last executing test programs:

3m28.753389968s ago: executing program 0 (id=3235):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x6, 0xd24})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

3m28.208739832s ago: executing program 0 (id=3242):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x0, 0x2}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0)
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r5, 0x8)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = accept4(r5, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0x4}, &(0x7f0000000180)=0x8)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x200})
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x0, 0x2}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) (async)
socket(0x10, 0x803, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) (async)
socket$inet(0xa, 0x801, 0x84) (async)
connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r5, 0x8) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async)
accept4(r5, 0x0, 0x0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0x4}, &(0x7f0000000180)=0x8) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x200}) (async)

3m27.922304809s ago: executing program 0 (id=3245):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_emit_ethernet(0x3e, 0x0, 0x0)
r1 = socket$phonet(0x23, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50005}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000480)={0x28, r6, 0x1, 0x70bd24, 0x25dfdc00, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x7f}]}]}, 0xfffffffffffffcb2}}, 0x4)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r8, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x4100}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x11}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c)
ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000000)=0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000040)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x310, 0xf0, 0xffffffff, 0xf0, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'batadv0\x00', 'veth0_to_batadv\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x3, @ipv6=@mcast2, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @icmp_id=0x6b, @icmp_id=0x65}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x36}, @ipv4=@multicast2, @gre_key=0x400, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, &(0x7f0000000100))

3m27.646294805s ago: executing program 0 (id=3247):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x9c, "92b1199faf16c3125926967a2d3871efc13b2114c5feb4ccacd3d1800df0895db8a164c5a569b856f3c8709a21c08fb39c7a1c9c4a2803b359e12f57f5c9dfd412c35f92a97de425b2b59cc1d8e69acbf8eadfd347a6f488b9c4aeee3441121921d7cc4821ba595bd2b2b13c1d907f33a138a6d4864eb3dea9dddcdfc47a560850b38a1ff5a5662f32540c3e2f428dbe91b69194702dae5e25da76ed"}, &(0x7f00000002c0)=0xc0)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000300)=0x1000008, 0x4)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
write$tun(r1, &(0x7f0000000540)={@void, @val={0x2, 0x0, 0x1, 0xfffd, 0x2, 0x2}, @ipv4=@icmp={{0x13, 0x4, 0x1, 0x34, 0x115, 0x64, 0x0, 0x8, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x44}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x6b, 0x3, 0xd, [{@empty, 0x432c}]}, @timestamp_addr={0x44, 0x24, 0x79, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffac9}, {@multicast1, 0x4a0}, {@rand_addr=0x64010101, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @end]}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x2, 0x0, {0x2f, 0x4, 0x2, 0x2, 0x1000, 0x65, 0x100, 0x7, 0x32, 0x3, @empty, @rand_addr=0x64010102, {[@generic={0x82, 0x5, "9a04b5"}, @cipso={0x86, 0x60, 0x3, [{0x5, 0xb, "2d2d6dcbd4d1125ebf"}, {0x7, 0x9, "d688c2987b726b"}, {0x6, 0x5, "1724ab"}, {0x0, 0x12, "38741989d5f8b721b7fb6c204cd23001"}, {0x7, 0xb, "0894a9dbe6be391665"}, {0x0, 0x4, "2bdc"}, {0x6, 0x11, "25243687ea37866bdb70ae2fdc2996"}, {0x7, 0xf, "cff0c0f7b3198f9c0855afcc49"}]}, @timestamp_addr={0x44, 0x3c, 0x40, 0x1, 0x4, [{@local, 0x8001}, {@multicast1, 0x4}, {@private=0xa010101, 0x8}, {@empty, 0x7fffffff}, {@empty, 0xb8d0}, {@local, 0x6}, {@local, 0x4}]}, @lsrr={0x83, 0x3, 0x18}, @noop]}}, "38edc67a22"}}}, 0x11f)
close(r3)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090)

3m27.175491625s ago: executing program 0 (id=3252):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$inet6(0xa, 0x3, 0x2)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000540)="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", 0x118)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x0, 'veth0_to_bridge\x00', {0x1}, 0x6})
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r3, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x20000000}}], 0x30}}], 0x1, 0x0) (async)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0xffffff15) (async)
r5 = socket$kcm(0x11, 0x2, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000001340)=@ll={0x11, 0xf7, r6, 0x1, 0x2}, 0x80, &(0x7f0000002540)}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x20040000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a30400000002800048024000180010b000100657874686472000014000280080003400000004a08000640000000011400000011000100"/124], 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) (async)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x18)
vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
epoll_create(0x3) (async)
sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0468"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000)

3m25.08234852s ago: executing program 0 (id=3254):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)

3m9.973374763s ago: executing program 32 (id=3254):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)

2m45.595166512s ago: executing program 3 (id=3573):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe, '\x00', r3, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x0, '\x00', r3, 0xffffffffffffffff, 0x4, 0x4}, 0x50)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x6558, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010)

2m45.053101682s ago: executing program 3 (id=3580):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000790438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000ff000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800090001"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000010}, 0x20008000)

2m44.791860909s ago: executing program 3 (id=3586):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x80000000, 0x80000001, 0x1, 0x5, 0xe438}, 0x14) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0}) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r11 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r14 = socket(0x2, 0x2, 0x1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r14, &(0x7f0000001280)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001340)=ANY=[@ANYBLOB='\b'], 0xffeb}}, 0x0)
r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="18600000000000000000001e0000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r1]}, 0x90)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r15, r13}, 0xc)
r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, r16, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_STATUS={0x5}]}, 0x1c}}, 0x0) (async)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x14, r16, 0x8, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
r17 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r17, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24)

2m44.449933605s ago: executing program 3 (id=3593):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800dd8d000020000000000002000000000000060000060006001500010000001800168014000100000000000000010000001000000011"], 0x3c}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x3a)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x44}}, 0x0) (async, rerun: 32)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32)
sendmsg$FOU_CMD_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac1414aa08000b00", @ANYBLOB="12"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) (async, rerun: 32)
sendmsg$FOU_CMD_GET(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x2c, r8, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IFINDEX={0x8, 0xb, r11}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4051}, 0x8041) (rerun: 32)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)

2m44.055007037s ago: executing program 3 (id=3598):
r0 = socket$netlink(0x10, 0x3, 0x7)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r4, @ANYBLOB="080002007f000001"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0xbd2ed8931adfd7d1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000050)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a000008001500", @ANYRES32=0x0, @ANYBLOB="06001200800a0000040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x400c010)

2m43.663042964s ago: executing program 3 (id=3601):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711052000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)

2m28.641926746s ago: executing program 33 (id=3601):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711052000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)

31.653948713s ago: executing program 4 (id=4625):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x200002b7, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)

31.468207581s ago: executing program 4 (id=4627):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmmsg(r1, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0}, 0xfffffff5}], 0x1, 0x20, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast})
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040065580000ffff"}}}}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
syz_emit_ethernet(0x22, &(0x7f00000013c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x14, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYRESOCT=r0], 0x44}}, 0x0)

30.323049003s ago: executing program 4 (id=4643):
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5c020000100013070000000000000000fc020000000000000000000000000000e000000100000000000000000000000000008000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000a00000000000000000000004c001200726663343130362863636d2d6165732d63652900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800100001f01020063626328626c6f776669736829000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b806000041e43befd33e63570bd44e58c29a3f5126f0f1f1d7d9e8a72d2fcab94e0525ea29cc0571bbeb54f45d51077d4b8cc1f699c38853761d8a7804735fd640fea80cdd9c265e742891f38635177ccb7ae4f3f2950095ae205f0ed5ced0d3f6bf971e1fc9f86a328eea63fe524fcbda67ef3dc242cad8bd2d6ade63ae9d53f08580e695c65920dece51a48262af0469e7181cffcd09e6ead7efc04ce702222c6542d1284e2277aa6e213851a4a922f0a3ed00224657a9a815b4ed21b20731a8b6de38fe556c65de5b7f84c055a242855762ffb07e2e2211123e00"], 0x25c}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095", 0x4a}, {&(0x7f0000000600)="e827749185fb5a1aaf6f700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e580000000000", 0xa6}], 0x3, 0x0, 0x0, 0x80}], 0x1, 0x810)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket(0x2b, 0x1, 0x1)
sendmsg$802154_raw(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f00000003c0)={&(0x7f0000000340)="b6b7061cc93c7b5c718743b712b76305ae435022441270b94190ef8c4582d1e432219f68725513a148b48dbe6fcbad515a504347ec477df6bc785f74b332d54ad5c0dcf16b3528a47b372e967bdfc061c7a1cbad4357ce5e66e03ccc2cd569c74676ab7bede09d24cde75ec7110f368c696299084e5445f612fe06de17a84f3d", 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x40000)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x5)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r7 = accept$inet6(r4, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r7, 0x8983, &(0x7f0000000100)={0x1, 'pim6reg\x00', {}, 0xfff9})
r9 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10, @ANYBLOB="0a0001"], 0x48}}, 0x0)
accept4(r9, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0xfffffffffffffffd, 0x800)

29.257604445s ago: executing program 4 (id=4658):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100), 0x12d) (async)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async, rerun: 64)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040084}, 0x4008) (rerun: 64)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4)
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000600)={0x2c4, r6, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa932}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5d6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1461b9d8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3c80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffc00e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x156e}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x92bb}]}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc900}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa65}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @remote, 0x8}}}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}]}]}, 0x2c4}}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
write$tun(r5, &(0x7f0000000000)={@void, @void, @eth={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @random="4fa231698311", @empty, @remote, @private=0xa010102}}}}}, 0x2a) (async, rerun: 64)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="1800020000000000200012800b0001006272696467650000100000800c002100ffffffffffffffff"], 0x40}}, 0x0) (rerun: 64)

29.055596602s ago: executing program 4 (id=4662):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x2c}}, 0x60040050)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x8, @void}, 0x10)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x6, 0x0, 0x2000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x94)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x4008092) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x4008092)

28.848723054s ago: executing program 4 (id=4665):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r1, 0x0, 0x0, 0x80000)
sendmmsg$alg(r3, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="7bb4d5eeb23ad3e978f65c1071d4f0af9f09", 0x12}, {&(0x7f0000000300)='x;', 0x2}], 0x2, 0x0, 0x0, 0x8001}], 0x1, 0x20048000)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="14ad07f098dad04f000000", @ANYRES16=0x0, @ANYBLOB="200029bd7000fbdbdf256d000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040801)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200090a000000000000000000000003000600000000000200000000000000000000000000000002000100140000000000000700000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105a000000000004000000020000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
r6 = socket$igmp(0x2, 0x3, 0x2)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000d, 0x2010, r6, 0xe0b82000)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000200)={0x0, 0x2000000, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128049000100626f6e64000000001c00028005000100040020000800206bed70968b37261b79f655a32316d62587aacd73e262e87b61a333d8c8366492f96cd8b96aa00a8ae5fbbbf2dd27b2af28969e"], 0x4c}}, 0x0)

13.734254518s ago: executing program 34 (id=4665):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r1, 0x0, 0x0, 0x80000)
sendmmsg$alg(r3, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="7bb4d5eeb23ad3e978f65c1071d4f0af9f09", 0x12}, {&(0x7f0000000300)='x;', 0x2}], 0x2, 0x0, 0x0, 0x8001}], 0x1, 0x20048000)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="14ad07f098dad04f000000", @ANYRES16=0x0, @ANYBLOB="200029bd7000fbdbdf256d000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040801)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200090a000000000000000000000003000600000000000200000000000000000000000000000002000100140000000000000700000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105a000000000004000000020000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
r6 = socket$igmp(0x2, 0x3, 0x2)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000d, 0x2010, r6, 0xe0b82000)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000200)={0x0, 0x2000000, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128049000100626f6e64000000001c00028005000100040020000800206bed70968b37261b79f655a32316d62587aacd73e262e87b61a333d8c8366492f96cd8b96aa00a8ae5fbbbf2dd27b2af28969e"], 0x4c}}, 0x0)

6.259085891s ago: executing program 6 (id=4842):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff9, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x84, 0x2, {{0xfffff92d, 0x2, 0x2, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0x16ee568d, 0x0, 0x8000}}, @TCA_NETEM_DELAY_DIST={0x3f, 0x2, "8c4a050322ba801fcf992f7894d51dee197d995bc109debd15da7ef397e6508db4d0bd6e53f963bda74bac49458e331702dc6cec3b16e1db5321aa"}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffe, 0x1, 0xfffffff7, 0xf8}}]}]}}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x200008c2}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet(0x2, 0x5, 0x6)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f0000000400)=0x100, 0x4)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x400}, @in6={0xa, 0x4e20, 0xa8f5, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}], 0x48)
sendto$packet(r2, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @random="000863ee0a3d"}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611074000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x20, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0xac}, 0x1, 0x0, 0x0, 0x44001}, 0x0)

5.23875654s ago: executing program 1 (id=4846):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x0, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x40000d0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0xff, @remote, 0xe32c}}}, &(0x7f0000000140)=0x84)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)

4.934847474s ago: executing program 2 (id=4847):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f40)=""/4089, 0x1a, 0xff9, 0x8}, 0x20)
sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000300)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xff}, 0x18, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40400)

4.780978309s ago: executing program 2 (id=4848):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={<r2=>0x0}, &(0x7f0000000500)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2, 0x9}, &(0x7f0000000080)=0x8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d63200"], 0x23c}}, 0x4004000)
ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, &(0x7f0000000200)={0x4, 0x400, 0x0, 0x0, 0x81, 0x8, 0x0, &(0x7f0000000180)=[{0x0, 0x1ff, 0x3}, {0x3, 0x1ff, 0xa}, {0xe, 0xfe, 0xffffffff}, {0xc, 0xfe, 0x7}, {0xd, 0x1ff, 0x6}, {0x0, 0x101, 0x79}, {0x6, 0x1ff, 0xff}, {0xf, 0xfe, 0x120}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000200f0ffffff18400000fcffffff000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="b40800000000000073114200000000008510000002000000b7000000000000ffff00c200000000009500081200000000d6bd6ae76aa9d66b7472845f603090fa419d07e02b22fa3dd22c7174b72197aff6254e20c12e857fcf1457804fbbc0d341185a96f43b3bda27db454bd46c1d1bee9a34354c2cc058c1a546baada53a2f2939144fa1f7d9b07c601906a5eba8a0a4516a812fcef7d73b96de1904e040a7"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={r2, 0x97, "91979fde3202a5a3f31ab8f78fd854c8c06510fa5c57282ab57e6602503fbb7f2d339fc320f63122df9a9ebf8b5d2aad71e175fcab87f6afff67cba85d4bb3e863177a07025a76e49e0c78ff8bb378f3c6c33ad7b5596a91f4cf4179ed437241b2c8e50b70bd12456f52198d7c0a277f6f45eec6337014b584434d380717dc4856e32d85718550d462cdc6c19a005e68dbac06c33c3ab4"}, &(0x7f00000000c0)=0x9f)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

4.038519747s ago: executing program 5 (id=4849):
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000300)={{<r0=>0xffffffffffffffff, &(0x7f0000000000)='!+\x00', 0x200, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x1]}, {0x0, 0x6, 0x8, 0x1}}, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x5}, 0x2, &(0x7f00000002c0)=[{0x1, 0x2, &(0x7f0000000100)='@\x00', &(0x7f0000000140)="5f168a460b2e4cb3cb94b96cbf78f5743bf02fbf6b562074d568e07cf409bcca0545ef395e1273c555ce33f2c56917ea757122de5317796ac544669b1a7f79a7ced6429025f277bff4879a03a3f662772cf1ec19f6f1276541c95872f3c63abd2f8ddef6396741abd150a8305aafd6600493f082f49e053b68f18dc709da4efcb45e814ef75619d063ed79dd5fbc8ef49c58770d5e69417ae6fffad8d9c6b08813", 0xa1, 0x1a}, {0x1, 0xb046, &(0x7f0000000200)='2{,\x00', &(0x7f0000000240)="05019139c32e2d1342b05e3178fa9c5790006b588b2ea47793ad1d1c36d173d0a09208166525eaac43e81ab9423832edd4597df99d1d1d48dfc71cc390eea4bae74c504a537f477f368fc87961f3dc4d73fd831d3c3ec244ff78363af9b4f177b62710", 0x63, 0x12}]})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40050}, 0x40800)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001640)={&(0x7f0000000480)="de72a1dbf9db92f361d9e86ca0e99a83125f", &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)="8673d89456396c33d5a8401b4da19b1517f47f047b24e8d0f0bd7592cc8a7aaf1f569a52f4cfdb00313483f0917758efa5fe760a5f6b28e68a0f34f617971a000c6166cd39f6c05642572b60ed8988b06b828e24b21f6d97a0180cde6682733c3dec82a1d50e8e15a784e83c9a4e6767cc2f822e368fe2f3704f2ed90a93752fba9a6b3898d84e48a7be3ee772cc6d5b18d10e6943c9667df271fce07b159d27f6f53b6d22c64325222a90a6ee91f83516b50c5b221ec36c389fe382e0b74bd69c715919ca583658d0e531550be2efc2ca4b9250d572e47de5fa", &(0x7f00000015c0)="f6d51f8dd77ec7e21648113ca1f7e675d0181caaa96e8d1a313bf1d823d83cf5785539c1381b789192605a789af9c41ed2501d06775ff28a4760d1759f01b30f14dc5844a5d3763de26693a24066a6ed7c60dab4b2471d4792d5176822c14bf96cc554a4047fc501b585f94a78891156d4260e9d64d8", 0x100, r0}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001940)={&(0x7f0000001680)="00cd6d9aa99667ef901a273bce193dddad2c27213c701abbc301b145ec06fdd99995e385a9135c061dd6268eec1366d5f0694fb300496d8cea601b793408dfdd146af98508", &(0x7f0000001700)=""/203, &(0x7f0000001800)="42af37739f109a9ca31cc8aec33670c052d946fb00dd050fbd83f262c960eeda9e16d24df617cc34dcee2170184fe268f8044547414c280b8ef51b8e4888a8300bf4e8cf3514fbd91aa56e6a58bd1bc6256b65db54b80009a936ad4e9b29b6b00895f746623698b1d261e664bd6c60ac8197e17bb69457f383c720eecc639b6ee7d228d84a89", &(0x7f00000018c0)="96efcda61eb19825647a61decea5b38a0afeba278c5f272d8c701fae9c3897580bf26500fcaeac8275f82fad97d60ee47d5ea0a5d5ca5105445cbbf02ed0bd2b0f3b63f16a40397ed6200d0cb9ae5e5ba52d029114b3a6af", 0x2, r0, 0x4}, 0x38)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000001980)={0x1, 0x1})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000019c0)={'wlan1\x00', <r1=>0x0})
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001a00)={r0, r0, 0x24, 0x0, @void}, 0x10)
ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000001a40)=0x1341)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ppoll(&(0x7f0000001a80)=[{r3, 0x4000}, {r0, 0x342a}], 0x2, &(0x7f0000001ac0)={0x77359400}, &(0x7f0000001b00), 0x8)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r0)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x60, r4, 0x220, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0xf}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x17}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x4000)
setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000001cc0)=0x1, 0x4)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000003040)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003000)={&(0x7f0000001d40)={0x1288, r4, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x78}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x1}, @device_a, @broadcast, @basic={{0x1, 0x0, 0x0, 0x0, 0x1}, {0x9}}}}, @NL80211_ATTR_FRAME={0x10da, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x4}, @device_b, @device_b, @initial, {0xd, 0x40}, @device_b}, @a_msdu=[{@device_b, @broadcast, 0x17, "cd02ec13cdd3fdd150f015e120b1052368901909ed5e5c"}, {@device_b, @broadcast, 0x1000, "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"}, {@device_b, @device_a, 0x48, "a3f9476d8565687257df41f595e92a4c2dc8a55bf74fcb1ab0827fa08bcd5f212489730a6a98327a6cf833e87d76c755ad914873d9dd00a62d0cd6e80fedc4228f61c70b269d2857"}, {@device_b, @device_a, 0x18, "a6542b3cba1a461474ecdc8fd3ed57f566893a6ab3f06221"}]}}, @NL80211_ATTR_FRAME={0x118, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4}, @from_mac, @device_a, @broadcast, {0x7, 0xc6}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0xa0, "d7e67edf8259a3d5b9b1d14e3f3d2bded35691ce502bbae4fe588af2a207faac6b3a8256467d04ade19af337bc83a513686697be2e5cc45a9d15432bf8317ad256d41a32a8606ead6959c7cd94afd288a640c6bcca8e00a8f6be5d773a135551aaee890c510c9e1a836ea385b42d04cb783105a72ad8d1ef2ae9f4e5d0202ded5d43bafef3d57794d007da7ac75df922c125385b79863ff266502faa65137569"}, {@device_b, @device_b, 0x38, "39d8d1d8c8ebb7018b4a4929ba22edca2b6d6ec2a260a63d05b216bef81c1fb9de32db4287d283158709f5720abd05262b13d2e01e74abee"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x1288}, 0x1, 0x0, 0x0, 0x48040}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000030c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000003180)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x28, r4, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x76}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x448a0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000031c0)={'vxcan1\x00', 0x200})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003200)={'veth1_to_bridge\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000003300)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3}, 0x20000800)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x2c, r7, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, 'r\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11)
ioctl$XFS_IOC_DIOINFO(r3, 0x800c581e, &(0x7f0000003480))
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000003580)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x18, 0x1410, 0x200, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
socket$igmp6(0xa, 0x3, 0x2)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000003680)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x24, r4, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x9a}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xfec2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000003880)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003840)={&(0x7f0000003700)={0x120, r4, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x38}}}}, [@NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x3, 0x6, 0x8, 0x6, 0xd, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8a17, 0x7, 0x6d7, 0x8, 0x6, 0xacd, 0x3, 0xf59f]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfff7, 0xff3b, 0x8000, 0x7ff, 0xff, 0x400, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x2, 0x1, 0x3, 0x1, 0x1, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x16, 0x12, 0x5, 0x24, 0x1b, 0x3, 0x24, 0x48, 0xaf, 0x6c, 0x1b, 0xc, 0xb, 0x16, 0x4, 0x0, 0x2, 0x16, 0x36, 0x5, 0x0, 0x16, 0x2c, 0x3]}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2dc9, 0x2, 0x9, 0x9, 0x0, 0x12, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x0, 0x7, 0x8001, 0x7, 0xf, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xffff, 0x7, 0x5000, 0x5, 0x4, 0x5, 0xfffa]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x8371, 0x4, 0x5, 0x5, 0x4, 0x8, 0x5]}}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x105}, 0x20000091)
ioctl$NILFS_IOCTL_SYNC(r3, 0x80086e8a, &(0x7f00000038c0))
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000039c0)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x24, r4, 0x401, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}]}, 0x24}}, 0x24040840)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000003d80)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003a80)={0x284, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x220, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'NLBL_MGMT\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'r\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@q\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'g\x8e\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'NLBL_MGMT\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xede3}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'r\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/:)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '+\x0f%]@#B$\x9a!{%[.)-'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x63}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}, @ETHTOOL_A_BITSET_MASK={0xce, 0x5, "5287e6db85b35646b0ada9c4641ca032802484957488da083f4417656b7e2e01cec3f461688596f0a1d3bff58f4981ed91277cf81f89e1140e45baff332d3a0ff50cf71937d54d9337d558cbb6a0694d385be80d1b5e8175aeabd2d115ebb0ce44a9f32fd15cbb5c641672c7386b581986e6b505d3c47ecf359d6f02a90f53142b91004996005cb991c8b2dee13cf071d83b4ee0317ac945ae63b51e2db2c99d2a03d469f8eb3a1512274de835fd3e40e209086d9dc6001ecf294ecbf7074cc06214ff2442b306448626"}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x1}, 0x4040040)

3.782021569s ago: executing program 6 (id=4850):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async)
r1 = accept4(r0, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) (async)
r2 = socket(0x1d, 0x2, 0x6)
sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x8001) (async)
getsockopt$nfc_llcp(r2, 0x6a, 0x4, 0x0, 0x200000af)

3.737144501s ago: executing program 2 (id=4851):
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async)
r0 = socket(0x5, 0x2, 0x9) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x4000000, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) (async)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0x45, 0x10}, 0xc) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0xa, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000475a2c6437d8d764897f0000184a00000000000000000000000000006b9dc0ff08000000852000000100000018370000010000000000000000000000a467f8ff040000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0xf, 0x53, &(0x7f0000000440)=""/83, 0x41000, 0x4, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x3, 0xf, 0x7f, 0x1}, 0x10, 0x22919, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)=[r4, r5], 0x0, 0x10, 0x4}, 0x94) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100dfd3c6faf79fb8740000010000000000", @ANYRES32=r8, @ANYBLOB="0c00990002000000210000000800c300741300000800c40009000000"], 0x38}}, 0x880) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r1, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000900), &(0x7f0000000c00), 0x8, 0xe1, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) (async)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

3.314831258s ago: executing program 1 (id=4852):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getlink={0x20, 0x12, 0x1, 0x70bd2d, 0x5dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x18020, 0x20}}, 0xfffffffffffffe09}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x72}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ae0ff1f0006d758e60803dc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
connect$unix(r1, 0x0, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r3, 0x29, 0x4e, 0x0, &(0x7f0000000bc0))
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getlink={0x20, 0x12, 0x1, 0x70bd2d, 0x5dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x18020, 0x20}}, 0xfffffffffffffe09}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x72}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ae0ff1f0006d758e60803dc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
connect$unix(r1, 0x0, 0x0) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
getsockopt$MRT6(r3, 0x29, 0x4e, 0x0, &(0x7f0000000bc0)) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0) (async)

3.308744426s ago: executing program 6 (id=4853):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000140)) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076"], 0xe8}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)

3.081574738s ago: executing program 2 (id=4854):
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
recvfrom(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78)

2.892400547s ago: executing program 5 (id=4855):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r2, &(0x7f0000000700)={0x2, 0x4e22, @remote}, 0x10)
getpeername(r2, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000100))
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x20, 0x809, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}}, 0x40}}, 0x0) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}}, 0x40}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000000000001c0000050000000001000000000000020100000000000000005f00"], 0x0, 0x37}, 0x20) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000000000001c0000050000000001000000000000020100000000000000005f00"], 0x0, 0x37}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40086602, &(0x7f0000000000)={0xfff})
ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8)
close(r0)

2.71302901s ago: executing program 1 (id=4856):
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x91, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev}}}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.402503653s ago: executing program 6 (id=4857):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x4000800)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001800)=@o_path={&(0x7f00000017c0)='./file0\x00', 0x0, 0x0, r0}, 0x18)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001840)={&(0x7f0000000080)="8ba6f2ccb887c246c0431be91004aced10b1a88f9e7649c7ceb3e433064510fe167a0829fada4be3399b44ad0c1591440df4a36d5202b7d0ecceaad37d52e3bd4b9b96052df1e60c35b092989ede7703e99b0470166fc21dee", &(0x7f0000000100)=""/197, &(0x7f00000006c0)="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", &(0x7f00000016c0)="7353392d00a738fcd40138e143735d46edf4d0a65a72c77e1961beff93f6b142aa5bedf899453fc820be71aa31ae13d3d19abc07fa69490ac7dd023c2fee59b1515fe15e16f860caa55f48512ebd69cd9757cd7225420421e22872c04cb8ffb669bc9b0c5f1de96887671c94115d34ca559696dce61749b0aac71f20926669420542efbb161b78b61dcc26115e38e794be98e6c7ae66205e76f6c342e7a7795c6e4ffe54110b8b8aa0ad593c64d796723d1d9cc333dae4d4cc19bf4d22d96316c249ad8cd1", 0xce7e, r1}, 0x38)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x11, 0x0, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.12669949s ago: executing program 1 (id=4858):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432})
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5d, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
connect$rds(r3, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10)
getsockname$inet(r3, 0x0, &(0x7f0000000140))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

1.7375057s ago: executing program 5 (id=4859):
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x30}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x30}}, 0x0) (async)

1.581835293s ago: executing program 5 (id=4860):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001800)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2c8d0}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000000)={'erspan0\x00', <r5=>0x0, 0x700, 0x40, 0x3ff, 0x6, {{0x12, 0x4, 0x1, 0x19, 0x48, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast1, @empty, {[@end, @rr={0x7, 0x27, 0xfe, [@local, @dev={0xac, 0x14, 0x14, 0x1b}, @remote, @rand_addr=0x64010102, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop]}}}}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r5, 0x25, 0x18, @val=@netfilter={0x2, 0x0, 0x400, 0x1}}, 0x20) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r5, 0x25, 0x18, @val=@netfilter={0x2, 0x0, 0x400, 0x1}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, '\x00', r5, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, '\x00', r5, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

886.90756ms ago: executing program 5 (id=4861):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

851.001276ms ago: executing program 6 (id=4862):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r3, 0x1, 0x70bd2a, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x37c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x34}}, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, &(0x7f00000000c0), 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e00010000000000000000000710"], 0x1c}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})

786.753829ms ago: executing program 1 (id=4863):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080001400000000008000240000000010900010073937a30000000000900020073797a32000000001400000011000100000000000000000028dd0000"], 0x7c}}, 0x0)

606.850796ms ago: executing program 2 (id=4864):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000700)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x12, 0x2, 0x1, 0x106}})
syz_emit_ethernet(0x4c, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6001010000161101fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000ffb00afe4e703cdc9bfe6329aa94b882056df8659f4e3a4b9753cbff9484be4dd4928b3f411534c687a537f0516741fd7d4bffe7f39b670256b04d9815cd"], 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}, {0x0, [0x5f, 0x2e, 0x0, 0x30]}}, 0x0, 0x36}, 0x28) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x505, 0x0, 0x0, {0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}}, 0x0) (async, rerun: 32)
r3 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32)
r4 = socket(0x40000000015, 0x5, 0x0) (rerun: 32)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 32)
recvmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/48, 0x30}, 0x400000}], 0x1, 0x20010060, 0x0) (async, rerun: 32)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f580000000c0a0101000000000000000001001b000900020073797a32000000002c0003802800008008000340000000021c000b80360001800e000100636f6e6e6c696d69740c0000040002800900010073797a3000"], 0xdc}}, 0x0) (async, rerun: 64)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64)
pselect6(0x40, &(0x7f0000000200)={0x200000, 0x3, 0x3, 0xfffffffffffffffa, 0x9, 0x80000001, 0x400, 0x9}, &(0x7f0000000240)={0x7, 0x3, 0x2, 0x9, 0x1ff, 0x8000, 0x2, 0x8}, &(0x7f00000004c0)={0xffffffff, 0x1, 0xfffffffffabf4f7d, 0x9, 0x5, 0x5, 0x7, 0x3}, &(0x7f0000000500)={0x77359400}, &(0x7f0000000580)={&(0x7f0000000540)={[0x401]}, 0x8}) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x8) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="020026bd7000fedbdf252e00000008000300", @ANYRES32=r8, @ANYBLOB="04009300050019010400000004004600040005011e001f0002001106000000000000000800030011000000000804000000080000"], 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x40) (async, rerun: 64)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async, rerun: 64)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bde390741f5301c0dd867000fcdbdf251a00090006002100620000"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
syz_emit_ethernet(0x22, &(0x7f0000000680)={@remote, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@can={0xc, {{0x3, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "8102145097dfff5a"}}}}, &(0x7f00000006c0)={0x1, 0x3, [0x79a, 0xf51, 0xb1b, 0xa79]})

313.088849ms ago: executing program 5 (id=4865):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514240cc008001900030002000600090000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r2}, 0x38)
r3 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_int(r3, 0x0, 0x17, &(0x7f00000001c0), &(0x7f0000000040)=0x3)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlink={0x50, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_IFNAME={0x14}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x44010)

302.945831ms ago: executing program 6 (id=4866):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f)
close(0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c0000180037801300030071722834"], 0x2c}}, 0xc0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa3}}, &(0x7f0000000480)='GPL\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000800000040"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000448923e7000000000000", @ANYRES32=r6, @ANYRES8=r5, @ANYRESOCT=r3, @ANYBLOB="75d7d5d40dc030358cb572f5231837240eb93f2d6983a2e251ffc141294a7ccd11afc802edd6f54ff6ee8d903bf270243fe2d96d91fb5297aa6f29ea5b0cc8d3e7f1142b915fc42feb6cf39c699aa011cd05410c766b2f20bdbd0bc1736dee72cc6d3559742f30ba5eda7cc7405e8da58a1a358fa388b51bc8441f3769361c3b6819714f9d51e74e33c738b19c0897e93bd93b0b879b567fb42b7d2acdd705866fdd121617b02f4b332ba9c51a872b", @ANYRESHEX=r4, @ANYRESDEC=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="052200"/12, @ANYRES32=r5, @ANYBLOB="080026006c09000008000c001007492308000d00000000000800350000000000"], 0x3c}}, 0x0)

51.05872ms ago: executing program 2 (id=4867):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d8132da, 0xc574450d1af1b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x9}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x80)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x5, 0x400, 0x9, 0x81, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1, 0xb, 0x16, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004)
r7 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r3, &(0x7f0000000140)={0x2c, 0xc, r6, 0x0, r7}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000e810000100000000000000000000f61e6ad7968e605a52c37f00000a20000000000a01240000000000000000010000000900010073797a30000000004c000000030a010100000000000000000100656f000008000b41000000001400048008000240004a4a9a7a7020b19d0000000900010073797a3000000000100008800c0001400000000000000000140000001000010000000000000000000000821176ae1370323e3e98b721f669f9a68b291bd4124b8d3f8b9cb2ac8a240eced96f0b1982bad3d22e51dbed727400b9400d4567652b5aaffa7eaf980494743ef3d00600a4e73fb6ee45e026f8940e3daff5a48257ff38ea3d347aca6c52b585fa4e6a0945f7427e2cb3fc8ee8ce5a769edcf223b2e1a6f284249fc4c13357d0ff19123ad0b2e49e4f609c031acdd72067e2bbfc1996a0d36f03d0ab1cb980db8a889e2fbd5cc661733cc10377f3924cdb332da8e2fc89736c76a56693d403b825c964c11445c6618a0521"], 0x94}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100008018150000", @ANYRES32, @ANYBLOB="0000000000a5000000b7080000000000007b8af8ff00000000bfa2000000000000f8ffffffb703000008000000b70400000000000085000000450000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000000000000060000009500"/136], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delvlan={0x24, 0x71, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x42, 0x2}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
r11 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), r11)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r12=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010000000000fddbdf2500000000", @ANYRES32=r12, @ANYBLOB="4000000010800000280012800e0001006970366772657461700000001400028006000e"], 0x48}}, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0xc, 0xff, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="180000007e00000000000000ffffffff18120000", @ANYRES32=r0, @ANYBLOB="00000000000001b7030000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd39)

0s ago: executing program 1 (id=4868):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
read(r1, &(0x7f0000000040)=""/20, 0x14)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @private2}, @in6={0xa, 0x4e23, 0x0, @ipv4}], 0x38)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000005fdffffff1000320003000000000000000000eeff0f003300000000000000000000000000fc024000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ec0000eafadfec00210001000000000000000000ac1ee100000000002000000000000000403403f438bd9e2800000000000000000000000000c57e4d1abe830f3face8ef", @ANYRES32=0x0, @ANYBLOB="d8a1cff68f8a4a1691f84ecf2b326d261bb7a32a3f1e082bdc730c0bbacb84cbeee50fac005d93f2afe4b4155657ea1e04d0132a4b187dfefe7f93c7473bf47de4408daec46c6967cd4faf9f28d5de9fbf1bde869e09f8416bc068d5daca3925b50eb9dccc628a5d3f389d60875b5336feb1430fb8340309a5ccb23240bb3414e5b14cef8b23c0ada318883159c1fb661d541ab71c43c19b2cbbf31d5c", @ANYBLOB="00000000000000009c0011", @ANYBLOB="79c0b3ef4d05fd7df035acd363a2107039281d5a608e957d77b1df588bbed36b859dc8ae7a170202c0a3f9c391a66362360049f966ec2eff284735fdd9a35517b7c0701485e389aaa2b1a31cff", @ANYRES64], 0xec}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
read(r1, &(0x7f0000000040)=""/20, 0x14) (async)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @private2}, @in6={0xa, 0x4e23, 0x0, @ipv4}], 0x38) (async)
socket$key(0xf, 0x3, 0x2) (async)
sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000005fdffffff1000320003000000000000000000eeff0f003300000000000000000000000000fc024000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ec0000eafadfec00210001000000000000000000ac1ee100000000002000000000000000403403f438bd9e2800000000000000000000000000c57e4d1abe830f3face8ef", @ANYRES32=0x0, @ANYBLOB="d8a1cff68f8a4a1691f84ecf2b326d261bb7a32a3f1e082bdc730c0bbacb84cbeee50fac005d93f2afe4b4155657ea1e04d0132a4b187dfefe7f93c7473bf47de4408daec46c6967cd4faf9f28d5de9fbf1bde869e09f8416bc068d5daca3925b50eb9dccc628a5d3f389d60875b5336feb1430fb8340309a5ccb23240bb3414e5b14cef8b23c0ada318883159c1fb661d541ab71c43c19b2cbbf31d5c", @ANYBLOB="00000000000000009c0011", @ANYBLOB="79c0b3ef4d05fd7df035acd363a2107039281d5a608e957d77b1df588bbed36b859dc8ae7a170202c0a3f9c391a66362360049f966ec2eff284735fdd9a35517b7c0701485e389aaa2b1a31cff", @ANYRES64], 0xec}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async)

kernel console output (not intermixed with test programs):

0 RCX: 00007f4e4bb9ce59
[  411.061922][T18148] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  411.061933][T18148] RBP: 00007f4e4bc32d6f R08: 0000000000000004 R09: 0000000000000000
[  411.061950][T18148] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  411.061962][T18148] R13: 00007f4e4be16038 R14: 00007f4e4be15fa0 R15: 00007ffc20b0caf8
[  411.061994][T18148]  </TASK>
[  411.094738][T18148] Mem-Info:
[  411.347518][T18148] active_anon:6447 inactive_anon:0 isolated_anon:0
[  411.347518][T18148]  active_file:3209 inactive_file:40077 isolated_file:0
[  411.347518][T18148]  unevictable:768 dirty:71 writeback:25
[  411.347518][T18148]  slab_reclaimable:11263 slab_unreclaimable:107280
[  411.347518][T18148]  mapped:29474 shmem:1443 pagetables:3576
[  411.347518][T18148]  sec_pagetables:0 bounce:0
[  411.347518][T18148]  kernel_misc_reclaimable:0
[  411.347518][T18148]  free:1311163 free_pcp:9925 free_cma:0
[  411.401079][T18147] syzkaller0: entered promiscuous mode
[  411.420559][T18147] syzkaller0: entered allmulticast mode
[  411.430354][T18148] Node 0 active_anon:25988kB inactive_anon:0kB active_file:12836kB inactive_file:160108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117896kB dirty:280kB writeback:0kB shmem:4236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14424kB pagetables:13932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  411.469945][T17722] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  411.505657][T17722] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  411.518546][T17722] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  411.536248][T17722] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  411.538923][T18148] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  411.620810][T17722] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  411.635902][T18148] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  411.663615][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3187'.
[  411.682091][T17722] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  411.697790][T18148] lowmem_reserve[]: 0 2492 2493 2493 2493
[  411.720718][T18148] Node 0 DMA32 free:1296968kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25288kB inactive_anon:0kB active_file:12836kB inactive_file:160108kB unevictable:1536kB writepending:280kB zspages:0kB present:3129332kB managed:2552620kB mlocked:0kB bounce:0kB free_pcp:40924kB local_pcp:20164kB free_cma:0kB
[  411.754992][T18148] lowmem_reserve[]: 0 0 0 0 0
[  411.759964][T18148] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  411.796740][T18148] lowmem_reserve[]: 0 0 0 0 0
[  411.802683][T18148] Node 1 Normal free:3932548kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  411.838845][T18148] lowmem_reserve[]: 0 0 0 0 0
[  411.843635][T18148] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  411.858278][T18171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3187'.
[  411.869520][T18171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3187'.
[  411.880646][T18171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3187'.
[  411.891090][T18148] Node 0 DMA32: 7828*4kB (UM) 4975*8kB (UM) 2204*16kB (UME) 128*32kB (UME) 595*64kB (UME) 788*128kB (UME) 540*256kB (UM) 326*512kB (UME) 237*1024kB (UM) 56*2048kB (UME) 94*4096kB (UM) = 1296968kB
[  411.912174][T18148] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  411.931878][T18148] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 7*16kB (UM) 8*32kB (UM) 8*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 958*4096kB (M) = 3932548kB
[  411.950541][T18148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  411.961670][T18148] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  411.977816][T18148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  411.989590][T18174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3188'.
[  411.994081][T18148] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  412.011935][T18148] 44578 total pagecache pages
[  412.080943][T18148] 0 pages in swap cache
[  412.105592][T18148] Free swap  = 124996kB
[  412.125297][T18148] Total swap = 124996kB
[  412.131875][T18148] 2097051 pages RAM
[  412.136366][T18148] 0 pages HighMem/MovableOnly
[  412.158986][T18148] 427114 pages reserved
[  412.169438][T18148] 0 pages cma reserved
[  412.270488][T18196] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3190'.
[  412.393587][T17722] 8021q: adding VLAN 0 to HW filter on device bond0
[  412.509138][T18207] batadv3: entered allmulticast mode
[  412.610065][T17722] 8021q: adding VLAN 0 to HW filter on device team0
[  412.652667][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.659899][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state
[  412.708488][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.715719][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state
[  412.974050][T18235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3200'.
[  413.182729][T18244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3202'.
[  413.480990][T18257] bond1: Unable to set up delay as MII monitoring is disabled
[  413.501104][T18257] bond1 (unregistering): Released all slaves
[  413.627714][T18264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  413.891327][ T5742] IPVS: starting estimator thread 0...
[  413.903522][T18280] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3207'.
[  414.007486][T18282] IPVS: using max 34 ests per chain, 81600 per kthread
[  414.219514][T18294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3210'.
[  414.271695][T18294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3210'.
[  414.308084][T18294] netlink: 'syz.3.3210': attribute type 11 has an invalid length.
[  414.400160][T18300] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  414.409029][T18298] syzkaller1: entered promiscuous mode
[  414.430300][T18298] syzkaller1: entered allmulticast mode
[  415.251688][T18311] : left promiscuous mode
[  415.366381][T17722] 8021q: adding VLAN 0 to HW filter on device batadv0
[  415.535532][T18330] syzkaller0: entered promiscuous mode
[  415.549810][T18330] syzkaller0: entered allmulticast mode
[  415.579332][T17722] veth0_vlan: entered promiscuous mode
[  415.598476][T17722] veth1_vlan: entered promiscuous mode
[  415.681139][T17722] veth0_macvtap: entered promiscuous mode
[  415.718739][T17722] veth1_macvtap: entered promiscuous mode
[  415.811623][T17722] batman_adv: batadv0: Interface activated: batadv_slave_0
[  415.838903][T17722] batman_adv: batadv0: Interface activated: batadv_slave_1
[  415.877147][ T7297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.901147][ T7297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.921444][ T7297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.940275][ T7297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.560931][T18359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3223'.
[  416.577607][T18360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3223'.
[  416.772790][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3221'.
[  416.820318][T18353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3221'.
[  416.837340][T18353] openvswitch: netlink: Flow actions attr not present in new flow.
[  416.866973][ T7311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.879116][ T7311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.987338][ T7304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  417.006349][ T7304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  417.264393][T18384] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  417.291453][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3232'.
[  417.352843][T18389] netlink: 'syz.1.3232': attribute type 1 has an invalid length.
[  417.355514][T18395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3233'.
[  417.589485][T18404] batadv0: entered promiscuous mode
[  417.635764][T18404] macsec1: entered promiscuous mode
[  417.662536][T18404] 8021q: adding VLAN 0 to HW filter on device macsec1
[  417.672969][T18408] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3238'.
[  417.712657][T18404] batadv0: left promiscuous mode
[  417.719542][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  417.733830][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  417.747998][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  417.756800][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  417.772733][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  418.105738][T18422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  418.297472][T18433] syzkaller1: entered promiscuous mode
[  418.310988][T18435] netlink: 'syz.4.3244': attribute type 1 has an invalid length.
[  418.319462][T18433] syzkaller1: entered allmulticast mode
[  418.330025][T18435] netlink: 'syz.4.3244': attribute type 2 has an invalid length.
[  418.448803][T18440] netlink: 'syz.4.3246': attribute type 29 has an invalid length.
[  418.485819][T18409] lo speed is unknown, defaulting to 1000
[  418.601515][T18440] syzkaller0: entered promiscuous mode
[  418.614316][T18440] syzkaller0: entered allmulticast mode
[  419.080842][T18460] __nla_validate_parse: 6 callbacks suppressed
[  419.080860][T18460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3252'.
[  419.848703][ T5633] Bluetooth: hci3: command tx timeout
[  421.029753][T18409] hsr0 speed is unknown, defaulting to 1000
[  421.295790][T18486] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3256'.
[  421.715579][T18409] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.723063][T18409] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.732587][T18409] bridge_slave_0: entered allmulticast mode
[  421.742597][T18409] bridge_slave_0: entered promiscuous mode
[  421.753858][T18409] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.762145][T18409] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.774890][T18409] bridge_slave_1: entered allmulticast mode
[  421.782847][T18409] bridge_slave_1: entered promiscuous mode
[  421.826864][T18409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  421.840734][T18409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  421.934187][ T5633] Bluetooth: hci3: command tx timeout
[  421.958776][T18409] team0: Port device team_slave_0 added
[  421.968097][T18409] team0: Port device team_slave_1 added
[  422.041026][T18409] batman_adv: batadv0: Adding interface: batadv_slave_0
[  422.060551][T18409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  422.124638][T18409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  422.172677][T18409] batman_adv: batadv0: Adding interface: batadv_slave_1
[  422.191491][T18409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  422.221936][T18409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  422.372459][T18409] hsr_slave_0: entered promiscuous mode
[  422.380513][T18409] hsr_slave_1: entered promiscuous mode
[  422.388513][T18409] debugfs: 'hsr0' already exists in 'hsr'
[  422.395622][T18409] Cannot create hsr debugfs directory
[  422.411171][T18522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3263'.
[  422.558995][T18520] netlink: 'syz.4.3263': attribute type 9 has an invalid length.
[  422.569750][T18526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3265'.
[  422.573678][T18527] gtp0: entered allmulticast mode
[  422.587613][T18527] team0: Device gtp0 is of different type
[  422.825257][T18534] netlink: 'syz.4.3269': attribute type 6 has an invalid length.
[  422.853537][T18409] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  422.865285][T18409] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.875848][T18409] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 40328 - 0
[  422.960235][T18409] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  422.984752][T18409] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.996187][T18409] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 40328 - 0
[  423.012461][T18534] syzkaller0: entered promiscuous mode
[  423.018631][T18534] syzkaller0: entered allmulticast mode
[  423.078905][T18409] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.089814][T18409] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.101426][T18409] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 40328 - 0
[  423.171154][T18540] netlink: 'syz.4.3270': attribute type 1 has an invalid length.
[  423.205463][T18540] 8021q: adding VLAN 0 to HW filter on device bond17
[  423.220994][T18540] ipvlan0: entered allmulticast mode
[  423.226628][T18540] bond17: entered allmulticast mode
[  423.250730][T18409] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.261571][T18409] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.272801][T18409] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 40328 - 0
[  423.318488][T18540] bond17: (slave bridge10): making interface the new active one
[  423.326556][T18540] bridge10: entered allmulticast mode
[  423.332791][T18540] bond17: (slave bridge10): Enslaving as an active interface with an up link
[  423.710340][T18409] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  423.742538][T18409] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  423.756681][T18409] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  423.771586][T18409] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  423.775547][ T7302] nci: nci_rx_work: unknown MT 0x1
[  423.792905][T18409] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  423.815748][T18409] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  423.823670][T18559] netlink: 'syz.2.3275': attribute type 12 has an invalid length.
[  423.832769][T18409] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  423.851898][T18409] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  423.975623][T18572] syz0: rxe_newlink: already configured on lo
[  424.004103][ T5633] Bluetooth: hci3: command tx timeout
[  424.101974][T18575] netlink: 'syz.2.3278': attribute type 1 has an invalid length.
[  424.125905][T18575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3278'.
[  424.150003][T18581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3280'.
[  424.215251][T18409] 8021q: adding VLAN 0 to HW filter on device bond0
[  424.308606][T18409] 8021q: adding VLAN 0 to HW filter on device team0
[  424.362323][ T7297] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.369543][ T7297] bridge0: port 1(bridge_slave_0) entered forwarding state
[  424.432679][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.439890][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state
[  424.484685][T18587] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3283'.
[  425.037206][T18409] 8021q: adding VLAN 0 to HW filter on device batadv0
[  425.090561][T18409] veth0_vlan: entered promiscuous mode
[  425.102122][T18409] veth1_vlan: entered promiscuous mode
[  425.132047][T18409] veth0_macvtap: entered promiscuous mode
[  425.141786][T18409] veth1_macvtap: entered promiscuous mode
[  425.160905][T18409] batman_adv: batadv0: Interface activated: batadv_slave_0
[  425.179495][T18409] batman_adv: batadv0: Interface activated: batadv_slave_1
[  425.197007][ T1127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.208403][ T1127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.223140][ T1127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.232928][ T1127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.367983][T18594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  425.429886][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.459358][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.515503][ T7302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.534527][ T7302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.643328][T18627] netlink: 'syz.1.3289': attribute type 1 has an invalid length.
[  425.771805][T18632] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  425.827301][T18632] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  425.836920][T18635] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3234'.
[  425.856465][T18632] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  426.085224][ T5633] Bluetooth: hci3: command tx timeout
[  426.102439][T18639] xt_TPROXY: Can be used only with -p tcp or -p udp
[  426.179526][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  426.193375][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  426.205860][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  426.216831][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  426.226004][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  426.399237][T18650] xt_hashlimit: size too large, truncated to 1048576
[  426.467701][T18653] sctp: [Deprecated]: syz.3.3295 (pid 18653) Use of int in max_burst socket option.
[  426.467701][T18653] Use struct sctp_assoc_value instead
[  426.636137][T18653] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.685686][T18653] bridge_slave_0 (unregistering): left allmulticast mode
[  426.697051][T18653] bridge_slave_0 (unregistering): left promiscuous mode
[  426.706479][T18653] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.860591][T18640] lo speed is unknown, defaulting to 1000
[  426.990255][T18640] hsr0 speed is unknown, defaulting to 1000
[  427.419997][T18640] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.435223][T18640] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.463279][T18640] bridge_slave_0: entered allmulticast mode
[  427.511031][T18640] bridge_slave_0: entered promiscuous mode
[  427.567936][T18640] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.596192][T18640] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.627715][T18640] bridge_slave_1: entered allmulticast mode
[  427.658488][T18640] bridge_slave_1: entered promiscuous mode
[  427.789022][T18640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.821108][T18640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.851383][T18698] netlink: 'syz.3.3304': attribute type 1 has an invalid length.
[  427.881196][T18640] team0: Port device team_slave_0 added
[  427.891811][T18640] team0: Port device team_slave_1 added
[  427.900191][T18698] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3304'.
[  427.941784][T18640] batman_adv: batadv0: Adding interface: batadv_slave_0
[  427.949276][T18640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  427.978353][T18640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  427.999865][T18640] batman_adv: batadv0: Adding interface: batadv_slave_1
[  428.007630][T18640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  428.033909][T18640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  428.196308][T18640] hsr_slave_0: entered promiscuous mode
[  428.203777][T18640] hsr_slave_1: entered promiscuous mode
[  428.211896][T18640] debugfs: 'hsr0' already exists in 'hsr'
[  428.218351][T18640] Cannot create hsr debugfs directory
[  428.324189][ T5636] Bluetooth: hci1: command tx timeout
[  428.523620][T18640] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.548694][T18640] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.575345][T18640] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  428.692254][T18709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3308'.
[  428.719097][T18640] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.721901][T18709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3308'.
[  428.739102][T18640] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.761283][T18640] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  428.983498][T18640] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.997386][T18714] netlink: 'syz.3.3310': attribute type 8 has an invalid length.
[  429.005749][T18640] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.016969][T18640] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  429.183447][T18640] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.198582][T18640] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.211086][T18640] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  429.406727][T18640] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  429.418983][T18640] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  429.429011][T18640] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  429.439776][T18640] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  429.450040][T18640] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  429.461436][T18640] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  429.470007][T18640] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  429.480925][T18640] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  429.583649][T18640] 8021q: adding VLAN 0 to HW filter on device bond0
[  429.610990][T18640] 8021q: adding VLAN 0 to HW filter on device team0
[  429.632384][ T7297] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.639636][ T7297] bridge0: port 1(bridge_slave_0) entered forwarding state
[  429.659350][ T7297] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.666523][ T7297] bridge0: port 2(bridge_slave_1) entered forwarding state
[  430.149984][   T30] audit: type=1804 audit(1778797452.228:7): pid=18740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3314" name="/newroot/14/cgroup.controllers" dev="tmpfs" ino=88 res=1 errno=0
[  430.214544][   T30] audit: type=1800 audit(1778797452.228:8): pid=18740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3314" name="cgroup.controllers" dev="tmpfs" ino=88 res=0 errno=0
[  430.405198][ T5636] Bluetooth: hci1: command tx timeout
[  430.456628][T18640] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.683131][T18758] syzkaller1: entered promiscuous mode
[  430.694469][T18758] syzkaller1: entered allmulticast mode
[  430.762661][T18763] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3318'.
[  430.766824][T18750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  430.843640][T18640] veth0_vlan: entered promiscuous mode
[  430.943147][T18640] veth1_vlan: entered promiscuous mode
[  431.026988][T18640] veth0_macvtap: entered promiscuous mode
[  431.072178][T18640] veth1_macvtap: entered promiscuous mode
[  431.116892][T18640] batman_adv: batadv0: Interface activated: batadv_slave_0
[  431.161436][T18640] batman_adv: batadv0: Interface activated: batadv_slave_1
[  431.201440][ T7302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  431.221731][ T7302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  431.272611][ T7302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.296661][ T1105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.503284][ T7304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.530697][ T7304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.575365][T18781] wireguard: wg2: Could not create IPv6 socket
[  431.592467][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.601344][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.783128][T18785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3291'.
[  431.814673][T18785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3291'.
[  431.878976][ T1167] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  431.892610][ T1167] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  431.921912][ T1167] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  431.950124][ T1167] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  432.362464][T18807] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  432.439224][T18806] lo speed is unknown, defaulting to 1000
[  432.484361][ T5636] Bluetooth: hci1: command tx timeout
[  432.746857][T18815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3333'.
[  432.787305][T18815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3333'.
[  432.788421][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3333'.
[  432.876320][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3333'.
[  432.906697][T18821] netlink: 'syz.3.3335': attribute type 58 has an invalid length.
[  432.921368][T18821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3335'.
[  432.944412][T18818] bond1: option lp_interval: invalid value (0)
[  432.952273][T18818] bond1: option lp_interval: allowed values 1 - 2147483647
[  432.979271][T18818] bond1 (unregistering): Released all slaves
[  433.033600][T18806] hsr0 speed is unknown, defaulting to 1000
[  433.226256][T18823] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3336'.
[  433.693335][T18842] syzkaller0: entered promiscuous mode
[  433.704602][T18842] syzkaller0: entered allmulticast mode
[  433.830978][T18847] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3343'.
[  434.138112][T18860] macvlan2: entered promiscuous mode
[  434.153789][T18860] macvlan2: entered allmulticast mode
[  434.565603][ T5636] Bluetooth: hci1: command tx timeout
[  434.635031][T18893] No such timeout policy "syz1"
[  434.653458][T18893] syzkaller1: entered promiscuous mode
[  434.659657][T18893] syzkaller1: entered allmulticast mode
[  434.670431][T18893] xt_CT: You must specify a L4 protocol and not use inversions on it
[  435.176773][T18918] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.193595][T18918] netlink: 'syz.2.3361': attribute type 10 has an invalid length.
[  435.217987][T18918] team0: Port device dummy0 added
[  435.990809][T18957] netlink: 'syz.2.3377': attribute type 1 has an invalid length.
[  436.001524][T18959] netlink: 'syz.1.3378': attribute type 1 has an invalid length.
[  436.046785][T18959] 8021q: adding VLAN 0 to HW filter on device bond1
[  436.102489][T18957] bond1: entered promiscuous mode
[  436.108769][T18957] 8021q: adding VLAN 0 to HW filter on device bond1
[  436.131921][T18963] bond1: (slave gretap1): making interface the new active one
[  436.159007][T18963] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  436.202717][T18974] __nla_validate_parse: 3 callbacks suppressed
[  436.202737][T18974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3379'.
[  436.241216][T18969] 8021q: adding VLAN 0 to HW filter on device bond1
[  436.265081][T18969] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  436.300635][T18969] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  436.359382][T18981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3379'.
[  436.370853][T18969] bond1: (slave ip6gre1): making interface the new active one
[  436.386850][T18969] ip6gre1: entered promiscuous mode
[  436.395619][T18969] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  436.462271][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  436.486029][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  436.503050][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  436.511237][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  436.519582][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  436.922737][T18988] lo speed is unknown, defaulting to 1000
[  437.228539][T18988] hsr0 speed is unknown, defaulting to 1000
[  437.238715][T19016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3386'.
[  437.260032][T19016] team1: entered promiscuous mode
[  437.265341][T19016] team1: entered allmulticast mode
[  437.516471][T18988] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.523627][T18988] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.532130][T18988] bridge_slave_0: entered allmulticast mode
[  437.542228][T18988] bridge_slave_0: entered promiscuous mode
[  437.550587][T18988] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.558608][T18988] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.566410][T18988] bridge_slave_1: entered allmulticast mode
[  437.573425][T18988] bridge_slave_1: entered promiscuous mode
[  437.601921][T18988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  437.617226][T18988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  437.646587][T18988] team0: Port device team_slave_0 added
[  437.654653][T18988] team0: Port device team_slave_1 added
[  437.681334][T18988] batman_adv: batadv0: Adding interface: batadv_slave_0
[  437.688926][T18988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  437.715813][T18988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  437.728860][T18988] batman_adv: batadv0: Adding interface: batadv_slave_1
[  437.736484][T18988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  437.763388][T18988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  437.808864][T18988] hsr_slave_0: entered promiscuous mode
[  437.815617][T18988] hsr_slave_1: entered promiscuous mode
[  437.821810][T18988] debugfs: 'hsr0' already exists in 'hsr'
[  437.828417][T18988] Cannot create hsr debugfs directory
[  438.565127][ T5636] Bluetooth: hci4: command tx timeout
[  439.062559][T18965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  439.072807][T18980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3381'.
[  439.212410][T18988] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  439.302925][T18988] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  439.322436][T18988] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  439.368842][T18988] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  439.370940][T19033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3392'.
[  439.389040][T18988] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  439.407172][T18988] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  439.417103][T18988] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  439.441516][T18988] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  439.689917][T18988] 8021q: adding VLAN 0 to HW filter on device bond0
[  439.729526][T19055] netlink: 'syz.2.3395': attribute type 1 has an invalid length.
[  439.742657][T18988] 8021q: adding VLAN 0 to HW filter on device team0
[  439.769806][T19055] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  439.777783][ T7304] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.793194][ T7304] bridge0: port 1(bridge_slave_0) entered forwarding state
[  439.833154][ T7297] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.840405][ T7297] bridge0: port 2(bridge_slave_1) entered forwarding state
[  439.867263][T19061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3397'.
[  439.930248][ T1317] aoe: packet could not be sent on lo.  consider increasing tx_queue_len
[  440.132763][T19066] bridge2: entered promiscuous mode
[  440.145557][T19066] bridge2: entered allmulticast mode
[  440.182618][T19076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3400'.
[  440.403767][T19086] C: renamed from lo (while UP)
[  440.436545][T19086] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  440.645643][ T5636] Bluetooth: hci4: command tx timeout
[  440.819676][T19110] Cannot find add_set index 1 as target
[  441.157448][T18988] 8021q: adding VLAN 0 to HW filter on device batadv0
[  441.181468][T19123] netlink: 'syz.3.3413': attribute type 30 has an invalid length.
[  441.270300][T19129] netlink: zone id is out of range
[  441.282851][T19129] netlink: zone id is out of range
[  441.302658][T19129] netlink: zone id is out of range
[  441.309263][T19129] netlink: zone id is out of range
[  441.338415][T19129] netlink: zone id is out of range
[  441.364649][T19129] netlink: del zone limit has 4 unknown bytes
[  441.469934][T19139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3417'.
[  441.856276][T18988] veth0_vlan: entered promiscuous mode
[  441.883174][T18988] veth1_vlan: entered promiscuous mode
[  441.937717][T18988] veth0_macvtap: entered promiscuous mode
[  441.958761][T18988] veth1_macvtap: entered promiscuous mode
[  441.991429][T18988] batman_adv: batadv0: Interface activated: batadv_slave_0
[  442.012591][T18988] batman_adv: batadv0: Interface activated: batadv_slave_1
[  442.042125][ T7302] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.053181][ T7302] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.070487][ T7304] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.081136][ T7304] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.724098][ T5636] Bluetooth: hci4: command tx timeout
[  444.805151][ T5636] Bluetooth: hci4: command tx timeout
[  444.830908][T19153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  444.997071][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.024919][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.099642][ T7298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.132637][T19194] netlink: 'syz.2.3430': attribute type 9 has an invalid length.
[  445.137248][ T7298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.166944][T19195] netlink: 'syz.3.3429': attribute type 11 has an invalid length.
[  445.240861][T19198] netlink: 'syz.1.3431': attribute type 1 has an invalid length.
[  445.302659][T19194] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3430'.
[  445.379870][T19198] 8021q: adding VLAN 0 to HW filter on device bond2
[  445.414978][T19196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3430'.
[  445.569713][T19215] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3380'.
[  445.708653][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3434'.
[  445.746304][T19225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3434'.
[  445.763429][T19222] bond1: (slave bond_slave_1): Device is not our slave
[  445.780273][T19222] bond1: option active_slave: invalid value (bond_slave_1)
[  445.803850][T19222] bond1 (unregistering): Released all slaves
[  446.522259][T19270] openvswitch: netlink: Key type 30 is not supported
[  446.555349][T19270] netlink: 'syz.3.3447': attribute type 4 has an invalid length.
[  446.608858][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3447'.
[  446.840630][T19277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3450'.
[  446.871816][T19277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3450'.
[  446.911112][T19277] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  446.941642][T19279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3450'.
[  446.952716][T19279] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  447.050940][T19284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  447.179637][T19282] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  447.215551][T19303] netlink: 'syz.2.3455': attribute type 4 has an invalid length.
[  447.241815][T19282] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  447.311205][T19289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3452'.
[  447.336681][T19282] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  447.372411][T19307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3457'.
[  447.453350][T19282] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  447.548014][T19313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3457'.
[  447.562186][T19307] 8021q: adding VLAN 0 to HW filter on device bond3
[  447.667196][T19311] 8021q: adding VLAN 0 to HW filter on device bond4
[  447.678563][T19311] bond3: (slave bond4): Enslaving as an active interface with an up link
[  447.757991][T19316] netlink: 'syz.2.3461': attribute type 1 has an invalid length.
[  447.780555][T19313] bond3 (unregistering): (slave bond4): Releasing backup interface
[  447.806892][T19313] bond3 (unregistering): Released all slaves
[  447.838305][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3461'.
[  447.862758][T19333] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3463'.
[  447.908375][ T7311] smbdirect: ib_dev[syz2] removed
[  448.175384][T19338] netlink: 'syz.4.3465': attribute type 1 has an invalid length.
[  448.175563][T19342] veth1_macvtap: left promiscuous mode
[  448.296171][T19338] 8021q: adding VLAN 0 to HW filter on device bond2
[  448.344160][T19347] bond2: (slave gretap1): making interface the new active one
[  448.352639][T19347] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  450.587109][T19329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  450.742245][T19360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3471'.
[  450.799943][T19363] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  450.849018][T19364] Bluetooth: MGMT ver 1.23
[  450.910450][T19372] sctp: [Deprecated]: syz.5.3475 (pid 19372) Use of int in max_burst socket option deprecated.
[  450.910450][T19372] Use struct sctp_assoc_value instead
[  451.037357][T19384] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20003
[  451.072946][T19386] netlink: 'syz.2.3477': attribute type 1 has an invalid length.
[  451.137420][T19386] 8021q: adding VLAN 0 to HW filter on device bond2
[  451.145845][T19389] ip_vti0: entered promiscuous mode
[  451.396677][T19395] 8021q: adding VLAN 0 to HW filter on device bond3
[  451.497602][T19397] ipvlan2: entered allmulticast mode
[  451.509379][T19397] bond3: entered allmulticast mode
[  451.549440][T19404] bond3: (slave ipip0): refused to change device type
[  451.572863][T19400] syzkaller0: entered promiscuous mode
[  451.591794][T19400] syzkaller0: entered allmulticast mode
[  451.990521][T19432] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  452.019861][T19419] __nla_validate_parse: 1 callbacks suppressed
[  452.019878][T19419] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3486'.
[  452.249463][T19439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3493'.
[  452.366383][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3492'.
[  452.561427][T19447] syzkaller0: entered promiscuous mode
[  452.583618][T19447] syzkaller0: entered allmulticast mode
[  452.594861][T19455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3497'.
[  452.608227][T19452] team0: No ports can be present during mode change
[  452.968074][T19473] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  452.989597][T19473] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  453.003560][T19473] Cannot find set identified by id 0 to match
[  453.320637][ T5822] hid-generic 0005:16C0:5505.0001: item fetching failed at offset 0/1
[  453.341729][ T5822] hid-generic 0005:16C0:5505.0001: probe with driver hid-generic failed with error -22
[  453.501774][T19494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3506'.
[  453.702831][T19504] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3509'.
[  456.093719][T19542] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3514'.
[  456.303405][T19549] syzkaller0: entered promiscuous mode
[  456.350489][T19549] syzkaller0: entered allmulticast mode
[  456.447630][T19562] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3521'.
[  456.487159][T19562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3521'.
[  456.901400][T19583] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3524'.
[  457.111247][T19596] netlink: 'syz.2.3525': attribute type 39 has an invalid length.
[  457.192764][T19597] netlink: 'syz.1.3527': attribute type 4 has an invalid length.
[  457.222740][T19598] netlink: 'syz.1.3527': attribute type 4 has an invalid length.
[  457.416632][T19603] __nla_validate_parse: 3 callbacks suppressed
[  457.416651][T19603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3528'.
[  457.619943][T19610] can: request_module (can-proto-5) failed.
[  457.641909][T19619] netlink: 'syz.1.3532': attribute type 83 has an invalid length.
[  457.669000][T19615] bond1: entered allmulticast mode
[  457.682587][T19620] netlink: 'syz.1.3532': attribute type 83 has an invalid length.
[  458.088802][T19636] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.3535'.
[  458.263604][T19647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3538'.
[  458.285646][T19647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3538'.
[  458.543446][T19652] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3540'.
[  458.545387][T19656] netlink: 'syz.1.3542': attribute type 1 has an invalid length.
[  458.613173][T19656] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  459.028999][T19679] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3547'.
[  459.172407][T19686] bond3: option arp_all_targets: invalid value (18446744073709551613)
[  459.196494][T19686] bond3 (unregistering): Released all slaves
[  459.425209][T19700] IPv6: NLM_F_CREATE should be specified when creating new route
[  459.855054][T19721] netlink: 'syz.1.3558': attribute type 1 has an invalid length.
[  460.040450][T19737] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3562'.
[  460.073486][T19737] vlan0: entered promiscuous mode
[  460.194538][T19745] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3565'.
[  460.328030][T19754] netlink: 'syz.4.3568': attribute type 4 has an invalid length.
[  460.381605][T19754] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3568'.
[  460.431806][T19761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3572'.
[  460.455724][T19763] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  460.600585][T19754] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  460.650868][T19763] batadv1: entered allmulticast mode
[  460.776391][T19779] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  460.802340][T19779] sctp: [Deprecated]: syz.4.3576 (pid 19779) Use of int in max_burst socket option.
[  460.802340][T19779] Use struct sctp_assoc_value instead
[  460.961083][T19789] netlink: 'syz.2.3577': attribute type 4 has an invalid length.
[  461.113510][T19792] ipt_ECN: cannot use operation on non-tcp rule
[  462.102724][T19848] bond6: entered promiscuous mode
[  462.152094][T19848] bond6: entered allmulticast mode
[  462.186601][T19848] 8021q: adding VLAN 0 to HW filter on device bond6
[  462.230572][T19858] syzkaller1: entered promiscuous mode
[  462.245393][T19858] syzkaller1: entered allmulticast mode
[  462.297130][T19871] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.313689][T19866] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  462.367775][T19861] syzkaller0: entered promiscuous mode
[  462.378565][T19861] syzkaller0: entered allmulticast mode
[  462.388701][T19876] veth1_macvtap: entered promiscuous mode
[  462.419697][T19867] syzkaller1: left promiscuous mode
[  462.436584][T19867] syzkaller1: left allmulticast mode
[  462.592003][T19890] __nla_validate_parse: 5 callbacks suppressed
[  462.592020][T19890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3600'.
[  462.761512][T19894] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  463.590067][T19924] xt_HMARK: proto mask must be zero with L3 mode
[  463.660120][T19927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3613'.
[  465.558522][T19924] bond0: option ad_select: unable to set because the bond device is up
[  465.576490][T19927] bridge0: port 3(batadv1) entered blocking state
[  465.583334][T19927] bridge0: port 3(batadv1) entered disabled state
[  465.590466][T19927] batadv1: entered allmulticast mode
[  465.619369][T19927] batadv1: entered promiscuous mode
[  465.770444][T19932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  465.875557][T19939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3618'.
[  466.075174][ T7298] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  466.085347][ T7298] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  466.136256][T19953] netlink: 'syz.5.3623': attribute type 3 has an invalid length.
[  466.142400][T19950] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.3621'.
[  466.408457][T19962] H: renamed from dummy0 (while UP)
[  466.872265][T19990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3633'.
[  466.922514][T19987] vlan2: entered promiscuous mode
[  466.932995][T19987] bridge0: entered promiscuous mode
[  466.941905][T19990] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3633'.
[  467.097664][T19998] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3637'.
[  467.148595][T19998] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3637'.
[  467.531626][T20024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3645'.
[  467.542957][T20022] 8021q: VLANs not supported on ip_vti0
[  467.662614][T20031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3647'.
[  467.805560][T20033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3647'.
[  467.825693][T20031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3647'.
[  467.843357][T20033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3647'.
[  467.868455][T20031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3647'.
[  467.878730][T20041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3649'.
[  467.892186][T20033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3647'.
[  467.902658][T20031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3647'.
[  467.915246][T20033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3647'.
[  467.934226][T20031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3647'.
[  468.070116][T20048] xt_cgroup: invalid path, errno=-2
[  468.201281][T20054] openvswitch: netlink: Missing key (keys=40, expected=80)
[  468.229695][T20054] openvswitch: netlink: Message has 6 unknown bytes.
[  468.461010][T20066] veth1_macvtap: entered allmulticast mode
[  470.030166][T20142] xt_TPROXY: Can be used only with -p tcp or -p udp
[  470.251764][T20152] netlink: ct family unspecified
[  470.358956][ T7311] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x3e
[  470.419109][T20153] netlink: 'syz.4.3679': attribute type 1 has an invalid length.
[  471.106833][T20190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  471.546154][T20217] tipc: Started in network mode
[  471.561395][T20217] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  471.588773][T20217] tipc: New replicast peer: fe80:0000:0040:0000:0000:0000:0000:00bb
[  471.620251][T20217] tipc: Enabled bearer <udp:s>, priority 10
[  472.744502][ T5735] tipc: Node number set to 1
[  472.996686][T20284] veth0_to_hsr: mtu less than device minimum
[  473.016902][T20284] netlink: 'syz.2.3707': attribute type 1 has an invalid length.
[  473.057028][T20284] 8021q: adding VLAN 0 to HW filter on device bond3
[  473.196584][T20297] __nla_validate_parse: 133 callbacks suppressed
[  473.196599][T20297] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3710'.
[  473.888073][T20326] syzkaller1: entered promiscuous mode
[  473.904803][T20326] syzkaller1: entered allmulticast mode
[  474.022265][T20326] gre0: entered promiscuous mode
[  474.055921][T20326] gre0: entered allmulticast mode
[  474.499975][T20348] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3717'.
[  474.526966][T20348] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3717'.
[  474.890530][T20364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3723'.
[  475.043427][T20370] netem: change failed
[  475.111058][T20374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3726'.
[  475.178780][T20375] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3726'.
[  475.252978][T20366] netlink: 'syz.4.3724': attribute type 3 has an invalid length.
[  475.278648][T20366] netlink: 'syz.4.3724': attribute type 1 has an invalid length.
[  475.310214][T20366] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3724'.
[  475.319931][T20379] syzkaller0: entered promiscuous mode
[  475.319954][T20379] syzkaller0: entered allmulticast mode
[  475.338483][T20376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3724'.
[  475.406730][T20381] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3728'.
[  475.677949][T20391] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3731'.
[  475.810636][T20391] geneve2: entered promiscuous mode
[  475.817790][T20391] geneve2: entered allmulticast mode
[  476.323092][T20427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  476.791849][T20444] syzkaller1: entered promiscuous mode
[  476.800678][T20444] syzkaller1: entered allmulticast mode
[  476.867789][T20444] netlink: 'syz.5.3746': attribute type 8 has an invalid length.
[  477.122495][T20458] syzkaller0: entered promiscuous mode
[  477.128375][T20458] syzkaller0: entered allmulticast mode
[  477.137126][T20458] netlink: 'syz.4.3750': attribute type 12 has an invalid length.
[  477.723209][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  477.741047][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  477.757139][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  477.769307][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  477.778447][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  477.889366][T20475] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  478.800098][T20470] lo speed is unknown, defaulting to 1000
[  479.213375][T20538] openvswitch: netlink: IP tunnel dst address not specified
[  479.460145][T20470] hsr0 speed is unknown, defaulting to 1000
[  479.633270][T20555] __nla_validate_parse: 38 callbacks suppressed
[  479.633289][T20555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3777'.
[  479.635994][T20557] netlink: 248 bytes leftover after parsing attributes in process `syz.5.3778'.
[  479.753209][T20557] ipvlan2: entered allmulticast mode
[  479.781027][T20557] batadv_slave_1: entered allmulticast mode
[  479.812819][T20557] batman_adv: batadv0: Adding interface: ipvlan2
[  479.831506][T20557] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  479.845054][ T5636] Bluetooth: hci6: command tx timeout
[  479.891128][T20557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  479.905330][T20557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.920226][T20557] batman_adv: batadv0: Interface activated: ipvlan2
[  480.293545][T20584] netlink: 'syz.5.3784': attribute type 1 has an invalid length.
[  480.302243][T20584] netlink: 'syz.5.3784': attribute type 4 has an invalid length.
[  480.310585][T20584] netlink: 9491 bytes leftover after parsing attributes in process `syz.5.3784'.
[  480.407149][T20589] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3785'.
[  480.529544][T20593] netlink: 208 bytes leftover after parsing attributes in process `syz.5.3786'.
[  480.599508][T20593] netlink: 'syz.5.3786': attribute type 1 has an invalid length.
[  480.642552][T20593] netlink: 'syz.5.3786': attribute type 1 has an invalid length.
[  480.679811][T20599] netlink: 'syz.4.3787': attribute type 2 has an invalid length.
[  480.749506][T20470] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.757569][T20470] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.765202][T20470] bridge_slave_0: entered allmulticast mode
[  480.773279][T20470] bridge_slave_0: entered promiscuous mode
[  480.782874][T20470] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.791883][T20470] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.799471][T20470] bridge_slave_1: entered allmulticast mode
[  480.809359][T20470] bridge_slave_1: entered promiscuous mode
[  480.851720][T20470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  480.864908][T20470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  480.922355][T20603] netlink: 212324 bytes leftover after parsing attributes in process `syz.5.3788'.
[  481.000532][T20470] team0: Port device team_slave_0 added
[  481.024573][T20470] team0: Port device team_slave_1 added
[  481.141207][T20470] batman_adv: batadv0: Adding interface: batadv_slave_0
[  481.170112][T20470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  481.252877][T20613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3795'.
[  481.278227][T20470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  481.329371][T20618] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  481.337052][T20470] batman_adv: batadv0: Adding interface: batadv_slave_1
[  481.385407][T20470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  481.478753][T20470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  481.512959][T20632] sctp: [Deprecated]: syz.1.3796 (pid 20632) Use of int in maxseg socket option.
[  481.512959][T20632] Use struct sctp_assoc_value instead
[  481.526182][T20631] netlink: 8624 bytes leftover after parsing attributes in process `syz.2.3798'.
[  481.653323][T20632] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  481.776497][T20470] hsr_slave_0: entered promiscuous mode
[  481.795607][T20470] hsr_slave_1: entered promiscuous mode
[  481.818259][T20470] debugfs: 'hsr0' already exists in 'hsr'
[  481.831997][T20470] Cannot create hsr debugfs directory
[  481.927855][ T5636] Bluetooth: hci6: command tx timeout
[  482.354938][T20663] Cannot find del_set index 4 as target
[  482.422647][T20470] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  482.458566][T20470] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  482.485324][T20470] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  482.523582][T20470] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  482.556131][T20470] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  482.588006][T20470] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  482.596161][T20674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3809'.
[  482.606243][T20673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3809'.
[  482.617344][T20470] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  482.631328][T20671] netlink: 'syz.5.3810': attribute type 3 has an invalid length.
[  482.669161][T20470] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  482.701787][T20677] xt_hashlimit: size too large, truncated to 1048576
[  483.051564][T20470] 8021q: adding VLAN 0 to HW filter on device bond0
[  483.125908][T20470] 8021q: adding VLAN 0 to HW filter on device team0
[  483.156924][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.164137][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state
[  483.193569][ T7302] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.200765][ T7302] bridge0: port 2(bridge_slave_1) entered forwarding state
[  483.299408][T20702] IPv6: NLM_F_CREATE should be specified when creating new route
[  483.567252][T20718] netlink: 'syz.5.3821': attribute type 1 has an invalid length.
[  484.007068][ T5636] Bluetooth: hci6: command tx timeout
[  484.309688][T20470] 8021q: adding VLAN 0 to HW filter on device batadv0
[  484.660758][T20767] __nla_validate_parse: 2 callbacks suppressed
[  484.660774][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3829'.
[  484.691552][T20772] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3831'.
[  484.703000][T20766] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  484.814539][T20781] netlink: 'syz.4.3832': attribute type 49 has an invalid length.
[  484.829838][T20772] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  485.087235][T20795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3836'.
[  485.173680][T20470] veth0_vlan: entered promiscuous mode
[  485.240348][T20470] veth1_vlan: entered promiscuous mode
[  485.340775][T20470] veth0_macvtap: entered promiscuous mode
[  485.358569][T20470] veth1_macvtap: entered promiscuous mode
[  485.413469][T20470] batman_adv: batadv0: Interface activated: batadv_slave_0
[  485.443329][T20470] batman_adv: batadv0: Interface activated: batadv_slave_1
[  485.496706][ T7304] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  485.521016][ T7304] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  485.652467][ T7304] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  485.706914][ T7304] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  485.888147][T20802] netlink: 'syz.2.3838': attribute type 7 has an invalid length.
[  485.911906][T20804] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3839'.
[  485.968975][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.977367][T20804] netlink: 'syz.4.3839': attribute type 4 has an invalid length.
[  485.996749][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.070643][ T7297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.085056][ T5636] Bluetooth: hci6: command tx timeout
[  486.098939][T20810] xt_l2tp: v2 doesn't support IP mode
[  486.117474][ T7297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.214281][T20816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3843'.
[  486.267295][T20816] netlink: 'syz.4.3843': attribute type 7 has an invalid length.
[  486.589788][T20833] syzkaller1: entered promiscuous mode
[  486.622344][T20833] syzkaller1: entered allmulticast mode
[  486.781006][T20839] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  486.838790][T20858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  486.856432][T20858] batadv_slave_0: entered promiscuous mode
[  486.904269][T20859] netlink: 'syz.5.3853': attribute type 1 has an invalid length.
[  486.920984][T20859] netlink: 'syz.5.3853': attribute type 1 has an invalid length.
[  487.206535][T20874] netlink: set zone limit has 4 unknown bytes
[  487.597626][T20895] openvswitch: netlink: Flow key attr not present in new flow.
[  487.633819][T20891] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3863'.
[  487.709491][T20898] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3866'.
[  487.736997][T20899] netlink: 'syz.1.3865': attribute type 4 has an invalid length.
[  487.882844][T20899] netlink: 'syz.1.3865': attribute type 1 has an invalid length.
[  487.954656][T20899] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3865'.
[  488.101604][T20914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3871'.
[  488.111489][T20914] openvswitch: netlink: nsh attr 5 is out of range max 3
[  498.327536][ T5636] Bluetooth: hci5: command 0x0406 tx timeout
[  501.366067][ T1317] aoe: packet could not be sent on lo.  consider increasing tx_queue_len
[  508.878828][T20944] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.3879'.
[  509.016097][T20941] syzkaller0: entered promiscuous mode
[  509.040670][T20941] syzkaller0: entered allmulticast mode
[  509.079139][T20956] netlink: 'syz.1.3883': attribute type 1 has an invalid length.
[  509.744810][T20983] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3890'.
[  511.487381][T20956] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  511.653628][T20990] netlink: 'syz.2.3892': attribute type 1 has an invalid length.
[  511.745003][T20988] netlink: 'syz.2.3892': attribute type 1 has an invalid length.
[  511.765393][T20996] netlink: 'syz.5.3895': attribute type 10 has an invalid length.
[  511.787432][T20990] netlink: 'syz.2.3892': attribute type 11 has an invalid length.
[  511.796548][T20988] netlink: 'syz.2.3892': attribute type 11 has an invalid length.
[  511.815925][T20988] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3892'.
[  511.843360][T20997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3894'.
[  511.844708][T20990] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3892'.
[  511.888698][T20997] netlink: 50 bytes leftover after parsing attributes in process `syz.4.3894'.
[  511.925802][T21002] xt_hashlimit: size too large, truncated to 1048576
[  511.950931][T20997] netlink: 50 bytes leftover after parsing attributes in process `syz.4.3894'.
[  512.078349][T21005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3897'.
[  512.181033][T21005] 8021q: adding VLAN 0 to HW filter on device bond7
[  512.391207][T21018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3900'.
[  512.475579][T21018] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  512.490487][T21022] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3901'.
[  512.546611][T21027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  512.592774][T21027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  512.629503][T21027] bond0 (unregistering): Released all slaves
[  512.665620][T21030] IPVS: Error connecting to the multicast addr
[  512.799244][T21037] netlink: 'syz.2.3907': attribute type 5 has an invalid length.
[  512.938061][T21036] vet: renamed from veth0_vlan
[  513.618961][T21080] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  513.691571][T20985] Bluetooth: hci0: command 0x0c1a tx timeout
[  513.723825][T21080] batman_adv: batadv0: Removing interface: batadv_slave_1
[  514.508702][T21123] xt_hashlimit: invalid interval
[  514.537436][T21118] __nla_validate_parse: 7 callbacks suppressed
[  514.537454][T21118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3929'.
[  514.640898][ T5290] vet: left promiscuous mode
[  514.673529][ T5290] vet: entered promiscuous mode
[  515.127198][T21151] xt_hashlimit: invalid interval
[  515.608774][T21167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3936'.
[  515.736888][T21184] netlink: 'syz.5.3939': attribute type 4 has an invalid length.
[  515.973341][T21195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3942'.
[  515.974520][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3942'.
[  516.052395][T21195] openvswitch: netlink: Missing key (keys=40, expected=80)
[  516.103458][T21194] openvswitch: netlink: Missing key (keys=40, expected=80)
[  516.232022][T21208] netlink: 'syz.1.3946': attribute type 39 has an invalid length.
[  516.240507][T21210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3947'.
[  516.242296][T21210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3947'.
[  516.312432][T21208] hsr_slave_0: left promiscuous mode
[  516.337995][T21208] hsr_slave_1: left promiscuous mode
[  516.423634][T21217] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3949'.
[  516.470786][T21220] SET target dimension over the limit!
[  516.475631][T21222] SET target dimension over the limit!
[  516.579010][T21220] netlink: 'syz.4.3950': attribute type 11 has an invalid length.
[  516.599265][T21220] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3950'.
[  517.012482][T21248] xt_cgroup: invalid path, errno=-2
[  517.422210][T21268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3963'.
[  517.456941][T21268] xt_hashlimit: size too large, truncated to 1048576
[  517.464763][T21267] xt_hashlimit: size too large, truncated to 1048576
[  518.029766][T21294] openvswitch: netlink: Duplicate or invalid key (type 0).
[  518.059225][T21294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  518.335078][T21314] openvswitch: netlink: Key type 305 is out of range max 32
[  518.418325][T21316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3979'.
[  518.768489][T21334] IPv6: NLM_F_CREATE should be specified when creating new route
[  518.833473][T21342] netlink: 'syz.4.3987': attribute type 1 has an invalid length.
[  518.872187][T21344] netlink: 'syz.4.3987': attribute type 1 has an invalid length.
[  519.365379][T21376] lo: entered promiscuous mode
[  519.387769][T21376] netlink: 'syz.6.3994': attribute type 2 has an invalid length.
[  519.420676][T21376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  519.544865][T21389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3996'.
[  519.571461][T21389] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3996'.
[  519.616458][T21388] dvmrp0: entered allmulticast mode
[  519.712863][T21391] bond0: (slave gre0): refused to change device type
[  519.745856][T21391] netlink: 'syz.2.3997': attribute type 49 has an invalid length.
[  519.976788][T21397] bond3: Unable to set down delay as MII monitoring is disabled
[  520.037230][T21397] bond3 (unregistering): Released all slaves
[  520.399082][ T5735] IPVS: starting estimator thread 0...
[  520.504743][T21440] IPVS: using max 31 ests per chain, 74400 per kthread
[  520.685127][T21453] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  520.697426][T21426] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.901077][T21460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4014'.
[  521.129444][T21426] batadv_slave_0: left promiscuous mode
[  521.169829][T21426] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  521.318536][T21426] vet: left promiscuous mode
[  521.526997][T21426] vlan2: left promiscuous mode
[  521.537566][T21426] bridge0: left promiscuous mode
[  521.543315][T21426] batman_adv: batadv0: Interface deactivated: ipvlan2
[  521.559832][T21426] ipvlan2: left allmulticast mode
[  521.566339][T21426] batadv_slave_1: left allmulticast mode
[  521.667930][T21431] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4007'.
[  521.679533][T21433] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4007'.
[  521.792626][ T1167] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  521.860635][ T1167] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  521.921694][ T1167] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  521.931799][T21468] netlink: 'syz.5.4016': attribute type 3 has an invalid length.
[  521.931819][T21468] netlink: 'syz.5.4016': attribute type 1 has an invalid length.
[  521.931833][T21468] netlink: 212 bytes leftover after parsing attributes in process `syz.5.4016'.
[  521.931993][T21468] NCSI netlink: No device for ifindex 813332851
[  522.032580][ T1167] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  522.085583][T21480] netlink: 'syz.6.4020': attribute type 1 has an invalid length.
[  522.258348][T21495] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4020'.
[  522.292276][T21498] xt_hl: Unknown TTL match mode: 255
[  522.299478][T21480] bond0 (unregistering): Released all slaves
[  522.792187][T21522] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  522.811814][T21525] netlink: 'syz.5.4026': attribute type 4 has an invalid length.
[  522.820098][T21526] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  523.466297][T21559] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4037'.
[  523.699746][T21566] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4040'.
[  523.733660][T21566] IPv6: NLM_F_CREATE should be specified when creating new route
[  523.826715][T21573] sock: sock_timestamping_bind_phc: sock not bind to device
[  523.910032][T21576] netlink: 212328 bytes leftover after parsing attributes in process `syz.6.4043'.
[  523.924309][T20985] Bluetooth: hci2: command 0x0406 tx timeout
[  523.981900][T21576] netlink: Unknown conntrack attr (type=2304, max=9)
[  524.292221][T21601] netlink: 'syz.6.4048': attribute type 5 has an invalid length.
[  524.632381][T21617] __nla_validate_parse: 1 callbacks suppressed
[  524.632400][T21617] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4052'.
[  524.798826][T21625] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4054'.
[  524.838012][T21628] gtp0: entered allmulticast mode
[  524.883793][T21628] team0: Device gtp0 is of different type
[  524.942962][T21625] bridge_slave_1: left allmulticast mode
[  524.965092][T21625] bridge_slave_1: left promiscuous mode
[  524.990422][T21625] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.031126][T21625] bridge_slave_0: left allmulticast mode
[  525.053232][T21625] bridge_slave_0: left promiscuous mode
[  525.077815][T21625] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.209352][T21650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4061'.
[  525.488595][T21660] tipc: Enabled bearer <ib:vxcan1>, priority 4
[  525.568234][T21663] syzkaller1: entered promiscuous mode
[  525.607204][T21663] syzkaller1: entered allmulticast mode
[  525.827184][T21681] syzkaller0: entered promiscuous mode
[  525.853544][T21681] syzkaller0: entered allmulticast mode
[  525.953232][T21694] netlink: 'syz.1.4073': attribute type 3 has an invalid length.
[  525.976348][T21694] netlink: 'syz.1.4073': attribute type 1 has an invalid length.
[  525.997524][T21681] veth0: entered promiscuous mode
[  526.024771][T21680] veth0: left promiscuous mode
[  526.350708][T21713] pim6reg: entered allmulticast mode
[  526.398404][T21720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4083'.
[  526.419637][T21715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4081'.
[  526.472438][T21723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4081'.
[  527.138101][T21752] xt_CT: You must specify a L4 protocol and not use inversions on it
[  527.272662][T21761] netlink: 'syz.6.4091': attribute type 11 has an invalid length.
[  527.297254][T21761] netlink: 'syz.6.4091': attribute type 11 has an invalid length.
[  527.317281][T21761] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4091'.
[  527.320774][T21752] tc action pedit 'at' offset 9 out of bounds
[  527.333317][T21752] tc action pedit 'at' offset 9 out of bounds
[  527.339408][T21752] tc action pedit 'at' offset 9 out of bounds
[  527.345482][T21752] tc action pedit 'at' offset 9 out of bounds
[  527.351553][T21752] tc action pedit 'at' offset 9 out of bounds
[  527.357631][T21752] tc action pedit 'at' offset 9 out of bounds
[  527.363685][T21752] tc action pedit 'at' offset 9 out of bounds
[  527.369855][T21752] tc action pedit 'at' offset 9 out of bounds
[  527.375924][T21752] tc action pedit 'at' offset 9 out of bounds
[  527.381972][T21752] tc action pedit 'at' offset 9 out of bounds
[  527.388053][T21752] TC_ACT_REPEAT abuse ?
[  527.683810][T21775] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  528.454654][T21829] netlink: 232 bytes leftover after parsing attributes in process `syz.5.4109'.
[  528.960937][T21848] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  528.998410][T21848] bond8 (unregistering): Released all slaves
[  529.034599][T21858] bond_slave_1: entered allmulticast mode
[  529.308164][T21858] lo speed is unknown, defaulting to 1000
[  529.311078][T21872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4118'.
[  529.331299][T21870] syzkaller0: entered promiscuous mode
[  529.353768][T21872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4118'.
[  529.354617][T21870] syzkaller0: entered allmulticast mode
[  529.796191][T21888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4122'.
[  530.045529][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880627bd000: rx timeout, send abort
[  530.278592][T21858] hsr0 speed is unknown, defaulting to 1000
[  530.880499][T21926] xt_hashlimit: size too large, truncated to 1048576
[  531.147294][T21943] netlink: 'syz.5.4131': attribute type 14 has an invalid length.
[  531.230315][T21943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4131'.
[  531.393453][ T7311] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  531.421468][ T7311] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  531.497969][ T7311] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  531.543249][ T7311] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  531.657683][T21963] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  531.931279][T21982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4137'.
[  531.933011][T21985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4138'.
[  531.995719][T21986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4137'.
[  532.188321][T21997] x_tables: unsorted underflow at hook 3
[  532.316743][T22005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4143'.
[  532.549831][T22016] netlink: 'syz.2.4146': attribute type 1 has an invalid length.
[  532.611007][T22024] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4147'.
[  532.659269][T22029] netlink: 'syz.5.4145': attribute type 1 has an invalid length.
[  532.686718][T22029] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4145'.
[  532.699102][T22028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4146'.
[  532.781167][T22016] 8021q: adding VLAN 0 to HW filter on device bond4
[  532.870259][T22017] ipvlan2: entered allmulticast mode
[  532.887657][T22017] bond4: entered allmulticast mode
[  533.436831][T22071] netlink: 'syz.6.4157': attribute type 1 has an invalid length.
[  533.473845][T22071] netlink: 'syz.6.4157': attribute type 7 has an invalid length.
[  533.484545][T22071] netlink: 'syz.6.4157': attribute type 8 has an invalid length.
[  533.519781][T22071] netlink: 208 bytes leftover after parsing attributes in process `syz.6.4157'.
[  533.585643][T22071] NCSI netlink: No device for ifindex 65584
[  533.637996][T22071] tipc: Started in network mode
[  533.650747][T22071] tipc: Node identity ac1414aa, cluster identity 4711
[  533.678849][T22071] tipc: Enabled bearer <udp:s>, priority 10
[  533.723234][T22081] netlink: set zone limit has 4 unknown bytes
[  534.498256][T22121] nbd: couldn't find a device at index 1048580
[  534.664252][  T808] tipc: Node number set to 2886997162
[  534.800686][T22128] netlink: 'syz.5.4173': attribute type 1 has an invalid length.
[  534.955245][T22133] syzkaller0: entered promiscuous mode
[  534.986542][T22133] syzkaller0: entered allmulticast mode
[  535.050858][T22131] __nla_validate_parse: 1 callbacks suppressed
[  535.050878][T22131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4174'.
[  535.203367][T22152] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  535.244636][T22154] netlink: 'syz.5.4178': attribute type 1 has an invalid length.
[  535.277613][T22154] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4178'.
[  535.301952][T22154] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4178'.
[  535.321379][T22154] netlink: 658 bytes leftover after parsing attributes in process `syz.5.4178'.
[  535.661824][T22172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4182'.
[  535.726063][T22180] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4184'.
[  536.168965][T22200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  536.724652][T22232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4199'.
[  536.832471][T22236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4199'.
[  536.857951][T22232] 8021q: adding VLAN 0 to HW filter on device bond8
[  536.876395][T22247] netlink: 124 bytes leftover after parsing attributes in process `syz.6.4203'.
[  536.970115][T22236] macvlan0: entered promiscuous mode
[  537.041249][T22236] macvlan0: entered allmulticast mode
[  537.312732][T22261] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.364983][T22271] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4208'.
[  537.449302][T22274] netlink: 'syz.1.4208': attribute type 5 has an invalid length.
[  537.629397][T22274] geneve4: entered promiscuous mode
[  537.655434][T22274] geneve4: entered allmulticast mode
[  537.663681][T22287] netlink: 'syz.4.4212': attribute type 2 has an invalid length.
[  537.706397][ T7297] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  537.731868][ T7297] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  537.777041][ T7297] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  537.833627][ T7297] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  539.182682][T22339] netlink: 'syz.6.4223': attribute type 2 has an invalid length.
[  539.338261][T22339] vlan0: entered promiscuous mode
[  539.372525][T22339] geneve1: entered promiscuous mode
[  539.399353][T22339] vlan0: entered allmulticast mode
[  539.434466][T22339] geneve1: entered allmulticast mode
[  539.872619][T22364] bridge0: port 1(bridge_slave_0) entered disabled state
[  540.027254][T22366] netlink: 'syz.6.4228': attribute type 1 has an invalid length.
[  540.112679][ T5633] block nbd2: Receive control failed (result -32)
[  540.399387][T22377] __nla_validate_parse: 7 callbacks suppressed
[  540.399402][T22377] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4231'.
[  540.419224][T22376] tipc: Started in network mode
[  540.439798][T22376] tipc: Node identity bef5fe624adc, cluster identity 4711
[  540.460942][T22376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  540.496026][T22377] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4231'.
[  540.682726][T22384] syzkaller0: entered promiscuous mode
[  540.700624][T22384] syzkaller0: entered allmulticast mode
[  540.717643][T22384] tipc: Resetting bearer <eth:syzkaller0>
[  540.841488][T22374] tipc: Resetting bearer <eth:syzkaller0>
[  542.969755][ T5636] Bluetooth: hci6: command 0x0405 tx timeout
[  544.039113][T22374] tipc: Disabling bearer <eth:syzkaller0>
[  544.048468][T18614] tipc: Node number set to 4096392802
[  544.300489][T22460] netlink: 'syz.1.4249': attribute type 1 has an invalid length.
[  544.411059][ T5633] Bluetooth: hci3: command 0x0406 tx timeout
[  544.526611][T22478] netlink: 'syz.4.4252': attribute type 10 has an invalid length.
[  544.593657][T22485] netlink: 'syz.4.4252': attribute type 1 has an invalid length.
[  544.637302][ T1127] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2
[  544.676184][T22478] vlan0: left promiscuous mode
[  544.723239][T22478] team0: Port device vlan0 added
[  544.831915][T22495] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4255'.
[  546.257531][T22532] sctp: [Deprecated]: syz.5.4263 (pid 22532) Use of int in maxseg socket option.
[  546.257531][T22532] Use struct sctp_assoc_value instead
[  546.548574][T22539] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 !
[  546.576302][T22539] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4266'.
[  547.599335][T22560] 8021q: VLANs not supported on ip6_vti0
[  547.606282][T22561] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4272'.
[  547.632948][T22561] team0: Port device H removed
[  547.719115][T22565] ip6erspan0: entered allmulticast mode
[  547.769035][T22567] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4274'.
[  547.778770][T22567] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4274'.
[  547.788553][T22567] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4274'.
[  548.237675][T22509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  548.608665][T22576] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  549.003066][T22591] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4280'.
[  549.123412][T22592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  549.435615][T22598] team0: No ports can be present during mode change
[  549.484660][T22611] vlan0: entered promiscuous mode
[  549.524740][T20985] Bluetooth: hci1: command 0x0406 tx timeout
[  549.639406][T22611] team0: Port device vlan0 added
[  549.900903][T22634] IPVS: length: 239 != 24
[  550.141215][T22645] netlink: 'syz.5.4291': attribute type 4 has an invalid length.
[  550.283773][T22654] netlink: 'syz.4.4292': attribute type 16 has an invalid length.
[  550.346256][T22654] netlink: 'syz.4.4292': attribute type 17 has an invalid length.
[  550.361731][T22652] netlink: 'syz.2.4293': attribute type 13 has an invalid length.
[  550.399139][T22657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4294'.
[  550.507597][T22654] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.514834][T22654] bridge0: port 1(bridge_slave_0) entered forwarding state
[  550.616927][T22654] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.750822][T22654] veth0: entered promiscuous mode
[  550.756733][T22654] macvlan2: left promiscuous mode
[  550.761921][T22654] macvlan2: left allmulticast mode
[  550.768329][T22654] veth0: entered allmulticast mode
[  550.778157][T22654] 8021q: adding VLAN 0 to HW filter on device bond1
[  550.788180][T22654] veth0_to_team: entered promiscuous mode
[  550.836823][T22654] 8021q: adding VLAN 0 to HW filter on device bond3
[  550.860703][T22654] 8021q: adding VLAN 0 to HW filter on device bond4
[  551.018964][ T7302] bridge0: port 2(bridge_slave_1) entered blocking state
[  551.026155][ T7302] bridge0: port 2(bridge_slave_1) entered forwarding state
[  551.050689][T22663] sch_fq: defrate 0 ignored.
[  551.216996][ T7296] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  551.267999][T18613] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  551.278259][ T7296] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  551.350552][T22684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4299'.
[  551.481674][   T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  551.516107][   T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  551.992655][T22710] netlink: 'syz.4.4305': attribute type 1 has an invalid length.
[  552.097931][T22711] netlink: 'syz.6.4306': attribute type 2 has an invalid length.
[  552.143264][T22720] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  552.156305][T22720] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  552.174233][T22711] netlink: 'syz.6.4306': attribute type 2 has an invalid length.
[  552.192588][T22720] bond5: (slave ip6gre1): making interface the new active one
[  552.263590][T22720] bond5: (slave ip6gre1): Enslaving as an active interface with an up link
[  552.478743][T22734] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4310'.
[  552.600234][T22742] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4313'.
[  552.616934][T22743] netlink: 'syz.4.4312': attribute type 24 has an invalid length.
[  552.796614][    T9] IPVS: starting estimator thread 0...
[  552.918434][T22756] IPVS: using max 29 ests per chain, 69600 per kthread
[  553.046026][T22762] netlink: 'syz.4.4317': attribute type 29 has an invalid length.
[  553.111204][T22762] netlink: 'syz.4.4317': attribute type 29 has an invalid length.
[  553.393547][T22784] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  553.543378][T22788] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4326'.
[  553.590127][T22788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4326'.
[  553.632653][T22788] macvlan0: entered allmulticast mode
[  553.648534][T22788] hsr0: entered allmulticast mode
[  553.666135][T22788] hsr_slave_0: entered allmulticast mode
[  553.683465][T22788] hsr_slave_1: entered allmulticast mode
[  553.707213][T22788] hsr0: entered promiscuous mode
[  553.739781][T22793] xt_l2tp: v2 doesn't support IP mode
[  554.274992][   T13] tipc: Subscription rejected, illegal request
[  554.307685][T22809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4332'.
[  554.642980][T22824] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4335'.
[  554.886146][T22831] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4338'.
[  554.960903][T22831] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4338'.
[  555.285458][T22847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  555.444336][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  555.907734][T22872] syzkaller0: entered promiscuous mode
[  555.956623][T22872] syzkaller0: entered allmulticast mode
[  556.615729][T22904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4358'.
[  556.639405][T22904] validate_nla: 1 callbacks suppressed
[  556.639421][T22904] netlink: 'syz.2.4358': attribute type 7 has an invalid length.
[  556.700660][T22904] netlink: 'syz.2.4358': attribute type 8 has an invalid length.
[  556.721644][T22912] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4358'.
[  556.806522][T22904] gretap0: entered promiscuous mode
[  556.841447][T22904] gretap0: left promiscuous mode
[  556.989105][T22924] lo speed is unknown, defaulting to 1000
[  557.332819][T22939] xt_bpf: check failed: parse error
[  557.946426][T22964] __nla_validate_parse: 4 callbacks suppressed
[  557.946445][T22964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4374'.
[  557.970402][T22964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4374'.
[  558.187782][T22971] syz_tun: entered allmulticast mode
[  558.383134][T22969] syzkaller0: entered promiscuous mode
[  558.397211][T22969] syzkaller0: entered allmulticast mode
[  558.413038][T22970] syz_tun: left allmulticast mode
[  558.420228][T22924] hsr0 speed is unknown, defaulting to 1000
[  558.420304][T22980] tipc: Started in network mode
[  558.443318][T22980] tipc: Node identity e0000001, cluster identity 4711
[  558.456951][T22980] tipc: Enabling of bearer <udp:�yz2> rejected, failed to enable media
[  558.593742][T22985] bond0 (unregistering): Released all slaves
[  560.973205][T22987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4381'.
[  560.982470][T22987] tc_dump_action: action bad kind
[  561.153395][T22994] rdma_rxe: rxe_newlink: failed to add xfrm0
[  562.347798][T23023] syzkaller0: entered promiscuous mode
[  562.369651][T23023] syzkaller0: entered allmulticast mode
[  562.781812][T23051] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  562.824296][ T1317] aoe: packet could not be sent on lo.  consider increasing tx_queue_len
[  564.086856][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  565.929919][T23064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4401'.
[  566.483100][T23089] netlink: 'syz.1.4408': attribute type 2 has an invalid length.
[  566.528260][T23099] lo: Caught tx_queue_len zero misconfig
[  566.530463][T23089] netlink: 'syz.1.4408': attribute type 8 has an invalid length.
[  566.576023][T23089] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4408'.
[  566.811855][T23107] netdevsim netdevsim1: Direct firmware load for . failed with error -2
[  566.861306][T23107] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  566.975594][T23111] syzkaller0: entered promiscuous mode
[  566.981269][T23111] syzkaller0: entered allmulticast mode
[  568.101846][T23142] xt_l2tp: unknown flags: 10
[  570.458790][T23164] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4429'.
[  570.643767][T23164] syzkaller0: entered promiscuous mode
[  570.672754][T23164] syzkaller0: entered allmulticast mode
[  570.765557][T23186] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4430'.
[  570.774834][T23185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4434'.
[  570.784883][T23186] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4430'.
[  570.796503][T23186] netlink: 'syz.6.4430': attribute type 25 has an invalid length.
[  570.831048][T23169] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  570.846856][T23169] bond0 (unregistering): Released all slaves
[  571.089710][T23183] syzkaller0: entered promiscuous mode
[  571.109185][T23183] syzkaller0: entered allmulticast mode
[  571.255572][T23209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4435'.
[  574.451607][T23236] netlink: zone id is out of range
[  574.479421][T23236] netlink: zone id is out of range
[  574.510420][T23236] netlink: zone id is out of range
[  574.519598][T23241] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4446'.
[  574.561989][T23236] netlink: zone id is out of range
[  574.595840][T23236] netlink: zone id is out of range
[  574.613158][T23236] netlink: zone id is out of range
[  574.639531][T23236] netlink: zone id is out of range
[  574.661757][T23236] netlink: zone id is out of range
[  574.679472][T23236] netlink: zone id is out of range
[  574.694609][T23236] netlink: zone id is out of range
[  574.919305][T23257] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4451'.
[  574.949213][T23256] netlink: 'syz.5.4451': attribute type 1 has an invalid length.
[  574.966947][T23262] sctp: [Deprecated]: syz.2.4452 (pid 23262) Use of struct sctp_assoc_value in delayed_ack socket option.
[  574.966947][T23262] Use struct sctp_sack_info instead
[  575.586322][T23288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4461'.
[  575.668835][T23292] Bluetooth: MGMT ver 1.23
[  575.682067][T23288] xt_hl: Unknown TTL match mode: 255
[  575.683505][T23292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4462'.
[  575.763141][T23292] hsr_slave_1 (unregistering): left promiscuous mode
[  575.869581][T23304] netlink: 'syz.4.4464': attribute type 1 has an invalid length.
[  576.040115][T23313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4466'.
[  576.245396][T23319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4468'.
[  578.541995][T23290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  578.732226][T23328] xt_CT: You must specify a L4 protocol and not use inversions on it
[  578.822675][T23335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4471'.
[  579.140151][T23358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4479'.
[  579.406870][T23370] bond5: option resend_igmp: invalid value (32767)
[  579.413574][T23370] bond5: option resend_igmp: allowed values 0 - 255
[  579.422732][T23370] bond5 (unregistering): Released all slaves
[  579.570956][T23373] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4483'.
[  579.599291][T23379] bridge_slave_0: invalid flags given to default FDB implementation
[  580.381361][T23390] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4488'.
[  580.391831][T23390] 8021q: VLANs not supported on ip_vti0
[  580.724517][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  581.769375][T23335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  581.779207][T23357] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4471'.
[  582.065574][T23404] ip6tnl0: Caught tx_queue_len zero misconfig
[  582.139738][T23408] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4492'.
[  582.173107][T23408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4492'.
[  583.057482][T23450] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.4506'.
[  583.069792][T23452] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.4506'.
[  583.118448][T23448] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4505'.
[  583.351140][T23461] netlink: 'syz.1.4510': attribute type 1 has an invalid length.
[  584.129858][T23496] veth0: entered promiscuous mode
[  584.171262][T23496] veth0: left promiscuous mode
[  584.409705][T23508] netlink: 'syz.6.4523': attribute type 29 has an invalid length.
[  584.528213][T23508] netlink: 'syz.6.4523': attribute type 29 has an invalid length.
[  584.556552][T23515] netlink: 'syz.6.4523': attribute type 29 has an invalid length.
[  584.569490][T23515] netlink: 'syz.6.4523': attribute type 29 has an invalid length.
[  584.579999][T23515] netlink: 'syz.6.4523': attribute type 29 has an invalid length.
[  584.612835][T23515] netlink: 'syz.6.4523': attribute type 29 has an invalid length.
[  584.900367][T23534] x_tables: duplicate entry at hook 2
[  585.735661][T23567] __nla_validate_parse: 3 callbacks suppressed
[  585.735677][T23567] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4536'.
[  587.663409][T23536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  587.906960][T23587] netlink: 'syz.1.4541': attribute type 21 has an invalid length.
[  587.939403][T23587] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4541'.
[  588.539266][T23625] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20003
[  589.323448][T23635] netlink: 'syz.6.4554': attribute type 1 has an invalid length.
[  589.342084][T23635] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4554'.
[  589.342487][T23636] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4555'.
[  589.392550][T23631] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.4553'.
[  589.411497][T23635] net_ratelimit: 133 callbacks suppressed
[  589.411517][T23635] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  589.423708][T23631] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  589.501716][T23629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4553'.
[  589.584843][T23639] netlink: 'syz.4.4556': attribute type 1 has an invalid length.
[  589.627765][T23639] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4556'.
[  589.731688][T23646] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4556'.
[  590.126644][T23664] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  590.154819][T23664] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  590.209699][T23664] tipc: Enabled bearer <eth:xfrm0>, priority 11
[  590.237650][T23672] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4567'.
[  590.260496][T23672] 8021q: VLANs not supported on gre0
[  590.493359][T23680] netlink: 'syz.6.4566': attribute type 1 has an invalid length.
[  590.523201][T23680] netlink: 'syz.6.4566': attribute type 2 has an invalid length.
[  590.537501][T23680] netlink: 'syz.6.4566': attribute type 1 has an invalid length.
[  590.553144][T23681] macvtap0: entered promiscuous mode
[  590.559597][T23681] team0: entered promiscuous mode
[  590.573748][T23681] team_slave_0: entered promiscuous mode
[  590.598762][T23681] team_slave_1: entered promiscuous mode
[  590.607209][T23681] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  590.616492][T23681] team0: Device macvtap0 is already an upper device of the team interface
[  590.629879][T23681] team0: left promiscuous mode
[  590.679233][T23685] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  590.692738][T23685] bond6 (unregistering): Released all slaves
[  590.715924][ T5742] team_slave_0: left promiscuous mode
[  590.722601][ T5742] team_slave_1: left promiscuous mode
[  590.932102][T23694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.962541][T23695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.999060][T23701] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  591.025270][T23699] nbd: must specify at least one socket
[  591.081781][T23702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4575'.
[  591.133586][T23701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4575'.
[  591.903286][T23739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4585'.
[  592.539971][T23761] netlink: 640 bytes leftover after parsing attributes in process `syz.6.4592'.
[  592.579261][T23761] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  592.852571][T23772] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4595'.
[  592.906875][T23775] netlink: 'syz.2.4596': attribute type 21 has an invalid length.
[  592.915563][T23772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4595'.
[  592.935398][T23775] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4596'.
[  592.982822][T23775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4596'.
[  592.993406][T23776] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4597'.
[  592.993685][T23776] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4597'.
[  593.236866][T23791] veth1_to_bridge: entered allmulticast mode
[  593.404774][T23801] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  593.561703][T23815] bridge0: port 3(veth1_to_bridge) entered blocking state
[  593.635547][T23815] bridge0: port 3(veth1_to_bridge) entered disabled state
[  593.669195][T23815] veth1_to_bridge: entered allmulticast mode
[  593.701307][T23823] netlink: 'syz.5.4609': attribute type 6 has an invalid length.
[  593.722954][T23815] veth1_to_bridge: entered promiscuous mode
[  593.742192][T23815] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  593.758609][T23815] bridge0: port 3(veth1_to_bridge) entered blocking state
[  593.765946][T23815] bridge0: port 3(veth1_to_bridge) entered forwarding state
[  594.135374][T23836] nbd: must specify a size in bytes for the device
[  594.197850][T23839] netlink: 'syz.2.4617': attribute type 1 has an invalid length.
[  594.239073][T23839] netlink: 'syz.2.4617': attribute type 2 has an invalid length.
[  594.390561][T23848] netlink: 'syz.1.4621': attribute type 21 has an invalid length.
[  594.433054][T23848] IPv6: NLM_F_CREATE should be specified when creating new route
[  594.661195][T23854] 8021q: adding VLAN 0 to HW filter on device bond0
[  594.767996][T23861] macvlan1: entered promiscuous mode
[  594.820106][T23861] macvlan1: entered allmulticast mode
[  594.889802][T23854] bond0: (slave vti0): refused to change device type
[  594.950824][T23875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  595.179904][T23872] syzkaller1: entered promiscuous mode
[  595.194027][T23872] syzkaller1: entered allmulticast mode
[  595.381406][T23894] netlink: 'syz.1.4636': attribute type 1 has an invalid length.
[  595.400630][T23895] netlink: 'syz.1.4636': attribute type 1 has an invalid length.
[  595.750189][T23909] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  595.793121][T23909] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  595.822380][T23909] gretap1: entered promiscuous mode
[  595.842166][T23909] gretap1: entered allmulticast mode
[  595.858494][T23910] netlink: 'syz.2.4639': attribute type 4 has an invalid length.
[  595.868664][T23914] veth1_macvtap: renamed from vlan0 (while UP)
[  595.872947][T23921] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  596.063377][T23929] netlink: 'syz.5.4645': attribute type 1 has an invalid length.
[  596.092804][T23929] __nla_validate_parse: 15 callbacks suppressed
[  596.092821][T23929] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4645'.
[  596.124990][T23926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4644'.
[  596.176664][T23926] bond0: Caught tx_queue_len zero misconfig
[  596.196693][T23926] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4644'.
[  596.215693][T23934] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4645'.
[  596.232679][T23934] bridge: RTM_NEWNEIGH with invalid ether address
[  596.240601][T23937] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  596.283171][T23941] gre1: entered promiscuous mode
[  596.291768][T23941] gre1: entered allmulticast mode
[  596.745066][T23957] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4655'.
[  596.906472][T23955] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4654'.
[  596.908237][T23960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4656'.
[  596.939389][T23960] openvswitch: netlink: Unknown nsh attribute 0
[  597.550065][T23991] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  597.775457][T24002] FAULT_INJECTION: forcing a failure.
[  597.775457][T24002] name failslab, interval 1, probability 0, space 0, times 0
[  597.809172][T24002] CPU: 0 UID: 0 PID: 24002 Comm: syz.5.4670 Not tainted syzkaller #0 PREEMPT(full) 
[  597.809198][T24002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  597.809210][T24002] Call Trace:
[  597.809219][T24002]  <TASK>
[  597.809227][T24002]  dump_stack_lvl+0xe8/0x150
[  597.809257][T24002]  should_fail_ex+0x412/0x560
[  597.809416][T24002]  should_failslab+0xa8/0x100
[  597.809444][T24002]  ? security_inode_alloc+0x39/0x310
[  597.809535][T24002]  kmem_cache_alloc_noprof+0x87/0x650
[  597.809567][T24002]  security_inode_alloc+0x39/0x310
[  597.809593][T24002]  inode_init_always_gfp+0x9c8/0xda0
[  597.809633][T24002]  ? __pfx_sock_alloc_inode+0x10/0x10
[  597.809662][T24002]  alloc_inode+0x82/0x1b0
[  597.809684][T24002]  do_accept+0x13e/0x760
[  597.809711][T24002]  ? __pfx_do_accept+0x10/0x10
[  597.809753][T24002]  __sys_accept4+0x139/0x230
[  597.809777][T24002]  ? __pfx___sys_accept4+0x10/0x10
[  597.809798][T24002]  ? __pfx_ksys_write+0x10/0x10
[  597.809829][T24002]  __x64_sys_accept4+0x9a/0xb0
[  597.809851][T24002]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.809871][T24002]  do_syscall_64+0x15f/0xf80
[  597.809897][T24002]  ? trace_irq_disable+0x3b/0x140
[  597.809925][T24002]  ? clear_bhb_loop+0x40/0x90
[  597.809946][T24002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.809963][T24002] RIP: 0033:0x7f32ddf9ce59
[  597.809980][T24002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  597.809995][T24002] RSP: 002b:00007f32dee73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[  597.810015][T24002] RAX: ffffffffffffffda RBX: 00007f32de215fa0 RCX: 00007f32ddf9ce59
[  597.810027][T24002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  597.810037][T24002] RBP: 00007f32dee73090 R08: 0000000000000000 R09: 0000000000000000
[  597.810048][T24002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  597.810058][T24002] R13: 00007f32de216038 R14: 00007f32de215fa0 R15: 00007fff61f1d718
[  597.810086][T24002]  </TASK>
[  598.222108][T24013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4671'.
[  598.833171][T24032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4678'.
[  598.851244][T24033] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  598.878154][T24034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4678'.
[  600.725366][T20985] Bluetooth: hci4: command 0x0406 tx timeout
[  602.853469][   T24] tipc: Node number set to 3758096385
[  602.896303][ T1127] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  602.918462][ T1127] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  602.926442][    T9] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  603.125548][T24053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4682'.
[  603.143828][T24057] FAULT_INJECTION: forcing a failure.
[  603.143828][T24057] name failslab, interval 1, probability 0, space 0, times 0
[  603.185482][T24057] CPU: 1 UID: 0 PID: 24057 Comm: syz.1.4684 Not tainted syzkaller #0 PREEMPT(full) 
[  603.185505][T24057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  603.185515][T24057] Call Trace:
[  603.185522][T24057]  <TASK>
[  603.185529][T24057]  dump_stack_lvl+0xe8/0x150
[  603.185557][T24057]  should_fail_ex+0x412/0x560
[  603.185583][T24057]  ? __d_alloc+0x37/0x6f0
[  603.185605][T24057]  should_failslab+0xa8/0x100
[  603.185632][T24057]  kmem_cache_alloc_lru_noprof+0x87/0x640
[  603.185661][T24057]  __d_alloc+0x37/0x6f0
[  603.185682][T24057]  ? rcu_is_watching+0x15/0xb0
[  603.185736][T24057]  d_alloc_pseudo+0x21/0xc0
[  603.185759][T24057]  alloc_file_pseudo+0xdd/0x240
[  603.185779][T24057]  ? kmem_cache_alloc_noprof+0x15a/0x650
[  603.185802][T24057]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  603.185822][T24057]  ? evm_inode_alloc_security+0x40/0xb0
[  603.185911][T24057]  ? security_inode_alloc+0xd5/0x310
[  603.185943][T24057]  sock_alloc_file+0xb8/0x2e0
[  603.185965][T24057]  do_accept+0x3a0/0x760
[  603.185989][T24057]  ? __pfx_do_accept+0x10/0x10
[  603.186032][T24057]  __sys_accept4+0x139/0x230
[  603.186054][T24057]  ? __pfx___sys_accept4+0x10/0x10
[  603.186082][T24057]  __x64_sys_accept4+0x9a/0xb0
[  603.186107][T24057]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.186125][T24057]  do_syscall_64+0x15f/0xf80
[  603.186152][T24057]  ? clear_bhb_loop+0x40/0x90
[  603.186173][T24057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.186190][T24057] RIP: 0033:0x7f4e4bb9ce59
[  603.186207][T24057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  603.186222][T24057] RSP: 002b:00007f4e4cb16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[  603.186241][T24057] RAX: ffffffffffffffda RBX: 00007f4e4be15fa0 RCX: 00007f4e4bb9ce59
[  603.186253][T24057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  603.186263][T24057] RBP: 00007f4e4cb16090 R08: 0000000000000000 R09: 0000000000000000
[  603.186274][T24057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  603.186283][T24057] R13: 00007f4e4be16038 R14: 00007f4e4be15fa0 R15: 00007ffc20b0caf8
[  603.186312][T24057]  </TASK>
[  603.484200][ T5743] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  603.624779][T24068] netlink: 'syz.6.4686': attribute type 1 has an invalid length.
[  603.853588][T24080] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4689'.
[  603.951643][    T9] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  604.143557][T24090] syzkaller1: entered promiscuous mode
[  604.159960][T24092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4694'.
[  604.165511][T24090] syzkaller1: entered allmulticast mode
[  604.455500][T24105] netlink: 'syz.2.4699': attribute type 62 has an invalid length.
[  604.672635][T24111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  604.711795][T24112] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4700'.
[  604.995502][T24102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4698'.
[  605.016574][T24102] netlink: 'syz.6.4698': attribute type 30 has an invalid length.
[  605.025611][T24102] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4698'.
[  605.042677][T24102] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  605.509925][T24137] xt_hashlimit: size too large, truncated to 1048576
[  606.091340][T24172] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4717'.
[  606.112279][T24172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4717'.
[  606.233834][T24178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4719'.
[  606.288277][T24180] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4720'.
[  606.485114][T24188] xt_time: invalid argument - start or stop time greater than 23:59:59
[  606.486789][T24190] netlink: 'syz.2.4721': attribute type 2 has an invalid length.
[  606.526810][T24190] netlink: 'syz.2.4721': attribute type 2 has an invalid length.
[  606.644215][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  606.867014][T24201] nbd: couldn't find a device at index 0
[  606.905675][T24201] Cannot find set identified by id 0 to match
[  607.230475][T24201] netlink: 'syz.6.4727': attribute type 21 has an invalid length.
[  608.113510][T24259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  608.180117][T24262] syzkaller0: entered promiscuous mode
[  608.188125][T24262] syzkaller0: entered allmulticast mode
[  608.285795][T24266] __nla_validate_parse: 11 callbacks suppressed
[  608.285813][T24266] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4746'.
[  608.302006][T24266] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4746'.
[  608.437947][T24274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4748'.
[  608.500376][T24274] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  608.500376][T24274] Please contact the netfilter-devel mailing list or update your nftables rules.
[  608.661694][T24287] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4752'.
[  608.705866][T24288] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001
[  609.949036][T24339] batman_adv: batadv0: Removing interface: batadv_slave_0
[  609.958226][T24339] batman_adv: batadv0: Removing interface: batadv_slave_1
[  609.967431][T24339] batman_adv: batadv0: Removing interface: ipvlan2
[  610.088309][T24344] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4768'.
[  610.110426][T24344] syzkaller1: entered promiscuous mode
[  610.129831][T24344] syzkaller1: entered allmulticast mode
[  610.478257][T24355] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4773'.
[  610.691312][T24361] bridge3: entered promiscuous mode
[  610.701185][T24361] bridge3: entered allmulticast mode
[  610.781712][T24368] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4778'.
[  610.973019][T24379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4781'.
[  611.152303][T24392] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4785'.
[  611.153033][T24393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4785'.
[  611.286737][T24390] bond1 (unregistering): Released all slaves
[  611.587899][T24415] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  611.609769][T24411] bond10 (unregistering): Released all slaves
[  611.972955][T24433] gtp0: entered promiscuous mode
[  611.978293][T24433] gtp0: entered allmulticast mode
[  612.581502][T24460] syzkaller0: entered promiscuous mode
[  612.602308][T24460] syzkaller0: entered allmulticast mode
[  612.691057][T24467] xt_hashlimit: size too large, truncated to 1048576
[  612.772916][T20985] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  612.788254][T20985] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  612.799848][T20985] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  612.826900][T20985] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  612.837916][T20985] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  613.365718][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  613.378177][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  613.390540][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  613.402885][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  613.415276][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  613.427620][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  613.439961][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  613.452301][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  613.464655][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  614.007699][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  614.014993][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  614.885231][ T5633] Bluetooth: hci7: command tx timeout
[  614.909537][T24469] lo speed is unknown, defaulting to 1000
[  615.990186][T24469] hsr0 speed is unknown, defaulting to 1000
[  616.593979][    C1] net_ratelimit: 13341 callbacks suppressed
[  616.593997][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  616.612277][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  616.624639][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  616.637002][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  616.649402][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  616.661791][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  616.674214][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  616.686628][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  616.699017][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  616.711439][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  616.965000][ T5633] Bluetooth: hci7: command tx timeout
[  617.326574][T24528] tunl0: Caught tx_queue_len zero misconfig
[  617.679575][T24540] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  617.694985][T24541] __nla_validate_parse: 3 callbacks suppressed
[  617.695003][T24541] netlink: 332 bytes leftover after parsing attributes in process `syz.6.4829'.
[  618.389729][T18614] IPVS: starting estimator thread 0...
[  618.429919][T24556] netlink: 'syz.5.4833': attribute type 11 has an invalid length.
[  618.505567][T24558] IPVS: using max 26 ests per chain, 62400 per kthread
[  618.708242][T24469] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.752056][T24469] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.803239][T24469] bridge_slave_0: entered allmulticast mode
[  618.827837][T24469] bridge_slave_0: entered promiscuous mode
[  618.865550][T24469] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.919646][T24469] bridge0: port 2(bridge_slave_1) entered disabled state
[  618.957379][T24469] bridge_slave_1: entered allmulticast mode
[  618.994450][T24469] bridge_slave_1: entered promiscuous mode
[  619.041044][T24566] netlink: 'syz.5.4837': attribute type 11 has an invalid length.
[  619.049810][ T5633] Bluetooth: hci7: command tx timeout
[  619.149219][T24566] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.4837'.
[  619.354928][T24469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  619.485859][T24469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  619.681958][T24577] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  620.067322][T24469] team0: Port device team_slave_0 added
[  620.103802][T24469] team0: Port device team_slave_1 added
[  620.402094][T24469] batman_adv: batadv0: Adding interface: batadv_slave_0
[  620.495405][T24469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  620.622417][T24600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4845'.
[  620.834930][T24469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  620.874712][T24600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4845'.
[  621.024274][T24600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4845'.
[  621.068656][T24604] netlink: 'syz.1.4846': attribute type 13 has an invalid length.
[  621.126008][ T5633] Bluetooth: hci7: command tx timeout
[  621.603923][    C1] net_ratelimit: 21626 callbacks suppressed
[  621.603942][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  621.622225][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  621.634575][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  621.646896][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  621.659281][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  621.671726][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  621.684032][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  621.696365][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  621.708775][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  621.721081][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  621.906838][T24591] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  621.911180][T24469] batman_adv: batadv0: Adding interface: batadv_slave_1
[  622.012891][T24469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  622.205695][T24469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  623.062682][T24469] hsr_slave_0: entered promiscuous mode
[  623.149196][T24469] hsr_slave_1: entered promiscuous mode
[  623.185040][T24630] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4853'.
[  623.223434][T24469] debugfs: 'hsr0' already exists in 'hsr'
[  623.266838][T24469] Cannot create hsr debugfs directory
[  626.164619][   T31] INFO: task syz.3.3601:19884 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  626.262705][   T31]       Not tainted syzkaller #0
[  626.326439][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  626.400148][T24675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4866'.
[  626.413301][   T31] task:syz.3.3601      state:D stack:27072 pid:19884 tgid:19883 ppid:18409  task_flags:0x400140 flags:0x00080002
[  626.413365][   T31] Call Trace:
[  626.413373][   T31]  <TASK>
[  626.413387][   T31]  __schedule+0x17b4/0x5680
[  626.413523][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  626.413581][   T31]  ? __pfx___schedule+0x10/0x10
[  626.413616][   T31]  ? schedule+0x90/0x360
[  626.413643][   T31]  schedule+0x164/0x360
[  626.413670][   T31]  schedule_preempt_disabled+0x13/0x30
[  626.413693][   T31]  __mutex_lock+0x7f7/0x1550
[  626.413721][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  626.413753][   T31]  ? __mutex_lock+0x608/0x1550
[  626.413783][   T31]  ? nfsd_nl_listener_set_doit+0x141/0x1670
[  626.413835][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  626.448443][   T31]  ? __asan_memset+0x22/0x50
[  626.448482][   T31]  ? __nla_validate_parse+0x2480/0x2dc0
[  626.448528][   T31]  nfsd_nl_listener_set_doit+0x141/0x1670
[  626.448557][   T31]  ? __pfx___nla_validate_parse+0x10/0x10
[  626.448607][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  626.448639][   T31]  ? __nla_parse+0x40/0x60
[  626.448669][   T31]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  626.448790][   T31]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  626.448820][   T31]  genl_family_rcv_msg_doit+0x22a/0x330
[  626.448841][   T31]  ? __asan_memcpy+0x40/0x70
[  626.448868][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  626.448901][   T31]  ? bpf_lsm_capable+0x9/0x20
[  626.448921][   T31]  ? security_capable+0x7e/0x2c0
[  626.448952][   T31]  genl_rcv_msg+0x61c/0x7a0
[  626.448979][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  626.448998][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  626.449039][   T31]  netlink_rcv_skb+0x232/0x4b0
[  626.449096][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  626.449117][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  626.449158][   T31]  ? down_read+0x270/0x2e0
[  626.449176][   T31]  ? genl_rcv+0xd/0x40
[  626.449197][   T31]  genl_rcv+0x28/0x40
[  626.449214][   T31]  netlink_unicast+0x75c/0x8e0
[  626.449257][   T31]  netlink_sendmsg+0x813/0xb40
[  626.449290][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  626.449320][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  626.449347][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  626.449376][   T31]  ____sys_sendmsg+0x972/0x9f0
[  626.449403][   T31]  ? __might_fault+0xaf/0x130
[  626.449434][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  626.449469][   T31]  ? import_iovec+0x73/0xa0
[  626.449558][   T31]  ___sys_sendmsg+0x2a5/0x360
[  626.449584][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  626.449609][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  626.449643][   T31]  ? futex_wait+0x2a2/0x390
[  626.449709][   T31]  ? __fget_files+0x2a/0x420
[  626.449737][   T31]  ? __fget_files+0x3a0/0x420
[  626.449770][   T31]  __x64_sys_sendmsg+0x1bd/0x2a0
[  626.449799][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  626.449834][   T31]  ? rcu_is_watching+0x15/0xb0
[  626.449867][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.449889][   T31]  do_syscall_64+0x15f/0xf80
[  626.449915][   T31]  ? trace_irq_disable+0x3b/0x140
[  626.449941][   T31]  ? clear_bhb_loop+0x40/0x90
[  626.469705][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.469736][   T31] RIP: 0033:0x7f9f0a99ce59
[  626.469822][   T31] RSP: 002b:00007f9f0b914028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  626.469843][   T31] RAX: ffffffffffffffda RBX: 00007f9f0ac15fa0 RCX: 00007f9f0a99ce59
[  626.469857][   T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005
[  626.469868][   T31] RBP: 00007f9f0aa32d6f R08: 0000000000000000 R09: 0000000000000000
[  626.469879][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  626.469891][   T31] R13: 00007f9f0ac16038 R14: 00007f9f0ac15fa0 R15: 00007fffe4b472a8
[  626.469924][   T31]  </TASK>
[  626.469995][   T31] 
[  626.469995][   T31] Showing all locks held in the system:
[  626.470009][   T31] 2 locks held by kworker/1:0/24:
[  626.470120][   T31] 1 lock held by khungtaskd/31:
[  626.470132][   T31]  #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  626.470353][   T31] 4 locks held by kworker/u8:6/503:
[  626.470369][   T31] 3 locks held by kworker/u8:10/1127:
[  626.470394][   T31] 1 lock held by klogd/4984:
[  626.470405][   T31] 2 locks held by getty/5384:
[  626.470416][   T31]  #0: ffff8880359ef0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  626.470523][   T31]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  626.470578][   T31] 2 locks held by sshd-session/5611:
[  626.470594][   T31] 3 locks held by kworker/u8:12/7279:
[  626.470606][   T31]  #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  626.470670][   T31]  #1: ffffc90005affc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  626.470719][   T31]  #2: ffffffff8fdcfa40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  626.470834][   T31] 3 locks held by kworker/u8:15/7284:
[  626.470849][   T31] 3 locks held by kworker/u8:20/7291:
[  626.470866][   T31] 2 locks held by syz-executor/16616:
[  626.470880][   T31] 2 locks held by syz-executor/17302:
[  626.470896][   T31] 2 locks held by syz.0.3254/18481:
[  626.470907][   T31]  #0: ffffffff8fe3f228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  626.470956][   T31]  #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  626.471019][   T31] 2 locks held by syz-executor/18973:
[  626.471030][   T31] 2 locks held by syz-executor/18988:
[  626.471043][   T31] 2 locks held by syz.3.3601/19884:
[  626.471056][   T31]  #0: ffffffff8fe3f228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  626.471101][   T31]  #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  626.471157][   T31] 1 lock held by syz-executor/20467:
[  626.471181][   T31] 2 locks held by syz.4.4665/23987:
[  626.471193][   T31]  #0: ffffffff8fe3f228 (cb_lock
[  626.614086][    C1] net_ratelimit: 21335 callbacks suppressed
[  626.614106][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  627.063502][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  627.075892][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  627.088235][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  627.100535][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  627.112901][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  627.125278][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  627.137510][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  627.149896][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:86:98:63:3a:fa:2a, vlan:0)
[  627.162214][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  627.408807][   T31] ){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  627.435124][   T31]  #1: ffffffff8ec8aca0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  627.473383][   T31] 8 locks held by syz-executor/24469:
[  627.499093][   T31] 1 lock held by syz.6.4866/24672:
[  627.527407][   T31]  #0: ffff88801bec9c00 (&kernfs_locks->open_file_mutex[count]){+.+.}-{4:4}, at: kernfs_fop_release+0x118/0x440
[  627.588676][   T31] 
[  627.753625][   T31] =============================================
[  627.753625][   T31] 
[  627.848299][   T31] NMI backtrace for cpu 0
[  627.848321][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  627.848340][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  627.848351][   T31] Call Trace:
[  627.848358][   T31]  <TASK>
[  627.848366][   T31]  dump_stack_lvl+0xe8/0x150
[  627.848392][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  627.848493][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  627.848523][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  627.848546][   T31]  sys_info+0x135/0x170
[  627.848563][   T31]  watchdog+0xfd3/0x1030
[  627.848595][   T31]  ? watchdog+0x1c9/0x1030
[  627.848624][   T31]  kthread+0x388/0x470
[  627.848647][   T31]  ? __pfx_watchdog+0x10/0x10
[  627.848669][   T31]  ? __pfx_kthread+0x10/0x10
[  627.848692][   T31]  ret_from_fork+0x514/0xb70
[  627.848730][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  627.848749][   T31]  ? __switch_to+0xc79/0x1410
[  627.848777][   T31]  ? __pfx_kthread+0x10/0x10
[  627.848799][   T31]  ret_from_fork_asm+0x1a/0x30
[  627.848834][   T31]  </TASK>
[  627.848841][   T31] Sending NMI from CPU 0 to CPUs 1:
[  627.963128][    C1] NMI backtrace for cpu 1
[  627.963145][    C1] CPU: 1 UID: 0 PID: 503 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[  627.963171][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  627.963182][    C1] Workqueue: krds_cp_wq#24/4 rds_connect_worker
[  627.963291][    C1] RIP: 0010:check_preemption_disabled+0x1d/0xe0
[  627.963317][    C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 b7 5f 90 07 65 8b 0d ac 5f 90 07 f7 c1 ff ff ff 7f 74 0c 5b <41> 5e 41 5f 5d e9 09 d7 02 00 cc 9c 59 f7 c1 00 02 00 00 74 ea 65
[  627.963330][    C1] RSP: 0018:ffffc90000a07d30 EFLAGS: 00000002
[  627.963343][    C1] RAX: 0000000000000001 RBX: 0000000000000202 RCX: 0000000080000101
[  627.963353][    C1] RDX: ffffc90000a07e01 RSI: ffffffff8dfc035f RDI: ffffffff8c28ade0
[  627.963364][    C1] RBP: dffffc0000000000 R08: ffffc90000a08970 R09: 0000000000000000
[  627.963374][    C1] R10: ffffc90000a07ed8 R11: fffff52000140fdd R12: ffffc90000a08980
[  627.963385][    C1] R13: ffffffff8176f256 R14: ffffffff8e95cd60 R15: ffff88802522dc40
[  627.963396][    C1] FS:  0000000000000000(0000) GS:ffff88812538d000(0000) knlGS:0000000000000000
[  627.963409][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  627.963419][    C1] CR2: 00007fc7b8ca6d58 CR3: 000000000e74a000 CR4: 00000000003526f0
[  627.963433][    C1] Call Trace:
[  627.963439][    C1]  <IRQ>
[  627.963447][    C1]  lock_release+0xa1/0x3c0
[  627.963464][    C1]  ? deref_stack_reg+0x19f/0x230
[  627.963492][    C1]  ? unwind_next_frame+0xa6/0x2550
[  627.963514][    C1]  unwind_next_frame+0x1bba/0x2550
[  627.963535][    C1]  ? unwind_next_frame+0xa6/0x2550
[  627.963552][    C1]  ? br_handle_frame+0x1277/0x1510
[  627.963645][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  627.963666][    C1]  arch_stack_walk+0x11b/0x150
[  627.963687][    C1]  ? __netif_receive_skb_core+0x98f/0x3170
[  627.963734][    C1]  ? skb_clone+0x212/0x3a0
[  627.963803][    C1]  stack_trace_save+0xa9/0x100
[  627.963823][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  627.963846][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  627.963863][    C1]  kasan_save_track+0x3e/0x80
[  627.963880][    C1]  ? kasan_save_track+0x3e/0x80
[  627.963897][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  627.963915][    C1]  ? kmem_cache_alloc_noprof+0x2bc/0x650
[  627.963934][    C1]  ? skb_clone+0x212/0x3a0
[  627.963952][    C1]  ? br_flood+0x8cf/0xb80
[  627.963970][    C1]  ? br_handle_frame_finish+0x1521/0x1c80
[  627.963990][    C1]  ? br_nf_hook_thresh+0x3dd/0x4c0
[  627.964056][    C1]  ? br_nf_pre_routing_finish_ipv6+0x91f/0xc30
[  627.964070][    C1]  ? br_nf_pre_routing_ipv6+0x374/0x6f0
[  627.964084][    C1]  ? br_handle_frame+0x1277/0x1510
[  627.964126][    C1]  __kasan_slab_alloc+0x6c/0x80
[  627.964146][    C1]  kmem_cache_alloc_noprof+0x2bc/0x650
[  627.964163][    C1]  ? skb_clone+0x212/0x3a0
[  627.964182][    C1]  ? kmem_cache_alloc_noprof+0x15a/0x650
[  627.964202][    C1]  skb_clone+0x212/0x3a0
[  627.964223][    C1]  br_flood+0x8cf/0xb80
[  627.964249][    C1]  br_handle_frame_finish+0x1521/0x1c80
[  627.964269][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[  627.964296][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  627.964322][    C1]  ? ip6t_do_table+0x123/0x1560
[  627.964367][    C1]  ? __pfx_ip6t_do_table+0x10/0x10
[  627.964384][    C1]  ? nf_hook_slow+0x176/0x220
[  627.964455][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  627.964476][    C1]  br_nf_hook_thresh+0x3dd/0x4c0
[  627.964500][    C1]  ? __pfx_br_nf_hook_thresh+0x10/0x10
[  627.964528][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  627.964548][    C1]  ? nf_nat_ipv6_in+0x203/0x2c0
[  627.964624][    C1]  ? __pfx_nf_nat_ipv6_in+0x10/0x10
[  627.964644][    C1]  br_nf_pre_routing_finish_ipv6+0x91f/0xc30
[  627.964659][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  627.964684][    C1]  br_nf_pre_routing_ipv6+0x374/0x6f0
[  627.964699][    C1]  ? br_nf_pre_routing_ipv6+0x421/0x6f0
[  627.964713][    C1]  ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10
[  627.964729][    C1]  ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10
[  627.964744][    C1]  ? br_nf_pre_routing+0x75f/0x14c0
[  627.964768][    C1]  ? __pfx_br_nf_pre_routing+0x10/0x10
[  627.964787][    C1]  br_handle_frame+0x1277/0x1510
[  627.964813][    C1]  ? __pfx_br_handle_frame+0x10/0x10
[  627.964832][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  627.964851][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  627.964875][    C1]  ? __pfx_br_handle_frame+0x10/0x10
[  627.964895][    C1]  __netif_receive_skb_core+0x98f/0x3170
[  627.964910][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  627.964932][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  627.964950][    C1]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  627.964975][    C1]  ? process_backlog+0x3eb/0x1950
[  627.965018][    C1]  ? process_backlog+0x3eb/0x1950
[  627.965034][    C1]  ? process_backlog+0x3eb/0x1950
[  627.965051][    C1]  ? process_backlog+0x3eb/0x1950
[  627.965068][    C1]  process_backlog+0x76d/0x1950
[  627.965094][    C1]  __napi_poll+0xae/0x340
[  627.965109][    C1]  ? skb_defer_free_flush+0x233/0x260
[  627.965126][    C1]  net_rx_action+0x627/0xf70
[  627.965142][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  627.965167][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  627.965192][    C1]  ? try_to_wake_up+0x7f2/0x1380
[  627.965223][    C1]  handle_softirqs+0x22a/0x840
[  627.965239][    C1]  ? do_softirq+0x76/0xd0
[  627.965256][    C1]  ? __inet6_bind+0x30c/0xf60
[  627.965311][    C1]  do_softirq+0x76/0xd0
[  627.965324][    C1]  </IRQ>
[  627.965329][    C1]  <TASK>
[  627.965335][    C1]  __local_bh_enable_ip+0xf8/0x130
[  627.965350][    C1]  __inet6_bind+0x30c/0xf60
[  627.965370][    C1]  kernel_bind+0x13e/0x1c0
[  627.965392][    C1]  ? __pfx_kernel_bind+0x10/0x10
[  627.965419][    C1]  ? rds_tcp_conn_path_connect+0x335/0x930
[  627.965487][    C1]  rds_tcp_conn_path_connect+0x53e/0x930
[  627.965517][    C1]  ? __pfx_rds_tcp_conn_path_connect+0x10/0x10
[  627.965534][    C1]  ? do_raw_spin_unlock+0xf5/0x210
[  627.965556][    C1]  ? process_scheduled_works+0xa70/0x1860
[  627.965573][    C1]  ? process_scheduled_works+0xa70/0x1860
[  627.965591][    C1]  rds_connect_worker+0x1d8/0x290
[  627.965605][    C1]  ? process_scheduled_works+0xa70/0x1860
[  627.965621][    C1]  process_scheduled_works+0xb5d/0x1860
[  627.965651][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  627.965669][    C1]  ? assign_work+0x3d5/0x5e0
[  627.965685][    C1]  worker_thread+0xa53/0xfc0
[  627.965713][    C1]  kthread+0x388/0x470
[  627.965731][    C1]  ? __pfx_worker_thread+0x10/0x10
[  627.965745][    C1]  ? __pfx_kthread+0x10/0x10
[  627.965763][    C1]  ret_from_fork+0x514/0xb70
[  627.965781][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  627.965795][    C1]  ? __switch_to+0xc79/0x1410
[  627.965817][    C1]  ? __pfx_kthread+0x10/0x10
[  627.965835][    C1]  ret_from_fork_asm+0x1a/0x30
[  627.965860][    C1]  </TASK>
[  628.124246][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  628.671971][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  628.678866][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  628.687988][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  628.698054][   T31] Call Trace:
[  628.701342][   T31]  <TASK>
[  628.704284][   T31]  vpanic+0x56c/0xa60
[  628.708280][   T31]  ? __pfx___schedule+0x10/0x10
[  628.713145][   T31]  ? __pfx_vpanic+0x10/0x10
[  628.717670][   T31]  panic+0xc5/0xd0
[  628.721403][   T31]  ? __pfx_panic+0x10/0x10
[  628.725832][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  628.731230][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  628.737405][   T31]  watchdog+0x102c/0x1030
[  628.741766][   T31]  ? watchdog+0x1c9/0x1030
[  628.746218][   T31]  kthread+0x388/0x470
[  628.750307][   T31]  ? __pfx_watchdog+0x10/0x10
[  628.755005][   T31]  ? __pfx_kthread+0x10/0x10
[  628.759616][   T31]  ret_from_fork+0x514/0xb70
[  628.764218][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  628.769343][   T31]  ? __switch_to+0xc79/0x1410
[  628.774043][   T31]  ? __pfx_kthread+0x10/0x10
[  628.778648][   T31]  ret_from_fork_asm+0x1a/0x30
[  628.783440][   T31]  </TASK>
[  628.786612][   T31] Kernel Offset: disabled
[  628.790923][   T31] Rebooting in 86400 seconds..