge_slave_1: entered promiscuous mode
[  626.673626][T18149] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  626.709119][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3021'.
[  626.742938][T18157] tipc: Started in network mode
[  626.751554][T18157] tipc: Node identity 62be7f550b3f, cluster identity 4711
[  626.759034][T18157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  626.779685][T18101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  626.805659][T18158] syzkaller0: entered promiscuous mode
[  626.814433][T18158] syzkaller0: entered allmulticast mode
[  626.825690][T18101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  627.117084][T18157] tipc: Resetting bearer <eth:syzkaller0>
[  627.175970][T18101] team0: Port device team_slave_0 added
[  627.190063][   T52] Bluetooth: hci0: command tx timeout
[  627.223837][T18156] tipc: Resetting bearer <eth:syzkaller0>
[  627.246132][T18156] tipc: Disabling bearer <eth:syzkaller0>
[  627.273820][T18101] team0: Port device team_slave_1 added
[  627.421752][T18101] batman_adv: batadv0: Adding interface: batadv_slave_0
[  627.428781][T18101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  627.526884][T18101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  627.555301][T18101] batman_adv: batadv0: Adding interface: batadv_slave_1
[  627.634142][T18101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  627.720616][T18101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  627.740494][T18180] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3027'.
[  628.151498][T18185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3028'.
[  628.436275][T18185] macsec0: left allmulticast mode
[  628.448736][T18185] veth1_macvtap: left allmulticast mode
[  628.467771][T18185] macsec0: left promiscuous mode
[  628.481408][T18185] bridge0: port 2(macsec0) entered disabled state
[  628.502950][T18185] batadv_slave_1: left allmulticast mode
[  628.519481][T18185] bridge0: port 1(batadv_slave_1) entered disabled state
[  628.543267][T18185] vlan2: left allmulticast mode
[  628.555241][T18185] bridge_slave_0: left allmulticast mode
[  628.570856][T18185] vlan2: left promiscuous mode
[  628.580239][T18185] bridge_slave_0: left promiscuous mode
[  628.593828][T18185] bridge0: port 3(vlan2) entered disabled state
[  628.759127][T18101] hsr_slave_0: entered promiscuous mode
[  628.766992][T18101] hsr_slave_1: entered promiscuous mode
[  628.773737][T18101] debugfs: 'hsr0' already exists in 'hsr'
[  628.779522][T18101] Cannot create hsr debugfs directory
[  628.794704][T18174] wg1 speed is unknown, defaulting to 1000
[  628.880895][T18174] lo speed is unknown, defaulting to 1000
[  629.081270][T18189] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  629.089072][T18189] syzkaller0: entered promiscuous mode
[  629.094878][T18189] syzkaller0: entered allmulticast mode
[  629.159699][T18189] tipc: Resetting bearer <eth:syzkaller0>
[  629.190986][T18188] tipc: Resetting bearer <eth:syzkaller0>
[  629.270429][ T5827] Bluetooth: hci0: command 0x040f tx timeout
[  630.904190][T18188] tipc: Disabling bearer <eth:syzkaller0>
[  630.930079][T18176] wg1 speed is unknown, defaulting to 1000
[  630.939467][T18176] lo speed is unknown, defaulting to 1000
[  631.351466][   T52] Bluetooth: hci0: command 0x040f tx timeout
[  631.553952][T18207] dummy0: entered promiscuous mode
[  631.559588][T18207] vlan2: entered promiscuous mode
[  631.810982][T18213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3035'.
[  631.888737][T18210] TCP: TCP_TX_DELAY enabled
[  632.347156][T18101] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  632.412198][T18101] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  632.505728][T18101] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  632.557059][T18221] syzkaller0: entered promiscuous mode
[  632.563500][T18221] syzkaller0: entered allmulticast mode
[  632.575147][T18101] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  632.837315][T18101] 8021q: adding VLAN 0 to HW filter on device bond0
[  632.852921][T18235] netlink: 'syz.0.3038': attribute type 2 has an invalid length.
[  632.875850][T18235] netlink: 'syz.0.3038': attribute type 1 has an invalid length.
[  632.891313][T18101] 8021q: adding VLAN 0 to HW filter on device team0
[  632.903440][T18237] netlink: 'syz.3.3039': attribute type 16 has an invalid length.
[  632.930761][ T6226] bridge0: port 1(bridge_slave_0) entered blocking state
[  632.937981][ T6226] bridge0: port 1(bridge_slave_0) entered forwarding state
[  632.980239][T18237] netlink: 'syz.3.3039': attribute type 17 has an invalid length.
[  633.043362][T17524] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.050619][T17524] bridge0: port 2(bridge_slave_1) entered forwarding state
[  633.234031][T18251] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3041'.
[  633.441645][   T52] Bluetooth: hci0: command 0x040f tx timeout
[  633.823404][T18285] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  633.889638][T18286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  633.917736][T18101] 8021q: adding VLAN 0 to HW filter on device batadv0
[  634.062493][T18101] veth0_vlan: entered promiscuous mode
[  634.107465][T18101] veth1_vlan: entered promiscuous mode
[  634.219331][T18101] veth0_macvtap: entered promiscuous mode
[  634.247281][T18101] veth1_macvtap: entered promiscuous mode
[  634.289194][T18101] batman_adv: batadv0: Interface activated: batadv_slave_0
[  634.315543][T18101] batman_adv: batadv0: Interface activated: batadv_slave_1
[  634.388106][ T6220] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  634.411639][ T6220] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  634.431918][ T6220] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  634.460829][ T6220] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  634.502179][T18318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3056'.
[  634.585193][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  634.601552][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  634.659075][ T6220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  634.678366][ T6220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  635.141337][  T892] lo speed is unknown, defaulting to 1000
[  635.511872][   T52] Bluetooth: hci0: command 0x040f tx timeout
[  636.043124][T18374] æÿîÿ: entered promiscuous mode
[  636.474561][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  636.486637][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  636.496330][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  636.505093][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  636.515211][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  637.239155][T18422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3081'.
[  637.937246][T18386] wg1 speed is unknown, defaulting to 1000
[  637.972547][T18386] lo speed is unknown, defaulting to 1000
[  638.202271][T18439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3083'.
[  638.394798][T18443] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address
[  638.417088][T18443] bond9: (slave vxcan5): Error -95 calling set_mac_address
[  638.635735][ T5827] Bluetooth: hci2: command tx timeout
[  638.935074][T18439] macvlan4: entered promiscuous mode
[  638.942538][T18439] macvlan4: entered allmulticast mode
[  638.983939][T18439] bond9: (slave macvlan4): Error -98 calling set_mac_address
[  639.476591][T18458] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  639.649179][T18458] bond3 (unregistering): Released all slaves
[  639.688744][T18465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3088'.
[  639.718197][T18454] wg1 speed is unknown, defaulting to 1000
[  639.740595][T18454] lo speed is unknown, defaulting to 1000
[  639.875477][T18386] chnl_net:caif_netlink_parms(): no params data found
[  640.501732][T18483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3090'.
[  640.532859][T18483] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3090'.
[  640.712525][ T5827] Bluetooth: hci2: command tx timeout
[  640.787077][T18483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3090'.
[  640.872265][T18386] bridge0: port 1(bridge_slave_0) entered blocking state
[  640.879556][T18386] bridge0: port 1(bridge_slave_0) entered disabled state
[  640.890519][T18386] bridge_slave_0: entered allmulticast mode
[  640.920171][T18386] bridge_slave_0: entered promiscuous mode
[  640.954184][T18386] bridge0: port 2(bridge_slave_1) entered blocking state
[  640.980163][T18386] bridge0: port 2(bridge_slave_1) entered disabled state
[  640.987491][T18386] bridge_slave_1: entered allmulticast mode
[  641.033876][T18386] bridge_slave_1: entered promiscuous mode
[  641.146122][T18482] wg1 speed is unknown, defaulting to 1000
[  641.211578][T18482] lo speed is unknown, defaulting to 1000
[  641.229044][T18386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  641.294390][T18386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  641.458948][T18386] team0: Port device team_slave_0 added
[  641.553683][T18386] team0: Port device team_slave_1 added
[  641.693394][T18386] batman_adv: batadv0: Adding interface: batadv_slave_0
[  641.710224][T18386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  641.786291][T18386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  641.829325][T18386] batman_adv: batadv0: Adding interface: batadv_slave_1
[  641.860459][T18386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  641.882647][T18493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3094'.
[  641.930075][T18386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  642.243358][T18495] bond10 (unregistering): Released all slaves
[  642.468855][T18500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3095'.
[  642.641889][T18386] hsr_slave_0: entered promiscuous mode
[  642.667788][T18386] hsr_slave_1: entered promiscuous mode
[  642.691850][T18386] debugfs: 'hsr0' already exists in 'hsr'
[  642.697685][T18386] Cannot create hsr debugfs directory
[  642.793096][ T5827] Bluetooth: hci2: command tx timeout
[  643.016003][T18510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3097'.
[  643.035621][T18510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3097'.
[  643.060880][T18510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3097'.
[  643.342287][T18520] batadv1: entered promiscuous mode
[  643.577350][T18530] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3104'.
[  643.687036][T18386] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.952765][T18538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3105'.
[  644.155917][T18527] wg1 speed is unknown, defaulting to 1000
[  644.173707][T18386] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.202632][T18538] veth1_macvtap: left promiscuous mode
[  644.247814][T18527] lo speed is unknown, defaulting to 1000
[  644.264190][T18386] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.354310][T18557] netlink: 34 bytes leftover after parsing attributes in process `syz.2.3112'.
[  644.375262][T18386] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.708419][T18386] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  644.729420][T18386] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  644.747157][T18386] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  644.763238][T18386] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  644.870021][ T5827] Bluetooth: hci2: command tx timeout
[  645.031614][T18386] 8021q: adding VLAN 0 to HW filter on device bond0
[  645.093370][T18386] 8021q: adding VLAN 0 to HW filter on device team0
[  645.124541][T18582] netlink: 'syz.0.3118': attribute type 6 has an invalid length.
[  645.154649][T18580] geneve2: entered promiscuous mode
[  645.195252][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state
[  645.202657][ T6220] bridge0: port 1(bridge_slave_0) entered forwarding state
[  645.337915][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state
[  645.345255][ T6220] bridge0: port 2(bridge_slave_1) entered forwarding state
[  645.552325][T18386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  646.158903][T18612] Cannot find add_set index 4 as target
[  646.175598][T18386] 8021q: adding VLAN 0 to HW filter on device batadv0
[  646.294269][T18583] wg1 speed is unknown, defaulting to 1000
[  646.356479][T18583] lo speed is unknown, defaulting to 1000
[  646.373810][T18386] veth0_vlan: entered promiscuous mode
[  646.424786][T18386] veth1_vlan: entered promiscuous mode
[  646.613910][T18625] sctp_setsockopt_maxburst: 23 callbacks suppressed
[  646.613931][T18625] sctp: [Deprecated]: syz.4.3128 (pid 18625) Use of int in max_burst socket option deprecated.
[  646.613931][T18625] Use struct sctp_assoc_value instead
[  646.651642][T18386] veth0_macvtap: entered promiscuous mode
[  646.716557][T18386] veth1_macvtap: entered promiscuous mode
[  646.758084][T18386] batman_adv: batadv0: Interface activated: batadv_slave_0
[  646.827775][T18386] batman_adv: batadv0: Interface activated: batadv_slave_1
[  646.881614][ T6220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  646.908687][T18631] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3130'.
[  646.930780][ T6220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  646.956936][ T6220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  646.978707][ T6220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  647.133069][T18603] wg1 speed is unknown, defaulting to 1000
[  647.162088][ T3840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  647.176589][ T3840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  647.250271][T18603] lo speed is unknown, defaulting to 1000
[  647.359439][ T6223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  647.371131][T18639] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3132'.
[  647.388343][ T6223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  647.448722][T18646] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  647.480834][T18648] netlink: 'syz.5.3132': attribute type 9 has an invalid length.
[  647.524428][T18648] netlink: 'syz.5.3132': attribute type 7 has an invalid length.
[  647.538324][T18648] netlink: 'syz.5.3132': attribute type 8 has an invalid length.
[  647.910322][   T52] Bluetooth: hci2: command 0x0405 tx timeout
[  648.282526][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  648.294020][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  648.302921][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  648.312058][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  648.320830][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  648.517527][T18673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3141'.
[  649.033140][T18350] bond0: (slave netdevsim0): Releasing backup interface
[  649.068522][T18350] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode
[  649.618375][T18350] veth0_to_bridge: left allmulticast mode
[  649.641416][T18350] veth0_to_bridge: left promiscuous mode
[  649.649297][T18350] bridge0: port 1(veth0_to_bridge) entered disabled state
[  649.844417][T18693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'.
[  649.860133][T18693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3144'.
[  650.076578][T18350] vlan0: left promiscuous mode
[  650.081584][T18350] bridge0: left promiscuous mode
[  650.087080][T18350] bridge5: port 1(vlan0) entered disabled state
[  650.431200][T18350] bond8 (unregistering): (slave erspan0): Releasing active interface
[  650.476774][   T52] Bluetooth: hci3: command tx timeout
[  650.489528][T18350] bond2 (unregistering): (slave gretap1): Releasing active interface
[  650.507424][T18350] batman_adv: batadv0: Removing interface: gretap2
[  650.617709][T18350] bond3 (unregistering): (slave geneve2): Releasing active interface
[  651.083999][T18350] bond1 (unregistering): (slave macvlan0): Releasing backup interface
[  651.121234][T18350] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  651.130960][T18350] dummy0: left promiscuous mode
[  651.142496][T18350] bond0 (unregistering): Released all slaves
[  651.278501][T18350] bond1 (unregistering): Released all slaves
[  651.293909][T18350] bond2 (unregistering): Released all slaves
[  651.433572][T18350] bond3 (unregistering): Released all slaves
[  651.449073][T18350] bond4 (unregistering): Released all slaves
[  651.589888][T18350] bond5 (unregistering): Released all slaves
[  651.605585][T18350] bond6 (unregistering): Released all slaves
[  651.740996][T18350] bond7 (unregistering): Released all slaves
[  651.875476][T18350] bond8 (unregistering): (slave veth3): Releasing active interface
[  651.885552][T18350] bond8 (unregistering): Released all slaves
[  651.900499][T18350] bond9 (unregistering): Released all slaves
[  651.914857][T18663] wg1 speed is unknown, defaulting to 1000
[  651.921894][T18697] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3145'.
[  652.020205][T18663] lo speed is unknown, defaulting to 1000
[  652.026051][T18350] : left promiscuous mode
[  652.195420][T18350] : left promiscuous mode
[  652.288704][T18707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3148'.
[  652.308530][T18711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3149'.
[  652.372018][T18709] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  652.451250][T18350] æÿîÿ: left promiscuous mode
[  652.551996][   T52] Bluetooth: hci3: command tx timeout
[  653.032996][ T6215] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  653.046600][T18733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  653.168438][T18350] tipc: Left network mode
[  653.553545][T18754] batadv_slave_0: entered promiscuous mode
[  653.562115][T18754] batman_adv: batadv0: Adding interface: macsec1
[  653.571430][T18754] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  653.604123][T18754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  653.615313][T18754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  653.625771][T18754] batman_adv: batadv0: Interface activated: macsec1
[  654.079036][T18772] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3163'.
[  654.106333][T18769] netlink: 'syz.0.3164': attribute type 11 has an invalid length.
[  654.295055][T18663] chnl_net:caif_netlink_parms(): no params data found
[  654.631016][   T52] Bluetooth: hci3: command tx timeout
[  654.709090][T18798] netlink: 'syz.2.3170': attribute type 5 has an invalid length.
[  654.930744][T18350] mac80211_hwsim hwsim12 wlan0 (unregistering): left promiscuous mode
[  654.946504][T18808] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3172'.
[  654.993821][T18663] bridge0: port 1(bridge_slave_0) entered blocking state
[  655.001546][T18663] bridge0: port 1(bridge_slave_0) entered disabled state
[  655.008919][T18663] bridge_slave_0: entered allmulticast mode
[  655.017868][T18817] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3172'.
[  655.047537][T18663] bridge_slave_0: entered promiscuous mode
[  655.431533][T18814] bond1: Removing last arp target with arp_interval on
[  655.445952][T18814] bond1: entered promiscuous mode
[  655.456053][T18814] bond1: entered allmulticast mode
[  655.474078][T18814] 8021q: adding VLAN 0 to HW filter on device bond1
[  655.805891][T18815] bond2: Removing last arp target with arp_interval on
[  655.827579][T18815] bond2: entered promiscuous mode
[  655.851434][T18815] bond2: entered allmulticast mode
[  655.864310][T18815] 8021q: adding VLAN 0 to HW filter on device bond2
[  655.883323][T18816] netlink: 'syz.5.3173': attribute type 12 has an invalid length.
[  655.902627][T18663] bridge0: port 2(bridge_slave_1) entered blocking state
[  655.941156][T18663] bridge0: port 2(bridge_slave_1) entered disabled state
[  655.950577][T18663] bridge_slave_1: entered allmulticast mode
[  655.973516][T18663] bridge_slave_1: entered promiscuous mode
[  656.069793][T18825] veth3: entered promiscuous mode
[  656.710826][   T52] Bluetooth: hci3: command tx timeout
[  656.918810][T18663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  656.958886][T18663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  657.017966][T18843] macsec0: entered promiscuous mode
[  657.034152][T18843] syzkaller0: entered promiscuous mode
[  657.053755][T18843] syzkaller0: left promiscuous mode
[  657.151572][T18847] syzkaller0: entered promiscuous mode
[  657.157171][T18847] syzkaller0: entered allmulticast mode
[  657.198779][T18350] batman_adv: batadv0: Removing interface: macsec1
[  658.149901][T18882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3186'.
[  658.518653][   T13] smc: removing ib device syz0
[  658.665598][  T892] lo speed is unknown, defaulting to 1000
[  658.674563][  T892] syz0: Port: 1 Link DOWN
[  658.694275][T18883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3186'.
[  658.726412][T18663] team0: Port device team_slave_0 added
[  658.777638][T18663] team0: Port device team_slave_1 added
[  659.023097][T18903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3188'.
[  659.089073][T18912] netlink: 56743 bytes leftover after parsing attributes in process `syz.5.3187'.
[  659.136398][T18903] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3188'.
[  659.203270][T18663] batman_adv: batadv0: Adding interface: batadv_slave_0
[  659.230395][T18663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  659.324615][T18663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  659.392058][T18928] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3191'.
[  659.406439][T18663] batman_adv: batadv0: Adding interface: batadv_slave_1
[  659.414240][T18663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  659.477401][T18663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  660.301373][T18663] hsr_slave_0: entered promiscuous mode
[  660.320771][T18663] hsr_slave_1: entered promiscuous mode
[  660.340721][T18663] debugfs: 'hsr0' already exists in 'hsr'
[  660.356834][T18663] Cannot create hsr debugfs directory
[  660.832518][T18955] macvtap1: entered promiscuous mode
[  660.838145][T18955] macvtap1: entered allmulticast mode
[  660.853699][T18955] veth1_vlan: entered allmulticast mode
[  660.903481][T18964] netlink: 'syz.2.3199': attribute type 2 has an invalid length.
[  660.913534][T18961] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7
[  660.993545][T18958] macvtap2: entered promiscuous mode
[  660.999118][T18958] macvtap2: entered allmulticast mode
[  661.125563][T18964] : entered promiscuous mode
[  661.300240][T18933] wg1 speed is unknown, defaulting to 1000
[  662.293279][T18985] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3205'.
[  662.450646][T18987] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3206'.
[  662.459806][T18987] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3206'.
[  662.638054][T18350] IPVS: stop unused estimator thread 0...
[  663.016125][T19002] netlink: 'syz.3.3210': attribute type 12 has an invalid length.
[  663.043310][T18663] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  663.076569][T18663] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  663.124969][T18663] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  663.185678][T18663] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  663.502266][T18663] 8021q: adding VLAN 0 to HW filter on device bond0
[  663.550236][T18996] wg1 speed is unknown, defaulting to 1000
[  663.567776][T18663] 8021q: adding VLAN 0 to HW filter on device team0
[  663.654144][  T259] bridge0: port 1(bridge_slave_0) entered blocking state
[  663.661489][  T259] bridge0: port 1(bridge_slave_0) entered forwarding state
[  663.757152][  T259] bridge0: port 2(bridge_slave_1) entered blocking state
[  663.764643][  T259] bridge0: port 2(bridge_slave_1) entered forwarding state
[  664.017586][T19029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3217'.
[  664.048551][T19028] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3217'.
[  664.570333][T19043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3219'.
[  664.873739][T19043] bridge_slave_1: left allmulticast mode
[  664.879863][T19043] bridge_slave_1: left promiscuous mode
[  664.889001][T19043] bridge0: port 2(bridge_slave_1) entered disabled state
[  664.906083][T19043] bridge_slave_0: left allmulticast mode
[  664.912561][T19043] bridge_slave_0: left promiscuous mode
[  664.918758][T19043] bridge0: port 1(bridge_slave_0) entered disabled state
[  665.055395][T19030] wg1 speed is unknown, defaulting to 1000
[  665.264067][T18663] 8021q: adding VLAN 0 to HW filter on device batadv0
[  665.294595][T19054] bridge1: entered allmulticast mode
[  665.463413][T19059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3220'.
[  666.224954][T18663] veth0_vlan: entered promiscuous mode
[  666.266472][T18663] veth1_vlan: entered promiscuous mode
[  666.441652][T18663] veth0_macvtap: entered promiscuous mode
[  666.464732][T18663] veth1_macvtap: entered promiscuous mode
[  666.496972][T18663] batman_adv: batadv0: Interface activated: batadv_slave_0
[  666.532488][T18663] batman_adv: batadv0: Interface activated: batadv_slave_1
[  666.576267][   T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  666.591768][   T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  666.601118][   T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  666.613458][T19091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  666.624254][   T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  666.670298][T19100] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3229'.
[  666.900400][T18894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  666.940633][T18894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  666.994471][T18890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.019664][T18890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  667.239393][T19112] netlink: 'syz.4.3136': attribute type 1 has an invalid length.
[  667.284679][T19112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'.
[  667.297985][T19116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3232'.
[  667.312072][T19120] netlink: 'syz.5.3234': attribute type 5 has an invalid length.
[  667.339397][T19120] netlink: 'syz.5.3234': attribute type 5 has an invalid length.
[  667.473663][T19116] 8021q: adding VLAN 0 to HW filter on device bond1
[  667.533071][T19130] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3237'.
[  667.550429][T19130] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3237'.
[  667.559751][T19130] netlink: 'syz.0.3237': attribute type 6 has an invalid length.
[  667.580104][T19130] netlink: 'syz.0.3237': attribute type 5 has an invalid length.
[  667.587933][T19130] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3237'.
[  667.668412][T19131] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3237'.
[  667.728071][T19131] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3237'.
[  667.790720][T19131] netlink: 'syz.0.3237': attribute type 6 has an invalid length.
[  667.805438][T19131] netlink: 'syz.0.3237': attribute type 5 has an invalid length.
[  668.229637][T19162] netlink: 'syz.0.3245': attribute type 1 has an invalid length.
[  668.374370][T19162] 8021q: adding VLAN 0 to HW filter on device bond1
[  668.463740][T19166] bond1: (slave ip6gretap1): making interface the new active one
[  668.477711][T19166] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  668.553751][T14729] IPVS: starting estimator thread 0...
[  668.560420][T19181] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  668.582187][T19181] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  668.616587][T19170] veth3: entered promiscuous mode
[  668.658770][T19170] bond1: (slave veth3): Enslaving as an active interface with a down link
[  668.679298][T19187] IPVS: using max 29 ests per chain, 69600 per kthread
[  668.697427][T19162] erspan0: entered allmulticast mode
[  668.732228][T19162] bond1: (slave erspan0): Enslaving as an active interface with an up link
[  668.843842][T19177] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  669.558020][T19211] geneve2: entered promiscuous mode
[  669.721870][T19217] xt_ecn: cannot match TCP bits for non-tcp packets
[  669.747685][T19215] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.798855][T19171] wg1 speed is unknown, defaulting to 1000
[  669.806707][T19219] netlink: 'syz.2.3258': attribute type 4 has an invalid length.
[  669.854031][T19219] netlink: 'syz.2.3258': attribute type 4 has an invalid length.
[  669.891339][T19215] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.346071][T19222] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.353789][T19222] bridge0: port 1(bridge_slave_0) entered disabled state
[  670.924188][T19222] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  670.982438][T19222] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  671.669533][ T6223] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  671.757464][T19215] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.784484][ T6223] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  671.854775][ T6223] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  671.936775][T19215] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.954461][ T6223] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  672.144694][T19252] __nla_validate_parse: 6 callbacks suppressed
[  672.144717][T19252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3266'.
[  672.265873][T19252] bond3: entered promiscuous mode
[  672.272248][T19252] 8021q: adding VLAN 0 to HW filter on device bond3
[  672.386301][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  672.680673][T18891] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  672.704145][T19243] wg1 speed is unknown, defaulting to 1000
[  672.716657][T18891] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  672.735738][T18891] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  673.238289][T19278] Bluetooth: MGMT ver 1.23
[  673.265671][T19278] xt_TPROXY: Can be used only with -p tcp or -p udp
[  673.339499][T19258] wg1 speed is unknown, defaulting to 1000
[  673.754798][T19288] netlink: 'syz.3.3273': attribute type 10 has an invalid length.
[  673.782685][T19284] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode
[  673.929214][T19287] bond0: (slave bond_slave_0): Releasing backup interface
[  673.963266][T19287] bond0: (slave bond_slave_1): Releasing backup interface
[  673.997468][T19287] team0: Port device team_slave_0 removed
[  674.020997][T19287] team0: Port device team_slave_1 removed
[  674.038645][T19287] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  674.048854][T19287] batman_adv: batadv0: Removing interface: batadv_slave_0
[  674.067458][T19287] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  674.075834][T19287] batman_adv: batadv0: Removing interface: batadv_slave_1
[  674.092931][T19287] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  674.136740][T19288] mac80211_hwsim hwsim46 wlan1: left allmulticast mode
[  674.152255][T19288] 8021q: adding VLAN 0 to HW filter on device bond0
[  674.169514][T19288] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  674.301219][T19299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3276'.
[  674.332798][T19294] netlink: 'syz.0.3276': attribute type 16 has an invalid length.
[  674.353248][T19294] netlink: 'syz.0.3276': attribute type 17 has an invalid length.
[  674.416873][T19294] erspan0: left allmulticast mode
[  674.482899][T19294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  674.890273][T14728] IPVS: starting estimator thread 0...
[  674.995591][T19316] IPVS: Scheduler module ip_vs_ not found
[  675.011251][T19319] IPVS: length: 24 != 12792
[  675.040596][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3279'.
[  675.071175][T19304] netlink: 'syz.5.3279': attribute type 5 has an invalid length.
[  675.100080][T19318] IPVS: using max 24 ests per chain, 57600 per kthread
[  675.102494][T19304] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3279'.
[  675.130312][T19304] geneve3: entered promiscuous mode
[  675.135695][T19304] geneve3: entered allmulticast mode
[  675.143510][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3279'.
[  675.153176][T18889] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  675.162291][T19304] netlink: 'syz.5.3279': attribute type 5 has an invalid length.
[  675.174821][T18889] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  675.184501][T19304] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3279'.
[  675.194934][T18889] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  675.212229][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3279'.
[  675.230045][T18889] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  675.247937][T19304] netlink: 'syz.5.3279': attribute type 5 has an invalid length.
[  675.259146][T19334] netlink: 'syz.4.3287': attribute type 14 has an invalid length.
[  675.271410][T19304] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3279'.
[  675.305891][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3279'.
[  675.325957][T19304] netlink: 'syz.5.3279': attribute type 5 has an invalid length.
[  675.353762][T19304] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3279'.
[  676.345913][T19386] tipc: Can't bind to reserved service type 2
[  676.375830][T19348] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.383769][T19348] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.959541][T19348] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  676.991970][T19348] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  677.600557][T19354] netlink: 'syz.4.3291': attribute type 3 has an invalid length.
[  677.654553][T19369] syzkaller1: entered promiscuous mode
[  677.661237][T19369] syzkaller1: entered allmulticast mode
[  677.692092][T19382] netlink: 'syz.0.3298': attribute type 5 has an invalid length.
[  677.722648][T18892] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  677.744984][T18892] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  677.895106][T18892] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  677.907296][T18892] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  677.953281][T19394] openvswitch: netlink: IP tunnel dst address not specified
[  678.204662][T19409] __nla_validate_parse: 2 callbacks suppressed
[  678.204685][T19409] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3307'.
[  678.273597][T19396] bridge0: port 2(bridge_slave_1) entered disabled state
[  678.281521][T19396] bridge0: port 1(bridge_slave_0) entered disabled state
[  678.469815][T19396] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  678.492797][T19396] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  678.702423][T19405] 8021q: adding VLAN 0 to HW filter on device bond2
[  678.757358][T18892] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  678.767709][T18892] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  678.813849][T18892] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  678.823901][T18892] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  678.834072][T18892] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  678.843394][T18892] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  678.853451][T18892] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  678.863562][T18892] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  679.105895][T19425] x_tables: duplicate underflow at hook 1
[  679.172089][T19428] validate_nla: 2 callbacks suppressed
[  679.172113][T19428] netlink: 'syz.4.3311': attribute type 21 has an invalid length.
[  679.248764][T19434] netlink: 'syz.5.3314': attribute type 4 has an invalid length.
[  679.395447][T19443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3315'.
[  679.433154][T19442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3315'.
[  679.639172][T19406] wg1 speed is unknown, defaulting to 1000
[  679.787190][T19453] bond3: option mode: invalid value (254)
[  679.801094][T19453] bond3 (unregistering): Released all slaves
[  679.984610][T19462] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  680.121571][T19468] vxcan2: entered allmulticast mode
[  680.159730][T19472] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  680.186454][T19472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3326'.
[  680.203233][T19462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3323'.
[  680.443331][T19494] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3331'.
[  680.575334][T19498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3333'.
[  680.584919][T19498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3333'.
[  680.670885][T19504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3335'.
[  681.653876][T19545] syzkaller0: entered promiscuous mode
[  681.659827][T19545] syzkaller0: entered allmulticast mode
[  681.709045][T19547] netlink: 'syz.3.3347': attribute type 10 has an invalid length.
[  681.789796][T19547] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  681.803024][T19552] wg1: entered promiscuous mode
[  681.808707][T19552] wg1: entered allmulticast mode
[  682.261184][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3354'.
[  683.802334][T19586] Can't find ip_set type hash:ip$mec
[  685.049093][T19591] bond2: option tlb_dynamic_lb: invalid value (5)
[  685.084880][T19591] bond2 (unregistering): Released all slaves
[  685.186436][T19598] bridge_slave_0: left allmulticast mode
[  685.198647][T19598] bridge_slave_0: left promiscuous mode
[  685.204748][T19598] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.235970][T19598] bridge_slave_1: left allmulticast mode
[  685.248479][T19598] bridge_slave_1: left promiscuous mode
[  685.262233][T19598] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.284132][T19598] bond0: (slave bond_slave_0): Releasing backup interface
[  685.304352][T19598] bond0: (slave bond_slave_1): Releasing backup interface
[  685.315300][T19598] team0: Port device team_slave_0 removed
[  685.326341][T19598] team0: Port device team_slave_1 removed
[  685.340651][T19598] batman_adv: batadv0: Removing interface: batadv_slave_0
[  685.356361][T19598] batman_adv: batadv0: Removing interface: batadv_slave_1
[  685.365452][T19598] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  685.394062][T19610] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3363'.
[  685.434680][T19614] netlink: 'syz.0.3364': attribute type 10 has an invalid length.
[  685.475316][T19614] 8021q: adding VLAN 0 to HW filter on device team0
[  685.499550][T19614] bond0: (slave team0): Enslaving as an active interface with an up link
[  685.526680][T19616] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3365'.
[  685.548136][T19618] openvswitch: netlink: Tunnel attr 152 out of range max 16
[  685.626642][T19620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3367'.
[  685.681048][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3368'.
[  685.681060][T19626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3368'.
[  685.719742][T19624] tipc: Started in network mode
[  685.730791][T19624] tipc: Node identity fec00000000000000000000000000038, cluster identity 4711
[  685.757496][T19624] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  686.530960][T19640] tc_dump_action: action bad kind
[  686.540268][T19635] tc_dump_action: action bad kind
[  686.573105][T19643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'.
[  687.124979][T19681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3384'.
[  687.242015][T19686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3385'.
[  687.379257][T19688] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3386'.
[  687.393771][T19692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3387'.
[  687.611405][T19664] wg1 speed is unknown, defaulting to 1000
[  688.240795][T19710] wg1 speed is unknown, defaulting to 1000
[  689.057980][T19765] tipc: Started in network mode
[  689.073354][T19765] tipc: Node identity 6203c9a63ad8, cluster identity 4711
[  689.093083][T19765] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  689.130625][T19770] syzkaller0: entered promiscuous mode
[  689.153642][T19770] syzkaller0: entered allmulticast mode
[  689.304641][T19765] tipc: Resetting bearer <eth:syzkaller0>
[  689.414045][T19759] tipc: Resetting bearer <eth:syzkaller0>
[  689.536083][T19759] tipc: Disabling bearer <eth:syzkaller0>
[  689.647146][T19785] netlink: 'syz.2.3414': attribute type 23 has an invalid length.
[  690.481640][T19796] pim6reg1: entered promiscuous mode
[  690.519833][T19796] pim6reg1: entered allmulticast mode
[  690.661198][T19807] __nla_validate_parse: 5 callbacks suppressed
[  690.661218][T19807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3419'.
[  690.799327][T19775] wg1 speed is unknown, defaulting to 1000
[  691.659051][T19836] netlink: 'syz.2.3427': attribute type 4 has an invalid length.
[  691.683822][T19837] netlink: 'syz.2.3427': attribute type 4 has an invalid length.
[  691.718308][T19836] netlink: 'syz.2.3427': attribute type 4 has an invalid length.
[  691.744987][T19837] netlink: 'syz.2.3427': attribute type 4 has an invalid length.
[  691.785411][T19836] netlink: 'syz.2.3427': attribute type 4 has an invalid length.
[  691.823671][T19837] netlink: 'syz.2.3427': attribute type 4 has an invalid length.
[  691.878590][T19836] netlink: 'syz.2.3427': attribute type 4 has an invalid length.
[  691.917342][T19837] netlink: 'syz.2.3427': attribute type 4 has an invalid length.
[  691.959004][T19836] netlink: 'syz.2.3427': attribute type 4 has an invalid length.
[  691.968863][T19837] netlink: 'syz.2.3427': attribute type 4 has an invalid length.
[  692.372155][T19848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  692.461825][T19847] tipc: Disabling bearer <eth:syzkaller0>
[  692.543062][T19858] Bluetooth: MGMT ver 1.23
[  692.571233][T19859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3434'.
[  692.824412][T19866] syzkaller0: entered promiscuous mode
[  692.833555][T19866] syzkaller0: entered allmulticast mode
[  695.343516][T19894] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  695.548508][T19937] syzkaller0: entered promiscuous mode
[  695.591848][T19937] syzkaller0: entered allmulticast mode
[  695.833281][T19911] wg1 speed is unknown, defaulting to 1000
[  696.107340][T19958] syz_tun: entered allmulticast mode
[  696.145697][T19958] syz_tun: left allmulticast mode
[  696.557863][T19974] batman_adv: batadv0: Removing interface: batadv_slave_0
[  696.605787][T19983] erspan0: entered promiscuous mode
[  696.613496][T19983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3466'.
[  696.811146][T19990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3472'.
[  696.821243][T19991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3472'.
[  696.975001][T20000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  697.210022][T19996] wg1 speed is unknown, defaulting to 1000
[  697.267265][T20017] tipc: Started in network mode
[  697.272532][T20017] tipc: Node identity c69893a340e5, cluster identity 4711
[  697.293380][T20017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  697.324742][T20017] syzkaller0: entered promiscuous mode
[  697.334895][T20017] syzkaller0: entered allmulticast mode
[  697.429654][T20017] tipc: Resetting bearer <eth:syzkaller0>
[  697.478179][T20016] tipc: Resetting bearer <eth:syzkaller0>
[  697.515220][T20016] tipc: Disabling bearer <eth:syzkaller0>
[  697.705092][T20046] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3484'.
[  698.015160][T20058] macvlan1: entered promiscuous mode
[  698.036299][T20058] macvlan1: left promiscuous mode
[  698.136357][T20023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  698.210533][T20060] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3488'.
[  698.405312][T20063] validate_nla: 57 callbacks suppressed
[  698.405337][T20063] netlink: 'syz.0.3489': attribute type 2 has an invalid length.
[  698.429380][T20063] netlink: 'syz.0.3489': attribute type 1 has an invalid length.
[  698.455607][T20063] netlink: 'syz.0.3489': attribute type 1 has an invalid length.
[  698.464523][T20063] netlink: 'syz.0.3489': attribute type 1 has an invalid length.
[  699.902786][T18906] bridge_slave_1: left allmulticast mode
[  699.908753][T18906] bridge_slave_1: left promiscuous mode
[  699.915143][T18906] bridge0: port 2(bridge_slave_1) entered disabled state
[  699.924722][T18906] bridge_slave_0: left allmulticast mode
[  699.930572][T18906] bridge_slave_0: left promiscuous mode
[  699.936361][T18906] bridge0: port 1(bridge_slave_0) entered disabled state
[  700.398478][T18906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  700.409532][T18906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  700.427536][T18906] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  700.436739][T18906] bond0 (unregistering): Released all slaves
[  700.562131][T18906] bond1 (unregistering): Released all slaves
[  700.677743][T18906] bond2 (unregistering): Released all slaves
[  700.777352][T18906] tipc: Left network mode
[  701.134765][T18906] hsr_slave_0: left promiscuous mode
[  701.141512][T18906] hsr_slave_1: left promiscuous mode
[  701.148213][T18906] batman_adv: batadv0: Removing interface: batadv_slave_0
[  701.156429][T18906] batman_adv: batadv0: Removing interface: batadv_slave_1
[  701.658880][T18906] team0 (unregistering): Port device team_slave_1 removed
[  701.714936][T18906] team0 (unregistering): Port device team_slave_0 removed
[  702.493973][T18906] IPVS: stop unused estimator thread 0...
[  702.904518][T18906] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.984855][T18906] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.061885][T18906] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.141628][T18906] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.268314][T18906] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.332045][T18906] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.386321][T18906] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.429339][T18906] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.542768][T18906] bridge_slave_1: left allmulticast mode
[  703.548470][T18906] bridge_slave_1: left promiscuous mode
[  703.555627][T18906] bridge0: port 2(bridge_slave_1) entered disabled state
[  703.565759][T18906] bridge_slave_0: left allmulticast mode
[  703.571952][T18906] bridge_slave_0: left promiscuous mode
[  703.578159][T18906] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.591177][T18906] bridge_slave_1: left allmulticast mode
[  703.596997][T18906] bridge_slave_1: left promiscuous mode
[  703.603782][T18906] bridge0: port 2(bridge_slave_1) entered disabled state
[  703.616365][T18906] bridge_slave_0: left allmulticast mode
[  703.622886][T18906] bridge_slave_0: left promiscuous mode
[  703.628783][T18906] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.105649][T18906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  704.116224][T18906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  704.126142][T18906] bond0 (unregistering): Released all slaves
[  704.258207][T18906] bond1 (unregistering): Released all slaves
[  704.586639][T18906] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  704.597475][    C0] ------------[ cut here ]------------
[  704.598746][T18906] bond0 (unregistering): Released all slaves
[  704.603077][    C0] WARNING: net/mac80211/rx.c:5448 at ieee80211_rx_list+0x23a6/0x2f90, CPU#0: swapper/0/0
[  704.603139][    C0] Modules linked in:
[  704.603199][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  704.632190][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  704.642847][    C0] RIP: 0010:ieee80211_rx_list+0x23a6/0x2f90
[  704.648912][    C0] Code: 90 e9 d0 e2 ff ff e8 39 e2 ea f6 e9 c6 e2 ff ff e8 2f e2 ea f6 e9 bc e2 ff ff e8 25 e2 ea f6 e9 b2 e2 ff ff e8 1b e2 ea f6 90 <0f> 0b 90 e9 a4 e2 ff ff e8 0d e2 ea f6 48 c7 44 24 60 00 00 00 00
[  704.669417][    C0] RSP: 0018:ffffc900000079c0 EFLAGS: 00010246
[  704.675723][    C0] RAX: ffffffff8ad6d035 RBX: ffff88806d6a3128 RCX: ffffffff8dc95340
[  704.684040][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000005
[  704.692429][    C0] RBP: ffffc90000007c10 R08: ffffffff8ad6dcfa R09: ffffffff8df41a20
[  704.700555][    C0] R10: 0000000000000002 R11: 0000000000000100 R12: ffff888052f148c0
[  704.708591][    C0] R13: dffffc0000000000 R14: ffff88806d6a1625 R15: ffff88806d6a0e80
[  704.716630][    C0] FS:  0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000
[  704.725650][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  704.732351][    C0] CR2: 000055a3cb1e6000 CR3: 000000000dd3a000 CR4: 00000000003526f0
[  704.740384][    C0] Call Trace:
[  704.743676][    C0]  <IRQ>
[  704.746559][    C0]  ? do_raw_spin_lock+0x121/0x290
[  704.751661][    C0]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  704.757152][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  704.762223][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  704.767294][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  704.772372][    C0]  ieee80211_rx_napi+0x1a8/0x3d0
[  704.777333][    C0]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  704.782849][    C0]  ? skb_dequeue+0x10e/0x150
[  704.787469][    C0]  ieee80211_handle_queued_frames+0xe8/0x1e0
[  704.793527][    C0]  tasklet_action_common+0x358/0x550
[  704.798877][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  704.804889][    C0]  ? __pfx_tasklet_action_common+0x10/0x10
[  704.810833][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  704.816778][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  704.823182][    C0]  ? workqueue_softirq_action+0xd4/0x150
[  704.828838][    C0]  handle_softirqs+0x27d/0x850
[  704.833745][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  704.838616][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  704.843969][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  704.849763][    C0]  __irq_exit_rcu+0xca/0x1f0
[  704.854424][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  704.859657][    C0]  irq_exit_rcu+0x9/0x30
[  704.864130][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  704.869834][    C0]  </IRQ>
[  704.872834][    C0]  <TASK>
[  704.875872][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  704.881991][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  704.887748][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 <e9> c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  704.907521][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6
[  704.913759][    C0] RAX: 54ca78eca67a6600 RBX: ffffffff81978fda RCX: 54ca78eca67a6600
[  704.921977][    C0] RDX: 0000000000000001 RSI: ffffffff8d7925e3 RDI: ffffffff8bc08360
[  704.930043][    C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db
[  704.938235][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822070
[  704.946726][    C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000
[  704.954766][    C0]  ? do_idle+0x1ea/0x520
[  704.959075][    C0]  default_idle+0x13/0x20
[  704.963487][    C0]  default_idle_call+0x73/0xb0
[  704.968306][    C0]  do_idle+0x1ea/0x520
[  704.972525][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  704.978820][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[  704.984092][    C0]  ? __pfx_do_idle+0x10/0x10
[  704.988713][    C0]  ? do_idle+0x5/0x520
[  704.992831][    C0]  cpu_startup_entry+0x44/0x60
[  704.997618][    C0]  rest_init+0x2de/0x300
[  705.001908][    C0]  start_kernel+0x3a7/0x400
[  705.006440][    C0]  x86_64_start_reservations+0x24/0x30
[  705.011991][    C0]  x86_64_start_kernel+0x143/0x1c0
[  705.017132][    C0]  common_startup_64+0x13e/0x147
[  705.022128][    C0]  </TASK>
[  705.025162][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  705.032455][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  705.041490][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  705.051658][    C0] Call Trace:
[  705.054984][    C0]  <IRQ>
[  705.057846][    C0]  dump_stack_lvl+0x99/0x250
[  705.062496][    C0]  ? __asan_memcpy+0x40/0x70
[  705.067126][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  705.072342][    C0]  ? __pfx__printk+0x10/0x10
[  705.077148][    C0]  vpanic+0x237/0x6d0
[  705.081212][    C0]  ? __pfx_vpanic+0x10/0x10
[  705.085793][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  705.091139][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  705.096440][    C0]  panic+0xb9/0xc0
[  705.100219][    C0]  ? __pfx_panic+0x10/0x10
[  705.104677][    C0]  ? common_startup_64+0x13e/0x147
[  705.109839][    C0]  __warn+0x317/0x4b0
[  705.114073][    C0]  ? ieee80211_rx_list+0x23a6/0x2f90
[  705.119385][    C0]  ? ieee80211_rx_list+0x23a6/0x2f90
[  705.124777][    C0]  __report_bug+0x288/0x500
[  705.129295][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  705.135478][    C0]  ? ieee80211_rx_list+0x23a6/0x2f90
[  705.140835][    C0]  ? __pfx___report_bug+0x10/0x10
[  705.146104][    C0]  ? __lock_acquire+0x6b6/0x2cf0
[  705.151076][    C0]  ? stack_depot_save_flags+0x40/0x850
[  705.156557][    C0]  ? mac80211_hwsim_beacon+0x50/0x180
[  705.161950][    C0]  ? __hrtimer_run_queues+0x51c/0xc30
[  705.167433][    C0]  ? hrtimer_run_softirq+0x187/0x2b0
[  705.172738][    C0]  ? ieee80211_rx_list+0x23a6/0x2f90
[  705.178036][    C0]  report_bug+0x16a/0x220
[  705.182377][    C0]  ? ieee80211_rx_list+0x23a6/0x2f90
[  705.187704][    C0]  ? ieee80211_rx_list+0x23a8/0x2f90
[  705.193040][    C0]  handle_bug+0x98/0x200
[  705.197307][    C0]  exc_invalid_op+0x1a/0x50
[  705.201827][    C0]  asm_exc_invalid_op+0x1a/0x20
[  705.206702][    C0] RIP: 0010:ieee80211_rx_list+0x23a6/0x2f90
[  705.212645][    C0] Code: 90 e9 d0 e2 ff ff e8 39 e2 ea f6 e9 c6 e2 ff ff e8 2f e2 ea f6 e9 bc e2 ff ff e8 25 e2 ea f6 e9 b2 e2 ff ff e8 1b e2 ea f6 90 <0f> 0b 90 e9 a4 e2 ff ff e8 0d e2 ea f6 48 c7 44 24 60 00 00 00 00
[  705.232458][    C0] RSP: 0018:ffffc900000079c0 EFLAGS: 00010246
[  705.238637][    C0] RAX: ffffffff8ad6d035 RBX: ffff88806d6a3128 RCX: ffffffff8dc95340
[  705.247024][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000005
[  705.255053][    C0] RBP: ffffc90000007c10 R08: ffffffff8ad6dcfa R09: ffffffff8df41a20
[  705.263092][    C0] R10: 0000000000000002 R11: 0000000000000100 R12: ffff888052f148c0
[  705.271185][    C0] R13: dffffc0000000000 R14: ffff88806d6a1625 R15: ffff88806d6a0e80
[  705.279719][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  705.284797][    C0]  ? ieee80211_rx_list+0x23a5/0x2f90
[  705.290386][    C0]  ? do_raw_spin_lock+0x121/0x290
[  705.295508][    C0]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  705.301023][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  705.306071][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  705.311410][    C0]  ? ieee80211_rx_napi+0xca/0x3d0
[  705.316599][    C0]  ieee80211_rx_napi+0x1a8/0x3d0
[  705.321598][    C0]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  705.327108][    C0]  ? skb_dequeue+0x10e/0x150
[  705.331728][    C0]  ieee80211_handle_queued_frames+0xe8/0x1e0
[  705.337929][    C0]  tasklet_action_common+0x358/0x550
[  705.343300][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  705.349330][    C0]  ? __pfx_tasklet_action_common+0x10/0x10
[  705.356197][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  705.362292][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  705.368809][    C0]  ? workqueue_softirq_action+0xd4/0x150
[  705.374607][    C0]  handle_softirqs+0x27d/0x850
[  705.379965][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  705.384812][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  705.390244][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  705.395471][    C0]  __irq_exit_rcu+0xca/0x1f0
[  705.400126][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  705.405384][    C0]  irq_exit_rcu+0x9/0x30
[  705.409656][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  705.415317][    C0]  </IRQ>
[  705.418298][    C0]  <TASK>
[  705.421304][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  705.427340][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  705.433101][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 <e9> c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  705.452824][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6
[  705.458917][    C0] RAX: 54ca78eca67a6600 RBX: ffffffff81978fda RCX: 54ca78eca67a6600
[  705.467029][    C0] RDX: 0000000000000001 RSI: ffffffff8d7925e3 RDI: ffffffff8bc08360
[  705.475032][    C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db
[  705.483065][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822070
[  705.491059][    C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000
[  705.499077][    C0]  ? do_idle+0x1ea/0x520
[  705.503375][    C0]  default_idle+0x13/0x20
[  705.507764][    C0]  default_idle_call+0x73/0xb0
[  705.512568][    C0]  do_idle+0x1ea/0x520
[  705.516968][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  705.523205][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[  705.528999][    C0]  ? __pfx_do_idle+0x10/0x10
[  705.533721][    C0]  ? do_idle+0x5/0x520
[  705.537838][    C0]  cpu_startup_entry+0x44/0x60
[  705.542710][    C0]  rest_init+0x2de/0x300
[  705.547077][    C0]  start_kernel+0x3a7/0x400
[  705.551617][    C0]  x86_64_start_reservations+0x24/0x30
[  705.557138][    C0]  x86_64_start_kernel+0x143/0x1c0
[  705.562302][    C0]  common_startup_64+0x13e/0x147
[  705.567285][    C0]  </TASK>
[  705.570973][    C0] Kernel Offset: disabled
[  705.575315][    C0] Rebooting in 86400 seconds..