last executing test programs:

3m32.956334564s ago: executing program 4 (id=7379):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x140, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x108, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_EMATCHES={0xe4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x44, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x600}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR="419892b8b4ad", @TCF_META_TYPE_VAR="6762ab8b52fbbf7a5d28"]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="df504b", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="4f65f6c06d4b55b3f0da"]}]}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x6, 0x9, 0x7}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x9, 0x2188e8564924fac6}, {0x8, 0x5}}}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_META={0x68, 0x1, 0x0, 0x0, {{0x8001, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="3b9aa19a5093e4d1c834", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="ae2e", @TCF_META_TYPE_VAR='\a']}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="2a969cd4", @TCF_META_TYPE_VAR="c5a29d0983a38c474fe4", @TCF_META_TYPE_VAR="b3690e"]}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="0027170019a81c1e78d4", @TCF_META_TYPE_VAR="ccbcd1cc4e2b", @TCF_META_TYPE_VAR="92", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa]}]}}]}]}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)="fc")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000500)="d7")
ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080))
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600050a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

3m32.848412896s ago: executing program 4 (id=7380):
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x2, 0x4)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000040)='.\\@$\x00', 0x303102, &(0x7f0000000080)={@_ha_fsid={[0x8, 0xff]}, {0x8, 0x7, 0x1ff}}, 0x8, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x5}) (async)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={<r1=>r0, &(0x7f0000000040)='.\\@$\x00', 0x303102, &(0x7f0000000080)={@_ha_fsid={[0x8, 0xff]}, {0x8, 0x7, 0x1ff}}, 0x8, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x5})
syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xffff, @link='syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8841}, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r3, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x73}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000480)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000004c0)=0x2c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x4)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r5)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r6, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4040)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000680))
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xd0, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}, @NL80211_ATTR_IE={0xac, 0x2a, [@dsss={0x3, 0x1, 0x88}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x21}}, @supported_rates={0x1, 0x1, [{0xb}]}, @tim={0x5, 0x3, {0x80, 0xd, 0x5}}, @challenge={0x10, 0x1, 0x2e}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x98, 0xb1, 0x6}}, @rann={0x7e, 0x15, {{0x1, 0x3a}, 0x8, 0x8, @device_b, 0x40000000, 0x3, 0x4}}, @preq={0x82, 0x6d, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xeb49, @device_b, 0xfffffff8, @value, 0xa3e9, 0x5, 0x7, [{{0x1}, @device_b, 0x2800}, {{}, @device_b, 0x3}, {{}, @broadcast, 0x8}, {{}, @device_a, 0x4}, {{0x1}, @broadcast, 0x38}, {{0x1, 0x0, 0x1}, @device_a, 0x5}, {{0x0, 0x0, 0x1}, @device_a, 0xfffff801}]}}, @channel_switch={0x25, 0x3, {0x0, 0x2, 0x1}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x804}, 0x800)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x1)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept4$x25(r7, 0x0, &(0x7f0000000980), 0x0) (async)
accept4$x25(r7, 0x0, &(0x7f0000000980), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$packet(r1, &(0x7f00000009c0)="1a8f34fc9ad138a64aeaaee2e119602e8aa9410bf49d9a31b851cc133e8592f94cc315266076636557eaf58fa2c6e50d20bc11620294acf904ef6c4d8ea8038e29189bd159a557517d9602c9ad9be44f45ec52a9e1e122c09d78fd74535e984fe29663e594ef9d6b6b14e9308c65f47272375f7601455b26787875430388b2352935005667f66265a53a68cdddb701e4f6c8a91f5a6cd0ec659e0574a13aec6f0e79de0b7922e00388ca93bcfb70f9f766ded50c2e37dfb687d8b96f6bc028540070c1fb3aedbbc9182d3816254c1f333cfece232feab3cd2e63b151dc2d5dbe4d57d45283fe9a9d60", 0xe9, 0x4, &(0x7f0000000ac0)={0x11, 0x2, 0x0, 0x1, 0x60, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
sendmsg$nl_route(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)=@getrule={0x14, 0x22, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x40000)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000c00)) (async)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000c00))
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000c40)={0x1, [<r8=>0x0]}, &(0x7f0000000c80)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000cc0)={r8, 0x6}, &(0x7f0000000d00)=0x8)
syz_80211_inject_frame(&(0x7f0000000d40)=@device_b, &(0x7f0000000d80)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x3}, @broadcast, @device_b, @random="884f7bf9eebe", {0x3, 0x5}}, 0x0, 0x3, 0x3b, @void, [{0xdd, 0x5b, "f4c37f77456f62a4f57344a600858a675499784de9546d095b322f9c8ee65fd054520dfc7cb4fc428672c9e98bc1926cdbe6aa191dfabab8fc48a3c8dd8d294cdb9416b8d3b5b2460ffd546ff51cee37618bd53ec1c2a6e52d5dbf"}, {0xdd, 0x3c, "5436b94ca91ca2cc66b2afa15742b423b23e76d7e90fd6c75091efbd4de13e76ca9c4a3c936b101b8d029d9bf7c265b2a50ca4c08099590ca3245d9a"}, {0xdd, 0x6a, "bffea91211607626fe54166126774723800aec9bb647aada768eb5838481ab65486448518e49e7e0a4b757927505522ece83838348c2949c0f7104bde4f99d28457451656f28f363642a7a23531b7319d248e281826652c39436a9575c3965f078ac4109dba41881fca6"}, {0xdd, 0xa, "d1b702c2d58d51c4afe5"}]}, 0x131)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$NFC_CMD_GET_DEVICE(r9, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x34, r10, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0xc080) (async)
sendmsg$NFC_CMD_GET_DEVICE(r9, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x34, r10, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0xc080)

3m32.2700863s ago: executing program 4 (id=7394):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="18000000160001000000a2afdb11d626e9dfac05a1aecf094c0000fcffffff0a0000fe18da77c8a014d1bb33abf59d6f2221951aeebec56ca1b8afea17723f", @ANYRES32=0x0], 0x18}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r4, 0x0, 0x18, 0x0, &(0x7f0000003d00))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xb}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000211000010000000000000000000300000a50000000060a010400000000000000000a0000110900b8c5130024000480200005a7cf65ddb1d83a01800700010063740000140002800800024000000000"], 0x78}, 0x1, 0x0, 0x0, 0x20008885}, 0x3400c090)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$netlink(r3, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f00000002c0), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
r8 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r9 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0xfdef)
close(r9)
recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a80)=""/4101, 0x1005}], 0x1}, 0x2101)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000580)={'syztnl1\x00', r7, 0x1, 0x80, 0xd10, 0x6, {{0x2a, 0x4, 0x3, 0x4, 0xa8, 0x64, 0x0, 0x1, 0x29, 0x0, @local, @remote, {[@timestamp={0x44, 0x1c, 0xbd, 0x0, 0x2, [0x7, 0x408, 0x4, 0x1, 0x1000, 0x4]}, @rr={0x7, 0x1b, 0x12, [@empty, @local, @private=0xa010101, @broadcast, @broadcast, @empty]}, @rr={0x7, 0x27, 0xbd, [@multicast2, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1, @multicast1, @multicast2, @private=0xa010101, @loopback, @multicast1]}, @timestamp={0x44, 0x8, 0x6e, 0x0, 0x5, [0x5]}, @generic={0x88, 0x11, "73cfb726d28cc024317253a71b46f0"}, @timestamp_prespec={0x44, 0x1c, 0x45, 0x3, 0x6, [{@loopback}, {@loopback, 0xfffffc01}, {@rand_addr=0x64010101, 0x7}]}]}}}}})
r10 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x400, 0x2, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0xf909}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
close(r10)
syz_emit_ethernet(0x106, &(0x7f00000006c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @dccp={{0xa, 0x4, 0x1, 0x32, 0xf8, 0x66, 0x0, 0x3, 0x21, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x13, 0x6c, [@dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @loopback]}]}}, {{0x4e23, 0x4e20, 0x4, 0x1, 0x3, 0x0, 0x0, 0xa, 0x1, "847611", 0xbd, 'Hmp'}, "b14a45be0296b9aa2185591b013a91941586488048ae12921d4059369d0aaa7d06df14a1b2b6429e5e5fb5696d7eafd54893e95165a870d1f732efeac1783cf638d252763f32dee893273d792558f3ae69fb629d94202870a0e0e487f2d8ef5e2a15ffefeec88aba821599402b8bbe9f2d48309b049f229bfe24a59ca6cd1874ad596d19fce9057195eecd06b50b1a5a11c137b1bc18737604883d190523f3a8503ead366016bb5258ff7725a18d04d0c941a9704db6b367048fba07efa41eda"}}}}}, &(0x7f0000000800)={0x0, 0x4, [0xed, 0xda6, 0xb44, 0xb81]})
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000840)=@gcm_256={{0x304}, "b288f5700053b106", "7bb277af39b344abbfaed3b3afc08ae1f3106621bdd6cb21eb1ac3d1767ba491", "0adea31a", "de3b059a6aaca790"}, 0x38)

3m31.837926723s ago: executing program 4 (id=7398):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(streebog256)\x00'}, 0x58)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xd, &(0x7f0000000f80)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff5be703526eda353500000000bfa200200000000007020000f8ffffffb703000008000000b7040000000030f0ae8122b39861000085"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2, 0x0, 0x1}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}, [@generic="299a50bdc19377268b5707eafb"]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r6 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x4000870)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000480)={{r6, &(0x7f0000000040)='\x00', 0xc00000, &(0x7f0000000180)={@_ha_fsid={[0x8, 0x2]}, {0x22, 0x7, 0x9, 0x2}}, 0x7, &(0x7f0000000200), &(0x7f0000000280)=0x9}, {[0x6, 0x800, 0x0, 0x8]}, 0x8000, 0x94, &(0x7f00000003c0)=""/148})
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020000000000000008000500", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)

3m31.627818647s ago: executing program 4 (id=7399):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280840}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f517b6993957e980c5c765efca"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r3, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10, 0x48}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000, 0x67}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x6fc6}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x400}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x93}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x2}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1000}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}]}]}, 0x74}}, 0x8855)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x24000815)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x16}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4)
sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r6, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
ioctl$XFS_IOC_BULKSTAT(r4, 0x8040587f, &(0x7f0000000a40)={{0x1, 0x5, 0x6, 0xc000000, 0x2}, &(0x7f0000000680)=[{}, {}, {}, {}, {}]})
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r4)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xb8, r7, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd13}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x775}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x880}, 0xc084)
pipe(&(0x7f0000000c80)={<r8=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x88, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x14}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1c3}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x5, 0x0]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x100}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4048050}, 0x40004)
ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f00000011c0)={&(0x7f0000000e40)=0x1, 0x34, &(0x7f0000000e80)=[{}, {}, {}, {}], &(0x7f0000001180)})
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x5c, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x1)
sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000001600)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000015c0)={&(0x7f0000001380)={0x214, 0x1, 0x2, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_NAT={0xa8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8e}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_MASTER={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x214}, 0x1, 0x0, 0x0, 0x2000c804}, 0x0)
r9 = syz_genetlink_get_family_id$fou(&(0x7f0000001680), r4)
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, r9, 0x200, 0x33a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4080800)
ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000001880)={<r10=>r8, &(0x7f0000001780)='\xff\xff', 0x200000, &(0x7f00000017c0)={@align=0x3, {0xfff9, 0x732d, 0x5, 0x9}}, 0x8, &(0x7f0000001800), &(0x7f0000001840)=0xc0000})
sendmsg$TIPC_NL_NODE_GET(r10, &(0x7f0000001ec0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001900)={0x580, r7, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff801}]}]}, @TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffcc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x305d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0a90}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x17f040}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3b3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d9e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x92e}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8fa6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_NODE={0x1c4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x71, 0x3, "73381638f3cbb4dbd26e4cf4eec123d428a71eeb14ac0d09a370392a462a44a67a34a710c848f473fc4c2f8a854030222bd799ff915a41b5bf503a95416e7e3bf243d873496ee5e977bc49b578391f52865f5bb0e8312ed30ae1da457b3bf7dd8dd2d9943f063e3063628dbe96"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "f934135ab5696de1d85c83a1a16405386fc2ecf10d8e3149d8ba"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb3, 0x3, "903243f6a19cc97eae456484f4e38dbbe6bf969bf40acb76ba442cd77d919806f908c110f66043940afa414911e96fa155987c68c02306dc9c9edf05cb4d189337c98d0feb06b2f3ad02ad54a7a08292d7d47678c2e43ece3e5d228e353223df84e6b8eb7a669321187a4607cdf44ff3060771acbdfd6b997caff74759d1bb3bcb0dbec24e3495bea7b26c0627204efca06f0702d8b4c217ef684dde44707afe2a51597f3c3be294e2b7bb4855f5db"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "142253c0af2a828cf839955531319e105deca87f20ee7ca3d4"}}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x580}, 0x1, 0x0, 0x0, 0x81}, 0x10000000)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f00000021c0)={&(0x7f0000001f00), 0xc, &(0x7f0000002180)={&(0x7f0000001f40)={0x22c, 0x20, 0x200, 0x70bd27, 0x25dfdbfd, {0x6}, [@generic="d5a1d73ba417ec259a2323b49db1a2d8d7d366c3a669b0d1bea619dadb66334e05888070d9675f10a49dfa0256a175b443323d9f891e78594a631a8a4ab0602f66cc70125587caf98bf1ad6766192e5be6c2c09ed6e4d8d0ea16f8fadc2aeb", @generic="f08120ff52dafd0d7a68dfd14d23f312ddb439399b2cf4df64ae74953f1b745d83aa3fdd1a8fc116bc7248825fd71ac69974fbc7e95abf73ad63c34f463ceb93088e610917cce64f9a17e026aba22da0cc095fcc3504b4abf607", @generic="4def5d891e5ff3a746c293718378f33803c47fa46bfbbf4997e114dad644d5ea6e19c2162ea33c7163cf168b71413544413ac61d4549364a2e1d0a81111cf2537397d31ff5a6fa2bd166930d6c85caa8f0936a607fed101e1446e91fc423a5b37b8d9aea562cf448f44139a4442c34e6708ae81c622894b0b506802ad60414368ddf46465f", @nested={0xc3, 0x55, 0x0, 0x1, [@typed={0x14, 0x14d, 0x0, 0x0, @ipv6=@private1}, @generic="51c65f05ec76702328f6f1e962f5b1abfc8d1aadf8aa9cc317dd23c20c40fd9feacd42e3e0d0f22ab24137cf7c5cdb3963933ccf627305c00bfa05cddbd9b628bb22c0dd1a9111ebc300d22f84b86683e249f6fba21628b0f0af8f2dea57e3171f5039118d1abbe86a85ede1522738e453a4a8b0edae71351e8a3408cf619b30895e1893808cb6b200eddef46df39228f7edeef00cec01a078392ba7313d018583cf3b922ea9be", @typed={0x4, 0xbf}]}, @typed={0x14, 0x163, 0x0, 0x0, @ipv6=@mcast2}]}, 0x22c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4040881)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r8, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x38, r6, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x44}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xfffffff9}, @NL80211_ATTR_PEER_MEASUREMENTS={0x8, 0x111, 0x0, 0x1, {0x4}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048845}, 0x4000)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xc}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80080}, 0x40040)
pipe(&(0x7f0000002440))
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000025c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x70, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xc0}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000004)

3m31.605828347s ago: executing program 4 (id=7401):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="660a00000200000061114d0000000000850000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}, {&(0x7f00000000c0)="f931b4500bdf68433f9c840b7028872a617cfb11cb9eca6e226184e7586e9bad82ca75e7792667673f6c0774dc726838abd649fc139d43dbea", 0x39}, {&(0x7f0000000200)="17a32bfcc7cf7d8fa23c2c1e5995c405b15936b84b3467febc16f81f427de63254ab208444e3edb3afdc12f520d488a10b6c4d1a0cb4a915f5996bcf938796701f7155b834a3bece1a246489657f3e9e41cb63f044471b7f5f96d7f93f0e9940037b448f46f9f81354d20a019b0559cf661df2231f8c4ad10e22ffc1665e1049a9de084c2eecc680f6d06c665ec2e85c9bd1d83ab5c12e0912b3e6fe1cf152c01800ca327115dafa3deba71989ac53f6b986284e", 0xb4}, {&(0x7f00000003c0)="3cda047f1b23839982b3967ad708224eb53694a05a", 0x15}], 0x4)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010093520041000000000000000004"], 0x14}}, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)
ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0xff, @random="a042a4df85c2", 'bridge0\x00'}})

3m16.538005998s ago: executing program 32 (id=7401):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="660a00000200000061114d0000000000850000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}, {&(0x7f00000000c0)="f931b4500bdf68433f9c840b7028872a617cfb11cb9eca6e226184e7586e9bad82ca75e7792667673f6c0774dc726838abd649fc139d43dbea", 0x39}, {&(0x7f0000000200)="17a32bfcc7cf7d8fa23c2c1e5995c405b15936b84b3467febc16f81f427de63254ab208444e3edb3afdc12f520d488a10b6c4d1a0cb4a915f5996bcf938796701f7155b834a3bece1a246489657f3e9e41cb63f044471b7f5f96d7f93f0e9940037b448f46f9f81354d20a019b0559cf661df2231f8c4ad10e22ffc1665e1049a9de084c2eecc680f6d06c665ec2e85c9bd1d83ab5c12e0912b3e6fe1cf152c01800ca327115dafa3deba71989ac53f6b986284e", 0xb4}, {&(0x7f00000003c0)="3cda047f1b23839982b3967ad708224eb53694a05a", 0x15}], 0x4)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010093520041000000000000000004"], 0x14}}, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)
ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0xff, @random="a042a4df85c2", 'bridge0\x00'}})

2m40.180554703s ago: executing program 0 (id=8306):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280400000000000000742e988b4d22", @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf25310000000c009900020000004a00000008000300", @ANYRES32=r5, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x8482)
r6 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
connect$unix(r6, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

2m39.280394931s ago: executing program 0 (id=8319):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYBLOB="15"], 0x40}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="351e6b4014e4f743b1114c0000000000180000000000000000001500000000009500000000000000"], &(0x7f0000000440)='GPL\x00'}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x1) (async)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYBLOB="15"], 0x40}, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="351e6b4014e4f743b1114c0000000000180000000000000000001500000000009500000000000000"], &(0x7f0000000440)='GPL\x00'}, 0x90) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)

2m39.25025009s ago: executing program 0 (id=8321):
r0 = socket(0x10, 0x803, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040))
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="000800010000000000"], 0x18}}, 0x0)
r3 = socket$inet(0x2, 0x3, 0x80000000)
sendmmsg$inet(r3, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880)

2m39.219162286s ago: executing program 0 (id=8322):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @multicast}, 0x0, {0x2, 0x4e23, @private=0xa010100}, 'xfrm0\x00'}) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x2, 0x5, 0x4f0, 0xf0, 0x208, 0xffffffff, 0x350, 0x350, 0x420, 0x420, 0xffffffff, 0x420, 0x420, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@empty, @icmp_id=0x65, @icmp_id=0x69}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "1bd8"}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'dummy0\x00', 'pim6reg1\x00', {0xff}, {}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@mh={{0x28}, {'8}'}}, @common=@frag={{0x30}, {[0x130, 0x8], 0x8, 0x4, 0x2}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0xfff2}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, <r4=>0xffffffffffffffff}, 0x4)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r4, 0x0}, 0x20) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="b5c176104c34f1e4ba00010000000c00018008000400ee"], 0x20}}, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
pipe(&(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r8)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r9, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
splice(r7, 0x0, r8, 0x0, 0x8201, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000002b60000000000000000c39400000001000000"], &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={<r10=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r10, 0x0, 0x3, 0xd, 0xffffffff, 0x7}, 0x14)

2m39.132564607s ago: executing program 0 (id=8323):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089}, 0x90)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
pipe(&(0x7f0000000000))
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async)
sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async)
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @alu={0x7, 0x1, 0x0, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async)
socket(0x1, 0x803, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)

2m39.132315359s ago: executing program 0 (id=8324):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffffb, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)

2m24.096323833s ago: executing program 33 (id=8324):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffffb, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)

3.183021499s ago: executing program 5 (id=10170):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMRRU(r5, 0x4010744d, &(0x7f0000000080)=0x1fffff)
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbf7, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x2, 0x8}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffe, 0x8000, 0xd6, 0x34562bbe, 0x2fd, 0x5, 0x2d49, 0x6, 0x1000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x88d1}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r12, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="24e42a29", @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r14, @ANYBLOB="0800050008000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc080)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x44, r8, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8804}, 0x40)

2.325075458s ago: executing program 5 (id=10187):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000a4108f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001500010000200000000000000a"], 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x7ffffffe}, 0x48)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000380ff0000000400030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x44)
sendto$packet(r3, &(0x7f0000000280)="a2a24973810fe96ad9aa92ba2172a7f39895383d464bc5077c9bdd6259ed330a16e368fd60cdbfb5bb66210f4825aba15b02baa8310b455e4b1765dca116522f0306848dea038d322399b2ebdb2e9167fed450c66e56e35cea84b1c88a2516850efe0a7daf5e88351fb64c38ac1d9276d4c9393b4c8d38b6efd6fac6c3a033988008ff0a28026ebcc11f53cdb7c3021ba225abc6f74f63376320b62b0dd98f4e8b60f7372dc8cec9266697fe916661e725022eaa3fe4", 0xb6, 0x4041, &(0x7f0000000340)={0x11, 0x1b, r6, 0x1, 0x2c, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14)

2.175507205s ago: executing program 5 (id=10191):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async, rerun: 64)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x11c22}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) (async)
close(r1) (async, rerun: 32)
socket(0x10, 0x3, 0x0) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) (async, rerun: 32)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) (async, rerun: 32)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) (async)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000011125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd0, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xe}, {0x6, 0x16, 0x5}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x5}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24040054}, 0x24000040) (async, rerun: 64)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0}) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710445000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x8482)

1.979964662s ago: executing program 6 (id=10196):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00'})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
close(r1)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000190020002cbd7000fcdbc2251d0107000c000b000300006002000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)

1.820648046s ago: executing program 6 (id=10198):
syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="31e02b0eaf4eaaaaaa86dd6000000000083a0000000000000000000000000000000000ff02000002000000000000000000000180009078000000060afd73bf6799a1afe0d50eb3994f85883408a253a71000000000000000f8dfcf9dd77a5200b8c6e7394a66", @ANYRES8=0x0], 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002440)=@newtfilter={0x24, 0x2c, 0xe37, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb}, {0x1, 0x2}, {0xd, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
connect$pppl2tp(r0, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @multicast1}, 0x3, 0x2, 0x3}}, 0x2e)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x20, 0x0, 0x0, 0x800, 0x1}, 0x48)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4)
sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7040fddbdf250300305206000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan3\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x6c, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7fff}, @IEEE802154_ATTR_DEV_INDEX={0x3, 0x2, r6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2}, 0x4004802)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r2)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'macvlan1\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f00000001c0)="330520000a00160006007ef52f55", 0xe, 0x801, &(0x7f0000000000)={0x11, 0x8, r9, 0x1, 0x5f, 0x6, @local}, 0x14)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x0, 0x2e, 0x3e]}}, 0x0, 0x31}, 0x28)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x8c, r7, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:iptables_unit_file_t:s0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8080}, 0x40001)

1.819857041s ago: executing program 3 (id=10200):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
ioctl$TUNSETFILTEREBPF(r0, 0x8008b705, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80)

1.775734673s ago: executing program 3 (id=10201):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x40)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
listen(r2, 0x0)
sendmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r7, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc, 0x1d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x80}}, 0x801)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbf7, 0x10}, 0x14}}, 0x1000)
sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r4, 0x1}, 0x14}}, 0x0)

1.604668898s ago: executing program 1 (id=10203):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000180)=""/217, 0xd9, <r0=>0x0, &(0x7f0000000280)=""/90, 0x5a}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x48}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0xffffffffffffffa6)

1.547349548s ago: executing program 2 (id=10204):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x1, 0x0, 0xfffffffe, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0035b1", @ANYRES16=r2, @ANYBLOB="000226bd7000fddbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000"], 0x5c}}, 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_RTT={0x8, 0x7, 0x1000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000050900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
close(r8)
recvmsg(r9, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x50}}, 0x0)

1.457038215s ago: executing program 1 (id=10205):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x2c, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x34e6}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041800}, 0x4008000)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7"], 0x4c}}, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000700)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000280)=0xffffffffffffff18) (async)
r1 = socket$kcm(0x10, 0x2, 0x10) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c000180060006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x10000350, &(0x7f0000000600)=""/178, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

808.677084ms ago: executing program 3 (id=10206):
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4004040) (async)
r1 = socket$inet6(0xa, 0x800, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x800, 0x0, 0x2, 0xf, 0x400, 0x1ff}, 0x20)

803.764815ms ago: executing program 1 (id=10207):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040)

803.39907ms ago: executing program 6 (id=10208):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x141, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r1, &(0x7f0000000080)='\\{).\x00', 0x10d080, &(0x7f00000000c0)={@align=0x100000000, {0x7, 0x3ff, 0x8, 0x1}}, 0x101, &(0x7f0000000100), &(0x7f0000000140)=0xaa})

787.760513ms ago: executing program 5 (id=10209):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r1, 0x3d, 0x0}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000340)={'veth0_to_bond\x00', @multicast})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

655.659527ms ago: executing program 2 (id=10210):
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x300, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) (async)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x800)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000001c0), 0x4) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) (async)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x23c, r2, 0x8, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x78}, {0x6, 0x16, 0x9a7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xf}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x401}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0xfa8}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x6}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0xc}, {0x8, 0xb, 0x80000000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc00}, {0x6, 0x16, 0x4}, {0x5}, {0x6}, {0x8, 0xb, 0x7fffffff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xe5d}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x100}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1c000004}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x44}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4)
r4 = accept(r0, 0x0, &(0x7f0000000700))
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r3, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x4b}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x1d, 0x24, [{0xb, 0x1}, {0x30, 0x1}, {0x18}, {0x3, 0x1}, {0x36}, {0xb, 0x1}, {0x2}, {0x6}, {0x36, 0x1}, {0x24, 0x1}, {0x12, 0x1}, {0x16, 0x1}, {0x30, 0x1}, {0x48, 0x1}, {0x16}, {0xb}, {0x4, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x3}, {0x30, 0x1}, {0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x800) (async)
r5 = socket(0x27, 0x3, 0x2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000880)={0x10000000}) (async)
recvmsg$kcm(r4, &(0x7f0000001d40)={&(0x7f00000008c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000940)=""/22, 0x16}, {&(0x7f0000000980)=""/117, 0x75}, {&(0x7f0000000a00)=""/111, 0x6f}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/4, 0x4}, {&(0x7f0000001b80)=""/64, 0x40}, {&(0x7f0000001bc0)=""/91, 0x5b}], 0x8, &(0x7f0000001cc0)=""/71, 0x47}, 0x10020)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000001e80)={<r6=>r5, &(0x7f0000001d80)='-\x99)!}-\x00', 0x101040, &(0x7f0000001dc0)={@align=0x3, {0x76c9, 0x3, 0x0, 0x80000001}}, 0x7, &(0x7f0000001e00)={@_ha_fsid}, &(0x7f0000001e40)=0x81})
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000001ec0)={'rose0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), r6)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001f80)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000002080)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x64, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvfrom$inet6(r9, &(0x7f00000020c0)=""/93, 0x5d, 0x10000, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x40, 0x2, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_LABELS_MASK={0x8, 0x17, [0x6]}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_LABELS_MASK={0x18, 0x17, [0x0, 0x3, 0x5, 0x7, 0x0]}]}, 0x40}, 0x1, 0x0, 0x0, 0x890}, 0x3ef54b80cf1eb0e7) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x7c, 0x0, 0x5, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2555eb4f303d8e28a7bf3224618eb16d538bd03337a68432"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "310065c5416e4ba7c1a1a0ee7b59a9173e787a3c6f425bbe"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) (async)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000002880)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002840)={&(0x7f00000023c0)={0x448, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x3a4, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6b, 0x0, "f3e10d6ba62c9c5303a27237bedaf423a3df8ad3684fff38f2f0cb54792f2d0c57766f1357a3011d064de0b5db8e628c0346d30c354b2119b4e77773267ca1cabe6ab5e55a0f466054370449ef5fa11735e7817c15e1a34c0dcae264937c5af1855ecc647109bf"}, @NL80211_BAND_5GHZ={0x58, 0x1, "29d915af65000090b9e1cb4bc9d1685b2cd1ddcea59e79e4f9e33205308aa76695f00d4696be7d0797afedfda3e0b3674f07e4a64d226d7c86d00e853b0114b7630f2c85df9ba0c458e41f990a735f0a11e11293"}, @NL80211_BAND_2GHZ={0x8b, 0x0, "e0242d54ec71aad36004024dec8e5614f9d8c48939e3c74404d1697db5c689a14102a40d63a209a41bfb9a0696a15d46d2fd6aff5bc716248bca17237061765b4ec627660fe4097020248f6b12f2c1c8e144feec7add8d1861ae377253545318bdde6e72f22b9a49fe226de6e3f064adc1c0dd813c320d78af7c8d8d6f1a89708896aab547440c"}, @NL80211_BAND_2GHZ={0xc1, 0x0, "07903997283e8e45cf718f1bf1b4b09a75b6e056775452a3c81833f0af1b081b0b33ac8cf7f18350ec25c024741bb326557b091209d9f179288d51326b8012f204b52c1bd889637ef5e7c53e539ec7bfe3ccd81d38a565815455cb618dbe8b9ae8b9f5136943f3d32b9501c56187a03ed05cf16b6520abff548f2d124983b6ddf8de7ff03932027944d44db2eba2684601bc2eaffa52614856d0a13d58a05ff2535cbbba9ccb0cdfb7ace087662fe33d9422c640e88c32f846e7be48cd"}, @NL80211_BAND_2GHZ={0x100, 0x0, "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"}, @NL80211_BAND_5GHZ={0x4f, 0x1, "5ceb3c0927f95238d8489cd30f782169a32aa78931eb9c0be0d2a326deabff08a9c4909bd7ac756b67bebb337f1cec0a572e7be95eb720549bd63d4f43b24426e5fd1c621bdfa28c1ddb1f"}, @NL80211_BAND_2GHZ={0x3b, 0x0, "571e5cd95b9859a99a9e15b284273b251553da3926436b6dcfdc6b0331cd41b835d4661cf447f84d031fc36cce128f5b13da6c57fe2e51"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0x40}, {0x8, 0x0, 0xc46}, {0x8, 0x0, 0x2ed3}, {0x8}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x2}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xce}]}, 0x448}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$netlink(0x10, 0x3, 0x5fea35737b1675ae) (async)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x14, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0xc0c0) (async)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000002a00)=0x4)

607.367245ms ago: executing program 6 (id=10211):
r0 = socket(0x2d, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x2c, r3, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000001340)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000800)="62053c005902002f1eafbcf706e12b30087f5c112d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82", 0x37}, {&(0x7f0000000380)="163a3976f4b1132ee0f924a458721fa0fd3ed3ab3e5b81cc0f205a0598047f", 0x1f}], 0x2}, 0x20004970)

497.831185ms ago: executing program 2 (id=10212):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x5, 0x2, 0x1}]}, 0x38}}, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0)
sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x24400, 0x0)
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]})
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000100fe00"/20, @ANYRESOCT=r4, @ANYBLOB="08000100e000000208000200ac141441"], 0x28}}, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r6, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xa8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000004)
r7 = socket(0x2d, 0x2, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3022}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x12ff392b}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x141}, 0x4000)
recvfrom$unix(r7, &(0x7f0000000300)=""/176, 0xb0, 0x40002162, 0x0, 0x0)
close(r7)
close(r7)

446.05333ms ago: executing program 3 (id=10213):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r1) (async)
recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/137, 0x89}, {&(0x7f0000000600)=""/192, 0xc0}, {&(0x7f0000000400)=""/161, 0xa1}, {&(0x7f0000000840)=""/222, 0xde}, {&(0x7f0000002f40)=""/4023, 0xfb7}, {&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000340)=""/147, 0x93}], 0x7}}], 0x1, 0x400000a0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)

368.776112ms ago: executing program 6 (id=10214):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x670, 0x5, 0x378, 0x168, 0x210, 0xffffffff, 0x210, 0x168, 0x2e0, 0x2e0, 0xffffffff, 0x2e0, 0x2e0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'geneve1\x00', {}, {0xff}, 0x16}, 0x0, 0x70, 0xb8, 0x48}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x6, @ipv4=@local, @ipv4=@remote, @gre_key=0xb, @port=0x4e23}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x7, "db64985cd5f8f89e2d39bd1e973011c78ee53c45d0234524d46e18d7c613"}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'syz_tun\x00', 'batadv_slave_1\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x11, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x800}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8)
getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0x9}, {0xe, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711003000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r7, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80011}, 0x480c0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0xf8, 0x28}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)

368.283237ms ago: executing program 1 (id=10215):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r0, 0x0, 0xffffffffffffff20, 0x200c0045, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x0, 0x2, 0x9}]}}}}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x0, @remote, @local, {[@hopopts]}}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@var={0x3, 0x0, 0x0, 0xe, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x45, 0x0, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0), 0x4)

346.565745ms ago: executing program 5 (id=10216):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="61120300"/18], &(0x7f0000000200)='GPL\x00'}, 0x90)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x200000000000011, 0x2, 0xd)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffde2}}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newspdinfo={0x14, 0x24, 0x400, 0x70bd29, 0x9ed4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[], 0x0)
sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x4, 0x6, 0xd, 0xd, 0xfffa, 0x8a36, 0x10, {<r7=>0x0, @in6={{0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf1b0}}, 0xfffffffa, 0x401, 0x7, 0x5, 0x1}}, &(0x7f0000000300)=0xb0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r7, 0x4}, &(0x7f0000000380)=0x8)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4083}, 0x2000001)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000005a40), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005ac0)={&(0x7f0000005a80)={0x24, r9, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x5}}}, 0x24}}, 0xc0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_OCB(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r10, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400))
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r11, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRESDEC=0x0], 0x4c}}, 0x0)
ioctl$PPPIOCSMRU1(r11, 0x40047452, &(0x7f00000003c0)=0x9)

306.799252ms ago: executing program 2 (id=10217):
socket$nl_generic(0x11, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x2, 0x2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)

204.897685ms ago: executing program 3 (id=10218):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002c00010122bd7005fcffffff0a"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) (async, rerun: 32)
r1 = socket$kcm(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1400000016000b63d2b947468b041c031193e473", 0x14}], 0x1}, 0x0) (async, rerun: 64)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) (async, rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x28, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b04000000000000000a0200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000160500030000000000324df689babc11b62828b846efb220000180070001006374000014000280080002400000000308000440000000000000010073797a30000000000900020073797a3200000000140000001100"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x20000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010727bd7000fbdbdf25190000002000018008000300040000001400020067726574617030"], 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x10, 0x1f, &(0x7f0000000080)=ANY=[@ANYRES64=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)

197.067283ms ago: executing program 1 (id=10219):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x27, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

157.87197ms ago: executing program 2 (id=10220):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{@fixed}, {}, {@fixed}]})
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x48818}, 0x4000000)
sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)

97.03535ms ago: executing program 6 (id=10221):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0)

66.679378ms ago: executing program 1 (id=10222):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYRES64=r1, @ANYRESDEC=r4, @ANYBLOB="ea9789bf1ecb2557924d4b00f214c3c374bf00c068fb9354739e860fec6f6393b38f71143c397ba5c8f77d17e670acfc9706ba5541c39d51802b2cc28d8d9e952e073523dbbcbe94a1a1a84109c32c4402e3a296015d9419558e8dae10d48b9b703ca23318e0182a335b9dd2c7d9d6e842baea1503d9ad233313c0a7a8af5d3170fd1df34461b84a0cca3c86c95b2c0e89fd3735839e0856bd3245db25041402e9bbbc0937e32d43399967cb983c88cfc4b05a538af047fc8529146bb95000"/200, @ANYRES16=r2, @ANYRES8=r2], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="000000007fd88c95b702000000000000000800008600f460958f9484c23b1dd6e8400f11ab8f0a091b0f4a4e93ca753e06ed6e3607f999f6cfeea9d0d0a4be3fdcdb9764176bae7d71f9f1c161", @ANYRES32=r7, @ANYBLOB="000000000101000090b82401ffffffff8d65ffff10000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7b18}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000008000000000000000200000018110000", @ANYRES32, @ANYBLOB="00dfffffff000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b700000000000000950000000000000055994a75b341dac6f366f891abfa4587410b21e2cea0446e5894bc79239a287347a86a3bebf930"], &(0x7f0000000400)='syzkaller\x00', 0xfffffffe, 0xdb, &(0x7f0000000500)=""/219, 0x41000, 0x14, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x5, 0x1ff, 0x4}, 0x10, 0x0, r10, 0x3, 0x0, &(0x7f00000006c0)=[{0x4, 0x5, 0xc, 0xa}, {0x3, 0x1, 0x4, 0x2}, {0x1, 0x5, 0x8, 0x2}], 0x10, 0x3}, 0x94)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="08020000000000000000000000000000850000004f000000850000007d0000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xeb, 0x63, 0x1000, 0x7, 0x0, 0x3, 0x7ff, 0xa}}, {0x18, 0x2, [0x5, 0x1, 0x24, 0x5e2, 0x9, 0x800, 0x5, 0x7, 0x2, 0x3]}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x141}, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f00000003c0)={'syzkaller0\x00', @random="2b0100004ec6"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

47.875057ms ago: executing program 2 (id=10223):
r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r3, 0x4, 0x100, 0x3}, 0x10) (async)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r3, 0x4}, 0x8)

543.716µs ago: executing program 5 (id=10224):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f4620134000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fcffffff", 0x4)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000240)={<r3=>0x0, 0x10}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r3, 0x81, 0x8}, &(0x7f0000000300)=0x8)

0s ago: executing program 3 (id=10225):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x258, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x22c, 0x3, 0x0, 0x1, [{0x228, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0xf4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf0, 0x1, "419b735de063750b5da06cc96ee9528eaa6cce48eee7a87d28e3514936892b7040c200c6e784d7d319a180e5b4306acd401ec1e6336ea806f79c10376c4ce3fae9ffca7804a81c053822308830a81ceae7eb1900002bf44b43dfe40e7b150dbd3f492c47593bc3aa3826f881465f54da8c06ce631018dc85c29297eae74e3bc6a323d3efbb9a94f146117c0f0e8b0793cac0b1eca30531d071cb3678f9ec6f4973ab71396efca83822d45b01130e47ade5dd66e322238cd3bf2f20b2f78a567faaca57b0bf946b14ee40957bd63c269196e31443ce40d38287638bf712f897fc37441062339ea21ca3b414e8"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x636}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4000000000000000}, @NFTA_SET_ELEM_DATA={0xf8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd2, 0x1, "687ed824a14cf6529d8c3d4f5afaa773e88a4464b22a96278b2d4b61a6743e97cf8bac39cfa94484459312f434701bb296c9c15aeb74ae5d85b7b6b67f34eab26ac9b9f5c1e22c3c934751714d4b230247fc1e43967c809c9f438d9c55685b934a3b90753e7d536c63c949b09e9905a4fceca4c59272a0c776b116665534e6beae845763a6aca13cf4a33afee23671ab5c896804a60ed62aba4ae65da493e8736e6b6937b7db89a7ca08597b5cb8a4a7b1ffb14ef04a908c6861b2be8e505d5f9fb24b5c9c948cdbaee8225b1d7e"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3e}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x350}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

kernel console output (not intermixed with test programs):

nvalid length.
[  606.513547][ T4221] tipc: Resetting bearer <eth:syzkaller0>
[  606.565224][ T4221] tipc: Disabling bearer <eth:syzkaller0>
[  606.574903][ T4244] netlink: 'syz.1.8528': attribute type 1 has an invalid length.
[  606.583783][ T4251] __nla_validate_parse: 46 callbacks suppressed
[  606.583801][ T4251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8530'.
[  606.602770][ T4251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8530'.
[  606.712852][ T4264] syzkaller0: entered promiscuous mode
[  606.718520][ T4264] syzkaller0: entered allmulticast mode
[  606.765066][ T4269] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8534'.
[  606.904936][ T4279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8537'.
[  606.905651][ T4284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8538'.
[  607.043175][ T4292] netlink: 'syz.1.8539': attribute type 3 has an invalid length.
[  607.057719][ T4292] netlink: 666 bytes leftover after parsing attributes in process `syz.1.8539'.
[  607.166319][ T4298] netlink: 'syz.1.8543': attribute type 10 has an invalid length.
[  607.284538][ T4309] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8547'.
[  607.656758][ T4349] netlink: 'syz.5.8559': attribute type 1 has an invalid length.
[  607.721590][ T4349] 8021q: adding VLAN 0 to HW filter on device bond2
[  607.844422][ T4368] netlink: 'syz.3.8564': attribute type 1 has an invalid length.
[  607.887937][ T4368] bond9: entered promiscuous mode
[  607.893503][ T4368] 8021q: adding VLAN 0 to HW filter on device bond9
[  607.909386][ T4368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8564'.
[  607.919857][ T4368] bond9: entered allmulticast mode
[  607.938425][ T4368] bond9: (slave bridge6): making interface the new active one
[  607.946669][ T4368] bridge6: entered promiscuous mode
[  607.979790][ T4368] bridge6: entered allmulticast mode
[  607.991999][ T4368] bond9: (slave bridge6): Enslaving as an active interface with an up link
[  608.024937][ T4378] 
: renamed from bond0
[  608.032576][ T4374] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8566'.
[  608.072569][ T4380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8569'.
[  608.145518][ T4385] syzkaller1: entered promiscuous mode
[  608.163919][ T4385] syzkaller1: entered allmulticast mode
[  608.277762][ T4391] : entered promiscuous mode
[  608.394148][ T4397] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  608.431105][ T4391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  608.724626][   T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  608.734360][   T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  608.742035][   T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  608.759503][   T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  608.767875][   T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  608.904037][ T4451] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  609.208309][ T4441] lo speed is unknown, defaulting to 1000
[  609.568800][ T4516] net_ratelimit: 27 callbacks suppressed
[  609.568822][ T4516] openvswitch: netlink: Duplicate or invalid key (type 0).
[  609.594054][ T4441] xfrm0 speed is unknown, defaulting to 1000
[  609.599309][ T4516] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  609.833524][ T4539] validate_nla: 6 callbacks suppressed
[  609.833543][ T4539] netlink: 'syz.3.8613': attribute type 1 has an invalid length.
[  609.833592][ T4535] veth5: entered allmulticast mode
[  609.903945][ T4545] bridge7: entered promiscuous mode
[  609.909412][ T4545] bridge7: entered allmulticast mode
[  610.204871][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.216646][ T4441] bridge0: port 1(bridge_slave_0) entered disabled state
[  610.230356][ T4441] bridge_slave_0: entered allmulticast mode
[  610.237672][ T4441] bridge_slave_0: entered promiscuous mode
[  610.252641][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.270912][ T4441] bridge0: port 2(bridge_slave_1) entered disabled state
[  610.284082][ T4441] bridge_slave_1: entered allmulticast mode
[  610.292602][ T4441] bridge_slave_1: entered promiscuous mode
[  610.322687][ T4441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  610.337020][ T4441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  610.409706][ T4441] team0: Port device team_slave_0 added
[  610.429138][ T4441] team0: Port device team_slave_1 added
[  610.495057][ T4441] batman_adv: batadv0: Adding interface: batadv_slave_0
[  610.506557][ T4441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  610.543612][ T4441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  610.563352][ T4441] batman_adv: batadv0: Adding interface: batadv_slave_1
[  610.576161][ T4441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  610.617833][ T4441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  610.694877][ T4441] hsr_slave_0: entered promiscuous mode
[  610.702160][ T4441] hsr_slave_1: entered promiscuous mode
[  610.713133][ T4441] debugfs: 'hsr0' already exists in 'hsr'
[  610.719144][ T4441] Cannot create hsr debugfs directory
[  610.728900][ T4606] GUP no longer grows the stack in syz.1.8630 (4606): 200000003000-20000000a000 (200000001000)
[  610.756130][ T4606] CPU: 0 UID: 0 PID: 4606 Comm: syz.1.8630 Not tainted syzkaller #0 PREEMPT(full) 
[  610.756158][ T4606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  610.756169][ T4606] Call Trace:
[  610.756177][ T4606]  <TASK>
[  610.756186][ T4606]  dump_stack_lvl+0xe8/0x150
[  610.756211][ T4606]  __get_user_pages+0x238c/0x2720
[  610.756235][ T4606]  ? __gup_longterm_locked+0xc3b/0x15c0
[  610.756267][ T4606]  __gup_longterm_locked+0xd52/0x15c0
[  610.756289][ T4606]  ? gup_fast_fallback+0xbc4/0x20d0
[  610.756311][ T4606]  ? rcu_is_watching+0x15/0xb0
[  610.756332][ T4606]  ? rcu_is_watching+0x15/0xb0
[  610.756353][ T4606]  gup_fast_fallback+0x1d82/0x20d0
[  610.756388][ T4606]  ? __pfx_gup_fast_fallback+0x10/0x10
[  610.756408][ T4606]  ? lock_release+0x4b/0x3c0
[  610.756436][ T4606]  ? __fget_files+0x2a/0x420
[  610.756457][ T4606]  ? is_valid_gup_args+0x11f/0x200
[  610.756478][ T4606]  ? get_user_pages_fast+0x4d/0xb0
[  610.756499][ T4606]  __iov_iter_get_pages_alloc+0x378/0xa40
[  610.756529][ T4606]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  610.756557][ T4606]  iov_iter_get_pages2+0x5e/0xa0
[  610.756592][ T4606]  __se_sys_vmsplice+0x7b5/0x1660
[  610.756615][ T4606]  ? __futex_hash+0x416/0x750
[  610.756649][ T4606]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  610.756673][ T4606]  ? __pfx_futex_wait+0x10/0x10
[  610.756722][ T4606]  ? rcu_is_watching+0x15/0xb0
[  610.756742][ T4606]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.756762][ T4606]  do_syscall_64+0x174/0x580
[  610.756787][ T4606]  ? trace_irq_disable+0x3b/0x140
[  610.756811][ T4606]  ? clear_bhb_loop+0x40/0x90
[  610.756832][ T4606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.756850][ T4606] RIP: 0033:0x7f405559ce59
[  610.756868][ T4606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  610.756885][ T4606] RSP: 002b:00007f4056490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  610.756908][ T4606] RAX: ffffffffffffffda RBX: 00007f4055816090 RCX: 00007f405559ce59
[  610.756923][ T4606] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007
[  610.756936][ T4606] RBP: 00007f4055632e6f R08: 0000000000000000 R09: 0000000000000000
[  610.756948][ T4606] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  610.756961][ T4606] R13: 00007f4055816128 R14: 00007f4055816090 R15: 00007ffd6aecb198
[  610.756983][ T4606]  </TASK>
[  611.042463][ T4611] netlink: 'syz.5.8632': attribute type 1 has an invalid length.
[  611.053146][ T4606] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  611.054496][ T5625] Bluetooth: hci6: command tx timeout
[  611.185445][ T4441] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  611.209473][ T4441] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  611.217623][ T4441] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  611.261638][ T4441] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  611.292095][ T4441] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  611.310324][ T4441] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  611.331136][ T4625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  611.357856][ T4441] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  611.371231][ T4441] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  611.409720][ T4625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  611.453707][ T4636] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  611.453707][ T4636] Please contact the netfilter-devel mailing list or update your nftables rules.
[  611.499423][ T4625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  611.592491][ T4644] __nla_validate_parse: 15 callbacks suppressed
[  611.592510][ T4644] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.8641'.
[  611.657527][ T4441] 8021q: adding VLAN 0 to HW filter on device bond0
[  611.694873][ T4441] 8021q: adding VLAN 0 to HW filter on device team0
[  611.719928][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.727220][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  611.770406][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.777588][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state
[  611.877273][ T4663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8649'.
[  611.886664][ T4667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8649'.
[  611.928955][ T4672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8648'.
[  611.952831][ T4672] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.8648'.
[  612.036926][ T4677] openvswitch: netlink: IP tunnel dst address not specified
[  612.199576][ T4683] bond10: entered promiscuous mode
[  612.239328][ T4683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8651'.
[  612.502389][ T4718] geneve3: entered promiscuous mode
[  612.509595][ T4718] geneve3: entered allmulticast mode
[  612.526113][T16307] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  612.543700][T16307] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  612.559548][ T4725] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8660'.
[  612.589933][T16307] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  612.619792][T16307] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  612.724406][ T4441] 8021q: adding VLAN 0 to HW filter on device batadv0
[  613.141207][ T5625] Bluetooth: hci6: command tx timeout
[  613.184729][ T4441] veth0_vlan: entered promiscuous mode
[  613.209849][ T4441] veth1_vlan: entered promiscuous mode
[  613.265767][ T4777] netlink: 'syz.5.8674': attribute type 10 has an invalid length.
[  613.315923][ T4777] 8021q: adding VLAN 0 to HW filter on device batadv0
[  613.367739][ T4777] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  613.408527][ T4441] veth0_macvtap: entered promiscuous mode
[  613.430020][ T4441] veth1_macvtap: entered promiscuous mode
[  613.473452][ T4441] batman_adv: batadv0: Interface activated: batadv_slave_0
[  613.508268][ T4441] batman_adv: batadv0: Interface activated: batadv_slave_1
[  613.528749][  T137] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  613.539776][ T4793] syzkaller0: entered promiscuous mode
[  613.546137][ T4793] syzkaller0: entered allmulticast mode
[  613.554861][  T137] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  613.564973][  T137] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  613.584220][  T137] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  613.796550][ T4811] sctp: [Deprecated]: syz.3.8682 (pid 4811) Use of struct sctp_assoc_value in delayed_ack socket option.
[  613.796550][ T4811] Use struct sctp_sack_info instead
[  613.800042][ T8387] xfrm0 speed is unknown, defaulting to 1000
[  613.888758][ T4820] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  613.958517][ T4825] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) !
[  613.985679][ T4825] syzkaller0: entered promiscuous mode
[  613.991716][ T4825] syzkaller0: entered allmulticast mode
[  614.012207][ T4828] syzkaller1: entered promiscuous mode
[  614.017812][ T4828] syzkaller1: entered allmulticast mode
[  614.834636][ T4841] xt_SECMARK: invalid mode: 9
[  614.925875][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8690'.
[  615.220889][ T5625] Bluetooth: hci6: command tx timeout
[  616.465582][ T4791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  616.515386][  T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  616.550306][  T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  616.623221][  T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  616.648710][  T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  616.668995][ T4856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8695'.
[  616.702420][ T4856] netlink: 13 bytes leftover after parsing attributes in process `syz.3.8695'.
[  616.743800][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8696'.
[  616.760442][ T4856] veth5: entered promiscuous mode
[  616.802292][ T4864] netlink: 'syz.5.8696': attribute type 21 has an invalid length.
[  616.837840][ T4864] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8696'.
[  616.922366][ T4858] team0: Port device team_slave_0 removed
[  616.973806][ T4877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8695'.
[  617.011552][ T4864] netlink: 3 bytes leftover after parsing attributes in process `syz.5.8696'.
[  617.177214][   T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  617.188054][   T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  617.199278][   T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  617.211077][   T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  617.219652][   T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  617.301571][   T50] Bluetooth: hci6: command tx timeout
[  617.500341][ T4910] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8708'.
[  617.663771][ T4924] netlink: 108 bytes leftover after parsing attributes in process `syz.5.8712'.
[  617.760313][ T4928] netlink: 'syz.6.8713': attribute type 32 has an invalid length.
[  617.771780][ T4883] lo speed is unknown, defaulting to 1000
[  617.773782][ T4928] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8713'.
[  617.803177][ T4928] bond1: option coupled_control: invalid value (28)
[  617.812197][ T4928] bond1 (unregistering): Released all slaves
[  617.921334][   T50] block nbd1: Receive control failed (result -32)
[  617.934099][ T4883] xfrm0 speed is unknown, defaulting to 1000
[  618.186394][ T4960] tipc: Started in network mode
[  618.204448][ T4960] tipc: Node identity ac14142f, cluster identity 4711
[  618.227962][ T4960] tipc: New replicast peer: 0.0.0.0
[  618.236625][ T4960] tipc: Enabled bearer <udp:syz2>, priority 10
[  618.245734][ T4965] netlink: 'syz.3.8722': attribute type 1 has an invalid length.
[  618.252663][ T4967] netlink: 'syz.1.8721': attribute type 3 has an invalid length.
[  618.301430][ T4965] 8021q: adding VLAN 0 to HW filter on device bond11
[  618.324662][ T4965] bond11: (slave veth0_to_bond): making interface the new active one
[  618.334865][ T4965] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  618.350152][  T137] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x40
[  618.368412][ T4965] bond11: entered promiscuous mode
[  618.374158][ T4965] veth0_to_bond: entered promiscuous mode
[  618.380123][ T4965] bond11: entered allmulticast mode
[  618.385731][ T4965] veth0_to_bond: entered allmulticast mode
[  618.402863][ T4967] netlink: 'syz.1.8721': attribute type 3 has an invalid length.
[  618.468501][ T4883] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.482283][ T4883] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.502420][ T4883] bridge_slave_0: entered allmulticast mode
[  618.522336][ T4883] bridge_slave_0: entered promiscuous mode
[  618.526113][ T4991] netlink: 408 bytes leftover after parsing attributes in process `syz.1.8725'.
[  618.539309][ T4883] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.547692][ T4883] bridge0: port 2(bridge_slave_1) entered disabled state
[  618.555692][ T4883] bridge_slave_1: entered allmulticast mode
[  618.566840][ T4883] bridge_slave_1: entered promiscuous mode
[  618.621584][ T4883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  618.646605][ T4883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  618.705709][ T4883] team0: Port device team_slave_0 added
[  618.736464][ T4883] team0: Port device team_slave_1 added
[  618.756900][ T5005] xt_addrtype: ipv6 does not support BROADCAST matching
[  618.807998][ T4883] batman_adv: batadv0: Adding interface: batadv_slave_0
[  618.831448][ T4883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  618.886042][ T4883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  618.911770][ T4883] batman_adv: batadv0: Adding interface: batadv_slave_1
[  618.920024][ T4883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  618.948038][ T4883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  619.046644][ T5023] netlink: 'syz.3.8736': attribute type 8 has an invalid length.
[  619.078843][ T4883] hsr_slave_0: entered promiscuous mode
[  619.094381][ T4883] hsr_slave_1: entered promiscuous mode
[  619.114346][ T4883] debugfs: 'hsr0' already exists in 'hsr'
[  619.118799][ T5029] netlink: 'syz.1.8739': attribute type 1 has an invalid length.
[  619.129225][ T4883] Cannot create hsr debugfs directory
[  619.301047][   T50] Bluetooth: hci7: command tx timeout
[  619.364771][ T8387] tipc: Node number set to 2886997039
[  619.516126][ T5050] ip6tnl0: left promiscuous mode
[  619.547775][ T5050] hsr0: left promiscuous mode
[  619.561449][ T5050] vlan0: left promiscuous mode
[  619.573136][ T5050] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  619.612182][ T5050] vlan2: left allmulticast mode
[  619.629657][ T5050] bond0: left allmulticast mode
[  619.651072][ T5050] bond_slave_0: left allmulticast mode
[  619.656715][ T5050] bond_slave_1: left allmulticast mode
[  619.671590][ T5050] bond2: left allmulticast mode
[  619.974481][ T5050] bond6: left promiscuous mode
[  620.006710][ T5050] veth7: left promiscuous mode
[  620.045848][ T5050] bond8: left promiscuous mode
[  620.058066][ T5050] bond8: left allmulticast mode
[  620.120285][ T5071] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  620.133078][ T5059] netlink: 'syz.3.8747': attribute type 3 has an invalid length.
[  620.143184][ T5062] netlink: 'syz.3.8747': attribute type 22 has an invalid length.
[  620.152393][  T137] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  620.205261][ T5062] netlink: 'syz.3.8747': attribute type 22 has an invalid length.
[  620.216821][  T137] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  620.232306][ T5075] IPVS: set_ctl: invalid protocol: 1 172.30.0.6:20002
[  620.234029][  T137] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  620.257717][ T5074] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  620.290953][  T137] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  620.480352][ T4883] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  620.490456][ T4883] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  620.499564][ T4883] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  620.510257][ T4883] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  620.518327][ T4883] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  620.527480][ T4883] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  620.536989][ T4883] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  620.546020][ T4883] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  620.589853][ T4883] 8021q: adding VLAN 0 to HW filter on device bond0
[  620.605548][ T4883] 8021q: adding VLAN 0 to HW filter on device team0
[  620.616950][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.624071][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  620.636670][T16320] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.643905][T16320] bridge0: port 2(bridge_slave_1) entered forwarding state
[  620.851588][ T4883] 8021q: adding VLAN 0 to HW filter on device batadv0
[  620.879631][ T4883] veth0_vlan: entered promiscuous mode
[  620.889137][ T4883] veth1_vlan: entered promiscuous mode
[  620.912308][ T4883] veth0_macvtap: entered promiscuous mode
[  620.922413][ T4883] veth1_macvtap: entered promiscuous mode
[  620.936704][ T4883] batman_adv: batadv0: Interface activated: batadv_slave_0
[  620.948895][ T4883] batman_adv: batadv0: Interface activated: batadv_slave_1
[  620.960311][  T137] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  620.969291][  T137] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  620.980127][  T137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  620.989823][  T137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  621.027749][T16320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  621.036362][T16320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  621.055064][T16320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  621.064353][T16320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  621.381549][   T50] Bluetooth: hci7: command tx timeout
[  623.461262][   T50] Bluetooth: hci7: command tx timeout
[  625.550869][   T50] Bluetooth: hci7: command tx timeout
[  629.702603][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  643.236440][ T5117] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  643.259099][ T5120] __nla_validate_parse: 12 callbacks suppressed
[  643.259119][ T5120] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8759'.
[  643.278416][ T5117] batman_adv: batadv0: Removing interface: batadv_slave_0
[  643.296718][ T5126] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8758'.
[  643.340059][ T5127] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  643.349694][ T5128] validate_nla: 2 callbacks suppressed
[  643.349711][ T5128] netlink: 'syz.5.8762': attribute type 4 has an invalid length.
[  643.369839][ T5128] netlink: 'syz.5.8762': attribute type 23 has an invalid length.
[  643.379007][ T5128] IPv6: NLM_F_CREATE should be specified when creating new route
[  643.413241][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8762'.
[  643.507440][ T5142] sctp: [Deprecated]: syz.1.8766 (pid 5142) Use of int in max_burst socket option.
[  643.507440][ T5142] Use struct sctp_assoc_value instead
[  643.604496][ T5148] syzkaller0: entered promiscuous mode
[  643.621630][ T5148] syzkaller0: entered allmulticast mode
[  643.691390][ T5161] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  643.877410][ T5172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8775'.
[  643.935694][ T5172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8775'.
[  643.975386][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8776'.
[  644.008277][ T5179] macsec1: entered promiscuous mode
[  644.023800][ T5179] bridge0: entered promiscuous mode
[  644.040823][ T5179] macsec1: entered allmulticast mode
[  644.043456][ T5182] nbd: must specify an index to disconnect
[  644.081847][ T5179] bridge0: entered allmulticast mode
[  644.122127][ T5179] bridge0: port 3(macsec1) entered blocking state
[  644.150180][ T5179] bridge0: port 3(macsec1) entered disabled state
[  644.199322][ T5179] bridge0: left allmulticast mode
[  644.227630][ T5201] xt_recent: Unsupported userspace flags (000000b1)
[  644.227664][T26106] bridge0: left promiscuous mode
[  644.252559][ T5197] pim6reg: entered allmulticast mode
[  644.323291][ T5205] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8782'.
[  644.539614][ T5222] syzkaller0: entered promiscuous mode
[  644.557519][ T5222] syzkaller0: entered allmulticast mode
[  644.571655][ T5222] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8788'.
[  644.754418][ T5238] xt_CT: No such helper "snmp_trap"
[  644.770334][ T5238] xt_CT: No such helper "snmp_trap"
[  644.795427][ T5241] block nbd3: Unsupported socket: should be TCP or UNIX.
[  644.882738][ T5250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8795'.
[  645.119597][ T5260] ip6gretap1: entered promiscuous mode
[  645.131735][ T5260] ip6gretap1: entered allmulticast mode
[  645.278172][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  645.287242][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  645.296025][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  645.307022][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  645.315831][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  645.519765][ T5279] IPv6: NLM_F_CREATE should be specified when creating new route
[  645.537979][ T5280] IPv6: NLM_F_CREATE should be specified when creating new route
[  645.658862][ T5292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8806'.
[  645.702161][T26554] bond0: (slave syz_tun): Removing an active aggregator
[  645.719276][T26554] bond0: (slave syz_tun): Releasing backup interface
[  645.728800][T26554] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  645.913711][ T5304] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb
[  645.924789][ T5262] lo speed is unknown, defaulting to 1000
[  646.007748][ T5311] netlink: 'syz.5.8813': attribute type 10 has an invalid length.
[  646.154160][ T5315] block nbd0: reconnected socket
[  646.171420][ T5315] block nbd0: reconnected socket
[  646.216038][ T5625] block nbd0: Receive control failed (result -32)
[  646.216038][   T50] block nbd0: Receive control failed (result -32)
[  646.229458][ T5320] syzkaller0: entered promiscuous mode
[  646.247675][ T5320] syzkaller0: entered allmulticast mode
[  646.273443][ T5262] xfrm0 speed is unknown, defaulting to 1000
[  646.335096][ T5335] netlink: 'syz.1.8822': attribute type 9 has an invalid length.
[  646.345627][ T5336] netlink: 'syz.1.8822': attribute type 9 has an invalid length.
[  646.437296][ T5335] lo: entered allmulticast mode
[  646.448674][ T5335] lo: left allmulticast mode
[  646.471195][ T5346] openvswitch: netlink: Flow key attr not present in new flow.
[  646.569739][ T5262] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.577705][ T5262] bridge0: port 1(bridge_slave_0) entered disabled state
[  646.585239][ T5262] bridge_slave_0: entered allmulticast mode
[  646.592636][ T5262] bridge_slave_0: entered promiscuous mode
[  646.600132][ T5262] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.607911][ T5262] bridge0: port 2(bridge_slave_1) entered disabled state
[  646.615428][ T5262] bridge_slave_1: entered allmulticast mode
[  646.623009][ T5262] bridge_slave_1: entered promiscuous mode
[  646.644466][ T5262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  646.655912][ T5262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  646.679023][ T5262] team0: Port device team_slave_0 added
[  646.686666][ T5262] team0: Port device team_slave_1 added
[  646.704731][ T5262] batman_adv: batadv0: Adding interface: batadv_slave_0
[  646.712058][ T5262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  646.738707][ T5262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  646.751150][ T5262] batman_adv: batadv0: Adding interface: batadv_slave_1
[  646.758151][ T5262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  646.784753][ T5262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  646.814772][ T5262] hsr_slave_0: entered promiscuous mode
[  646.821308][ T5262] hsr_slave_1: entered promiscuous mode
[  646.827430][ T5262] debugfs: 'hsr0' already exists in 'hsr'
[  646.833546][ T5262] Cannot create hsr debugfs directory
[  646.896642][ T5262] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  646.907369][ T5262] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.918446][ T5262] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  646.975880][ T5262] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  646.987302][ T5262] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  646.997815][ T5262] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  647.035958][ T5262] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  647.047351][ T5262] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  647.057760][ T5262] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  647.119491][ T5262] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  647.130388][ T5262] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  647.141362][ T5262] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  647.382292][   T50] Bluetooth: hci5: command tx timeout
[  649.324745][ T5334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  649.341345][ T5262] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  649.396426][ T5262] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  649.447667][ T5262] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  649.461049][   T50] Bluetooth: hci5: command tx timeout
[  649.485193][ T5262] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  649.504816][ T5262] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  649.531836][ T5262] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  649.563348][ T5379] __nla_validate_parse: 15 callbacks suppressed
[  649.563368][ T5379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8827'.
[  649.583288][ T5262] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  649.595305][ T5262] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  649.611106][ T5384] erspan0: entered promiscuous mode
[  649.642347][ T5384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8826'.
[  649.799299][ T5405] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8834'.
[  649.886692][ T5262] 8021q: adding VLAN 0 to HW filter on device bond0
[  649.964285][ T5420] bridge_slave_1: default FDB implementation only supports local addresses
[  649.992024][ T5262] 8021q: adding VLAN 0 to HW filter on device team0
[  650.009160][ T5420] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.016701][ T5420] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.034056][T16303] bridge0: port 1(bridge_slave_0) entered blocking state
[  650.041344][T16303] bridge0: port 1(bridge_slave_0) entered forwarding state
[  650.084771][ T5430] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.8836'.
[  650.123686][T16303] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.130882][T16303] bridge0: port 2(bridge_slave_1) entered forwarding state
[  650.170810][ T5442] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8839'.
[  650.232557][ T5442] netlink: zone id is out of range
[  650.254328][ T5442] netlink: zone id is out of range
[  650.265009][ T5442] netlink: zone id is out of range
[  650.265834][ T5448] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8842'.
[  650.270467][ T5442] netlink: zone id is out of range
[  650.270481][ T5442] netlink: zone id is out of range
[  650.270901][ T5442] netlink: zone id is out of range
[  650.270912][ T5442] netlink: zone id is out of range
[  650.270922][ T5442] netlink: zone id is out of range
[  650.270930][ T5442] netlink: zone id is out of range
[  650.270939][ T5442] netlink: zone id is out of range
[  650.325708][ T5439] netlink: 'syz.5.8840': attribute type 1 has an invalid length.
[  650.352514][ T5452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8844'.
[  650.363894][ T5454] netlink: 'syz.1.8844': attribute type 5 has an invalid length.
[  650.373856][ T5452] netlink: 'syz.1.8844': attribute type 5 has an invalid length.
[  650.374242][ T5439] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8840'.
[  650.421236][ T5439] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.446306][ T5439] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.453713][ T5439] bridge0: port 2(bridge_slave_1) entered forwarding state
[  650.468300][ T5451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  650.489395][ T5448] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8842'.
[  650.500196][ T5448] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8842'.
[  650.942780][ T5262] 8021q: adding VLAN 0 to HW filter on device batadv0
[  650.960990][ T5489] netlink: 'syz.2.8852': attribute type 7 has an invalid length.
[  650.990456][ T5489] netlink: 'syz.2.8852': attribute type 8 has an invalid length.
[  651.014315][ T5262] veth0_vlan: entered promiscuous mode
[  651.067609][ T5262] veth1_vlan: entered promiscuous mode
[  651.219611][ T5499] syzkaller0: entered promiscuous mode
[  651.236044][ T5499] syzkaller0: entered allmulticast mode
[  651.242968][ T5509] netlink: 'syz.6.8860': attribute type 10 has an invalid length.
[  651.246305][ T5499] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  651.263037][ T5509] team0: entered allmulticast mode
[  651.268362][ T5509] team_slave_0: entered allmulticast mode
[  651.275282][ T5509] team_slave_1: entered allmulticast mode
[  651.281518][ T5509] bridge0: port 3(team0) entered blocking state
[  651.287977][ T5509] bridge0: port 3(team0) entered disabled state
[  651.295614][ T5509] team0: entered promiscuous mode
[  651.301396][ T5509] team_slave_0: entered promiscuous mode
[  651.307337][ T5509] team_slave_1: entered promiscuous mode
[  651.314230][ T5509] bridge0: port 3(team0) entered blocking state
[  651.320777][ T5509] bridge0: port 3(team0) entered forwarding state
[  651.337733][ T5262] veth0_macvtap: entered promiscuous mode
[  651.355415][ T5262] veth1_macvtap: entered promiscuous mode
[  651.375285][ T5499] tipc: Resetting bearer <eth:syzkaller0>
[  651.397966][ T5262] batman_adv: batadv0: Interface activated: batadv_slave_0
[  651.424746][ T5262] batman_adv: batadv0: Interface activated: batadv_slave_1
[  651.436248][ T5497] tipc: Resetting bearer <eth:syzkaller0>
[  651.445210][ T5497] tipc: Disabling bearer <eth:syzkaller0>
[  651.483132][ T5513] bond1: option arp_all_targets: invalid value (18446744073709551613)
[  651.505839][ T5513] bond1 (unregistering): Released all slaves
[  651.523890][T16303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  651.542457][   T50] Bluetooth: hci5: command tx timeout
[  651.548052][T16320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  651.569168][T16320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  651.579955][ T5513] netlink: 'syz.6.8861': attribute type 19 has an invalid length.
[  651.589529][T16320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  651.677613][T16320] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  651.686608][T16320] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  651.696109][T16320] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  651.706048][T16320] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  651.898731][ T5531] 8021q: adding VLAN 0 to HW filter on device bond1
[  651.914220][T14261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  651.949372][T14261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  651.964561][ T8387] IPVS: starting estimator thread 0...
[  652.045343][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  652.053654][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  652.062010][ T5540] IPVS: using max 42 ests per chain, 100800 per kthread
[  652.100103][ T5555] Cannot find set identified by id 65534 to match
[  652.855222][ T5635] netlink: 'syz.1.8893': attribute type 1 has an invalid length.
[  652.977920][ T5644] netlink: 'syz.6.8896': attribute type 17 has an invalid length.
[  653.025600][ T5648] bond3 (unregistering): Released all slaves
[  653.263378][ T5672] netlink: 'syz.1.8903': attribute type 3 has an invalid length.
[  653.283103][ T5672] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  653.471590][ T5692] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  653.486211][ T5692] syzkaller1: entered promiscuous mode
[  653.493995][ T5692] syzkaller1: entered allmulticast mode
[  653.620935][   T50] Bluetooth: hci5: command tx timeout
[  653.771419][ T5717] syzkaller0: entered promiscuous mode
[  653.785559][ T5717] syzkaller0: entered allmulticast mode
[  653.863741][ T5719] tc action pedit offset must be on 32 bit boundaries
[  653.870634][ T5719] tc action pedit offset must be on 32 bit boundaries
[  653.877430][ T5719] tc action pedit offset must be on 32 bit boundaries
[  653.884263][ T5719] tc action pedit offset must be on 32 bit boundaries
[  653.891100][ T5719] tc action pedit offset must be on 32 bit boundaries
[  653.897889][ T5719] tc action pedit offset must be on 32 bit boundaries
[  653.904902][ T5719] tc action pedit offset must be on 32 bit boundaries
[  653.911722][ T5719] tc action pedit offset must be on 32 bit boundaries
[  653.918803][ T5719] tc action pedit offset must be on 32 bit boundaries
[  653.925639][ T5719] tc action pedit offset must be on 32 bit boundaries
[  654.238275][ T5762] bond0: entered promiscuous mode
[  654.250806][ T5762] bond_slave_0: entered promiscuous mode
[  654.278761][ T5762] bond_slave_1: entered promiscuous mode
[  654.285214][ T5762] veth0_to_bond: entered promiscuous mode
[  654.291527][ T5762] batadv0: entered promiscuous mode
[  654.745899][ T5802] __nla_validate_parse: 21 callbacks suppressed
[  654.745921][ T5802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8939'.
[  654.758243][ T5806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8938'.
[  654.799793][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8939'.
[  654.866694][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8938'.
[  654.877303][ T5812] bond1 (unregistering): Released all slaves
[  655.165121][ T5837] sctp: [Deprecated]: syz.2.8945 (pid 5837) Use of int in maxseg socket option.
[  655.165121][ T5837] Use struct sctp_assoc_value instead
[  655.299495][ T5841] geneve2: entered promiscuous mode
[  655.414261][ T5858] xt_CT: You must specify a L4 protocol and not use inversions on it
[  655.641496][ T5879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8958'.
[  655.680149][ T5879] validate_nla: 4 callbacks suppressed
[  655.680170][ T5879] netlink: 'syz.3.8958': attribute type 1 has an invalid length.
[  655.715980][ T5879] netlink: 'syz.3.8958': attribute type 2 has an invalid length.
[  655.726582][ T5879] netlink: 'syz.3.8958': attribute type 1 has an invalid length.
[  655.739220][ T5879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8958'.
[  655.929328][ T5904] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  655.959532][ T5904] bond1 (unregistering): Released all slaves
[  656.200856][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8975'.
[  656.212915][ T5938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8976'.
[  656.265782][ T5938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8976'.
[  656.287246][ T5938] nbd: nbd64 already in use
[  656.371731][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8976'.
[  656.489634][ T5959] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  656.505902][T18638] udevd[18638]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  656.532849][ T5959] xt_hashlimit: size too large, truncated to 1048576
[  657.061128][ T5625] Bluetooth: hci5: command 0x0405 tx timeout
[  657.153398][ T6010] Cannot find add_set index 0 as target
[  657.199730][ T6007] IPVS: length: 239 != 24
[  657.292857][ T6022] syzkaller1: entered promiscuous mode
[  657.312137][ T6022] syzkaller1: entered allmulticast mode
[  657.364331][ T6027] net_ratelimit: 32 callbacks suppressed
[  657.364354][ T6027] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  657.441825][ T6027] bond0: (slave veth0_to_bond): Releasing backup interface
[  657.453494][ T6027] veth0_to_bond: left promiscuous mode
[  657.544641][ T6031] bond3 (unregistering): Released all slaves
[  657.786015][ T6053] openvswitch: netlink: Flow key attr not present in new flow.
[  657.876817][ T6058] netlink: 'syz.5.9013': attribute type 20 has an invalid length.
[  657.891248][ T6058] IPv6: NLM_F_CREATE should be specified when creating new route
[  658.046935][ T6076] netlink: 'syz.5.9018': attribute type 1 has an invalid length.
[  658.108621][ T6086] IPv6: NLM_F_CREATE should be specified when creating new route
[  658.127168][ T6076] 8021q: adding VLAN 0 to HW filter on device bond3
[  658.154774][ T6084] bond3: (slave veth0_to_bond): making interface the new active one
[  658.171776][ T6084] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  658.209864][ T6094] xt_hashlimit: size too large, truncated to 1048576
[  658.229540][ T6076] macvlan2: entered promiscuous mode
[  658.243390][ T6076] macvlan2: entered allmulticast mode
[  658.267409][ T6076] bond3: entered promiscuous mode
[  658.285269][ T6076] veth0_to_bond: entered promiscuous mode
[  658.296258][ T6076] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  658.306256][ T6076] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  658.331953][ T6076] bond3: left promiscuous mode
[  658.337502][ T6076] veth0_to_bond: left promiscuous mode
[  658.360878][ T6096] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[  658.377023][ T6096] 0ªX¹¦Dö»: entered allmulticast mode
[  658.518159][ T6103] syzkaller0: entered promiscuous mode
[  658.539159][ T6103] syzkaller0: entered allmulticast mode
[  658.727030][ T6131] netlink: 'syz.3.9031': attribute type 1 has an invalid length.
[  658.779753][ T6131] netlink: 'syz.3.9031': attribute type 3 has an invalid length.
[  658.784565][ T6141] 8021q: VLANs not supported on lo
[  658.837288][ T6136] 8021q: VLANs not supported on lo
[  658.859456][ T6146] netlink: 'syz.2.9036': attribute type 1 has an invalid length.
[  658.867521][ T6150] IPVS: length: 55 != 24
[  659.028826][ T6163] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  659.903704][ T6201] __nla_validate_parse: 14 callbacks suppressed
[  659.903725][ T6201] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9054'.
[  659.940233][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9053'.
[  660.002465][ T6206] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  660.017330][ T6206] bond3 (unregistering): Released all slaves
[  660.090041][ T6201] netlink: 'syz.6.9054': attribute type 11 has an invalid length.
[  660.434242][ T6241] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9064'.
[  660.483321][ T6241] veth0_to_bridge: entered promiscuous mode
[  660.490133][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9062'.
[  660.507563][ T6248] netlink: 232 bytes leftover after parsing attributes in process `syz.6.9066'.
[  660.553681][ T6250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9067'.
[  660.916439][ T6277] veth0: entered promiscuous mode
[  660.997342][ T6275] veth0: left promiscuous mode
[  661.217185][ T6240] veth0_to_bridge: left promiscuous mode
[  661.354287][ T6299] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9083'.
[  661.361277][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9085'.
[  661.754748][ T6318] syzkaller0: entered promiscuous mode
[  661.781888][ T6318] syzkaller0: entered allmulticast mode
[  662.005694][ T6332] netlink: 'syz.5.9094': attribute type 1 has an invalid length.
[  662.021108][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  662.030204][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  662.039168][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  662.048300][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  662.057329][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  662.118233][ T6340] netlink: 'syz.5.9094': attribute type 1 has an invalid length.
[  662.267487][ T6341] syzkaller0: entered promiscuous mode
[  662.300388][ T6341] syzkaller0: entered allmulticast mode
[  662.429551][ T6341] lo speed is unknown, defaulting to 1000
[  662.702924][ T6334] lo speed is unknown, defaulting to 1000
[  662.778250][ T6341] xfrm0 speed is unknown, defaulting to 1000
[  663.133657][ T6411] netlink: 'syz.5.9114': attribute type 58 has an invalid length.
[  663.152468][ T6411] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9114'.
[  663.168089][ T6417] netlink: 'syz.6.9110': attribute type 1 has an invalid length.
[  663.170779][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9116'.
[  663.186862][ T6416] netdevsim netdevsim5: Direct firmware load for .. failed with error -2
[  663.196224][ T6416] netdevsim netdevsim5: Falling back to sysfs fallback for: ..
[  663.205218][ T6419] netlink: 'syz.3.9116': attribute type 14 has an invalid length.
[  663.216850][ T6419] netlink: 'syz.3.9116': attribute type 13 has an invalid length.
[  663.235481][ T6334] xfrm0 speed is unknown, defaulting to 1000
[  663.258490][ T6417] 8021q: adding VLAN 0 to HW filter on device bond2
[  663.381661][ T5625] Bluetooth: hci5: command 0x0405 tx timeout
[  663.409190][ T5722] hid-generic 0005:0006:0003.0002: item fetching failed at offset 0/1
[  663.430366][ T5722] hid-generic 0005:0006:0003.0002: probe with driver hid-generic failed with error -22
[  663.705120][ T6459] netlink: 'syz.3.9125': attribute type 1 has an invalid length.
[  663.779017][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state
[  663.786536][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.795296][ T6334] bridge_slave_0: entered allmulticast mode
[  663.803027][ T6334] bridge_slave_0: entered promiscuous mode
[  663.810796][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state
[  663.818155][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.826151][ T6334] bridge_slave_1: entered allmulticast mode
[  663.833370][ T6334] bridge_slave_1: entered promiscuous mode
[  663.853629][ T6334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  663.865443][ T6334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  663.887070][ T6334] team0: Port device team_slave_0 added
[  663.895925][ T6334] team0: Port device team_slave_1 added
[  663.918583][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_0
[  663.926781][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  663.954836][ T6334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  663.972357][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_1
[  663.979530][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  664.008021][ T6334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  664.062105][ T6334] hsr_slave_0: entered promiscuous mode
[  664.071974][ T6334] hsr_slave_1: entered promiscuous mode
[  664.079045][ T6334] debugfs: 'hsr0' already exists in 'hsr'
[  664.085778][ T6334] Cannot create hsr debugfs directory
[  664.101674][ T5625] Bluetooth: hci2: command tx timeout
[  664.454298][ T6491] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20000
[  664.488416][ T6334] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  664.531244][ T6334] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  664.549533][ T6334] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  664.568334][ T6334] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  664.596968][ T6334] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  664.624143][ T6334] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  664.660427][ T6334] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  664.702840][ T6334] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  664.824922][ T6520] netlink: 'syz.3.9145': attribute type 29 has an invalid length.
[  664.909451][ T6530] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[  664.965043][ T6334] 8021q: adding VLAN 0 to HW filter on device bond0
[  664.976764][ T6533] Cannot find add_set index 0 as target
[  665.014365][ T6334] 8021q: adding VLAN 0 to HW filter on device team0
[  665.046679][ T6542] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  665.062732][T16303] bridge0: port 1(bridge_slave_0) entered blocking state
[  665.069914][T16303] bridge0: port 1(bridge_slave_0) entered forwarding state
[  665.116763][ T6541] tipc: Disabling bearer <eth:syzkaller0>
[  665.139116][T16303] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.146321][T16303] bridge0: port 2(bridge_slave_1) entered forwarding state
[  665.229700][ T6563] IPVS: set_ctl: invalid protocol: 59 172.20.20.38:20000
[  665.755527][ T6582] __nla_validate_parse: 6 callbacks suppressed
[  665.755547][ T6582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9157'.
[  665.803519][ T6582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9157'.
[  665.855423][ T6334] 8021q: adding VLAN 0 to HW filter on device batadv0
[  665.955547][ T6334] veth0_vlan: entered promiscuous mode
[  665.973362][ T6334] veth1_vlan: entered promiscuous mode
[  666.024241][ T6334] veth0_macvtap: entered promiscuous mode
[  666.055072][ T6334] veth1_macvtap: entered promiscuous mode
[  666.075437][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_0
[  666.093921][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_1
[  666.115193][T16301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  666.125136][T16301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  666.136708][T16301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  666.146049][T16301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  666.181330][ T5625] Bluetooth: hci2: command tx timeout
[  666.347578][ T6629] syzkaller0: entered allmulticast mode
[  668.270880][ T5625] Bluetooth: hci2: command tx timeout
[  668.808354][ T6590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  668.888091][T16303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  668.923187][T16303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.002976][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9171'.
[  669.037779][T16320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  669.066207][T16320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  669.099871][ T6654] netlink: 112 bytes leftover after parsing attributes in process `syz.6.9173'.
[  669.103995][ T6643] veth0: entered promiscuous mode
[  669.157821][ T6643] batadv_slave_1: entered promiscuous mode
[  669.194431][ T6639] batadv_slave_1: left promiscuous mode
[  669.209801][ T6639] veth0: left promiscuous mode
[  669.479258][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9185'.
[  669.494066][ T6691] lo: entered promiscuous mode
[  669.504084][ T6691] netlink: 'syz.5.9186': attribute type 2 has an invalid length.
[  669.535154][ T6691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  669.559276][ T6690] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  669.788797][ T6716] xt_hashlimit: invalid interval
[  669.845499][ T6722] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  669.883066][ T6716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  669.913000][ T6716] syzkaller0: entered promiscuous mode
[  669.938066][ T6716] syzkaller0: entered allmulticast mode
[  669.986654][ T6716] tipc: Resetting bearer <eth:syzkaller0>
[  670.012582][ T6711] tipc: Resetting bearer <eth:syzkaller0>
[  670.036137][ T6711] tipc: Disabling bearer <eth:syzkaller0>
[  670.235549][ T6751] netlink: 'syz.6.9203': attribute type 1 has an invalid length.
[  670.263749][ T6751] netlink: 96 bytes leftover after parsing attributes in process `syz.6.9203'.
[  670.286656][ T6751] netlink: 'syz.6.9203': attribute type 1 has an invalid length.
[  670.298624][ T6751] netlink: 'syz.6.9203': attribute type 8 has an invalid length.
[  670.308269][ T6756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9205'.
[  670.310194][ T6751] netlink: 606 bytes leftover after parsing attributes in process `syz.6.9203'.
[  670.327493][ T6755] netlink: 'syz.2.9204': attribute type 2 has an invalid length.
[  670.335909][ T6755] netlink: 'syz.2.9204': attribute type 2 has an invalid length.
[  670.344634][ T5625] Bluetooth: hci2: command tx timeout
[  670.365664][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9204'.
[  670.512448][ T6773] syzkaller0: entered promiscuous mode
[  670.528186][ T6773] syzkaller0: entered allmulticast mode
[  670.735918][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9214'.
[  670.755483][ T6779] netlink: 'syz.5.9212': attribute type 1 has an invalid length.
[  670.825393][ T6790] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9212'.
[  670.841287][ T6779] 8021q: adding VLAN 0 to HW filter on device bond4
[  670.938419][ T6779] bond3: (slave veth0_to_bond): Releasing active interface
[  670.960330][ T6790] netlink: 'syz.5.9212': attribute type 1 has an invalid length.
[  670.974949][ T6790] netlink: 'syz.5.9212': attribute type 2 has an invalid length.
[  670.985518][ T6779] bond4: (slave veth0_to_bond): making interface the new active one
[  670.995692][ T6779] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  671.023125][ T6810] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  671.162573][ T6822] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  671.236948][ T6827] netlink: 'syz.3.9227': attribute type 4 has an invalid length.
[  671.358806][ T6835] syzkaller1: entered promiscuous mode
[  671.373295][ T6835] syzkaller1: entered allmulticast mode
[  671.569308][ T6852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9235'.
[  671.606138][ T6852] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9235'.
[  671.630887][ T6852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9235'.
[  671.760312][ T6868] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  671.772104][ T6868] bond1 (unregistering): Released all slaves
[  671.785065][ T6864] Cannot find add_set index 2 as target
[  671.855246][ T6878] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9243'.
[  671.893509][ T6878] mac80211_hwsim hwsim111 wlan0: entered promiscuous mode
[  671.928124][ T6878] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  671.965212][ T6883] ip6gretap1: entered promiscuous mode
[  671.978115][ T6883] ip6gretap1: entered allmulticast mode
[  672.121788][ T6893] syzkaller1: entered promiscuous mode
[  672.148955][ T6893] syzkaller1: entered allmulticast mode
[  672.162193][ T6893] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9248'.
[  672.257365][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9251'.
[  672.288498][ T6904] dvmrp0: entered allmulticast mode
[  672.315251][ T6912] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  672.415379][ T6922] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9254'.
[  672.805055][ T6936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  672.815019][ T6937] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  672.829407][ T6937] syzkaller0: entered promiscuous mode
[  672.845056][ T6937] syzkaller0: entered allmulticast mode
[  672.878112][ T6936] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  672.913755][ T6953] tipc: Started in network mode
[  672.927362][ T6953] tipc: Node identity e62462ac92c7, cluster identity 4711
[  672.929325][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9266'.
[  672.935611][ T6953] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  672.957262][ T6936] tipc: Resetting bearer <eth:syzkaller0>
[  672.964004][ T6953] syzkaller0: entered promiscuous mode
[  672.969922][ T6953] syzkaller0: entered allmulticast mode
[  672.985598][ T6953] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  672.997094][ T6935] tipc: Resetting bearer <eth:syzkaller0>
[  673.013301][ T6935] tipc: Disabling bearer <eth:syzkaller0>
[  673.047324][ T6953] tipc: Resetting bearer <eth:syzkaller0>
[  673.096105][ T6952] tipc: Resetting bearer <eth:syzkaller0>
[  673.129129][ T6952] tipc: Disabling bearer <eth:syzkaller0>
[  673.160246][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9269'.
[  673.287948][ T6975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  673.296984][ T6979] syzkaller0: entered promiscuous mode
[  673.304274][ T6979] syzkaller0: entered allmulticast mode
[  673.327990][ T6979] tipc: Resetting bearer <eth:syzkaller0>
[  673.347557][ T6979] tipc: Disabling bearer <eth:syzkaller0>
[  673.719713][ T7011] IPv6: NLM_F_CREATE should be specified when creating new route
[  673.737180][ T7014] syz_tun: entered allmulticast mode
[  673.756508][ T7011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  673.763960][ T7011] IPv6: NLM_F_CREATE should be set when creating new route
[  673.807291][ T7011] syzkaller0: entered promiscuous mode
[  673.813921][ T7011] syzkaller0: entered allmulticast mode
[  673.844090][ T7014] dvmrp8: entered allmulticast mode
[  673.889901][ T7022] syzkaller0: entered promiscuous mode
[  673.897668][ T7022] syzkaller0: entered allmulticast mode
[  674.061878][ T7044] siw: device registration error -23
[  674.874344][ T7057] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  675.218630][ T7079] validate_nla: 3 callbacks suppressed
[  675.218928][ T7079] netlink: 'syz.5.9306': attribute type 13 has an invalid length.
[  675.596715][T11663] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xa
[  675.656738][ T7121] netlink: 'syz.3.9315': attribute type 12 has an invalid length.
[  675.762567][ T7128] pim6reg: entered allmulticast mode
[  675.778378][ T7128] pim6reg: left allmulticast mode
[  675.838983][ T7137] __nla_validate_parse: 5 callbacks suppressed
[  675.839002][ T7137] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9319'.
[  675.863498][ T7136] netlink: 'syz.1.9316': attribute type 1 has an invalid length.
[  675.890453][ T7141] bond0: entered promiscuous mode
[  675.916227][ T7141] bond_slave_0: entered promiscuous mode
[  675.932063][ T7141] bond_slave_1: entered promiscuous mode
[  675.957093][ T7141] batadv0: entered promiscuous mode
[  675.967371][ T7143] netlink: 'syz.5.9321': attribute type 1 has an invalid length.
[  675.985241][ T7143] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.9321'.
[  675.998512][ T7141] debugfs: 'hsr1' already exists in 'hsr'
[  676.019496][ T7154] IPv6: NLM_F_REPLACE set, but no existing node found!
[  676.022645][ T7141] Cannot create hsr debugfs directory
[  676.047424][ T7141] 8021q: adding VLAN 0 to HW filter on device hsr1
[  676.060420][ T7141] bond0: left promiscuous mode
[  676.067917][ T7141] bond_slave_0: left promiscuous mode
[  676.073855][ T7141] bond_slave_1: left promiscuous mode
[  676.080282][ T7141] batadv0: left promiscuous mode
[  676.098105][ T7136] 8021q: adding VLAN 0 to HW filter on device bond1
[  676.113555][ T7128] bond1: (slave veth0_to_bond): making interface the new active one
[  676.124917][ T7128] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  676.159881][ T7157] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.9324'.
[  676.195245][ T7159] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  676.210220][ T7159] syzkaller0: entered promiscuous mode
[  676.227192][ T7159] syzkaller0: entered allmulticast mode
[  676.237528][ T7157] xt_l2tp: missing protocol rule (udp|l2tpip)
[  676.245795][ T7159] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  676.260278][ T7165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9326'.
[  676.273437][ T7167] veth0_to_bond: entered allmulticast mode
[  676.283432][ T7157] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  676.332945][ T7173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9328'.
[  676.354704][ T7170] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  676.368876][ T7170] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  676.425525][T11663] bond1: (slave veth0_to_bond): link status definitely down, disabling slave
[  676.436297][T11663] bond1: now running without any active interface!
[  676.466278][ T7163] tipc: Resetting bearer <eth:syzkaller0>
[  676.483679][ T7178] netlink: 'syz.1.9329': attribute type 2 has an invalid length.
[  676.498288][ T1162] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  676.538422][ T1162] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  676.570870][ T1162] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  676.580340][ T7163] tipc: Resetting bearer <eth:syzkaller0>
[  676.593977][ T7163] tipc: Disabling bearer <eth:syzkaller0>
[  676.607329][ T1162] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  676.767828][ T7202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  677.180151][ T7236] rdma_rxe: rxe_newlink: failed to add vxcan1
[  677.230990][ T7245] ipvlan2: entered promiscuous mode
[  677.398684][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9351'.
[  677.486801][ T7264] netlink: 'syz.6.9354': attribute type 6 has an invalid length.
[  677.604873][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9358'.
[  677.616192][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9358'.
[  677.616639][ T7278] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20003
[  677.640159][ T7276] bridge4: entered promiscuous mode
[  677.645810][ T7276] bridge4: entered allmulticast mode
[  677.658728][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9358'.
[  677.662799][ T7276] bridge5: entered promiscuous mode
[  677.674825][ T7276] bridge5: entered allmulticast mode
[  677.685624][ T7276] bridge6: entered promiscuous mode
[  677.691535][ T7276] bridge6: entered allmulticast mode
[  677.696521][ T7281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9359'.
[  677.716065][ T7281] netlink: 'syz.1.9359': attribute type 7 has an invalid length.
[  677.718379][ T7276] bridge7: entered promiscuous mode
[  677.729833][ T7276] bridge7: entered allmulticast mode
[  677.758544][ T7276] bridge8: entered promiscuous mode
[  677.764678][ T7276] bridge8: entered allmulticast mode
[  677.777864][ T7276] bridge9: entered promiscuous mode
[  677.783884][ T7276] bridge9: entered allmulticast mode
[  677.794512][ T7276] bridge10: entered promiscuous mode
[  677.799954][ T7276] bridge10: entered allmulticast mode
[  677.809629][ T7276] bridge11: entered promiscuous mode
[  677.815366][ T7276] bridge11: entered allmulticast mode
[  677.824632][ T7276] bridge12: entered promiscuous mode
[  677.829993][ T7276] bridge12: entered allmulticast mode
[  677.841695][ T7276] bridge13: entered promiscuous mode
[  677.847061][ T7276] bridge13: entered allmulticast mode
[  677.858145][ T7276] bridge14: entered promiscuous mode
[  677.864008][ T7276] bridge14: entered allmulticast mode
[  677.874475][ T7276] bridge15: entered promiscuous mode
[  677.879822][ T7276] bridge15: entered allmulticast mode
[  677.893838][ T7276] bridge16: entered promiscuous mode
[  677.899229][ T7276] bridge16: entered allmulticast mode
[  677.905520][ T7284] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  677.918430][ T7276] bridge17: entered promiscuous mode
[  677.924490][ T7276] bridge17: entered allmulticast mode
[  677.934762][ T7276] bridge18: entered promiscuous mode
[  677.940127][ T7276] bridge18: entered allmulticast mode
[  677.951991][ T7276] bridge19: entered promiscuous mode
[  677.957387][ T7276] bridge19: entered allmulticast mode
[  677.981881][ T7276] bridge20: entered promiscuous mode
[  677.987859][ T7276] bridge20: entered allmulticast mode
[  678.001960][ T7276] bridge21: entered promiscuous mode
[  678.007563][ T7276] bridge21: entered allmulticast mode
[  678.023679][ T7276] bridge22: entered promiscuous mode
[  678.029256][ T7276] bridge22: entered allmulticast mode
[  678.041891][ T7276] bridge23: entered promiscuous mode
[  678.047317][ T7276] bridge23: entered allmulticast mode
[  678.058672][ T7276] bridge24: entered promiscuous mode
[  678.064272][ T7276] bridge24: entered allmulticast mode
[  678.071766][ T7286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  678.084329][ T7286] batman_adv: batadv0: Removing interface: batadv_slave_1
[  678.102597][ T7276] bridge25: entered promiscuous mode
[  678.108392][ T7276] bridge25: entered allmulticast mode
[  678.119774][ T7276] bridge26: entered promiscuous mode
[  678.125682][ T7276] bridge26: entered allmulticast mode
[  678.139326][ T7276] bridge27: entered promiscuous mode
[  678.145550][ T7276] bridge27: entered allmulticast mode
[  678.158148][ T7276] bridge28: entered promiscuous mode
[  678.164360][ T7276] bridge28: entered allmulticast mode
[  678.178142][ T7276] bridge29: entered promiscuous mode
[  678.184917][ T7276] bridge29: entered allmulticast mode
[  678.201670][ T7276] bridge30: entered promiscuous mode
[  678.207100][ T7276] bridge30: entered allmulticast mode
[  678.217332][ T7276] bridge31: entered promiscuous mode
[  678.224306][ T7276] bridge31: entered allmulticast mode
[  678.237220][ T7276] bridge32: entered promiscuous mode
[  678.243853][ T7276] bridge32: entered allmulticast mode
[  678.265290][ T7276] bridge33: entered promiscuous mode
[  678.274455][ T7276] bridge33: entered allmulticast mode
[  678.276512][ T7293] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  678.288743][ T7276] bridge34: entered promiscuous mode
[  678.288790][ T7276] bridge34: entered allmulticast mode
[  678.296047][ T7276] bridge35: entered promiscuous mode
[  678.305890][ T7276] bridge35: entered allmulticast mode
[  678.328129][ T7276] bridge36: entered promiscuous mode
[  678.335943][ T7276] bridge36: entered allmulticast mode
[  678.353519][ T7276] bridge37: entered promiscuous mode
[  678.364491][ T7276] bridge37: entered allmulticast mode
[  678.384951][ T7276] bridge38: entered promiscuous mode
[  678.390469][ T7276] bridge38: entered allmulticast mode
[  678.405234][ T7276] bridge39: entered promiscuous mode
[  678.410969][ T7276] bridge39: entered allmulticast mode
[  678.435546][ T7302] netlink: 'syz.3.9365': attribute type 1 has an invalid length.
[  678.456782][ T7302] netlink: 'syz.3.9365': attribute type 7 has an invalid length.
[  678.466142][ T7302] netlink: 'syz.3.9365': attribute type 8 has an invalid length.
[  678.697032][ T7320] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  678.743410][ T7320] bond3 (unregistering): Released all slaves
[  678.794361][ T7311] syzkaller1: entered promiscuous mode
[  678.802584][ T7311] syzkaller1: entered allmulticast mode
[  679.439106][ T7367] xt_hashlimit: size too large, truncated to 1048576
[  679.491163][ T7375] syzkaller0: entered promiscuous mode
[  679.513338][ T7375] syzkaller0: entered allmulticast mode
[  679.935796][ T7398] bond1: Setting coupled_control to off (0)
[  680.019152][ T7401] syzkaller0: entered promiscuous mode
[  680.026361][ T7401] syzkaller0: entered allmulticast mode
[  680.530437][ T7458] validate_nla: 5 callbacks suppressed
[  680.530459][ T7458] netlink: 'syz.3.9408': attribute type 29 has an invalid length.
[  680.660160][ T7465] xt_CT: You must specify a L4 protocol and not use inversions on it
[  680.713478][ T7466] 8021q: adding VLAN 0 to HW filter on device bond2
[  680.812109][ T7472] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  680.917630][ T7487] netlink: 'syz.5.9415': attribute type 10 has an invalid length.
[  680.951997][ T7487] bond4: (slave veth0_to_bond): Releasing active interface
[  680.966988][ T7487] veth0_to_bond: entered promiscuous mode
[  680.974787][ T7487] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  681.021318][ T7485] __nla_validate_parse: 20 callbacks suppressed
[  681.021342][ T7485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9414'.
[  681.303633][ T7507] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.311246][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.375052][ T7507] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  681.574562][ T5283] veth0_vlan: left promiscuous mode
[  681.584973][ T5283] veth0_vlan: entered promiscuous mode
[  681.613888][T26097] xfrm0 speed is unknown, defaulting to 1000
[  681.625211][T26097] syz2: Port: 1 Link DOWN
[  681.635782][ T1162] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  681.666821][ T1162] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  681.686382][ T1162] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  681.699216][ T1162] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  681.715484][ T7511] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  681.730430][ T7511] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.743297][ T7538] netlink: 'syz.3.9428': attribute type 1 has an invalid length.
[  681.763210][ T7538] bond2: entered promiscuous mode
[  681.768586][ T7538] 8021q: adding VLAN 0 to HW filter on device bond2
[  681.779620][ T1162] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  681.789345][ T1162] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  681.815905][ T7538] bond2: (slave bridge1): making interface the new active one
[  681.824156][ T7538] bridge1: entered promiscuous mode
[  681.830347][ T7538] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  681.920387][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9429'.
[  681.948084][ T7542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9429'.
[  681.993897][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9429'.
[  682.033361][ T7551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9429'.
[  682.056273][ T7542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9429'.
[  682.076695][ T7556] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9432'.
[  682.211934][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9436'.
[  682.277532][ T7575] sctp: [Deprecated]: syz.1.9437 (pid 7575) Use of int in max_burst socket option.
[  682.277532][ T7575] Use struct sctp_assoc_value instead
[  682.299057][ T7578] gtp0: entered allmulticast mode
[  682.306647][ T7578] team0: Device gtp0 is of different type
[  682.399497][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9436'.
[  682.598747][ T7593] netlink: set zone limit has 4 unknown bytes
[  682.626270][ T7596] tipc: Started in network mode
[  682.648418][ T7596] tipc: Node identity ee4ffe10ca67, cluster identity 4711
[  682.656777][ T7602] netlink: 104 bytes leftover after parsing attributes in process `syz.6.9443'.
[  682.669285][ T7596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  682.694058][ T7595] tipc: Disabling bearer <eth:syzkaller0>
[  683.625241][ T7678] IPv6: sit1: Disabled Multicast RS
[  683.640170][ T7678] syzkaller0: entered promiscuous mode
[  683.656402][ T7678] syzkaller0: entered allmulticast mode
[  683.844353][ T7695] batman_adv: batadv0: Removing interface: batadv_slave_0
[  683.866371][ T7695] batman_adv: batadv0: Removing interface: batadv_slave_1
[  684.403690][ T7746] bridge0: port 2(bridge_slave_1) entered disabled state
[  684.411240][ T7746] bridge0: port 1(bridge_slave_0) entered disabled state
[  684.446226][ T7749] netlink: 'syz.6.9481': attribute type 24 has an invalid length.
[  684.543022][ T5625] block nbd3: Receive control failed (result -32)
[  685.339168][ T7815] can: request_module (can-proto-0) failed.
[  685.414882][ T7815] batman_adv: batadv0: Adding interface: dummy0
[  685.436708][ T7815] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  685.516893][ T7815] batman_adv: batadv0: Interface activated: dummy0
[  685.542172][ T7836] batadv0: mtu less than device minimum
[  685.578005][ T7836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  685.589245][ T7836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  685.600830][ T7836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  685.612829][ T7836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  685.624127][ T7836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  685.635452][ T7836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  685.646551][ T7836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  685.657759][ T7836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  685.884249][ T7865] ip6erspan0: entered allmulticast mode
[  686.076501][ T7886] netlink: 'syz.2.9522': attribute type 21 has an invalid length.
[  686.106919][ T7886] __nla_validate_parse: 16 callbacks suppressed
[  686.106954][ T7886] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9522'.
[  686.132505][ T7886] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9522'.
[  686.177694][ T7891] xfrm0 speed is unknown, defaulting to 1000
[  686.205324][ T7891] xfrm0 speed is unknown, defaulting to 1000
[  686.227827][ T7898] Cannot find add_set index 4 as target
[  686.239447][ T7891] xfrm0 speed is unknown, defaulting to 1000
[  686.275655][ T7900] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9527'.
[  686.282667][ T7897] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9526'.
[  686.312289][ T7902] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9528'.
[  686.404757][ T7912] xt_SECMARK: invalid mode: 9
[  686.458417][ T7891] infiniband syz1: set active
[  686.463697][T26097] xfrm0 speed is unknown, defaulting to 1000
[  686.485036][ T7891] infiniband syz1: added xfrm0
[  686.524001][ T7891] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  686.541704][ T7891] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  686.568793][ T7891] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  686.668511][ T7891] RDS/IB: syz1: added
[  686.699483][ T7891] smc: adding ib device syz1 with port count 1
[  686.716510][ T7891] smc:    ib device syz1 port 1 has no pnetid
[  686.724233][T26097] xfrm0 speed is unknown, defaulting to 1000
[  686.732619][ T7891] xfrm0 speed is unknown, defaulting to 1000
[  686.754369][ T7930] veth0: entered promiscuous mode
[  686.769120][ T7928] veth0: left promiscuous mode
[  686.845077][ T7933] netlink: 'syz.5.9536': attribute type 1 has an invalid length.
[  686.861195][ T7933] netlink: 'syz.5.9536': attribute type 2 has an invalid length.
[  686.897441][ T7936] netlink: 'syz.2.9537': attribute type 1 has an invalid length.
[  686.912667][ T7933] netlink: 'syz.5.9536': attribute type 1 has an invalid length.
[  686.936209][ T7933] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9536'.
[  686.988680][ T7938] netlink: 'syz.3.9538': attribute type 2 has an invalid length.
[  687.019628][ T7938] netlink: 'syz.3.9538': attribute type 8 has an invalid length.
[  687.029803][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9539'.
[  687.054513][ T7938] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9538'.
[  687.073879][ T7940] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  687.142091][ T7891] xfrm0 speed is unknown, defaulting to 1000
[  687.273830][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9546'.
[  687.422872][ T7891] xfrm0 speed is unknown, defaulting to 1000
[  687.460002][ T7973] syzkaller1: entered promiscuous mode
[  687.490005][ T7973] syzkaller1: entered allmulticast mode
[  687.758282][ T7891] xfrm0 speed is unknown, defaulting to 1000
[  687.779605][ T8002] netlink: 'syz.6.9560': attribute type 1 has an invalid length.
[  687.883825][ T8002] 8021q: adding VLAN 0 to HW filter on device bond3
[  687.903833][ T8010] net_ratelimit: 12 callbacks suppressed
[  687.903855][ T8010] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  687.922777][ T7891] xfrm0 speed is unknown, defaulting to 1000
[  688.003209][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9563'.
[  688.161605][ T8023] veth1_macvtap: left promiscuous mode
[  688.177577][ T8023] macsec0: entered promiscuous mode
[  688.191468][ T8026] xt_hashlimit: size too large, truncated to 1048576
[  688.200098][ T7891] xfrm0 speed is unknown, defaulting to 1000
[  688.244843][ T8028] 1ªX¹¦Dö»: renamed from 
00ªX¹¦Dö» (while UP)
[  688.370047][ T7891] xfrm0 speed is unknown, defaulting to 1000
[  688.498193][ T8040] syz_tun: refused to change device tx_queue_len
[  688.512871][ T8040] syzkaller0: entered promiscuous mode
[  688.520103][ T8040] syzkaller0: entered allmulticast mode
[  688.535166][ T8040] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  688.569649][ T8039] tipc: Resetting bearer <eth:syzkaller0>
[  688.620923][ T8039] tipc: Disabling bearer <eth:syzkaller0>
[  688.628921][ T8042] netlink: 'syz.3.9573': attribute type 14 has an invalid length.
[  688.637896][ T7891] xfrm0 speed is unknown, defaulting to 1000
[  688.646953][ T8042] bridge_slave_0: left allmulticast mode
[  688.654221][ T8042] bridge_slave_0: left promiscuous mode
[  688.660382][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state
[  688.687390][ T8042] bridge_slave_1: left allmulticast mode
[  688.696162][ T8042] bridge_slave_1: left promiscuous mode
[  688.702458][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state
[  688.737134][ T8042] bond0: (slave bond_slave_0): Releasing backup interface
[  688.765338][ T8042] bond0: (slave bond_slave_1): Releasing backup interface
[  688.791614][ T8042] team0: Port device team_slave_0 removed
[  688.808274][ T8042] team0: Port device team_slave_1 removed
[  688.820237][ T8042] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  688.820538][ T8045] nbd4: detected capacity change from 0 to 63
[  688.828923][ T8042] batman_adv: batadv0: Removing interface: batadv_slave_0
[  688.847149][ T8042] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  688.855396][ T8042] batman_adv: batadv0: Removing interface: batadv_slave_1
[  688.862683][ T5625] block nbd4: Receive control failed (result -104)
[  688.867361][   T50] block nbd4: Receive control failed (result -32)
[  688.882314][ T8042] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  688.936488][ T7891] xfrm0 speed is unknown, defaulting to 1000
[  688.993320][ T8054] bridge: RTM_NEWNEIGH with invalid ether address
[  689.021851][ T8056] netlink: 'syz.6.9578': attribute type 49 has an invalid length.
[  689.081161][ T8061] syzkaller0: entered promiscuous mode
[  689.109182][ T8061] syzkaller0: entered allmulticast mode
[  689.123453][ T8061] 0: reclassify loop, rule prio 0, protocol 800
[  689.343223][ T7891] xfrm0 speed is unknown, defaulting to 1000
[  689.411528][ T8074] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  689.685652][ T8106] 8021q: adding VLAN 0 to HW filter on device bond5
[  689.786339][ T8111] bond3: entered promiscuous mode
[  689.809037][ T8111] 8021q: adding VLAN 0 to HW filter on device bond3
[  689.829556][ T7891] xfrm0 speed is unknown, defaulting to 1000
[  690.136196][ T8127] bond5 (unregistering): Released all slaves
[  690.330365][ T7891] xfrm0 speed is unknown, defaulting to 1000
[  690.548596][ T8152] bond4: entered promiscuous mode
[  690.572337][ T8152] 8021q: adding VLAN 0 to HW filter on device bond4
[  690.632716][ T8152] 8021q: adding VLAN 0 to HW filter on device bond4
[  690.663141][ T8152] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  690.732260][ T8152] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  690.748020][ T8152] bond4: (slave ip6gre2): making interface the new active one
[  690.756336][ T8152] ip6gre2: entered promiscuous mode
[  690.763929][ T8152] bond4: (slave ip6gre2): Enslaving as an active interface with an up link
[  690.774843][ T7891] xfrm0 speed is unknown, defaulting to 1000
[  691.206567][ T8192] __nla_validate_parse: 13 callbacks suppressed
[  691.206588][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9617'.
[  691.232831][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9622'.
[  691.355475][ T8208] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  691.384372][ T8208] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.503672][ T8208] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  691.536586][ T8208] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.625060][ T8208] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  691.661398][ T8208] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.676024][ T8236] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9628'.
[  691.731288][ T8241] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9630'.
[  691.750024][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9630'.
[  691.777708][ T8208] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode
[  691.797996][ T8208] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  691.821557][ T8208] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.088173][ T8256] validate_nla: 9 callbacks suppressed
[  692.088195][ T8256] netlink: 'syz.5.9635': attribute type 4 has an invalid length.
[  692.119374][ T1162] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  692.134506][ T1162] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  692.144759][ T1162] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  692.158504][ T1162] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  692.176610][ T8274] netlink: 'syz.2.9641': attribute type 11 has an invalid length.
[  692.203509][T16303] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  692.210245][ T8274] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.9641'.
[  692.216576][T16303] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  692.249596][ T1162] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  692.249739][ T8280] netlink: 'syz.3.9642': attribute type 22 has an invalid length.
[  692.280538][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9642'.
[  692.282066][ T1162] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  692.336628][ T8286] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9643'.
[  692.348053][ T8280] netlink: 'syz.3.9642': attribute type 22 has an invalid length.
[  692.371895][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9644'.
[  692.381384][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9644'.
[  692.467159][ T8292] openvswitch: netlink: IPv4 tun info is not correct
[  692.482602][ T8292] netlink: 'syz.6.9646': attribute type 10 has an invalid length.
[  692.510233][ T8292] macsec0: left promiscuous mode
[  692.524491][ T8292] bond0: (slave macsec0): Error -34 calling dev_set_mtu
[  692.609986][ T8292] bond5: Unable to set down delay as MII monitoring is disabled
[  692.642105][ T8292] bond5 (unregistering): Released all slaves
[  693.046707][ T8345] openvswitch: netlink: Tunnel attr 40 out of range max 16
[  693.084824][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.105394][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.114536][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.123607][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.132779][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.142223][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.157857][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.173941][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.182998][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.192875][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.200331][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.222897][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.238458][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.276200][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.354216][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.398888][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.433474][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.464545][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.489120][ T8385] netlink: 'syz.2.9673': attribute type 1 has an invalid length.
[  693.492022][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.543701][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.566796][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.575400][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.582970][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.590319][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.600402][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.608381][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.616160][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.624299][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.632235][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.640273][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.648439][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.655827][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.663535][ T8347] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  693.710254][ T8377] tunl0: Caught tx_queue_len zero misconfig
[  693.790450][ T8418] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  694.078921][ T8444] x_tables: duplicate underflow at hook 2
[  694.084940][  T137] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  694.084984][  T137] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  694.085014][  T137] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  694.085052][  T137] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  694.329121][ T8463] openvswitch: netlink: IPv4 tun info is not correct
[  695.254268][ T8511] xt_TCPMSS: Only works on TCP SYN packets
[  695.402976][ T8525] ipt_REJECT: TCP_RESET invalid for non-tcp
[  695.629535][ T8541] nbd: socks must be embedded in a SOCK_ITEM attr
[  695.660111][T26570] block nbd64: NBD_DISCONNECT
[  695.675911][ T8541] nbd: socks must be embedded in a SOCK_ITEM attr
[  695.719326][T26570] block nbd64: NBD_DISCONNECT
[  695.948669][T26570] udevd[26570]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  696.260855][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  696.446869][ T8612] __nla_validate_parse: 19 callbacks suppressed
[  696.446890][ T8612] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.9722'.
[  696.486573][ T8615] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9721'.
[  696.880018][ T8634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9723'.
[  696.934705][ T8608] bridge0: port 2(bridge_slave_1) entered blocking state
[  696.941940][ T8608] bridge0: port 2(bridge_slave_1) entered forwarding state
[  696.949508][ T8608] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.956697][ T8608] bridge0: port 1(bridge_slave_0) entered forwarding state
[  697.298226][ T8665] veth0: entered promiscuous mode
[  697.318267][ T8387] xfrm0 speed is unknown, defaulting to 1000
[  697.353512][T11663] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  697.377274][ T8666] veth0: left promiscuous mode
[  697.401372][T11663] bond1: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  697.450912][T11663] bond1: (slave veth0_to_bond): making interface the new active one
[  697.492042][T11663] bond1: active interface up!
[  697.582520][ T8691] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9737'.
[  697.585517][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9738'.
[  697.699410][ T8701] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9739'.
[  697.737523][   T30] audit: type=1800 audit(1782184495.414:21): pid=8709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9742" name="memory.events" dev="tmpfs" ino=526 res=0 errno=0
[  697.777341][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9743'.
[  697.831318][   T30] audit: type=1804 audit(1782184495.444:22): pid=8709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.9742" name="/newroot/99/memory.events" dev="tmpfs" ino=526 res=1 errno=0
[  697.924312][ T8717] netlink: 'syz.1.9745': attribute type 2 has an invalid length.
[  697.935489][ T8721] openvswitch: netlink: EtherType 0 is less than min 600
[  698.007038][ T8729] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9748'.
[  698.049961][ T8723] can: request_module (can-proto-0) failed.
[  698.138298][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9754'.
[  698.147865][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9754'.
[  698.345908][ T8759] netlink: 'syz.2.9760': attribute type 1 has an invalid length.
[  698.749067][ T8792] bond3 (unregistering): Released all slaves
[  699.339475][ T8837] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  699.351535][ T8837] mac80211_hwsim hwsim111 wlan0: left promiscuous mode
[  699.364559][ T8837] ipvlan2: left promiscuous mode
[  699.382447][ T8837] bridge4: left promiscuous mode
[  699.394449][ T8837] bridge4: left allmulticast mode
[  699.415779][ T8837] bridge5: left promiscuous mode
[  699.423709][ T8837] bridge5: left allmulticast mode
[  699.437358][ T8837] bridge6: left promiscuous mode
[  699.445243][ T8837] bridge6: left allmulticast mode
[  699.453321][ T8837] bridge7: left promiscuous mode
[  699.458655][ T8837] bridge7: left allmulticast mode
[  699.467226][ T8837] bridge8: left promiscuous mode
[  699.473216][ T8837] bridge8: left allmulticast mode
[  699.480141][ T8837] bridge9: left promiscuous mode
[  699.490218][ T8837] bridge9: left allmulticast mode
[  699.501869][ T8837] bridge10: left promiscuous mode
[  699.507021][ T8837] bridge10: left allmulticast mode
[  699.514202][ T8837] bridge11: left promiscuous mode
[  699.519527][ T8837] bridge11: left allmulticast mode
[  699.527100][ T8837] bridge12: left promiscuous mode
[  699.533241][ T8837] bridge12: left allmulticast mode
[  699.540165][ T8837] bridge13: left promiscuous mode
[  699.545990][ T8837] bridge13: left allmulticast mode
[  699.553476][ T8837] bridge14: left promiscuous mode
[  699.558641][ T8837] bridge14: left allmulticast mode
[  699.565677][ T8837] bridge15: left promiscuous mode
[  699.571023][ T8837] bridge15: left allmulticast mode
[  699.577228][ T8837] bridge16: left promiscuous mode
[  699.582582][ T8837] bridge16: left allmulticast mode
[  699.588916][ T8837] bridge17: left promiscuous mode
[  699.594476][ T8837] bridge17: left allmulticast mode
[  699.603204][ T8837] bridge18: left promiscuous mode
[  699.608344][ T8837] bridge18: left allmulticast mode
[  699.615685][ T8837] bridge19: left promiscuous mode
[  699.621586][ T8837] bridge19: left allmulticast mode
[  699.628472][ T8837] bridge20: left promiscuous mode
[  699.634544][ T8837] bridge20: left allmulticast mode
[  699.641961][ T8837] bridge21: left promiscuous mode
[  699.647320][ T8837] bridge21: left allmulticast mode
[  699.654677][ T8837] bridge22: left promiscuous mode
[  699.659940][ T8837] bridge22: left allmulticast mode
[  699.667393][ T8837] bridge23: left promiscuous mode
[  699.673160][ T8837] bridge23: left allmulticast mode
[  699.679371][ T8837] bridge24: left promiscuous mode
[  699.684892][ T8837] bridge24: left allmulticast mode
[  699.692191][ T8837] bridge25: left promiscuous mode
[  699.697445][ T8837] bridge25: left allmulticast mode
[  699.704562][ T8837] bridge26: left promiscuous mode
[  699.709753][ T8837] bridge26: left allmulticast mode
[  699.717381][ T8837] bridge27: left promiscuous mode
[  699.722961][ T8837] bridge27: left allmulticast mode
[  699.729236][ T8837] bridge28: left promiscuous mode
[  699.734550][ T8837] bridge28: left allmulticast mode
[  699.741339][ T8837] bridge29: left promiscuous mode
[  699.746600][ T8837] bridge29: left allmulticast mode
[  699.753628][ T8837] bridge30: left promiscuous mode
[  699.759026][ T8837] bridge30: left allmulticast mode
[  699.765872][ T8837] bridge31: left promiscuous mode
[  699.771665][ T8837] bridge31: left allmulticast mode
[  699.777865][ T8837] bridge32: left promiscuous mode
[  699.783217][ T8837] bridge32: left allmulticast mode
[  699.789428][ T8837] bridge33: left promiscuous mode
[  699.794713][ T8837] bridge33: left allmulticast mode
[  699.801724][ T8837] bridge34: left promiscuous mode
[  699.806955][ T8837] bridge34: left allmulticast mode
[  699.814025][ T8837] bridge35: left promiscuous mode
[  699.819182][ T8837] bridge35: left allmulticast mode
[  699.825640][ T8837] bridge36: left promiscuous mode
[  699.832445][ T8837] bridge36: left allmulticast mode
[  699.838990][ T8837] bridge37: left promiscuous mode
[  699.844488][ T8837] bridge37: left allmulticast mode
[  699.851610][ T8837] bridge38: left promiscuous mode
[  699.856722][ T8837] bridge38: left allmulticast mode
[  699.864329][ T8837] bridge39: left promiscuous mode
[  699.869452][ T8837] bridge39: left allmulticast mode
[  699.879308][ T8837] bond3: left promiscuous mode
[  699.886432][ T8837] bond4: left promiscuous mode
[  699.892659][ T8837] ip6gre2: left promiscuous mode
[  700.337774][ T8908] netlink: 'syz.2.9801': attribute type 1 has an invalid length.
[  700.359407][ T8908] netlink: 'syz.2.9801': attribute type 10 has an invalid length.
[  700.381878][ T8908] dummy0: entered promiscuous mode
[  700.892291][ T8963] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  700.909821][ T8953] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  700.928780][ T8953] bond3 (unregistering): Released all slaves
[  701.108525][ T8978] netlink: 'syz.2.9820': attribute type 1 has an invalid length.
[  701.144368][ T8979] netlink: 'syz.2.9820': attribute type 1 has an invalid length.
[  701.221273][ T8978] 8021q: adding VLAN 0 to HW filter on device bond6
[  701.235903][ T8992] netlink: 'syz.3.9825': attribute type 16 has an invalid length.
[  701.240247][ T8995] netlink: 'syz.6.9826': attribute type 1 has an invalid length.
[  701.257634][ T8992] netlink: 'syz.3.9825': attribute type 17 has an invalid length.
[  701.284435][ T8992] 1ªX¹¦Dö»: left allmulticast mode
[  701.339332][ T8992] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  701.347934][ T8992] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  701.367295][ T8992] 8021q: adding VLAN 0 to HW filter on device bond1
[  701.375550][ T8992] bond2: left promiscuous mode
[  701.380399][ T8992] bridge1: left promiscuous mode
[  701.398274][ T8992] ip6erspan0: left allmulticast mode
[  701.417991][ T8992] 8021q: adding VLAN 0 to HW filter on device bond3
[  701.460793][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  701.462841][T16307] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  701.493315][ T1162] bridge_slave_1: left promiscuous mode
[  701.516797][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.535416][ T1162] bridge_slave_0: left allmulticast mode
[  701.545266][ T1162] bridge_slave_0: left promiscuous mode
[  701.553080][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state
[  701.579490][ T1162] pim6reg: left allmulticast mode
[  701.589355][ T1162] pimreg: left allmulticast mode
[  701.768233][ T1162] bond6 (unregistering): (slave ip6gre3): Releasing backup interface
[  701.785469][ T9029] __nla_validate_parse: 20 callbacks suppressed
[  701.785492][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9832'.
[  702.014058][ T1162] bond3 (unregistering): (slave bridge4): Releasing backup interface
[  702.032857][ T1162] bridge4 (unregistering): left promiscuous mode
[  702.053578][ T1162] bond5 (unregistering): (slave bridge6): Releasing backup interface
[  702.070137][ T1162] bridge6 (unregistering): left promiscuous mode
[  702.099956][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  702.111721][ T1162] bond_slave_0: left allmulticast mode
[  702.118383][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  702.127891][ T1162] bond_slave_1: left allmulticast mode
[  702.134864][ T1162] bond0 (unregistering): Released all slaves
[  702.145263][ T1162] bond1 (unregistering): Released all slaves
[  702.162319][ T1162] bond2 (unregistering): Released all slaves
[  702.187193][ T1162] bond3 (unregistering): Released all slaves
[  702.206010][ T1162] bond4 (unregistering): (slave 
2
6±ÿª¨ú
rBº“): Releasing backup interface
[  702.217765][ T1162] bond4 (unregistering): (slave 
2
6±ÿª¨ú
rBº“): last VLAN challenged slave left bond - VLAN blocking is removed
[  702.235437][ T1162] bond4 (unregistering): Released all slaves
[  702.247527][ T1162] bond5 (unregistering): Released all slaves
[  702.262116][ T1162] bond6 (unregistering): Released all slaves
[  702.272589][ T1162] bond7 (unregistering): Released all slaves
[  702.282368][ T1162] bond8 (unregistering): Released all slaves
[  702.293875][T16307] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  702.303633][T16307] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  702.318706][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9836'.
[  702.345697][ T9047] kthread_run failed with err -4
[  702.416750][T16307] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  702.487462][ T1162] : left promiscuous mode
[  702.579558][ T1162] tipc: Disabling bearer <udp:syz2>
[  702.600413][ T1162] tipc: Left network mode
[  702.630270][ T1162] IPVS: stopping backup sync thread 18197 ...
[  702.669414][ T9089] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9848'.
[  702.683974][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9848'.
[  702.694400][ T9089] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  702.766963][ T9096] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9849'.
[  702.792398][ T9096] syzkaller0: entered promiscuous mode
[  702.810418][ T9096] syzkaller0: entered allmulticast mode
[  703.095352][ T1162] hsr_slave_0: left promiscuous mode
[  703.467216][ T1162] IPVS: stop unused estimator thread 0...
[  703.631515][ T5625] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  705.239710][ T9062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  705.365744][ T9108] netlink: 'syz.5.9852': attribute type 1 has an invalid length.
[  705.399226][ T9112] netlink: 'syz.2.9854': attribute type 12 has an invalid length.
[  705.408129][ T9112] netlink: 'syz.2.9854': attribute type 29 has an invalid length.
[  705.416800][ T9112] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9854'.
[  705.426439][ T9112] netlink: 'syz.2.9854': attribute type 2 has an invalid length.
[  705.434624][ T9112] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9854'.
[  705.471890][ T9112] netlink: 71 bytes leftover after parsing attributes in process `syz.2.9854'.
[  705.527693][ T9112] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9854'.
[  705.556201][ T9112] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9854'.
[  705.657059][ T9133] x_tables: unsorted underflow at hook 4
[  705.787945][ T9147] x_tables: duplicate underflow at hook 2
[  705.850447][ T9152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  705.925390][ T9156] netlink: 'syz.5.9866': attribute type 1 has an invalid length.
[  705.945939][ T9156] netlink: 'syz.5.9866': attribute type 4 has an invalid length.
[  705.973537][ T9158] syzkaller0: entered promiscuous mode
[  705.997429][ T9158] syzkaller0: entered allmulticast mode
[  706.214146][ T9177] netlink: 'syz.6.9871': attribute type 1 has an invalid length.
[  706.233375][ T9177] netlink: 'syz.6.9871': attribute type 10 has an invalid length.
[  706.432477][ T9205] xt_cgroup: invalid path, errno=-2
[  706.608192][ T9207] team0: Port device team_slave_0 removed
[  706.639686][ T9216] gtp1: entered promiscuous mode
[  706.645331][ T9216] gtp1: entered allmulticast mode
[  706.676905][ T9230] No such timeout policy "syz1"
[  706.695937][ T9230] openvswitch: netlink: Message has 8 unknown bytes.
[  706.710623][ T9230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  706.780876][ T9240] No such timeout policy "syz1"
[  706.948420][ T9257] __nla_validate_parse: 7 callbacks suppressed
[  706.948442][ T9257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9892'.
[  707.059164][ T9257] xt_hashlimit: size too large, truncated to 1048576
[  707.086356][ T9268] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  707.158579][ T9273] netlink: 'syz.3.9895': attribute type 1 has an invalid length.
[  707.198853][ T9273] netlink: 'syz.3.9895': attribute type 3 has an invalid length.
[  707.222526][ T9273] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9895'.
[  707.235879][ T9273] NCSI netlink: No device for ifindex 131092
[  707.247154][ T9273] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9895'.
[  707.284512][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9895'.
[  708.137266][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9908'.
[  708.178781][ T9349] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.9908'.
[  708.214095][ T9349] syzkaller0: entered promiscuous mode
[  708.224372][ T9349] syzkaller0: entered allmulticast mode
[  708.243126][ T9291] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  708.258277][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9915'.
[  708.350291][ T9366] syzkaller1: entered promiscuous mode
[  708.356253][ T9366] syzkaller1: entered allmulticast mode
[  708.364674][ T9366] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.9918'.
[  708.472590][ T9378] netlink: 212324 bytes leftover after parsing attributes in process `syz.5.9921'.
[  708.716211][ T9385] lo: Caught tx_queue_len zero misconfig
[  709.221299][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9929'.
[  709.700720][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  711.309715][ T9362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  711.583568][ T9425] hsr0: entered promiscuous mode
[  711.817584][ T9440] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  711.928637][ T9447] bond3: option lp_interval: invalid value (0)
[  712.012100][ T9447] bond3: option lp_interval: allowed values 1 - 2147483647
[  712.034168][ T9447] bond3 (unregistering): Released all slaves
[  712.056397][ T9460] IPv6: sit3: Disabled Multicast RS
[  712.064472][ T9460] sit3: entered allmulticast mode
[  712.276393][ T9480] __nla_validate_parse: 40 callbacks suppressed
[  712.276417][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9948'.
[  712.315970][ T9484] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9951'.
[  712.552996][ T9502] veth1_to_bond: entered allmulticast mode
[  712.600304][ T9507] syzkaller0: entered promiscuous mode
[  712.618900][ T9507] syzkaller0: entered allmulticast mode
[  712.658076][ T9511] veth1_to_bond: left allmulticast mode
[  712.922651][ T9530] syzkaller0: entered promiscuous mode
[  712.938004][ T9530] syzkaller0: entered allmulticast mode
[  713.064657][ T9542] lo speed is unknown, defaulting to 1000
[  713.114003][ T9531] syzkaller0: entered promiscuous mode
[  713.135232][ T9531] syzkaller0: entered allmulticast mode
[  713.171731][ T9545] lo speed is unknown, defaulting to 1000
[  713.249829][ T9559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9970'.
[  713.385025][ T5283] veth1_vlan: left promiscuous mode
[  713.404996][ T9542] xfrm0 speed is unknown, defaulting to 1000
[  713.433370][ T9542] xfrm0 speed is unknown, defaulting to 1000
[  713.624573][ T9576] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  713.702513][   T50] Bluetooth: hci3: command 0x0406 tx timeout
[  713.808321][ T9545] xfrm0 speed is unknown, defaulting to 1000
[  713.939208][ T9545] xfrm0 speed is unknown, defaulting to 1000
[  714.517088][ T9616] macvlan0: left promiscuous mode
[  714.537963][ T9616] validate_nla: 5 callbacks suppressed
[  714.537983][ T9616] netlink: 'syz.5.9982': attribute type 2 has an invalid length.
[  715.204824][ T9660] lo speed is unknown, defaulting to 1000
[  715.558884][ T9660] xfrm0 speed is unknown, defaulting to 1000
[  715.567337][ T9660] xfrm0 speed is unknown, defaulting to 1000
[  719.236445][ T4988] udevd[4988]: worker [18639] /devices/virtual/block/nbd0 is taking a long time
[  719.301689][T10397] block nbd4: Connection timed out, retrying (0/2 alive)
[  719.309425][T10397] block nbd4: Connection timed out, retrying (0/2 alive)
[  719.317292][ T1758] block nbd4: Dead connection, failed to find a fallback
[  719.324535][ T1758] block nbd4: shutting down sockets
[  719.329880][T10397] block nbd4: Connection timed out, retrying (0/2 alive)
[  719.337192][ T1758] blk_print_req_error: 138 callbacks suppressed
[  719.337282][ T1758] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  719.353280][T10397] block nbd4: Connection timed out, retrying (0/2 alive)
[  719.361098][ T1758] buffer_io_error: 138 callbacks suppressed
[  719.361115][ T1758] Buffer I/O error on dev nbd4, logical block 1, async page read
[  719.375675][ T1758] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  719.385638][ T1758] Buffer I/O error on dev nbd4, logical block 0, async page read
[  719.393806][ T1758] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  719.402960][ T1758] Buffer I/O error on dev nbd4, logical block 3, async page read
[  719.410882][ T1758] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  719.420049][ T1758] Buffer I/O error on dev nbd4, logical block 2, async page read
[  719.428336][T18638] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  719.437626][T18638] Buffer I/O error on dev nbd4, logical block 0, async page read
[  719.445537][T18638] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  719.455229][T18638] Buffer I/O error on dev nbd4, logical block 1, async page read
[  719.463372][T18638] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  719.473289][T18638] Buffer I/O error on dev nbd4, logical block 2, async page read
[  719.481649][T18638] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  719.491235][T18638] Buffer I/O error on dev nbd4, logical block 3, async page read
[  719.499556][T18638] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  719.509026][T18638] Buffer I/O error on dev nbd4, logical block 0, async page read
[  719.517443][T18638] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  719.526992][T18638] Buffer I/O error on dev nbd4, logical block 1, async page read
[  719.536120][T18638] ldm_validate_partition_table(): Disk read failed.
[  719.544303][T18638] Dev nbd4: unable to read RDB block 0
[  719.550904][T18638]  nbd4: unable to read partition table
[  719.561191][T18638] ldm_validate_partition_table(): Disk read failed.
[  719.568515][T18638] Dev nbd4: unable to read RDB block 0
[  719.575367][T18638]  nbd4: unable to read partition table
[  726.350750][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  734.181356][ T5625] Bluetooth: hci6: command 0x0406 tx timeout
[  737.235269][T16320] bridge_slave_1: left allmulticast mode
[  737.241077][T16320] bridge_slave_1: left promiscuous mode
[  737.246790][T16320] bridge0: port 2(bridge_slave_1) entered disabled state
[  737.306011][T16320] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[  737.332885][T16320] bond3 (unregistering): (slave vti0): Releasing backup interface
[  737.382244][T16320] bond2 (unregistering): (slave geneve2): Releasing active interface
[  737.403005][T16320] team0: Port device bridge2 removed
[  737.419758][T16320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  737.430190][T16320] bond0 (unregistering): Released all slaves
[  737.438329][T16320] bond1 (unregistering): Released all slaves
[  737.452669][T16320] bond2 (unregistering): Released all slaves
[  737.462645][T16320] bond3 (unregistering): Released all slaves
[  737.476594][T16320] bond4 (unregistering): Released all slaves
[  737.486290][T16320] bond5 (unregistering): Released all slaves
[  737.496796][T16320] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface
[  737.507431][T16320] bond6 (unregistering): (slave bond7): Releasing active interface
[  737.516203][T16320] bond6 (unregistering): Released all slaves
[  737.525855][T16320] bond7 (unregistering): Released all slaves
[  737.560997][T16320] tipc: Left network mode
[  737.796190][T16320] hsr_slave_0: left promiscuous mode
[  737.802029][T16320] hsr_slave_1: left promiscuous mode
[  737.807748][T16320] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  737.815918][T16320] batman_adv: batadv0: Removing interface: batadv_slave_1
[  737.827243][T16320] veth0_macvtap: left promiscuous mode
[  737.833348][T16320] veth1_vlan: left promiscuous mode
[  737.838739][T16320] veth0_vlan: left promiscuous mode
[  738.001531][T16320] team0 (unregistering): Port device team_slave_1 removed
[  738.015328][T16320] team0 (unregistering): Port device team_slave_0 removed
[  740.285943][ T9840] syzkaller0: entered promiscuous mode
[  740.317541][ T9840] syzkaller0: entered allmulticast mode
[  740.354251][ T9839] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  740.404576][ T9839] tipc: Resetting bearer <eth:syzkaller0>
[  740.428103][ T9839] tipc: Disabling bearer <eth:syzkaller0>
[  740.465779][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10011'.
[  740.681077][ T9879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  740.709148][ T9881] netlink: 'syz.2.10020': attribute type 9 has an invalid length.
[  740.726829][ T9878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  740.836743][ T9893] sctp: [Deprecated]: syz.3.10024 (pid 9893) Use of int in max_burst socket option.
[  740.836743][ T9893] Use struct sctp_assoc_value instead
[  741.078483][ T9915] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10030'.
[  741.246924][ T9934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  741.385182][ T9942] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10038'.
[  741.443911][ T9942] bond4 (unregistering): Released all slaves
[  741.529737][ T9947] netlink: 'syz.2.10040': attribute type 1 has an invalid length.
[  741.565340][ T9953] bond5 (unregistering): Released all slaves
[  741.681134][ T9947] 8021q: adding VLAN 0 to HW filter on device bond8
[  741.736286][ T9965] bond8: (slave ip6erspan0): making interface the new active one
[  741.753046][ T9965] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link
[  741.766780][ T9970] netlink: 108 bytes leftover after parsing attributes in process `syz.1.10046'.
[  741.794316][ T9970] netlink: 108 bytes leftover after parsing attributes in process `syz.1.10046'.
[  741.804344][ T9970] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10046'.
[  741.813956][ T9964] ip6tnl0: Caught tx_queue_len zero misconfig
[  741.952900][ T9981] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10048'.
[  741.999180][T13374] IPVS: starting estimator thread 0...
[  742.006805][ T9984] IPVS: sed: FWM 3 0x00000003 - no destination available
[  742.100972][ T9985] IPVS: using max 44 ests per chain, 105600 per kthread
[  742.155574][T14262] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  742.168171][T14262] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  742.179434][T14262] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  742.191949][T14262] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  742.249355][ T9997] veth1_to_bond: entered allmulticast mode
[  742.263050][ T9996] veth1_to_bond: left allmulticast mode
[  742.337731][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10052'.
[  742.351304][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10052'.
[  742.562860][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10055'.
[  742.713961][T10018] hsr0: entered promiscuous mode
[  743.098318][T10039] syzkaller0: entered promiscuous mode
[  743.141812][T10039] syzkaller0: entered allmulticast mode
[  743.394343][T10055] xt_CT: You must specify a L4 protocol and not use inversions on it
[  743.462429][T10054] netlink: 'syz.2.10068': attribute type 1 has an invalid length.
[  743.470058][T10059] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  743.473514][T10054] netlink: 'syz.2.10068': attribute type 1 has an invalid length.
[  743.611141][T10069] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  743.830890][T10080] sctp: [Deprecated]: syz.2.10078 (pid 10080) Use of int in max_burst socket option.
[  743.830890][T10080] Use struct sctp_assoc_value instead
[  744.433441][ T5625] Bluetooth: hci7: command 0x0406 tx timeout
[  744.585732][T10125] syzkaller0: entered promiscuous mode
[  744.596731][T10125] syzkaller0: entered allmulticast mode
[  744.629137][T10126] openvswitch: netlink: VXLAN extension 78 out of range max 1
[  744.785128][T10128] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  744.825001][T10128] bond4 (unregistering): Released all slaves
[  744.904352][T10147] netlink: 'syz.5.10097': attribute type 8 has an invalid length.
[  744.994654][T10154] netlink: 'syz.2.10098': attribute type 14 has an invalid length.
[  745.024565][T10154] netlink: 'syz.2.10098': attribute type 14 has an invalid length.
[  745.024669][T16301] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  745.105535][T16301] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  745.163121][T16301] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  745.204952][T16301] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  745.352678][T10173] x_tables: duplicate underflow at hook 3
[  745.620914][T10195] __nla_validate_parse: 13 callbacks suppressed
[  745.620935][T10195] netlink: 100 bytes leftover after parsing attributes in process `syz.3.10109'.
[  745.689030][T10200] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.10110'.
[  745.706237][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10111'.
[  746.089182][T10228] IPVS: sed: FWM 3 0x00000003 - no destination available
[  746.133446][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10119'.
[  746.184045][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10122'.
[  746.200654][T10243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  746.312753][T10248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10123'.
[  746.382595][T10248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10123'.
[  746.431440][T10260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10127'.
[  746.456521][T10260] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10127'.
[  746.501436][T10260] gretap0: entered promiscuous mode
[  746.506870][T10260] gretap0: entered allmulticast mode
[  746.615262][T10270] netlink: 'syz.3.10130': attribute type 1 has an invalid length.
[  746.674585][T10270] bond4: (slave gretap1): making interface the new active one
[  746.696968][T10270] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  747.490826][T10316] syzkaller0: MTU too low for tipc bearer
[  747.505113][T10316] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  747.530612][  T137] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  747.544048][T10321] netlink: 188 bytes leftover after parsing attributes in process `syz.3.10143'.
[  747.741508][T10333] IPVS: sed: FWM 3 0x00000003 - no destination available
[  747.818104][T10338] sctp: [Deprecated]: syz.3.10150 (pid 10338) Use of struct sctp_assoc_value in delayed_ack socket option.
[  747.818104][T10338] Use struct sctp_sack_info instead
[  748.032785][T10340] syzkaller0: entered promiscuous mode
[  748.064086][T10340] syzkaller0: entered allmulticast mode
[  748.666660][T10375] netlink: 'syz.1.10158': attribute type 2 has an invalid length.
[  749.029710][T10402] netlink: 'syz.5.10164': attribute type 8 has an invalid length.
[  749.474095][T10418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  749.575438][T10420] batadv0: entered promiscuous mode
[  749.585534][T10420] macsec1: entered promiscuous mode
[  749.592361][T10420] 8021q: adding VLAN 0 to HW filter on device macsec1
[  749.601986][T10420] batadv0: left promiscuous mode
[  749.725530][T10435] IPv6: NLM_F_CREATE should be specified when creating new route
[  749.755455][T10435] netlink: 'syz.1.10174': attribute type 1 has an invalid length.
[  749.775316][T10440] xt_TCPMSS: Only works on TCP SYN packets
[  750.094042][T10463] netdevsim netdevsim3: Direct firmware load for  failed with error -2
[  750.106653][T10463] netdevsim netdevsim3: Falling back to sysfs fallback for: 
[  750.211179][T10470] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  750.220423][T10470] syzkaller0: entered promiscuous mode
[  750.228277][T10470] syzkaller0: entered allmulticast mode
[  750.257053][T10470] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  750.279196][T10475] netlink: 'syz.6.10186': attribute type 12 has an invalid length.
[  750.295760][T10470] tipc: Resetting bearer <eth:syzkaller0>
[  750.323177][T10469] tipc: Resetting bearer <eth:syzkaller0>
[  750.336351][T10469] tipc: Disabling bearer <eth:syzkaller0>
[  750.356130][T10478] netlink: 'syz.5.10187': attribute type 3 has an invalid length.
[  750.511732][T10484] netlink: 'syz.6.10190': attribute type 11 has an invalid length.
[  750.562925][T10484] netlink: 'syz.6.10190': attribute type 21 has an invalid length.
[  750.604044][T10484] IPv6: NLM_F_CREATE should be specified when creating new route
[  750.726477][T10508] __nla_validate_parse: 10 callbacks suppressed
[  750.726501][T10508] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.10197'.
[  751.171443][T10529] syzkaller0: entered promiscuous mode
[  751.183116][T10529] syzkaller0: entered allmulticast mode
[  751.233798][T10531] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.10205'.
[  751.780682][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  751.948006][T10548] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  751.982031][T10548] syzkaller0: entered promiscuous mode
[  752.009383][T10548] syzkaller0: entered allmulticast mode
[  752.044827][T10554] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  752.080031][T10548] tipc: Resetting bearer <eth:syzkaller0>
[  752.100048][T10556] tipc: MTU too low for tipc bearer
[  752.113108][T10547] tipc: Resetting bearer <eth:syzkaller0>
[  752.140987][T10547] tipc: Disabling bearer <eth:syzkaller0>
[  752.186982][T10559] netlink: 'syz.2.10212': attribute type 2 has an invalid length.
[  752.218016][T10559] netlink: 'syz.2.10212': attribute type 18 has an invalid length.
[  752.289063][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10214'.
[  752.401720][T10569] sctp: [Deprecated]: syz.5.10216 (pid 10569) Use of struct sctp_assoc_value in delayed_ack socket option.
[  752.401720][T10569] Use struct sctp_sack_info instead
[  752.427213][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10218'.
[  752.587483][   T31] INFO: task syz.0.8324:3576 blocked for more than 143 seconds.
[  752.603727][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10221'.
[  752.630858][   T31]       Not tainted syzkaller #0
[  752.651153][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  752.675230][   T31] task:syz.0.8324      state:D stack:26232 pid:3576  tgid:3575  ppid:27580  task_flags:0x400140 flags:0x00080002
[  752.681722][T10591] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  752.709141][   T31] Call Trace:
[  752.726150][   T31]  <TASK>
[  752.734192][   T31]  __schedule+0x17d9/0x56c0
[  752.744495][   T31]  ? kernel_text_address+0xa5/0xe0
[  752.758675][   T31]  ? unwind_get_return_address+0x4d/0x90
[  752.770563][   T31]  ? stack_trace_save+0xa9/0x100
[  752.778335][   T31]  ? __pfx___schedule+0x10/0x10
[  752.791462][   T31]  ? rcu_is_watching+0x15/0xb0
[  752.800750][   T31]  ? rcu_is_watching+0x15/0xb0
[  752.812175][   T31]  ? lock_release+0x4b/0x3c0
[  752.822372][   T31]  ? rcu_is_watching+0x15/0xb0
[  752.832862][   T31]  schedule+0x164/0x360
[  752.846997][   T31]  schedule_preempt_disabled+0x13/0x30
[  752.866499][   T31]  __mutex_lock+0x7bf/0x1550
[  752.882106][   T31]  ? __mutex_lock+0x5d4/0x1550
[  752.889423][   T31]  ? nfsd_nl_version_set_doit+0xcd/0x7a0
[  752.895401][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  752.900487][   T31]  nfsd_nl_version_set_doit+0xcd/0x7a0
[  752.906925][   T31]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  752.913050][   T31]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  752.919424][   T31]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  752.925889][   T31]  genl_family_rcv_msg_doit+0x233/0x340
[  752.931533][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  752.937685][   T31]  ? bpf_lsm_capable+0x9/0x20
[  752.942769][   T31]  ? security_capable+0x7e/0x2c0
[  752.947902][   T31]  genl_rcv_msg+0x614/0x7a0
[  752.953090][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  752.958372][   T31]  ? ref_tracker_free+0x689/0x830
[  752.963743][   T31]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  752.969859][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  752.975765][   T31]  netlink_rcv_skb+0x226/0x4a0
[  752.981145][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  752.986323][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  752.992441][   T31]  ? down_read+0x2be/0x330
[  752.996989][   T31]  genl_rcv+0x28/0x40
[  753.001256][   T31]  netlink_unicast+0x7bb/0x940
[  753.006063][   T31]  netlink_sendmsg+0x813/0xb40
[  753.011013][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  753.016351][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  753.021719][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  753.027075][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  753.032818][   T31]  ____sys_sendmsg+0x9b9/0xa20
[  753.037624][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  753.042990][   T31]  ? lock_release+0x4b/0x3c0
[  753.047620][   T31]  ? import_iovec+0x73/0xa0
[  753.052482][   T31]  ___sys_sendmsg+0x2a5/0x360
[  753.057309][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  753.063241][   T31]  ? futex_wake+0x51b/0x5f0
[  753.067993][   T31]  ? __fget_files+0x2a/0x420
[  753.072922][   T31]  ? __fget_files+0x3a2/0x420
[  753.077637][   T31]  __x64_sys_sendmsg+0x1b1/0x290
[  753.082962][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  753.088856][   T31]  ? rcu_is_watching+0x15/0xb0
[  753.094169][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.100381][   T31]  do_syscall_64+0x174/0x580
[  753.105235][   T31]  ? trace_irq_disable+0x3b/0x140
[  753.110328][   T31]  ? clear_bhb_loop+0x40/0x90
[  753.115346][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.121996][   T31] RIP: 0033:0x7fce51d9ce59
[  753.126805][   T31] RSP: 002b:00007fce4fff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  753.135666][   T31] RAX: ffffffffffffffda RBX: 00007fce52015fa0 RCX: 00007fce51d9ce59
[  753.145159][   T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000004
[  753.153494][   T31] RBP: 00007fce51e32e6f R08: 0000000000000000 R09: 0000000000000000
[  753.161922][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  753.170041][   T31] R13: 00007fce52016038 R14: 00007fce52015fa0 R15: 00007fffd28e3d08
[  753.178824][   T31]  </TASK>
[  753.182602][   T31] INFO: lockdep is turned off.
[  753.188011][   T31] NMI backtrace for cpu 0
[  753.188035][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  753.188057][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  753.188068][   T31] Call Trace:
[  753.188076][   T31]  <TASK>
[  753.188085][   T31]  dump_stack_lvl+0xe8/0x150
[  753.188110][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  753.188132][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  753.188160][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  753.188181][   T31]  sys_info+0x135/0x170
[  753.188197][   T31]  watchdog+0xfd7/0x1030
[  753.188222][   T31]  ? watchdog+0x1c7/0x1030
[  753.188247][   T31]  kthread+0x388/0x470
[  753.188264][   T31]  ? __pfx_watchdog+0x10/0x10
[  753.188283][   T31]  ? __pfx_kthread+0x10/0x10
[  753.188299][   T31]  ret_from_fork+0x514/0xb70
[  753.188319][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  753.188337][   T31]  ? __switch_to+0xc89/0x1420
[  753.188363][   T31]  ? __pfx_kthread+0x10/0x10
[  753.188380][   T31]  ret_from_fork_asm+0x1a/0x30
[  753.188407][   T31]  </TASK>
[  753.188462][   T31] Sending NMI from CPU 0 to CPUs 1:
[  753.324350][    C1] NMI backtrace for cpu 1
[  753.324373][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  753.324393][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  753.324404][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  753.324434][    C1] Code: ec 7f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 87 21 00 fb f4 <e9> 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  753.324458][    C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246
[  753.324475][    C1] RAX: ffff88812537c000 RBX: ffffffff819a5170 RCX: 0000000080000001
[  753.324489][    C1] RDX: 0000000000000001 RSI: ffffffff8c291100 RDI: ffffffff819a5170
[  753.324502][    C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b
[  753.324514][    C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000
[  753.324526][    C1] R13: 1ffff11003b5f000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[  753.324539][    C1] FS:  0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000
[  753.324554][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  753.324567][    C1] CR2: 00007fb9a41ea2f8 CR3: 000000007ba1c000 CR4: 00000000003526f0
[  753.324585][    C1] Call Trace:
[  753.324593][    C1]  <TASK>
[  753.324599][    C1]  default_idle+0x9/0x20
[  753.324623][    C1]  default_idle_call+0x72/0xb0
[  753.324646][    C1]  do_idle+0x2e0/0x540
[  753.324672][    C1]  ? __pfx_do_idle+0x10/0x10
[  753.324696][    C1]  ? do_idle+0x4d1/0x540
[  753.324719][    C1]  cpu_startup_entry+0x43/0x60
[  753.324742][    C1]  start_secondary+0x101/0x110
[  753.324766][    C1]  common_startup_64+0x13e/0x157
[  753.324796][    C1]  </TASK>
[  753.513779][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  753.520940][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  753.530156][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  753.540455][   T31] Call Trace:
[  753.543948][   T31]  <TASK>
[  753.546951][   T31]  vpanic+0x56c/0xa60
[  753.551034][   T31]  ? __pfx___schedule+0x10/0x10
[  753.556005][   T31]  ? __pfx_vpanic+0x10/0x10
[  753.560536][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  753.566948][   T31]  panic+0xc5/0xd0
[  753.570695][   T31]  ? __pfx_panic+0x10/0x10
[  753.575201][   T31]  ? preempt_schedule_common+0x82/0xd0
[  753.581028][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  753.586412][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  753.592579][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  753.598747][   T31]  watchdog+0x1030/0x1030
[  753.603173][   T31]  ? watchdog+0x1c7/0x1030
[  753.607794][   T31]  kthread+0x388/0x470
[  753.612012][   T31]  ? __pfx_watchdog+0x10/0x10
[  753.616705][   T31]  ? __pfx_kthread+0x10/0x10
[  753.621307][   T31]  ret_from_fork+0x514/0xb70
[  753.625903][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  753.631118][   T31]  ? __switch_to+0xc89/0x1420
[  753.635887][   T31]  ? __pfx_kthread+0x10/0x10
[  753.640482][   T31]  ret_from_fork_asm+0x1a/0x30
[  753.645430][   T31]  </TASK>
[  753.648839][   T31] Kernel Offset: disabled
[  753.653442][   T31] Rebooting in 86400 seconds..