last executing test programs:

3m59.80451481s ago: executing program 2 (id=1832):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
recvmmsg(r1, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x8000000}], 0x1, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) (async, rerun: 64)
r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000240)=ANY=[@ANYBLOB="150000005500bbca000000000000000007"], 0x18}}, 0x0) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000400), &(0x7f0000000440)=0x8)
sendto$inet6(r3, 0x0, 0x0, 0x1, &(0x7f0000000240)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async)
sendmmsg$sock(r0, &(0x7f0000000840)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0xfffffffd, 0x3, 0x20000004, 0xfffffffe, {0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80), 0x18}}], 0x0, 0x85)

3m58.775992968s ago: executing program 2 (id=1840):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000200), 0x4)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x28, 0x140b, 0x1, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4)

3m58.631050013s ago: executing program 2 (id=1841):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x468, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x270, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0x3, 0x36, 0x3, 0x36, 0x48]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x5, 0x9, 0x5, 0x3ff, 0x2, 0xaf4, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8001, 0xd95d, 0x650, 0x3, 0x9, 0x900, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x5, 0x6c, 0x6, 0x9, 0x5, 0x5, 0x48, 0x48, 0x54, 0x1, 0x2, 0xb, 0x6c, 0x6c, 0xb, 0x16, 0x0, 0x2, 0x30, 0x16, 0x3, 0x1, 0x30, 0x9, 0x1, 0x6, 0xb, 0x9, 0x3, 0x30, 0x36]}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x2b3, 0xfff8, 0x400, 0x588, 0x2f, 0xe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3ff, 0x9, 0x6, 0x3ff, 0xf2d8, 0x1, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x5}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x4}, {0x7, 0x4}, {0x7}, {0x2, 0x1}, {0x1}, {0x3, 0xa}, {0x6, 0x1}, {0x6, 0x2}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x7}, {0x1, 0x3}, {0x1, 0x5}, {0x6, 0x8}, {0x1, 0x8}, {0x5}, {0x5, 0x5}, {0x2, 0x6}, {0x1, 0x6}, {0x0, 0x9}, {0x0, 0x6}, {0x7, 0x6}, {0x1, 0x1}, {0x3, 0x9}, {0x3, 0x3}, {0x4, 0x7}, {0x4}, {0x1, 0x9}, {0x5, 0x9}, {}, {0x2, 0x1}, {0x3}, {0x2, 0x7}, {0x5, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x6c, 0x6c, 0x16, 0x1b, 0x6, 0x3, 0xe, 0x16, 0x18, 0x1d, 0x60, 0x3, 0x2, 0x30, 0x16, 0x60, 0x12, 0x48, 0x16, 0x1b, 0x16, 0x16, 0x6c]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x2, 0x3}, {0x5, 0x5}, {0x6}, {0x0, 0x3}, {0x4, 0x8}, {0x1, 0x7}, {0x2, 0x9}, {0x4, 0x6}, {0x0, 0x5}, {0x3, 0x2}, {0x3}, {0x4, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x0, 0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x6, 0x6}, {0x5, 0x5}, {0x6, 0x8}, {0x0, 0x9}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x7}, {0x1, 0x1}]}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9c, 0x4, 0x200, 0xa, 0x5, 0xe9e, 0xc123]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x4}, {0x7, 0x2}, {0x4, 0x9}, {0x7, 0xb}, {0x0, 0xa}, {0x3, 0x1}, {0x4, 0x8}, {}, {0x2, 0x2}, {0x0, 0x8}, {0x4, 0x4}, {0x7}, {0x1, 0x9}, {0x2}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0xa}, {0x5, 0xa}, {0x6, 0x9}, {0x4, 0x6}, {0x1, 0x3}, {0x3, 0x1}, {0x6, 0x6}, {0x4, 0x5}, {0x4, 0xa}, {0x6, 0x5}, {0x6, 0xa}, {}, {0x2}, {0x1, 0xa}, {0x6, 0x8}, {0x0, 0x7}, {0x5, 0x4}, {0x4}, {0x6, 0x5}, {0x4, 0x4}, {0x2, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x2, 0x4}, {0x3, 0xc}, {0x2, 0x6}, {0x1, 0x8}, {0x3, 0xa}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x1, 0x3}, {0x4, 0x8}, {0x4, 0x2}, {0x3, 0x6}, {0x6, 0x7}, {0x1, 0x4}, {0x3, 0x7}, {0x6, 0x3}, {0x3, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6478, 0x1f, 0x9, 0x3, 0x2, 0xff, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x6, 0x3}, {0x0, 0x2}, {0x2, 0xa}, {0x1, 0x7}, {0x3, 0x9}, {0x7, 0xa}, {0x7, 0x7}, {0x7, 0xa}, {0x0, 0x3}, {0x6, 0x1}, {0x2, 0x6}, {0x1, 0xa}, {0x7, 0xa}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x4, 0x5}, {0x4, 0x1}, {0x0, 0xa}, {0x7, 0x7}, {0x5, 0x6}, {0x6, 0x3}, {0x7}, {0x3, 0x6}, {0x5, 0x7}, {0x5, 0x2}, {0x2, 0x5}, {0x6, 0x2}, {0x4, 0x9}, {0x0, 0x1}, {0x2, 0x2}, {0x7, 0x3}, {0x1, 0xa}, {0x1, 0x9}, {0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x3, 0x8}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x0, 0xa}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x9}, {0x2, 0x8}, {0x6, 0x3}, {0x4}, {0x5, 0x3}, {0x0, 0x3}, {0x1, 0x9}, {0x7, 0xa}, {0x1, 0x1}, {0x1, 0x1e}, {0x5, 0x6}, {0x5, 0x9}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0x6}, {0x3, 0x4}, {0x4}, {0x3, 0x1}, {0x5, 0x9}, {0x4, 0x7}, {0x7, 0x1}, {0x6, 0xa}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x3}, {0x4, 0x7}, {0x3, 0x2}, {0x7, 0x1}, {0x6, 0x5}, {0x1}, {0x0, 0x7}, {0x5, 0x7}, {0x1, 0x7}, {0x2}, {0x7, 0x8}, {0x6, 0x6}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x7}, {0x4, 0x1}, {0x7, 0xa}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x4, 0xa}, {0x4}, {0x7, 0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x2, 0x1}, {0x1, 0x6}, {0x0, 0x4}, {0x5, 0x3}, {0x0, 0x1}, {0x6, 0x5}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x6, 0xfff8, 0x6, 0xd, 0x1, 0x3, 0x2000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xffce, 0x71e5, 0x0, 0x2, 0x8, 0x6, 0xe4e6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1dc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x81, 0x2, 0xe, 0xfff8, 0x8, 0x1, 0xff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x0, 0x36, 0x18, 0x9, 0x9, 0x30, 0x4, 0x6c, 0x7b, 0xc, 0x1, 0x15, 0x6c, 0x48, 0x6, 0x60, 0x18, 0x48, 0x9]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4, 0x60, 0x30, 0xb, 0x3, 0x30, 0x24, 0x12, 0x6c, 0x6c, 0x6, 0x30, 0x24, 0x5, 0x60, 0x36, 0x6c, 0x36, 0x1, 0x27, 0xd, 0x24, 0x6, 0x0]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0xfff8, 0xffff, 0x5, 0x6, 0x0, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1b1, 0x800, 0x6, 0x0, 0xc, 0xf, 0xe47, 0x2e2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x36, 0x2, 0x6, 0xc, 0x6, 0x12, 0x9, 0x5, 0x24, 0x19, 0x18, 0x1e, 0x16, 0x60, 0x48]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb3, 0x6, 0xff, 0xfff8, 0xf597, 0x4, 0xb397, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x9, 0x9e, 0x895, 0x7, 0x74]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x1}, {0x4, 0x1}, {0x3, 0x7}, {0x0, 0x6}, {0x5, 0x7}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x3}, {0x2, 0x6}, {0x1, 0x3}, {0x2}, {0x0, 0x4}, {0x7, 0xa}, {0x1, 0x1}, {0x7, 0x6}, {0x7, 0x3}, {0x3, 0x9}, {0x2, 0x1}, {0x6, 0x3}, {0x6, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x5, 0x3}, {0x7, 0x5}, {0x2, 0x9}, {0x1, 0x9}, {}, {0x7, 0x7}, {0x6, 0x3}, {0x2, 0x1}, {0x7, 0x8}, {0x7, 0x6}, {0x0, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x1, 0x6}, {0x5, 0x9}, {0x1, 0x2}, {0x0, 0x5}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x6}, {0x2, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x4, 0x5}, {0x1, 0x9}, {0x4, 0x8}, {0x3, 0xa}, {0x4, 0x6}, {0x2, 0x4}, {0x0, 0x8}, {0x0, 0x6}, {0x6, 0x2}, {0x3}, {0x3, 0x1}, {0x4, 0x6}, {0x4, 0x4}, {0x7}, {0x7, 0x5}, {0x7, 0x4}, {0x1, 0xa}, {0x5, 0x5}, {0x0, 0x1}, {0x2, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc000, 0x7ff, 0xfd, 0x73a, 0x9, 0x8, 0x3ff, 0xc]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1ff, 0x2, 0x0, 0x16, 0x81, 0x6e8, 0x5]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x0, 0x3, 0x6, 0x30, 0x1b, 0x48, 0x6c, 0x6, 0x1b, 0xb, 0x3, 0x60, 0x3, 0x4]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0x7}, {0x2, 0x5}, {0x5, 0x8}, {0x1, 0x5}, {0x1, 0x4}, {}, {0x1, 0x5}, {0x1, 0x8}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x1}, {0x1, 0xa}, {0x2, 0x4}, {0x6, 0x7}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x5}, {0x3, 0x8}, {0x3, 0x6}, {0x1, 0x3}, {0x0, 0x4}, {0x1}, {0x3, 0x7}, {0x7, 0x7}, {0x5, 0x3}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x1}, {0x7, 0x7}, {0x6, 0x8}, {0x2, 0x3}, {}, {0x7, 0x2}, {0x7}, {0x5, 0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x6, 0x8}, {0x7, 0x7}, {0x2, 0x2}, {0x1, 0x3}, {0x4, 0x7}, {0x6}, {0x4, 0x4}, {0x6, 0x2}, {0x2, 0x9}, {0x5, 0x2}, {0x3, 0x4}, {0x5, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x5, 0x8}, {0x2}, {0x4}, {0x4, 0x6}, {0x7, 0x6}, {0x2, 0xa}, {0x0, 0x9}, {0x1, 0x1}, {0x2}, {0x5, 0x4}, {0x7, 0x7}, {0x7, 0x2}, {0x4, 0x1}, {0x4, 0x7}, {0x6, 0x1}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x9}]}]}]}]}, 0x468}, 0x1, 0x0, 0x0, 0x10000}, 0x40000)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x6, 0x42}, 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x6, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r3}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r3}, 0x38)

3m57.659817993s ago: executing program 2 (id=1846):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0x15}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}, @IFLA_MTU={0x8}]}, 0x44}, 0x9}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x5421, 0x110e22ffff)
ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0x1c, 0x29, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1716c2e9"]}]}, 0x1c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd700000000000070000000c0001800508020001100000dec5e67d7f86d45791b6b1ae7780e30243535a1a8dff4ea44ac9bd4517a70e0cb24505639d9fdcb26d231c00f0d9de79c0088ba623c735b88900525ebee54cadc6330721afff33142a087a46d3996469867e18a14dcde8e5eb5690eae84c7d16c87a0da0929e4a6c5f63bff14561ed9e7f51ee5268c915d655a55124c6a4a4004e6f215d568bde6e7e96b6b4e3b773f74d11cb47e68d46"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) (async)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0xb0, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000004) (async)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r2], 0x158}, 0x1, 0xba01}, 0x44)

3m57.387170651s ago: executing program 2 (id=1848):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001880)=@raw={'raw\x00', 0x3c1, 0x3, 0x12c0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11f0, 0x2e0, 0x2e0, 0x11f0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@loopback, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x1, 0x11, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1320)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002a00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000002700)="e0b9547ed387dbe9abc86f5b7de8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r2)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r5, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1508f05453927e13e43ffc2f4482bd0fc", 0x4}, {&(0x7f0000000140)="1a36c585040053c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d661416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cd665a14bd1b7ad319101e9beae62faa71a5f2383e963aba417592d7a84958", 0x7e}], 0x62)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x401c5820, &(0x7f0000000080))
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000e09e0b6c150000e29f21efea01be8b14f54c7d0157add576e484e1e070fa13e70023f8f70ac2b4bc25ccd5845cbc1faecf334e77d2edf2c500000001000000000000000000", @ANYRES16=r4, @ANYBLOB="000128bd7000fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4001894)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f00000002c0)={{0x2b, @broadcast, 0x4e24, 0x3, 'none\x00', 0x3, 0x88, 0x7e}, {@empty, 0x4e20, 0x0, 0x3, 0x1, 0x80000000}}, 0x44)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r2)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001880)=@raw={'raw\x00', 0x3c1, 0x3, 0x12c0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11f0, 0x2e0, 0x2e0, 0x11f0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@loopback, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x1, 0x11, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1320) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002a00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000002700)="e0b9547ed387dbe9abc86f5b7de8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r2) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
writev(r5, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1508f05453927e13e43ffc2f4482bd0fc", 0x4}, {&(0x7f0000000140)="1a36c585040053c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d661416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cd665a14bd1b7ad319101e9beae62faa71a5f2383e963aba417592d7a84958", 0x7e}], 0x62) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r6, 0x401c5820, &(0x7f0000000080)) (async)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000e09e0b6c150000e29f21efea01be8b14f54c7d0157add576e484e1e070fa13e70023f8f70ac2b4bc25ccd5845cbc1faecf334e77d2edf2c500000001000000000000000000", @ANYRES16=r4, @ANYBLOB="000128bd7000fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4001894) (async)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f00000002c0)={{0x2b, @broadcast, 0x4e24, 0x3, 'none\x00', 0x3, 0x88, 0x7e}, {@empty, 0x4e20, 0x0, 0x3, 0x1, 0x80000000}}, 0x44) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r2) (async)

3m57.275505464s ago: executing program 2 (id=1851):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20048000)

3m42.158931928s ago: executing program 32 (id=1851):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20048000)

2m32.824161552s ago: executing program 1 (id=2908):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xffffffb3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x7d, &(0x7f0000000080), &(0x7f00000000c0)=0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r2], 0x68}}, 0x0)

2m32.129154101s ago: executing program 1 (id=2916):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000200)=0x2, 0x4)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

2m31.657609843s ago: executing program 1 (id=2924):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
connect$rose(0xffffffffffffffff, &(0x7f0000001440)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async)
ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000001c0)) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async)
r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0})
recvmmsg(r3, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r7, 0x29, 0xcf, &(0x7f00000013c0), &(0x7f0000001400)=0x4) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r9, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x5, 0x0) (async)
socket(0x5, 0x80000, 0x10001) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x54, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x1}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x6}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xffff}, @TCA_HHF_ADMIT_BYTES={0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x3}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x273}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x486}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x4}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x400000}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x6}]}}]}, 0x80}}, 0x20040084)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x805) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f00000014c0)={0x48, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x2fe20b94}]}]}, 0x48}}, 0x10)

2m31.446837477s ago: executing program 1 (id=2929):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYRESOCT], &(0x7f0000000340)='syzkaller\x00', 0xb7a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
r0 = socket(0x2, 0x80805, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x2c060000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
sendmsg$sock(r2, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e21, 0x41d, @mcast2}, 0x80, 0x0}, 0x80)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r4 = socket$tipc(0x1e, 0x5, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r5, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x0, 0x1}}], 0x10)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0)
sendmsg$tipc(r4, &(0x7f0000000980)={&(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc001}, 0x800)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003a00)=@newtfilter={0x1300, 0x2c, 0xd3f, 0x30bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xa}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x12d0, 0x2, [@TCA_BASIC_EMATCHES={0x12cc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1298, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x204, 0x3, 0x0, 0x0, {{0x5, 0x9, 0x1000}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x101, 0x5, "673b8d6ecc5c5c73e2b8db3aac75439ea8875aebb7b6f20f753d2a6f9e7a83bb9ffce9776cfd69b8d089f6fdf1cb4c58a4c163d8d53578c2d8d465013fd23ec6ab123c5417c17043ae2ec91a28ba5122a6d2f44f76ee120c4b7077ec05aa355878d4c1c4555f7767592c379eed0e3daef239d859ee9c5100305041535e27acf9cd5da02b2033ed862db198108ff7119d6d0be60628ca471a6c454ff84c9d316ee59550a9c0b85569480120626be0f03ebbf814559930a1a2fdec1daa3874e3e73dac4e1efb1ff148359aad5def77338c78097ffad58f7bbaab1e09f4409067b0ab49b1917d2ba7eedc4990b13acb76ccdb5861374d8a992b8968833e26"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xd}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xb0, 0x5, "6ffdedbccc3569046303d47f822ed1b25eba9059e91eafcdb7a2c6916822fb1b0163ddec2289f26a83b8831edfa60f34bc1291e33e4657e881642b7f671d8bdbf0377cba21a11724fe6ae1e8e415ec3f3e88b3bbc074e89c3630d497924f2a00bed1fe3876ffa3dd401aa8a873fe1acfd241b89bcb94eb6f3cb7b046853909b96102ea761fb87e57304c7a497ae6e9e6ed2c7496c96d75be91e2d71cad4df70ed4c8f6b608d4a45c88b01653"}]}}, @TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x7, 0x4, 0xfffb}, [@TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="b75d", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR='+']}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0xd, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="55c70d77"]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="bd6c1bf4a0a69b7c0f", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x7, 0x9, 0x200}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xec, 0x3, 0xfff7}, {0x2, 0xffffca91, 0x7da8972b, 0x2}}}, @TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x5}, "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"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7fff, 0x8, 0x1ff}, {0x4, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="e5596946741d77c9cab1", @TCF_META_TYPE_VAR="2327b8", @TCF_META_TYPE_VAR="aa"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x1300}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2m30.599589345s ago: executing program 1 (id=2934):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000016c0)={@remote, 0x0, 0x0, 0x2, 0x0, 0x9, 0xa}, &(0x7f0000001700)=0x20)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'lo\x00', &(0x7f00000002c0)=@ethtool_cmd={0x20, 0x6, 0xa, 0x9, 0xd9, 0x6, 0x9, 0xb1, 0x2, 0x40, 0x7fff, 0x100, 0xfffc, 0x97, 0x9, 0x4, [0x1, 0x4]}})
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r4], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r5, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="820d62", 0x3}], 0x1}}], 0x1, 0x4404c880)
sendto$inet6(r5, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x61e2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'})

2m26.135610106s ago: executing program 1 (id=2977):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xc66, 0x8, 0x2}, {0x4, 0x5, 0x3}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20049090}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

2m11.075389745s ago: executing program 33 (id=2977):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xc66, 0x8, 0x2}, {0x4, 0x5, 0x3}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20049090}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

1.975219466s ago: executing program 5 (id=4280):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0x3, 0x8, 0x2000008, {0x8, 0x0, 0x6, 0x3ff, 0x1, 0x7ff}, {0x4, 0x2, 0x0, 0x100, 0xfae5, 0x1}, 0x18, 0x6c, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x6, 0xed08, 0xe8f, 0x4, 0x8, 0x2, 0x8, 0x2, 0x40, 0x94f, 0x9, 0x5, 0x4, 0x4, 0x9, 0x1000, 0x0, 0x9, 0xfffffff9, 0x300, 0x81, 0x1, 0x3, 0x0, 0x1ff, 0x65d, 0x4, 0x4, 0xa9c3, 0x4, 0x80000001, 0x9, 0x7, 0x2, 0x401, 0x2c440000, 0xc, 0x0, 0x7, 0x3, 0x8, 0x0, 0x2, 0x0, 0xfffffff7, 0x3, 0x5, 0x7, 0xfffff170, 0x7, 0x0, 0x0, 0x5, 0x2, 0x2, 0x7b, 0x1, 0x3, 0x401, 0x9, 0x80000001, 0x1aef, 0x2, 0xffff, 0x3, 0xc, 0x0, 0x8, 0xffffff80, 0x4000000, 0x10, 0x4, 0x1, 0x4, 0x8, 0x6, 0x68f0, 0x3, 0x9, 0x1, 0xf11, 0x7, 0x0, 0x8, 0x9237, 0x7, 0x7fffffff, 0xffffffa4, 0x2, 0x8, 0x9, 0x80000000, 0x1, 0x1, 0x8, 0x10000, 0x1, 0xfffffff7, 0x8, 0x800, 0x5, 0xfffffffd, 0x3b57, 0x2, 0x6, 0x2, 0x2fa4, 0x8, 0x80000000, 0x9, 0x45, 0x8, 0x0, 0x240c554f, 0xdf42, 0x7fffffff, 0x80, 0x10, 0x6, 0x5, 0xb9a, 0xc, 0x8001, 0x7, 0xff, 0x5, 0x10001, 0x38f9, 0x1, 0x10, 0xffff, 0x1c8, 0x5, 0x8000, 0x702ce66, 0x1, 0x8001, 0x0, 0x5, 0x200000, 0xff, 0x33, 0x8, 0x0, 0x4, 0x6, 0x61d, 0x2, 0xf, 0x1, 0x80000000, 0x1, 0x2, 0x80000000, 0x6, 0x7, 0x10c, 0xffffffff, 0xc, 0x9, 0x10, 0x7, 0xffffffdb, 0x1, 0x0, 0x1, 0x5, 0xff, 0x3, 0x7f, 0x80000001, 0x2, 0x4, 0x3, 0xd5, 0x8, 0xffffffcd, 0xd, 0x8, 0x3, 0x4, 0x5, 0x400, 0x7501, 0x4, 0xfffffffd, 0x7, 0x10000, 0x4, 0x8, 0x406, 0x8, 0x8000, 0x7fffffff, 0x0, 0x7, 0x7, 0x3ff, 0x1, 0x5bb92b8f, 0x9, 0x6, 0x6, 0x8, 0x0, 0x0, 0x6, 0x1, 0x1d, 0x2, 0x1bb4, 0x6, 0x7ad, 0x50, 0x0, 0x5, 0xffffffff, 0x3, 0x4e2, 0x7, 0x2, 0x6, 0x4, 0x10001, 0xff, 0xd3, 0x7f, 0x8, 0x9, 0x10, 0xffffffff, 0x200, 0x1, 0xf, 0x6, 0xfffff58b, 0x202, 0x4, 0x120, 0x9, 0x0, 0x3, 0xa, 0x4, 0x4, 0x5, 0x7, 0x4, 0x8, 0x4, 0x6f, 0x5, 0x8, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xf, 0x7f, 0xc1fc, 0x3, 0x3, 0x200, 0x77c0, 0x50c71046, 0x6, 0x4, 0x8, 0x67, 0xfffffffa, 0x39a, 0x4, 0xffffffff, 0x3, 0x8, 0xfffffffc, 0x1, 0x2, 0x3, 0x2, 0x9, 0x8, 0xfffffff8, 0x9, 0xffffffff, 0x7ff, 0x7, 0x8001, 0x5364, 0x6ec, 0x401, 0x1, 0x8001, 0x3, 0xc0, 0x117, 0x200, 0x4, 0x5, 0x6, 0x5, 0x4, 0x4040000, 0xffffffbc, 0x5, 0x10, 0xffff, 0xb65, 0x6, 0x2, 0x2, 0xfffffffd, 0x8, 0x9, 0x4, 0x6, 0xe800, 0x9, 0x80000001, 0x80000000, 0xa, 0x0, 0x2, 0x80000001, 0x8001, 0x8, 0x29d1, 0x0, 0x200, 0xfff, 0x0, 0x3, 0x3a1, 0x1, 0x1, 0x7ff, 0x5, 0x4, 0x800, 0x5, 0x2, 0x0, 0x6, 0xffff, 0x100, 0xef9e, 0x4, 0x5, 0x6fbb, 0x7, 0x8001, 0x9, 0x7e, 0x8, 0xe3c, 0x0, 0x4, 0x8001, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x8, 0x101, 0x2, 0x0, 0x2, 0x1, 0x1, 0x4, 0x9, 0x4, 0x7, 0x9, 0xee, 0x8ee1, 0x9, 0x1, 0x9, 0x0, 0x60cd7584, 0x6, 0x553, 0x58ff, 0x9, 0xffffff80, 0xffff91c6, 0x8d, 0x9, 0x2, 0x7, 0x3, 0x4, 0x7f, 0x1, 0x800, 0x100, 0x71ef, 0xffffff9d, 0x6, 0x9, 0xebae, 0xfffffb39, 0xff, 0x2, 0x6, 0xfff, 0x4, 0x7, 0x200, 0x7ff, 0x7, 0x80000000, 0xfffffffa, 0x8, 0x8, 0x8001, 0x80, 0x3, 0xe70, 0x5, 0x9, 0x8, 0x5, 0x6, 0x9, 0xff0, 0x8, 0x7, 0x3, 0x102, 0x101, 0x424, 0x6, 0xffff208f, 0x4, 0x1, 0x81, 0x11c, 0x6, 0xfffff9e2, 0x3, 0x9, 0x400, 0x7fff, 0x6, 0x2, 0x80, 0xece, 0x8, 0x4, 0x0, 0x6842a920, 0xd3, 0x7, 0x7, 0x2, 0x7, 0x2, 0x2, 0x9, 0x1, 0x2, 0xc, 0x7, 0x7f, 0x0, 0xffffffff, 0xfff, 0xff, 0x7, 0x2, 0x7e84, 0x0, 0x1, 0xb, 0x5, 0x0, 0x0, 0x0, 0x7, 0x8, 0x5, 0x40, 0x8, 0xffffffff, 0xfffffff9, 0xfffffffb, 0xd, 0xfffffffe, 0x9, 0x1000, 0x8001, 0x7fffffff, 0x3, 0xff, 0x200, 0x5, 0x20d894, 0x3, 0x3, 0x8, 0x7, 0x8, 0xe1, 0x81, 0x9, 0x6]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0x3, 0x8, 0x2000008, {0x8, 0x0, 0x6, 0x3ff, 0x1, 0x7ff}, {0x4, 0x2, 0x0, 0x100, 0xfae5, 0x1}, 0x18, 0x6c, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x6, 0xed08, 0xe8f, 0x4, 0x8, 0x2, 0x8, 0x2, 0x40, 0x94f, 0x9, 0x5, 0x4, 0x4, 0x9, 0x1000, 0x0, 0x9, 0xfffffff9, 0x300, 0x81, 0x1, 0x3, 0x0, 0x1ff, 0x65d, 0x4, 0x4, 0xa9c3, 0x4, 0x80000001, 0x9, 0x7, 0x2, 0x401, 0x2c440000, 0xc, 0x0, 0x7, 0x3, 0x8, 0x0, 0x2, 0x0, 0xfffffff7, 0x3, 0x5, 0x7, 0xfffff170, 0x7, 0x0, 0x0, 0x5, 0x2, 0x2, 0x7b, 0x1, 0x3, 0x401, 0x9, 0x80000001, 0x1aef, 0x2, 0xffff, 0x3, 0xc, 0x0, 0x8, 0xffffff80, 0x4000000, 0x10, 0x4, 0x1, 0x4, 0x8, 0x6, 0x68f0, 0x3, 0x9, 0x1, 0xf11, 0x7, 0x0, 0x8, 0x9237, 0x7, 0x7fffffff, 0xffffffa4, 0x2, 0x8, 0x9, 0x80000000, 0x1, 0x1, 0x8, 0x10000, 0x1, 0xfffffff7, 0x8, 0x800, 0x5, 0xfffffffd, 0x3b57, 0x2, 0x6, 0x2, 0x2fa4, 0x8, 0x80000000, 0x9, 0x45, 0x8, 0x0, 0x240c554f, 0xdf42, 0x7fffffff, 0x80, 0x10, 0x6, 0x5, 0xb9a, 0xc, 0x8001, 0x7, 0xff, 0x5, 0x10001, 0x38f9, 0x1, 0x10, 0xffff, 0x1c8, 0x5, 0x8000, 0x702ce66, 0x1, 0x8001, 0x0, 0x5, 0x200000, 0xff, 0x33, 0x8, 0x0, 0x4, 0x6, 0x61d, 0x2, 0xf, 0x1, 0x80000000, 0x1, 0x2, 0x80000000, 0x6, 0x7, 0x10c, 0xffffffff, 0xc, 0x9, 0x10, 0x7, 0xffffffdb, 0x1, 0x0, 0x1, 0x5, 0xff, 0x3, 0x7f, 0x80000001, 0x2, 0x4, 0x3, 0xd5, 0x8, 0xffffffcd, 0xd, 0x8, 0x3, 0x4, 0x5, 0x400, 0x7501, 0x4, 0xfffffffd, 0x7, 0x10000, 0x4, 0x8, 0x406, 0x8, 0x8000, 0x7fffffff, 0x0, 0x7, 0x7, 0x3ff, 0x1, 0x5bb92b8f, 0x9, 0x6, 0x6, 0x8, 0x0, 0x0, 0x6, 0x1, 0x1d, 0x2, 0x1bb4, 0x6, 0x7ad, 0x50, 0x0, 0x5, 0xffffffff, 0x3, 0x4e2, 0x7, 0x2, 0x6, 0x4, 0x10001, 0xff, 0xd3, 0x7f, 0x8, 0x9, 0x10, 0xffffffff, 0x200, 0x1, 0xf, 0x6, 0xfffff58b, 0x202, 0x4, 0x120, 0x9, 0x0, 0x3, 0xa, 0x4, 0x4, 0x5, 0x7, 0x4, 0x8, 0x4, 0x6f, 0x5, 0x8, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xf, 0x7f, 0xc1fc, 0x3, 0x3, 0x200, 0x77c0, 0x50c71046, 0x6, 0x4, 0x8, 0x67, 0xfffffffa, 0x39a, 0x4, 0xffffffff, 0x3, 0x8, 0xfffffffc, 0x1, 0x2, 0x3, 0x2, 0x9, 0x8, 0xfffffff8, 0x9, 0xffffffff, 0x7ff, 0x7, 0x8001, 0x5364, 0x6ec, 0x401, 0x1, 0x8001, 0x3, 0xc0, 0x117, 0x200, 0x4, 0x5, 0x6, 0x5, 0x4, 0x4040000, 0xffffffbc, 0x5, 0x10, 0xffff, 0xb65, 0x6, 0x2, 0x2, 0xfffffffd, 0x8, 0x9, 0x4, 0x6, 0xe800, 0x9, 0x80000001, 0x80000000, 0xa, 0x0, 0x2, 0x80000001, 0x8001, 0x8, 0x29d1, 0x0, 0x200, 0xfff, 0x0, 0x3, 0x3a1, 0x1, 0x1, 0x7ff, 0x5, 0x4, 0x800, 0x5, 0x2, 0x0, 0x6, 0xffff, 0x100, 0xef9e, 0x4, 0x5, 0x6fbb, 0x7, 0x8001, 0x9, 0x7e, 0x8, 0xe3c, 0x0, 0x4, 0x8001, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x8, 0x101, 0x2, 0x0, 0x2, 0x1, 0x1, 0x4, 0x9, 0x4, 0x7, 0x9, 0xee, 0x8ee1, 0x9, 0x1, 0x9, 0x0, 0x60cd7584, 0x6, 0x553, 0x58ff, 0x9, 0xffffff80, 0xffff91c6, 0x8d, 0x9, 0x2, 0x7, 0x3, 0x4, 0x7f, 0x1, 0x800, 0x100, 0x71ef, 0xffffff9d, 0x6, 0x9, 0xebae, 0xfffffb39, 0xff, 0x2, 0x6, 0xfff, 0x4, 0x7, 0x200, 0x7ff, 0x7, 0x80000000, 0xfffffffa, 0x8, 0x8, 0x8001, 0x80, 0x3, 0xe70, 0x5, 0x9, 0x8, 0x5, 0x6, 0x9, 0xff0, 0x8, 0x7, 0x3, 0x102, 0x101, 0x424, 0x6, 0xffff208f, 0x4, 0x1, 0x81, 0x11c, 0x6, 0xfffff9e2, 0x3, 0x9, 0x400, 0x7fff, 0x6, 0x2, 0x80, 0xece, 0x8, 0x4, 0x0, 0x6842a920, 0xd3, 0x7, 0x7, 0x2, 0x7, 0x2, 0x2, 0x9, 0x1, 0x2, 0xc, 0x7, 0x7f, 0x0, 0xffffffff, 0xfff, 0xff, 0x7, 0x2, 0x7e84, 0x0, 0x1, 0xb, 0x5, 0x0, 0x0, 0x0, 0x7, 0x8, 0x5, 0x40, 0x8, 0xffffffff, 0xfffffff9, 0xfffffffb, 0xd, 0xfffffffe, 0x9, 0x1000, 0x8001, 0x7fffffff, 0x3, 0xff, 0x200, 0x5, 0x20d894, 0x3, 0x3, 0x8, 0x7, 0x8, 0xe1, 0x81, 0x9, 0x6]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

1.774584641s ago: executing program 5 (id=4284):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, <r0=>0xffffffffffffffff}, 0x4)
r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x800)
sendfile(r0, r1, &(0x7f0000000100)=0x5, 0xd2)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000140)={'macvlan0\x00', {0x2, 0x4e24, @remote}})
r2 = socket$netlink(0x10, 0x3, 0x7)
ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x12, r0, 0xfcd06000)
r3 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x10001, 0x0, 0x3, 0xd03, 0xffffffffffffbdad, 0x6]}, &(0x7f0000000240)=0x78)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x1}, 0x8)
epoll_create1(0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x5, [@enum={0xa, 0x8, 0x0, 0x6, 0x4, [{0xc, 0x10001}, {0x3, 0xfffffff7}, {0xc, 0x401}, {0x5, 0x49}, {0x4}, {0x3, 0x2}, {0xa, 0x10000}, {0x4, 0x3}]}, @float={0x4, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x5f, 0x5f, 0x5f]}}, &(0x7f0000000340)=""/134, 0x75, 0x86, 0x1, 0x243c5d2}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r5, 0x20, &(0x7f00000004c0)={&(0x7f0000000440)=""/10, 0xa, <r6=>0x0, &(0x7f0000000480)=""/16, 0x10}}, 0x10)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r7, &(0x7f0000000740)={&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/21, 0x15}, {&(0x7f0000000600)=""/9, 0x9}, {&(0x7f0000000640)=""/35, 0x23}], 0x3, &(0x7f00000006c0)=""/113, 0x71}, 0x40000002)
sendto$inet(r4, &(0x7f0000000780)="33bd093582753436086f104697e30a9af15024d035efa510f2b02ef84f4113dc6ab56f8e26dcf1da05426e7c0be8755faa9bbd36fe36ac9d450438a65c07800f400bb816cb2e4b3276bdea70e1f2659afb5ffa18dca93ecceee92ad205e9a6f75810f3b6f02b756ce9", 0x69, 0x20000000, &(0x7f0000000800)={0x2, 0x4e23, @local}, 0x10)
sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfe}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xb}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x80d5)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x3f7, 0x200, 0x70bd26, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20004804)
sendmmsg(r2, &(0x7f0000001440)=[{{&(0x7f0000000a80)=@hci={0x1f, 0x1, 0x1}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b00)="c82491b3d9828f3a935a66cf1f774214b305b2147532354572e85a033224bcfef1781d485952c1503c2b3b3bd2c1703e4e2eaf2365932d68fb737e1fe786e0f1dec509da5dcb06c465ede08a587ee3a4bfa678d51f98c7ad7fba0246b3ea01f04ad8e02d5a62aca4927c8c1a2766411291a47a651efc9c517b257093bf899c2c733ab0d782cf6cef75eb1c88db7e5410f9e0a2d32dc6559d760c126e3ac2d1bdc1cebbeea47def78a4525d572d07c9182ca9f739d6617c5e52e27a071fde6fccc73c08e2", 0xc4}, {&(0x7f0000000c00)="04684e1c2f2297312fb45dd9ddf95f680770d39b36dcfcee1e94aeb3e03fc03c6fc945c01073238f6d08915b4d744d4305a88b2e1ebdc71222dfb9614e4dc71c5b15d2336597e2f3436e06f0809c045495243a51bee0132e334028719bc7d2ebcf07d1876bb2a5f98a8a431e94c0021c", 0x70}, {&(0x7f0000000c80)="127290ad47ffe9400384c2c816e3ee52cc1a5ffef512848db941fbf73385ee22aa0175c7b3b0f98ad84b857eb5e4094dd5d31d82a3bdd3f292f4c1a474151857658a3c9436d9835f0a51831f5aac30f14f01b9272995cec34991fa0013b23d79e3844a41cd4c3ad4f74c577785b0b22cb929154ff1e2184c3b32280fe5ab62bf30f29df44a974c8550de95d5f53d7b206eb3a964aa9f7aa6ae8aff23c08ce371eda0aacab1881db9f3eb7348c085eed44c0ee3", 0xb3}, {&(0x7f0000000d40)="68caa06e189aded5ee6198cc25abc95b0090b26ab508b101167cee035707191af4b8126578ba4c5fde53a4a6c691a7aa0c584f21ef54331454f061de1fd8cbec0c1b26c35b2bb3bc306da8edc42178de", 0x50}, {&(0x7f0000000dc0)="323169a327b77665216fe75eb52ec1d0e0303ceb837c588ab4f5c7c2bd36164193c38b32c7e055f2ca78b8dc67b5ac9e4e7dbbc427cc645108f8da809535f13aeb4683f4b0405493374cadd2850733836fe5b0875620af1137879a18075ad89ea65c00c479a01e043b022ee68cf3b2aa17e41f25046ab5736c13163f3bbbf97a9695d5b47828efd95859de06db3bc6ea6fda31267063ebb32e3d46911dda2a7d315a6b133677fff9c81efedbab68bf8d20b2", 0xb2}, {&(0x7f0000000e80)="92014386d0b5ccb91f23b944ec071283274cb8c6d3eec4f504f8ca88cb316704e391830de2c6d3e056fc9bda79e8bfb4aefb82c73ef8c1", 0x37}], 0x6, &(0x7f0000000f40)=[{0x50, 0x109, 0x9, "db0ef75f9bc0fb6684979a7d01f17d1c10538f8170a3df2780756f4cb3e59423e9810a3d6f8f0f1ea84c980055afbd2197e80b31c32696dd971821560132"}, {0x78, 0x10a, 0x6, "20698accf954cf03aef2640ad95385fbed631b8e6452c723e493acbcc60ab74538fc9476a8edc971357cac9c9514199a9e8f85b39c4b1f7a02b6dee017ccfe2f959a032e52408990eeb7d3132d4ded3b3a09eacdd08e7916ec8fb7893b46186e8e35de5762b3"}], 0xc8}}, {{&(0x7f0000001040)=@rc={0x1f, @none, 0x70}, 0x80, &(0x7f0000001180)=[{&(0x7f00000010c0)="440aeb4b157f600ce498387998634b2a58d5c298e4065a56e154d2b37543583f56ba1d85107b55d65f5ec16fe22452452d728c664e8704879afd3a74a2269b9b2c91f080de15fbd2a99042de4b7834fd0a4dd35f5f293b2e1400626d89de9abea3c8daae8f12220d942f327685c9a1e9ec2b029cfff681f487d9f5ac7654fa5684b33e", 0x83}], 0x1, &(0x7f00000011c0)=[{0x20, 0x10f, 0x7, "33aba894f837b6eaa392d425bb39a241"}, {0xa0, 0x114, 0xa, "d304c974360a4348da7d96ebe882247f10cf32a1be38f83ae2b3d6a7dd25d05666088e169833de1d938cb51a7beb5ac1d092a348816a6f4d0904683934be2fba2a2163c6c5c3bf15bebcbeb5fd1e168cfe0673ea74086d6e35387fcb1878f6e7bf6fb4968672f0783fc82a77f004bd3ce44dd6b83d6e15fd53dd80f0ebb7084bdc641cb09834c0f9c1d7"}, {0x88, 0x10f, 0x10001, "04a941790536e1061070eca21f64ba2b6d9be99ea21c85727679704cbbbbcec0198d7e82e3801b1c12e595d6976091918cd0b388dcabd9c6963659164dafcbb2ffe3f2fb915b6e7098aa5a71d6c1957c749b9bfec05bc9de8f6f15656ca1eb42a2082fb8331c6f3b2c5127adb7be51e7b5a841"}, {0xb0, 0x10b, 0x7, "ed5db81580b86a8db593351a24d5c08c5438a74329fd0949b43ff6462758981c61f3401efbadbad41c3be57526bb2461a7f773cf7a265d8a632797dabd1e7de986aa59707cdbc97404eef9b28d34ecd0e41ff0b40a034a521a69a8fea9830a8f2e983c50d08f0cc65a0d8a08eb8e25d667a7f542292ba1cbbb2af4a1d51b6add339d28eb4a3407f0d453e76fdc9485ba45d6e94e648b65357d"}, {0x60, 0x117, 0xfffffffb, "aa87b4bdec0fdcbb7613919058fd93d9d8c5d4edcf8728ed16ed1aaf179d4b095e3b099a35785aac5b7a2258184d6af7832c59a8e53bd0f60c035385fd53b197d169ec0bbddbe84a62"}], 0x258}}], 0x2, 0x24040011)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000014c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x5, '\x00', 0x0, r5, 0x3, 0x0, 0x1}, 0x50)
r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000017c0)=@o_path={&(0x7f0000001780)='./file0\x00', 0x0, 0x4008, r5}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x2, 0x11, &(0x7f0000001540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@alu={0x7, 0x0, 0xa, 0xb, 0x6, 0x1}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001600)='syzkaller\x00', 0x709, 0x9d, &(0x7f0000001640)=""/157, 0x41000, 0x2, '\x00', 0x0, @fallback=0x36, r5, 0x8, &(0x7f0000001700)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001740)={0x1, 0x6, 0xbd8, 0x5}, 0x10, r6, r10, 0x0, &(0x7f0000001800)=[r4, r0, r0], 0x0, 0x10, 0xa1b}, 0x94)
r11 = getpid()
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001d00)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0, <r13=>0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000001e00)=0xe8)
r14 = getgid()
sendmmsg$unix(r8, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001900)="688072089e31616227bb8e07fde0d965cba29069", 0x14}, {&(0x7f0000001940)="01965417cd49e005dbfc67d919747cf7abe7a5f7a85ab2ec901f024f5bceef2599f6f307baee610375e92630aec311a0cf26945d88f5331b1aaac5d0b94da6d0f4b81eb35316c9793bd60e25dddf658521f83b6a608e017703c83d8b8dbffcec95b457cc38180454c86ca6433d309cdb6813c87361e99eb797c18f05e1f95edac0ef34b6e02ba3b53cac03b047532cd218d10cf1caa9cb6fb1c65066ae3e9335ed756a6303330e53e3318bd0c46d2bdd59266b52618484524b5434b2d66eb6af9de65c9191f34b72a2e372c880ea2aa3472511f53e4007e1efb02ebae493139cb6d17631b01e99fac33f71bdf539f2d6763b4a42cf13a51e", 0xf8}, {&(0x7f0000001a40)="97a46c44aa0f7232ecee6563d5a682101ea71c8ef9c0bab902d9b63b0196c99fb2d38c29da7dbe6168530fe84109a84a9a0c35c02065d4f558b9cd10", 0x3c}, {&(0x7f0000001a80)="44098df3ea53e537726ddbba638bed31ed11fd4d27a54a4e68eaabd2476c709814b82dd09d52788b6baa4c68fe2fc54720c12898ef4ae2f2eb3b9d0df5b029288b5e8e83f23767d90c99cf155c533a3e4f3be1f5c322579e28e0a126c951d71855dc25f9203d9fa69e1437fcd6aa5dd7c8aa2d1d6cf868578d3c41f38dd582a45372c1182181babdab987a058ab58953a15437eb5ab813cb9e9a1e5816485eb6dfbc9617f9617abf940f6533cf751907f475cbed28e022de05b333ffaf45884052471769a50d84edb58464aa7039b132553f670bec595eead364cb06811bb2294895eb3a8179685d51196835", 0xec}, {&(0x7f0000001b80)="3d37f9675ab4716d1ef5b0eb3ccbaf786be9723b13c4f147eb354d54874125f1e55e4ca8bf544d7aa0c57a6abb93c9578fc257bbb545293c9f6535348cd72269d8712e2da9c7483a1d821304ff548e4fc8967b9018bd8941d6f9a62aff106b9a505839219f24c15dfc37958e033077fdff0e098887c5b8db75527cf76a9f0528e53d32bc8b7f4235db10fea33974d9739a6256692a0a01acc023c6544547564129e791a35ef3899582300d8119bd21771958824e95c61aa847817ec6c10d52f56267270fc2e9123387b05fb831a2803c6a6ea2b45e2215558d41", 0xda}], 0x5, &(0x7f0000001e40)=[@cred={{0x1c, 0x1, 0x2, {r11, r13, r14}}}], 0x20, 0x20044040}}], 0x1, 0x800)
setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000001ec0)={{{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x8, 0x4e21, 0x8798, 0x2, 0x80, 0x0, 0x8, r12, r13}, {0x4, 0xb, 0x2, 0x3, 0x3, 0xd, 0x4, 0x8000}, {0x0, 0x0, 0x5, 0x1}, 0x6, 0x0, 0x1, 0x1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x33}, 0xa, @in=@remote, 0x3501, 0x2, 0x3, 0x5f, 0x9, 0x6, 0x5}}, 0xe8)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

1.674403563s ago: executing program 3 (id=4288):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1ffffffffffffe31, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f00000007c0), &(0x7f00000002c0)=@tcp6, 0x1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18)
r3 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)

1.590111011s ago: executing program 0 (id=4289):
socket(0x2d, 0x3, 0x5)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e23e8d53c427be8d6afeed", @ANYRES16=r0, @ANYBLOB="200028bd7000fbdbdf250100000000000000014100000020001700000002000000056574683a7465616d5f736c6176655f3000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f000000a440)=0x20, 0x4) (async)
r3 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYBLOB="0a0001"], 0x48}}, 0x0)

1.38412841s ago: executing program 3 (id=4290):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000840), 0x7) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x44, r2, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@generic={0xb, 0x3, 0xd, 0xfbff, 0x5}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb3}, 0x94) (rerun: 64)

1.346657685s ago: executing program 0 (id=4291):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48)
r2 = socket$inet6(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94)

1.278959127s ago: executing program 4 (id=4292):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect(r0, &(0x7f0000000000)=@ethernet={0x1, @random="7a07e755f042"}, 0x80) (async)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000080)=""/36, 0x24}, {&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/188, 0xbc}, {&(0x7f0000000200)=""/84, 0x54}, {&(0x7f0000000280)=""/143, 0x8f}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/234, 0xea}, {&(0x7f0000001440)=""/47, 0x2f}], 0x9, &(0x7f0000001540)=""/182, 0xb6}, 0x2041) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000001680), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, r2, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200040c4}, 0x10) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x40040) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000001b40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b00)={&(0x7f0000001900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x15c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x22}]}}}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6c}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}]}}}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELCHAIN={0x50, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x672d81ff}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000001bc0), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001c00)=<r6=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001c40)=<r7=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001c80)=<r8=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001cc0)=<r9=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001d00)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000001dc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x3c, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8040881) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000001e40), r3)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x40, r12, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x2b}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000840}, 0x40000000) (async, rerun: 32)
socket$caif_seqpacket(0x25, 0x5, 0x0) (async, rerun: 32)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001f80), r11)
sendmsg$NLBL_CALIPSO_C_LISTALL(r13, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x34, r14, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4) (async, rerun: 64)
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x743, 0x1, 0x7f, 0x10001, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000051}, 0x4000000) (async, rerun: 64)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r15, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x34, r5, 0xb00, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x240448c0) (async)
r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_SE_IO(r16, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x1)

1.184641488s ago: executing program 3 (id=4293):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xa, 0x0, 0x1, 0x27, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x3], 0x5, 0x14, 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)=""/14, 0x103, 0xe, 0x0, 0xc0000000}, 0x28)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e0000003fe70000f8ffffff0700000028000100", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000002767df39000000000400"/24, @ANYRES32=r4, @ANYBLOB], 0x50)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r0, &(0x7f0000000100)={0x2})
r6 = socket(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1ff}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9a, 0x7, 0x800, 0x1, 0x1, 0x4, 0x5}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x8, 0xfffa, 0x7f, 0x2, 0xdaf, 0x6, 0x80000}}, {0x4}}]}]}, 0x7c}}, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r0, &(0x7f0000000140)={0x20000004})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000050ac7a14000000000000bf000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94)
epoll_pwait(r5, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0)

1.1842056s ago: executing program 0 (id=4294):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket$rds(0x15, 0x5, 0x0) (async)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000800)=[{&(0x7f0000002640)=""/4108, 0x100c}], 0x1}}], 0x48, 0xc800}, 0x0)

1.122428634s ago: executing program 0 (id=4296):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="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", @ANYRESOCT=r1, @ANYRES32=r0], 0x23c}}, 0x4004000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002380)={'wlan0\x00', <r3=>0x0})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r5)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(r5, &(0x7f0000006f80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="71212297560d14a9bdc1a37f643acd629d61c29df07c9b56a3ff5446583775ac60cb51bf6fec66439c0495296a9c4424934b297dd90b7f4bf0444113874bc221fa8dcfb56f5ac3cefa9c10f92c02eeb8a350893f0d5bc9051c2e2b91ae5893f7ce2a5da0cab6d90f316669815224013a94a710403ec3df429d583728e1697e42431e10d9607f31fe71886f818dc19db0391eaa3dbf140b810fce2b162f607426c176ac9d866a53d500d428b5a148db3000c3a27928055c3090712862e2dd5c04c42f11", 0xc3}, {&(0x7f0000000840)="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", 0x33d}], 0x2}}], 0x1, 0x4000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r6, &(0x7f0000007600)={0x0, 0x0, &(0x7f00000075c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf254a00000008000300", @ANYRES32=r3, @ANYBLOB="c321c752708854fe1d95997149837ddb0cb4c801d6feab2d979b7600eee4bf799489efa9fa9c89d5a384a112b2bed06029839b55f98b27dedd81481eb6b1f942f37ec60b416980b2c316218e668d5972446591d9210605a2a41119ba2d8c92c6cc1b302fea01bb21bccc6088c3afc9257c5ef2932ea721f39f443684234c888ea195f305cff96f58d2d185b0c3a8cea5d11d1f8c1d3f29a68cb814dfbf048a"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x80)

984.232588ms ago: executing program 4 (id=4297):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5f) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef01000000004d8000000a140000fe010000002400001400050000000000000000000000000000000001247f95"], 0x30}, 0x1, 0x11}, 0x20000080)

983.738888ms ago: executing program 3 (id=4298):
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
r1 = socket$inet6(0xa, 0x2, 0x3a)
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c304000000000000000001c0012800b000100697036746e6c40000c00028006000f0000000000"], 0x50}}, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x7, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000001a80)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000000)

838.535651ms ago: executing program 6 (id=4300):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa452}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) (async)
bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)

802.201114ms ago: executing program 5 (id=4301):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x14d6}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080)
r3 = socket(0x10, 0x803, 0x6)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$packet(0x11, 0x1, 0x300)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000080400000008"], 0x48)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000001c00)={0x0, @in, 0x0, 0x0, 0xffffffff}, &(0x7f0000001cc0)=0x9c)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@deltaction={0x154, 0x31, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000006}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x17bf}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x154}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbf9, {0x0, 0x0, 0x0, r10, {0xf, 0xfff3}, {0x0, 0x9}, {0x10, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c6}, 0x0)

736.835438ms ago: executing program 4 (id=4302):
write(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

736.44589ms ago: executing program 3 (id=4303):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109601, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x1, 0x8, 0x9, 0x0, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000)

736.080421ms ago: executing program 6 (id=4304):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x24, 0x7, 0x8, 0x1, 0x8, 0x4b4, 0x5, 0xf]}}]}]}]}, 0x38}}, 0x0)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x10, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x74}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20040000)

685.023932ms ago: executing program 4 (id=4305):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', <r0=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', r0, 0x80, 0x8, 0xcfac, 0x8, {{0x27, 0x4, 0x1, 0x6, 0x9c, 0x67, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010100, @remote, {[@ssrr={0x89, 0x17, 0xfd, [@remote, @remote, @empty, @remote, @loopback]}, @noop, @timestamp_addr={0x44, 0x34, 0xa8, 0x1, 0x2, [{@rand_addr=0x64010101, 0x80000001}, {@remote, 0xdc4}, {@local}, {@multicast1, 0x8}, {@local, 0x101}, {@multicast1}]}, @ssrr={0x89, 0x1b, 0x16, [@empty, @multicast1, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0x31, [@remote]}, @timestamp_prespec={0x44, 0xc, 0x65, 0x3, 0x0, [{@multicast1, 0x2}]}, @noop, @ssrr={0x89, 0x3, 0x3c}, @rr={0x7, 0x7, 0xb9, [@remote]}]}}}}})
r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @default}, [@null, @remote, @remote, @remote, @null, @rose, @bcast, @bcast]}, &(0x7f00000001c0)=0x48)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000200)={0x7, 0x430000, 0x0, 0x9, 0x0, [0x0, 0x0, 0x53, 0x3]})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000240))
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000280)={0x1, 0xee, "8a1bde31a54bd1ac984d2885041ab345d3a1bc972506c5cd3109fdb3f559d49cc1d23be4367a2aea32aa3bc32365fab8c076a9838d404001c83b810ba95528053de7febb3103e226d1070aa0cbb7c8dcc9daf6bbaf0ca5731c6f5e75be4f2311152912b11ff406cd9c0343ba7d3216afc1d1af7157bcb2ba394049d32ae1ee3f5efd687e95cc3e5b6a70093a75ef9d52ea4885697146bdfd302321fb2d3ba5cb34386ff14f15ab322f5b7b193c2af74ca9b765b3164932fad5cc4a2445ebd3fd2058e95fd2d013b075620ca9c6831c4fdebb706052b09014dfe439a5304e1fed6f0f3007d287c50a853a757e8bf2"}) (async)
getsockname(r1, &(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000400)=0x80) (async)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000440)={0x11e, {0x6, 0x0, 0x7, 0x6, 0x5}})
socketpair(0x21, 0x5, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000480), r3) (async)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000500)={'tunl0\x00', r0, 0x20, 0xa1a7fd37431b88ef, 0x2, 0x9, {{0x9, 0x4, 0x0, 0xa, 0x24, 0x64, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ssrr={0x89, 0xf, 0xc4, [@broadcast, @rand_addr=0x64010102, @multicast2]}]}}}}}) (async)
ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x3) (async)
bpf$ENABLE_STATS(0x20, &(0x7f00000005c0), 0x4) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000600)={<r7=>r4, 0x16, 0x10000, 0x2})
recvfrom$llc(r7, &(0x7f0000000640)=""/219, 0xdb, 0x2, &(0x7f0000000740)={0x1a, 0x118, 0xc, 0x3, 0xf1, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x10) (async)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r4)
sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, r8, 0x505, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffb}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x28040044}, 0x80)
sendmsg$nl_generic(r7, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x3c, 0x4, 0x70bd2a, 0x25dfdbfd, {0x1b}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20040800) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000a00)={<r9=>0x0, @in={{0x2, 0x4e24, @loopback}}, 0x3, 0xbb2, 0x3951, 0x2, 0x4}, &(0x7f0000000ac0)=0x98)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000b00)={r9, @in6={{0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd1}}, 0x80000001, 0x6, 0x8000, 0x2, 0xd}, &(0x7f0000000bc0)=0x98) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
recvmsg$qrtr(r4, &(0x7f00000022c0)={&(0x7f0000000c00), 0xc, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/228, 0xe4}], 0x1, &(0x7f0000000d80)=[{0xf0, 0x0, 0x0, ""/224}, {0x1010, 0x0, 0x0, ""/4096}, {0x108, 0x0, 0x0, ""/242}, {0x78, 0x0, 0x0, ""/103}, {0xf8, 0x0, 0x0, ""/225}, {0xb0, 0x0, 0x0, ""/155}, {0x38, 0x0, 0x0, ""/37}, {0x30, 0x0, 0x0, ""/27}, {0x78, 0x0, 0x0, ""/98}], 0x1508, 0x1}, 0x38, 0x40) (async)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x6c, r5, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000002440)=""/19, &(0x7f0000002480)=0x13)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002780)={r7, 0xe0, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000024c0)=[0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000002500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000002580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000025c0), &(0x7f0000002600), 0x8, 0x41, 0x8, 0x8, &(0x7f0000002640)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000002880)={'ip_vti0\x00', &(0x7f00000027c0)={'gretap0\x00', r10, 0x0, 0x7, 0x7, 0x3ca, {{0x1c, 0x4, 0x0, 0x3f, 0x70, 0x66, 0x0, 0x8, 0xab8589311ade0975, 0x0, @multicast1, @private=0xa010102, {[@lsrr={0x83, 0xb, 0x6b, [@local, @empty]}, @generic={0x88, 0xe, "d478770f63bda068e9d10ae4"}, @rr={0x7, 0x1b, 0x77, [@private=0xa010101, @empty, @multicast2, @multicast1, @empty, @broadcast]}, @noop, @lsrr={0x83, 0x1b, 0x68, [@remote, @private=0x5, @dev={0xac, 0x14, 0x14, 0x28}, @private=0xa010102, @local, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x33, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x7ff}]}]}}}}}) (async)
r11 = accept$phonet_pipe(r4, &(0x7f00000028c0), &(0x7f0000002900)=0x10)
connect$pppl2tp(r3, &(0x7f0000002940)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x4e23, @broadcast}, 0x2, 0x2, 0x3}}, 0x26)

601.469822ms ago: executing program 6 (id=4306):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x1)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc8, 0x2, {{}, [@TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000001, 0x3, 0x1, 0x1ff}}, @NETEM_LOSS_GE={0xd, 0x2, {0x2, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ff, 0x3, 0xfffeffff, 0xc5, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0xb1, 0x7fffffff, 0xde9, 0x42}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xf8}}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_BLACKHOLE={0x4}]}, 0x34}}, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1416, 0x1}, 0x10}}, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
getsockopt$CAN_RAW_JOIN_FILTERS(r9, 0x65, 0x6, &(0x7f0000000080), &(0x7f0000000140)=0x4)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x4, 0xfff3}, {}, {0xffe0, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)

548.128382ms ago: executing program 5 (id=4307):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf255f"], 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xa, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18001100000000000000001f4e8926b8cd4bc41a45eeaf48285600000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90)
ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100))

545.966292ms ago: executing program 4 (id=4308):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4111, &(0x7f0000000200)=0x100f)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x101000, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000a80)={'macsec0\x00', 0x200})
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r10 = socket$packet(0x11, 0x3, 0x300)
writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000440)="556afc5b740c890035fd764b9905e8f867b03533d8050462cb8f05a3e39b2b00dd88661a18ad015e22ed2936aa677d4dea73fa6e9f2fe4686c7c67776b124973818187e9b0badb984da1d45fd905e8079241dd8b5f98af8bbd2d8c047dcb0bb178fd7dd798f624acce8ce6b972d9ed7b8c6c84cc93ab6915bcfc124cb673f4f0af7f11c9c253978f2b06e359dc1a62722bcdf3c2e1a69db4d1a8636e8437e1d31c42d81f9c53031e97d46e3f32e07f543803ce81a05044f4e8122d5a7f3a0d91c362127b302c136b3d0173dbe0e423e25385a68449b9e1f0409a1d241e1376a6b0abc34db24afb027caa472d43c1188e08", 0xf1}, {&(0x7f0000000600)="e4bb079a38f6b6d19e5c73d729cc447a7179dace549d122d72974c943bc51e511a2ee0f82d139d0269bdbdd85e04fcfacee18c173ac29a3bb15e09ead3f4c180bf50fac7fba7d2ccf37de42190914a1b62e778f2086798228d2ba7b08a99e9ae35a21e0057685c1c7b6313c00714ac8aebdf4ce58846a8c583d250d8db2d067fac2cdfb9076556fd60", 0x89}, {&(0x7f00000007c0)="4f51cbe2061613c66420bd2c9db6a31c29da612d6bdf99cadf9f4acf1152fd2a946d586c3d5caa03f7ba7ea46f97fadddb515559a2392ef6fec8e42238cb06b966ce0557a9faef62b3b36463310dd992fcee68cb9be217cfc14110aa81022dd40bd7dbc6f1dab8d912350f54db5bac62087ed8c78449238896fd4c1656fad7af3e8b582d3e2eece32b44c455996c437dbf76b31de7cb15c222493a11e9434a90f132ae1c2a68fe04040747f97ea6859524eb0f45b6", 0xb5}, {&(0x7f0000000380)="b0709d5cd60fe319852af424487cc520aa2dd25b558625da39d01a251666f616629dcdedf7ad1dfd1a87f55d", 0x2c}, {&(0x7f0000000880)="53fdceb4f621645b7b703d48848ff04118748dea8b60aed32e6041481f2dae8b01a7319c0065dd39df2949c06b12ea7e8043cc98283fe729249eb1c312e84777e66bb4fe23d4f95a906c71f8b705ede8673084bffb6f7a4973da5829ed50c7e6fc83e58256fc26479325ea9b98021210ac5fc5ff1bd726fd88110db72b1f337142d6a49aecc4e47459a1fe9abc6d8f8f898275a3938bbd2ec8a5e19e741a8768bb5c04", 0xa3}, {&(0x7f0000000940)="d54e10b30d0df87d8222d4f5599f448fa7fe07e0d2f2e34afb3652c495241af60c259e1597b7f7d50c583e9e222c660df54c3641e738c190b1e635d7f89de01eee9eec9882b4d9df4f17fd1761ff71b7c95e4fa77e4b8c9ff1354bb475cb3f85444258c238d9108c9bb7d0679ad01db3df3cb97f6d3716661b077cda0fc89bea6a98a62322c1086f277686a979fd8f7d49ffc971746422528add86e7dbee2554e797b4be875ff8b40747cf4fc8d07a86e8b961a419fce39651d270aed94943cec05224a0e0d8d51a2f80ee61d9e2e242f1db97e4f1cca1ae16d874cc1cf29dd17a422762733b230bb9fd51e22174ab3fc20f08c6f96bd7", 0xf7}], 0x6)
sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x4, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0x5}, 0x14)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000000c0)={<r11=>0x0}, &(0x7f0000000140)=0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x11, 0x7, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x7}, [@typed={0x8, 0x134, 0x0, 0x0, @pid=r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x48000)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006002000800a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
recvmsg$unix(r12, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x3}, 0x0)
sendmsg$inet(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000300000000007910000000000008c30002005000000000005f9b00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6}, 0x94)

480.901089ms ago: executing program 5 (id=4309):
r0 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', <r1=>0x0, 0x700, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r1, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002500)=ANY=[@ANYRES8=r1], 0x20d8}}, 0xc010)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r8, @ANYBLOB="3a000280"], 0x60}, 0x1, 0x400000000000000}, 0x40010)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_O_TEI={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x26}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}}, 0x40000014)

404.315333ms ago: executing program 3 (id=4310):
r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84)
sendto$inet(r0, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10)
socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000002000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090001800000000000000100000000000080b4000000000000000500000000000000"], 0x128}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="99132437984f932d7ab395c4ae", 0xd}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
listen(r0, 0xda8c)
accept4(r0, &(0x7f0000000340)=@nfc, 0x0, 0x0)

252.23288ms ago: executing program 6 (id=4311):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="b40500000000000061107a0000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000520004002dbd70e9fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4048080)

213.997575ms ago: executing program 0 (id=4312):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket(0x10, 0x80003, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlinkprop={0x20, 0x6c, 0xb21, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x34400, 0x10010}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)

177.396163ms ago: executing program 6 (id=4313):
socketpair(0x23, 0x80000, 0x5, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) (async)
socket$nl_route(0x10, 0x3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) (async)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) (async)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0xb, @local}, 0x1c) (async)
socket$kcm(0x29, 0x5, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, &(0x7f0000000540)=""/140, 0x0, 0x8c, 0x1}, 0x28) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
sendto$inet6(r2, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x11, 0xffffffffffffffff, 0x0)

124.756709ms ago: executing program 5 (id=4314):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x3}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x24}, 0x9, 0x8, 0x0, 0x0, 0x4, 0x200002}) (async)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x3}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x24}, 0x9, 0x8, 0x0, 0x0, 0x4, 0x200002})
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r2, &(0x7f0000002000)=[{{&(0x7f0000000cc0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000001300)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0xc3, 0x1, 0x4}]}}}], 0x18}}], 0x1, 0x20000000)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

107.033975ms ago: executing program 0 (id=4315):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x1060}, 0x1, 0x0, 0x0, 0x40801}, 0x20000000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffefffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200040d5}, 0x24040084)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0x6}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r11 = accept4(r2, 0x0, 0x0, 0x80000)
sendmsg$nl_route_sched(r11, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r11)
r12 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r12, 0x6, 0x19, &(0x7f0000000ec0), 0x4)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000240))
sendmsg$inet(r12, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x1002c081)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r11)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x58}}, 0x800)

90.137939ms ago: executing program 4 (id=4316):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1c, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x8, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc004)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000004c0)={0x1, 0x2, "ff9edf", 0x6c, 0x2})
r2 = socket$inet6(0xa, 0x3, 0x20)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x4c0ddb65}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0xe0000000}}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1, 0x0, 0xfffffffffffffeaf}}], 0x1, 0x0)

0s ago: executing program 6 (id=4317):
write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x6005}, @val={0x2, 0x80, 0x8ec7, 0x3, 0x8, 0x40}, @x25={0x0, 0x81, 0xff, "59877b6ac5be40a821b236c2d9b3d7b544e79ffd1ef9480272"}}, 0x2a)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)={'b', ' *:* ', 'rwm\x00'}, 0xa)
r0 = socket$caif_stream(0x25, 0x1, 0x3)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x4000010, r0, 0xf0859000)
ioctl$int_out(r0, 0x0, &(0x7f0000000080))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = accept4$inet(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x10, 0x18, {0x3ff, @bearer=@l2={'ib', 0x3a, 'wg0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x43)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xbc, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x12}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x74, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xab53}}, {0x64, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x5d, 0x1, "430abda1069cf775114d803ace6e7f5d90a1adf5c9b10c374f96106fc953b0bd571df965b848a18268637f56185bf31e85eb2bf4966875309b34f6d09e330693eab8d2e56dbe202fa76cbeac177b39d30d709039b6d1fe3c37"}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg2\x00', <r6=>0x0})
getsockname$packet(r0, &(0x7f00000004c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000005c0)={'batadv0\x00', <r9=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x94, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000900)={@private2, <r11=>0x0}, &(0x7f0000000940)=0x14)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000bc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x1cc, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0xf4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xef, 0x5, "4236c9fbf6987697296a018dedf399bacaa19e76d6b4fc78610b7315bb7281ea3c92e735d1ce33f7559f50bce3cf6ecfe384f34ee298a01743a5396c10d427d33890d28573bbf365f8337a8bd9f0a81e2e4a496980648644f48e5b0a800a501a6cf5a123250369ffd8ce298f66a8e87ac03a527b4e5ee1e3a1baee5f2eb98f2fc19862b0d0afd82a76d35f5d9d265fdb1994865f8591e854161bf4496ae261a3936bdf34a5a66531856f821ed952643407e24f91992bb2ba4baab8c84e5efdd1d4c7fee710ff0cafb440f9543a257098d3955710a9797df20dcd8b7123e5e47befc741c5304ec1512bda00"}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa5e013e8531207e9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x8840}, 0x24008001)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x2, '\x00', r7, 0xffffffffffffffff, 0xfffffff7, 0x2, 0x1}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c80)={0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{0x1, <r14=>0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)=r2}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x25, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ec0)='GPL\x00', 0x1, 0x9c, &(0x7f0000000f00)=""/156, 0x41000, 0x44, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001000)={0x3, 0x6, 0x7, 0x9}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000001040), &(0x7f0000001080)=[{0x5, 0x5, 0xc, 0xc}, {0x1, 0x4, 0x6, 0x9}, {0x5, 0x4, 0x6, 0xc}, {0x1, 0x1, 0xb, 0x5}, {0x3, 0x2, 0xe, 0x9}, {0x3, 0x2, 0xa, 0x7}, {0x4, 0x3, 0xb}, {0x4, 0x2, 0x3, 0x7}, {0x5, 0x3, 0xe, 0x1}, {0x5, 0x3, 0x4, 0xc}], 0x10, 0x8}, 0x94)
r15 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
sendmsg$sock(r15, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001200)="910d2ec0611402", 0x7}], 0x1, &(0x7f0000001280)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x924}}, @txtime={{0x18, 0x1, 0x3d, 0xb5}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x459b}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0xd8}, 0x20000010)
r16 = epoll_create(0xf3)
r17 = accept4$ax25(0xffffffffffffffff, &(0x7f00000013c0)={{0x3, @netrom}, [@bcast, @remote, @null, @remote, @null, @rose, @remote, @rose]}, &(0x7f0000001440)=0x48, 0x80800)
epoll_ctl$EPOLL_CTL_DEL(r16, 0x2, r17)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001540)={'ip6_vti0\x00', &(0x7f00000014c0)={'ip6tnl0\x00', <r18=>r11, 0x2, 0xfe, 0x26, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}, @mcast2, 0x7800, 0x10, 0x4}})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000001840)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001640)={0x1a0, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0xc004}, 0x4)

kernel console output (not intermixed with test programs):

ssed
[  344.854934][T15879] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2657'.
[  344.973487][T15883] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2658'.
[  345.183184][T15896] erspan0 speed is unknown, defaulting to 1000
[  345.196001][T15896] erspan0 speed is unknown, defaulting to 1000
[  345.234971][T15896] erspan0 speed is unknown, defaulting to 1000
[  345.363537][T15902] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2664'.
[  345.379647][T15902] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2664'.
[  345.399610][T15902] netlink: 31 bytes leftover after parsing attributes in process `syz.5.2664'.
[  345.409955][T15902] netlink: 'syz.5.2664': attribute type 2 has an invalid length.
[  345.418171][T15902] netlink: 31 bytes leftover after parsing attributes in process `syz.5.2664'.
[  345.431748][T15901] delete_channel: no stack
[  345.902869][T15936] netlink: 'syz.5.2675': attribute type 27 has an invalid length.
[  345.977913][T15896] infiniband !yz!: set active
[  345.984133][T10707] erspan0 speed is unknown, defaulting to 1000
[  346.005022][T15896] infiniband !yz!: added erspan0
[  346.105837][T15949] netlink: zone id is out of range
[  346.112277][T15949] netlink: del zone limit has 4 unknown bytes
[  346.207716][T15896] RDS/IB: !yz!: added
[  346.241367][T15896] smc: adding ib device !yz! with port count 1
[  346.247653][T15896] smc:    ib device !yz! port 1 has no pnetid
[  346.290455][T10707] erspan0 speed is unknown, defaulting to 1000
[  346.297964][T15896] erspan0 speed is unknown, defaulting to 1000
[  346.416059][T15961] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2680'.
[  346.524903][T15967] openvswitch: netlink: Duplicate or invalid key (type 0).
[  346.537582][T15967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.736668][T15961] 8021q: VLANs not supported on ip6tnl0
[  346.784232][T15896] erspan0 speed is unknown, defaulting to 1000
[  347.124059][T15981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2686'.
[  347.143497][T15981] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  347.190108][T15981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2686'.
[  347.299989][T15991] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2690'.
[  347.312764][T15992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  347.339468][T15896] erspan0 speed is unknown, defaulting to 1000
[  347.401528][T10707] IPVS: starting estimator thread 0...
[  347.502031][T15995] IPVS: using max 25 ests per chain, 60000 per kthread
[  347.633102][T16002] openvswitch: netlink: Key type 154 is out of range max 32
[  347.714090][T13266] udevd[13266]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  347.961136][T16017] netlink: 'syz.0.2699': attribute type 1 has an invalid length.
[  348.100614][T15896] erspan0 speed is unknown, defaulting to 1000
[  348.243264][T16028] 8021q: VLANs not supported on ip6_vti0
[  348.442108][T16040] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  348.460981][T16038] bond0: Caught tx_queue_len zero misconfig
[  348.619706][T15896] erspan0 speed is unknown, defaulting to 1000
[  348.630163][T16045] ip6_vti0 speed is unknown, defaulting to 1000
[  349.138932][T15896] erspan0 speed is unknown, defaulting to 1000
[  349.728351][T15896] erspan0 speed is unknown, defaulting to 1000
[  349.769218][T16089] vlan5: entered promiscuous mode
[  349.776340][T16089] bridge0: entered promiscuous mode
[  349.783367][T16089] vlan5: entered allmulticast mode
[  349.788549][T16089] bridge0: entered allmulticast mode
[  349.909108][T16093] __nla_validate_parse: 8 callbacks suppressed
[  349.909130][T16093] netlink: 53 bytes leftover after parsing attributes in process `syz.3.2722'.
[  350.173174][T16100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  350.463859][T16100] syzkaller0: entered promiscuous mode
[  350.469410][T16100] syzkaller0: entered allmulticast mode
[  350.978305][T16139] lo: Caught tx_queue_len zero misconfig
[  351.064968][T16148] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.2733'.
[  351.100446][T16148] openvswitch: netlink: Message has 6 unknown bytes.
[  351.467940][T16165] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2742'.
[  351.482211][T16165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2742'.
[  351.505850][T16165] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2742'.
[  351.535492][T16165] netlink: 'syz.1.2742': attribute type 2 has an invalid length.
[  351.546020][T16165] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2742'.
[  351.557503][T16165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2742'.
[  351.633726][T16170] netlink: 'syz.0.2744': attribute type 8 has an invalid length.
[  351.696948][T16170] team0: Device ipvlan3 failed to register rx_handler
[  351.743463][T16177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2744'.
[  351.794739][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2747'.
[  351.831199][T16177] 8021q: adding VLAN 0 to HW filter on device bond12
[  352.135046][T16197] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2751'.
[  352.224877][T16197] batman_adv: batadv0: Removing interface: dummy0
[  352.625846][T16220] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  352.974706][T16253] xt_socket: unknown flags 0x50
[  353.244689][T16269] veth0: Caught tx_queue_len zero misconfig
[  353.445526][T16284] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  353.472274][T16284] geneve3: entered promiscuous mode
[  353.487759][T16284] geneve3: entered allmulticast mode
[  353.597362][T16291] netlink: 'syz.1.2780': attribute type 1 has an invalid length.
[  353.695546][T16299] netlink: 'syz.4.2784': attribute type 9 has an invalid length.
[  353.725241][T16299] netlink: 'syz.4.2784': attribute type 11 has an invalid length.
[  353.736039][T16299] netlink: 'syz.4.2784': attribute type 12 has an invalid length.
[  353.982916][T16321] dvmrp6: entered allmulticast mode
[  354.871063][T16379] netlink: 'syz.0.2804': attribute type 23 has an invalid length.
[  354.913161][T16377] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  355.004997][T16379] __nla_validate_parse: 10 callbacks suppressed
[  355.005019][T16379] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2804'.
[  355.034324][T16387] netlink: 'syz.1.2805': attribute type 39 has an invalid length.
[  355.130054][T16393] veth0: entered promiscuous mode
[  355.412664][T16407] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2812'.
[  355.420836][T16405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2811'.
[  355.439983][T16405] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.471861][T16405] syzkaller0: entered promiscuous mode
[  355.477526][T16405] syzkaller0: entered allmulticast mode
[  355.503215][T16392] veth0: left promiscuous mode
[  355.656740][T16405] tipc: Resetting bearer <eth:syzkaller0>
[  355.700705][T16404] tipc: Resetting bearer <eth:syzkaller0>
[  355.775538][T16404] tipc: Disabling bearer <eth:syzkaller0>
[  356.007639][T16438] netlink: 'syz.4.2817': attribute type 1 has an invalid length.
[  356.112814][T16438] bond12: entered promiscuous mode
[  356.118675][T16438] 8021q: adding VLAN 0 to HW filter on device bond12
[  356.208505][T16446] bond12: (slave bridge0): making interface the new active one
[  356.230655][T16446] bridge0: entered promiscuous mode
[  356.242092][T16446] bond12: (slave bridge0): Enslaving as an active interface with an up link
[  356.306143][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2818'.
[  356.629528][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2827'.
[  356.651126][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2827'.
[  356.677552][T16471] ip6tnl2: entered promiscuous mode
[  356.698056][T16462] ip6_vti0 speed is unknown, defaulting to 1000
[  356.977246][T16488] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2832'.
[  357.045012][T16490] bond13: ARP target 1.0.0.0 is already present
[  357.061248][T16490] bond13: option arp_ip_target: invalid value (1)
[  357.082753][T16490] bond13 (unregistering): Released all slaves
[  357.108547][T16498] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2835'.
[  357.161654][T16503] netlink: 'syz.1.2834': attribute type 1 has an invalid length.
[  357.268097][T16507] netlink: 'syz.5.2836': attribute type 4 has an invalid length.
[  357.347416][T16507] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2836'.
[  357.739420][T16521] delete_channel: no stack
[  357.980794][T16462] erspan0 speed is unknown, defaulting to 1000
[  358.077047][T16554] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  358.797872][T16589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2857'.
[  359.280054][T16608] syzkaller1: entered promiscuous mode
[  359.286208][T16608] syzkaller1: entered allmulticast mode
[  360.067861][T16636] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20001
[  360.105692][T16639] __nla_validate_parse: 1 callbacks suppressed
[  360.105713][T16639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2871'.
[  360.172564][T16642] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2871'.
[  360.198851][T16642] block nbd0: reconnected socket
[  360.235879][T16639] vxcan2: entered allmulticast mode
[  360.331989][ T5833] block nbd0: Receive control failed (result -32)
[  360.425502][T16653] netlink: 'syz.5.2874': attribute type 10 has an invalid length.
[  360.456863][T16653] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2874'.
[  360.722272][T10709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.918969][T16689] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2881'.
[  361.081189][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2885'.
[  361.152720][T16694] ipvlan2: entered promiscuous mode
[  361.195960][T16695] bridge_slave_1: left allmulticast mode
[  361.218616][T16695] bridge_slave_1: left promiscuous mode
[  361.248514][T16695] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.306054][T16710] netlink: 'syz.1.2889': attribute type 2 has an invalid length.
[  361.321622][T16695] bridge_slave_0: left allmulticast mode
[  361.329054][T16695] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.341802][T16712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2888'.
[  361.685687][T16710] �9: entered promiscuous mode
[  361.768639][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.870005][T16730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  362.089518][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2896'.
[  362.153825][T16749] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  362.210605][T16756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.249183][T16749] batadv0: mtu less than device minimum
[  362.268128][T16749] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  362.280421][T16749] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  362.292339][T16749] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  362.304344][T16749] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  362.316183][T16749] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  362.405241][T16767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2900'.
[  362.424546][T16767] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2900'.
[  362.463104][T16768] netlink: 'syz.5.2902': attribute type 10 has an invalid length.
[  362.474820][T16749] batman_adv: batadv0: Removing interface: batadv_slave_1
[  362.532614][T16762] bridge9: entered promiscuous mode
[  362.538081][T16762] bridge9: entered allmulticast mode
[  362.568857][T16768] team0: Port device dummy0 added
[  362.748106][T16779] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.771158][T16778] sctp: [Deprecated]: syz.5.2904 (pid 16778) Use of int in maxseg socket option.
[  362.771158][T16778] Use struct sctp_assoc_value instead
[  362.792842][T16774] tipc: Resetting bearer <eth:syzkaller0>
[  362.806692][T16782] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2907'.
[  362.819501][T16773] tipc: Disabling bearer <eth:syzkaller0>
[  363.212105][T16803] netlink: 'syz.4.2911': attribute type 1 has an invalid length.
[  363.219987][T16803] netlink: 'syz.4.2911': attribute type 1 has an invalid length.
[  363.313292][T16791] team0 (unregistering): Port device team_slave_0 removed
[  363.343507][T16791] team0 (unregistering): Port device team_slave_1 removed
[  363.379855][T16791] team0 (unregistering): Port device dummy0 removed
[  363.675199][T16810] bond13: entered allmulticast mode
[  363.726691][T16810] 8021q: adding VLAN 0 to HW filter on device bond13
[  363.870393][T16823] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  364.773342][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  364.784648][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  364.794771][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  364.803323][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  364.819006][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  364.886575][T16862] ip6_vti0 speed is unknown, defaulting to 1000
[  365.173778][T16869] __nla_validate_parse: 7 callbacks suppressed
[  365.173800][T16869] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2932'.
[  365.332458][T16873] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2934'.
[  365.384480][T16869] netlink: 'syz.4.2932': attribute type 11 has an invalid length.
[  365.408361][T16869] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2932'.
[  365.427878][T16880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2935'.
[  365.454262][T16880] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2935'.
[  365.516479][T16881] ip6_vti0 speed is unknown, defaulting to 1000
[  365.761804][T10707] net_ratelimit: 26 callbacks suppressed
[  365.761833][T10707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.921329][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.923641][ T8281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.001169][ T1137] wlan1: Trigger new scan to find an IBSS to join
[  366.212232][T16862] erspan0 speed is unknown, defaulting to 1000
[  366.351260][T16907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2943'.
[  366.426780][T16911] netlink: 'syz.4.2944': attribute type 1 has an invalid length.
[  366.449778][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2944'.
[  366.890782][ T5838] Bluetooth: hci6: command tx timeout
[  366.960804][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.970461][ T8281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.989818][T16881] erspan0 speed is unknown, defaulting to 1000
[  366.998631][T16936] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2950'.
[  367.146522][T16941] netlink: 'syz.5.2951': attribute type 3 has an invalid length.
[  367.173392][T16941] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2951'.
[  367.245383][T16943] syzkaller0: entered promiscuous mode
[  367.257021][T16943] syzkaller0: entered allmulticast mode
[  367.630600][T16955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2955'.
[  367.640158][T16862] chnl_net:caif_netlink_parms(): no params data found
[  367.843885][ T3463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.852809][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.882691][T16972] netlink: 'syz.4.2959': attribute type 1 has an invalid length.
[  367.891012][T16972] netlink: 'syz.4.2959': attribute type 2 has an invalid length.
[  367.903577][T16972] netlink: 'syz.4.2959': attribute type 1 has an invalid length.
[  367.945680][T16969] dvmrp0: entered allmulticast mode
[  368.013882][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.023020][ T8281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.217502][T16862] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.225301][T16862] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.246204][T16862] bridge_slave_0: entered allmulticast mode
[  368.262804][T16862] bridge_slave_0: entered promiscuous mode
[  368.286220][T16862] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.323988][T16862] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.339268][T16862] bridge_slave_1: entered allmulticast mode
[  368.361540][T16862] bridge_slave_1: entered promiscuous mode
[  368.480481][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.782933][T16862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.828462][T16862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.962451][ T5838] Bluetooth: hci6: command tx timeout
[  368.974549][T17010] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  368.987740][T16862] team0: Port device team_slave_0 added
[  369.012963][T16862] team0: Port device team_slave_1 added
[  369.041434][T16409] wlan1: Trigger new scan to find an IBSS to join
[  369.214128][T16862] batman_adv: batadv0: Adding interface: batadv_slave_0
[  369.246403][T16862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  369.292928][T16862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  369.361227][T17029] netlink: 'syz.4.2972': attribute type 11 has an invalid length.
[  369.373857][T16862] batman_adv: batadv0: Adding interface: batadv_slave_1
[  369.384265][T16862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  369.439448][T16862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  369.638424][T16862] hsr_slave_0: entered promiscuous mode
[  369.656959][T16862] hsr_slave_1: entered promiscuous mode
[  369.667857][T16862] debugfs: 'hsr0' already exists in 'hsr'
[  369.675970][T16862] Cannot create hsr debugfs directory
[  370.172446][T17055] syzkaller0: entered promiscuous mode
[  370.183725][T17055] syzkaller0: entered allmulticast mode
[  370.516645][T17071] __nla_validate_parse: 9 callbacks suppressed
[  370.516660][T17071] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2982'.
[  370.768930][T16862] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  370.872934][T17083] net_ratelimit: 11 callbacks suppressed
[  370.872956][T17083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.888176][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.916378][T16862] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  370.944744][T16862] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  371.012714][T16862] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  371.041352][ T5838] Bluetooth: hci6: command tx timeout
[  371.120891][ T8281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.130867][T10707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.297149][T16862] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.323959][T17095] netlink: 'syz.3.2989': attribute type 1 has an invalid length.
[  371.351516][T17098] netlink: 'syz.5.2991': attribute type 1 has an invalid length.
[  371.391739][T17101] bond13: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  371.404063][T17101] bond13 (unregistering): Released all slaves
[  371.446044][T17098] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  371.469944][T17106] bond10: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  371.501175][T16862] 8021q: adding VLAN 0 to HW filter on device team0
[  371.514520][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.521818][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.589252][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.596509][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.666567][T17110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2992'.
[  371.679882][T17111] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.688752][T17115] syzkaller0: entered promiscuous mode
[  371.692892][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.696682][T17115] syzkaller0: entered allmulticast mode
[  371.703477][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.789714][T17115] tipc: Resetting bearer <eth:syzkaller0>
[  371.847264][T17115] tipc: Disabling bearer <eth:syzkaller0>
[  372.001190][ T3863] wlan1: Creating new IBSS network, BSSID d2:8e:7b:bc:6a:be
[  372.035602][T17125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2996'.
[  372.167416][T10709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.210262][T17138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.220015][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.252882][T17137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.286159][T17140] xt_TCPMSS: Only works on TCP SYN packets
[  372.323765][T17143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3002'.
[  372.409126][T16862] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.496047][T17147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3004'.
[  372.523342][T16862] veth0_vlan: entered promiscuous mode
[  372.533920][T17147] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3004'.
[  372.548292][T16862] veth1_vlan: entered promiscuous mode
[  372.608879][T16862] veth0_macvtap: entered promiscuous mode
[  372.634898][T16862] veth1_macvtap: entered promiscuous mode
[  372.722774][T16862] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.759640][T16862] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.811627][ T7600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.838568][ T7600] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.866410][ T7600] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.905657][ T7600] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.007310][T17166] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.3010'.
[  373.044661][T16409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.068253][T16409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.120679][ T5838] Bluetooth: hci6: command tx timeout
[  373.237343][T17175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3013'.
[  373.279563][T16409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.292331][T16409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.301615][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3015'.
[  373.315592][T17180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3015'.
[  373.325032][T17180] netlink: 'syz.5.3015': attribute type 14 has an invalid length.
[  373.334218][T17179] netlink: 'syz.5.3015': attribute type 14 has an invalid length.
[  373.361486][T17180] netlink: 'syz.5.3015': attribute type 13 has an invalid length.
[  373.369431][T17177] syzkaller0: entered promiscuous mode
[  373.376462][T17179] netlink: 'syz.5.3015': attribute type 13 has an invalid length.
[  373.385055][T17177] syzkaller0: entered allmulticast mode
[  373.522230][T17188] xt_policy: neither incoming nor outgoing policy selected
[  374.321332][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  374.333418][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  374.342488][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  374.351851][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  374.359746][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  374.468288][T17202] ip6_vti0 speed is unknown, defaulting to 1000
[  375.403455][T17202] erspan0 speed is unknown, defaulting to 1000
[  375.478438][T17250] gretap0: entered promiscuous mode
[  375.490719][T17250] batadv_slave_1: entered promiscuous mode
[  375.496837][T17250] batadv_slave_1: left promiscuous mode
[  375.534013][T17250] gretap0: left promiscuous mode
[  375.746557][T17256] __nla_validate_parse: 8 callbacks suppressed
[  375.746577][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3035'.
[  375.866521][T17262] xt_hashlimit: size too large, truncated to 1048576
[  375.905453][T17260] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3037'.
[  376.278800][T17275] mac80211_hwsim hwsim25 wlan1: vlans aren't supported yet for dev_uc|mc_add()
[  376.302568][T17202] chnl_net:caif_netlink_parms(): no params data found
[  376.323052][ T8281] net_ratelimit: 5 callbacks suppressed
[  376.323074][ T8281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.400809][ T5833] Bluetooth: hci0: command tx timeout
[  376.568625][T17202] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.584437][T17202] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.598810][T17202] bridge_slave_0: entered allmulticast mode
[  376.612369][T17202] bridge_slave_0: entered promiscuous mode
[  376.622448][T17202] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.629881][T17202] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.654810][T17202] bridge_slave_1: entered allmulticast mode
[  376.675657][T17202] bridge_slave_1: entered promiscuous mode
[  376.865371][T17202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  376.902539][T17202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.058164][T17202] team0: Port device team_slave_0 added
[  377.081142][T17202] team0: Port device team_slave_1 added
[  377.142973][T17308] xt_TCPMSS: Only works on TCP SYN packets
[  377.176439][T17202] batman_adv: batadv0: Adding interface: batadv_slave_0
[  377.186055][T17202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  377.218755][T17202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  377.243011][T17202] batman_adv: batadv0: Adding interface: batadv_slave_1
[  377.250104][T17202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  377.274896][T17311] xt_ecn: cannot match TCP bits for non-tcp packets
[  377.307925][T17202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  377.390222][ T8281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.484975][T17202] hsr_slave_0: entered promiscuous mode
[  377.501792][T17202] hsr_slave_1: entered promiscuous mode
[  377.524711][T17202] debugfs: 'hsr0' already exists in 'hsr'
[  377.540853][T17202] Cannot create hsr debugfs directory
[  377.558662][T17313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.567198][T17313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.576706][T17313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.586454][T17312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.601586][T17312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.898108][T17323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3057'.
[  377.932278][T17202] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  377.943769][T17202] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.955427][T17324] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3057'.
[  378.067800][T17202] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.082262][T17202] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.158553][T17330] Cannot find del_set index 4 as target
[  378.161797][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.173004][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.188233][T17202] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.205626][T17329] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  378.228275][T17202] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.259846][T17333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.328542][T17202] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.343824][T17202] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.482209][ T5833] Bluetooth: hci0: command tx timeout
[  378.632635][T17202] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  378.659025][T17202] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  378.676258][T17202] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  378.708500][T17202] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  378.812372][T17360] Bluetooth: MGMT ver 1.23
[  378.840104][T17361] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3067'.
[  378.877600][T17361] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3067'.
[  378.905836][T17361] erspan0: entered promiscuous mode
[  378.912804][T17361] gretap0: entered promiscuous mode
[  378.974321][T17369] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3069'.
[  378.977308][T17202] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.035613][T17202] 8021q: adding VLAN 0 to HW filter on device team0
[  379.057705][T17368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  379.066733][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.074721][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.130789][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.138005][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  379.242172][T17378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3072'.
[  379.323538][T17384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3073'.
[  379.367776][T17378] bond13: option xmit_hash_policy: invalid value (64)
[  379.375357][T17384] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  379.391829][T17378] bond13 (unregistering): Released all slaves
[  379.624373][T17396] netlink: 'syz.4.3077': attribute type 12 has an invalid length.
[  379.634438][T17396] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3077'.
[  379.658354][T17202] 8021q: adding VLAN 0 to HW filter on device batadv0
[  379.737764][T17396] bond13: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  379.753652][T17396] bond13: entered promiscuous mode
[  379.760367][T17396] bond13: entered allmulticast mode
[  379.766677][T17396] 8021q: adding VLAN 0 to HW filter on device bond13
[  379.825319][T17403] tipc: Started in network mode
[  379.833019][T17403] tipc: Node identity 0abb6d12f7da, cluster identity 4711
[  379.848742][T17403] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  379.903737][T17403] syzkaller0: entered promiscuous mode
[  379.909386][T17403] syzkaller0: entered allmulticast mode
[  379.917002][T17403] tipc: Resetting bearer <eth:syzkaller0>
[  379.931219][T17402] tipc: Resetting bearer <eth:syzkaller0>
[  380.560411][ T5833] Bluetooth: hci0: command tx timeout
[  381.524862][T10706] net_ratelimit: 6 callbacks suppressed
[  381.524883][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.710888][T17402] tipc: Disabling bearer <eth:syzkaller0>
[  381.752012][T10705] tipc: Node number set to 4251020562
[  381.805553][T17202] veth0_vlan: entered promiscuous mode
[  381.819708][T17202] veth1_vlan: entered promiscuous mode
[  381.892662][T17202] veth0_macvtap: entered promiscuous mode
[  381.899809][T17434] netlink: 'syz.4.3090': attribute type 32 has an invalid length.
[  381.918700][T17434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3090'.
[  381.939573][T17202] veth1_macvtap: entered promiscuous mode
[  381.987322][T17438] netlink: 'syz.5.3091': attribute type 1 has an invalid length.
[  381.997711][T17434] bond14: option coupled_control: invalid value (52)
[  382.015733][T17438] netlink: 'syz.5.3091': attribute type 2 has an invalid length.
[  382.026460][T17434] bond14 (unregistering): Released all slaves
[  382.044714][T17438] netlink: 'syz.5.3091': attribute type 1 has an invalid length.
[  382.064321][T17438] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3091'.
[  382.085615][T17202] batman_adv: batadv0: Interface activated: batadv_slave_0
[  382.098635][T17202] batman_adv: batadv0: Interface activated: batadv_slave_1
[  382.130049][ T6058] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.166917][ T6058] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.253160][ T6058] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.300762][T17444] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.304013][ T6058] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.334030][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3094'.
[  382.355890][T16415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.380709][T16415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.488178][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.514537][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.562724][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.643816][ T5833] Bluetooth: hci0: command tx timeout
[  383.015208][T17478] netlink: 'syz.0.3101': attribute type 1 has an invalid length.
[  383.052052][T17478] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3101'.
[  383.173272][T17480] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3102'.
[  383.284820][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  383.295342][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  383.304379][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  383.312467][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  383.321379][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  383.423612][T17483] ip6_vti0 speed is unknown, defaulting to 1000
[  383.533355][T17492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3105'.
[  383.601183][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.690137][T17498] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3108'.
[  383.715256][T17492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3105'.
[  383.865670][T17502] netlink: 'syz.5.3110': attribute type 8 has an invalid length.
[  384.025024][T17508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.313628][T17526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.429185][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3118'.
[  384.451986][T17483] erspan0 speed is unknown, defaulting to 1000
[  384.472293][T17531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.482144][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.650563][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.982607][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  385.002856][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  385.015782][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  385.025506][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  385.035887][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  385.231284][T17558] netlink: 'syz.5.3126': attribute type 29 has an invalid length.
[  385.246756][T17558] netlink: 'syz.5.3126': attribute type 29 has an invalid length.
[  385.305919][T17549] ip6_vti0 speed is unknown, defaulting to 1000
[  385.323039][T17483] chnl_net:caif_netlink_parms(): no params data found
[  385.361090][ T5838] Bluetooth: hci1: command tx timeout
[  385.454404][T17563] netlink: 284 bytes leftover after parsing attributes in process `syz.5.3128'.
[  385.515263][T17561] netlink: 'syz.0.3127': attribute type 9 has an invalid length.
[  385.537318][T17561] netlink: 'syz.0.3127': attribute type 11 has an invalid length.
[  385.548003][T17561] netlink: 'syz.0.3127': attribute type 12 has an invalid length.
[  385.682528][T10707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.793064][T17483] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.812144][T17483] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.819496][T17483] bridge_slave_0: entered allmulticast mode
[  385.859658][T17483] bridge_slave_0: entered promiscuous mode
[  385.872456][T17483] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.904499][T17483] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.946021][T17483] bridge_slave_1: entered allmulticast mode
[  385.974092][T17483] bridge_slave_1: entered promiscuous mode
[  386.089177][T17483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.121788][T17483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.259567][T17483] team0: Port device team_slave_0 added
[  386.282661][T17483] team0: Port device team_slave_1 added
[  386.379486][T17549] erspan0 speed is unknown, defaulting to 1000
[  386.394234][T17483] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.420276][T17483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.454662][T17483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.469561][T17483] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.478096][T17483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.509706][T17483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.676680][T17483] hsr_slave_0: entered promiscuous mode
[  386.689015][T17483] hsr_slave_1: entered promiscuous mode
[  386.701203][T17483] debugfs: 'hsr0' already exists in 'hsr'
[  386.710680][T17483] Cannot create hsr debugfs directory
[  386.724909][ T8281] net_ratelimit: 2 callbacks suppressed
[  386.724927][ T8281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.764136][T17601] batman_adv: batadv0: Adding interface: dummy0
[  386.771216][T17601] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.797993][T17601] batman_adv: batadv0: Interface activated: dummy0
[  387.112548][T17613] sctp: [Deprecated]: syz.3.3141 (pid 17613) Use of struct sctp_assoc_value in delayed_ack socket option.
[  387.112548][T17613] Use struct sctp_sack_info instead
[  387.132400][ T5838] Bluetooth: hci2: command tx timeout
[  387.179673][   T30] audit: type=1107 audit(1768690139.166:2): pid=17616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  387.184080][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888058d86000: rx timeout, send abort
[  387.285608][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888058d86000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  387.387620][T17483] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.408346][T17483] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  387.441055][T17622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.450632][ T5838] Bluetooth: hci1: command tx timeout
[  387.535825][T17627] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  387.579924][T17549] chnl_net:caif_netlink_parms(): no params data found
[  387.722409][T17483] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.740529][T17483] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  387.761243][T10707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.840922][T17638] netlink: 'syz.3.3147': attribute type 2 has an invalid length.
[  387.850115][T17639] netlink: 'syz.3.3147': attribute type 2 has an invalid length.
[  387.888012][T17483] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.898877][T17483] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  387.913814][T17640] netlink: 'syz.5.3146': attribute type 1 has an invalid length.
[  387.967370][T17549] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.976123][T17549] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.985924][T17549] bridge_slave_0: entered allmulticast mode
[  387.995466][T17549] bridge_slave_0: entered promiscuous mode
[  388.122667][T17483] bond0: (slave netdevsim0): Releasing backup interface
[  388.139428][T17483] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.154572][T17483] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  388.209962][T17549] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.217884][T17549] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.226486][T17549] bridge_slave_1: entered allmulticast mode
[  388.235218][T17549] bridge_slave_1: entered promiscuous mode
[  388.404632][T17549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  388.443294][T17549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  388.560024][T17663] __nla_validate_parse: 2 callbacks suppressed
[  388.560045][T17663] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3155'.
[  388.589740][T17549] team0: Port device team_slave_0 added
[  388.614339][T17549] team0: Port device team_slave_1 added
[  388.816948][ T8281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.833989][T17483] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  388.856454][T17549] batman_adv: batadv0: Adding interface: batadv_slave_0
[  388.876448][T17549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  388.932162][T17549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  388.945482][T17549] batman_adv: batadv0: Adding interface: batadv_slave_1
[  388.952980][T17549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  388.996762][T17549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  389.021282][T17483] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  389.040913][ T6058] wlan1: Trigger new scan to find an IBSS to join
[  389.107436][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.141487][T17680] syzkaller0: entered promiscuous mode
[  389.148730][T17680] syzkaller0: entered allmulticast mode
[  389.194636][T17483] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  389.203001][ T5838] Bluetooth: hci2: command tx timeout
[  389.244130][ T7600] bridge_slave_1: left allmulticast mode
[  389.251489][ T7600] bridge_slave_1: left promiscuous mode
[  389.259203][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.285823][ T7600] bridge_slave_0: left allmulticast mode
[  389.296926][ T7600] bridge_slave_0: left promiscuous mode
[  389.311902][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.341639][ T7600] veth0_to_bond: left allmulticast mode
[  389.347346][ T7600] veth0_to_bond: left promiscuous mode
[  389.361593][ T7600] bridge1: port 2(veth0_to_bond) entered disabled state
[  389.378204][ T7600] veth3: left allmulticast mode
[  389.386977][ T7600] veth3: left promiscuous mode
[  389.392461][ T7600] bridge1: port 1(veth3) entered disabled state
[  389.414549][T17689] netlink: 'syz.5.3162': attribute type 10 has an invalid length.
[  389.492361][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.525064][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.532188][ T5838] Bluetooth: hci1: command tx timeout
[  389.611703][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.736494][ T1137] smc: removing ib device syz2
[  389.841489][T10707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.892206][ T7600] bond6 (unregistering): (slave gretap1): Releasing active interface
[  390.271110][ T7600] bond4 (unregistering): (slave bridge2): Releasing backup interface
[  390.279332][ T7600] bridge2 (unregistering): left promiscuous mode
[  390.561160][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.953960][ T7600] ` (unregistering): (slave bond_slave_0): Releasing backup interface
[  390.966990][ T7600] ` (unregistering): (slave bond_slave_1): Releasing backup interface
[  390.987698][ T7600] ` (unregistering): Released all slaves
[  391.045469][ T7600] bond1 (unregistering): Released all slaves
[  391.269061][ T7600] bond2 (unregistering): (slave bond3): Releasing active interface
[  391.283388][ T5838] Bluetooth: hci2: command tx timeout
[  391.291096][ T7600] bond2 (unregistering): Released all slaves
[  391.541108][ T7600] bond3 (unregistering): Released all slaves
[  391.610753][ T5838] Bluetooth: hci1: command tx timeout
[  391.755037][ T7600] bond4 (unregistering): Released all slaves
[  391.768866][ T7600] bond5 (unregistering): Released all slaves
[  391.783384][ T7600] bond6 (unregistering): Released all slaves
[  391.797666][ T7600] bond7 (unregistering): Released all slaves
[  391.817073][ T7600] bond8 (unregistering): Released all slaves
[  391.930975][T10706] net_ratelimit: 2 callbacks suppressed
[  391.930995][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.947885][ T7600] bond9 (unregistering): Released all slaves
[  392.061391][ T7600] bond10 (unregistering): Released all slaves
[  392.075638][ T7600] bond0 (unregistering): Released all slaves
[  392.091030][ T7600] bond11 (unregistering): Released all slaves
[  392.207789][ T7600] bond12 (unregistering): Released all slaves
[  392.320009][ T7600] bond13 (unregistering): Released all slaves
[  392.374929][T17483] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  392.404408][T17695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3164'.
[  392.607200][ T7600] tipc: Disabling bearer <eth:veth0_to_team>
[  392.641696][  T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.653685][ T7600] tipc: Left network mode
[  392.671255][ T8281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.673966][T17549] hsr_slave_0: entered promiscuous mode
[  392.685277][T17712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3166'.
[  392.691209][T17549] hsr_slave_1: entered promiscuous mode
[  392.704685][T17549] debugfs: 'hsr0' already exists in 'hsr'
[  392.711271][T17549] Cannot create hsr debugfs directory
[  392.746105][T17704] netlink: 'syz.3.3166': attribute type 12 has an invalid length.
[  392.754527][T17704] netlink: 'syz.3.3166': attribute type 29 has an invalid length.
[  392.766687][T17704] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3166'.
[  392.776302][T17704] netlink: 'syz.3.3166': attribute type 2 has an invalid length.
[  392.785858][T17704] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3166'.
[  392.811168][  T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.964595][ T8281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.038573][T17722] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.131493][T17724] x_tables: duplicate entry at hook 3
[  393.175083][T17722] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.276667][T17722] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.360321][ T5838] Bluetooth: hci2: command tx timeout
[  393.453231][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.461879][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.486182][T17722] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.549426][T17732] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  393.686828][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.829345][ T1137] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.875805][T17549] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  393.947964][ T3463] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.959929][T17549] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  394.000730][ T3463] wlan1: Trigger new scan to find an IBSS to join
[  394.001715][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.015846][T17549] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  394.121854][T17744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3175'.
[  394.132327][T17745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3175'.
[  394.171515][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.190824][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  394.222560][T17747] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3176'.
[  394.232383][T17549] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  394.350459][ T3463] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  394.503682][T17760] netlink: 'syz.5.3178': attribute type 1 has an invalid length.
[  394.523343][T17760] netlink: 'syz.5.3178': attribute type 2 has an invalid length.
[  394.534095][T17483] 8021q: adding VLAN 0 to HW filter on device bond0
[  394.693649][ T7600] hsr_slave_0: left promiscuous mode
[  394.703802][ T7600] hsr_slave_1: left promiscuous mode
[  394.717486][ T7600] batman_adv: batadv0: Removing interface: batadv_slave_1
[  394.931174][ T1129] wlan1: Creating new IBSS network, BSSID 86:e3:2e:ea:ae:58
[  396.096015][ T7600] team0 (unregistering): Port device team_slave_1 removed
[  396.129025][ T7600] team0 (unregistering): Port device team_slave_0 removed
[  396.449907][T17483] 8021q: adding VLAN 0 to HW filter on device team0
[  396.690134][T17775] sch_fq: defrate 0 ignored.
[  396.732599][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.739812][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.841418][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.848655][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.084588][T17549] 8021q: adding VLAN 0 to HW filter on device bond0
[  397.120890][T10705] net_ratelimit: 9 callbacks suppressed
[  397.120916][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.145640][T17549] 8021q: adding VLAN 0 to HW filter on device team0
[  397.231084][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.238348][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.318601][T16415] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.325855][T16415] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.336237][T17804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3189'.
[  397.407233][T17810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.462717][T17804] 8021q: adding VLAN 0 to HW filter on device bond1
[  397.480505][T17807] netlink: 'syz.3.3190': attribute type 58 has an invalid length.
[  397.488742][T17807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3190'.
[  397.590120][T17812] 8021q: adding VLAN 0 to HW filter on device bond1
[  397.599436][T17812] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  397.613416][T17812] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  397.711182][T17483] 8021q: adding VLAN 0 to HW filter on device batadv0
[  397.846155][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.164403][T17842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.173300][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.182676][T10709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.444069][ T5949] IPVS: starting estimator thread 0...
[  398.541460][T17856] IPVS: using max 30 ests per chain, 72000 per kthread
[  398.622281][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3200'.
[  398.641501][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3200'.
[  398.651184][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3200'.
[  398.881396][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.046414][T10709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.207737][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.924001][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.574332][T17549] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.752599][T17483] veth0_vlan: entered promiscuous mode
[  400.778686][T17483] veth1_vlan: entered promiscuous mode
[  400.861434][T17483] veth0_macvtap: entered promiscuous mode
[  400.884257][T17483] veth1_macvtap: entered promiscuous mode
[  400.948042][T17483] batman_adv: batadv0: Interface activated: batadv_slave_0
[  401.001775][T17483] batman_adv: batadv0: Interface activated: batadv_slave_1
[  401.059713][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.083699][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.101540][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.116548][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.134139][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3207'.
[  401.149505][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3207'.
[  401.159322][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3207'.
[  401.314213][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.340767][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.393269][ T6058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.403368][ T6058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.449138][T17549] veth0_vlan: entered promiscuous mode
[  401.503764][T17549] veth1_vlan: entered promiscuous mode
[  401.607216][T17549] veth0_macvtap: entered promiscuous mode
[  401.637317][T17549] veth1_macvtap: entered promiscuous mode
[  401.676386][T17549] batman_adv: batadv0: Interface activated: batadv_slave_0
[  401.712114][T17917] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3210'.
[  401.722597][T17549] batman_adv: batadv0: Interface activated: batadv_slave_1
[  401.745047][   T38] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.755581][T17917] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3210'.
[  401.766424][T16415] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.785905][T16415] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.807330][T16415] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.940113][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.960300][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.104530][T17928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  402.112592][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.123599][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.137696][T17928] batman_adv: batadv0: Removing interface: batadv_slave_0
[  402.158016][T17928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  402.171109][T17928] batman_adv: batadv0: Removing interface: batadv_slave_1
[  402.321591][T10707] net_ratelimit: 7 callbacks suppressed
[  402.321607][T10707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.684878][T17960] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3221'.
[  402.950960][T17969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3224'.
[  403.061943][ T6048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.081546][T17981] netlink: 'syz.5.3222': attribute type 5 has an invalid length.
[  403.187064][T17986] netlink: 'syz.3.3228': attribute type 6 has an invalid length.
[  403.203162][T17987] 8021q: VLANs not supported on ipvlan1
[  403.245416][T17989] veth1_macvtap: left promiscuous mode
[  403.296764][T17986] netlink: 'syz.3.3228': attribute type 6 has an invalid length.
[  403.363343][T10709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.444691][T17996] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  403.556878][T17996] Cannot find add_set index 0 as target
[  403.622618][T17996] syzkaller1: entered promiscuous mode
[  403.670961][T17996] syzkaller1: entered allmulticast mode
[  404.029433][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3235'.
[  404.076252][T18021] netlink: 'syz.5.3235': attribute type 9 has an invalid length.
[  404.092421][T17904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.114699][T18021] netlink: 'syz.5.3235': attribute type 11 has an invalid length.
[  404.149755][T18021] netlink: 'syz.5.3235': attribute type 12 has an invalid length.
[  404.166033][T18021] netlink: 199280 bytes leftover after parsing attributes in process `syz.5.3235'.
[  404.253250][T18030] vlan2: entered allmulticast mode
[  404.258451][T18030] hsr0: entered allmulticast mode
[  404.300329][T18030] hsr_slave_0: entered allmulticast mode
[  404.323672][T18030] hsr_slave_1: entered allmulticast mode
[  404.324449][   T38] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  404.403279][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.550526][T18047] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3244'.
[  404.905775][ T6229] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  404.966476][T10709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.120985][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.129155][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.146402][T18056] erspan0 speed is unknown, defaulting to 1000
[  405.443508][T10707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.163178][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.362611][T18109] x_tables: duplicate underflow at hook 2
[  406.402628][   T52] Bluetooth: hci4: command 0x0405 tx timeout
[  406.441369][T18115] Cannot find add_set index 0 as target
[  407.002866][T18142] __nla_validate_parse: 3 callbacks suppressed
[  407.002885][T18142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3273'.
[  407.063905][T18142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  407.176199][T18142] batman_adv: batadv0: Removing interface: batadv_slave_1
[  407.196831][T18151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3276'.
[  407.448359][T18159] net_ratelimit: 3 callbacks suppressed
[  407.448381][T18159] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  407.525084][T10707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.533527][T18166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3281'.
[  407.533608][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.557562][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.724453][T18169] syzkaller0: entered promiscuous mode
[  407.738121][T18169] syzkaller0: entered allmulticast mode
[  407.777202][T18165] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  407.817116][T18165] tipc: New replicast peer: 255.255.255.255
[  407.842536][T18165] tipc: Enabled bearer <udp:syz2>, priority 10
[  407.968110][T18183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3284'.
[  408.001903][T18189] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3286'.
[  408.013495][T18191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3284'.
[  408.075836][T18186] ip6gre2: entered allmulticast mode
[  408.173768][T18161] tipc: Resetting bearer <eth:syzkaller0>
[  408.241452][ T6048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.294887][T18161] tipc: Disabling bearer <eth:syzkaller0>
[  408.381125][T18203] IPv4: Oversized IP packet from 172.20.20.24
[  408.388794][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  408.395607][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  408.560913][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.953597][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3300'.
[  409.091392][T18246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3300'.
[  409.281031][T10707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.493638][T18277] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  409.541483][T18277] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3308'.
[  410.267325][T18297] netlink: 'syz.6.3311': attribute type 1 has an invalid length.
[  410.281795][T18298] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3311'.
[  410.449302][T18304] netlink: 'syz.6.3313': attribute type 9 has an invalid length.
[  410.460574][T18304] netlink: 'syz.6.3313': attribute type 11 has an invalid length.
[  410.500784][T18304] netlink: 'syz.6.3313': attribute type 12 has an invalid length.
[  410.733533][T18326] netlink: 'syz.6.3318': attribute type 21 has an invalid length.
[  410.795007][T18326] netlink: 'syz.6.3318': attribute type 6 has an invalid length.
[  411.532367][T18342] netlink: 'syz.5.3320': attribute type 1 has an invalid length.
[  411.540288][T18343] netem: incorrect ge model size
[  411.550053][T18343] netem: change failed
[  411.587926][T18342] xt_limit: Overflow, try lower: 604147548/4200216962
[  411.818254][T18367] netlink: 'syz.5.3329': attribute type 3 has an invalid length.
[  411.863572][T18368] syzkaller0: entered promiscuous mode
[  411.869138][T18368] syzkaller0: entered allmulticast mode
[  411.935723][T18373] gretap0: entered promiscuous mode
[  411.963336][T18373] gretap0: left promiscuous mode
[  412.175819][T18393] __nla_validate_parse: 9 callbacks suppressed
[  412.175841][T18393] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3335'.
[  412.416130][T18404] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3338'.
[  412.572624][T18409] net_ratelimit: 9 callbacks suppressed
[  412.572645][T18409] openvswitch: netlink: Message has 2712 unknown bytes.
[  412.590012][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3340'.
[  412.606344][T18411] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3341'.
[  412.614588][T18409] openvswitch: netlink: Flow key attr not present in new flow.
[  412.640884][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.658926][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.722673][T10707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.972069][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3345'.
[  412.991275][T18425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3346'.
[  413.267336][T18425] hsr_slave_1 (unregistering): left promiscuous mode
[  413.309776][ T5919] IPVS: starting estimator thread 0...
[  413.381729][T18443] openvswitch: netlink: Key type 48 is out of range max 32
[  413.420786][T18441] IPVS: using max 38 ests per chain, 91200 per kthread
[  413.442275][T17904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.488870][T18449] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3353'.
[  413.507315][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3353'.
[  413.731382][T18463] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3359'.
[  413.760878][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.769824][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.778489][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.826448][T18468] netlink: 'syz.3.3361': attribute type 1 has an invalid length.
[  413.834973][T18468] netlink: 'syz.3.3361': attribute type 1 has an invalid length.
[  413.852040][T18467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3360'.
[  414.970468][T18497] bond2: entered promiscuous mode
[  414.991443][T18497] 8021q: adding VLAN 0 to HW filter on device bond2
[  415.018964][T18498] bond2: (slave bridge0): making interface the new active one
[  415.026848][T18498] bridge0: entered promiscuous mode
[  415.033862][T18498] bond2: (slave bridge0): Enslaving as an active interface with an up link
[  415.049964][T18533] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  415.078107][T18533] batman_adv: batadv0: Removing interface: batadv_slave_0
[  415.113703][T18533] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  415.135339][T18533] batman_adv: batadv0: Removing interface: batadv_slave_1
[  415.151148][T18533] batman_adv: batadv0: Interface deactivated: dummy0
[  415.168838][T18533] batman_adv: batadv0: Removing interface: dummy0
[  415.339043][T18546] syzkaller0: entered promiscuous mode
[  415.345580][T18546] syzkaller0: entered allmulticast mode
[  415.418346][T18553] validate_nla: 64 callbacks suppressed
[  415.418366][T18553] netlink: 'syz.0.3385': attribute type 12 has an invalid length.
[  415.451169][T18553] netlink: 'syz.0.3385': attribute type 29 has an invalid length.
[  415.465098][T18553] netlink: 'syz.0.3385': attribute type 1 has an invalid length.
[  415.507392][T18555] netlink: 'syz.3.3386': attribute type 3 has an invalid length.
[  415.525133][T18555] netlink: 'syz.3.3386': attribute type 1 has an invalid length.
[  415.924788][T18578] sctp: [Deprecated]: syz.3.3394 (pid 18578) Use of int in maxseg socket option.
[  415.924788][T18578] Use struct sctp_assoc_value instead
[  415.963292][T18579] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  416.628105][T18589] syzkaller0: entered promiscuous mode
[  416.672985][T18589] syzkaller0: entered allmulticast mode
[  416.852017][T18607] syzkaller0: entered promiscuous mode
[  416.859404][T18607] syzkaller0: entered allmulticast mode
[  417.157581][T18618] syzkaller0: entered promiscuous mode
[  417.189051][T18618] syzkaller0: entered allmulticast mode
[  417.610978][ T5919] net_ratelimit: 16 callbacks suppressed
[  417.610999][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.922392][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.656220][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.964740][T10707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.698475][T17904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.007684][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.016123][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.026921][T10703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.035637][T10704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.732140][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.939790][T18632] bond2: option miimon: invalid value (18446744073709551585)
[  420.947989][T18632] bond2: option miimon: allowed values 0 - 2147483647
[  420.963897][T18632] bond2 (unregistering): Released all slaves
[  421.001426][T18636] erspan0: entered promiscuous mode
[  421.012093][T18642] netlink: 'syz.3.3416': attribute type 1 has an invalid length.
[  421.024517][T18636] __nla_validate_parse: 14 callbacks suppressed
[  421.024539][T18636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3414'.
[  421.224085][T18646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3417'.
[  421.239221][T18643] veth3: entered promiscuous mode
[  421.271460][T18643] bond2: (slave veth3): Enslaving as a backup interface with a down link
[  421.406611][T18659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3421'.
[  421.490916][T18662] x_tables: duplicate entry at hook 2
[  421.619418][T18673] pim6reg1: entered promiscuous mode
[  421.642338][T18673] pim6reg1: entered allmulticast mode
[  421.679780][T18677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3429'.
[  421.689509][T18677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3429'.
[  421.796185][T18677] gretap0: entered promiscuous mode
[  421.803992][T18677] gretap0: left promiscuous mode
[  421.819107][T18684] netlink: 'syz.6.3430': attribute type 15 has an invalid length.
[  421.835194][T18684] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3430'.
[  421.916589][ T6058] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  421.916923][T18684] netlink: 'syz.6.3430': attribute type 15 has an invalid length.
[  421.936666][T18684] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3430'.
[  421.949402][ T6058] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  421.962987][T18690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3433'.
[  421.979561][ T6058] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  421.999837][ T6058] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  422.033258][T18685] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  422.131981][T18694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3434'.
[  422.223148][T18686] "syz.5.3431" (18686) uses obsolete ecb(arc4) skcipher
[  422.261681][T18704] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3436'.
[  422.319304][T18704] netlink: 'syz.3.3436': attribute type 4 has an invalid length.
[  422.354695][T18702] vlan2: entered promiscuous mode
[  422.367345][T18702] geneve1: entered promiscuous mode
[  422.373596][T18702] vlan2: entered allmulticast mode
[  422.390746][T18702] geneve1: entered allmulticast mode
[  422.878996][T18729] syzkaller0: entered promiscuous mode
[  422.998502][T18729] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  423.123874][T10706] net_ratelimit: 9 callbacks suppressed
[  423.123896][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.544665][T18755] bond2: option resend_igmp: invalid value (32767)
[  423.560855][T18755] bond2: option resend_igmp: allowed values 0 - 255
[  423.571517][T18755] bond2 (unregistering): Released all slaves
[  423.852106][T18778] syzkaller0: entered promiscuous mode
[  423.868854][T18778] syzkaller0: entered allmulticast mode
[  423.883089][T18783] netlink: 'syz.0.3459': attribute type 1 has an invalid length.
[  423.906213][T18783] netlink: 'syz.0.3459': attribute type 3 has an invalid length.
[  424.173837][T10704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.624747][T18818] syzkaller0: entered promiscuous mode
[  424.644346][T18831] SET target dimension over the limit!
[  424.650133][T18818] syzkaller0: entered allmulticast mode
[  424.805144][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.940039][ T6229] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  425.205232][T10704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.396980][T18872] syzkaller0: entered promiscuous mode
[  425.405163][T18872] syzkaller0: entered allmulticast mode
[  426.134935][T18891] netlink: 'syz.6.3494': attribute type 10 has an invalid length.
[  426.174926][T18891] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  426.226971][T18891] netlink: 'syz.6.3494': attribute type 10 has an invalid length.
[  426.243169][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.254712][T18891] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  426.494132][T18909] __nla_validate_parse: 13 callbacks suppressed
[  426.494154][T18909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3499'.
[  426.523288][T18884] openvswitch: netlink: IP tunnel dst address not specified
[  426.574844][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3492'.
[  426.594770][T18913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3499'.
[  426.624955][T18911] netlink: 'syz.3.3492': attribute type 1 has an invalid length.
[  426.635739][T18909] bond2: entered promiscuous mode
[  426.641706][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.650612][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.669003][T18909] 8021q: adding VLAN 0 to HW filter on device bond2
[  426.700417][T18911] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3492'.
[  426.732447][T18913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3499'.
[  426.831606][T18917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3501'.
[  426.932710][T18909] team_slave_0: entered promiscuous mode
[  426.938544][T18909] team_slave_1: entered promiscuous mode
[  426.988528][T18909] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  427.071144][T18920] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  427.173822][T18919] erspan0: entered promiscuous mode
[  427.179129][T18919] erspan0: entered allmulticast mode
[  427.281237][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.321334][T18930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3505'.
[  427.526893][T18940] netlink: 'syz.0.3509': attribute type 10 has an invalid length.
[  427.593989][T18940] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  427.802161][T18919] netlink: 'syz.6.3502': attribute type 11 has an invalid length.
[  427.810065][T18919] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.3502'.
[  427.827889][T18951] netlink: 'syz.4.3513': attribute type 1 has an invalid length.
[  427.837281][T18951] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3513'.
[  428.295084][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3517'.
[  428.322844][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.421611][T18968] syz_tun: entered allmulticast mode
[  428.472914][T18967] syz_tun: left allmulticast mode
[  428.671851][T18980] bond3: Invalid ad_actor_system MAC address.
[  428.678106][T18980] bond3: option ad_actor_system: invalid value (1)
[  428.714026][T18980] bond3 (unregistering): Released all slaves
[  429.126311][T19005] syzkaller0: entered promiscuous mode
[  429.134319][T19005] syzkaller0: entered allmulticast mode
[  429.196153][T19014] netlink: 'syz.3.3532': attribute type 11 has an invalid length.
[  429.231096][T19016] netlink: 'syz.6.3533': attribute type 6 has an invalid length.
[  429.360955][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.611529][T19037] netlink: 'syz.5.3534': attribute type 16 has an invalid length.
[  429.630754][T19037] netlink: 'syz.5.3534': attribute type 17 has an invalid length.
[  429.883730][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.894396][T19037] batadv0: entered promiscuous mode
[  429.988438][T19037] geneve3: left promiscuous mode
[  430.002105][T19037] geneve3: left allmulticast mode
[  430.047529][T19037] 8021q: adding VLAN 0 to HW filter on device bond1
[  430.079219][T19037] bond2: left promiscuous mode
[  430.086427][T19037] bridge0: left promiscuous mode
[  430.195515][   T38] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  430.204934][   T38] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  430.214159][   T38] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  430.226013][   T38] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  430.380896][T17904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.400919][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.441181][T10704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.214545][   T38] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  432.223711][   T38] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  432.235619][   T38] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  432.262781][T17904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.281124][   T38] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  432.347024][T17904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.376346][T17904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.434045][T17904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.511540][T19084] __nla_validate_parse: 16 callbacks suppressed
[  432.511560][T19084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3551'.
[  432.591616][T19087] vlan0: entered allmulticast mode
[  432.946228][T19106] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3556'.
[  433.108352][T19119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3558'.
[  433.371129][T19137] veth5: entered promiscuous mode
[  433.444743][T19134] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3565'.
[  433.736079][T19161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3572'.
[  433.876767][T19161] hsr_slave_0 (unregistering): left promiscuous mode
[  433.966311][ T1129] net_ratelimit: 6 callbacks suppressed
[  433.966332][ T1129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.982830][ T1129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.992098][T19167] tipc: Started in network mode
[  433.998277][T19167] tipc: Node identity 46b2929e2cb1, cluster identity 4711
[  434.006451][T19167] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  434.057941][T19148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.067402][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.081993][T19163] syzkaller0: entered promiscuous mode
[  434.089883][T19163] syzkaller0: entered allmulticast mode
[  434.100651][T19166] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  434.118616][T19148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.151944][T19148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.163761][T17904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.172760][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.183759][T19163] tipc: Resetting bearer <eth:syzkaller0>
[  434.199104][T17904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.208478][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.509400][T19186] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3579'.
[  434.627996][T19190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3580'.
[  434.659258][T19162] tipc: Resetting bearer <eth:syzkaller0>
[  434.770569][T19197] netlink: 'syz.5.3582': attribute type 21 has an invalid length.
[  434.793042][T19162] tipc: Disabling bearer <eth:syzkaller0>
[  434.801493][T19197] IPv6: NLM_F_CREATE should be specified when creating new route
[  435.137290][T19202] x_tables: duplicate entry at hook 3
[  435.453777][T19219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3590'.
[  435.744631][T19238] netlink: 'syz.0.3599': attribute type 18 has an invalid length.
[  435.795824][ T3463] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  435.811766][ T3463] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  435.834811][ T3463] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  435.871656][ T3463] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  435.905501][T19243] ip6t_REJECT: ECHOREPLY is not supported
[  436.028327][T19247] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3601'.
[  436.091370][T19247] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3601'.
[  436.200810][T19248] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.322246][T16415] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  436.480001][T19271] netlink: 'syz.4.3605': attribute type 11 has an invalid length.
[  436.647833][T19277] tipc: Started in network mode
[  436.697951][T19277] tipc: Node identity a659a58fe531, cluster identity 4711
[  436.722939][T19277] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  436.746384][T19278] syzkaller0: entered promiscuous mode
[  436.771378][T19278] syzkaller0: entered allmulticast mode
[  436.858929][T19277] tipc: Resetting bearer <eth:syzkaller0>
[  436.909032][T19276] tipc: Resetting bearer <eth:syzkaller0>
[  436.946890][T19276] tipc: Disabling bearer <eth:syzkaller0>
[  437.013020][T19296] tipc: Started in network mode
[  437.018179][T19296] tipc: Node identity d2093f140a74, cluster identity 4711
[  437.052430][T19296] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  437.093618][T19296] syzkaller0: entered promiscuous mode
[  437.099901][T19296] syzkaller0: entered allmulticast mode
[  437.128764][T19299] netlink: 'syz.6.3616': attribute type 7 has an invalid length.
[  437.165286][T19301] bridge3: entered promiscuous mode
[  437.174367][T19301] bridge3: entered allmulticast mode
[  437.187680][T19301] team0: Port device bridge3 added
[  437.203144][T19296] tipc: Resetting bearer <eth:syzkaller0>
[  437.234827][T19301] bridge0: port 3(team0) entered blocking state
[  437.258859][T19301] bridge0: port 3(team0) entered disabled state
[  437.268332][T19301] team0: entered allmulticast mode
[  437.274226][T19301] team_slave_0: entered allmulticast mode
[  437.281359][T19301] team_slave_1: entered allmulticast mode
[  437.292388][T19301] team0: left allmulticast mode
[  437.298037][T19301] team_slave_0: left allmulticast mode
[  437.305315][T19301] team_slave_1: left allmulticast mode
[  437.329803][T19294] tipc: Resetting bearer <eth:syzkaller0>
[  437.363220][T19294] tipc: Disabling bearer <eth:syzkaller0>
[  437.463786][T19312] bridge2: entered promiscuous mode
[  437.476827][T19312] bridge2: entered allmulticast mode
[  437.736273][T19318] syzkaller0: entered promiscuous mode
[  437.742070][T19318] syzkaller0: entered allmulticast mode
[  437.975072][T19340] __nla_validate_parse: 5 callbacks suppressed
[  437.975093][T19340] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3626'.
[  438.385012][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3636'.
[  438.403695][T19371] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3636'.
[  438.632532][T19384] netlink: 'syz.0.3640': attribute type 1 has an invalid length.
[  438.748661][T19386] bond3: (slave gretap1): making interface the new active one
[  438.758044][T19386] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  438.873074][T19396] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3643'.
[  438.905002][T19396] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.913630][T19396] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.185236][T19427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3652'.
[  439.224624][T19427] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  439.264927][T19427] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3652'.
[  439.593921][T19451] net_ratelimit: 26 callbacks suppressed
[  439.593943][T19451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  439.606084][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.199198][T19488] netlink: 'syz.5.3669': attribute type 1 has an invalid length.
[  440.343618][T19494] bond3: (slave gretap1): making interface the new active one
[  440.372328][T19488] netlink: 'syz.5.3669': attribute type 1 has an invalid length.
[  440.395355][T19494] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  440.440357][T19488] netlink: 'syz.5.3669': attribute type 2 has an invalid length.
[  440.448170][T19488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3669'.
[  440.503827][T19509] tipc: New replicast peer: 255.255.255.255
[  440.524095][T19509] tipc: Enabled bearer <udp:syz2>, priority 10
[  440.646032][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.689785][T19519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3677'.
[  440.803577][T19529] veth0: entered promiscuous mode
[  440.926006][T19529] veth0: left promiscuous mode
[  441.211418][T19550] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.3685'.
[  441.269847][T19547] vcan1: entered promiscuous mode
[  441.289443][T19556] netlink: 'syz.5.3682': attribute type 1 has an invalid length.
[  441.309639][T19556] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3682'.
[  441.322945][T19547] vcan1: entered allmulticast mode
[  441.645331][ T5897] tipc: Node number set to 1778619038
[  441.680743][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.722078][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.362350][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.371149][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.770846][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.780317][ T6229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.790741][T17904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.642047][T17904] net_ratelimit: 1 callbacks suppressed
[  444.642068][T17904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.681437][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.920558][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.721140][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.761013][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.802433][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.120961][ T1137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.129274][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.841358][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.881343][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.920984][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.962279][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.001004][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.882347][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.890762][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.041046][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.945415][   T74] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  456.083619][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.120967][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.161040][T10704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.202054][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.240954][T10704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.641323][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.651214][ T6058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.659555][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.691556][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.920923][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.721814][T10704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.761903][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.801380][T10704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.841104][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.402820][   T74] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.411501][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.890505][T10704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.944947][T19575] netlink: 'syz.4.3692': attribute type 1 has an invalid length.
[  466.954502][T19575] netlink: 'syz.4.3692': attribute type 1 has an invalid length.
[  466.969720][T19575] __nla_validate_parse: 3 callbacks suppressed
[  466.969741][T19575] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.3692'.
[  466.994216][T19571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3691'.
[  467.141457][T19571] 8021q: adding VLAN 0 to HW filter on device bond3
[  467.191584][T19581] vlan3: entered allmulticast mode
[  467.215463][T19581] bond3: entered allmulticast mode
[  467.282831][T19593] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.290042][T19593] bridge0: port 1(bridge_slave_0) entered forwarding state
[  467.707320][T19610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3699'.
[  467.708865][T19614] bond0: Error: Cannot enslave bond to itself.
[  467.841402][ T5838] Bluetooth: hci5: command 0x0405 tx timeout
[  467.864426][T19621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3701'.
[  467.872913][T19614] syzkaller0: entered promiscuous mode
[  467.881929][T19614] syzkaller0: entered allmulticast mode
[  467.921025][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.994610][T19630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3705'.
[  468.332253][   T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  468.970999][T10704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.020918][T10704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.104878][T19645] netlink: 'syz.6.3706': attribute type 1 has an invalid length.
[  470.402694][T19666] tipc: Invalid UDP bearer configuration
[  470.402748][T19666] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  470.738426][T19682] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3716'.
[  470.784920][T19682] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3716'.
[  470.950247][T19696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.959180][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.051477][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.087634][T19701] ip6gre1: entered promiscuous mode
[  471.093998][T19701] ip6gre1: entered allmulticast mode
[  471.374890][T19715] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3726'.
[  471.384922][T19715] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3726'.
[  471.522213][   T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.530813][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.685779][T19726] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  471.799145][T19729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.809083][T19729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.822346][T19729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.832941][T19729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.843394][T19729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.937685][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3732'.
[  471.947144][T19735] netlink: 'syz.0.3732': attribute type 6 has an invalid length.
[  471.959857][T19735] netlink: 'syz.0.3732': attribute type 6 has an invalid length.
[  472.235540][T19751] __nla_validate_parse: 3 callbacks suppressed
[  472.235563][T19751] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3738'.
[  472.432581][T19763] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3743'.
[  472.621924][T19775] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3746'.
[  472.688966][T19784] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3747'.
[  472.706221][T19784] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3747'.
[  472.835610][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3750'.
[  472.848681][T19793] syzkaller0: entered promiscuous mode
[  472.854523][T19793] syzkaller0: entered allmulticast mode
[  472.867610][T19793] xt_bpf: check failed: parse error
[  472.893233][T19796] tipc: Enabled bearer <udp:s>, priority 10
[  473.364020][T19828] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3753'.
[  473.750830][T19839] netlink: 'syz.6.3761': attribute type 29 has an invalid length.
[  473.778454][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3761'.
[  474.010266][T17904] tipc: Node number set to 1130931599
[  474.116910][T19867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3772'.
[  474.153700][T19874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3771'.
[  474.659254][T19892] geneve2: entered promiscuous mode
[  474.689016][T19892] geneve2: entered allmulticast mode
[  474.724754][ T3863] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  474.810070][ T3863] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  474.830685][ T3863] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  474.847421][ T3863] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  475.146928][T19919] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  475.169004][T19925] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0
[  475.180000][T19885] erspan0 speed is unknown, defaulting to 1000
[  475.187790][T19920] syzkaller1: entered promiscuous mode
[  475.230547][T19920] syzkaller1: entered allmulticast mode
[  476.242792][ T5897] net_ratelimit: 11 callbacks suppressed
[  476.242815][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.757848][T19986] netlink: 'syz.4.3805': attribute type 1 has an invalid length.
[  476.852039][T19986] 8021q: adding VLAN 0 to HW filter on device bond1
[  477.281256][T10704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.289528][T10704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.298529][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.569022][T20005] __nla_validate_parse: 6 callbacks suppressed
[  477.569043][T20005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3807'.
[  478.042915][T20034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3814'.
[  478.084390][T20034] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3814'.
[  478.117492][T20034] Bluetooth: MGMT ver 1.23
[  478.321332][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.439578][T20053] netlink: 71 bytes leftover after parsing attributes in process `syz.5.3821'.
[  478.717509][T20068] netdevsim netdevsim0 ������: renamed from netdevsim0 (while UP)
[  478.847815][T20076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  478.882822][T20076] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3829'.
[  478.926733][T20080] netlink: 'syz.6.3831': attribute type 3 has an invalid length.
[  479.342625][T20106] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 128
[  479.373924][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.478683][T20108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.595828][T20113] syzkaller0: entered promiscuous mode
[  479.604295][T20113] syzkaller0: entered allmulticast mode
[  479.618240][T20119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3843'.
[  479.628908][T20119] netlink: 'syz.0.3843': attribute type 1 has an invalid length.
[  479.695159][T20119] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3843'.
[  479.727218][T20122] xt_l2tp: wrong L2TP version: 0
[  479.898249][T20133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3849'.
[  479.934559][T20130] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  479.978020][T20142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3851'.
[  480.036028][T20141] netlink: 'syz.3.3851': attribute type 1 has an invalid length.
[  480.257762][T20155] netlink: 'syz.5.3856': attribute type 2 has an invalid length.
[  480.343036][T20162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3857'.
[  480.401138][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.419461][T20162] vlan3: entered allmulticast mode
[  480.453329][T20162] mac80211_hwsim hwsim49 wlan0: entered allmulticast mode
[  481.102248][T20202] syzkaller0: entered promiscuous mode
[  481.114345][T20202] syzkaller0: entered allmulticast mode
[  481.444682][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.595053][T20241] netlink: 'syz.0.3877': attribute type 12 has an invalid length.
[  481.607082][T20241] netlink: 'syz.0.3877': attribute type 29 has an invalid length.
[  481.718642][T20240] ieee80211 phy57: Failed to add default virtual iface
[  481.840709][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.898066][T20254] netlink: 'syz.5.3880': attribute type 1 has an invalid length.
[  482.138622][T20264] syzkaller0: entered promiscuous mode
[  482.167838][T20264] syzkaller0: entered allmulticast mode
[  482.484823][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.698316][T20294] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  482.708348][T20294] syzkaller0: entered promiscuous mode
[  482.715882][T20294] syzkaller0: entered allmulticast mode
[  482.784856][T20301] __nla_validate_parse: 11 callbacks suppressed
[  482.784880][T20301] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3890'.
[  482.813106][T20304] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3893'.
[  482.855753][T20294] tipc: Resetting bearer <eth:syzkaller0>
[  482.894374][T20291] tipc: Resetting bearer <eth:syzkaller0>
[  482.956122][T20291] tipc: Disabling bearer <eth:syzkaller0>
[  483.052739][ T6229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.061504][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.274843][T20319] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.318104][T20319] bridge_slave_1: left allmulticast mode
[  483.325814][T20319] bridge_slave_1: left promiscuous mode
[  483.341544][T20319] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.393353][T20319] bond0: (slave bond_slave_0): Releasing backup interface
[  483.423860][T20319] bond0: (slave bond_slave_1): Releasing backup interface
[  483.454740][T20319] team0: Port device team_slave_0 removed
[  483.467843][T20335] netlink: 'syz.5.3903': attribute type 1 has an invalid length.
[  483.488050][T20319] team0: Port device team_slave_1 removed
[  483.501564][T20319] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  483.509070][T20319] batman_adv: batadv0: Removing interface: batadv_slave_0
[  483.521624][T10704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.544172][T20319] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  483.696287][T20342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.719769][T20342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.740590][T20342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.763388][T20342] Cannot find add_set index 2 as target
[  483.823590][T20341] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3904'.
[  484.078912][T20368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3912'.
[  484.126805][T20368] netlink: 210448 bytes leftover after parsing attributes in process `syz.3.3912'.
[  484.181718][T20314] erspan0 speed is unknown, defaulting to 1000
[  484.205317][T20368] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3912'.
[  484.653817][T20379] bond5: ARP target 1.0.0.0 is already present
[  484.683684][T20379] bond5: option arp_ip_target: invalid value (1)
[  484.714851][T20379] bond5 (unregistering): Released all slaves
[  484.831244][T20391] netlink: 'syz.0.3919': attribute type 10 has an invalid length.
[  484.860562][T20391] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3919'.
[  484.879963][T20391] dummy0: entered promiscuous mode
[  484.889441][T20391] bridge0: port 3(dummy0) entered blocking state
[  484.910557][T20391] bridge0: port 3(dummy0) entered disabled state
[  484.917217][T20391] dummy0: entered allmulticast mode
[  484.939907][T20391] bridge0: port 3(dummy0) entered blocking state
[  484.946531][T20391] bridge0: port 3(dummy0) entered forwarding state
[  484.992333][T20397] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3921'.
[  485.154458][T20399] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3922'.
[  485.334896][T20392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3918'.
[  485.392714][T20387] erspan0 speed is unknown, defaulting to 1000
[  485.538981][T20411] syzkaller1: entered promiscuous mode
[  485.544882][T20411] syzkaller1: entered allmulticast mode
[  485.554676][T20411] syzkaller1: left promiscuous mode
[  485.560711][T20411] syzkaller1: left allmulticast mode
[  486.405951][T20441] xt_l2tp: invalid flags combination: 8
[  486.644844][T10706] net_ratelimit: 44 callbacks suppressed
[  486.644866][T10706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.872011][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  487.681529][T10704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.781202][T20508] netlink: 'syz.6.3953': attribute type 13 has an invalid length.
[  487.809255][T20508] netlink: 'syz.6.3953': attribute type 58 has an invalid length.
[  487.859857][T20508] __nla_validate_parse: 2 callbacks suppressed
[  487.859878][T20508] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3953'.
[  488.023597][T20514] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3954'.
[  488.080782][T20501] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3950'.
[  488.215637][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3957'.
[  488.279367][T20535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3957'.
[  488.292740][T20535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3957'.
[  488.320812][   T52] Bluetooth: hci6: command 0x0406 tx timeout
[  488.436825][T20537] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  488.551648][T20541] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3961'.
[  488.740066][T20549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3964'.
[  488.830416][T20553] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3963'.
[  488.872938][T20549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3964'.
[  489.096806][T20558] ip6gre1: entered allmulticast mode
[  489.218837][T20568] netlink: 'syz.5.3971': attribute type 9 has an invalid length.
[  489.687170][T20587] can: request_module (can-proto-3) failed.
[  490.478286][ T5838] Bluetooth: hci2: link tx timeout
[  490.491417][ T5838] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  490.650084][T20642] delete_channel: no stack
[  491.026517][T20661] netlink: 'syz.4.3998': attribute type 1 has an invalid length.
[  491.799534][T20701] tipc: Enabled bearer <udp:syz1>, priority 10
[  491.812339][T20701] netlink: 'syz.4.4013': attribute type 3 has an invalid length.
[  491.834588][T20701] block nbd0: reconnected socket
[  491.874643][T20708] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  491.884497][   T52] block nbd0: Receive control failed (result -32)
[  492.069492][T20708] batman_adv: batadv0: Removing interface: batadv_slave_1
[  492.113657][T20721] rdma_rxe: rxe_newlink: failed to add ip6_vti0
[  492.161249][T20720] ip6_vti0 speed is unknown, defaulting to 1000
[  492.226894][T20720] ip6_vti0 speed is unknown, defaulting to 1000
[  492.251469][T20720] ip6_vti0 speed is unknown, defaulting to 1000
[  492.480002][T20740] netlink: 'syz.6.4020': attribute type 4 has an invalid length.
[  492.563422][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  492.911728][ T5949] tipc: Node number set to 3632086804
[  492.928406][T20720] infiniband syz2: set active
[  492.934752][T10706] ip6_vti0 speed is unknown, defaulting to 1000
[  492.961667][T20720] infiniband syz2: added ip6_vti0
[  493.017887][T20720] RDS/IB: syz2: added
[  493.022874][T20720] smc: adding ib device syz2 with port count 1
[  493.029103][T20720] smc:    ib device syz2 port 1 has no pnetid
[  493.036444][T10706] ip6_vti0 speed is unknown, defaulting to 1000
[  493.045790][T20720] ip6_vti0 speed is unknown, defaulting to 1000
[  493.351424][T20778] netlink: 'syz.6.4033': attribute type 2 has an invalid length.
[  493.551211][T20720] ip6_vti0 speed is unknown, defaulting to 1000
[  493.839537][T20803] __nla_validate_parse: 78 callbacks suppressed
[  493.839560][T20803] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4042'.
[  493.867874][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4044'.
[  493.922031][T20808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4044'.
[  494.026690][T20813] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4045'.
[  494.224756][T20720] ip6_vti0 speed is unknown, defaulting to 1000
[  494.415184][T20831] ip6gre2: entered allmulticast mode
[  494.642610][T20848] netlink: 'syz.6.4055': attribute type 23 has an invalid length.
[  494.857792][T20858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  494.888675][T20858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  494.931527][T20858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  494.943961][T20858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  495.020202][T20720] ip6_vti0 speed is unknown, defaulting to 1000
[  495.145737][T20867] bond4: Unable to set down delay as MII monitoring is disabled
[  495.209502][T20867] bond4 (unregistering): Released all slaves
[  495.409328][T20872] netlink: zone id is out of range
[  495.414769][T20872] netlink: zone id is out of range
[  495.422995][T20872] netlink: zone id is out of range
[  495.451038][T20872] netlink: zone id is out of range
[  495.457571][T20720] ip6_vti0 speed is unknown, defaulting to 1000
[  495.465173][T20872] netlink: zone id is out of range
[  495.492956][T20872] netlink: zone id is out of range
[  495.505649][T20872] netlink: zone id is out of range
[  495.526190][T20872] netlink: set zone limit has 4 unknown bytes
[  495.903339][T20886] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4066'.
[  495.929717][T20886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4066'.
[  495.979796][T20885] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  496.021068][T20885] bond1 (unregistering): Released all slaves
[  496.059708][T20720] ip6_vti0 speed is unknown, defaulting to 1000
[  496.064386][T20876] erspan0 speed is unknown, defaulting to 1000
[  496.205570][T20894] netlink: 'syz.6.4071': attribute type 1 has an invalid length.
[  496.271680][T20894] 8021q: adding VLAN 0 to HW filter on device bond1
[  496.837689][T20876] ip6_vti0 speed is unknown, defaulting to 1000
[  497.034028][T20932] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4079'.
[  497.270487][T20941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4083'.
[  497.275274][T20720] ip6_vti0 speed is unknown, defaulting to 1000
[  497.311655][T20941] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4083'.
[  497.591855][T20950] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  497.598874][T20950] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  497.765859][T20720] ip6_vti0 speed is unknown, defaulting to 1000
[  497.973688][T20961] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4092'.
[  497.993764][T20961] syzkaller1: entered promiscuous mode
[  498.004494][T20964] netlink: 'syz.6.4091': attribute type 1 has an invalid length.
[  498.013680][T20961] syzkaller1: entered allmulticast mode
[  498.163297][T20966] erspan0: left promiscuous mode
[  498.168663][T20966] erspan0: left allmulticast mode
[  498.212397][T20966] bond2: (slave erspan0): making interface the new active one
[  498.233251][T20966] bond2: (slave erspan0): Enslaving as an active interface with an up link
[  498.255053][T20968] bond2: entered promiscuous mode
[  498.260843][T20968] erspan0: entered promiscuous mode
[  498.266338][T20968] bond2: entered allmulticast mode
[  498.272238][T20968] erspan0: entered allmulticast mode
[  498.281581][T20720] ip6_vti0 speed is unknown, defaulting to 1000
[  498.898204][T20998] __nla_validate_parse: 1 callbacks suppressed
[  498.898226][T20998] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4102'.
[  499.251054][T21014] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  499.275883][T21015] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  499.302575][T21014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4107'.
[  499.453807][T21029] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4110'.
[  499.851327][T21034] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4111'.
[  499.956950][T21043] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4117'.
[  500.212304][T21054] netlink: 'syz.5.4121': attribute type 1 has an invalid length.
[  500.271826][T21058] C: renamed from team_slave_0 (while UP)
[  500.302093][T21058] netlink: 'syz.0.4123': attribute type 1 has an invalid length.
[  500.324073][ T6058] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  500.449127][T21064] netlink: 'syz.3.4125': attribute type 1 has an invalid length.
[  500.511672][T21064] 8021q: adding VLAN 0 to HW filter on device bond5
[  500.518878][T21073] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4125'.
[  500.648662][T21075] bond5: (slave batadv0): Opening slave failed
[  500.658821][T21074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4126'.
[  500.831856][T21092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4132'.
[  500.989941][T21097] geneve2: entered promiscuous mode
[  501.011212][T21097] geneve2: entered allmulticast mode
[  501.023018][ T3863] netdevsim netdevsim0 ������: set [1, 1] type 2 family 0 port 20000 - 0
[  501.110330][ T3863] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  501.125768][T21106] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  501.191391][T21104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4136'.
[  501.207238][ T3863] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  501.221029][ T3863] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  501.364737][T21091] erspan0 speed is unknown, defaulting to 1000
[  501.436472][T21118] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4138'.
[  501.728434][T21091] ip6_vti0 speed is unknown, defaulting to 1000
[  502.669661][T21170] IPv6: sit1: Disabled Multicast RS
[  502.676512][T21170] sit1: entered allmulticast mode
[  502.972623][ T4571] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  503.007686][ T4571] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  503.122335][T21183] 8021q: adding VLAN 0 to HW filter on device bond4
[  503.130886][ T4571] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  503.142249][ T4571] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  503.227179][T21189] 8021q: adding VLAN 0 to HW filter on device bond0
[  503.294663][T21189] bond4: (slave bond0): Enslaving as an active interface with an up link
[  503.546280][T21183] bond4 (unregistering): (slave bond0): Releasing backup interface
[  503.687555][T21183] bond4 (unregistering): Released all slaves
[  503.919171][T21206] bond6: entered promiscuous mode
[  503.925222][T21206] bond6: entered allmulticast mode
[  503.931723][T21206] 8021q: adding VLAN 0 to HW filter on device bond6
[  504.286233][T21215] __nla_validate_parse: 14 callbacks suppressed
[  504.286267][T21215] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4164'.
[  504.342056][T21220] netlink: 'syz.5.4166': attribute type 29 has an invalid length.
[  504.361983][T21220] netlink: 'syz.5.4166': attribute type 29 has an invalid length.
[  504.406589][T21222] tipc: Started in network mode
[  504.418573][T21222] tipc: Node identity 7acc06365f3c, cluster identity 4711
[  504.435043][T21222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  504.450770][T21222] syzkaller0: entered promiscuous mode
[  504.468828][T21222] syzkaller0: entered allmulticast mode
[  504.539771][T21225] netlink: 'syz.5.4168': attribute type 9 has an invalid length.
[  504.554304][T21226] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4167'.
[  504.654582][T21236] netlink: 'syz.4.4170': attribute type 1 has an invalid length.
[  504.662809][T21226] tipc: Resetting bearer <eth:syzkaller0>
[  504.752367][T21226] tipc: Disabling bearer <eth:syzkaller0>
[  505.232614][T21261] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4177'.
[  505.267098][T21263] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4179'.
[  505.277106][T21263] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4179'.
[  505.609889][T21282] ip6gre3: entered promiscuous mode
[  505.622155][T21282] ip6gre3: entered allmulticast mode
[  505.749388][T21293] netlink: 'syz.4.4185': attribute type 1 has an invalid length.
[  505.781257][T21293] netlink: 'syz.4.4185': attribute type 1 has an invalid length.
[  505.814131][T21296] netlink: 'syz.6.4188': attribute type 4 has an invalid length.
[  505.930394][T21299] netlink: 'syz.4.4191': attribute type 4 has an invalid length.
[  505.972223][T21302] netlink: 'syz.5.4189': attribute type 1 has an invalid length.
[  506.202230][T21322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4193'.
[  506.309015][T21333] 
s5���: renamed from vlan1 (while UP)
[  506.377716][T21335] vlan3: entered promiscuous mode
[  506.394058][T21335] bridge0: entered promiscuous mode
[  506.464810][T21340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4201'.
[  506.605059][T21352] bond3: entered allmulticast mode
[  506.613183][T21352] 8021q: adding VLAN 0 to HW filter on device bond3
[  506.624357][T21352] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  506.637957][T21352] net_ratelimit: 2 callbacks suppressed
[  506.637972][T21352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  506.799970][T21362] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  506.869585][T21364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4208'.
[  506.879307][T21364] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4208'.
[  507.397580][T21384] ipt_REJECT: ECHOREPLY no longer supported.
[  507.555069][T21393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  507.677667][T21406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4219'.
[  507.718651][T21406] openvswitch: netlink: Missing key (keys=40, expected=80)
[  508.433678][T21403] erspan0 speed is unknown, defaulting to 1000
[  508.605805][T21453] netlink: 'syz.6.4233': attribute type 1 has an invalid length.
[  508.625810][T21453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  508.800602][ T5838] Bluetooth: hci1: command 0x0406 tx timeout
[  508.874523][T21465] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20004
[  509.804898][T21495] validate_nla: 1 callbacks suppressed
[  509.804920][T21495] netlink: 'syz.5.4241': attribute type 2 has an invalid length.
[  511.256714][T21403] ip6_vti0 speed is unknown, defaulting to 1000
[  511.302397][T21495] �9: entered promiscuous mode
[  511.389680][T21502] netlink: 'syz.6.4242': attribute type 1 has an invalid length.
[  511.452480][T21502] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  511.716085][T21520] syzkaller0: entered promiscuous mode
[  511.721500][T21522] __nla_validate_parse: 2 callbacks suppressed
[  511.721562][T21522] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4249'.
[  511.721643][T21522] block nbd0: Unsupported socket: should be TCP or UNIX.
[  511.765677][T21520] syzkaller0: entered allmulticast mode
[  511.795135][T21520] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  511.960734][T21532] netlink: 'syz.6.4252': attribute type 11 has an invalid length.
[  512.249668][T21543] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4257'.
[  512.399026][T21552] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4260'.
[  512.655769][T21564] tipc: Enabled bearer <udp:s>, priority 10
[  512.675068][T21565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  512.683310][T21566] syzkaller0: entered promiscuous mode
[  512.689106][T21566] syzkaller0: entered allmulticast mode
[  512.723197][T21565] tipc: Resetting bearer <eth:syzkaller0>
[  512.782495][T21565] tipc: Resetting bearer <eth:syzkaller0>
[  512.821767][T21565] tipc: Disabling bearer <eth:syzkaller0>
[  513.064309][T21579] syzkaller0: entered promiscuous mode
[  513.069862][T21579] syzkaller0: entered allmulticast mode
[  513.095955][T21579] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  513.252894][   T30] audit: type=1800 audit(1768690265.246:3): pid=21583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4269" name="memory.events" dev="tmpfs" ino=1285 res=0 errno=0
[  513.429848][T21593] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4272'.
[  513.511194][T21593] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4272'.
[  513.514445][T21602] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4274'.
[  513.675509][T21608] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0
[  513.696190][T21604] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4275'.
[  513.955575][T21632] gtp0: entered promiscuous mode
[  514.475034][T21660] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4291'.
[  514.659600][T21673] netlink: 388 bytes leftover after parsing attributes in process `syz.0.4296'.
[  514.688009][T21675] netlink: 596 bytes leftover after parsing attributes in process `syz.6.4295'.
[  514.813300][T21684] block nbd6: not configured, cannot reconfigure
[  514.850054][T21686] netlink: 'syz.3.4298': attribute type 12 has an invalid length.
[  515.228384][T21710] netem: incorrect ge model size
[  515.260363][T21710] netem: change failed
[  515.336828][T21714] syzkaller0: entered promiscuous mode
[  515.342866][T21714] syzkaller0: entered allmulticast mode
[  515.361782][T21714] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  515.815026][T21740] xt_l2tp: missing protocol rule (udp|l2tpip)
[  516.065528][T21757] netlink: 'syz.5.4321': attribute type 21 has an invalid length.
[  516.150558][T21763] netlink: 'syz.0.4324': attribute type 1 has an invalid length.
[  516.167956][T21763] netlink: 'syz.0.4324': attribute type 2 has an invalid length.
[  516.187398][T21763] netlink: 'syz.0.4324': attribute type 1 has an invalid length.
[  516.209109][T21763] netlink: 'syz.0.4324': attribute type 3 has an invalid length.
[  516.254702][T21760] syzkaller0: entered promiscuous mode
[  516.273169][T21760] syzkaller0: entered allmulticast mode
[  530.402951][   T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  532.323256][   T31] INFO: task syz.1.2977:17041 blocked for more than 143 seconds.
[  532.332347][   T31]       Not tainted syzkaller #0
[  532.332569][ T3863] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  532.337727][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  532.337748][   T31] task:syz.1.2977      state:D stack:26552 pid:17041 tgid:17040 ppid:5843   task_flags:0x400140 flags:0x00080002
[  532.337838][   T31] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  532.337849][   T31]  <TASK>
[  532.337865][   T31]  __schedule+0x149b/0x4fd0
[  532.390499][   T31]  ? __pfx___schedule+0x10/0x10
[  532.395551][   T31]  ? schedule+0x91/0x360
[  532.399841][   T31]  schedule+0x165/0x360
[  532.405744][   T31]  schedule_preempt_disabled+0x13/0x30
[  532.412733][   T31]  __mutex_lock+0x7e6/0x1350
[  532.417390][   T31]  ? ___sys_sendmsg+0x21f/0x2a0
[  532.478827][   T31]  ? __x64_sys_sendmsg+0x19b/0x260
[  532.510768][   T31]  ? __mutex_lock+0x5bb/0x1350
[  532.515633][   T31]  ? nfsd_nl_version_set_doit+0xc2/0x770
[  532.560702][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  532.565938][   T31]  nfsd_nl_version_set_doit+0xc2/0x770
[  532.583852][   T31]  ? rcu_is_watching+0x15/0xb0
[  532.588713][   T31]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  532.612594][   T31]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  532.619024][   T31]  genl_family_rcv_msg_doit+0x215/0x300
[  532.642082][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  532.648258][   T31]  ? bpf_lsm_capable+0x9/0x20
[  532.660186][   T31]  ? security_capable+0x7e/0x2e0
[  532.665238][   T31]  genl_rcv_msg+0x60e/0x790
[  532.669809][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  532.690875][   T31]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  532.697073][   T31]  ? __asan_memcpy+0x40/0x70
[  532.702414][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  532.707853][   T31]  netlink_rcv_skb+0x208/0x470
[  532.730554][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  532.735674][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  532.750213][   T31]  ? genl_rcv+0x19/0x40
[  532.754483][   T31]  ? down_read+0x274/0x2e0
[  532.758949][   T31]  ? genl_rcv+0xd/0x40
[  532.780195][   T31]  genl_rcv+0x28/0x40
[  532.784271][   T31]  netlink_unicast+0x82f/0x9e0
[  532.789094][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  532.810293][   T31]  ? __alloc_skb+0x198/0x3a0
[  532.814985][   T31]  ? netlink_sendmsg+0x642/0xb30
[  532.819990][   T31]  ? skb_put+0x11b/0x210
[  532.850602][   T31]  netlink_sendmsg+0x805/0xb30
[  532.855475][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  532.881049][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  532.886088][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  532.900170][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  532.905559][   T31]  __sock_sendmsg+0x21c/0x270
[  532.930276][   T31]  ____sys_sendmsg+0x505/0x820
[  532.935153][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  532.950218][   T31]  ? import_iovec+0x74/0xa0
[  532.954828][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  532.959566][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  532.980185][   T31]  ? futex_wake+0x4b2/0x560
[  532.986100][   T31]  ? __fget_files+0x2a/0x420
[  532.997767][   T31]  ? __fget_files+0x3a0/0x420
[  533.003133][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  533.008128][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  533.014006][   T31]  ? rcu_is_watching+0x15/0xb0
[  533.018839][   T31]  do_syscall_64+0xec/0xf80
[  533.024339][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.031185][   T31]  ? trace_irq_disable+0x37/0x100
[  533.036278][   T31]  ? clear_bhb_loop+0x60/0xb0
[  533.043095][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.049066][   T31] RIP: 0033:0x7fd7f9d8f749
[  533.055641][   T31] RSP: 002b:00007fd7fab62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  533.064539][   T31] RAX: ffffffffffffffda RBX: 00007fd7f9fe5fa0 RCX: 00007fd7f9d8f749
[  533.072919][   T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000006
[  533.080999][   T31] RBP: 00007fd7f9e13f91 R08: 0000000000000000 R09: 0000000000000000
[  533.089133][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  533.097703][   T31] R13: 00007fd7f9fe6038 R14: 00007fd7f9fe5fa0 R15: 00007ffedbae3458
[  533.105905][   T31]  </TASK>
[  533.114387][   T31] 
[  533.114387][   T31] Showing all locks held in the system:
[  533.147750][   T31] 1 lock held by khungtaskd/31:
[  533.199732][   T31]  #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  533.230331][   T31] 2 locks held by getty/5596:
[  533.235094][   T31]  #0: ffff88814d5150a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  533.270278][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460
[  533.310607][   T31] 3 locks held by kworker/0:7/6048:
[  533.315888][   T31]  #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  533.350545][   T31]  #1: ffffc9000551fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  533.370513][   T31]  #2: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0
[  533.390272][   T31] 4 locks held by kworker/1:13/10704:
[  533.395728][   T31] 2 locks held by syz.2.1851/12989:
[  533.430600][   T31]  #0: ffffffff8f379e70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  533.438910][   T31]  #1: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660
[  533.490597][   T31] 1 lock held by syz-executor/13357:
[  533.495973][   T31] 2 locks held by syz.1.2977/17041:
[  533.530324][   T31]  #0: ffffffff8f379e70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  533.552058][   T31]  #1: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc2/0x770
[  533.601017][   T31] 2 locks held by syz-executor/17202:
[  533.606480][   T31]  #0: ffffffff8f312108 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  533.630296][   T31]  #1: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0
[  533.650197][   T31] 4 locks held by syz-executor/17483:
[  533.655661][   T31]  #0: ffff8880580e0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0
[  533.667375][   T31]  #1: ffff8880580e00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100
[  533.677875][   T31]  #2: ffffffff8f4843c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  533.688897][   T31]  #3: ffff888033ffa338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0
[  533.698729][   T31] 3 locks held by syz-executor/17549:
[  533.704464][   T31]  #0: ffff888055e08ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0
[  533.715025][   T31]  #1: ffff888055e080c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100
[  533.724805][   T31]  #2: ffffffff8f4843c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  533.735052][   T31] 
[  533.737425][   T31] =============================================
[  533.737425][   T31] 
[  533.748273][   T31] NMI backtrace for cpu 0
[  533.748300][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  533.748321][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  533.748333][   T31] Call Trace:
[  533.748340][   T31]  <TASK>
[  533.748348][   T31]  dump_stack_lvl+0xe8/0x150
[  533.748378][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  533.748405][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  533.748444][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  533.748474][   T31]  sys_info+0x135/0x170
[  533.748495][   T31]  watchdog+0xf95/0xfe0
[  533.748526][   T31]  ? watchdog+0x20a/0xfe0
[  533.748557][   T31]  kthread+0x711/0x8a0
[  533.748584][   T31]  ? __pfx_watchdog+0x10/0x10
[  533.748608][   T31]  ? __pfx_kthread+0x10/0x10
[  533.748652][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  533.748669][   T31]  ? __pfx_kthread+0x10/0x10
[  533.748694][   T31]  ret_from_fork+0x510/0xa50
[  533.748714][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  533.748730][   T31]  ? __switch_to+0xc9e/0x1480
[  533.748759][   T31]  ? __pfx_kthread+0x10/0x10
[  533.748783][   T31]  ret_from_fork_asm+0x1a/0x30
[  533.748824][   T31]  </TASK>
[  533.748831][   T31] Sending NMI from CPU 0 to CPUs 1:
[  533.877269][    C1] NMI backtrace for cpu 1
[  533.877287][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  533.877307][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  533.877318][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  533.877343][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 61 0e 00 f3 0f 1e fa fb f4 <e9> 08 e3 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  533.877358][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 000002c6
[  533.877375][    C1] RAX: 000000000014cb4f RBX: ffffffff8197149e RCX: 0000000080000001
[  533.877388][    C1] RDX: 0000000000000001 RSI: ffffffff8d793695 RDI: ffffffff8bc086e0
[  533.877400][    C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db
[  533.877413][    C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822e70
[  533.877427][    C1] R13: 1ffff110038d4b70 R14: 0000000000000001 R15: 0000000000000001
[  533.877439][    C1] FS:  0000000000000000(0000) GS:ffff888125f1e000(0000) knlGS:0000000000000000
[  533.877453][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  533.877464][    C1] CR2: 000055ea2a4594a8 CR3: 0000000024368000 CR4: 00000000003526f0
[  533.877481][    C1] Call Trace:
[  533.877489][    C1]  <TASK>
[  533.877496][    C1]  default_idle+0x13/0x20
[  533.877518][    C1]  default_idle_call+0x73/0xb0
[  533.877540][    C1]  do_idle+0x1be/0x4d0
[  533.877559][    C1]  ? asm_sysvec_call_function_single+0x1a/0x20
[  533.877583][    C1]  ? __pfx_do_idle+0x10/0x10
[  533.877607][    C1]  cpu_startup_entry+0x44/0x60
[  533.877626][    C1]  start_secondary+0x101/0x110
[  533.877654][    C1]  common_startup_64+0x13e/0x147
[  533.877686][    C1]  </TASK>
[  534.069903][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  534.076833][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  534.085995][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  534.096099][   T31] Call Trace:
[  534.099424][   T31]  <TASK>
[  534.102403][   T31]  vpanic+0x1e0/0x670
[  534.106444][   T31]  panic+0xb9/0xc0
[  534.110218][   T31]  ? __pfx_panic+0x10/0x10
[  534.114685][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  534.120104][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  534.126307][   T31]  watchdog+0xfdf/0xfe0
[  534.130524][   T31]  ? watchdog+0x20a/0xfe0
[  534.134913][   T31]  kthread+0x711/0x8a0
[  534.139030][   T31]  ? __pfx_watchdog+0x10/0x10
[  534.143762][   T31]  ? __pfx_kthread+0x10/0x10
[  534.148403][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  534.153647][   T31]  ? __pfx_kthread+0x10/0x10
[  534.158289][   T31]  ret_from_fork+0x510/0xa50
[  534.162903][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  534.168038][   T31]  ? __switch_to+0xc9e/0x1480
[  534.172751][   T31]  ? __pfx_kthread+0x10/0x10
[  534.177380][   T31]  ret_from_fork_asm+0x1a/0x30
[  534.182208][   T31]  </TASK>
[  534.185869][   T31] Kernel Offset: disabled
[  534.190202][   T31] Rebooting in 86400 seconds..