last executing test programs:

3m40.677700574s ago: executing program 4 (id=1304):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000019c0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x4, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x3a, 0x1}, @fwd={0xd}, @fwd={0xa}, @volatile={0xa, 0x0, 0x0, 0x9, 0x3}, @struct={0xd, 0x2, 0x0, 0x4, 0x0, 0x924, [{0x0, 0x4, 0xc}, {0x10, 0x3, 0x7ff}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9, 0x2}, {0x4, 0x4}]}, @float={0xa, 0x0, 0x0, 0x10, 0x10}, @typedef={0xe, 0x0, 0x0, 0x8, 0x3}, @volatile={0x2, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f00000009c0)=""/4096, 0xb4, 0x1000, 0x0, 0x3, 0x10000, @value=r0}, 0x28)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000040)=ANY=[@ANYBLOB="53da1f8aa63119164c46148a0002"], 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x404084f)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRESOCT=r2, @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000001}, 0x94)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r6=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="b40200000000002561114e0000000000850000001c0000009500000000000000cc897072477a2e45f4cafb2c3ae6272b6ef3e5f72c357729b49683908dd3207816e747b8738cf56599aae75427658f2dc284cf04bae8517b500ca4a603149e6212e44c8a7b86efd00bf36cd0b63705ba3fe950b26b0fcff88a451bd6fc8cc38e85e5375730311f074acce7e65b6191cedc5f"], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r6, @ANYBLOB="40002f80"], 0x5c}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan3\x00', <r7=>0x0})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r8)
sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="60000000a6bfe356775d7a8dea685dc04a02e3825df1b63586a5157aa09e99212e10bebe4f7be0fcae8fd62b238c12e9e3813e27859ebf014fe1275881f58557775926f76bd03012579ce516fa7e8f156ccda63918c9cbf7bda91e535e8b34dbdf9124c8145c39adbaa4c8ff189e991061ef8091159841dc84eeb26da0d54170ef60c8088fe6d8ab10c5b188b152bc2abc6f139c1393be2b5286655068141702b644e2b13f31358bbc8e9d0b3395156cacb35e2f931799ef85acd9d19b6838aed58fc08918b6625f489690d7afe2f0647573e2", @ANYRES16=r5, @ANYBLOB="080025bd7000fedbdf25090000000c0006000300000003000000050007000300000008000300", @ANYRES32=r6, @ANYBLOB="05000700120000000c00060003000000000000000c0006000100000001000000080001000100000008000300", @ANYRES32=r7, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x1)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0xdb97e000)
r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0x9)
unshare(0x6020400)
socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r11 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r11)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)

3m40.080565553s ago: executing program 4 (id=1311):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b8008000900000000d8"], 0x184}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00'})
r2 = socket$kcm(0x2, 0x3, 0x2)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4)
sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x44, r5, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000008600), r6)
sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000008740)={0x0, 0x0, &(0x7f0000008700)={&(0x7f0000000400)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x4004804)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000080)=0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="08000500060000020000008004000500"], 0x2c}, 0x1, 0x0, 0x0, 0x408d1}, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="7e0e9f000428bdf8fffbdbdf254c00000008", @ANYRES32=r10, @ANYBLOB="0c009900ff000000050000000c0058003c000000000000000c00580002000000000000000c00580012000000000000000c0058006f000000000000000c0058005e00000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4008000)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt(r12, 0x1, 0xd, &(0x7f0000000380)=""/129, &(0x7f00000004c0)=0x81)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="04000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001640101000000000010000000000000000000000007000000"], 0x30}, 0x0)
r13 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', &(0x7f0000001000)=@ethtool_drvinfo={0x3, "381ab4e849c1886f2bd7c9fc48c2e796049366dc4857bd9572b0b92f56b7a4b8", "22e513069926bf1da282011f5e25ae064f99f9833415fc1c1a7afde7c02e469b", "98ea65fa34d064876ffe7e212fdae0b9b8bd246da6e8fb80a72654ff0d6b7b06", "aba3907f421c51f55eb5d2f11295b71bd68e680682c653ed8a0e800d77f6a9f6", "c3c289e44f995da0351323f2a636ff067ee116b209f33d67dd8def916f692422", "9ccaa72bd61efcec260aa48e", 0x1, 0x0, 0x8, 0x6, 0x9}})
socket$nl_xfrm(0x10, 0x3, 0x6)

3m39.696484461s ago: executing program 4 (id=1314):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffde3, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000004a00030000200000fbdbdf78f2008000", @ANYRES32=0x0, @ANYBLOB="0200000014dd8a0d269425d6ae3fe4000000000000001d1e05540870472db989"], 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48)
socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x70bd26, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e640000000800074000000003"], 0x104}}, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x80000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
setsockopt(r4, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r3)
r5 = socket$l2tp(0x2, 0x2, 0x73)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
r8 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r8, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0xffffffffffffff6e)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00001c12000300686173683a6e65742c706f7274000000"], 0x4c}}, 0x2)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601fcff00000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

3m39.299318794s ago: executing program 4 (id=1317):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async)
recvfrom(r0, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x10}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3m39.092400417s ago: executing program 4 (id=1320):
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
gettid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r4)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="38035145ea9980e30b46e75d9b4595aebd18114a21887c7ff9e08f2a21ddefbb44c9158960e43d2ae648285d3bcbb1ac4bc9084234c815b73d0f48ff53d0458e0f1eb0a42bbac5c62236a1f7107807985b6ea30d253e937f29c464eaf094153b68a84420ac098178", @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x40000102)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x27, 0xe40, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10)
socket$netlink(0x10, 0x3, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="0700000000000000bcf7d1725c60", 0x0, 0x808005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m38.104325464s ago: executing program 4 (id=1329):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28)
syz_emit_ethernet(0x83, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100000086dd60fec00000493a00fc0000000000000000000000000000fdff02000000000000000000000000000102009078000000006018b08800000000fe80000008000000000000000000002dfe8000000000000000000000000000aa1100000000aa732b49fb17c163a3040b77589bf5db6206eab7"], 0x0)
r2 = socket$inet6(0xa, 0xa, 0x1000)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0xa9}], 0x2}, 0x2102)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r9, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x2, 0x0, 0x0, {0x100000000, 0x5, 0x0, 0x9, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x400, 0xc, 0x7f}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x7, 0x24, [{0x12}, {0x1, 0x1}, {0x60}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x28040090)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x9, 0x4, 0xc, 0xb, 0x0, 0x1}, 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b00f80010000000000000000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x5f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r11}, 0xc)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00'})
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x830, 0x10220}}, 0x20}}, 0x24004814)
setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, r4}, 0x14)
r12 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x890b, &(0x7f0000000000)={<r13=>0xffffffffffffffff})
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000", @ANYRES32, @ANYBLOB="0000000000006fa02b176c651cdc73a4e9480000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ioctl$BTRFS_IOC_GET_FEATURES(r13, 0x80189439, &(0x7f0000000080))
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r14, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r1}, 0x20)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)

3m22.882631842s ago: executing program 32 (id=1329):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28)
syz_emit_ethernet(0x83, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100000086dd60fec00000493a00fc0000000000000000000000000000fdff02000000000000000000000000000102009078000000006018b08800000000fe80000008000000000000000000002dfe8000000000000000000000000000aa1100000000aa732b49fb17c163a3040b77589bf5db6206eab7"], 0x0)
r2 = socket$inet6(0xa, 0xa, 0x1000)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0xa9}], 0x2}, 0x2102)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r9, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x2, 0x0, 0x0, {0x100000000, 0x5, 0x0, 0x9, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x400, 0xc, 0x7f}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x7, 0x24, [{0x12}, {0x1, 0x1}, {0x60}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x28040090)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x9, 0x4, 0xc, 0xb, 0x0, 0x1}, 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b00f80010000000000000000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x5f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r11}, 0xc)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00'})
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x830, 0x10220}}, 0x20}}, 0x24004814)
setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, r4}, 0x14)
r12 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x890b, &(0x7f0000000000)={<r13=>0xffffffffffffffff})
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000", @ANYRES32, @ANYBLOB="0000000000006fa02b176c651cdc73a4e9480000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ioctl$BTRFS_IOC_GET_FEATURES(r13, 0x80189439, &(0x7f0000000080))
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r14, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r1}, 0x20)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)

2m10.000016911s ago: executing program 2 (id=2066):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4018, r0}, 0xfffffeea)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b32125}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000680)={'sit0\x00', <r1=>0x0, 0x20, 0x10, 0x4, 0x9, {{0xe, 0x4, 0x3, 0x7, 0x38, 0x66, 0x0, 0x1, 0x29, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0x14, 0x50, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xc}]}, @ra={0x94, 0x4}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "f37c3ed7"}]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x70, 0x0, 0x600, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4c083)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@fallback, 0xffffffffffffffff, 0x7}, 0x20)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000)
clock_gettime(0x3, &(0x7f0000000180))
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000000c0)={r2})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x8000, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0)
socket(0x10, 0x3, 0x0)

2m8.848218006s ago: executing program 2 (id=2074):
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x6a040000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b)
sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000", @ANYRESDEC], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r7, 0x0, 0xfdef)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00'}, 0x80)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

2m6.382924573s ago: executing program 2 (id=2095):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f00000007c0)={0x0, 0x0, 0x38, 0x1, 0x10001}) (async)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x0, 0xffffffff, 0x10, 0x1028, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r4 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async)
r5 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) (async)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async)
sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000cc0)="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", 0x1000, 0x40, &(0x7f0000001cc0)={0xa, 0x0, 0x1, @private2, 0x3}, 0x20) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}], 0x20}, 0x0) (async)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
recvmmsg(r6, &(0x7f00000004c0), 0x48, 0x820b, 0x0) (async)
setsockopt$inet6_int(r6, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) (async)
r7 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r7, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2cf20000b5f43e4bce447ccf22fd62ed5093451299f4a2b4fffe3b2309000000000000006073e04d69f30e53ff217272dd5b816b1b93283f7846826cd7b3b1d79be644644811f896926c703b873c26ebac2c7611c73605ade74725c98d0c960156f302a9c4e6cb96303e16bbb880c1a40b6b4f234f92c2d588a92dcd1d3f1e61376201f7b33aba6dd97915af43aae49e2f5f7a268970884034e6c57532a4d25edbcd4f5379b14249a0ea03000000000000004b9c20544660333161f018ed5444c893938b480014f05018ee1fc7aa526805f2d77a64", @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180004801300010062726f6164636173742d6c696e6b0000"], 0x2c}}, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)

2m6.044258038s ago: executing program 2 (id=2099):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="c8f1b52c00005a", @ANYRES16=r1, @ANYBLOB="01000000000000000000100000000800060001000000080006005c0000000800080000800000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008080)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x4, 0x1000}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$sock_buf(r6, 0x1, 0x38, 0x0, &(0x7f00000000c0))
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f00000001c0)={@broadcast, @multicast1}, &(0x7f0000000240)=0xc)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES16], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x20}, 0x1c)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, r11, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '^^@-['}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xfffffffffffffea1, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x8c0)
accept4(r9, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000400)=0x80, 0x40000)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r9)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130007000000080012"], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000)
socket$alg(0x26, 0x5, 0x0)

2m5.133833857s ago: executing program 2 (id=2109):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4)
bind$inet6(r0, &(0x7f0000000440)={0xa, 0xe24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005a0001002abd7000fbdbdf250008000200", @ANYRES32=0x0, @ANYBLOB="e7120a6e2fbb0d9020d1253dc2891c0f827720a727fa00"], 0x1c}, 0x1, 0x0, 0x0, 0x4802}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000000c0))
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000440), &(0x7f0000000040)=@udp=r4}, 0x20)
pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0x0, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643f080000007df67d544af6e8dafe09"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x7ff, 0x4}}}}]}, 0x44}}, 0x4c840)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r9 = socket$netlink(0x10, 0x3, 0x0)
writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000400000307fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r10, &(0x7f0000000000)="0a000000010001", 0x7)

2m4.264185121s ago: executing program 2 (id=2120):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0)
r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair(0x1, 0x2, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000001580)=""/66, 0x42}], 0x1}, 0x200003}], 0x1, 0x12140, 0x0)
recvmmsg$unix(r0, &(0x7f0000006140)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000002600)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000003100)=""/4080, 0xff0}], 0x1}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002d80)=""/136, 0x88}, {0x0}], 0x2}}], 0x3, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000200)="d6fe40c8c05f8042591a4e7cf168608094bbf06c88b4d10964d60544a08440489a3dac925cbafb6019b5782c5268b13f95b9bcd77a4fa700f10251bd1cc764f96271ee624376e916518dd49f75fa59243c78d6bac715ccc400bb7ba5b0ba0ca80a1963042126a3947b874208b064f3ff1123c7927b7701617d25aee348ba278f2a05ea358f95a4999640e4b152cacd0d9dea275288f6522180e67a9988662bbf4c9b10c09b254c33a1e67a8fe22520930dfd4906154746381a1d3bd16fbc880f7f23570051d8d933b432307fd466ff1063c5e181fc0ae19721aade2626179810e15a574d3510e876c0b4a5960ed6", 0xee}, {&(0x7f0000001440)="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", 0x1000}], 0x2}}], 0x2, 0x9200000000000000)

1m49.168906474s ago: executing program 33 (id=2120):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0)
r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair(0x1, 0x2, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000001580)=""/66, 0x42}], 0x1}, 0x200003}], 0x1, 0x12140, 0x0)
recvmmsg$unix(r0, &(0x7f0000006140)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000002600)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000003100)=""/4080, 0xff0}], 0x1}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002d80)=""/136, 0x88}, {0x0}], 0x2}}], 0x3, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000200)="d6fe40c8c05f8042591a4e7cf168608094bbf06c88b4d10964d60544a08440489a3dac925cbafb6019b5782c5268b13f95b9bcd77a4fa700f10251bd1cc764f96271ee624376e916518dd49f75fa59243c78d6bac715ccc400bb7ba5b0ba0ca80a1963042126a3947b874208b064f3ff1123c7927b7701617d25aee348ba278f2a05ea358f95a4999640e4b152cacd0d9dea275288f6522180e67a9988662bbf4c9b10c09b254c33a1e67a8fe22520930dfd4906154746381a1d3bd16fbc880f7f23570051d8d933b432307fd466ff1063c5e181fc0ae19721aade2626179810e15a574d3510e876c0b4a5960ed6", 0xee}, {&(0x7f0000001440)="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", 0x1000}], 0x2}}], 0x2, 0x9200000000000000)

18.754916152s ago: executing program 3 (id=2976):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) (async, rerun: 32)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async, rerun: 32)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4402}, 0x20044000) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000de8712de599dfc2f5f0000020000000000"], 0x0, 0x1a}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = socket(0x1e, 0x5, 0x0)
connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r5, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f0", 0x5}], 0x1) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x46, &(0x7f0000000380), 0x4)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000006800010000000000fddbdf25020000000000000004000b00040004000800018004"], 0x28}, 0x1, 0x0, 0x0, 0x4402}, 0x0) (async, rerun: 64)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01040000000000000000010000000900030073797a32000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800b000100736f636b657400002c000280080003000000003208000240000000080800014000000003"], 0x1f4}}, 0x0) (async)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r9, 0x1}, 0x1c}}, 0x0)

18.531596066s ago: executing program 3 (id=2978):
r0 = socket$nl_route(0x10, 0x3, 0x0)
close(0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x1, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x8000000}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x800640e}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc}, {0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {0x0, 0x9}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x4, 0x2000, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4}, {0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x800}, {0xdb3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x9797, 0x0, 0xec33, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe4}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x10000, 0x0, 0x0, 0xfffffffd}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

18.368869099s ago: executing program 3 (id=2980):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40, 0x2200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}]}, 0x40}}, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}})

17.611225821s ago: executing program 3 (id=2983):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r4=>0x0})
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}], 0x10)
socket$inet6(0xa, 0x5, 0x0) (async)
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async)
setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
ioctl$XFS_IOC_FSGEOMETRY_V4(r6, 0x8070587c, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084) (async)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084)
sendmsg$nl_route(r3, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@newneigh={0x70, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x0, 0x0, r4, 0x8}, [@NDA_LINK_NETNSID={0x2a, 0xa, 0xf}, @NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_IFINDEX={0x8}, @NDA_FDB_EXT_ATTRS={0x2c, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x2}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xd}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x81}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x8}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044010)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xb2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xb2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0207fd0002410000240012800b002100677265746170000014000280060002000900000000000000000000009f557a88209e39ada3abc903d3190cccd5c837555ef63b0c716aeef3c66c3d147040"], 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201)
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r10, 0x5201)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, r12, 0x1, 0x72bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffbb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3c}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x400, 0x80000000, 0x55, 0x9, 0x3, 0x12, 0x1}}]}}]}, 0x154}}, 0x0)

17.024610306s ago: executing program 3 (id=2987):
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={<r0=>0x0, 0xda1a}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000440)={r0, @in6={{0xa, 0x4e22, 0xfffffffe, @local, 0x17ffd}}, 0x1, 0xfffe}, 0x90)
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc", 0xe)
socket$nl_route(0x10, 0x3, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f0000000080))
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, r3, 0x2, 0x3, 0x3}, 0x50)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x4000810}, 0x2aa7a77ea2b8f41a)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={r5})
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000080)={r5})
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4)
recvmmsg(r4, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0, 0x8}, 0x8)
sendmsg$nl_route_sched(r2, 0x0, 0x0)

16.692575412s ago: executing program 3 (id=2991):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x28, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008f00000000000000020100001811", @ANYRES32, @ANYBLOB="0000000000000000b70200001400008db7030000000700008500000086000000bf09000000000000550901000201000095000000000000002500feff0800000018140000", @ANYRES32, @ANYBLOB="0000000000000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000002000085000000ae000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ad00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x27, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000", @ANYRES32=r2, @ANYBLOB="00000000000000008500000003000000851000000800000018400000f8ffffff000000000000000005360400fcffffff97bcf0ffffffffff"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x7f, &(0x7f0000000200)=""/127, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2e, r2, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xb, 0x3, 0x9}, 0x10, 0x0, r1, 0x4, &(0x7f0000000b40)=[r2, r2, 0xffffffffffffffff, r2, r2, r3, r2, r2, r2, r5], &(0x7f0000000b80)=[{0x1, 0x4, 0x7, 0xa}, {0x1, 0x4, 0xc, 0xc}, {0x4, 0x5, 0xc, 0xb}, {0x5, 0x1, 0x0, 0x8}], 0x10, 0x3}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="2d6e657420b2d3e0b395088a0cc8126b6253368ff26b37d40bfbd97a0941afab1ca6d1903b20cdbedceead69f7283b38da80752e36e43a4496f0456374d17516ed2da4c9af828570acfffb96d7c59bf43bbfa28c2de8d5e1bce1ba9719667d27d65af397c8ce5bc6b056e5dae33f000000000000000000000000000000000000000000002000000000a3d28e544374adab89874ac63e7cf1792de3eaa2da6b8b0d663f322b97df524f764876b2788f"], 0x5)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10010, r0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

4.651855974s ago: executing program 0 (id=3059):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000a00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="0204000204000000000000000002000100000004d60000000000000020"], 0x20}, 0x1, 0x7}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c000180060006"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x37000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x80, 0x20, 0x0, 0xfc, 0x0, 0xfd, 0x0, 0x3000}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x598, 0x208, 0x208, 0x3d0, 0x208, 0x110, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000b00), {[{{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x9, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}, 0x4e24}}}, {{@ipv6={@local, @private1, [0xff, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0x0, 0xff, 0xff], 'dvmrp1\x00', 'nicvf0\x00', {}, {}, 0x5e, 0x2, 0x1, 0x20}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x27}}}, {{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffff00, 0xff, 0xffffff00, 0xff000000], [0xff, 0x0, 0xff], 'bond0\x00', 'wg0\x00', {}, {}, 0x16, 0x9, 0x6, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100ffffffe40007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r11=>0x0})
sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000009c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
syz_emit_ethernet(0x86, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x50, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@dstopts={0x2f, 0x2, '\x00', [@padn, @calipso={0x7, 0x8, {0x2, 0x0, 0x1, 0x2}}, @enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0xe}]}]}}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r11, @ANYBLOB="100001800400", @ANYRESDEC=0x0], 0x28}}, 0x0)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

4.59477348s ago: executing program 6 (id=3060):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x43, 0x8, 0x0, 0x0}}, 0x10)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100000108021100000b08021100000000000000000000110c62e7a3d1addee900000064000100000602020202020201"], 0x36)
sendmsg$inet(r2, 0x0, 0x20008000)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f0000000140)=[{&(0x7f0000000180)="a2", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0)
write$cgroup_type(r6, &(0x7f0000000280), 0x9)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a0800064000000025090001"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r9 = socket(0x10, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r7, @ANYRES64=r1, @ANYRES8=r10], 0xa0}}, 0x1)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000380)=0xffffffff)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x16}, {0x0, 0x4, 0x549, 0x0, 0x52b, 0xb}, {0x1fd, 0xe6, 0x4053e5, 0x60}, 0x6, 0x6e6bbb, 0x0, 0x0, 0x2, 0x1}, {{@in=@local, 0x4d4, 0x2b}, 0x2, @in6=@loopback, 0x3502, 0x1, 0x2, 0x0, 0x6, 0xfffffffc}}, 0xe8)

4.226748792s ago: executing program 0 (id=3061):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={<r1=>0x0, 0x3, 0x10, 0x1, 0x2}, &(0x7f0000000380)=0x18)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000003c0)={0x7, 0x6, 0x203, 0x6, 0x7, 0x9, 0x2, 0x16, <r2=>r1}, &(0x7f0000000400)=0x20)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001140)=ANY=[@ANYBLOB="092d0e02c6509d5605057433c3164732356e09cafe47e2461d82a8cbdd357d45ffc67cc1b05d596df811cd656d3d6c4dc7cc1b009d108c", @ANYRESHEX=r1, @ANYRES16=0x0, @ANYRES64=r2], 0x190)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
setsockopt(r0, 0x84, 0x81, 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0)
syz_emit_ethernet(0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbba5bbbbbb0800450009000000000000009078ac1e0001ac1414aa030490781200183f2500000000000000000100007f0000017f000001001863"], 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c)
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r6 = socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$bt_hci(r6, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)
ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="800000001e0001002abd7000ffdbdf25ffffffff000000000000000000000000000004d50a003200fe8000000000000000000200000000bb090000000735000024000900040000000000e6fff36e0000000000005300000000000000000000000000000014000e000a0101010000000000000000000000000500190000000000"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0xc014)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054)
connect$nfc_llcp(r6, &(0x7f00000010c0)={0x27, r10, 0xffffffffffffffff, 0x0, 0x9, 0xf, "c2b48f84cd8bc6fe878bf175dddf707db0e81f4ca03c1b2c804e25ba06845a6a3cfbc75f2c78835d70c38f537ff3c168d7ce2a3448eefd56b51dd5f510dd4d", 0x18}, 0x60)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f00000001c0)=0xf55c, 0x4)

3.463946825s ago: executing program 6 (id=3065):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x6}, 0x8)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
listen(r2, 0x97)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0xfdef)

3.46147292s ago: executing program 5 (id=3066):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r3, 0x890b, 0x0)
connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r6 = socket(0x10, 0x803, 0x8)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="01002708e105b19f4b1e4600"], 0xfd6c)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0)

3.244450118s ago: executing program 0 (id=3067):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000250007"], 0x14}, 0x1, 0x0, 0x0, 0x24048851}, 0xc000)
write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0bf600004e"], 0xfe33)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={<r1=>0x0, 0x4, 0x20, 0x100}, &(0x7f0000000080)=0x18)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x8208, 0x6800, 0x1, r1}, &(0x7f0000000100)=0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$kcm(0x10, 0x400000002, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000250007"], 0x14}, 0x1, 0x0, 0x0, 0x24048851}, 0xc000) (async)
write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0bf600004e"], 0xfe33) (async)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x4, 0x20, 0x100}, &(0x7f0000000080)=0x18) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x8208, 0x6800, 0x1, r1}, &(0x7f0000000100)=0x10) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)

3.105691927s ago: executing program 1 (id=3068):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="e870080995d39955ffff0000000000007d", 0x11}], 0x1}], 0x1, 0x200008c0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2000}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2000})
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000100)=0xc39, 0x4)
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0], 0x10c2)

2.592799475s ago: executing program 0 (id=3069):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0xa, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0xd, 0x7b, 0x10, @remote, @empty, 0x8, 0x40, 0x6, 0xffffffff}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@mpls_delroute={0x58, 0x19, 0x8, 0x70bd27, 0x25dfdbff, {0x1c, 0x0, 0x80, 0x6, 0xff, 0x1, 0xc8, 0x0, 0x3800}, [@RTA_OIF={0x8, 0x4, r0}, @RTA_VIA={0x14, 0x12, {0x23, "b943fb599d3383c024d29675863f"}}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2d, 0x3, r1}}, @RTA_VIA={0x14, 0x12, {0x29, "000501b2005b3fc4b640d810a58b"}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000680)={<r4=>0xffffffffffffffff})
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000700)=[@in6={0xa, 0x4e20, 0x1, @remote, 0xffff}, @in={0x2, 0x4e24, @multicast2}], 0x2c) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000740)) (async)
ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000780)=0x7) (async)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xf9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xa4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x52}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7a3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}]}, 0x64}}, 0x840)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000000940)) (async)
sendfile(r6, r2, &(0x7f0000000980), 0x4) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f00000009c0)={<r8=>0x0, 0x7, 0x6, 0x1})
ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000dc0)={r8, 0x6, 0x8b, 0x1}) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000011c0)={'pimreg0\x00', 0x10}) (async)
socket$packet(0x11, 0x3, 0x300) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000001200), r4) (async)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0xb8, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2742bbefb4915ed4, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x6e625ba2c0ad5e76}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xd}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff2}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4040}, 0x2) (async)
sendmmsg$inet6(r6, &(0x7f0000001900)=[{{&(0x7f00000013c0)={0xa, 0x4e23, 0x7, @mcast2, 0x7}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000001400)="802aeca71ad4d352ff07ae4857727711962d9a6b7cbd4b032557556f36a0c90ff27458ed56d75aa5abb46f116884bbc74d0b2922f0e5b6940ba00b59c14f195be3b7d57248dbfc5b5b2b8c869f2db5686d4cc7c3a78b4491adce19d3c175416d29c7a33dadfa62b84aeed2fa7f46699ead9539c798a1712423ef86916143976abea147f7eb48130de89187dcd68233b997411af70348c871353413217361e7ac84a818", 0xa3}, {&(0x7f00000014c0)}, {&(0x7f0000001500)="8012339c60acbdf3b1a4f83ef9572d1ca6dc2d23e8c671edf31cf975c4dc0fa74146cba42aa5431e68f2b31f04ef22611791da8f566b30b49cf0cb7a06f84690b7c74da29e7191d3a556", 0x4a}, {&(0x7f0000001580)="2fdb4b03f6540235aae7035d0bf20c2dfb0fecdad065c5c5f4707b6dd0859858b62daefb39dec19a07f5b697a66e643d37070c41f9dcc11a82c3a8ba4caa87d4e37729d97f94cd91749b671127943a66526a61370d9cf9c7d45ba44f72e0dcd0ce19338c82ba3ca6d1b66de6e2dbd5a9efe85f30ee1d580b15df0725b75148d93d45added7bbe4f02a40121343cb03520a13dea3b55f", 0x96}, {&(0x7f0000001640)="8aef80a42b300ca56c2cddfda806c0b7d4c9528564e0b2a2ae2cee149dc2772d4715fda551261600bec2b0def0535abca835fa0247213ecd826e29aeba35f5a99d24d9b0c2ce6848b43f4c56fbd2329668461fc27a118ad1dc2dc0eb96908b36c89a382ceabf95a286772790ffcea69aae3c688736ec31a67fdbcc95e2f9030ef203b2b40d96a8fec1dce5d22b25d5816cafc1b6311032b5", 0x98}], 0x5, &(0x7f0000001780)=[@hopopts={{0x50, 0x29, 0x36, {0x2b, 0x6, '\x00', [@ra={0x5, 0x2, 0x2}, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0x81, 0x0, [0x2014, 0x7, 0x100, 0x1]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffffe}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r0}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x5c, 0x1, '\x00', [@generic={0x1, 0x7, "2c670097b8649d"}]}}}, @dstopts_2292={{0xa8, 0x29, 0x4, {0x3a, 0x11, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x1abe, [0x6, 0xff]}}, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x4, 0xffff, [0x0]}}, @calipso={0x7, 0x50, {0x1, 0x12, 0x4, 0x1, [0x100, 0x7081, 0x1, 0x5, 0xffffffffffffff9a, 0x4, 0xf57, 0xff, 0x7]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x178}}], 0x1, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x8040) (async)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000001a40)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r2)
sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x54, r9, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x54}, 0x1, 0x0, 0x0, 0x6100}, 0x810) (async)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000001c40)) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000001c80), 0x101401, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0xfc, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}}, 0x0)

2.387988416s ago: executing program 0 (id=3070):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000100001e8fbfffffff9fbde2500000000", @ANYRES32=0x0, @ANYBLOB="3707000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x240088d0}, 0x0)

2.336092945s ago: executing program 0 (id=3071):
unshare(0x62000000)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvlan1\x00'})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0)

2.020145096s ago: executing program 1 (id=3072):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1ab642, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x9, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x300, 0x70bd2d, 0xffffffef, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x4, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r8, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000280)="08001efb", 0x4}, {&(0x7f00000001c0)="20a3cdd6", 0x4}], 0x2}, 0x20000810)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@deltaction={0x14, 0x31, 0x200, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@typedef={0x10}, @enum={0x3, 0x3, 0x0, 0x6, 0x4, [{0x9, 0x9}, {0x7}, {0xb, 0x5}]}]}, {0x0, [0x61, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000000540)=""/106, 0x51, 0x6a, 0x0, 0xa8b, 0x10000}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x8, '\x00', r4, r10, 0x2, 0x3, 0x3}, 0x50)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00'})
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
epoll_wait(0xffffffffffffffff, &(0x7f0000000100)=[{}, {}], 0x2, 0xf2f9)
setsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000040)=0x7b, 0x4)

1.933806079s ago: executing program 5 (id=3073):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010004b0429bd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="09a00100068100001c0012800b00010062726964676500000c04028005002400010000000a000100aa"], 0x48}}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x5c, r4, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x5c}}, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x19, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x68}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000a80)={0x2, 0x5, 0x0, 0x100000000, 0x6, 0x11, 0x100000000000003, 0xfffffffffffffffd}, &(0x7f00000003c0)={0x8, 0xa, 0x4, 0x800, 0x1000000000e, 0x7fff, 0xfffffffffffff2e0, 0x100000000}, 0x0, 0x0, 0x0)
r9 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x81800)
getsockopt$llc_int(r9, 0x10c, 0x9, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x40, r8, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0xc5}, 0x4000000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010004b0429bd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="09a00100068100001c0012800b00010062726964676500000c04028005002400010000000a000100aa"], 0x48}}, 0x20000000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) (async)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x18) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x5c, r4, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x5c}}, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x19, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x68}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
pselect6(0x40, &(0x7f0000000a80)={0x2, 0x5, 0x0, 0x100000000, 0x6, 0x11, 0x100000000000003, 0xfffffffffffffffd}, &(0x7f00000003c0)={0x8, 0xa, 0x4, 0x800, 0x1000000000e, 0x7fff, 0xfffffffffffff2e0, 0x100000000}, 0x0, 0x0, 0x0) (async)
accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x81800) (async)
getsockopt$llc_int(r9, 0x10c, 0x9, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) (async)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x40, r8, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0xc5}, 0x4000000) (async)

1.731673416s ago: executing program 6 (id=3074):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xffffffffffffffbd, 0x0, &(0x7f00000002c0)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2c29ae499b3f581", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x38}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r1}, 0x94)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001000000000000020000000000006b7d2d1fdd92d9f8b200000000120a01020000000000000000020000200900020073797a310000000008000440000000000900010073797a30000000000800f33f0000000a1400000011000100000000221ef1b9217ba0441a7320"], 0x64}}, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008000)
socket$alg(0x26, 0x5, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000001)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0)
close(r8)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0)

1.598871272s ago: executing program 5 (id=3075):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0xe, 0x0, 0xfffffffb, 0x7}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7000000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c0002800500010000000000140001800800010000000900000000000000020208000740000000000c0018800800014000000000"], 0x70}}, 0x0)
sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf250501f2800f0018007d3a2e9c5bc85c23277d0000140001"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)

1.40895072s ago: executing program 5 (id=3076):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}]}, 0x18}}, 0x0)
recvmmsg(r0, &(0x7f0000006600)=[{{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000002bc0)=[{&(0x7f00000005c0)=""/84, 0x54}, {&(0x7f0000000640)=""/51, 0x33}, {&(0x7f0000000740)=""/107, 0x6b}, {&(0x7f00000009c0)=""/213, 0xd5}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/37, 0x25}, {&(0x7f0000002b00)=""/158, 0x9e}], 0x8, &(0x7f0000002d00)=""/170, 0xaa}, 0xf}, {{&(0x7f0000002dc0)=@phonet, 0x80, &(0x7f0000005380)=[{&(0x7f0000002e40)=""/247, 0xf7}, {&(0x7f0000002f40)=""/3, 0x3}, {&(0x7f0000002f80)=""/90, 0x5a}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/204, 0xcc}, {&(0x7f0000004100)=""/37, 0x25}, {&(0x7f0000004140)=""/118, 0x76}, {&(0x7f00000041c0)=""/254, 0xfe}, {&(0x7f00000042c0)=""/181, 0xb5}, {&(0x7f0000004380)=""/4096, 0x1000}], 0xa, &(0x7f0000005440)=""/160, 0xa0}, 0x3}, {{&(0x7f0000005500)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000055c0)=[{0x0}], 0x1, &(0x7f0000005600)=""/4096, 0x1000}, 0x9}], 0x3, 0x10100, &(0x7f00000066c0)={0x0, 0x3938700}) (async)
recvmmsg(r0, &(0x7f0000006600)=[{{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000002bc0)=[{&(0x7f00000005c0)=""/84, 0x54}, {&(0x7f0000000640)=""/51, 0x33}, {&(0x7f0000000740)=""/107, 0x6b}, {&(0x7f00000009c0)=""/213, 0xd5}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/37, 0x25}, {&(0x7f0000002b00)=""/158, 0x9e}], 0x8, &(0x7f0000002d00)=""/170, 0xaa}, 0xf}, {{&(0x7f0000002dc0)=@phonet, 0x80, &(0x7f0000005380)=[{&(0x7f0000002e40)=""/247, 0xf7}, {&(0x7f0000002f40)=""/3, 0x3}, {&(0x7f0000002f80)=""/90, 0x5a}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/204, 0xcc}, {&(0x7f0000004100)=""/37, 0x25}, {&(0x7f0000004140)=""/118, 0x76}, {&(0x7f00000041c0)=""/254, 0xfe}, {&(0x7f00000042c0)=""/181, 0xb5}, {&(0x7f0000004380)=""/4096, 0x1000}], 0xa, &(0x7f0000005440)=""/160, 0xa0}, 0x3}, {{&(0x7f0000005500)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000055c0)=[{0x0}], 0x1, &(0x7f0000005600)=""/4096, 0x1000}, 0x9}], 0x3, 0x10100, &(0x7f00000066c0)={0x0, 0x3938700})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x2dbb, 0x0, r1, 0xcac, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x2dbb, 0x0, r1, 0xcac, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}]}, &(0x7f0000000280)='GPL\x00', 0x101, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x4, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r1, r3, r1, r1, r1, r1, r4, r1], &(0x7f0000000440)=[{0x4, 0x3, 0x3, 0x8}, {0x1, 0x2, 0xf, 0xc}, {0x0, 0x1, 0xf, 0x9}], 0x10, 0x80}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x696}]}}}]}, 0x44}}, 0x40000c0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f0000006700)=ANY=[@ANYBLOB="1809000000004b712e4800000000000018110000", @ANYBLOB="0000000000000000b70222cac61bcbd3d8000114000000b7030000000000008508000000000000bf090000000000497446338d08f30f4c9894b200b60901000000000066002200000000021801316d7af26c25000000fffc2020207b9af8ff000000005d91000000a7000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b503bbf54779fc81c566000076142dc8682e"], &(0x7f0000000000)='syzkaller\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f0000006700)=ANY=[@ANYBLOB="1809000000004b712e4800000000000018110000", @ANYBLOB="0000000000000000b70222cac61bcbd3d8000114000000b7030000000000008508000000000000bf090000000000497446338d08f30f4c9894b200b60901000000000066002200000000021801316d7af26c25000000fffc2020207b9af8ff000000005d91000000a7000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b503bbf54779fc81c566000076142dc8682e"], &(0x7f0000000000)='syzkaller\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.212447305s ago: executing program 1 (id=3077):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000008000000911003000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$unix(0x1, 0x5, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @empty, 0x7ff}], 0x2c)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000d40)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4040850}, 0x70048000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000580), 0x4)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)}], 0x2}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f727400000000"], 0x58}}, 0x2)
bpf$TOKEN_CREATE(0x24, 0x0, 0x50c66c373a9ff759)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000597fb1fec749000000000018450000010000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000030000000000000000000000bb060004400e1f2000050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

1.102493971s ago: executing program 5 (id=3078):
r0 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000240)={&(0x7f0000000180)=[{0x8, 0x0, 0x0, {0x8000000000000000, 0x8, 0x1}}, {0x4af, 0x2, 0x0, {0x4, 0x80000000, 0x2}}, {0x6, 0x2, 0x0, {0x4, 0x80}}, {0xe, 0x1, 0x0, {0x6, 0x400}}, {0x80, 0x2, 0x0, {0x6, 0x8, 0x1}}], 0x5, 0x20, 0x9, 0x9})
sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{0x0, 0x2}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x20, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc}}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4004840)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000015100100ffffffff000000000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x200040c1}, 0x0)

1.00458435s ago: executing program 1 (id=3079):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r4, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}}, 0x0)

847.929617ms ago: executing program 5 (id=3080):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080003001400010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2408c080)
connect$can_bcm(r5, &(0x7f0000000540), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000004500"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="000000000100000000000029fd71a29d3295d8"], 0x48}, 0x2}, 0x800)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
unshare(0x22020400)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840)
write$nci(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="510401"], 0x4)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

486.038486ms ago: executing program 6 (id=3081):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ef}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20)
r1 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r1, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000300)='\x00'/20, 0x14}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c0010800800024000000007080001"], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ef}, 0x94) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20) (async)
socket(0x2, 0x3, 0xff) (async)
sendmmsg$inet(r1, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000300)='\x00'/20, 0x14}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c0010800800024000000007080001"], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) (async)

265.910382ms ago: executing program 6 (id=3082):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

152.630651ms ago: executing program 1 (id=3083):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x6e6bb4}}, [@policy_type={0xa}, @mark={0xc}]}, 0xd8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff8}, [@generic={0x91, 0x1, 0x1, 0x8a}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

43.654286ms ago: executing program 6 (id=3084):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x597d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}]}]}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000)
r1 = socket$netlink(0x10, 0x3, 0x7)
r2 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e1e, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={r3, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14)
socket(0xdad31e303b522a92, 0x1, 0x7)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x21}]}}}]}, 0x38}}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000000)="64ecf9eaf0400ea33689d9ebcb3c37b33924a19c7f217525314ad3ef1c5f128defdcb64ace5639d1e1", 0x29)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x46, 0x0, 0xa}, 0x28)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800010301000d00000000000a410000ff0300060000000014000100fe80"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket(0x40000000015, 0x805, 0x0)
accept$unix(r5, 0x0, 0x0)
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000000)=0x5)

0s ago: executing program 1 (id=3085):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200", @ANYRES64=r0], 0x108}}], 0x1, 0xc040)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "8d5d9ff3505ea2fc", "56767ae2e89e2e627065ea1bc35b0614", "aaa9e01f", "e493fc43e5727f37"}, 0x28)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'})
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000002c0)={{<r2=>r1, &(0x7f0000000080)='${!\\-*k[\x00', 0x40, &(0x7f0000000100)={@_ha_fsid={[0x0, 0xef]}, {0x8, 0x4, 0x3, 0x8}}, 0x72, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x2}, {[0x2, 0x8, 0x1, 0xead5]}, 0x81, 0x66, &(0x7f0000000240)=""/102})
getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000003c0), &(0x7f0000000500)=0x4)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2)
unshare(0x40000400)
syz_emit_ethernet(0x3e, &(0x7f0000000480)={@multicast, @random="0100000000c9", @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "d82b06", 0x8, 0x0, 0x0, @private2, @mcast2, {[@hopopts={0x29}]}}}}}, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x6}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, &(0x7f0000001080)={{0x4, @loopback, 0x2, 0x0, 'wrr\x00', 0x1d, 0x0, 0x61}, {@private=0xa0100ff, 0x2, 0x2000, 0x7ffffff, 0x0, 0x20104}}, 0x44)
getsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000000040))
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x40000000, @ipv4={'\x00', '\xff\xff', @local}, 0x43}, 0x1c)

kernel console output (not intermixed with test programs):

.183053][T13444] syzkaller0: entered promiscuous mode
[  341.191231][T13444] syzkaller0: entered allmulticast mode
[  341.299328][T10940] bond3: (slave bridge4): failed to get link speed/duplex
[  341.322885][T13447] lo speed is unknown, defaulting to 1000
[  341.419738][T10940] bond3: (slave bridge4): failed to get link speed/duplex
[  341.472860][T13457] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1920'.
[  341.494834][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1920'.
[  341.551121][T13460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1920'.
[  341.581428][T13457] bond1: option broadcast_neighbor: invalid value (30)
[  341.602131][T13457] bond1 (unregistering): Released all slaves
[  341.679025][T10940] bond3: (slave bridge4): failed to get link speed/duplex
[  341.829911][T10940] bond3: (slave bridge4): failed to get link speed/duplex
[  341.871817][T13464] syzkaller0: entered promiscuous mode
[  341.889337][T13464] syzkaller0: entered allmulticast mode
[  342.028927][T10940] bond3: (slave bridge4): failed to get link speed/duplex
[  342.150352][T10933] bond3: (slave bridge4): failed to get link speed/duplex
[  342.291951][T10937] bond3: (slave bridge4): failed to get link speed/duplex
[  342.304576][T13476] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1924'.
[  342.431502][T10935] bond3: (slave bridge4): failed to get link speed/duplex
[  342.514571][T13451] lo speed is unknown, defaulting to 1000
[  342.649121][T13490] bridge_slave_0: left allmulticast mode
[  342.655160][T13490] bridge_slave_0: left promiscuous mode
[  342.662919][T13490] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.674799][T13490] bridge_slave_1: left allmulticast mode
[  342.681172][T13490] bridge_slave_1: left promiscuous mode
[  342.687296][T13490] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.711761][T13490] bond0: (slave bond_slave_0): Releasing backup interface
[  342.722145][T13490] bond0: (slave bond_slave_1): Releasing backup interface
[  342.735658][T13490] team0: Port device team_slave_0 removed
[  342.744088][T13490] team0: Port device team_slave_1 removed
[  342.752202][T13490] batman_adv: batadv0: Removing interface: batadv_slave_0
[  342.761289][T13490] batman_adv: batadv0: Removing interface: batadv_slave_1
[  342.771659][T13490] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  343.540230][T13513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1934'.
[  343.695585][T13514] lo speed is unknown, defaulting to 1000
[  343.811715][T10940] wlan0: Trigger new scan to find an IBSS to join
[  343.818309][T10933] wlan1: Trigger new scan to find an IBSS to join
[  343.964445][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1937'.
[  344.056835][ T5639] block nbd3: Receive control failed (result -32)
[  344.177414][T13528] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  344.403147][T13536] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1941'.
[  344.466135][T13540] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1942'.
[  344.879999][T13545] lo speed is unknown, defaulting to 1000
[  345.428195][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1950'.
[  345.476667][T13571] bond0: option lp_interval: invalid value (18446744073709551612)
[  345.484922][T13571] bond0: option lp_interval: allowed values 1 - 2147483647
[  346.107470][T13599] __nla_validate_parse: 4 callbacks suppressed
[  346.107490][T13599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1958'.
[  346.263278][T13603] netlink: 'syz.5.1959': attribute type 1 has an invalid length.
[  346.390457][T10933] net_ratelimit: 21 callbacks suppressed
[  346.390507][T10933] bond3: (slave bridge4): failed to get link speed/duplex
[  346.521889][T10940] bond3: (slave bridge4): failed to get link speed/duplex
[  346.664300][T10933] bond3: (slave bridge4): failed to get link speed/duplex
[  346.788721][T10935] bond3: (slave bridge4): failed to get link speed/duplex
[  346.909369][T10940] bond3: (slave bridge4): failed to get link speed/duplex
[  346.979963][T13630] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1967'.
[  347.052261][T10940] bond3: (slave bridge4): failed to get link speed/duplex
[  347.170534][T10937] bond3: (slave bridge4): failed to get link speed/duplex
[  347.397519][T13643] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.427500][T13643] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.550816][T10937] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  347.567247][T10937] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  347.578809][ T5752] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  347.600436][T10937] bond3: (slave bridge4): failed to get link speed/duplex
[  347.673942][T13643] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.702214][T13643] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.835926][T13643] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.880072][T13643] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.894340][T13671] netlink: 'syz.5.1975': attribute type 11 has an invalid length.
[  347.949240][T13677] netlink: 'syz.2.1978': attribute type 3 has an invalid length.
[  347.955240][T13676] netlink: 'syz.3.1977': attribute type 21 has an invalid length.
[  347.968790][T13677] netlink: 'syz.2.1978': attribute type 3 has an invalid length.
[  347.972960][ T6825] bond3: (slave bridge4): failed to get link speed/duplex
[  347.998973][T13676] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1977'.
[  348.010142][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1977'.
[  348.054862][T13677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1978'.
[  348.105551][T13685] netlink: 'syz.1.1979': attribute type 1 has an invalid length.
[  348.117373][T13685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  348.141862][T13643] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  348.178820][T13643] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.198806][ T5752] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  348.328026][T13690] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1981'.
[  348.418153][T10939] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  348.431168][T13692] netlink: 'syz.3.1982': attribute type 2 has an invalid length.
[  348.439467][T10939] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.453752][T13692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1982'.
[  348.518140][T10939] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  348.528909][ T5745] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  348.542968][T10939] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.616512][T10937] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  348.647323][T10937] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.730935][T10940] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  348.758783][T10940] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.768728][T10937] wlan0: Trigger new scan to find an IBSS to join
[  348.775325][ T6825] wlan1: Trigger new scan to find an IBSS to join
[  349.048179][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'.
[  349.071392][T13710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1988'.
[  349.156019][T13717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1990'.
[  349.597001][T13720] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.604353][T13720] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.632766][T13720] bond_slave_0: left promiscuous mode
[  349.639984][T13720] bond_slave_1: left promiscuous mode
[  349.680258][T10939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.689324][T13720] team_slave_1: left promiscuous mode
[  349.719536][T10939] wlan1: Creating new IBSS network, BSSID c2:fe:2d:41:97:22
[  349.985949][T13720] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.018789][T13720] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.435919][T13728] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.519531][T10935] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.565769][T10935] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  350.619552][T10935] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.663217][T10935] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  350.738305][T10935] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.764214][T13749] netlink: 'syz.2.1998': attribute type 1 has an invalid length.
[  350.785741][T10935] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  350.850088][T10935] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.899529][T10935] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  351.113040][T13765] nbd: must specify a size in bytes for the device
[  351.186708][T13765] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  351.408793][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  351.710379][ T6825] net_ratelimit: 13 callbacks suppressed
[  351.710403][ T6825] bond3: (slave bridge4): failed to get link speed/duplex
[  351.858975][T10940] bond3: (slave bridge4): failed to get link speed/duplex
[  352.026593][T13810] __nla_validate_parse: 6 callbacks suppressed
[  352.026615][T13810] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2011'.
[  354.185628][T13817] bridge2: entered promiscuous mode
[  354.426224][T13827] netlink: 'syz.0.2017': attribute type 4 has an invalid length.
[  354.439334][T10937] bond3: (slave bridge4): failed to get link speed/duplex
[  354.455389][T13827] netlink: 'syz.0.2017': attribute type 4 has an invalid length.
[  354.559407][T10938] bond3: (slave bridge4): failed to get link speed/duplex
[  354.689776][T10937] bond3: (slave bridge4): failed to get link speed/duplex
[  354.819054][T10937] bond3: (slave bridge4): failed to get link speed/duplex
[  354.939862][ T6825] bond3: (slave bridge4): failed to get link speed/duplex
[  355.049120][ T6825] bond3: (slave bridge4): failed to get link speed/duplex
[  355.128466][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2025'.
[  355.169300][T10935] bond3: (slave bridge4): failed to get link speed/duplex
[  355.233634][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2028'.
[  355.289187][T10938] bond3: (slave bridge4): failed to get link speed/duplex
[  355.500094][T13870] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2031'.
[  355.593597][T13872] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2033'.
[  355.636742][T13877] netlink: 'syz.1.2034': attribute type 20 has an invalid length.
[  355.695308][T13877] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2034'.
[  355.724989][T13879] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  355.983253][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2040'.
[  356.059895][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2041'.
[  356.112755][T13901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2041'.
[  356.146774][T13904] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2042'.
[  356.575915][T13923] xt_hashlimit: size too large, truncated to 1048576
[  356.786106][T13941] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  356.834692][T10935] net_ratelimit: 11 callbacks suppressed
[  356.834715][T10935] bond3: (slave bridge4): failed to get link speed/duplex
[  356.889429][T13942] netlink: 'syz.3.2048': attribute type 1 has an invalid length.
[  356.960910][T10938] bond3: (slave bridge4): failed to get link speed/duplex
[  357.088989][T10938] bond3: (slave bridge4): failed to get link speed/duplex
[  357.199229][T10937] bond3: (slave bridge4): failed to get link speed/duplex
[  357.318965][T10938] bond3: (slave bridge4): failed to get link speed/duplex
[  357.457758][T10935] bond3: (slave bridge4): failed to get link speed/duplex
[  357.573414][T10939] bond3: (slave bridge4): failed to get link speed/duplex
[  357.721575][T13989] __nla_validate_parse: 7 callbacks suppressed
[  357.721595][T13989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2057'.
[  357.737739][   T47] bond3: (slave bridge4): failed to get link speed/duplex
[  357.998803][T10935] bond3: (slave bridge4): failed to get link speed/duplex
[  358.164054][T13989] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  358.171726][T13975] lo speed is unknown, defaulting to 1000
[  358.198823][   T12] bond3: (slave bridge4): failed to get link speed/duplex
[  358.534227][T14022] netlink: 'syz.2.2066': attribute type 10 has an invalid length.
[  358.588499][T14022] team0: Port device dummy0 added
[  358.620668][T14022] netlink: 'syz.2.2066': attribute type 10 has an invalid length.
[  358.629751][T14024] vlan2: entered allmulticast mode
[  358.642746][T14024] bridge0: port 3(vlan2) entered blocking state
[  358.653520][T14024] bridge0: port 3(vlan2) entered disabled state
[  358.666447][T14024] vlan2: entered promiscuous mode
[  358.703509][T14022] team0: Port device dummy0 removed
[  358.782897][T14022] dummy0: entered allmulticast mode
[  358.817762][T14022] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  358.960345][T14015] lo speed is unknown, defaulting to 1000
[  359.328760][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  360.037825][T14054] lo speed is unknown, defaulting to 1000
[  360.251042][T14071] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2079'.
[  360.724864][T14083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2080'.
[  360.752110][T14083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2080'.
[  360.920549][T14089] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2084'.
[  360.954878][T14089] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2084'.
[  360.968220][T14089] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2084'.
[  361.199935][T14095] x_tables: unsorted underflow at hook 3
[  361.524068][T14103] xt_policy: too many policy elements
[  361.545889][T14102] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2088'.
[  361.767955][T14111] netlink: 'syz.3.2090': attribute type 1 has an invalid length.
[  361.868938][T14111] bond8: entered promiscuous mode
[  361.885515][T14111] 8021q: adding VLAN 0 to HW filter on device bond8
[  361.906766][T14113] netlink: 'syz.0.2091': attribute type 9 has an invalid length.
[  361.918787][ T9737] net_ratelimit: 19 callbacks suppressed
[  361.918805][ T9737] bond3: (slave bridge4): failed to get link speed/duplex
[  362.011448][T14111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2090'.
[  362.038700][ T9737] bond3: (slave bridge4): failed to get link speed/duplex
[  362.093878][T14111] bond8: (slave bridge9): making interface the new active one
[  362.115631][T14111] bridge9: entered promiscuous mode
[  362.132932][T14111] bond8: (slave bridge9): Enslaving as an active interface with an up link
[  362.297738][T14129] openvswitch: netlink: EtherType 0 is less than min 600
[  362.305320][T10939] bond3: (slave bridge4): failed to get link speed/duplex
[  362.411320][T10939] bond3: (slave bridge4): failed to get link speed/duplex
[  362.488335][T14138] netlink: 'syz.2.2099': attribute type 1 has an invalid length.
[  362.520576][T14138] bond7: entered promiscuous mode
[  362.526479][T14138] bond7: entered allmulticast mode
[  362.533778][T14138] 8021q: adding VLAN 0 to HW filter on device bond7
[  362.566926][T14138] erspan1: entered allmulticast mode
[  362.609681][ T9737] bond3: (slave bridge4): failed to get link speed/duplex
[  362.709686][T14147] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2098'.
[  362.882046][T14150] bridge9: entered promiscuous mode
[  362.894597][T14150] bridge9: entered allmulticast mode
[  362.930950][T14150] team0: Port device bridge9 added
[  363.046927][T14160] tipc: Enabled bearer <ib:ipvlan1>, priority 10
[  363.078907][ T6191] udevd[6191]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory
[  363.098966][T10939] bond3: (slave bridge4): failed to get link speed/duplex
[  363.209054][T10942] bond3: (slave bridge4): failed to get link speed/duplex
[  363.319651][T10942] bond3: (slave bridge4): failed to get link speed/duplex
[  363.448837][   T12] bond3: (slave bridge4): failed to get link speed/duplex
[  363.571234][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2109'.
[  363.630201][T14183] syzkaller0: entered promiscuous mode
[  363.659068][T14183] syzkaller0: entered allmulticast mode
[  363.665415][T14180] netlink: 'syz.2.2109': attribute type 64 has an invalid length.
[  363.745560][T14191] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2114'.
[  364.024785][T14197] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2116'.
[  364.036380][T14197] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2116'.
[  364.310849][T14203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2118'.
[  364.320401][T14211] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2119'.
[  364.455172][T14201] netlink: 'syz.3.2118': attribute type 1 has an invalid length.
[  364.472058][T14201] netlink: 'syz.3.2118': attribute type 2 has an invalid length.
[  364.490467][T14213] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  364.492491][T14219] netlink: 'syz.5.2122': attribute type 12 has an invalid length.
[  364.656384][T14229] syzkaller0: entered promiscuous mode
[  364.665402][T14229] syzkaller0: entered allmulticast mode
[  365.177904][T14245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2128'.
[  365.344120][T14248] "syz.1.2129" (14248) uses obsolete ecb(arc4) skcipher
[  367.028872][T10939] net_ratelimit: 24 callbacks suppressed
[  367.028895][T10939] bond3: (slave bridge4): failed to get link speed/duplex
[  367.148915][T10939] bond3: (slave bridge4): failed to get link speed/duplex
[  367.247872][T14257] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  367.255422][T14212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  367.266747][   T13] bond3: (slave bridge4): failed to get link speed/duplex
[  367.308490][T14257] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2131'.
[  367.389126][   T13] bond3: (slave bridge4): failed to get link speed/duplex
[  367.469388][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2133'.
[  367.487387][T14267] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2132'.
[  367.528724][T10939] bond3: (slave bridge4): failed to get link speed/duplex
[  367.651229][T10939] bond3: (slave bridge4): failed to get link speed/duplex
[  367.792940][   T13] bond3: (slave bridge4): failed to get link speed/duplex
[  367.908939][   T13] bond3: (slave bridge4): failed to get link speed/duplex
[  367.991330][T14290] syzkaller1: entered promiscuous mode
[  367.996979][T14290] syzkaller1: entered allmulticast mode
[  368.030095][   T13] bond3: (slave bridge4): failed to get link speed/duplex
[  368.148935][ T9737] bond3: (slave bridge4): failed to get link speed/duplex
[  368.196328][T14297] netlink: 'syz.5.2145': attribute type 19 has an invalid length.
[  368.213510][T14297] netlink: 'syz.5.2145': attribute type 20 has an invalid length.
[  368.289090][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  368.396684][T14305] syzkaller0: entered promiscuous mode
[  368.415528][T14305] syzkaller0: entered allmulticast mode
[  368.534924][T14319] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  368.668925][T14325] __nla_validate_parse: 5 callbacks suppressed
[  368.668945][T14325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2151'.
[  369.794629][T14378] netlink: 200 bytes leftover after parsing attributes in process `syz.5.2165'.
[  369.958475][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2166'.
[  370.101851][T14399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2167'.
[  370.292188][T14404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2168'.
[  370.426431][T14411] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2170'.
[  370.505565][T14411] lo speed is unknown, defaulting to 1000
[  370.691789][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2172'.
[  370.719696][T14420] netlink: 'syz.3.2172': attribute type 30 has an invalid length.
[  370.729177][T14420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2172'.
[  371.015168][T14429] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2174'.
[  371.585442][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2177'.
[  372.418636][T14426] bridge6: left promiscuous mode
[  372.427300][T14426] bridge6: left allmulticast mode
[  372.437563][T14426] bond7: left allmulticast mode
[  372.450254][T14426] ip6erspan0: left allmulticast mode
[  372.459806][T14426] bond8: left promiscuous mode
[  372.464785][T14426] bridge9: left promiscuous mode
[  372.481782][ T7816] lo speed is unknown, defaulting to 1000
[  372.488186][ T7816] sqz0: Port: 1 Link DOWN
[  372.519029][ T9737] net_ratelimit: 16 callbacks suppressed
[  372.519048][ T9737] bond3: (slave bridge4): failed to get link speed/duplex
[  372.545490][T10939] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.561580][T10939] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.570479][T10939] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.579187][T10939] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.593643][ T7825] lo speed is unknown, defaulting to 1000
[  372.624447][T10939] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.634604][T10939] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.651688][T10939] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.660587][T10939] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.769351][T10939] bond3: (slave bridge4): failed to get link speed/duplex
[  372.938781][T10942] bond3: (slave bridge4): failed to get link speed/duplex
[  373.058672][   T13] bond3: (slave bridge4): failed to get link speed/duplex
[  373.198656][   T12] bond3: (slave bridge4): failed to get link speed/duplex
[  373.347613][T14470] xfrm1: entered promiscuous mode
[  373.367784][T14470] xfrm1: entered allmulticast mode
[  373.414220][   T12] bond3: (slave bridge4): failed to get link speed/duplex
[  373.559075][T10942] bond3: (slave bridge4): failed to get link speed/duplex
[  373.681393][T10942] bond3: (slave bridge4): failed to get link speed/duplex
[  373.798677][   T12] bond3: (slave bridge4): failed to get link speed/duplex
[  373.928754][T10942] bond3: (slave bridge4): failed to get link speed/duplex
[  374.004430][T14433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  374.573558][T14512] __nla_validate_parse: 4 callbacks suppressed
[  374.573577][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2193'.
[  374.638275][T14514] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2196'.
[  374.688933][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  374.891961][T14525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2201'.
[  375.019723][T14530] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2203'.
[  375.080466][T14534] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2205'.
[  375.099244][T14532] netlink: 'syz.0.2204': attribute type 1 has an invalid length.
[  375.118954][T14532] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2204'.
[  375.196546][T14542] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000
[  375.284893][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2209'.
[  375.295018][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2209'.
[  375.351449][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2209'.
[  375.352050][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2209'.
[  375.581003][T14564] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  375.604250][T14569] syzkaller1: tun_chr_ioctl cmd 1074025677
[  375.611652][T14569] syzkaller1: linktype set to 1
[  375.641738][T14569] team0: Port device team_slave_0 removed
[  375.700544][T14570] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.712949][T14570] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.757189][T14572] lo speed is unknown, defaulting to 1000
[  375.776320][T14570] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.787201][T14570] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.871006][T14570] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.881586][T14570] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.005176][T14570] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  376.022767][T14570] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.167286][T14576] vlan2: entered promiscuous mode
[  376.322948][T10942] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  376.345197][T10942] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.421049][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  376.441413][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.556419][T10942] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  376.586583][T10942] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.669036][ T9737] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  376.679715][ T9737] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.739952][T14598] bond3 (unregistering): Released all slaves
[  377.619104][   T13] net_ratelimit: 25 callbacks suppressed
[  377.619125][   T13] bond3: (slave bridge4): failed to get link speed/duplex
[  377.738940][   T13] bond3: (slave bridge4): failed to get link speed/duplex
[  377.849169][ T9737] bond3: (slave bridge4): failed to get link speed/duplex
[  377.938847][T14643] netlink: 'syz.1.2230': attribute type 2 has an invalid length.
[  377.973180][T10933] bond3: (slave bridge4): failed to get link speed/duplex
[  378.012907][T14644] netlink: 'syz.3.2229': attribute type 3 has an invalid length.
[  378.066723][T14644] bond0 (unregistering): Released all slaves
[  378.109677][   T12] bond3: (slave bridge4): failed to get link speed/duplex
[  378.171469][T14654] x_tables: ip_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING
[  378.218623][   T12] bond3: (slave bridge4): failed to get link speed/duplex
[  378.288291][T14656] lo speed is unknown, defaulting to 1000
[  378.360777][T10933] bond3: (slave bridge4): failed to get link speed/duplex
[  378.418714][T14660] vlan3: entered promiscuous mode
[  378.478650][ T9737] bond3: (slave bridge4): failed to get link speed/duplex
[  378.536804][ T1313] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  378.599028][T10933] bond3: (slave bridge4): failed to get link speed/duplex
[  379.131686][T14686] lo speed is unknown, defaulting to 1000
[  379.629627][ T4943] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  379.650882][ T4943] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  379.659342][ T4943] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  379.667225][ T4943] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  379.675786][ T4943] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  379.732188][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  379.742735][T10933] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  380.109401][T14722] __nla_validate_parse: 60 callbacks suppressed
[  380.109421][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2244'.
[  380.294122][T14737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2253'.
[  380.307363][T14737] netlink: 312 bytes leftover after parsing attributes in process `syz.5.2253'.
[  380.320898][T14737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2253'.
[  380.513205][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  380.537122][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  380.564852][T14748] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2255'.
[  380.648398][T14750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2254'.
[  380.660093][T14750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2254'.
[  380.673580][T14750] netlink: 58 bytes leftover after parsing attributes in process `syz.0.2254'.
[  380.685070][T14739] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  380.726737][   T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  380.742576][   T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  380.783768][ T5745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  380.880744][T14707] lo speed is unknown, defaulting to 1000
[  381.095650][T14764] team0: Port device syz_tun added
[  381.263965][T14768] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.2263'.
[  381.291932][T14770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2261'.
[  381.389946][ T5745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  381.546273][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  381.612108][T14785] pim6reg: entered allmulticast mode
[  381.662603][T14786] pim6reg: left allmulticast mode
[  381.729942][ T5639] Bluetooth: hci6: command tx timeout
[  381.742779][T14788] netlink: 'syz.0.2268': attribute type 12 has an invalid length.
[  382.100946][T14801] lo speed is unknown, defaulting to 1000
[  382.149553][T14809] vlan4: entered promiscuous mode
[  382.370220][T14819] netlink: 'syz.3.2273': attribute type 27 has an invalid length.
[  382.469469][T14815] netem: unknown loss type 11
[  382.493147][T14815] netem: change failed
[  382.557456][   T12] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  382.581467][   T12] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  382.599862][T14707] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.619388][T14707] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.632328][T14707] bridge_slave_0: entered allmulticast mode
[  382.641919][T14827] net_ratelimit: 21 callbacks suppressed
[  382.641935][T14827] openvswitch: netlink: Flow actions attr not present in new flow.
[  382.697748][T14707] bridge_slave_0: entered promiscuous mode
[  382.727696][   T12] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  382.752448][   T12] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  382.775943][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  382.809240][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  382.863204][T14707] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.888161][T14707] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.922979][T14707] bridge_slave_1: entered allmulticast mode
[  382.942664][T14707] bridge_slave_1: entered promiscuous mode
[  382.955314][T14837] xt_hashlimit: size too large, truncated to 1048576
[  383.103501][T14707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.139326][T14707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.215645][T14707] team0: Port device team_slave_0 added
[  383.291251][T14707] team0: Port device team_slave_1 added
[  383.359011][ T5818] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  383.406753][T14707] batman_adv: batadv0: Adding interface: batadv_slave_0
[  383.427332][T14707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  383.508246][T14707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.594293][T14707] batman_adv: batadv0: Adding interface: batadv_slave_1
[  383.612242][T14707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  383.687163][T14707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  383.811655][ T5639] Bluetooth: hci6: command tx timeout
[  383.877073][T14707] hsr_slave_0: entered promiscuous mode
[  383.889003][T14707] hsr_slave_1: entered promiscuous mode
[  383.895422][T14707] debugfs: 'hsr0' already exists in 'hsr'
[  383.901853][T14707] Cannot create hsr debugfs directory
[  384.159740][   T13] bond3: (slave bridge4): failed to get link speed/duplex
[  384.393148][T14707] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  384.423523][T14707] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  384.441705][T14707] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  384.475092][T14707] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  384.583762][T14707] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  384.619403][T14707] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  384.649625][T14707] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  384.672198][T14707] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  384.739442][   T12] bond3: (slave bridge4): failed to get link speed/duplex
[  384.870276][T10942] bond3: (slave bridge4): failed to get link speed/duplex
[  385.108465][T14888] lo speed is unknown, defaulting to 1000
[  385.154692][T14898] vlan2: entered promiscuous mode
[  385.248063][T14707] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.276728][T14901] __nla_validate_parse: 9 callbacks suppressed
[  385.276748][T14901] netlink: 284 bytes leftover after parsing attributes in process `syz.5.2295'.
[  385.345591][T14707] 8021q: adding VLAN 0 to HW filter on device team0
[  385.384343][T10942] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.391592][T10942] bridge0: port 1(bridge_slave_0) entered forwarding state
[  385.452329][T10942] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.459593][T10942] bridge0: port 2(bridge_slave_1) entered forwarding state
[  385.518030][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2296'.
[  385.527579][ T9737] bond3: (slave bridge4): failed to get link speed/duplex
[  385.678794][T10942] bond3: (slave bridge4): failed to get link speed/duplex
[  385.738440][T14914] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  385.868903][T10942] bond3: (slave bridge4): failed to get link speed/duplex
[  385.901928][ T5639] Bluetooth: hci6: command tx timeout
[  385.988717][T10933] bond3: (slave bridge4): failed to get link speed/duplex
[  386.130795][ T9737] bond3: (slave bridge4): failed to get link speed/duplex
[  386.259162][ T9737] bond3: (slave bridge4): failed to get link speed/duplex
[  386.501214][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2309'.
[  386.768784][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  386.893802][T14707] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.304499][T14982] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2315'.
[  387.339965][T14982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2315'.
[  387.519262][T14707] veth0_vlan: entered promiscuous mode
[  387.568161][T14707] veth1_vlan: entered promiscuous mode
[  387.683327][T14707] veth0_macvtap: entered promiscuous mode
[  387.760593][T14996] sit0: left promiscuous mode
[  387.779732][T14996] ip6gretap0: entered promiscuous mode
[  387.832828][T14996] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.850478][T14996] 8021q: adding VLAN 0 to HW filter on device team0
[  387.857734][T15005] net_ratelimit: 11 callbacks suppressed
[  387.857753][T15005] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.881933][T14996] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.921193][T14996] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.931123][T14996] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.944343][T14996] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  387.955743][T14996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  387.968982][ T5639] Bluetooth: hci6: command tx timeout
[  387.985006][T14996] veth1_vlan: left promiscuous mode
[  387.992573][T14996] veth1_vlan: entered promiscuous mode
[  388.003305][T14996] veth1_macvtap: left promiscuous mode
[  388.022342][T14996] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  388.039666][T14707] veth1_macvtap: entered promiscuous mode
[  388.056475][T10939] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.063652][T10939] bridge0: port 1(bridge_slave_0) entered forwarding state
[  388.083398][T10939] bridge0: port 3(vlan2) entered blocking state
[  388.089864][T10939] bridge0: port 3(vlan2) entered forwarding state
[  388.097559][T10939] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.104741][T10939] bridge0: port 2(bridge_slave_1) entered forwarding state
[  388.198797][T10942] bond3: (slave bridge4): failed to get link speed/duplex
[  388.258449][T15000] lo speed is unknown, defaulting to 1000
[  388.285172][T14707] batman_adv: batadv0: Interface activated: batadv_slave_0
[  388.335011][T14707] batman_adv: batadv0: Interface activated: batadv_slave_1
[  388.364087][T10942] bond3: (slave bridge4): failed to get link speed/duplex
[  388.417386][T10942] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.463281][T10942] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.473167][T15017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2325'.
[  388.505464][T10942] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.544524][T10942] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.653425][T15022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2327'.
[  388.680057][T15022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2327'.
[  388.718934][T10942] bond3: (slave bridge4): failed to get link speed/duplex
[  388.740590][T15026] netlink: 'syz.0.2327': attribute type 2 has an invalid length.
[  388.784484][T15026] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2327'.
[  388.828228][T15028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2327'.
[  388.903465][T10941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.919998][T10939] bond3: (slave bridge4): failed to get link speed/duplex
[  388.939502][T10941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.032639][T10942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.061384][T10942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.098640][T10942] bond3: (slave bridge4): failed to get link speed/duplex
[  389.204572][T15013] lo speed is unknown, defaulting to 1000
[  389.310181][ T9737] bond3: (slave bridge4): failed to get link speed/duplex
[  389.429042][   T13] bond3: (slave bridge4): failed to get link speed/duplex
[  389.549961][T10939] bond3: (slave bridge4): failed to get link speed/duplex
[  389.762204][T15055] atomic_op ffff888037099198 conn xmit_atomic 0000000000000000
[  390.602541][T15084] gre2: entered allmulticast mode
[  390.832788][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2344'.
[  390.867044][T15103] ip6tnl2: entered allmulticast mode
[  390.964486][T15109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2346'.
[  390.998425][T15109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2346'.
[  391.026296][T15109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2346'.
[  391.081710][T15115] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2347'.
[  391.182432][T15123] netlink: 'syz.0.2346': attribute type 21 has an invalid length.
[  391.356995][T15109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2346'.
[  391.393474][T15109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2346'.
[  391.411697][T15109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2346'.
[  391.443054][T15130] nbd: must specify at least one socket
[  391.455268][T15109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2346'.
[  391.558387][T15109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2346'.
[  391.792446][T15109] bridge0: port 3(vlan2) entered disabled state
[  391.799025][T15109] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.806569][T15109] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.175242][T15109] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  392.197721][T15109] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  392.378365][T15109] veth1_macvtap: left promiscuous mode
[  392.751376][T10941] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.798274][T10941] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.832627][T10941] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.875673][T10941] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.036497][T10941] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  393.084178][T10941] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.101381][T10941] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  393.127384][T10941] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.210015][T15153] lo speed is unknown, defaulting to 1000
[  393.498091][T15177] net_ratelimit: 8 callbacks suppressed
[  393.498108][T15177] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  394.052104][T15204] IPv6: sit2: Disabled Multicast RS
[  394.093233][T15210] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  394.363175][T15192] lo speed is unknown, defaulting to 1000
[  394.528713][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  394.958920][T15242] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  395.892430][T15290] Cannot find add_set index 0 as target
[  395.969115][ T5629] Bluetooth: hci4: command 0x0406 tx timeout
[  396.055296][T15295] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.532533][T15308] bond1: (slave bond_slave_1): Device is not our slave
[  396.606288][T15308] bond1: option active_slave: invalid value (bond_slave_1)
[  396.704444][T15308] bond1 (unregistering): Released all slaves
[  397.144576][T15351] syzkaller0: entered promiscuous mode
[  397.169155][T15351] syzkaller0: entered allmulticast mode
[  397.195466][T15351] netlink: 'syz.3.2387': attribute type 10 has an invalid length.
[  397.225590][T15351] __nla_validate_parse: 198 callbacks suppressed
[  397.225605][T15351] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2387'.
[  397.571815][ T5639] Bluetooth: hci6: command 0x0405 tx timeout
[  397.637629][T15384] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2393'.
[  397.652977][T15382] syzkaller0: entered promiscuous mode
[  397.658606][T15382] syzkaller0: entered allmulticast mode
[  397.672937][T15386] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2394'.
[  398.034254][T15404] pimreg: entered allmulticast mode
[  398.071121][T15402] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2398'.
[  398.163811][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2398'.
[  398.353452][T15419] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2402'.
[  398.370119][T15414] lo speed is unknown, defaulting to 1000
[  398.427145][T15419] RDS: rds_bind could not find a transport for fe80::2f, load rds_tcp or rds_rdma?
[  398.494985][T15420] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2401'.
[  398.552222][T15420] vlan2: entered promiscuous mode
[  398.563157][T15420] gretap0: entered promiscuous mode
[  398.604689][T15430] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2405'.
[  398.628331][T15430] netlink: 'syz.5.2405': attribute type 2 has an invalid length.
[  398.649119][T15430] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2405'.
[  398.764693][T15437] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  398.781395][T15430] bond1: option primary_reselect: invalid value (133)
[  398.811076][T15430] bond1 (unregistering): Released all slaves
[  399.309476][T15460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2412'.
[  400.012680][T15486] bond1: entered promiscuous mode
[  400.018226][T15486] 8021q: adding VLAN 0 to HW filter on device bond1
[  400.054432][T15488] syzkaller0: entered promiscuous mode
[  400.067060][T15488] syzkaller0: entered allmulticast mode
[  400.233051][T15504] netlink: 'syz.5.2426': attribute type 2 has an invalid length.
[  400.937867][T15545] syzkaller1: entered promiscuous mode
[  400.956896][T15545] syzkaller1: entered allmulticast mode
[  400.973800][T15548] netlink: 'syz.1.2439': attribute type 21 has an invalid length.
[  400.990780][T15548] netlink: 'syz.1.2439': attribute type 6 has an invalid length.
[  401.183084][T15557] kthread_run failed with err -4
[  401.307163][T15565] syzkaller0: entered promiscuous mode
[  401.313669][T15565] syzkaller0: entered allmulticast mode
[  401.321470][T15564] lo speed is unknown, defaulting to 1000
[  401.698452][T15578] x_tables: ip_tables: ah match: only valid for protocol 51
[  402.240415][T15605] __nla_validate_parse: 19 callbacks suppressed
[  402.240437][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2452'.
[  402.371613][T15611] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.2456'.
[  402.400044][T15611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2456'.
[  402.493152][T15619] netlink: 'syz.5.2457': attribute type 2 has an invalid length.
[  402.508096][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2457'.
[  402.524987][T15619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  402.615146][T15623] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2457'.
[  402.636428][T15623] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2457'.
[  402.663253][T15611] nbd: socks must be embedded in a SOCK_ITEM attr
[  402.680758][ T6191] block nbd64: NBD_DISCONNECT
[  402.686490][T15617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2456'.
[  402.703013][T15617] nbd: device at index 64 is going down
[  402.885215][ T6191] udevd[6191]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  402.984046][T15635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2462'.
[  403.357965][T15646] syzkaller1: entered promiscuous mode
[  403.376771][T15646] syzkaller1: entered allmulticast mode
[  403.632804][T15654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2468'.
[  403.649773][T15646] vlan2: left promiscuous mode
[  403.930657][T15646] syzkaller1: left promiscuous mode
[  403.949302][T15646] syzkaller1: left allmulticast mode
[  403.963563][T15647] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  404.057267][T15663] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2471'.
[  404.385874][T15675] lo speed is unknown, defaulting to 1000
[  404.469307][T15678] syzkaller0: entered promiscuous mode
[  404.493090][T15678] syzkaller0: entered allmulticast mode
[  405.805090][T15718] lo speed is unknown, defaulting to 1000
[  406.058738][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  408.181521][T15702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  408.456331][T15769] __nla_validate_parse: 3 callbacks suppressed
[  408.456348][T15769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2496'.
[  408.491212][T15772] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2496'.
[  408.510781][T15771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2495'.
[  408.869895][T15799] IPv4: Oversized IP packet from 127.202.26.0
[  409.048574][T15807] netlink: 384 bytes leftover after parsing attributes in process `syz.1.2502'.
[  409.123617][T15813] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2506'.
[  409.143912][T15813] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2506'.
[  409.210081][T15811] lo speed is unknown, defaulting to 1000
[  409.316041][T15819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2508'.
[  409.396205][T15820] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2507'.
[  409.919267][T15810] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  410.229566][T15817] lo speed is unknown, defaulting to 1000
[  410.256482][T15835] netlink: 'syz.3.2511': attribute type 1 has an invalid length.
[  410.279315][T15835] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2511'.
[  410.294408][T15835] netlink: 658 bytes leftover after parsing attributes in process `syz.3.2511'.
[  410.538678][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  410.757618][   T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  410.758200][ T6823] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  410.934975][T15863] xt_TCPMSS: Only works on TCP SYN packets
[  411.169790][ T4943] Bluetooth: hci3: command 0x0406 tx timeout
[  412.323864][T15897] lo speed is unknown, defaulting to 1000
[  412.361135][T15904] tipc: Started in network mode
[  412.368209][T15904] tipc: Node identity 56d43b8949d1, cluster identity 4711
[  412.389921][T15904] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  412.476397][T15902] syzkaller0: entered promiscuous mode
[  412.493845][T15902] syzkaller0: entered allmulticast mode
[  412.504234][T15908] syzkaller0: entered promiscuous mode
[  412.510335][T15908] syzkaller0: entered allmulticast mode
[  412.563248][T15904] tipc: Resetting bearer <eth:syzkaller0>
[  412.614919][T15913] tipc: Resetting bearer <eth:syzkaller0>
[  412.633085][T15913] tipc: Disabling bearer <eth:syzkaller0>
[  413.533722][T15945] __nla_validate_parse: 5 callbacks suppressed
[  413.533738][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2544'.
[  413.673307][T15953] openvswitch: netlink: Key type 47 is out of range max 32
[  413.794260][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2549'.
[  414.932231][ T4943] Bluetooth: hci3: command 0x0406 tx timeout
[  415.559617][T15965] geneve2: entered promiscuous mode
[  415.564985][T15965] geneve2: entered allmulticast mode
[  415.801652][T15989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2555'.
[  415.825713][T15989] bridge: RTM_NEWNEIGH with invalid ether address
[  416.207874][T16009] netlink: 'syz.1.2560': attribute type 5 has an invalid length.
[  416.228309][T16010] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2561'.
[  416.397585][T16009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2560'.
[  417.036282][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2567'.
[  417.060771][T16039] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2567'.
[  417.184135][T16047] netlink: 'syz.1.2570': attribute type 4 has an invalid length.
[  417.625684][T16074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2578'.
[  417.766822][T16082] netlink: 'syz.3.2580': attribute type 13 has an invalid length.
[  417.782808][T16082] netlink: 'syz.3.2580': attribute type 17 has an invalid length.
[  417.854093][T16082] erspan0: left promiscuous mode
[  417.931056][T16082] 8021q: adding VLAN 0 to HW filter on device team0
[  417.942950][T16082] 8021q: adding VLAN 0 to HW filter on device batadv0
[  417.985836][T16099] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2579'.
[  418.037718][T16105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2580'.
[  418.084940][T16082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  418.107750][T16082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  418.138458][T16082] veth1_vlan: left promiscuous mode
[  418.145415][T16082] veth0_vlan: left promiscuous mode
[  418.152748][T16082] veth0_vlan: entered promiscuous mode
[  418.164321][T16082] veth1_vlan: entered promiscuous mode
[  418.196662][T16082] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  418.204955][T16082] erspan0: entered promiscuous mode
[  418.218125][T16082] 8021q: adding VLAN 0 to HW filter on device bond1
[  418.236592][T16082] 8021q: adding VLAN 0 to HW filter on device bond2
[  418.250634][T16082] 8021q: adding VLAN 0 to HW filter on device eth0
[  418.267926][T16082] 8021q: adding VLAN 0 to HW filter on device eth1
[  418.283378][T16082] 8021q: adding VLAN 0 to HW filter on device eth2
[  418.306743][T16082] 8021q: adding VLAN 0 to HW filter on device eth3
[  418.349050][T16082] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network
[  418.379369][T16082] hsr1: Interlink (veth1_to_batadv) is not up; please bring it up to get a fully working HSR network
[  418.419644][T16082] 8021q: adding VLAN 0 to HW filter on device bond3
[  418.467841][T16082] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  418.478156][T16082] 8021q: adding VLAN 0 to HW filter on device bond4
[  418.486385][T16082] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  418.503021][   T10] lo speed is unknown, defaulting to 1000
[  418.510312][T16084] syzkaller0: entered promiscuous mode
[  418.516258][   T10] sqz0: Port: 1 Link ACTIVE
[  418.516691][T16084] syzkaller0: entered allmulticast mode
[  418.571852][T10935] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  418.583249][T10935] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.603723][T10935] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  418.625138][T10935] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.731145][T16100] syzkaller0: entered promiscuous mode
[  418.746932][T16100] syzkaller0: entered allmulticast mode
[  418.762151][ T7827] lo speed is unknown, defaulting to 1000
[  418.876245][T10935] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  418.910198][T10935] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.939892][T10935] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  418.966136][T10935] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  419.305762][T16136] netlink: 'syz.5.2590': attribute type 1 has an invalid length.
[  419.322643][T16136] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2590'.
[  419.343967][T16136] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2590'.
[  419.353825][T16136] netlink: 'syz.5.2590': attribute type 1 has an invalid length.
[  419.364785][T16136] netlink: 634 bytes leftover after parsing attributes in process `syz.5.2590'.
[  419.406050][T16150] netlink: 'syz.0.2594': attribute type 11 has an invalid length.
[  419.415721][T16146] netlink: 'syz.3.2593': attribute type 6 has an invalid length.
[  419.497077][T16152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2593'.
[  419.646357][T16153] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2595'.
[  421.204343][T16158] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2595'.
[  421.286308][T16149] lo speed is unknown, defaulting to 1000
[  421.310716][T16164] netlink: 'syz.5.2596': attribute type 7 has an invalid length.
[  421.341161][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  421.361748][   T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  421.410819][T16168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2599'.
[  421.447852][T16168] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  421.579296][T16185] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  421.702532][T16188] netlink: 'syz.3.2604': attribute type 1 has an invalid length.
[  421.773224][T16192] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2606'.
[  421.784452][T16193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2604'.
[  422.130682][T16209] IPVS: set_ctl: invalid protocol: 255 10.1.1.2:20002
[  422.286395][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2609'.
[  422.338141][T16215] dvmrp6: entered allmulticast mode
[  422.406372][T16212] 8021q: adding VLAN 0 to HW filter on device bond0
[  422.414476][T16215] xt_connbytes: Forcing CT accounting to be enabled
[  422.424733][T16212] 8021q: adding VLAN 0 to HW filter on device team0
[  422.442042][T16212] 8021q: adding VLAN 0 to HW filter on device batadv0
[  422.550415][T16212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  422.561083][T16212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  422.591199][T16212] veth1_vlan: left promiscuous mode
[  422.610945][T16212] veth0_vlan: left promiscuous mode
[  422.623455][T16212] veth0_vlan: entered promiscuous mode
[  422.634436][T16212] veth1_vlan: entered promiscuous mode
[  422.646088][T16212] veth1_macvtap: left promiscuous mode
[  422.654671][T16212] veth0_macvtap: left promiscuous mode
[  422.662753][T16212] veth0_macvtap: entered promiscuous mode
[  422.670605][T16212] veth1_macvtap: entered promiscuous mode
[  422.760041][T16212] bridge2: left promiscuous mode
[  422.777335][T16212] vlan2: left promiscuous mode
[  422.784351][T16212] gre2: left allmulticast mode
[  422.793595][T16212] ip6tnl2: left allmulticast mode
[  422.801482][T16212] bond1: left promiscuous mode
[  422.816066][T16212] 8021q: adding VLAN 0 to HW filter on device eth0
[  422.827929][T16212] 8021q: adding VLAN 0 to HW filter on device eth1
[  422.837893][T16212] 8021q: adding VLAN 0 to HW filter on device eth2
[  422.855243][T16212] 8021q: adding VLAN 0 to HW filter on device eth3
[  422.873871][T16212] geneve2: left promiscuous mode
[  422.881328][T16212] geneve2: left allmulticast mode
[  422.892641][T16212] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  423.040210][T10935] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  423.058751][T10935] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.073548][T10935] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  423.095119][T10935] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.245952][T10935] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  423.290387][T10935] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.321250][T10935] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  423.355748][T10935] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.560805][ T6827] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  423.592178][ T7833] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  423.600364][ T6827] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  423.704567][T16262] netlink: 'syz.5.2624': attribute type 1 has an invalid length.
[  424.129169][ T7839] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  424.378819][ T7839] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  424.427067][T16262] 8021q: adding VLAN 0 to HW filter on device bond2
[  424.473957][T16265] bond2: (slave veth5): Enslaving as an active interface with a down link
[  424.491566][T16268] 8021q: adding VLAN 0 to HW filter on device batadv1
[  424.501860][T16268] bond2: (slave batadv1): making interface the new active one
[  424.510787][T16268] batadv1: entered promiscuous mode
[  424.516368][T16268] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  424.526974][T16284] xt_hashlimit: size too large, truncated to 1048576
[  424.534460][T16270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  424.543328][T16284] xt_hashlimit: invalid interval
[  424.553459][T16271] bond2 (unregistering): (slave veth5): Releasing active interface
[  424.564681][T16271] bond2 (unregistering): (slave batadv1): Releasing active interface
[  424.574648][T16271] bond2 (unregistering): Released all slaves
[  424.595913][T16272] syzkaller0: entered promiscuous mode
[  424.601465][T16272] syzkaller0: entered allmulticast mode
[  424.607911][T16275] syzkaller0: mtu less than device minimum
[  424.616768][T16284] __nla_validate_parse: 4 callbacks suppressed
[  424.616783][T16284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2625'.
[  424.710157][T16277] tipc: Resetting bearer <eth:syzkaller0>
[  424.736315][T16277] tipc: Disabling bearer <eth:syzkaller0>
[  424.836804][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2626'.
[  424.906417][T16292] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2627'.
[  425.089446][T16300] x_tables: duplicate underflow at hook 3
[  425.093411][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  425.114160][T16300] netlink: 'syz.6.2630': attribute type 1 has an invalid length.
[  425.255793][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2629'.
[  425.371346][T16313] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2630'.
[  425.409048][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  426.688944][ T5639] Bluetooth: hci5: command 0x0406 tx timeout
[  426.942159][T16300] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  427.006580][T16301] lo speed is unknown, defaulting to 1000
[  427.166692][T16324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2633'.
[  427.415699][T16324] 8021q: adding VLAN 0 to HW filter on device bond3
[  427.433814][T16323] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  427.636446][T16346] netlink: 'syz.0.2638': attribute type 10 has an invalid length.
[  427.684486][T16346] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2638'.
[  427.728908][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  427.801584][T16356] netlink: 'syz.0.2638': attribute type 10 has an invalid length.
[  427.855127][T16356] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2638'.
[  428.109393][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2643'.
[  428.162862][T16361] netlink: 'syz.0.2643': attribute type 13 has an invalid length.
[  428.194104][T16361] netlink: 'syz.0.2643': attribute type 17 has an invalid length.
[  428.287028][T16364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2643'.
[  428.436878][T16361] bridge0: left promiscuous mode
[  428.455016][T16361] 8021q: adding VLAN 0 to HW filter on device bond0
[  428.470929][T16361] 8021q: adding VLAN 0 to HW filter on device team0
[  428.487979][T16361] 8021q: adding VLAN 0 to HW filter on device batadv0
[  428.537940][T16361] batman_adv: batadv0: Interface activated: batadv_slave_0
[  428.548026][T16361] batman_adv: batadv0: Interface activated: batadv_slave_1
[  428.561290][T16361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  428.572432][T16361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  428.601785][T16361] veth1_vlan: left promiscuous mode
[  428.608041][T16361] veth1_macvtap: entered promiscuous mode
[  428.616330][T16361] veth1_vlan: entered promiscuous mode
[  428.643914][T16361] ip6gre1: left promiscuous mode
[  428.649119][T16361] ip6gre1: left allmulticast mode
[  428.656322][T16361] bond1: left promiscuous mode
[  428.662451][T16361] 8021q: adding VLAN 0 to HW filter on device bond1
[  428.691644][T16361] bridge3: left promiscuous mode
[  428.696613][T16361] bridge3: left allmulticast mode
[  428.704518][T16361] 8021q: adding VLAN 0 to HW filter on device bond2
[  428.720394][T16361] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  428.744425][T16373] bond0: option lp_interval: invalid value (18446744073709551612)
[  428.753173][T16373] bond0: option lp_interval: allowed values 1 - 2147483647
[  428.762362][ T7833] bridge0: entered promiscuous mode
[  428.804740][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.811972][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  428.821320][   T13] bridge0: port 3(vlan2) entered blocking state
[  428.827697][   T13] bridge0: port 3(vlan2) entered forwarding state
[  428.838127][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.845362][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  428.895030][T10935] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  428.914846][T10935] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  428.932730][T10935] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  428.954791][T10935] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  429.018086][T10935] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  429.027524][T10935] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  429.053840][T16382] pim6reg: entered allmulticast mode
[  429.069152][T16382] pim6reg: left allmulticast mode
[  429.143388][T10935] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  429.156272][T10935] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  429.674019][T16421] __nla_validate_parse: 2 callbacks suppressed
[  429.674037][T16421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2658'.
[  429.755365][T16421] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  429.971605][T16443] netlink: 'syz.0.2663': attribute type 13 has an invalid length.
[  430.044192][T16443] netlink: 'syz.0.2663': attribute type 17 has an invalid length.
[  430.164180][T16443] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  430.204271][T16462] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2667'.
[  430.245492][T16462] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2667'.
[  430.493565][ T6828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.533391][ T6828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.545709][T16484] openvswitch: netlink: Invalid VLAN frame
[  430.632334][T16486] bond2: option downdelay: invalid value (18446744073709551371)
[  430.642634][T16486] bond2: option downdelay: allowed values 0 - 2147483647
[  430.652800][T16484] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  430.662436][T16483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  430.685879][T16486] bond2 (unregistering): Released all slaves
[  430.741516][T16481] lo speed is unknown, defaulting to 1000
[  430.939330][T16504] netlink: 'syz.5.2677': attribute type 12 has an invalid length.
[  431.184553][T16512] x_tables: duplicate underflow at hook 1
[  431.352520][T16517] bridge_slave_0: left allmulticast mode
[  431.361352][T16517] bridge_slave_0: left promiscuous mode
[  431.367365][T16517] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.382916][T16522] netlink: 'syz.6.2681': attribute type 2 has an invalid length.
[  431.409030][T16517] bridge_slave_1: left allmulticast mode
[  431.422070][T16517] bridge_slave_1: left promiscuous mode
[  431.427871][T16522] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2681'.
[  431.430136][T16517] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.451624][T16517] bond0: (slave bond_slave_0): Releasing backup interface
[  431.463701][T16526] openvswitch: netlink: Missing valid actions attribute.
[  431.463952][T16517] bond0: (slave bond_slave_1): Releasing backup interface
[  431.471176][T16526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  431.500066][T16517] team0: Port device team_slave_0 removed
[  431.510454][T16517] team0: Port device team_slave_1 removed
[  431.516778][T16517] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  431.524581][T16517] batman_adv: batadv0: Removing interface: batadv_slave_0
[  431.533213][T16517] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  431.544291][T16517] batman_adv: batadv0: Removing interface: batadv_slave_1
[  431.555746][T16517] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  431.604019][T16522] bond1: option primary_reselect: invalid value (133)
[  431.613976][T16522] bond1 (unregistering): Released all slaves
[  431.629466][T16517] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  431.659128][T16535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2682'.
[  431.697203][T16529] syzkaller1: tun_chr_ioctl cmd 1074025677
[  431.703804][T16529] syzkaller1: linktype set to 0
[  431.709319][T16522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2681'.
[  431.728072][T16522] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2681'.
[  431.732130][T16530] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  431.746132][T16522] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2681'.
[  431.804677][T16522] bond1: option primary_reselect: invalid value (133)
[  431.813854][T16522] bond1 (unregistering): Released all slaves
[  431.863102][T16533] syzkaller0: entered promiscuous mode
[  431.868790][T16533] syzkaller0: entered allmulticast mode
[  431.887913][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2683'.
[  432.015094][T16528] tipc: Resetting bearer <eth:syzkaller0>
[  432.130959][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2683'.
[  432.283483][T16524] tipc: Resetting bearer <eth:syzkaller0>
[  432.347043][T16524] tipc: Disabling bearer <eth:syzkaller0>
[  432.929111][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  433.569140][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  435.099228][T16547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  435.229417][T16592] FAULT_INJECTION: forcing a failure.
[  435.229417][T16592] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  435.244124][T16592] CPU: 0 UID: 0 PID: 16592 Comm: syz.3.2698 Not tainted syzkaller #0 PREEMPT(full) 
[  435.244149][T16592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  435.244164][T16592] Call Trace:
[  435.244175][T16592]  <TASK>
[  435.244183][T16592]  dump_stack_lvl+0xe8/0x150
[  435.244211][T16592]  should_fail_ex+0x412/0x560
[  435.244239][T16592]  _copy_to_user+0x31/0xb0
[  435.244268][T16592]  simple_read_from_buffer+0xe1/0x170
[  435.244296][T16592]  proc_fail_nth_read+0x1bb/0x230
[  435.244323][T16592]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  435.244354][T16592]  ? rw_verify_area+0x2a6/0x4d0
[  435.244378][T16592]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  435.244403][T16592]  vfs_read+0x20c/0xa70
[  435.244434][T16592]  ? __pfx___mutex_lock+0x10/0x10
[  435.244458][T16592]  ? __pfx_vfs_read+0x10/0x10
[  435.244485][T16592]  ? __fget_files+0x2a/0x420
[  435.244511][T16592]  ? __fget_files+0x3a0/0x420
[  435.244532][T16592]  ? __fget_files+0x2a/0x420
[  435.244563][T16592]  ksys_read+0x150/0x270
[  435.244591][T16592]  ? __pfx_ksys_read+0x10/0x10
[  435.244625][T16592]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.244645][T16592]  do_syscall_64+0x15f/0xf80
[  435.244665][T16592]  ? trace_irq_disable+0x3b/0x140
[  435.244693][T16592]  ? clear_bhb_loop+0x40/0x90
[  435.244715][T16592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.244734][T16592] RIP: 0033:0x7f3ea895d60e
[  435.244751][T16592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  435.244767][T16592] RSP: 002b:00007f3ea98c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  435.244801][T16592] RAX: ffffffffffffffda RBX: 00007f3ea98c76c0 RCX: 00007f3ea895d60e
[  435.244820][T16592] RDX: 000000000000000f RSI: 00007f3ea98c70a0 RDI: 0000000000000004
[  435.244850][T16592] RBP: 00007f3ea98c7090 R08: 0000000000000000 R09: 0000000000000000
[  435.244865][T16592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.244877][T16592] R13: 00007f3ea8c16038 R14: 00007f3ea8c15fa0 R15: 00007ffedc0b5208
[  435.244912][T16592]  </TASK>
[  435.488736][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  435.542309][T16597] __nla_validate_parse: 1 callbacks suppressed
[  435.542327][T16597] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2699'.
[  435.683365][T16606] netlink: 'syz.3.2703': attribute type 1 has an invalid length.
[  435.693927][T16606] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2703'.
[  435.726984][T16607] syzkaller0: entered promiscuous mode
[  435.738260][T16606] netlink: 'syz.3.2703': attribute type 1 has an invalid length.
[  435.759232][T16607] syzkaller0: entered allmulticast mode
[  435.771093][T16606] netlink: 634 bytes leftover after parsing attributes in process `syz.3.2703'.
[  435.788615][T16606] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2703'.
[  435.816323][T16614] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2704'.
[  435.868459][T16607] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2701'.
[  436.101460][T16628] ip6tnl2: entered allmulticast mode
[  436.532434][T16655] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2714'.
[  436.545440][T16655] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2714'.
[  436.591826][T16651] syzkaller0: entered promiscuous mode
[  436.607575][T16651] syzkaller0: entered allmulticast mode
[  436.653655][T16659] xt_CT: You must specify a L4 protocol and not use inversions on it
[  437.458270][T16686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2721'.
[  438.786430][T16674] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2717'.
[  439.514322][T16721] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  439.616533][T16723] lo speed is unknown, defaulting to 1000
[  439.978465][ T1313] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  440.158318][T16754] netlink: 'syz.1.2742': attribute type 1 has an invalid length.
[  440.323257][T16754] 8021q: adding VLAN 0 to HW filter on device bond4
[  440.360917][T16759] bond4: (slave geneve4): making interface the new active one
[  440.372851][T16759] bond4: (slave geneve4): Enslaving as an active interface with an up link
[  440.476296][T10939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  440.491427][T10939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  440.553197][T10939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  440.567171][T10939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.584860][T16777] netlink: 'syz.1.2745': attribute type 13 has an invalid length.
[  440.601797][T16777] netlink: 'syz.1.2745': attribute type 17 has an invalid length.
[  440.638430][T16782] __nla_validate_parse: 5 callbacks suppressed
[  440.638446][T16782] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2745'.
[  440.662603][T16763] syzkaller0: entered promiscuous mode
[  440.671929][T16763] syzkaller0: entered allmulticast mode
[  440.769329][T16777] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.780154][T16777] 8021q: adding VLAN 0 to HW filter on device team0
[  440.790523][T16777] 8021q: adding VLAN 0 to HW filter on device batadv0
[  440.829336][T16777] batman_adv: batadv0: Interface activated: batadv_slave_0
[  440.839745][T16777] batman_adv: batadv0: Interface activated: batadv_slave_1
[  440.853406][T16777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  440.864675][T16777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  440.876825][T16777] veth1_vlan: left promiscuous mode
[  440.883430][T16777] veth0_vlan: left promiscuous mode
[  440.889695][T16777] veth0_vlan: entered promiscuous mode
[  440.899246][T16777] veth1_vlan: entered promiscuous mode
[  440.909011][T16777] tipc: Resetting bearer <ib:ipvlan1>
[  440.914888][T16777] tipc: Resetting bearer <ib:ipvlan1>
[  440.920818][T16777] veth1_macvtap: left promiscuous mode
[  440.927482][T16777] veth0_macvtap: left promiscuous mode
[  440.934794][T16777] veth0_macvtap: entered promiscuous mode
[  440.952195][T16777] veth1_macvtap: entered promiscuous mode
[  440.963507][T16777] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  440.977308][T16777] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  440.991014][T16777] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  441.004804][T16777] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  441.023471][T16777] 8021q: adding VLAN 0 to HW filter on device bond1
[  441.040604][T16777] 8021q: adding VLAN 0 to HW filter on device bond2
[  441.055848][T16777] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  441.065988][T16777] 8021q: adding VLAN 0 to HW filter on device batadv1
[  441.091215][T16777] ip6tnl1: left promiscuous mode
[  441.122496][T16777] vlan3: left promiscuous mode
[  441.158208][T16777] ip6tnl2: left allmulticast mode
[  441.310209][T16787] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2748'.
[  441.325436][T16787] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  441.687999][ T6827] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  441.698384][   T57] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  443.179870][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  443.245058][ T7839] team_slave_1: entered promiscuous mode
[  443.260285][ T7839] bond_slave_0: entered promiscuous mode
[  443.266063][ T7839] bond_slave_1: entered promiscuous mode
[  443.312124][ T6828] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.319435][ T6828] bridge0: port 1(bridge_slave_0) entered forwarding state
[  443.370417][ T6828] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.377786][ T6828] bridge0: port 2(bridge_slave_1) entered forwarding state
[  443.441925][ T6823] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  443.452505][ T6823] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  443.485386][ T6823] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  443.540417][ T6823] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  443.717498][T16807] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2751'.
[  443.933361][T16817] syzkaller1: entered promiscuous mode
[  443.970750][T16817] syzkaller1: entered allmulticast mode
[  444.144979][T16836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2756'.
[  444.161806][T16836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2756'.
[  444.191905][T16836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2756'.
[  444.206749][T16839] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2757'.
[  444.668252][T16859] xt_cgroup: invalid path, errno=-2
[  444.747704][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2763'.
[  445.207952][T16879] lo speed is unknown, defaulting to 1000
[  445.370652][T16890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2768'.
[  445.716759][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2773'.
[  445.736640][ T6823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.745895][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.784886][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2773'.
[  445.812807][T16907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2772'.
[  446.022956][T16915] Cannot find add_set index 3 as target
[  446.107023][T16918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2775'.
[  446.159867][T16921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2775'.
[  446.593243][T16940] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2783'.
[  446.660238][T16943] netlink: 'syz.0.2784': attribute type 1 has an invalid length.
[  446.788742][T16951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2785'.
[  446.826930][T16943] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  447.008692][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  447.078348][T16960] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2788'.
[  447.471357][T16979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2793'.
[  447.483906][T16979] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2793'.
[  447.678101][T16992] 8021q: adding VLAN 0 to HW filter on device batadv3
[  447.710272][T16995] tipc: Can't bind to reserved service type 0
[  447.731885][T16997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.745140][T16997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.763360][T16997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.788261][T16990] lo speed is unknown, defaulting to 1000
[  447.916491][T16996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.937495][T16996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.398338][ T5629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  448.413604][ T5629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  448.424149][ T5629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  448.437597][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  448.447481][ T5629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  449.107437][T17040] netlink: 'syz.3.2810': attribute type 4 has an invalid length.
[  449.410555][T17010] lo speed is unknown, defaulting to 1000
[  449.728689][ T5639] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  450.209503][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  450.346465][T17091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.355975][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.442309][T17091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.528779][ T5639] Bluetooth: hci7: command tx timeout
[  450.762722][T17122] netlink: 'syz.5.2829': attribute type 1 has an invalid length.
[  450.823202][T17122] netlink: 'syz.5.2829': attribute type 2 has an invalid length.
[  450.905177][T17122] netlink: 'syz.5.2829': attribute type 1 has an invalid length.
[  450.931473][T10938] net_ratelimit: 1 callbacks suppressed
[  450.931490][T10938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.946182][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.949661][T17122] netlink: 'syz.5.2829': attribute type 3 has an invalid length.
[  451.010970][T17126] netlink: 'syz.0.2830': attribute type 1 has an invalid length.
[  451.221111][T17121] veth5: entered allmulticast mode
[  451.232263][T17133] netlink: 'syz.6.2832': attribute type 13 has an invalid length.
[  451.258551][T17133] netlink: 'syz.6.2832': attribute type 17 has an invalid length.
[  451.315983][T17121] bond9: (slave veth5): Enslaving as an active interface with an up link
[  451.367354][T17136] __nla_validate_parse: 7 callbacks suppressed
[  451.367367][T17136] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2832'.
[  451.403767][T17123] bond9 (unregistering): (slave veth5): Releasing backup interface
[  451.423011][T17123] bond9 (unregistering): Released all slaves
[  451.492672][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  451.923382][T17145] netlink: 'syz.3.2834': attribute type 1 has an invalid length.
[  452.030201][T17133] 8021q: adding VLAN 0 to HW filter on device bond0
[  452.040396][T17133] 8021q: adding VLAN 0 to HW filter on device team0
[  452.051491][T17141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.061896][T17133] 8021q: adding VLAN 0 to HW filter on device batadv0
[  452.062678][T17141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.077605][T17141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.089176][T17141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.097713][T17141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.107349][T17141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.120027][T17141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.179076][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.196426][T17133] veth1_vlan: left promiscuous mode
[  452.203691][T17133] veth0_vlan: left promiscuous mode
[  452.211820][T17133] veth0_vlan: entered promiscuous mode
[  452.224776][T17133] veth1_vlan: entered promiscuous mode
[  452.238208][T17133] veth1_macvtap: left promiscuous mode
[  452.245413][T17133] veth0_macvtap: left promiscuous mode
[  452.253144][T17133] veth0_macvtap: entered promiscuous mode
[  452.271727][T17133] veth1_macvtap: entered promiscuous mode
[  452.285490][T17133] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  452.300203][T17133] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  452.313949][T17133] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  452.328260][T17133] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  452.346413][T17133] vlan2: left promiscuous mode
[  452.351967][T17133] gretap0: left promiscuous mode
[  452.519223][T17145] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  452.526843][T17148] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  452.609742][ T5639] Bluetooth: hci7: command tx timeout
[  452.735169][T17158] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2837'.
[  452.965156][T17010] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.996850][T17010] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.021288][T17010] bridge_slave_0: entered allmulticast mode
[  453.039849][T17010] bridge_slave_0: entered promiscuous mode
[  453.072066][T17165] dummy0: entered promiscuous mode
[  453.083350][T17165] dummy0: entered allmulticast mode
[  453.104691][T17170] batadv0: entered promiscuous mode
[  453.123062][T17170] batadv0: entered allmulticast mode
[  453.136439][T17010] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.152346][T17010] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.169017][T17010] bridge_slave_1: entered allmulticast mode
[  453.187108][T17010] bridge_slave_1: entered promiscuous mode
[  453.340855][T17183] ip6gretap2: entered promiscuous mode
[  453.373531][T17010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.440091][T17010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  453.505192][T17186] ip6t_srh: unknown srh invflags 4000
[  453.564573][T17190] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2845'.
[  453.567179][T17010] team0: Port device team_slave_0 added
[  453.601482][T17010] team0: Port device team_slave_1 added
[  453.723072][T17010] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.741627][T17010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.808812][T17010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.847547][T17010] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.855953][T17196] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2847'.
[  453.882937][T17010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.939441][T17010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.961356][T17205] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2847'.
[  453.985923][T17205] netlink: 'syz.5.2847': attribute type 2 has an invalid length.
[  453.996911][T17205] netlink: 'syz.5.2847': attribute type 2 has an invalid length.
[  454.008151][T17205] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2847'.
[  454.313000][T17010] hsr_slave_0: entered promiscuous mode
[  454.336385][T17010] hsr_slave_1: entered promiscuous mode
[  454.365006][T17010] debugfs: 'hsr0' already exists in 'hsr'
[  454.395165][T17010] Cannot create hsr debugfs directory
[  454.527787][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2852'.
[  454.663751][T17229] ip6gretap2: entered promiscuous mode
[  454.692176][ T5639] Bluetooth: hci7: command tx timeout
[  454.848107][T17235] ip6t_srh: unknown srh invflags 4000
[  455.169990][T17248] sctp: [Deprecated]: syz.6.2860 (pid 17248) Use of struct sctp_assoc_value in delayed_ack socket option.
[  455.169990][T17248] Use struct sctp_sack_info instead
[  455.192701][T17248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  455.218156][T17248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  455.462993][T17010] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.474108][T17010] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  455.699732][T17010] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.747079][T17010] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  455.856573][T17276] sctp: [Deprecated]: syz.0.2866 (pid 17276) Use of int in max_burst socket option.
[  455.856573][T17276] Use struct sctp_assoc_value instead
[  456.085497][T17010] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.095623][T17286] netlink: 'syz.6.2868': attribute type 13 has an invalid length.
[  456.114804][T17010] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  456.120721][T17285] netlink: 'syz.5.2869': attribute type 61 has an invalid length.
[  456.159710][T17291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2869'.
[  456.472287][T17279] batadv0: left promiscuous mode
[  456.478657][T17279] batadv0: left allmulticast mode
[  456.769171][ T5639] Bluetooth: hci7: command tx timeout
[  457.244090][T17279] veth5: left allmulticast mode
[  457.255480][T17279] ip6gretap2: left promiscuous mode
[  457.814166][T17304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2872'.
[  457.823750][T17304] net_ratelimit: 5 callbacks suppressed
[  457.823767][T17304] openvswitch: netlink: Flow actions attr not present in new flow.
[  458.028899][ T7839] lo speed is unknown, defaulting to 1000
[  458.036317][ T7839] sqz0: Port: 1 Link DOWN
[  458.129904][T17010] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.147193][T17010] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  458.175293][ T6827] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  458.188831][ T6827] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.216125][ T7833] lo speed is unknown, defaulting to 1000
[  458.235300][ T6827] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  458.248303][ T6827] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.265035][ T6827] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  458.278168][ T6827] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.395754][ T6827] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  458.414897][ T6827] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.433770][ T6827] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.485600][T17332] netlink: 844 bytes leftover after parsing attributes in process `syz.5.2878'.
[  458.531612][ T6827] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.579940][ T6827] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.633300][ T6827] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.646535][T17345] netlink: 'syz.5.2878': attribute type 4 has an invalid length.
[  458.924032][T17354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  458.931386][T17354] IPv6: NLM_F_CREATE should be set when creating new route
[  458.938693][T17354] IPv6: NLM_F_CREATE should be set when creating new route
[  458.945962][T17354] IPv6: NLM_F_CREATE should be set when creating new route
[  459.177977][T17010] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  459.223378][T17010] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  459.342136][T17010] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  459.368172][T17010] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  459.388190][T17010] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  459.430705][T17010] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  459.449113][T17010] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  459.473185][T17010] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  459.711457][T17010] 8021q: adding VLAN 0 to HW filter on device bond0
[  459.748459][T17010] 8021q: adding VLAN 0 to HW filter on device team0
[  459.767200][T10933] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.774427][T10933] bridge0: port 1(bridge_slave_0) entered forwarding state
[  459.792948][T10933] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.800154][T10933] bridge0: port 2(bridge_slave_1) entered forwarding state
[  460.230893][T17408] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  460.527323][T17010] 8021q: adding VLAN 0 to HW filter on device batadv0
[  460.603309][T17010] veth0_vlan: entered promiscuous mode
[  460.628203][T17010] veth1_vlan: entered promiscuous mode
[  460.675802][T17010] veth0_macvtap: entered promiscuous mode
[  460.704908][T17010] veth1_macvtap: entered promiscuous mode
[  460.746897][T17010] batman_adv: batadv0: Interface activated: batadv_slave_0
[  460.783347][T17010] batman_adv: batadv0: Interface activated: batadv_slave_1
[  460.816351][T10942] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.847238][T10942] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.883556][T10942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.921146][T10933] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  461.061250][T17434] lo speed is unknown, defaulting to 1000
[  461.076933][ T7835] IPVS: starting estimator thread 0...
[  461.185441][T10942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.206120][T10942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.229897][T17442] IPVS: using max 28 ests per chain, 67200 per kthread
[  461.320264][T10933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.355911][T10933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.824126][T17471] netlink: 'syz.0.2907': attribute type 1 has an invalid length.
[  461.840907][T17471] netlink: 'syz.0.2907': attribute type 2 has an invalid length.
[  461.932735][T17474] lo speed is unknown, defaulting to 1000
[  461.949720][T17481] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2909'.
[  462.430220][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  462.448046][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  462.459315][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  462.473205][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  462.481393][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  462.935239][ T5623] team0: Port device syz_tun removed
[  463.265221][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2914'.
[  463.507963][T17487] lo speed is unknown, defaulting to 1000
[  463.996726][T17518] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2921'.
[  464.528935][ T5639] Bluetooth: hci0: command tx timeout
[  464.537288][T17543] netlink: 'syz.6.2929': attribute type 1 has an invalid length.
[  464.591081][T17543] bond1: entered promiscuous mode
[  464.596748][T17543] 8021q: adding VLAN 0 to HW filter on device bond1
[  464.605025][T17550] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2929'.
[  464.623297][T17550] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2929'.
[  464.640756][T17553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2927'.
[  464.652116][T17548] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  464.679579][T17543] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2929'.
[  464.809586][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2928'.
[  465.089000][T17487] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.096378][T17487] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.104713][T17487] bridge_slave_0: entered allmulticast mode
[  465.112996][T17487] bridge_slave_0: entered promiscuous mode
[  465.122353][T17487] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.130324][T17487] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.138039][T17487] bridge_slave_1: entered allmulticast mode
[  465.146373][T17487] bridge_slave_1: entered promiscuous mode
[  465.191859][T17487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  465.204923][T17487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  465.307249][T17487] team0: Port device team_slave_0 added
[  465.338445][T17487] team0: Port device team_slave_1 added
[  465.457281][T17487] batman_adv: batadv0: Adding interface: batadv_slave_0
[  465.472587][T17487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  465.514474][T17579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2935'.
[  465.528364][T17487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  465.587061][T17579] 8021q: adding VLAN 0 to HW filter on device bond9
[  465.594620][T17577] tap0: tun_chr_ioctl cmd 1074025680
[  465.607272][T17487] batman_adv: batadv0: Adding interface: batadv_slave_1
[  465.615125][T17487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  465.645789][T17487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.682415][T17585] bond9: (slave geneve2): Enslaving as an active interface with an up link
[  465.714434][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2935'.
[  465.727419][T10942] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  465.749182][T10942] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.855672][T10942] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.886187][ T9737] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.929538][T17487] hsr_slave_0: entered promiscuous mode
[  465.940991][T17487] hsr_slave_1: entered promiscuous mode
[  465.948831][T17487] debugfs: 'hsr0' already exists in 'hsr'
[  465.955776][T17487] Cannot create hsr debugfs directory
[  466.060101][T17607] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2941'.
[  466.094706][T17607] netlink: 'syz.1.2941': attribute type 5 has an invalid length.
[  466.491992][T17621] bond2: invalid ARP target 0.0.0.0 specified for addition
[  466.509827][T17621] bond2: option arp_ip_target: invalid value (0)
[  466.524198][T17621] bond2 (unregistering): Released all slaves
[  466.608721][ T5639] Bluetooth: hci0: command tx timeout
[  466.848422][T17487] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  466.907227][T17487] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.004988][T17640] macvlan4: entered allmulticast mode
[  467.011650][T17640] hsr0: entered allmulticast mode
[  467.016827][T17640] hsr_slave_0: entered allmulticast mode
[  467.026108][T17640] hsr_slave_1: entered allmulticast mode
[  467.053485][T17487] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  467.063725][T17487] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.137253][T17487] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  467.149176][T17487] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.194076][T17644] : option downdelay: invalid value (18446744073709547007)
[  467.206532][T17644] : option downdelay: allowed values 0 - 2147483647
[  467.216207][T17644]  (unregistering): Released all slaves
[  467.282466][T17654] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.290148][T17654] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.396885][T17654] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  467.410129][T17654] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  467.533264][T17487] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  467.546498][T17487] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.628451][T17655] vlan2: entered allmulticast mode
[  467.634728][T17655] bridge0: port 3(vlan2) entered blocking state
[  467.642529][T17655] bridge0: port 3(vlan2) entered disabled state
[  467.651533][T17655] vlan2: entered promiscuous mode
[  467.666792][ T9737] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  467.689523][ T9737] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  467.712323][ T9737] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  467.747067][ T9737] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  467.818874][T17660] netlink: 'syz.3.2959': attribute type 1 has an invalid length.
[  467.850077][T17660] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  468.042670][T17669] bond2: entered allmulticast mode
[  468.056972][T17669] 8021q: adding VLAN 0 to HW filter on device bond2
[  468.140394][T17487] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  468.156587][T17487] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  468.166720][T17487] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  468.189794][T17487] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  468.198349][T17487] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  468.227781][T17487] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  468.248906][T17487] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  468.282923][T17487] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  468.335921][T17680] syzkaller1: entered promiscuous mode
[  468.346823][T17680] syzkaller1: entered allmulticast mode
[  468.584273][T17696] __nla_validate_parse: 13 callbacks suppressed
[  468.584292][T17696] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2966'.
[  468.642675][T17695] lo speed is unknown, defaulting to 1000
[  468.685473][T17487] 8021q: adding VLAN 0 to HW filter on device bond0
[  468.695100][ T5639] Bluetooth: hci0: command tx timeout
[  468.736492][T17487] 8021q: adding VLAN 0 to HW filter on device team0
[  468.752134][T10938] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.759385][T10938] bridge0: port 1(bridge_slave_0) entered forwarding state
[  468.782410][T10938] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.789684][T10938] bridge0: port 2(bridge_slave_1) entered forwarding state
[  468.974430][T17709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  469.385847][T17723] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2973'.
[  469.604240][T17729] batman_adv: batadv0: Interface activated: batadv_slave_1
[  469.923753][T17749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2977'.
[  469.964542][T17749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2977'.
[  470.086212][T17487] 8021q: adding VLAN 0 to HW filter on device batadv0
[  470.194214][T17487] veth0_vlan: entered promiscuous mode
[  470.260324][T17487] veth1_vlan: entered promiscuous mode
[  470.688747][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  470.769962][ T5639] Bluetooth: hci0: command tx timeout
[  470.802547][T17487] veth0_macvtap: entered promiscuous mode
[  470.815512][T17487] veth1_macvtap: entered promiscuous mode
[  470.841082][T17487] batman_adv: batadv0: Interface activated: batadv_slave_0
[  470.923520][T17487] batman_adv: batadv0: Interface activated: batadv_slave_1
[  471.006570][ T6823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.038037][ T6823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.080491][ T6823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.114533][ T6823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.215096][T17790] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2983'.
[  471.498649][T17796] netlink: 'syz.1.2985': attribute type 4 has an invalid length.
[  471.546045][T17796] netlink: 'syz.1.2985': attribute type 4 has an invalid length.
[  471.558574][T10940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.586593][T10940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.687587][T17796] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  471.710836][T10939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.723938][T10939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.930304][T17809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2991'.
[  472.426095][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  472.440716][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  472.450786][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  472.461426][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  472.476020][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  472.714161][T10935] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  472.715405][   T57] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  472.748949][T17849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2999'.
[  472.812962][T17854] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3000'.
[  472.838960][T17855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2999'.
[  472.873019][T17849] 8021q: adding VLAN 0 to HW filter on device bond1
[  472.887984][T17849] bond0: (slave bond1): Enslaving as an active interface with an up link
[  472.944689][T17849] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2999'.
[  473.077232][T17855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  473.136999][T17865] xt_hashlimit: size too large, truncated to 1048576
[  473.146929][T17855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  473.180804][T17855] bond0 (unregistering): (slave bond1): Releasing backup interface
[  473.226696][T17855] bond0 (unregistering): Released all slaves
[  473.547883][ T6828] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.701187][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3006'.
[  473.803693][ T6828] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.854706][T17840] lo speed is unknown, defaulting to 1000
[  474.021794][ T6828] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.033419][T17888] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3008'.
[  474.103832][T17888] .70·X: renamed from veth1_virt_wifi (while UP)
[  474.123400][T17891] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3008'.
[  474.138803][T17888] .70·X: entered allmulticast mode
[  474.161385][T17888] A link change request failed with some changes committed already. Interface .70·X may have been left with an inconsistent configuration, please check.
[  474.279068][T17891] bond0 (unregistering): Released all slaves
[  474.392735][ T6828] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.497339][T17896] dvmrp0: entered allmulticast mode
[  474.503560][T17897] dvmrp0: left allmulticast mode
[  474.530422][ T5639] Bluetooth: hci3: command tx timeout
[  474.989504][T17916] netlink: 'syz.0.3016': attribute type 1 has an invalid length.
[  474.998386][T17916] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3016'.
[  475.030712][ T6828] dvmrp0: left allmulticast mode
[  475.162651][ T6828] bond7 (unregistering): (slave ip6gretap1): Releasing active interface
[  475.404465][ T6828] bond6 (unregistering): (slave gretap1): Releasing active interface
[  475.437584][ T6828] bond9 (unregistering): (slave geneve2): Releasing backup interface
[  475.554281][ T6828] bond1 (unregistering): (slave bridge1): Releasing active interface
[  475.675730][ T6828] bond2 (unregistering): (slave bridge4): Releasing active interface
[  475.894577][ T6828] bond8 (unregistering): (slave bridge9): Releasing backup interface
[  476.084131][ T6828] bond1 (unregistering): Released all slaves
[  476.101546][ T6828] bond2 (unregistering): Released all slaves
[  476.118049][ T6828] bond3 (unregistering): Released all slaves
[  476.137213][ T6828] bond4 (unregistering): Released all slaves
[  476.156726][ T6828] bond5 (unregistering): Released all slaves
[  476.177473][ T6828] bond6 (unregistering): Released all slaves
[  476.197447][ T6828] bond7 (unregistering): Released all slaves
[  476.218165][ T6828] bond8 (unregistering): Released all slaves
[  476.237257][ T6828] bond0 (unregistering): Released all slaves
[  476.256952][ T6828] bond9 (unregistering): Released all slaves
[  476.276319][T17909] syzkaller1: tun_chr_ioctl cmd 2147767506
[  476.317548][T17921] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3012'.
[  476.541304][T17933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  476.548612][T17933] IPv6: NLM_F_CREATE should be set when creating new route
[  476.609284][ T5639] Bluetooth: hci3: command tx timeout
[  476.687298][T17934] bridge0: port 1(vlan4) entered blocking state
[  476.695389][T17934] bridge0: port 1(vlan4) entered disabled state
[  476.706762][T17934] vlan4: entered allmulticast mode
[  476.712437][T17934] geneve0: entered allmulticast mode
[  476.723703][ T6828] tipc: Left network mode
[  476.829626][ T6828] IPVS: stopping backup sync thread 13941 ...
[  476.954698][T17952] netlink: 'syz.5.3023': attribute type 1 has an invalid length.
[  477.042338][T17959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3022'.
[  477.211388][T17952] 8021q: adding VLAN 0 to HW filter on device bond0
[  477.501672][T17958] bond0: (slave veth9): Enslaving as an active interface with a down link
[  478.063180][T18001] nbd: couldn't find a device at index 0
[  478.097046][T18000] netlink: 'syz.5.3030': attribute type 2 has an invalid length.
[  478.266114][T17840] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.317193][T17840] bridge0: port 1(bridge_slave_0) entered disabled state
[  478.347749][T17840] bridge_slave_0: entered allmulticast mode
[  478.376825][T17840] bridge_slave_0: entered promiscuous mode
[  478.435950][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1
[  478.471711][T17840] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.480433][T17840] bridge0: port 2(bridge_slave_1) entered disabled state
[  478.487721][T17840] bridge_slave_1: entered allmulticast mode
[  478.497126][T17840] bridge_slave_1: entered promiscuous mode
[  478.507706][T18022] netlink: 'syz.1.3037': attribute type 21 has an invalid length.
[  478.514616][T18008] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3032'.
[  478.516415][T18022] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3037'.
[  478.542635][T18023] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3036'.
[  478.564609][T18001] tipc: Started in network mode
[  478.575439][T10933] tipc: Subscription rejected, illegal request
[  478.583325][T18001] tipc: Node identity 02db2c2da103, cluster identity 4711
[  478.592703][T18001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  478.653848][T18007] syzkaller0: entered promiscuous mode
[  478.662376][T18007] syzkaller0: entered allmulticast mode
[  478.669799][T18007] tipc: Resetting bearer <eth:syzkaller0>
[  478.689373][ T5639] Bluetooth: hci3: command tx timeout
[  478.712546][T18022] netlink: 'syz.1.3037': attribute type 4 has an invalid length.
[  478.720680][T18022] netlink: 'syz.1.3037': attribute type 3 has an invalid length.
[  478.735392][T18022] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3037'.
[  478.945652][T10933] tipc: Resetting bearer <eth:syzkaller0>
[  478.990554][T17840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  479.015153][T17999] tipc: Resetting bearer <eth:syzkaller0>
[  480.770040][ T5639] Bluetooth: hci3: command tx timeout
[  481.045239][T17999] tipc: Disabling bearer <eth:syzkaller0>
[  481.086971][T17840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  481.125094][T18042] pim6reg: entered allmulticast mode
[  481.140792][ T7821] tipc: Node number set to 2748853293
[  481.440598][T17840] team0: Port device team_slave_0 added
[  481.544376][T17840] team0: Port device team_slave_1 added
[  481.712767][T17840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  481.749316][T17840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  481.840928][T17840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  481.891133][T18079] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3047'.
[  481.914755][T17840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  481.943856][T17840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  482.045872][T17840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  482.110876][T18091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3048'.
[  482.209250][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  482.317953][T18082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3049'.
[  482.616525][T17840] hsr_slave_0: entered promiscuous mode
[  482.651131][T17840] hsr_slave_1: entered promiscuous mode
[  482.665613][T17840] debugfs: 'hsr0' already exists in 'hsr'
[  482.676074][T17840] Cannot create hsr debugfs directory
[  482.706021][T18103] bond0: entered promiscuous mode
[  482.726313][T18103] bond_slave_0: entered promiscuous mode
[  482.742085][T18103] bond_slave_1: entered promiscuous mode
[  482.756713][T18103] batadv0: entered promiscuous mode
[  482.774018][T18103] debugfs: 'hsr1' already exists in 'hsr'
[  482.788683][T18103] Cannot create hsr debugfs directory
[  482.799167][T18103] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  482.818825][T18103] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  482.838264][T18106] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3053'.
[  482.859358][T18103] 8021q: adding VLAN 0 to HW filter on device hsr1
[  482.890305][ T6828] veth1_to_team: left promiscuous mode
[  482.917831][ T6828] veth1_to_batadv: left promiscuous mode
[  482.960451][ T6828] hsr_slave_0: left promiscuous mode
[  482.995636][ T6828] hsr_slave_1: left promiscuous mode
[  483.030765][ T6828] hsr0: left allmulticast mode
[  483.170782][T18113] netlink: 664 bytes leftover after parsing attributes in process `syz.1.3054'.
[  483.470036][T18121] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3057'.
[  483.689409][   T57] smc: removing ib device sqz0
[  483.714303][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3
[  483.783103][   T57] smbdirect: ib_dev[sqz0] removed
[  483.993420][T18135] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3059'.
[  484.050548][T18136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  485.058337][T18159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3064'.
[  485.228831][T18166] netlink: 'syz.5.3066': attribute type 1 has an invalid length.
[  485.675162][T18166] 8021q: adding VLAN 0 to HW filter on device bond3
[  485.812264][T18170] bond3: (slave veth11): Enslaving as an active interface with a down link
[  485.827997][T18173] netlink: 62967 bytes leftover after parsing attributes in process `syz.0.3067'.
[  485.894172][T18186] 8021q: adding VLAN 0 to HW filter on device batadv2
[  485.932678][T18186] bond3: (slave batadv2): making interface the new active one
[  485.985805][T18186] batadv2: entered promiscuous mode
[  486.012010][T18186] bond3: (slave batadv2): Enslaving as an active interface with an up link
[  486.271260][T18180] bond3 (unregistering): (slave veth11): Releasing active interface
[  486.297417][T18180] bond3 (unregistering): (slave batadv2): Releasing active interface
[  486.328420][T18180] bond3 (unregistering): Released all slaves
[  486.421940][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2
[  486.608191][T18206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3073'.
[  487.003823][T18222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3075'.
[  487.015446][T18222] netlink: 'syz.5.3075': attribute type 1 has an invalid length.
[  487.023789][T18222] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3075'.
[  487.157833][T18225] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  487.252777][T18215] syzkaller0: entered promiscuous mode
[  487.273734][T18215] syzkaller0: entered allmulticast mode
[  487.380183][T18233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3077'.
[  487.817243][T18213] tipc: Resetting bearer <eth:syzkaller0>
[  487.871746][T18213] tipc: Disabling bearer <eth:syzkaller0>
[  488.082461][T18257] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3081'.
[  488.097395][T18257] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3081'.
[  488.692231][T18274] IPv6: Can't replace route, no match found
[  488.744422][T17840] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  488.806341][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  488.845877][T17840] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  488.953017][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  489.061926][T18291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3088'.
[  489.076294][T17840] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  489.116380][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  489.135264][T18294] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  489.223469][T17840] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  489.304666][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  489.625364][T18298] syzkaller0: entered promiscuous mode
[  489.632322][T18298] syzkaller0: entered allmulticast mode
[  489.740368][T18294] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  489.762962][T18294] bond3 (unregistering): Released all slaves
[  489.921752][ T6828] IPVS: stop unused estimator thread 0...
[  492.385259][T17840] 8021q: adding VLAN 0 to HW filter on device bond0
[  492.427746][T17840] 8021q: adding VLAN 0 to HW filter on device team0
[  492.442907][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.450106][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  492.471413][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.478659][ T6822] bridge0: port 2(bridge_slave_1) entered forwarding state
[  492.845004][T17840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  492.892130][T17840] veth0_vlan: entered promiscuous mode
[  492.904992][T17840] veth1_vlan: entered promiscuous mode
[  492.936188][T17840] veth0_macvtap: entered promiscuous mode
[  492.946319][T17840] veth1_macvtap: entered promiscuous mode
[  492.964575][T17840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  492.980697][T17840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  492.996866][ T6828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  493.007599][ T6828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  493.020014][ T6828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  493.028998][ T6828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  493.115388][T10940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.124624][T10940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.157993][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.166474][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.411366][ T1313] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  503.488962][ T5629] Bluetooth: hci6: command 0x0405 tx timeout
[  503.736474][T10933] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  503.736636][T10940] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  508.459449][   T30] INFO: task syz.2.2120:14209 blocked for more than 143 seconds.
[  508.467454][   T30]       Not tainted syzkaller #0
[  508.472596][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  508.481380][   T30] task:syz.2.2120      state:D stack:26312 pid:14209 tgid:14208 ppid:5636   task_flags:0x400040 flags:0x00080002
[  508.493520][   T30] Call Trace:
[  508.496864][   T30]  <TASK>
[  508.499898][   T30]  __schedule+0x17b4/0x5680
[  508.504446][   T30]  ? __lock_acquire+0x6b5/0x2cf0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  508.509633][   T30]  ? __pfx___schedule+0x10/0x10
[  508.514545][   T30]  ? schedule+0x90/0x360
[  508.519708][   T30]  schedule+0x164/0x360
[  508.524801][   T30]  schedule_preempt_disabled+0x13/0x30
[  508.530670][   T30]  __mutex_lock+0x7f7/0x1550
[  508.535351][   T30]  ? __mutex_lock+0x608/0x1550
[  508.540348][   T30]  ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410
[  508.546596][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  508.553095][   T30]  ? stack_trace_save+0xa9/0x100
[  508.558127][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  508.564817][   T30]  nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410
[  508.571287][   T30]  ? kasan_save_track+0x4f/0x80
[  508.576222][   T30]  ? kasan_save_track+0x3e/0x80
[  508.581446][   T30]  ? __kasan_kmalloc+0x93/0xb0
[  508.586573][   T30]  ? __alloc_skb+0x2c1/0x7d0
[  508.591453][   T30]  ? netlink_dump+0x1d8/0xe10
[  508.596207][   T30]  ? __netlink_dump_start+0x5cb/0x7e0
[  508.616642][   T30]  ? genl_family_rcv_msg_dumpit+0x213/0x310
[  508.661194][   T30]  ? genl_rcv_msg+0x5e8/0x7a0
[  508.695426][   T30]  ? netlink_rcv_skb+0x232/0x4b0
[  508.718607][   T30]  ? genl_rcv+0x28/0x40
[  508.729373][   T30]  ? netlink_unicast+0x75c/0x8e0
[  508.738876][   T30]  ? netlink_sendmsg+0x813/0xb40
[  508.743896][   T30]  ? ____sys_sendmsg+0x972/0x9f0
[  508.779886][   T30]  ? ___sys_sendmsg+0x2a5/0x360
[  508.789462][   T30]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[  508.804294][   T30]  ? do_syscall_64+0x15f/0xf80
[  508.818425][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.840870][   T30]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[  508.868670][   T30]  ? rcu_is_watching+0x15/0xb0
[  508.876481][   T30]  ? trace_kmalloc+0x2a/0xf0
[  508.898630][   T30]  ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0
[  508.915246][   T30]  genl_dumpit+0x10b/0x1b0
[  508.928992][   T30]  netlink_dump+0x702/0xe10
[  508.950115][   T30]  ? __pfx_netlink_dump+0x10/0x10
[  508.969446][   T30]  ? genl_start+0x499/0x6c0
[  508.974067][   T30]  __netlink_dump_start+0x5cb/0x7e0
[  508.988665][   T30]  genl_family_rcv_msg_dumpit+0x213/0x310
[  508.994504][   T30]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  509.008805][   T30]  ? genl_get_cmd+0x522/0x960
[  509.020564][   T30]  ? __pfx_genl_start+0x10/0x10
[  509.035498][   T30]  ? __pfx_genl_dumpit+0x10/0x10
[  509.051211][   T30]  ? __pfx_genl_done+0x10/0x10
[  509.070189][   T30]  genl_rcv_msg+0x5e8/0x7a0
[  509.081660][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  509.100078][   T30]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[  509.121805][   T30]  ? __pfx_ref_tracker_free+0x10/0x10
[  509.140064][   T30]  netlink_rcv_skb+0x232/0x4b0
[  509.156339][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  509.175767][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  509.192816][   T30]  ? down_read+0x270/0x2e0
[  509.207376][   T30]  ? genl_rcv+0xd/0x40
[  509.229751][   T30]  genl_rcv+0x28/0x40
[  509.240331][   T30]  netlink_unicast+0x75c/0x8e0
[  509.252034][   T30]  netlink_sendmsg+0x813/0xb40
[  509.278564][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  509.285423][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  509.299376][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  509.316087][   T30]  ____sys_sendmsg+0x972/0x9f0
[  509.329996][   T30]  ? __might_fault+0xaf/0x130
[  509.334771][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  509.348770][   T30]  ? import_iovec+0x73/0xa0
[  509.354858][   T30]  ___sys_sendmsg+0x2a5/0x360
[  509.365451][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  509.378557][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  509.389243][   T30]  ? futex_wait+0x2a2/0x390
[  509.398568][   T30]  ? __fget_files+0x2a/0x420
[  509.419166][   T30]  ? __fget_files+0x3a0/0x420
[  509.428706][   T30]  __x64_sys_sendmsg+0x1bd/0x2a0
[  509.442821][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  509.467243][   T30]  ? rcu_is_watching+0x15/0xb0
[  509.473503][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.480323][   T30]  do_syscall_64+0x15f/0xf80
[  509.484981][   T30]  ? trace_irq_disable+0x3b/0x140
[  509.490430][   T30]  ? clear_bhb_loop+0x40/0x90
[  509.495193][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.501209][   T30] RIP: 0033:0x7fc09319cdd9
[  509.505668][   T30] RSP: 002b:00007fc0940a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  509.514861][   T30] RAX: ffffffffffffffda RBX: 00007fc093415fa0 RCX: 00007fc09319cdd9
[  509.523083][   T30] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000004
[  509.531383][   T30] RBP: 00007fc093232d69 R08: 0000000000000000 R09: 0000000000000000
[  509.540075][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  509.548088][   T30] R13: 00007fc093416038 R14: 00007fc093415fa0 R15: 00007ffc08f377a8
[  509.556330][   T30]  </TASK>
[  509.562428][   T30] 
[  509.562428][   T30] Showing all locks held in the system:
[  509.585441][   T30] 1 lock held by khungtaskd/30:
[  509.614934][   T30]  #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  509.625209][   T30] 2 locks held by syslogd/4974:
[  509.631100][   T30] 2 locks held by getty/5382:
[  509.635850][   T30]  #0: ffff8880327620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  509.646229][   T30]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  509.658077][   T30] 3 locks held by kworker/1:10/7833:
[  509.664351][   T30]  #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  509.677227][   T30]  #1: ffffc9000da2fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  509.687907][   T30]  #2: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  509.700279][   T30] 2 locks held by syz.4.1329/11075:
[  509.705567][   T30]  #0: ffffffff8fe3dd88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  509.714109][   T30]  #1: ffffffff8ec8aae0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  509.724822][   T30] 3 locks held by syz-executor/11617:
[  509.731884][   T30]  #0: ffff888051e70ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0
[  509.742412][   T30]  #1: ffff888051e700b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0
[  509.752472][   T30]  #2: ffffffff8ff51780 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  509.763502][   T30] 3 locks held by syz.2.2120/14209:
[  509.769339][   T30]  #0: ffffffff8fe3dd88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  509.780068][   T30]  #1: ffff8880534f96e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  509.795699][   T30]  #2: ffffffff8ec8aae0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410
[  509.806768][   T30] 3 locks held by syz-executor/14707:
[  509.812646][   T30]  #0: ffff88804f800ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0
[  509.823613][   T30]  #1: ffff88804f8000b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0
[  509.834545][   T30]  #2: ffffffff8ff51780 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  509.844973][   T30] 5 locks held by syz-executor/17010:
[  509.851448][   T30]  #0: ffff8880795b8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0
[  509.861812][   T30]  #1: ffff8880795b80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0
[  509.871792][   T30]  #2: ffffffff8ff51780 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  509.884447][   T30]  #3: ffff888043aecaf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570
[  509.894339][   T30]  #4: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  509.905743][   T30] 3 locks held by syz-executor/17487:
[  509.912017][   T30]  #0: ffff888053b74ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0
[  509.922382][   T30]  #1: ffff888053b740b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0
[  509.932610][   T30]  #2: ffffffff8ff51780 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  509.943677][   T30] 1 lock held by syz-executor/17840:
[  509.949318][   T30] 
[  509.951737][   T30] =============================================
[  509.951737][   T30] 
[  509.971654][   T30] NMI backtrace for cpu 0
[  509.971673][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  509.971697][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  509.971710][   T30] Call Trace:
[  509.971719][   T30]  <TASK>
[  509.971727][   T30]  dump_stack_lvl+0xe8/0x150
[  509.971757][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  509.971789][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  509.971814][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  509.971849][   T30]  sys_info+0x135/0x170
[  509.971876][   T30]  watchdog+0xfd3/0x1030
[  509.971916][   T30]  ? watchdog+0x1c9/0x1030
[  509.971954][   T30]  kthread+0x388/0x470
[  509.971982][   T30]  ? __pfx_watchdog+0x10/0x10
[  509.972010][   T30]  ? __pfx_kthread+0x10/0x10
[  509.972040][   T30]  ret_from_fork+0x514/0xb70
[  509.972066][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  509.972089][   T30]  ? __switch_to+0xc79/0x1410
[  509.972131][   T30]  ? __pfx_kthread+0x10/0x10
[  509.972161][   T30]  ret_from_fork_asm+0x1a/0x30
[  509.972204][   T30]  </TASK>
[  509.972212][   T30] Sending NMI from CPU 0 to CPUs 1:
[  510.086910][    C1] NMI backtrace for cpu 1
[  510.086928][    C1] CPU: 1 UID: 0 PID: 17840 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  510.086947][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  510.086958][    C1] RIP: 0010:unwind_next_frame+0x1bf/0x2550
[  510.086985][    C1] Code: 80 3c 28 00 4c 8b 7c 24 10 74 08 4c 89 ff e8 48 fb b9 00 4d 8b 27 48 83 f3 01 48 c7 c2 20 a5 c9 8b 49 29 dc 0f 84 b2 02 00 00 <49> 81 fc 00 00 00 81 0f 92 c0 49 81 fc e8 8b ab 8b 0f 93 c1 08 c1
[  510.087000][    C1] RSP: 0018:ffffc9000f827798 EFLAGS: 00000282
[  510.087016][    C1] RAX: 1ffff92001f04f16 RBX: 0000000000000001 RCX: 0000000080000001
[  510.087028][    C1] RDX: ffffffff8bc9a520 RSI: ffffffff8c28aa40 RDI: ffffffff8c28aa00
[  510.087040][    C1] RBP: dffffc0000000000 R08: ffffffff8176e256 R09: ffffffff8e95cd60
[  510.087053][    C1] R10: ffffc9000f8278b8 R11: ffffffff81b0d880 R12: ffffffff818fb758
[  510.087066][    C1] R13: 1ffff92001f04f0d R14: ffffc9000f827868 R15: ffffc9000f8278b0
[  510.087079][    C1] FS:  0000000000000000(0000) GS:ffff888125393000(0000) knlGS:0000000000000000
[  510.087093][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  510.087104][    C1] CR2: 000055f44b9f8ee8 CR3: 000000000e74a000 CR4: 00000000003526f0
[  510.087121][    C1] Call Trace:
[  510.087127][    C1]  <TASK>
[  510.087138][    C1]  ? unwind_next_frame+0xa6/0x2550
[  510.087160][    C1]  ? task_work_run+0x1d9/0x270
[  510.087183][    C1]  ? task_work_run+0x1d9/0x270
[  510.087219][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  510.087244][    C1]  arch_stack_walk+0x11b/0x150
[  510.087267][    C1]  ? task_work_run+0x1d9/0x270
[  510.087291][    C1]  stack_trace_save+0xa9/0x100
[  510.087315][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  510.087344][    C1]  save_stack+0x122/0x230
[  510.087373][    C1]  ? __pfx_save_stack+0x10/0x10
[  510.087394][    C1]  ? __free_frozen_pages+0xbc7/0xd30
[  510.087415][    C1]  ? vfree+0x1d1/0x2f0
[  510.087433][    C1]  ? kcov_close+0x28/0x50
[  510.087454][    C1]  ? __fput+0x44f/0xa60
[  510.087471][    C1]  ? task_work_run+0x1d9/0x270
[  510.087503][    C1]  __reset_page_owner+0x71/0x1f0
[  510.087526][    C1]  __free_frozen_pages+0xbc7/0xd30
[  510.087549][    C1]  ? ___free_pages+0x9a/0x1b0
[  510.087574][    C1]  vfree+0x1d1/0x2f0
[  510.087595][    C1]  ? __pfx_kcov_close+0x10/0x10
[  510.087617][    C1]  kcov_close+0x28/0x50
[  510.087638][    C1]  __fput+0x44f/0xa60
[  510.087662][    C1]  task_work_run+0x1d9/0x270
[  510.087686][    C1]  ? __pfx_task_work_run+0x10/0x10
[  510.087708][    C1]  ? do_exit+0x70a/0x22c0
[  510.087728][    C1]  ? kmem_cache_free+0x182/0x650
[  510.087750][    C1]  ? put_net+0x191/0x260
[  510.087768][    C1]  do_exit+0x70f/0x22c0
[  510.087793][    C1]  ? __pfx_do_exit+0x10/0x10
[  510.087812][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  510.087840][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  510.087858][    C1]  do_group_exit+0x21b/0x2d0
[  510.087880][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.087897][    C1]  __x64_sys_exit_group+0x3f/0x40
[  510.087919][    C1]  x64_sys_call+0x221a/0x2240
[  510.087938][    C1]  do_syscall_64+0x15f/0xf80
[  510.087959][    C1]  ? trace_irq_disable+0x3b/0x140
[  510.087983][    C1]  ? clear_bhb_loop+0x40/0x90
[  510.088002][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.088017][    C1] RIP: 0033:0x7f2d28f9cdd9
[  510.088031][    C1] Code: Unable to access opcode bytes at 0x7f2d28f9cdaf.
[  510.088039][    C1] RSP: 002b:00007ffd5b5fccd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  510.088054][    C1] RAX: ffffffffffffffda RBX: 00007f2d29033cb1 RCX: 00007f2d28f9cdd9
[  510.088065][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  510.088075][    C1] RBP: 00007f2d29033cc3 R08: 0000000000000000 R09: 00000000000927c0
[  510.088085][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  510.088094][    C1] R13: 00000000000927c0 R14: 00000000000786d1 R15: 00007ffd5b5fce80
[  510.088115][    C1]  </TASK>
[  510.478139][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  510.485057][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  510.494286][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  510.504376][   T30] Call Trace:
[  510.507692][   T30]  <TASK>
[  510.510665][   T30]  vpanic+0x56c/0xa60
[  510.514693][   T30]  ? __pfx___schedule+0x10/0x10
[  510.519581][   T30]  ? __pfx_vpanic+0x10/0x10
[  510.524141][   T30]  panic+0xc5/0xd0
[  510.527898][   T30]  ? __pfx_panic+0x10/0x10
[  510.532351][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  510.537778][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  510.543990][   T30]  watchdog+0x102c/0x1030
[  510.548374][   T30]  ? watchdog+0x1c9/0x1030
[  510.552835][   T30]  kthread+0x388/0x470
[  510.556951][   T30]  ? __pfx_watchdog+0x10/0x10
[  510.561675][   T30]  ? __pfx_kthread+0x10/0x10
[  510.566327][   T30]  ret_from_fork+0x514/0xb70
[  510.570972][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  510.576122][   T30]  ? __switch_to+0xc79/0x1410
[  510.580839][   T30]  ? __pfx_kthread+0x10/0x10
[  510.585467][   T30]  ret_from_fork_asm+0x1a/0x30
[  510.590275][   T30]  </TASK>
[  510.594203][   T30] Kernel Offset: disabled
[  510.598554][   T30] Rebooting in 86400 seconds..