last executing test programs:

3.016844014s ago: executing program 2 (id=1137):
r0 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={r0, 0x2, 0x7f, 0x42b})
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r8, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$sock(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x40000c1)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x7c}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884)
setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f00000000c0)=0x1, 0x4)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x3, 'syz0\x00', @default, 0xfffffdb8, 0x6, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @bcast]})
getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000000300)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000340)=0x2c)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})

2.53584218s ago: executing program 2 (id=1142):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x8, 0x2}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000280)=""/222, &(0x7f0000000080)=0xde)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0xfffd}, 0x84)

2.430523079s ago: executing program 2 (id=1144):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, 0x2, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0x4}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x84800}, 0xc58ba61eb1d272b6)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000)
socket$netlink(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, 0x2, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0x4}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x84800}, 0xc58ba61eb1d272b6) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) (async)

2.291429545s ago: executing program 0 (id=1145):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000200)='syzkaller\x00', 0xf, 0xec, &(0x7f0000000380)=""/236, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x1, 0x9, 0x10}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{0x0, 0x1, 0x7, 0x2}], 0x10, 0x8000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r1}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f00000004c0)=""/40, &(0x7f0000000600)=0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000edffffffffffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socket(0x1a, 0x1, 0x6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @remote}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000200)='syzkaller\x00', 0xf, 0xec, &(0x7f0000000380)=""/236, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x1, 0x9, 0x10}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{0x0, 0x1, 0x7, 0x2}], 0x10, 0x8000}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r1}, 0x94) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) (async)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f00000004c0)=""/40, &(0x7f0000000600)=0x28) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000edffffffffffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
socket(0x1a, 0x1, 0x6) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @remote}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async)

2.109151732s ago: executing program 4 (id=1146):
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x402)
r1 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept(r0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = gettid()
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x576e7}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)=r3)

1.77658081s ago: executing program 4 (id=1150):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xe72, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3fad77b7b3f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet6(0xa, 0x2, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x2}], "f841"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1ba4"}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000300)=""/2, 0x44, 0x2, 0x1}, 0x20)
sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="9900102e7577d401", 0x8}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000000000002900000004"], 0x30}}], 0x1, 0x4000084)

1.693059731s ago: executing program 0 (id=1151):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000ac1e0001000000000000000000000000023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000fe80000000000000000000000000003f0000000001030000000000000000000000000000ff020000000000000000000000000001000004d33c00000002000000ffffffff0000000000000000000000000000000000000000000000000300000000000000ffffffff000000000000000000000000000000003200000002000000ac141400000000000000000000000000ffffffff0002000000000000000000000300000020010000000000000000000000000001000000002b00000002000000fe880000000000000000000000000001000000000400"/500], 0x23c}}, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r0, 0x0, 0x0, 0x800)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0xfffffff8, 0x10000005, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8085}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
accept$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/70, 0x46}], 0x2}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r11, &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48)

1.568752149s ago: executing program 4 (id=1152):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x28, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x10, 0x145, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @fd}]}]}, @typed={0x4, 0x2}]}, 0x28}}, 0x4040040)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

1.257145678s ago: executing program 1 (id=1155):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_SE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008}, 0x8c0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.256790195s ago: executing program 4 (id=1156):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000100)=0xb, 0x4) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) (async, rerun: 32)
getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r4, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40048b5) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xd}}}, 0x5c}}, 0x40044) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async, rerun: 32)
read(r1, &(0x7f0000000340)=""/17, 0x11) (async, rerun: 32)
recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/157, 0x9d}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000840)=""/235, 0xeb}, {&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x8}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x40000000, 0x0) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FITRIM(r5, 0x40305829, 0x0) (async)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x110, r5, 0x9f90a000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc1, &(0x7f0000000140)=""/193, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)

1.140544164s ago: executing program 3 (id=1158):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0xf}, {0xffe0, 0x8}}}, 0x24}}, 0x4040850) (async)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000400b8400800b7"], 0x30}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r6, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) (async)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r10, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xbd}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c890}, 0x4084)

1.00517081s ago: executing program 1 (id=1159):
r0 = socket(0x2, 0x3, 0xff)
r1 = socket(0x840000000002, 0x3, 0xfa)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000180001000101000000000000020000000000000900000000060015000400000014001680100008800c00028008000180"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
setsockopt$inet_int(r1, 0x0, 0x20, &(0x7f0000000180)=0xb51, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x2, @local}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x2, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x404c8c6}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r5=>0x0})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, r7, 0xb15, 0xfffffffe}, 0x14}}, 0x80)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0)

1.004851732s ago: executing program 4 (id=1160):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'fo\x00', 0x30, 0x4, 0x66}, 0x2c)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x3d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x0, 0xc24, 0x9, 0xfffffffb}}, 0x44)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="600000003bbc322271ec0907b3aed2848d50b9327ff5b44772ce323c6c1e8ab12c81c0a700fb6843046930e6507ea9cd4134837e0d50b811610fec675752bac77d1a7c3fbfbbe2424776980b09169a1045d26b1e7d6cb62629de6220170bb7aa9916d0ec0bc0baf36d6bb1900e3437130d6667", @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="2e00330000b4ff00ffffffffffff080211000001a5152f8bf39d54000e0044000000670200060202020202020100000004006c000800cd0000e006000400870004008700"], 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104f2ffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800b00010062726964676500000c0002800500170000000000080004000002"], 0x44}}, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r10, 0x6, 0x1c, 0x0, &(0x7f0000000140))
sendmsg$tipc(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffffffffffed2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r11}, 0x18)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r12}, 0x10)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x4008050)
close(r7)
r14 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r14, 0x29, 0xca, &(0x7f0000000140)={0xfffe, 0x1}, 0xc)

934.67844ms ago: executing program 3 (id=1161):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@private, @remote, <r1=>0x0}, &(0x7f00000001c0)=0xc)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@gettfilter={0x44, 0x2e, 0x800, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x7}, {0x3, 0xfff3}, {0xffe0, 0xd}}, [{0x8, 0xb, 0x787}, {0x8, 0xb, 0x6}, {0x8}, {0x8, 0xb, 0x4}]}, 0x44}}, 0x8800)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r2=>0x0, @empty}, &(0x7f0000000080)=0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x9, 0x4}, {0xc, 0xc}, {0x7, 0x1}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4008080)

786.066889ms ago: executing program 3 (id=1162):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000100)={0x2, 0x8, 0x31, &(0x7f00000000c0)=""/49})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r3, 0x8917, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x3, 0x0, &(0x7f0000000080))
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18010000060a0b0400000000000000000200000034000480300001800a0001006d617463680000002000028008000240000000030b000100736f636b6574000005000300d60000000900010073797a30000000000900020073797a32"], 0x140}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014)

725.005303ms ago: executing program 0 (id=1163):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0x100000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x24000041)
r2 = socket(0xa, 0x1, 0x0)
ioctl(r2, 0x8936, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000a00)={r1})
socket$nl_route(0x10, 0x3, 0x0)
r3 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000240)=0x6e)
recvmsg$unix(r3, &(0x7f00000009c0)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/34, 0x22}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000640)=""/56, 0x38}, {&(0x7f0000000680)=""/144, 0x90}, {&(0x7f0000000740)=""/164, 0xa4}, {&(0x7f0000000800)=""/36, 0x24}, {&(0x7f0000000840)=""/106, 0x6a}], 0x9, &(0x7f0000000980)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff]}}], 0x30}, 0x100)
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r5)
sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x80, r7, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}]}, 0x80}}, 0x84)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x8919, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})

723.819697ms ago: executing program 1 (id=1164):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
r0 = epoll_create1(0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2000001c})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x2000000f})

577.853618ms ago: executing program 0 (id=1165):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}]}, 0x40}}, 0x0)
r3 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x6}, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="230f15390000000000000a00000008000280040004"], 0x1c}}, 0x0)

508.902013ms ago: executing program 3 (id=1166):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x3, 0x300) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000001c0)={0x0, r3, 0x7e82, 0x8, 0x3a, 0xc002}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0)

457.062985ms ago: executing program 1 (id=1167):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x8, 0x2}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000280)=""/222, &(0x7f0000000080)=0xde)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0xfdffffff}, 0x84)

455.734185ms ago: executing program 2 (id=1168):
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000001900ff00000000001851000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa30}, 0x94)
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000880)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0x198, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x401}, @NL80211_ATTR_IE={0x129, 0x2a, [@fast_bss_trans={0x37, 0x72, {0x7, 0x2, "ed8b36d912becc737c930a201eb04ae7", "9d6a2824a8fb2f1a8f849e09ef484275e013a151f23f38299fcb64be872dc4a0", "2621847ad7bc96636a23bcb1de87da96c84d9609ff45cea03027e9c4df70bc6e", [{0x2, 0x16, "81c8a4ea34c0e1cc522e4d9d67854ae646e1c2be864a"}, {0x2, 0x6, "5e11bef34d83"}]}}, @perr={0x84, 0xaf, {0x3, 0xb, [{{}, @device_a, 0x408, @void, 0x3e}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0x15}, {{0x0, 0x1}, @broadcast, 0x3db1, @value=@device_b, 0x18}, {{}, @device_a, 0x8, @void, 0x12}, {{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x30}, {{}, @broadcast, 0x10001, @void, 0x5}, {{}, @device_b, 0xe, @void, 0x2a}, {{0x0, 0x1}, @device_a, 0x2fb, @value, 0x13}, {{}, @device_b, 0x6, @void, 0x32}, {{0x0, 0x1}, @broadcast, 0x5, @value=@broadcast, 0x42}, {{}, @broadcast, 0x0, @void, 0x24}]}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_IE={0x1b, 0x2a, [@dsss={0x3, 0x1, 0xb4}, @random_vendor={0xdd, 0x9, "826e0440436f535d6b"}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x4, 0x29}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x48885}, 0x8080)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa00}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40084}, 0x810)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a30000000000900010073797a300000000008000a400400000420000000080a01040000000000000000010000000900010073797a30"], 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4)

335.967508ms ago: executing program 3 (id=1169):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

291.161523ms ago: executing program 0 (id=1170):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x5a, 0x10, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x40}}, 0x0)

236.991655ms ago: executing program 1 (id=1171):
r0 = socket$unix(0x1, 0x1, 0x0)
pwrite64(r0, &(0x7f0000000000)="c24c3d7da7b606c8240c49736c1c54c21c4aeeb7645050d1f88e0ff7dbeb65f14b5fc4b338d9883e3a765817404e8b4d263b63917b8a1e4d7d83f4a5a3c2b013ce0b84530bc0e28823943fa163159115b88f0f1bce2b51c68b3563e440ffaa2cbf871b62a43ba8bccf89f159554c42f2b790519d252d094095cc1e0f65f18aa4b1894929262d99b8bff4eef4b843b1889d3d9bcea042c2847f17ff1ae4a23a7ada068d2b5d6ac84731b1642577bbca04fd175d919d6cc3ed12fb1cde2d34aa", 0xbf, 0x8000000000000001)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
shutdown(r1, 0x1) (async)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000100)=0x6d7) (async)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x2, 0xfffffffa, 0xf13, 0xfffc, 0x3, 0x3, 0x6, {0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x456db34a, 0x19, 0x1, 0x31, 0x8}}, &(0x7f0000000200)=0xb0) (async)
ioctl$int_in(r1, 0x5421, &(0x7f0000000240)=0x5) (async)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000280)={0x13, 0x6, {0x800, @struct={0xc, 0x9}, 0x0, 0x0, 0x9, 0x1, 0x7, 0xd, 0x400, @struct={0x2, 0xffffffff}, 0x3, 0x632f, [0x7fff, 0x9, 0x1a299fc, 0x5, 0x1, 0x9]}, {0x2, @struct={0x0, 0x4}, <r2=>0x0, 0x473, 0x6, 0x0, 0x5, 0x1, 0x4b8, @struct={0x4, 0xf}, 0x5, 0x9, [0xfffffffffffffff7, 0x7fffffffffffffff, 0x6, 0x2, 0x312, 0x495]}, {0x8, @struct={0xf669, 0xa9}, 0x0, 0x1, 0x9, 0x55, 0x21f, 0x0, 0x480, @struct={0x3, 0x43e3}, 0x6, 0x4, [0xb03c, 0x102000000000000, 0x4, 0x1, 0x10001]}, {0xf5, 0x100000001, 0x8f9}})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000680)={r2, 0xa8ea, 0x10}) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
read$alg(r4, &(0x7f0000000a80)=""/219, 0xdb)
r5 = socket$key(0xf, 0x3, 0x2)
r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000b80)={0x0, r5}, 0x8)
r7 = socket(0x18, 0x6, 0x8) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000080) (async)
ioctl$SIOCRSGL2CALL(r7, 0x89e5, &(0x7f0000000d00)=@default) (async)
setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000d40)=@netrom={'nr', 0x0}, 0x10)
accept$ax25(r7, &(0x7f0000000d80)={{0x3, @default}, [@remote, @netrom, @null, @rose, @null, @rose, @null, @netrom]}, &(0x7f0000000e00)=0x48) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)=@gettaction={0x48, 0x32, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x20000003)
writev(r6, &(0x7f0000001280)=[{&(0x7f0000000f80)="0cb09ba2a477ef68ce84836539c2bbddb97cce0bb4e38fce526dd458e8e087802026671e939707ba2c0295e2ebb1dd1402780a0bed3d4f56657a2a4d7fd3a023aef6fa3bfa2de119063feac9492a61fdaac05f78653bd654e83efe8d13df6e538ea8e430f3aecb38bf3a", 0x6a}, {&(0x7f0000001000)="e5ca7ee0f5c0ee7096912733bc8360cebc449aa0cbb69b1a24c928066dbb58854356f561ced010680220ffd098691e0dc11aa3dc85c92446e0a33ace7bea3ff37daa82573a", 0x45}, {&(0x7f0000001080)="af45deac9172b0bf315972224723700117e0661189e0da2a241fe52f091b02c5c39553124030884fd3d9e43004970bc8a50aa3554a5c07178b03549bb964ed6fad942da3c512234f1cc5675908df79a1e9b3f528988ee956d416d856e6225af756379d680fb63fb24d89be419eefa368", 0x70}, {&(0x7f0000001100)="bb6de380220cd561d738accd0d609af28d9d3fc01cbb4a398a7d81ccba59b47d2d900eafec5eabe5a75a08f27850b92b758338e77ce340ff11cc65cc646250e815023977ad51dabac03f52f8dd763e50f63e853f0487b7d8c775551df5f461243419e1ec04786c46af342ed850b7a79877d510a1009ba68983a5a243e6b14a9fb5cb2835e179b3e9b96ea234c25c1fa15f3033dfeb664c2724c548f4ae9ce2e457a54df5c494a7b8af20b13522e73937b04e9042ff2d13c7cc6a8b49a2d10fbe5fdc21e0dd23cbbe2f9715c4364f10be62dccbdd184ad68184a4703dff577e522f42dc40ca", 0xe5}, {&(0x7f0000001200)="d6ecb4307df13ce7b5cdeeb308279c6ab49459a45e946496d2f5902fa219708e64e0cb88c45fb2aa1fddde44b0be0fb496b30f466587f3bcaae54007d3f463de2cadff7ca9f49980525587cc4377c9b89642fdad6a68b988aff8e871aa37c0fa", 0x60}], 0x5) (async)
sendmsg$alg(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001300)="316b528c2070f1e19bb950d180425b444bc79f5f6660c0a59b1b3da96f290632d1add8629f59cb61995049e31e077ebd0632deb3583c1550cc42919e9f96e28e94dfdb84e379c4b6e52d1ce5b4b88b3fc316a1db051cb2092e488466bccb59eb0f40a56ca61585552274969d7bf34cc3d1df56c9fa2fa2f7c7a743f8bb5ba5d989de3a4c1bbe5bc3cd2dbb273ce1ed44362be4a1f29b71237c12a8fa5db5475e574e7096a818d8280ccb73cf961e68f3e777d6027edf027bfea192fbeb942dcf0308f57ce5f5d0b312aa6efba17ef4fab49781bd088f23995cbde60b27a1665de9c119e0", 0xe4}, {&(0x7f0000001400)="5a501f9fb99df403a106219766389bbf34f601996b833fa2aed9eb10386a7e2e2d95a9348ef56b4729d7bf09914d3d2c3b1a2537d19d3b9c10c27957ad0f53bf6c8a4375459be77ac05d4630104a1b3c0c61ab1dafb08269cfa51b35182b058df00a8d81e4967c0c21de8b1d60c4e7007c8eaca27203a9adec64f72f83c709941e4fde7cb23f0d8200848716b50da7b12bdea61a39e061a5966286ab7ffedba8", 0xa0}, {&(0x7f00000014c0)="15e62d7eb7c57ae90f6e2c0725a7eaf2f2041ceb7dd0298dd03196b63018dc2c33592f7f9c8095089c01d9a746ebefd936fe1939ef77b14753f8e35b03cd392e38a7c021e33d8d65e4c059fd3fa635974fde39a0d6734de3d95dfdd29913f932a99a3ba493a2449f8f089448053dc404b4f85efb896837d8172795dab530c25a", 0x80}], 0x3, &(0x7f0000001580)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x108, 0x117, 0x2, 0xf2, "3be581a4499821318f1947d3364e4730359014cedf7a52cb8924218573f2055033480d3f1982f552fc06de8bf4c960769a72fa05903a833a5fecebb5dfcb26613e8d30173ed1b5c99c35de7d23b45feef8b4035796e388ae30398c87ebdc463f53ae5ce9b50fd9094a7c288a38405f1fabc8413a04bb132c7598711fb57c100c4ca4556df2e7f0bd0ad406d8a6bda72b41e6ca69d64e48bf5f606092ef25896bacc03b7543165efd695f8676b2f265fcc05708114e278552ca757d26f30265fb6d1cc7b2007fb5c10dd3f0bf8cc026e40c9e3185cbf96ef61626a22c06508202ebf1b43638206c70120938d44b16c6ef71df"}, @iv={0xb0, 0x117, 0x2, 0x95, "079756b4d15456cdf92117a25d4e75aee44dce4fe95028fdc2c955a6d2673facd8bcba8d4dff53fad8b4a419f7aaf50ebd1aac1ba9c3da2368f6a65655df7377b5422949fe9f490f346b0e50858333700f69b0d0082079aa4a124f38fd96c2657bfdf0e3c16db01b5e506fb0710bb166eaa3f43974afd223d356069d9adf6c34d04be56bf599d73abaaa2fc4c6fe59650a49033602"}], 0x200, 0x80}, 0x40000)
ioctl$BTRFS_IOC_FS_INFO(r7, 0x8400941f, &(0x7f00000017c0)) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), r7) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c80)={0x1, 0x58, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000001cc0)={@private=0xa010102, @multicast2, r9}, 0xc) (async)
write(r3, &(0x7f0000001d00)="09fc17efdc5fa508420fcfac24f303e6392f619d983ca28aabc53c7f72cfb4c0f69a8e9e6b57e8b987b28956c35771205dbb381ff15ede2e6c0708526a72eca4df043d58d3c068494f71b08a4ca793fc64644e053c4d35baa1df5b86ad8d0a2b95a3ff638e8600c540eb2bb9b52c195afa22c528238a4fabd9f8ef292348ec49818da19a3145a1bfcc8e94e844a8ef22b7f920dc92c7bf1befff87e6a384a22a359b2d3a3e63489290ad31b98e13a09cc4c8ef173cfc384b1d8cff5cf412060399b200b73243c5a181074323564573a56a40e0647e06cfcbc41e1dcfc4af32b2d86d", 0xe2)

232.45106ms ago: executing program 2 (id=1172):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000004500)=@req={0xf3b, 0x8, 0x3, 0x7fffffff}, 0x10)
recvfrom(r4, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0)
ioctl$SIOCRSSCAUSE(r3, 0x89e1, 0x0)
bind$rose(r3, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @bcast}, 0x1c)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="0911008d0c00"})

195.715491ms ago: executing program 3 (id=1173):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x26020480)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0), 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x64, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0xfffffffffffffd50, 0xb, 0x444e}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)={0x38, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x38}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x5c, r5, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8001}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
connect$can_bcm(r4, &(0x7f0000000300), 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r5, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="050000000000", @ANYRESOCT, @ANYRES64, @ANYRESDEC], 0x48}}, 0x4000)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r12, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000001000058009"], 0x48}}, 0x0)

57.11284ms ago: executing program 4 (id=1174):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xc, 0x2, 0x3, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x24040000)
r2 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f00000007c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x840)
vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
setsockopt$sock_int(r5, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65)
splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x6, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200060}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000080)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCNRDECOBS(r9, 0x89e2)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300002a00028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x8000)
getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000000)=0x101, &(0x7f0000000040)=0x4)

51.018704ms ago: executing program 0 (id=1175):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0x100000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x24000041)
r2 = socket(0xa, 0x1, 0x0)
ioctl(r2, 0x8936, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000a00)={r1})
socket$nl_route(0x10, 0x3, 0x0)
r3 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000240)=0x6e)
recvmsg$unix(r3, &(0x7f00000009c0)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/34, 0x22}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000640)=""/56, 0x38}, {&(0x7f0000000680)=""/144, 0x90}, {&(0x7f0000000740)=""/164, 0xa4}, {&(0x7f0000000800)=""/36, 0x24}, {&(0x7f0000000840)=""/106, 0x6a}], 0x9, &(0x7f0000000980)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}], 0x30}, 0x100)
r5 = socket$packet(0x11, 0x2, 0x300)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r4)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)
ioctl$sock_rose_SIOCADDRT(r6, 0x8919, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})

50.401507ms ago: executing program 1 (id=1176):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000138000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0xffffd000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)

0s ago: executing program 2 (id=1177):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async)
recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/157, 0x9d}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000840)=""/235, 0xeb}, {&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x8}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x40000000, 0x0) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r7, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x68000, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) (async)
setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'pimreg0\x00'}) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r4, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x8c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x114}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044050}, 0x20000804)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x10000}]}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711046000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts.
[   86.743507][ T5848] cgroup: Unknown subsys name 'net'
[   86.836446][ T5848] cgroup: Unknown subsys name 'cpuset'
[   86.846053][ T5848] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   88.673059][ T5848] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   91.366896][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   91.377875][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   91.385489][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   91.394087][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   91.402350][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   91.410649][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   91.417773][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   91.428283][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   91.437168][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   91.441315][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   91.446218][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   91.460183][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   91.467956][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   91.470444][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   91.476320][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   91.499526][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   91.508140][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   91.519246][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   91.538245][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   91.546739][ T5181] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   91.555611][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   91.555665][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   91.565780][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   91.571069][ T5181] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   91.585958][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.243147][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   92.392671][ T5868] chnl_net:caif_netlink_parms(): no params data found
[   92.466666][ T5875] chnl_net:caif_netlink_parms(): no params data found
[   92.523089][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   92.608395][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   92.648187][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.656807][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.664401][ T5869] bridge_slave_0: entered allmulticast mode
[   92.671986][ T5869] bridge_slave_0: entered promiscuous mode
[   92.723740][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.731132][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.738348][ T5869] bridge_slave_1: entered allmulticast mode
[   92.746595][ T5869] bridge_slave_1: entered promiscuous mode
[   92.853203][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.860463][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.867868][ T5868] bridge_slave_0: entered allmulticast mode
[   92.876762][ T5868] bridge_slave_0: entered promiscuous mode
[   92.905018][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.913102][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.920709][ T5875] bridge_slave_0: entered allmulticast mode
[   92.928003][ T5875] bridge_slave_0: entered promiscuous mode
[   92.964438][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.971647][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.979141][ T5868] bridge_slave_1: entered allmulticast mode
[   92.986456][ T5868] bridge_slave_1: entered promiscuous mode
[   93.008681][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.015893][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.023739][ T5875] bridge_slave_1: entered allmulticast mode
[   93.031595][ T5875] bridge_slave_1: entered promiscuous mode
[   93.060143][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.120747][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.133204][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.188989][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.218226][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.227665][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.235712][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.243317][ T5858] bridge_slave_0: entered allmulticast mode
[   93.252107][ T5858] bridge_slave_0: entered promiscuous mode
[   93.261656][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.269652][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.276943][ T5858] bridge_slave_1: entered allmulticast mode
[   93.291452][ T5858] bridge_slave_1: entered promiscuous mode
[   93.299117][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.306243][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.313998][ T5859] bridge_slave_0: entered allmulticast mode
[   93.322221][ T5859] bridge_slave_0: entered promiscuous mode
[   93.331302][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.339042][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.346261][ T5859] bridge_slave_1: entered allmulticast mode
[   93.354543][ T5859] bridge_slave_1: entered promiscuous mode
[   93.363438][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.444534][ T5869] team0: Port device team_slave_0 added
[   93.454086][ T5869] team0: Port device team_slave_1 added
[   93.536411][ T5875] team0: Port device team_slave_0 added
[   93.545412][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.558710][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.570231][ T5868] team0: Port device team_slave_0 added
[   93.578792][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.603242][ T5875] team0: Port device team_slave_1 added
[   93.611603][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.629471][ T5863] Bluetooth: hci4: command tx timeout
[   93.629476][ T5870] Bluetooth: hci0: command tx timeout
[   93.629679][ T5863] Bluetooth: hci2: command tx timeout
[   93.635116][ T5870] Bluetooth: hci3: command tx timeout
[   93.641145][   T51] Bluetooth: hci1: command tx timeout
[   93.662095][ T5868] team0: Port device team_slave_1 added
[   93.682788][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.689976][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.716232][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.800369][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.807373][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.833553][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.861791][ T5858] team0: Port device team_slave_0 added
[   93.868558][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.875551][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.901563][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.919517][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.926541][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.953163][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.966275][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.973573][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.999686][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.014028][ T5859] team0: Port device team_slave_0 added
[   94.029936][ T5858] team0: Port device team_slave_1 added
[   94.039865][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.046872][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.073306][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.102586][ T5859] team0: Port device team_slave_1 added
[   94.233574][ T5875] hsr_slave_0: entered promiscuous mode
[   94.240845][ T5875] hsr_slave_1: entered promiscuous mode
[   94.261591][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.269713][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.296636][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.314538][ T5869] hsr_slave_0: entered promiscuous mode
[   94.321154][ T5869] hsr_slave_1: entered promiscuous mode
[   94.327512][ T5869] debugfs: 'hsr0' already exists in 'hsr'
[   94.333450][ T5869] Cannot create hsr debugfs directory
[   94.359485][ T5868] hsr_slave_0: entered promiscuous mode
[   94.366199][ T5868] hsr_slave_1: entered promiscuous mode
[   94.373125][ T5868] debugfs: 'hsr0' already exists in 'hsr'
[   94.379069][ T5868] Cannot create hsr debugfs directory
[   94.385499][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.392946][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.418989][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.432599][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.439681][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.465688][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.489009][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.496000][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.526517][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.773010][ T5859] hsr_slave_0: entered promiscuous mode
[   94.780601][ T5859] hsr_slave_1: entered promiscuous mode
[   94.786826][ T5859] debugfs: 'hsr0' already exists in 'hsr'
[   94.793263][ T5859] Cannot create hsr debugfs directory
[   94.868159][ T5858] hsr_slave_0: entered promiscuous mode
[   94.874709][ T5858] hsr_slave_1: entered promiscuous mode
[   94.881338][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   94.887122][ T5858] Cannot create hsr debugfs directory
[   95.258466][ T5869] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   95.273410][ T5869] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   95.306756][ T5869] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   95.342147][ T5869] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   95.466647][ T5875] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   95.477696][ T5875] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   95.491846][ T5875] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   95.506414][ T5875] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   95.607601][ T5868] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   95.631881][ T5868] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   95.644171][ T5868] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   95.656470][ T5868] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   95.708858][ T5863] Bluetooth: hci3: command tx timeout
[   95.709682][   T51] Bluetooth: hci2: command tx timeout
[   95.714321][ T5863] Bluetooth: hci0: command tx timeout
[   95.721533][ T5877] Bluetooth: hci1: command tx timeout
[   95.726053][ T5870] Bluetooth: hci4: command tx timeout
[   95.837031][ T5859] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   95.849856][ T5859] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   95.875076][ T5859] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   95.887077][ T5859] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   95.987524][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   96.015451][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   96.037746][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.051556][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   96.065716][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   96.103704][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.147155][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   96.168921][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.205440][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.212748][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.232454][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   96.272188][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.279439][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.291632][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.298858][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.323379][ T5868] 8021q: adding VLAN 0 to HW filter on device team0
[   96.350843][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.358141][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.370055][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.377197][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.413053][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.420282][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.527473][ T5868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   96.538251][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   96.565947][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.694865][ T5869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   96.705737][ T5869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   96.728032][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   96.803942][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.814170][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.821412][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.880992][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.888194][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.992189][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   97.033796][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.041096][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.054075][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.061332][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.232728][   T24] cfg80211: failed to load regulatory.db
[   97.251620][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.266849][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.358104][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.506949][ T5868] veth0_vlan: entered promiscuous mode
[   97.580653][ T5868] veth1_vlan: entered promiscuous mode
[   97.606360][ T5869] veth0_vlan: entered promiscuous mode
[   97.617112][ T5875] veth0_vlan: entered promiscuous mode
[   97.692857][ T5875] veth1_vlan: entered promiscuous mode
[   97.721859][ T5869] veth1_vlan: entered promiscuous mode
[   97.756746][ T5868] veth0_macvtap: entered promiscuous mode
[   97.785339][ T5868] veth1_macvtap: entered promiscuous mode
[   97.789150][ T5870] Bluetooth: hci4: command tx timeout
[   97.796934][ T5873] Bluetooth: hci1: command tx timeout
[   97.797043][ T5877] Bluetooth: hci2: command tx timeout
[   97.803093][ T5873] Bluetooth: hci3: command tx timeout
[   97.813639][ T5863] Bluetooth: hci0: command tx timeout
[   97.866041][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.881633][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.900246][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.916047][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.940067][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.950477][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.978297][ T5869] veth0_macvtap: entered promiscuous mode
[   97.995765][ T5875] veth0_macvtap: entered promiscuous mode
[   98.014171][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.036969][ T5869] veth1_macvtap: entered promiscuous mode
[   98.050609][ T5875] veth1_macvtap: entered promiscuous mode
[   98.058266][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.153239][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.176349][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.214524][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.245997][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.308395][   T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.317913][   T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.380292][   T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.393050][   T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.420248][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.428246][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.453001][ T5858] veth0_vlan: entered promiscuous mode
[   98.477255][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.486844][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.542610][   T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.552462][   T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.585472][ T5960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.598322][ T5960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.606011][ T5858] veth1_vlan: entered promiscuous mode
[   98.664822][ T5859] veth0_vlan: entered promiscuous mode
[   98.671574][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.679614][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.698241][ T5859] veth1_vlan: entered promiscuous mode
[   98.746003][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   98.779425][ T5960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.787402][ T5960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.869235][ T5858] veth0_macvtap: entered promiscuous mode
[   98.887677][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.890420][ T5859] veth0_macvtap: entered promiscuous mode
[   98.940940][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.961367][ T5858] veth1_macvtap: entered promiscuous mode
[   99.005500][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.009748][ T5859] veth1_macvtap: entered promiscuous mode
[   99.018613][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.128154][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.141706][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.170244][ T5985] syzkaller0: entered promiscuous mode
[   99.175860][ T5985] syzkaller0: entered allmulticast mode
[   99.212716][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.265691][ T5960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.303037][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.351477][ T5960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.362733][ T5960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.424333][ T5960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.469098][ T5998] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET)
[   99.470383][ T5960] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.505830][ T5960] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.574804][ T6002] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8'.
[   99.592529][ T5960] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.630624][ T5960] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.723736][ T6008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10'.
[   99.756822][ T6008] Zero length message leads to an empty skb
[   99.806003][ T6008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.870150][ T5873] Bluetooth: hci3: command tx timeout
[   99.875709][ T5863] Bluetooth: hci0: command tx timeout
[   99.875845][ T5877] Bluetooth: hci2: command tx timeout
[   99.882663][ T5873] Bluetooth: hci4: command tx timeout
[   99.887512][   T51] Bluetooth: hci1: command tx timeout
[   99.900170][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.908043][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.029790][ T5960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.046448][ T6016] hsr0 speed is unknown, defaulting to 1000
[  100.068875][ T5960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.134245][ T6016] hsr0 speed is unknown, defaulting to 1000
[  100.142298][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.183690][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.223087][ T6016] hsr0 speed is unknown, defaulting to 1000
[  100.262455][ T6016] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  100.287920][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.321321][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.322642][ T6016] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  100.576274][ T6016] hsr0 speed is unknown, defaulting to 1000
[  100.616849][ T6016] hsr0 speed is unknown, defaulting to 1000
[  100.680780][ T6016] hsr0 speed is unknown, defaulting to 1000
[  100.746606][ T6016] hsr0 speed is unknown, defaulting to 1000
[  100.763827][ T6039] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  100.799790][ T6016] hsr0 speed is unknown, defaulting to 1000
[  101.137045][ T6057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20'.
[  101.183711][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'.
[  101.267262][ T6067] netlink: 'syz.2.23': attribute type 11 has an invalid length.
[  101.461837][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'.
[  101.560304][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'.
[  101.560941][ T6073] nbd: must specify an index to disconnect
[  101.603193][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'.
[  101.654617][ T6078] ieee802154 phy0 wpan0: encryption failed: -22
[  101.823477][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'.
[  102.483051][ T6116] Bluetooth: MGMT ver 1.23
[  102.624051][ T6129] team0: No ports can be present during mode change
[  102.769299][ T6129] netlink: 'syz.1.37': attribute type 1 has an invalid length.
[  124.284792][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.45'.
[  124.295748][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'.
[  124.404131][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'.
[  124.459975][ T6161] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  124.831857][ T6180] ip6erspan0: entered promiscuous mode
[  124.883786][ T6184] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.651446][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.712038][ T6217] openvswitch: netlink: Multiple metadata blocks provided
[  125.776050][ T6217] netlink: 'syz.2.59': attribute type 10 has an invalid length.
[  125.785485][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'.
[  125.800935][ T6217] netlink: 36 bytes leftover after parsing attributes in process `syz.2.59'.
[  125.834167][ T6212] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  126.323425][ T6251] warning: `syz.3.69' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  126.359298][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.67'.
[  126.366930][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'.
[  126.473581][ T6251] bond0: entered promiscuous mode
[  126.491338][ T6251] bond_slave_0: entered promiscuous mode
[  126.507521][ T6251] bond_slave_1: entered promiscuous mode
[  126.532876][ T6251] bond0: left promiscuous mode
[  126.540083][ T6251] bond_slave_0: left promiscuous mode
[  126.545756][ T6251] bond_slave_1: left promiscuous mode
[  126.781144][ T6272] netlink: 44 bytes leftover after parsing attributes in process `syz.3.73'.
[  126.890539][ T6275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.72'.
[  127.035710][ T6278] Unsupported ieee802154 address type: 0
[  127.290423][ T6292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.81'.
[  127.896201][ T6315] syz_tun: tun_net_xmit 86
[  127.991251][ T6315] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  128.141018][ T6322] bridge: RTM_NEWNEIGH with invalid state 0x4
[  128.908996][    C1] syz_tun: tun_net_xmit 86
[  129.211366][ T6366] tipc: Started in network mode
[  129.225926][ T6366] tipc: Node identity ac14140f, cluster identity 4711
[  129.240027][ T6366] tipc: New replicast peer: 255.255.255.255
[  129.260258][ T6366] tipc: Enabled bearer <udp:syz2>, priority 10
[  129.948850][    C1] syz_tun: tun_net_xmit 86
[  130.169466][ T6400] ip6gre0: Master is either lo or non-ether device
[  130.245537][ T6400] __nla_validate_parse: 2 callbacks suppressed
[  130.245558][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'.
[  130.274038][ T6406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.114'.
[  130.274403][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'.
[  130.288728][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.323061][ T6406] ksmbd: Unknown IPC event: 0, ignore.
[  130.347297][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.114'.
[  130.369796][ T6410] ksmbd: Unknown IPC event: 0, ignore.
[  130.380611][  T928] tipc: Node number set to 2886997007
[  130.413698][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.605031][ T6423] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'.
[  131.073325][ T5931] IPVS: starting estimator thread 0...
[  131.105917][ T6443] openvswitch: netlink: IPv4 tun info is not correct
[  131.118412][ T6447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.124'.
[  131.140085][ T6436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.122'.
[  131.209001][ T6445] IPVS: using max 24 ests per chain, 57600 per kthread
[  131.305167][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'.
[  131.565919][ T6469] netlink: 888 bytes leftover after parsing attributes in process `syz.1.133'.
[  131.636362][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.131'.
[  132.191103][ T6502] openvswitch: netlink: IPv4 tun info is not correct
[  132.483016][ T6518] block nbd1: NBD_DISCONNECT
[  132.491378][ T6518] openvswitch: netlink: EtherType 257 is less than min 600
[  133.323528][ T6547] netlink: 'syz.0.156': attribute type 1 has an invalid length.
[  133.368649][ T6547] netlink: 'syz.0.156': attribute type 1 has an invalid length.
[  133.891938][ T6565] netlink: 'syz.1.163': attribute type 29 has an invalid length.
[  134.191315][ T6580] netlink: 'syz.4.167': attribute type 2 has an invalid length.
[  134.258431][ T6580] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  134.517906][ T6594] nbd: must specify at least one socket
[  135.262861][ T6630] netlink: 'syz.1.179': attribute type 4 has an invalid length.
[  135.329759][ T6630] netlink: 'syz.1.179': attribute type 4 has an invalid length.
[  135.419395][ T6637] __nla_validate_parse: 8 callbacks suppressed
[  135.419416][ T6637] netlink: 56 bytes leftover after parsing attributes in process `syz.3.182'.
[  135.605960][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'.
[  135.627172][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'.
[  135.645748][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.711534][ T6650] bridge_slave_1 (unregistering): left allmulticast mode
[  135.724259][ T6650] bridge_slave_1 (unregistering): left promiscuous mode
[  135.732106][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.936214][ T6657] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  136.327505][ T6676] netlink: 'syz.3.195': attribute type 1 has an invalid length.
[  136.369388][ T6676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.765226][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'.
[  136.827064][ T6703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.201'.
[  136.871722][ T6705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.201'.
[  137.404035][ T6727] bridge_slave_0: left allmulticast mode
[  137.434920][ T6727] bridge_slave_0: left promiscuous mode
[  137.455199][ T6727] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.487335][ T6727] bond0: (slave bond_slave_0): Releasing backup interface
[  137.526387][ T6727] bond0: (slave bond_slave_1): Releasing backup interface
[  137.583253][ T6727] team0: Port device team_slave_0 removed
[  137.647182][ T6727] team0: Port device team_slave_1 removed
[  137.671834][ T6727] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.680096][ T6727] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.701325][ T6727] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.710243][ T6727] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.890354][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'.
[  138.059280][ T5939] hsr0 speed is unknown, defaulting to 1000
[  138.065710][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  138.096929][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  138.198013][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  138.205111][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  138.277082][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  138.308711][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  138.926843][ T6785] trusted_key: syz.4.226 sent an empty control message without MSG_MORE.
[  138.944745][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'.
[  138.954268][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'.
[  138.975888][ T6787] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  139.032868][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'.
[  139.312517][ T5877] Bluetooth: hci4: link tx timeout
[  139.320383][ T5877] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  139.329550][   T51] Bluetooth: hci4: link tx timeout
[  139.334728][   T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  139.469011][ T6806] tipc: Started in network mode
[  139.477216][ T6806] tipc: Node identity f6ddf7ee196c, cluster identity 4711
[  139.486642][ T6806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.626982][ T6806] tipc: Disabling bearer <eth:syzkaller0>
[  140.509963][ T6850] netlink: 'syz.1.244': attribute type 1 has an invalid length.
[  140.522052][ T6849] __nla_validate_parse: 1 callbacks suppressed
[  140.522074][ T6849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.246'.
[  140.643391][ T6850] 8021q: adding VLAN 0 to HW filter on device bond1
[  140.828779][ T6851] 8021q: adding VLAN 0 to HW filter on device bond1
[  140.836011][ T6851] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  140.876724][ T6851] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  140.945359][ T6846] veth3: entered promiscuous mode
[  141.018887][ T5923] syz_tun: tun_net_xmit 110
[  141.201918][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'.
[  141.359563][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'.
[  141.409099][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  141.608794][ T5923] syz_tun: tun_net_xmit 110
[  141.614014][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'.
[  141.694167][ T6903] netlink: 'syz.3.259': attribute type 1 has an invalid length.
[  141.741487][ T6903] netlink: 'syz.3.259': attribute type 2 has an invalid length.
[  141.765661][ T6905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.258'.
[  142.092481][  T928] IPVS: starting estimator thread 0...
[  142.111699][ T6924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.267'.
[  142.112705][ T6925] IPVS: ip_vs_edit_dest(): server weight less than zero
[  142.149744][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.264'.
[  142.198651][ T6926] IPVS: using max 25 ests per chain, 60000 per kthread
[  142.271348][ T6932] bond2: entered allmulticast mode
[  142.278435][ T6932] 8021q: adding VLAN 0 to HW filter on device bond2
[  142.592589][ T6941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.617500][ T5923] syz_tun: tun_net_xmit 110
[  142.656303][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'.
[  142.665989][ T6940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.688829][ T5923] syz_tun: tun_net_xmit 110
[  142.843898][ T6952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.272'.
[  142.939555][  T928] syz_tun: tun_net_xmit 110
[  143.692160][ T6945] netlink: 'syz.1.270': attribute type 1 has an invalid length.
[  143.943442][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.285'.
[  144.340497][ T7018] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  144.935772][ T7043] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  145.110082][ T7048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  145.189101][ T7048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  145.413381][ T7065] syzkaller0: entered promiscuous mode
[  145.458889][ T7065] syzkaller0: entered allmulticast mode
[  145.725592][ T7078] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  145.771595][ T7078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.077737][ T7093] __nla_validate_parse: 2 callbacks suppressed
[  146.077757][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'.
[  146.101587][ T7092] nbd: must specify at least one socket
[  146.143264][ T7093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.314'.
[  146.215000][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'.
[  146.353627][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'.
[  146.465463][ T7108] openvswitch: netlink: IPv6 tunnel dst address is zero
[  146.916882][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.325'.
[  146.968832][ T7135] syzkaller1: entered promiscuous mode
[  146.987024][ T7135] syzkaller1: entered allmulticast mode
[  147.159414][ T7144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.331'.
[  147.160924][ T7147] Bluetooth: MGMT ver 1.23
[  147.170461][ T7144] netlink: 6 bytes leftover after parsing attributes in process `syz.1.331'.
[  147.186564][ T7145] netlink: 'syz.1.331': attribute type 4 has an invalid length.
[  147.741259][ T7168] netlink: 108 bytes leftover after parsing attributes in process `syz.3.340'.
[  147.774627][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'.
[  147.807447][ T7172] IPVS: Error joining to the multicast group
[  148.090209][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'.
[  148.234620][ T7189] netlink: 'syz.4.345': attribute type 21 has an invalid length.
[  148.593219][ T7211] netlink: 'syz.1.348': attribute type 1 has an invalid length.
[  149.634289][ T7251] netlink: 'syz.3.362': attribute type 1 has an invalid length.
[  149.670008][ T7257] tc_dump_action: action bad kind
[  149.826966][ T7251] 8021q: adding VLAN 0 to HW filter on device bond2
[  149.990586][ T7268] tipc: Started in network mode
[  150.020436][ T7268] tipc: Node identity e656ffcc3b49, cluster identity 4711
[  150.027799][ T7268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.077724][ T7270] syzkaller0: entered promiscuous mode
[  150.100815][ T7270] syzkaller0: entered allmulticast mode
[  150.144086][ T7268] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  150.197163][ T7268] tipc: Resetting bearer <eth:syzkaller0>
[  150.207232][ T7267] tipc: Resetting bearer <eth:syzkaller0>
[  150.226270][ T7281] netlink: 'syz.4.368': attribute type 10 has an invalid length.
[  150.273543][ T7267] tipc: Disabling bearer <eth:syzkaller0>
[  150.299604][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.319079][ T7281] bridge_slave_1: left allmulticast mode
[  150.328630][ T7281] bridge_slave_1: left promiscuous mode
[  150.334604][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.370229][ T7281] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  150.715637][ T7301] netlink: 'syz.3.374': attribute type 10 has an invalid length.
[  150.800909][ T7299] netlink: 'syz.3.374': attribute type 10 has an invalid length.
[  150.921417][ T7301] team0: Port device dummy0 added
[  151.017465][ T7299] team0: Port device dummy0 removed
[  151.103174][ T7320] __nla_validate_parse: 5 callbacks suppressed
[  151.103196][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'.
[  151.269056][ T7329] netlink: 256 bytes leftover after parsing attributes in process `syz.3.381'.
[  151.611404][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'.
[  151.904902][ T7358] tap0: tun_chr_ioctl cmd 2148553947
[  151.950174][ T7363] netlink: 'syz.0.392': attribute type 11 has an invalid length.
[  151.976605][ T7363] netlink: 224 bytes leftover after parsing attributes in process `syz.0.392'.
[  152.020107][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'.
[  152.050145][ T7369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.394'.
[  152.105467][ T1144] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  152.123302][ T1144] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  152.195038][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'.
[  152.204039][ T1144] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  152.240791][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  152.252471][ T7369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.394'.
[  152.276889][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  152.292313][ T7379] netlink: 'syz.1.398': attribute type 1 has an invalid length.
[  152.312492][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  152.405086][ T7384] netlink: 'syz.0.399': attribute type 21 has an invalid length.
[  152.518656][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'.
[  152.564560][ T7381] bond3: (slave gretap1): making interface the new active one
[  152.579725][ T7381] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  152.637990][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  152.670496][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.402'.
[  152.685050][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  152.956425][ T7405] team_slave_0: entered promiscuous mode
[  152.962414][ T7405] team_slave_1: entered promiscuous mode
[  153.024305][ T7405] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  153.037488][ T7405] team0: Device macvtap1 is already an upper device of the team interface
[  153.049479][ T7405] team_slave_0: left promiscuous mode
[  153.055021][ T7405] team_slave_1: left promiscuous mode
[  153.310977][ T7418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  153.367436][ T5877] Bluetooth: hci4: command 0x0406 tx timeout
[  153.456183][ T7429] netlink: 'syz.0.410': attribute type 11 has an invalid length.
[  154.668215][ T7480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.677713][ T7480] syzkaller0: entered promiscuous mode
[  154.691663][ T7480] syzkaller0: entered allmulticast mode
[  154.796037][ T7480] tipc: Resetting bearer <eth:syzkaller0>
[  154.845613][ T7479] tipc: Resetting bearer <eth:syzkaller0>
[  154.913788][ T7479] tipc: Disabling bearer <eth:syzkaller0>
[  155.232440][ T7514] netlink: 'syz.3.429': attribute type 12 has an invalid length.
[  156.330716][ T7563] __nla_validate_parse: 26 callbacks suppressed
[  156.330753][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.440'.
[  156.450250][ T7571] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  156.474379][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'.
[  156.607204][ T7578] netlink: 'syz.1.443': attribute type 5 has an invalid length.
[  156.621495][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'.
[  156.673513][ T7580] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.445'.
[  156.735967][ T7580] netlink: zone id is out of range
[  156.737221][ T7588] netlink: 'syz.3.445': attribute type 1 has an invalid length.
[  156.801792][ T7580] netlink: zone id is out of range
[  156.827221][ T7580] netlink: zone id is out of range
[  156.837716][ T7590] IPv6: sit1: Disabled Multicast RS
[  156.851726][ T7580] netlink: get zone limit has 8 unknown bytes
[  156.863026][ T7590] sit1: entered allmulticast mode
[  156.883004][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'.
[  157.067050][ T7598] tipc: Trying to set illegal importance in message
[  157.274945][ T7598] 8021q: adding VLAN 0 to HW filter on device bond4
[  157.479423][ T7621] IPv6: sit1: Disabled Multicast RS
[  157.495240][ T7621] sit1: entered allmulticast mode
[  157.904807][ T7640] tipc: Started in network mode
[  157.920127][ T7640] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711
[  157.959691][ T7640] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  158.574513][ T7667] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614)
[  158.607168][ T7667] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  158.762560][ T7676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.470'.
[  158.800795][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'.
[  159.091011][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'.
[  159.195120][ T7688] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.473'.
[  159.205047][ T7688] netlink: zone id is out of range
[  159.227773][ T7688] netlink: get zone limit has 8 unknown bytes
[  159.246466][ T7698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.475'.
[  159.883362][ T7727] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.070913][ T7727] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.119521][ T7736] netlink: 'syz.1.486': attribute type 10 has an invalid length.
[  160.133968][ T7736] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.144354][ T7736] bridge_slave_1: left allmulticast mode
[  160.150252][ T7736] bridge_slave_1: left promiscuous mode
[  160.156435][ T7736] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.173503][ T7736] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  160.763867][ T7762] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  160.815972][ T7768] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  161.491342][ T7808] __nla_validate_parse: 5 callbacks suppressed
[  161.491363][ T7808] netlink: 56 bytes leftover after parsing attributes in process `syz.1.507'.
[  161.601912][ T7808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'.
[  161.655059][ T7813] tipc: Started in network mode
[  161.664526][ T7808] netlink: 31 bytes leftover after parsing attributes in process `syz.1.507'.
[  161.693664][ T7813] tipc: Node identity de051cb3997, cluster identity 4711
[  161.702476][ T7808] netlink: 'syz.1.507': attribute type 3 has an invalid length.
[  161.712109][ T7808] netlink: 'syz.1.507': attribute type 2 has an invalid length.
[  161.712188][ T7813] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.722307][ T7808] netlink: 31 bytes leftover after parsing attributes in process `syz.1.507'.
[  161.940920][ T7818] syzkaller0: entered promiscuous mode
[  161.946473][ T7818] syzkaller0: entered allmulticast mode
[  161.989557][ T7818] tipc: Resetting bearer <eth:syzkaller0>
[  162.031848][ T7817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.510'.
[  162.043764][ T7827] tipc: Resetting bearer <eth:syzkaller0>
[  162.080493][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'.
[  162.090130][ T7812] tipc: Resetting bearer <eth:syzkaller0>
[  162.799894][ T5939] tipc: Node number set to 1198857395
[  163.277905][ T7812] tipc: Disabling bearer <eth:syzkaller0>
[  163.295771][ T7829] dvmrp0: entered allmulticast mode
[  163.358919][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'.
[  163.554279][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'.
[  163.600656][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'.
[  165.057106][ T7878] netlink: 48 bytes leftover after parsing attributes in process `syz.0.526'.
[  165.092704][ T7880] syz_tun: entered allmulticast mode
[  165.162452][ T7877] syz_tun: left allmulticast mode
[  165.407134][ T7891] bridge_slave_0: left allmulticast mode
[  165.421415][ T7891] bridge_slave_0: left promiscuous mode
[  165.435143][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.523607][ T7891] bond0: (slave bridge_slave_1): Releasing backup interface
[  165.585760][ T7891] bond0: (slave bond_slave_0): Releasing backup interface
[  165.606067][ T7891] bond0: (slave bond_slave_1): Releasing backup interface
[  165.654404][ T7891] team0: Port device team_slave_0 removed
[  165.697757][ T7891] team0: Port device team_slave_1 removed
[  165.722368][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.750539][ T7903] team0: Mode changed to "broadcast"
[  166.001524][ T7927] 8021q: adding VLAN 0 to HW filter on device bond4
[  166.077054][ T7931] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  166.385805][ T7920] gretap0: entered promiscuous mode
[  166.470915][ T7920] gretap0: left promiscuous mode
[  193.438077][ T7983] __nla_validate_parse: 11 callbacks suppressed
[  193.438100][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'.
[  193.784702][ T7987] syz.3.552 (7987) used greatest stack depth: 17864 bytes left
[  193.893424][ T8005] syzkaller0: entered promiscuous mode
[  193.938880][ T8005] syzkaller0: entered allmulticast mode
[  194.042413][ T8021] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  194.314470][ T8034] netlink: 'syz.3.563': attribute type 25 has an invalid length.
[  194.727126][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'.
[  195.027054][ T8056] sctp: [Deprecated]: syz.3.570 (pid 8056) Use of int in max_burst socket option deprecated.
[  195.027054][ T8056] Use struct sctp_assoc_value instead
[  196.234657][ T8078] netlink: 40 bytes leftover after parsing attributes in process `syz.4.575'.
[  196.387763][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'.
[  196.620038][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'.
[  196.776351][ T8101] bridge_slave_0: invalid flags given to default FDB implementation
[  196.827551][ T8101] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.583'.
[  197.299592][ T8131] netlink: 72 bytes leftover after parsing attributes in process `syz.3.591'.
[  197.392903][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'.
[  197.583498][ T8142] netlink: 'syz.3.595': attribute type 21 has an invalid length.
[  197.597037][ T8142] netlink: 156 bytes leftover after parsing attributes in process `syz.3.595'.
[  197.754523][ T5931] IPVS: starting estimator thread 0...
[  197.851980][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'.
[  197.871318][ T8156] IPVS: using max 25 ests per chain, 60000 per kthread
[  198.201786][ T8176] netlink: 'syz.3.603': attribute type 1 has an invalid length.
[  198.276998][ T8178] ksmbd: Unknown IPC event: 3, ignore.
[  198.468769][ T8190] __nla_validate_parse: 2 callbacks suppressed
[  198.468792][ T8190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.608'.
[  198.652472][ T8198] netlink: 596 bytes leftover after parsing attributes in process `syz.4.610'.
[  198.837739][ T8206] netlink: 'syz.2.611': attribute type 11 has an invalid length.
[  198.860437][ T8206] netlink: 'syz.2.611': attribute type 11 has an invalid length.
[  198.868252][ T8206] netlink: 152 bytes leftover after parsing attributes in process `syz.2.611'.
[  198.952324][ T8212] openvswitch: netlink: Message has 4 unknown bytes.
[  198.976365][ T8212] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.231123][ T8227] netlink: 'syz.3.615': attribute type 1 has an invalid length.
[  199.249170][ T8227] netlink: 220 bytes leftover after parsing attributes in process `syz.3.615'.
[  199.294407][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'.
[  199.636191][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  199.643679][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  199.711842][ T8243] TCP: TCP_TX_DELAY enabled
[  200.125443][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'.
[  200.435887][ T8278] netlink: 'syz.4.628': attribute type 2 has an invalid length.
[  200.477960][ T8278] netlink: 119 bytes leftover after parsing attributes in process `syz.4.628'.
[  200.511674][ T8283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.611550][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'.
[  200.871811][ T8301] netlink: 'syz.2.634': attribute type 6 has an invalid length.
[  200.909643][ T8301] netlink: 'syz.2.634': attribute type 6 has an invalid length.
[  200.942578][   T30] audit: type=1800 audit(1755575964.241:2): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.623" name="memory.events" dev="tmpfs" ino=614 res=0 errno=0
[  201.162825][ T8316] netlink: 'syz.3.635': attribute type 1 has an invalid length.
[  201.205937][ T8316] netlink: 'syz.3.635': attribute type 1 has an invalid length.
[  201.577786][ T8331] netlink: zone id is out of range
[  201.583509][ T8331] netlink: zone id is out of range
[  201.591147][ T8331] netlink: zone id is out of range
[  201.639670][ T8331] netlink: zone id is out of range
[  201.659736][ T8331] netlink: del zone limit has 4 unknown bytes
[  201.934840][ T8339] veth7: entered allmulticast mode
[  202.202497][   T43] syz_tun: tun_net_xmit 86
[  202.371978][ T8369] netlink: 44 bytes leftover after parsing attributes in process `syz.3.651'.
[  202.553197][ T8377] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  203.139155][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'.
[  203.297985][ T8410] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4.
[  203.583206][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'.
[  203.644453][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'.
[  203.653033][ T8420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.689438][ T8427] bridge_slave_0: left allmulticast mode
[  203.695167][ T8427] bridge_slave_0: left promiscuous mode
[  203.757362][ T8427] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.852566][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.4.668'.
[  204.074075][ T8420] syzkaller0: entered promiscuous mode
[  204.089082][ T8420] syzkaller0: entered allmulticast mode
[  204.205174][ T8439] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  204.241869][ T8447] tipc: Resetting bearer <eth:syzkaller0>
[  204.301355][ T8419] tipc: Resetting bearer <eth:syzkaller0>
[  204.380249][ T8419] tipc: Disabling bearer <eth:syzkaller0>
[  204.520181][ T8465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.563108][ T8463] syzkaller0: entered promiscuous mode
[  204.614371][ T8468] netlink: 'syz.0.675': attribute type 4 has an invalid length.
[  204.624884][ T8463] syzkaller0: entered allmulticast mode
[  204.783858][ T8465] tipc: Resetting bearer <eth:syzkaller0>
[  204.833518][ T8486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.678'.
[  204.845867][ T8465] tipc: Disabling bearer <eth:syzkaller0>
[  204.849380][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.678'.
[  204.868880][ T8485] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  204.933600][ T8485] bond6: entered promiscuous mode
[  204.946143][ T8485] bond6: entered allmulticast mode
[  204.952722][ T8485] 8021q: adding VLAN 0 to HW filter on device bond6
[  205.105487][ T8495] netlink: 'syz.1.683': attribute type 1 has an invalid length.
[  205.133910][ T8497] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  205.225173][ T8502] openvswitch: netlink: IPv4 tun info is not correct
[  205.431304][ T8510] netlink: 48 bytes leftover after parsing attributes in process `syz.2.688'.
[  205.578164][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'.
[  205.596837][ T8516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.689'.
[  205.840743][ T8526] netlink: 'syz.0.693': attribute type 10 has an invalid length.
[  206.101503][ T8535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.696'.
[  206.183712][ T8539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.697'.
[  206.307606][ T8543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.442159][ T8543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.599953][ T8564] netlink: 'syz.3.701': attribute type 12 has an invalid length.
[  206.610232][ T8564] sctp: [Deprecated]: syz.3.701 (pid 8564) Use of int in max_burst socket option deprecated.
[  206.610232][ T8564] Use struct sctp_assoc_value instead
[  206.813717][ T8573] unsupported nlmsg_type 40
[  207.015657][ T8584] netlink: 'syz.4.709': attribute type 1 has an invalid length.
[  207.404254][ T8598] netlink: 'syz.4.711': attribute type 2 has an invalid length.
[  207.550823][ T8605] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  207.886255][ T8623] netlink: 'syz.1.719': attribute type 21 has an invalid length.
[  208.300222][ T8647] netlink: 'syz.0.726': attribute type 7 has an invalid length.
[  208.307947][ T8647] netlink: 'syz.0.726': attribute type 8 has an invalid length.
[  208.876170][ T8672] __nla_validate_parse: 5 callbacks suppressed
[  208.876191][ T8672] netlink: 356 bytes leftover after parsing attributes in process `syz.3.732'.
[  208.899038][ T8675] netlink: 'syz.1.730': attribute type 11 has an invalid length.
[  208.958830][ T8675] netlink: 224 bytes leftover after parsing attributes in process `syz.1.730'.
[  209.002110][ T8676] tipc: Enabling of bearer <eth:caif0> rejected, failed to enable media
[  209.211970][ T8690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.246708][ T8692] netlink: 324 bytes leftover after parsing attributes in process `syz.2.737'.
[  209.332263][ T8692] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  209.354735][ T8698] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20004
[  209.440233][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.449473][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.616303][ T8709] netlink: 27 bytes leftover after parsing attributes in process `syz.4.741'.
[  209.670159][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'.
[  209.724272][ T8716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.740'.
[  210.050714][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.744'.
[  210.073962][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.744'.
[  210.262696][ T8722] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.270057][ T8722] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.157663][ T8800] ieee802154 phy1 wpan1: encryption failed: -22
[  212.169210][ T8803] veth0_to_bridge: entered promiscuous mode
[  212.175399][ T8802] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5
[  212.199264][ T8803] veth0_to_bridge: left promiscuous mode
[  213.168235][ T8849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.771'.
[  213.211352][ T8852] netlink: 576 bytes leftover after parsing attributes in process `syz.1.772'.
[  213.306631][ T8855] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  214.019216][ T8018] udevd[8018]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  214.064736][ T8894] __nla_validate_parse: 1 callbacks suppressed
[  214.064757][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.780'.
[  214.256212][ T8907] unknown channel width for channel at 909000KHz?
[  214.392511][ T8913] openvswitch: netlink: IPv4 tun info is not correct
[  214.517464][ T8917] netlink: 68 bytes leftover after parsing attributes in process `syz.1.786'.
[  214.649422][ T8927] netlink: 'syz.0.788': attribute type 1 has an invalid length.
[  214.657135][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'.
[  215.546866][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'.
[  215.742186][ T8985] lo speed is unknown, defaulting to 1000
[  215.790478][ T8985] lo speed is unknown, defaulting to 1000
[  215.827348][ T8985] lo speed is unknown, defaulting to 1000
[  215.903117][ T9000] netlink: 'syz.0.804': attribute type 7 has an invalid length.
[  215.937969][ T9003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.804'.
[  215.958250][ T9005] netlink: 'syz.2.805': attribute type 1 has an invalid length.
[  215.999809][ T9005] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.386928][ T9020] netlink: 'syz.0.809': attribute type 29 has an invalid length.
[  216.488736][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'.
[  216.503907][ T9027] netlink: 6 bytes leftover after parsing attributes in process `syz.3.810'.
[  216.517898][ T9026] netlink: 'syz.3.810': attribute type 16 has an invalid length.
[  216.537905][ T9027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  216.603954][ T9026] netlink: 'syz.3.810': attribute type 17 has an invalid length.
[  216.741756][ T9026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  216.769858][ T8985] infiniband syz0: set active
[  216.778034][ T8985] infiniband syz0: added lo
[  216.799472][ T8985] syz0: rxe_create_cq: returned err = -12
[  216.805497][ T8985] infiniband syz0: Couldn't create ib_mad CQ
[  216.833179][   T10] lo speed is unknown, defaulting to 1000
[  216.858073][ T8985] infiniband syz0: Couldn't open port 1
[  216.991109][ T8985] RDS/IB: syz0: added
[  217.015717][ T8985] smc: adding ib device syz0 with port count 1
[  217.054241][ T9050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.816'.
[  217.065437][ T8985] smc:    ib device syz0 port 1 has pnetid 
[  217.082636][ T5181] Bluetooth: hci1: command 0x0406 tx timeout
[  217.089250][ T5863] Bluetooth: hci0: command 0x0406 tx timeout
[  217.089279][ T5866] Bluetooth: hci3: command 0x0406 tx timeout
[  217.095309][ T5863] Bluetooth: hci2: command 0x0406 tx timeout
[  217.098924][ T9052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.816'.
[  217.105383][ T8985] lo speed is unknown, defaulting to 1000
[  217.133404][ T9050] netlink: zone id is out of range
[  217.156576][ T9054] netlink: 'syz.2.817': attribute type 83 has an invalid length.
[  217.180243][   T43] lo speed is unknown, defaulting to 1000
[  217.287291][ T9058] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  217.521511][ T5861] syz_tun: tun_net_xmit 110
[  217.540562][ T9058] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  217.595126][ T9068] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  217.888761][ T5861] syz_tun: tun_net_xmit 110
[  217.891572][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'.
[  218.360170][ T8985] lo speed is unknown, defaulting to 1000
[  218.376093][ T9105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  218.383864][ T9105] IPv6: NLM_F_CREATE should be set when creating new route
[  218.528581][ T9112] netlink: 'syz.0.832': attribute type 1 has an invalid length.
[  219.243998][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'.
[  219.454718][ T8985] lo speed is unknown, defaulting to 1000
[  219.514237][ T9144] netlink: 48 bytes leftover after parsing attributes in process `syz.0.842'.
[  219.546393][ T9144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.842'.
[  219.857566][ T9162] sctp: [Deprecated]: syz.4.849 (pid 9162) Use of struct sctp_assoc_value in delayed_ack socket option.
[  219.857566][ T9162] Use struct sctp_sack_info instead
[  220.445796][ T8985] lo speed is unknown, defaulting to 1000
[  220.634785][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'.
[  220.648252][ T9192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.857'.
[  220.838087][ T9203] IPVS: set_ctl: invalid protocol: 108 172.30.0.4:20003
[  220.864399][ T9204] netlink: 'syz.2.861': attribute type 3 has an invalid length.
[  221.033408][ T9211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.863'.
[  221.065946][ T9213] Driver unsupported XDP return value 0 on prog  (id 260) dev N/A, expect packet loss!
[  221.093194][ T8985] lo speed is unknown, defaulting to 1000
[  221.215789][ T9215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.865'.
[  221.232636][ T9215] netlink: 'syz.2.865': attribute type 1 has an invalid length.
[  221.244521][ T9215] netlink: 'syz.2.865': attribute type 2 has an invalid length.
[  221.324302][ T9217] Bluetooth: MGMT ver 1.23
[  221.859729][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'.
[  222.081674][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.876'.
[  222.216045][ T9244] 8021q: adding VLAN 0 to HW filter on device bond2
[  222.250182][ T9251] sctp: [Deprecated]: syz.2.879 (pid 9251) Use of int in max_burst socket option deprecated.
[  222.250182][ T9251] Use struct sctp_assoc_value instead
[  222.349334][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'.
[  222.360515][ T9248] bridge_slave_1: left allmulticast mode
[  222.366220][ T9248] bridge_slave_1: left promiscuous mode
[  222.375210][ T9248] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.437969][ T9260] openvswitch: netlink: IPv4 tun info is not correct
[  222.459204][ T9248] bridge_slave_0: left promiscuous mode
[  222.486051][ T9248] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.095662][ T9290] netlink: 'syz.1.890': attribute type 83 has an invalid length.
[  223.224092][ T9298] tap0: tun_chr_ioctl cmd 1074025672
[  223.225121][ T9300] netlink: 'syz.4.893': attribute type 10 has an invalid length.
[  223.233977][ T9298] tap0: ignored: set checksum disabled
[  223.363642][ T9300] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  223.427980][ T9303] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  223.638187][ T9313] netlink: 'syz.0.896': attribute type 1 has an invalid length.
[  223.694066][ T9318] netlink: 'syz.3.898': attribute type 1 has an invalid length.
[  223.725740][ T9318] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  223.946192][ T9330] netlink: 'syz.3.902': attribute type 1 has an invalid length.
[  223.980303][ T9330] netlink: 'syz.3.902': attribute type 1 has an invalid length.
[  224.029040][ T9333] gre2: entered promiscuous mode
[  224.034165][ T9333] gre2: entered allmulticast mode
[  224.410755][ T9350] __nla_validate_parse: 8 callbacks suppressed
[  224.410777][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.909'.
[  224.450853][ T9357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  224.459333][ T9350] netlink: 32 bytes leftover after parsing attributes in process `syz.2.909'.
[  224.612118][ T9364] netlink: 27 bytes leftover after parsing attributes in process `syz.1.911'.
[  224.683623][ T9365] IPVS: Unknown mcast interface: vcan0
[  224.922386][ T9382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.917'.
[  224.958671][ T9382] netlink: 'syz.3.917': attribute type 7 has an invalid length.
[  224.987143][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'.
[  225.322963][ T9405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.922'.
[  225.464205][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'.
[  225.542622][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'.
[  226.131914][ T9403] validate_nla: 3 callbacks suppressed
[  226.131936][ T9403] netlink: 'syz.1.922': attribute type 6 has an invalid length.
[  226.152931][ T9403] netlink: 132 bytes leftover after parsing attributes in process `syz.1.922'.
[  226.207607][ T9412] gtp0: entered promiscuous mode
[  226.248767][ T9425] rose0: entered promiscuous mode
[  226.277589][ T7503] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.304398][ T7503] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.349758][ T7503] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.402822][ T7503] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.636274][ T9456] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  227.051394][ T9474] netlink: 32 bytes leftover after parsing attributes in process `syz.1.934'.
[  227.513837][ T7513] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  227.530137][ T9489] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  229.174101][ T9550] geneve2: entered promiscuous mode
[  229.198964][ T9550] geneve2: entered allmulticast mode
[  230.185107][ T9600] __nla_validate_parse: 5 callbacks suppressed
[  230.185126][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'.
[  230.191187][ T9601] netlink: 'syz.4.961': attribute type 1 has an invalid length.
[  230.234837][ T9601] netlink: 'syz.4.961': attribute type 2 has an invalid length.
[  230.249296][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'.
[  230.455502][ T9614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.964'.
[  230.506764][ T9618] nbd: couldn't find a device at index -373156329
[  230.582247][ T9618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.964'.
[  230.676692][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.963'.
[  230.752540][ T9626] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000
[  230.913342][ T9633] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  231.229193][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'.
[  231.273741][ T9655] netlink: 'syz.4.972': attribute type 1 has an invalid length.
[  231.311178][ T9655] netlink: 'syz.4.972': attribute type 4 has an invalid length.
[  231.341798][ T9655] netlink: 192 bytes leftover after parsing attributes in process `syz.4.972'.
[  231.468652][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  231.503024][ T9661] netlink: 'syz.1.975': attribute type 21 has an invalid length.
[  231.548134][ T9661] netlink: 152 bytes leftover after parsing attributes in process `syz.1.975'.
[  231.593734][ T9666] netlink: 'syz.2.977': attribute type 10 has an invalid length.
[  231.649036][ T9666] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  231.801578][ T9675] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  231.895002][ T9671] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.902291][ T9671] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.914696][ T9680] netlink: 'syz.4.982': attribute type 21 has an invalid length.
[  231.972193][ T9685] netlink: 'syz.4.982': attribute type 21 has an invalid length.
[  232.028318][ T9680] netlink: 156 bytes leftover after parsing attributes in process `syz.4.982'.
[  232.069824][ T9689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.983'.
[  232.497456][ T9709] FAULT_INJECTION: forcing a failure.
[  232.497456][ T9709] name failslab, interval 1, probability 0, space 0, times 0
[  232.523034][ T9708] netlink: 'syz.2.990': attribute type 6 has an invalid length.
[  232.539427][ T9708] netlink: 'syz.2.990': attribute type 1 has an invalid length.
[  232.544042][ T9709] CPU: 0 UID: 0 PID: 9709 Comm: syz.4.986 Not tainted syzkaller #0 PREEMPT(full) 
[  232.544085][ T9709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  232.544109][ T9709] Call Trace:
[  232.544119][ T9709]  <TASK>
[  232.544131][ T9709]  dump_stack_lvl+0x189/0x250
[  232.544168][ T9709]  ? __pfx____ratelimit+0x10/0x10
[  232.544202][ T9709]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.544232][ T9709]  ? __pfx__printk+0x10/0x10
[  232.544275][ T9709]  ? __pfx___might_resched+0x10/0x10
[  232.544297][ T9709]  ? fs_reclaim_acquire+0x7d/0x100
[  232.544340][ T9709]  should_fail_ex+0x414/0x560
[  232.544379][ T9709]  should_failslab+0xa8/0x100
[  232.544416][ T9709]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  232.544451][ T9709]  ? __alloc_skb+0x112/0x2d0
[  232.544493][ T9709]  __alloc_skb+0x112/0x2d0
[  232.544533][ T9709]  netlink_ack+0x146/0xa50
[  232.544566][ T9709]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  232.544622][ T9709]  netlink_rcv_skb+0x28c/0x470
[  232.544658][ T9709]  ? __lock_acquire+0xab9/0xd20
[  232.544696][ T9709]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  232.544732][ T9709]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  232.544781][ T9709]  ? netlink_deliver_tap+0x2e/0x1b0
[  232.544826][ T9709]  netlink_unicast+0x82c/0x9e0
[  232.544869][ T9709]  ? __pfx_netlink_unicast+0x10/0x10
[  232.544903][ T9709]  ? netlink_sendmsg+0x642/0xb30
[  232.544935][ T9709]  ? skb_put+0x11b/0x210
[  232.544977][ T9709]  netlink_sendmsg+0x805/0xb30
[  232.545047][ T9709]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.545095][ T9709]  ? aa_sock_msg_perm+0xf1/0x1d0
[  232.545138][ T9709]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  232.545166][ T9709]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.545204][ T9709]  __sock_sendmsg+0x219/0x270
[  232.545239][ T9709]  ____sys_sendmsg+0x505/0x830
[  232.545271][ T9709]  ? __pfx_____sys_sendmsg+0x10/0x10
[  232.545312][ T9709]  ? import_iovec+0x74/0xa0
[  232.545343][ T9709]  ___sys_sendmsg+0x21f/0x2a0
[  232.545371][ T9709]  ? __pfx____sys_sendmsg+0x10/0x10
[  232.545441][ T9709]  ? __fget_files+0x2a/0x420
[  232.545477][ T9709]  ? __fget_files+0x3a0/0x420
[  232.545526][ T9709]  __x64_sys_sendmsg+0x19b/0x260
[  232.545554][ T9709]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  232.545591][ T9709]  ? __pfx_ksys_write+0x10/0x10
[  232.545622][ T9709]  ? rcu_is_watching+0x15/0xb0
[  232.545652][ T9709]  ? do_syscall_64+0xbe/0x3b0
[  232.545693][ T9709]  do_syscall_64+0xfa/0x3b0
[  232.545725][ T9709]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.545758][ T9709]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.545781][ T9709]  ? clear_bhb_loop+0x60/0xb0
[  232.545811][ T9709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.545834][ T9709] RIP: 0033:0x7fb7a8d8ebe9
[  232.545863][ T9709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.545883][ T9709] RSP: 002b:00007fb7a9bd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  232.545914][ T9709] RAX: ffffffffffffffda RBX: 00007fb7a8fb6180 RCX: 00007fb7a8d8ebe9
[  232.545932][ T9709] RDX: 0000000000008800 RSI: 0000200000000300 RDI: 0000000000000006
[  232.545946][ T9709] RBP: 00007fb7a9bd2090 R08: 0000000000000000 R09: 0000000000000000
[  232.545961][ T9709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  232.545974][ T9709] R13: 00007fb7a8fb6218 R14: 00007fb7a8fb6180 R15: 00007ffccc17d768
[  232.546014][ T9709]  </TASK>
[  233.186134][ T9730] netlink: 'syz.4.993': attribute type 10 has an invalid length.
[  233.218194][ T9730] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  233.567845][ T9748] netlink: 'syz.0.1000': attribute type 3 has an invalid length.
[  233.611575][ T9742] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  233.612798][ T9756] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  233.734745][ T9748] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  234.203590][ T9766] FAULT_INJECTION: forcing a failure.
[  234.203590][ T9766] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  234.280295][ T9766] CPU: 1 UID: 0 PID: 9766 Comm: syz.2.1002 Not tainted syzkaller #0 PREEMPT(full) 
[  234.280325][ T9766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  234.280338][ T9766] Call Trace:
[  234.280347][ T9766]  <TASK>
[  234.280357][ T9766]  dump_stack_lvl+0x189/0x250
[  234.280387][ T9766]  ? __pfx____ratelimit+0x10/0x10
[  234.280417][ T9766]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.280444][ T9766]  ? __pfx__printk+0x10/0x10
[  234.280489][ T9766]  should_fail_ex+0x414/0x560
[  234.280524][ T9766]  _copy_to_user+0x31/0xb0
[  234.280551][ T9766]  simple_read_from_buffer+0xe1/0x170
[  234.280589][ T9766]  proc_fail_nth_read+0x1b3/0x220
[  234.280616][ T9766]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  234.280644][ T9766]  ? rw_verify_area+0x2a6/0x4d0
[  234.280670][ T9766]  ? __lock_acquire+0xab9/0xd20
[  234.280700][ T9766]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  234.280726][ T9766]  vfs_read+0x200/0xa30
[  234.280752][ T9766]  ? fdget_pos+0x247/0x320
[  234.280776][ T9766]  ? __pfx___mutex_lock+0x10/0x10
[  234.280808][ T9766]  ? __pfx_vfs_read+0x10/0x10
[  234.280837][ T9766]  ? __fget_files+0x2a/0x420
[  234.280872][ T9766]  ? __fget_files+0x3a0/0x420
[  234.280903][ T9766]  ? __fget_files+0x2a/0x420
[  234.280957][ T9766]  ksys_read+0x145/0x250
[  234.280987][ T9766]  ? __pfx_ksys_read+0x10/0x10
[  234.281010][ T9766]  ? rcu_is_watching+0x15/0xb0
[  234.281036][ T9766]  ? do_syscall_64+0xbe/0x3b0
[  234.281069][ T9766]  do_syscall_64+0xfa/0x3b0
[  234.281096][ T9766]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.281123][ T9766]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.281144][ T9766]  ? clear_bhb_loop+0x60/0xb0
[  234.281171][ T9766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.281191][ T9766] RIP: 0033:0x7fb50f78d5fc
[  234.281211][ T9766] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  234.281229][ T9766] RSP: 002b:00007fb50d9f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  234.281252][ T9766] RAX: ffffffffffffffda RBX: 00007fb50f9b5fa0 RCX: 00007fb50f78d5fc
[  234.281267][ T9766] RDX: 000000000000000f RSI: 00007fb50d9f60a0 RDI: 0000000000000006
[  234.281280][ T9766] RBP: 00007fb50d9f6090 R08: 0000000000000000 R09: 0000000000000000
[  234.281292][ T9766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  234.281304][ T9766] R13: 00007fb50f9b6038 R14: 00007fb50f9b5fa0 R15: 00007ffc4d2d6708
[  234.281344][ T9766]  </TASK>
[  235.395530][ T9834] __nla_validate_parse: 10 callbacks suppressed
[  235.395552][ T9834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1017'.
[  235.721663][ T9844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1022'.
[  235.731231][ T9844] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1022'.
[  235.768342][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1021'.
[  236.235589][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'.
[  236.335366][ T9880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1028'.
[  236.375674][ T9876] bond7: (slave gretap2): making interface the new active one
[  236.385792][ T9876] bond7: (slave gretap2): Enslaving as an active interface with an up link
[  236.397785][ T9880] 8021q: adding VLAN 0 to HW filter on device bond7
[  236.561070][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1030'.
[  236.677634][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1031'.
[  236.911798][ T9901] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1035'.
[  236.948163][ T9905] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  236.978570][ T9414] IPVS: starting estimator thread 0...
[  236.989912][ T9906] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  237.073365][ T9909] IPVS: using max 27 ests per chain, 64800 per kthread
[  237.801951][ T9954] validate_nla: 4 callbacks suppressed
[  237.801971][ T9954] netlink: 'syz.4.1047': attribute type 10 has an invalid length.
[  237.817163][ T9951] netlink: 'syz.1.1046': attribute type 10 has an invalid length.
[  237.842700][ T9951] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  237.914387][ T9954] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  237.975150][ T9954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  238.087039][ T9971] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  238.449846][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1053'.
[  238.792168][T10000] netlink: 'syz.4.1056': attribute type 21 has an invalid length.
[  238.992690][T10010] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  239.623560][T10030] netlink: 'syz.4.1062': attribute type 83 has an invalid length.
[  239.948698][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  240.588974][T10082] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  240.611092][T10080] netlink: 'syz.4.1075': attribute type 24 has an invalid length.
[  240.623447][T10078] netlink: 'syz.2.1073': attribute type 1 has an invalid length.
[  240.642125][T10088] bridge_slave_0: default FDB implementation only supports local addresses
[  241.077901][T10106] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  241.106340][T10106] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  241.365114][T10110] __nla_validate_parse: 8 callbacks suppressed
[  241.365139][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'.
[  241.844710][T10136] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  241.929531][T10149] netlink: 'syz.0.1089': attribute type 1 has an invalid length.
[  241.938255][T10149] netlink: 'syz.0.1089': attribute type 1 has an invalid length.
[  241.957737][T10149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1089'.
[  242.225681][T10163] openvswitch: netlink: IPv4 tun info is not correct
[  242.813310][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'.
[  242.937123][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'.
[  242.960886][T10191] netlink: 'syz.0.1103': attribute type 14 has an invalid length.
[  242.989824][T10191] netlink: 'syz.0.1103': attribute type 13 has an invalid length.
[  244.667268][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'.
[  244.717531][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'.
[  244.812995][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'.
[  245.138558][T10295] hsr0 speed is unknown, defaulting to 1000
[  245.149436][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1130'.
[  245.167669][T10291] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  245.188085][T10291] tipc: Enabled bearer <udp:s>, priority 10
[  245.205684][T10295] lo speed is unknown, defaulting to 1000
[  245.233592][T10304] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1133'.
[  245.250972][T10307] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1134'.
[  245.939856][T10333] netlink: 'syz.4.1140': attribute type 10 has an invalid length.
[  245.965225][T10335] openvswitch: netlink: IPv4 tun info is not correct
[  246.114827][T10333] veth0_vlan: entered allmulticast mode
[  246.131139][T10333] veth0_vlan: left promiscuous mode
[  246.137932][T10333] veth0_vlan: entered promiscuous mode
[  246.151060][T10333] team0: Device veth0_vlan failed to register rx_handler
[  246.218741][T10341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  246.294803][T10342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  246.353944][ T5931] tipc: Node number set to 3709861836
[  246.438196][T10340] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.569757][ T1212] lo speed is unknown, defaulting to 1000
[  246.737859][T10340] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.858927][T10372] __nla_validate_parse: 2 callbacks suppressed
[  246.858948][T10372] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1151'.
[  246.919959][T10374] openvswitch: netlink: Flow key attribute not present in set flow.
[  247.094599][T10340] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.131085][T10382] openvswitch: netlink: IPv4 tun info is not correct
[  247.215197][T10377] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.253019][T10381] syzkaller0: entered promiscuous mode
[  247.280302][T10381] syzkaller0: entered allmulticast mode
[  247.363497][T10340] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.430730][T10372] tipc: Resetting bearer <eth:syzkaller0>
[  247.476231][ T1212] IPVS: starting estimator thread 0...
[  247.481296][T10396] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  247.504289][T10371] tipc: Resetting bearer <eth:syzkaller0>
[  247.551457][T10371] tipc: Disabling bearer <eth:syzkaller0>
[  247.599013][T10402] IPVS: using max 28 ests per chain, 67200 per kthread
[  247.621058][T10406] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1160'.
[  247.666643][ T7498] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.787445][T10413] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1162'.
[  247.825260][ T7513] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.830814][T10413] xt_socket: unknown flags 0xd0
[  247.840819][ T7498] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.903979][ T7498] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.031140][T10418] gtp0: entered promiscuous mode
[  248.056261][T10424] openvswitch: netlink: IPv4 tun info is not correct
[  248.066907][T10418] gtp0: entered allmulticast mode
[  248.413049][T10440] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1173'.
[  248.511327][T10442] 
[  248.513717][T10442] ======================================================
[  248.520761][T10442] WARNING: possible circular locking dependency detected
[  248.527859][T10442] syzkaller #0 Not tainted
[  248.532300][T10442] ------------------------------------------------------
[  248.539343][T10442] syz.4.1174/10442 is trying to acquire lock:
[  248.545418][T10442] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[  248.554585][T10442] 
[  248.554585][T10442] but task is already holding lock:
[  248.561952][T10442] ffff88814d238870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  248.571200][T10442] 
[  248.571200][T10442] which lock already depends on the new lock.
[  248.571200][T10442] 
[  248.581609][T10442] 
[  248.581609][T10442] the existing dependency chain (in reverse order) is:
[  248.590628][T10442] 
[  248.590628][T10442] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  248.598634][T10442]        lock_acquire+0x120/0x360
[  248.603678][T10442]        _raw_spin_lock_bh+0x36/0x50
[  248.608975][T10442]        nr_rt_ioctl+0x193/0xd50
[  248.613921][T10442]        sock_do_ioctl+0xd9/0x300
[  248.618952][T10442]        sock_ioctl+0x576/0x790
[  248.623810][T10442]        __se_sys_ioctl+0xfc/0x170
[  248.628948][T10442]        do_syscall_64+0xfa/0x3b0
[  248.633984][T10442]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.640401][T10442] 
[  248.640401][T10442] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  248.648279][T10442]        lock_acquire+0x120/0x360
[  248.653332][T10442]        _raw_spin_lock_bh+0x36/0x50
[  248.658645][T10442]        nr_rt_device_down+0xa9/0x720
[  248.664033][T10442]        nr_device_event+0x137/0x150
[  248.669331][T10442]        notifier_call_chain+0x1b3/0x3e0
[  248.674979][T10442]        __dev_notify_flags+0x18d/0x2e0
[  248.680543][T10442]        netif_change_flags+0xe8/0x1a0
[  248.686010][T10442]        dev_change_flags+0x130/0x260
[  248.691398][T10442]        dev_ioctl+0x7b4/0x1150
[  248.696267][T10442]        sock_do_ioctl+0x22c/0x300
[  248.701392][T10442]        sock_ioctl+0x576/0x790
[  248.706259][T10442]        __se_sys_ioctl+0xfc/0x170
[  248.711380][T10442]        do_syscall_64+0xfa/0x3b0
[  248.716423][T10442]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.722847][T10442] 
[  248.722847][T10442] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  248.730768][T10442]        validate_chain+0xb9b/0x2140
[  248.736064][T10442]        __lock_acquire+0xab9/0xd20
[  248.741283][T10442]        lock_acquire+0x120/0x360
[  248.746324][T10442]        _raw_spin_lock_bh+0x36/0x50
[  248.751622][T10442]        nr_rt_ioctl+0x390/0xd50
[  248.756572][T10442]        sock_do_ioctl+0xd9/0x300
[  248.761606][T10442]        sock_ioctl+0x576/0x790
[  248.766467][T10442]        __se_sys_ioctl+0xfc/0x170
[  248.771591][T10442]        do_syscall_64+0xfa/0x3b0
[  248.776639][T10442]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.783062][T10442] 
[  248.783062][T10442] other info that might help us debug this:
[  248.783062][T10442] 
[  248.793295][T10442] Chain exists of:
[  248.793295][T10442]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  248.793295][T10442] 
[  248.807131][T10442]  Possible unsafe locking scenario:
[  248.807131][T10442] 
[  248.814588][T10442]        CPU0                    CPU1
[  248.819955][T10442]        ----                    ----
[  248.825328][T10442]   lock(&nr_node->node_lock);
[  248.830115][T10442]                                lock(nr_node_list_lock);
[  248.837236][T10442]                                lock(&nr_node->node_lock);
[  248.844529][T10442]   lock(nr_neigh_list_lock);
[  248.849218][T10442] 
[  248.849218][T10442]  *** DEADLOCK ***
[  248.849218][T10442] 
[  248.857367][T10442] 2 locks held by syz.4.1174/10442:
[  248.862566][T10442]  #0: ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[  248.872111][T10442]  #1: ffff88814d238870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  248.881793][T10442] 
[  248.881793][T10442] stack backtrace:
[  248.887692][T10442] CPU: 1 UID: 0 PID: 10442 Comm: syz.4.1174 Not tainted syzkaller #0 PREEMPT(full) 
[  248.887715][T10442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  248.887742][T10442] Call Trace:
[  248.887749][T10442]  <TASK>
[  248.887758][T10442]  dump_stack_lvl+0x189/0x250
[  248.887786][T10442]  ? __pfx_dump_stack_lvl+0x10/0x10
[  248.887807][T10442]  ? __pfx__printk+0x10/0x10
[  248.887830][T10442]  ? stack_trace_save+0x9c/0xe0
[  248.887859][T10442]  print_circular_bug+0x2ee/0x310
[  248.887880][T10442]  check_noncircular+0x134/0x160
[  248.887902][T10442]  validate_chain+0xb9b/0x2140
[  248.887931][T10442]  __lock_acquire+0xab9/0xd20
[  248.887959][T10442]  ? nr_rt_ioctl+0x390/0xd50
[  248.887978][T10442]  lock_acquire+0x120/0x360
[  248.888003][T10442]  ? nr_rt_ioctl+0x390/0xd50
[  248.888025][T10442]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  248.888048][T10442]  ? nr_rt_ioctl+0x390/0xd50
[  248.888067][T10442]  _raw_spin_lock_bh+0x36/0x50
[  248.888094][T10442]  ? nr_rt_ioctl+0x390/0xd50
[  248.888113][T10442]  nr_rt_ioctl+0x390/0xd50
[  248.888138][T10442]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  248.888164][T10442]  ? apparmor_capable+0x137/0x1b0
[  248.888189][T10442]  ? capable+0x89/0xe0
[  248.888206][T10442]  ? nr_ioctl+0x1b1/0x3b0
[  248.888222][T10442]  sock_do_ioctl+0xd9/0x300
[  248.888246][T10442]  ? __pfx_sock_do_ioctl+0x10/0x10
[  248.888265][T10442]  ? __lock_acquire+0xab9/0xd20
[  248.888298][T10442]  sock_ioctl+0x576/0x790
[  248.888318][T10442]  ? __pfx_sock_ioctl+0x10/0x10
[  248.888338][T10442]  ? __fget_files+0x2a/0x420
[  248.888364][T10442]  ? __fget_files+0x3a0/0x420
[  248.888389][T10442]  ? __fget_files+0x2a/0x420
[  248.888419][T10442]  ? bpf_lsm_file_ioctl+0x9/0x20
[  248.888443][T10442]  ? __pfx_sock_ioctl+0x10/0x10
[  248.888466][T10442]  __se_sys_ioctl+0xfc/0x170
[  248.888493][T10442]  do_syscall_64+0xfa/0x3b0
[  248.888523][T10442]  ? lockdep_hardirqs_on+0x9c/0x150
[  248.888550][T10442]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.888572][T10442]  ? clear_bhb_loop+0x60/0xb0
[  248.888595][T10442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.888616][T10442] RIP: 0033:0x7fb7a8d8ebe9
[  248.888635][T10442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  248.888652][T10442] RSP: 002b:00007fb7a9c14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  248.888674][T10442] RAX: ffffffffffffffda RBX: 00007fb7a8fb5fa0 RCX: 00007fb7a8d8ebe9
[  248.888689][T10442] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 000000000000000c
[  248.888702][T10442] RBP: 00007fb7a8e11e19 R08: 0000000000000000 R09: 0000000000000000
[  248.888715][T10442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  248.888727][T10442] R13: 00007fb7a8fb6038 R14: 00007fb7a8fb5fa0 R15: 00007ffccc17d768
[  248.888752][T10442]  </TASK>
[  249.186162][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'.
[  249.230477][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'.
[  255.948574][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!