last executing test programs:

3m33.079154307s ago: executing program 1 (id=1350):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0xc5, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x7ffffffe, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x3505, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x68, 0x2, {{'cbc(camellia)\x00'}, 0x100, "51ad34d9ea841223e5d0f932af16e92125ccc28f24846c994df42d7b27056624"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x100)

3m32.065294493s ago: executing program 1 (id=1355):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101001, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0)
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000a80)={0x4, &(0x7f0000000340)=[{0x1ff, 0x9, 0x6, 0x20000000}, {0x2, 0x5, 0x2, 0x3ff}, {0x5, 0xb, 0xe, 0x400000}, {0x93, 0x9, 0xe, 0x5}]})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000008c0), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r4, 0x0, 0x13, 0x0, &(0x7f00000001c0))
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000900)={'wg2\x00', <r5=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB="7357017d8be74bb172d4419da8a45ff5", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r5, @ANYBLOB="4c00088048000080200004000a004e2100000000000000000000000000000000000000010003000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c"], 0x68}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x15)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000c00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x40047452, 0x0)
writev(r7, &(0x7f0000000280)=[{&(0x7f0000000400)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000f40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1d012cbd7000fedbe925010000000c000f00c506200000000000140020030000000000000000000000000007443e567d12001f000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x400004c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x8994, &(0x7f0000000140)={'ip6gre0\x00', 0x0})
r11 = socket$inet6(0xa, 0x3, 0xff)
r12 = socket(0x9ef054822c63a894, 0x3, 0x1)
bind$tipc(r12, &(0x7f0000000c40)=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}, 0x3}}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffdcc)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl(r12, 0x0, &(0x7f0000000d00)="5867b39f6739f7fa0cc0a3d7d7874b77c3b1081dc959a9d33b79d8069da6ae2a4121fc100b46b67c46655fea833ec8f778487d4279f4effa344af8a7c2065b706ac704874b7348ccc4270a6cdfac899d0844e0f319368a06302d723071694483745aeb41468fd8a1bf7186fac738fc2c74349cf04f60bd885bb7a268a2862ae8f49d57e953d00505")
pipe(&(0x7f0000000180))
ioctl(r10, 0x3, &(0x7f0000000cc0)="0cac8906f9dad1e78e5a1266202ff5b309c1cd44d5f08a2b89611224f5a8457fabe1738abbf6e791983af06a7a306e8c")

3m31.495569788s ago: executing program 1 (id=1358):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f62617461647600140035000165"], 0xe8}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000005c0), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000680)=""/179, 0x22fe0}], 0x3}, 0x0) (async)
sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)='>', 0x33fe0}], 0x1}, 0x0)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a0000000000000000000000000000000000ffffac1e00010000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000000000000ff02000000000000000000479e00a84bb27c000000000000050019"], 0xc8}}, 0x0) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) (async)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

3m31.108944615s ago: executing program 1 (id=1361):
socket(0x28, 0x5, 0x0) (async)
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x40d, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000)

3m30.234290333s ago: executing program 1 (id=1367):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a7c000000060a010400000000000000000a0000050900010073797a3100000000500004804c0001800a000100696e6e65720000003c0002800800044000000017180005800e000100696d6d656469617461000000040002800800034000000000080002400000008408000140000000000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'syztnl0\x00', <r3=>0x0, 0x1, 0x10, 0x6, 0xc, {{0x12, 0x4, 0x2, 0x13, 0x48, 0x68, 0x0, 0xc, 0x29, 0x0, @multicast1, @private=0xa010102, {[@generic={0x94, 0x11, "0b8f87cdda618b131d3c75a23f2abf"}, @lsrr={0x83, 0x23, 0xeb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @rand_addr=0x64010102, @local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}}})
sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x17}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0xc01)

3m29.260385047s ago: executing program 1 (id=1369):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80200003e000701feffffff00000000017c0000040042808802018006000600800a00007b02018020ef82972c4a888fa13836e811c4cd03b722b4ceca8be06b765000fcffffffffffff7eb6b5009a881fd61885956a03d9a9dc8452516454a3d167abf84c778c4df8237c0c0860693c5060dfea16df72653289de5ae7f1f3a2746c7e0900000011b9b91ed5687f850c00c8007d25212b2b4a2d000800a500", @ANYRES32=r0, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@bridge_newneigh={0x38, 0x1c, 0xc01, 0xfffffffd, 0x0, {0x7, 0x0, 0x0, r6, 0x80, 0x2}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_LLADDR={0xa, 0x2, @local}, @NDA_SRC_VNI={0x8, 0xb, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local})
r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000740), 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@arena={0x21, 0x0, 0x0, 0x28, 0x400, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x8, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e80)={r10}, 0xc)
write$cgroup_subtree(r8, &(0x7f0000000780)={[{0x2d, 'cpu'}, {0x2d, 'net_cls'}, {0x2d, 'devices'}, {0x2b, 'hugetlb'}, {0x2d, 'freezer'}, {0x2d, 'rlimit'}, {0x2b, 'pids'}, {0x2b, 'hugetlb'}]}, 0x40)
write$tun(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r7, @ANYRES16=r2], 0xfdef)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000d00000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000200000005000000c23a3a2b90049826cc7eac10fd44b700"], 0x50)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, 0x0)
r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000ac0)=@o_path={&(0x7f0000000a80)='./file0\x00', 0x0, 0x18, r1}, 0x18)
r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000000000008508000086000000"], &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xa2, &(0x7f0000000900)=""/162, 0x41000, 0xbe6d31de7d5482ed, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f0000000a00)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x8, 0x81, 0x80000001}, 0x10, 0x1f1ed, r13, 0x0, &(0x7f00000004c0), 0x0, 0x10, 0x8b}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={r14, 0xf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xc, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="6eaa000000000000791082000000000095ea7de71350ec3e"], &(0x7f0000000000)='GPL\x00'}, 0x90)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'virt_wifi0\x00', 0x6})

3m13.97337117s ago: executing program 32 (id=1369):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80200003e000701feffffff00000000017c0000040042808802018006000600800a00007b02018020ef82972c4a888fa13836e811c4cd03b722b4ceca8be06b765000fcffffffffffff7eb6b5009a881fd61885956a03d9a9dc8452516454a3d167abf84c778c4df8237c0c0860693c5060dfea16df72653289de5ae7f1f3a2746c7e0900000011b9b91ed5687f850c00c8007d25212b2b4a2d000800a500", @ANYRES32=r0, @ANYBLOB="590123809542d4912acea6c2a67d2baa4aa8043fe21dae7c2c095655b2fa25cc65a17fc77fa653210b7c0fce9c96f3e60f82eaa7bd8dbb3fff64c0f3b6029345ad92ce2bc4f40a4ef463dfa58d4b002f2f9ba78811a69294da38c9d1f56bf4a8c60e8a8f852036a60aba986804009f8008001e000600000067ca43cec3ad3fffcb4f4ead06be3ff342037b3565bb4e6a7408e629e42e4e80cccad28015d25cbe59315c3bbb49e2bc2d5f3d36708a8023c3401d3dd8a348b591d9654f94e8965119f7355ec5b058b1599b9daffeee0056088600be00708f351745d53e502e56356916b733c51db948d6769ce7f52e7c5cd4a32d898f5cbb7776d60a9d41972931ddaf957cef1388b3775364d48e2bc64798a17a43ff3ec4adfba0f2dac85fa0675767d5489fcd66f581ae0492db512a2ec19a723432a391ffd1bb26c4fb339892b4860b67245d3590579f1f68b83097f53ccf94e0e2dfa00000000000f7c275d0093816ad1560f29cf45c1faa05436f722dd3ec0259c8e387658641be12dc21d2815f0441efc9d61d7a07369532c79023ed006fbe5d1e1ece72fd969d956f704e62fecb9e61fef78f1a6dff894d9adee12d08c151f5f67302be6f021d84a5c60f8f1b502e70b527327ccac8c989018eddedee145291d2bdb4e7c4cbd32fd49e7d7a8bd0f87167a5b529660dc89b9c9f968ead0facea4be31a8eaa491900080002"], 0x2a8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@bridge_newneigh={0x38, 0x1c, 0xc01, 0xfffffffd, 0x0, {0x7, 0x0, 0x0, r6, 0x80, 0x2}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_LLADDR={0xa, 0x2, @local}, @NDA_SRC_VNI={0x8, 0xb, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local})
r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000740), 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@arena={0x21, 0x0, 0x0, 0x28, 0x400, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x8, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e80)={r10}, 0xc)
write$cgroup_subtree(r8, &(0x7f0000000780)={[{0x2d, 'cpu'}, {0x2d, 'net_cls'}, {0x2d, 'devices'}, {0x2b, 'hugetlb'}, {0x2d, 'freezer'}, {0x2d, 'rlimit'}, {0x2b, 'pids'}, {0x2b, 'hugetlb'}]}, 0x40)
write$tun(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r7, @ANYRES16=r2], 0xfdef)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000d00000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000200000005000000c23a3a2b90049826cc7eac10fd44b700"], 0x50)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, 0x0)
r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000ac0)=@o_path={&(0x7f0000000a80)='./file0\x00', 0x0, 0x18, r1}, 0x18)
r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000000000008508000086000000"], &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xa2, &(0x7f0000000900)=""/162, 0x41000, 0xbe6d31de7d5482ed, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f0000000a00)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x8, 0x81, 0x80000001}, 0x10, 0x1f1ed, r13, 0x0, &(0x7f00000004c0), 0x0, 0x10, 0x8b}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={r14, 0xf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xc, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="6eaa000000000000791082000000000095ea7de71350ec3e"], &(0x7f0000000000)='GPL\x00'}, 0x90)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'virt_wifi0\x00', 0x6})

2m30.606394961s ago: executing program 4 (id=1560):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010800080000000000000000000005000100", @ANYRESDEC], 0x1c}}, 0x8050)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000000906010800211ddbb39f35584d0000000900020073797a31000000000500010007000000340007805000f0ff00000000fe8000000000000000000000000000bb06003dea48176377fe5ee904400e1f00000500070088000000000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x10000)

2m29.456488998s ago: executing program 4 (id=1563):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x58, &(0x7f0000000140)}, 0x10)

2m24.229248851s ago: executing program 3 (id=1565):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000fc22000000ee8bc9a10001fcffffff9500"/32], 0x0, 0x4}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000d40)={{0x14}, [@NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x4d, 0x7, 0x1, 0x0, "e3511b97d45212dfb56bee3f329bee883b00c9ed1a4d21c8c6e258374df948609294838070bd7ffdc6db318d0f8480f0042d384a137a1b24ce3a557c098986e8934da205b82744969d"}]}], {0x14}}, 0x128}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002"], 0xcd0}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c"], 0xb0}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10040003}, 0x8008880)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xc)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x6}, 0x4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000340)="510003000000", 0x6)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f00000002c0)=[{0xc}, {0x6}]}, 0x10)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a3100000000050001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
sendmmsg(r3, &(0x7f0000000480), 0x0, 0x24000005)
syz_emit_ethernet(0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="aad8bab36bc0247baaaaaaaaaabbbbbbbbbbbb080045000028000400000006907864010104ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES64=r1, @ANYBLOB="5c00000090780000"], 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x13ca78670876f9b3, 0x0, 0x25dfdc01, {{@in=@broadcast, @in6=@local, 0x4e22, 0x0, 0x4e25, 0x800, 0x2, 0x20, 0x20, 0xc6}, {0x8, 0x7, 0x0, 0x0, 0x3, 0x2}, {0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = socket(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000bc0)={0x2, 0xfffa, @local}, 0x10)
sendto$inet(r5, 0x0, 0x17, 0x48890, &(0x7f0000000c00)={0x2, 0x4e24, @broadcast}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), 0xffffffffffffffff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x4090)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r7, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x3, 0x0)

2m23.870521288s ago: executing program 4 (id=1567):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
listen(r0, 0xc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x6000, 0x0, 0x20048001}, 0x800)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r8, 0x0, 0x0, 0x80000)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x20000841}, 0x8000)
accept4$vsock_stream(r9, 0x0, 0x0, 0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r10, 0x1, 0x19, 0x0, &(0x7f0000000280))

2m22.701151578s ago: executing program 3 (id=1569):
r0 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0)
sendmmsg(r0, &(0x7f0000000340), 0x4000000000001f2, 0xfc)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x4}, 0x68)
r1 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xfffd, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0xc201})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000580)={'\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', 0x1})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
write$tun(r2, &(0x7f0000000600)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x7, 0x4, 0x3, 0x1b, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x42}, {[@generic={0x7, 0x3, "aa"}, @rr={0x7, 0x3, 0xa9}]}}, {0x4e24, 0x4e20, 0x15, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "db61c3e61e"}}}}, 0x3f)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611060000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

2m22.310856536s ago: executing program 4 (id=1572):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r0, &(0x7f0000000100)="a8000000410001000300000000000000030100002a0000003200010000112233445566778899aabb88a8450005a8aaaa40004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="140007"], 0x38}}, 0x0)

2m21.660599823s ago: executing program 4 (id=1574):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000680)={0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000006c0)={<r1=>0x0, 0x10, &(0x7f0000000700)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000740)=0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x400)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="000329bd7000fcce04566b00f4ff0b0006000300000003000025bcfd2429", @ANYRES32=0x0, @ANYBLOB="5c002f800c0002000000000000000000240003800c000500090000000000000005000200030000000c00038006000100030000002800038008000100020000000c00050064ffffffffffffff080004004000000005000200020000000c00060003000000000000000c0006000300000003000000"], 0x9c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)
getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r3, 0x84, 0x84, &(0x7f0000000800)={r1, @in6={{0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0x4e22}, &(0x7f00000008c0)=0x90)
r7 = getpid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x90)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000440)=r7, 0x12)
sendmsg$nl_generic(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x134, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xe3}, @generic="a4abfcc85190088bbb7ad3da010a9abbdf321e19c61aee8b0cc4a539ffce4d1ed87f6fb260fba1ba362dd437c173fbba79b910dc56725cbc316c7f20802a569365a22828be23f4c218027d0799ad198b3339030916b0544feb050d0a2cf1a9b0fd944d33923b1377bdb91e298f0e60ccc8fcbda9ddea32b294b6d921becdba9762bee8007ce02039ef645a83e49060025b55e56df01c9c6ec4ae166f", @nested={0x80, 0x2, 0x0, 0x1, [@nested={0x7c, 0xe4, 0x0, 0x1, [@nested={0x4, 0x13b}, @nested={0x6b, 0x30d, 0x0, 0x1, [@generic="29b89f3e3ddd407bd52f9e5cba4c2d308665bdfba28d73706552d881ba9270a8f25ffd4defe938b9b64293c7397f4203ffe732a6ec35c479cea2e4a8dfd71adbb5070df8090922e8c501e17894b44d21ae53b218e0d924be400d98b2c9dd33cdd95955bb194c49"]}, @typed={0x8, 0x118, 0x0, 0x0, @pid=r7}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x48815}, 0x2400c020)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000640)=r7)
ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000000000)={'sit0\x00', 0x0})
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20000054)

2m20.852018181s ago: executing program 3 (id=1575):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
writev(r1, &(0x7f0000000840)=[{&(0x7f0000000880)='a', 0x1}, {0x0, 0x10}], 0x2)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004847}, 0x20000004)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000400)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xb4, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcf5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x4080)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000280)={0x20, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xff}]}, 0x20}}, 0x24000094)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0x3, &(0x7f00000007c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x28}}, &(0x7f0000000800)='GPL\x00'}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fc5bdc9d666ae22863fff9ff0700000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000181100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a60200007fffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
r10 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000004c0)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000540)=@assoc_value={<r11=>0x0}, &(0x7f0000000580)=0x8)
getsockopt$inet_sctp_SCTP_EVENT(r9, 0x84, 0x7f, &(0x7f00000005c0)={r11, 0x800a, 0x1}, &(0x7f0000000600)=0x8)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000640)={r11, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}}, 0x84)
getsockopt$IP_SET_OP_GET_BYINDEX(r10, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x4}, &(0x7f0000000b80)=0x28)
r12 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r12, &(0x7f0000000c80)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r12, 0x0)
poll(&(0x7f0000000cc0)=[{r12, 0x82}], 0x1, 0x800)
splice(r5, 0x0, r5, &(0x7f0000000040)=0x4, 0x7, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3c00000010003704000000000000000000000000bb6e7ba6aec99583858288ff69bb228fce69ddb27b22dc530d1456b93c401f908dc1da120a0bc69eddad7a50c30088dab8e2a67e5a815de246a6a32b5d46d927fe9e6657bc70a37a3b11ead6f7e67da9cb1a9c2ab911621227686933d963803498ad80f519865e171f0394635d2405d322ebf7967b341324af", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800800050000000000"], 0x3c}}, 0x0)

2m20.659383501s ago: executing program 0 (id=1576):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000440)={{<r2=>r0, &(0x7f0000000080)='\x17\x00', 0x800, &(0x7f0000000180)={@_ha_fsid={[0x0, 0x2]}, {0x9, 0x1c, 0x17, 0xc5d}}, 0x6, &(0x7f00000001c0), &(0x7f0000000300)=0x8}, 0x1, &(0x7f0000000400)=[{0x3, 0x4, &(0x7f0000000340)='GPL\x00', &(0x7f0000000380)="01d23fae9b49e93cbe1280e9d591ce6bb27540c1ff1259140f9cecc73344081f17e4ef326d760e00f7818c1e3ffde4ff85af70346b30e60a2f009ea35219e660bb96ad93633d15544285765b86", 0x4d, 0x22}]})
recvmsg$unix(r2, &(0x7f0000000980)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/73, 0x49}, {&(0x7f0000000740)=""/93, 0x5d}, {&(0x7f00000007c0)=""/253, 0xfd}], 0x4, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400000010007c0000000400000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018005000100d100000014000000080a0101000000000000000001000001140000001100010000000000000000000100000a"], 0xb8}}, 0x40)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000004f0c000000000000fcbfffff81162876450000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

2m20.574477467s ago: executing program 4 (id=1578):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x4c02})
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000400)=""/227, 0x1c}], 0x4) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', 0x1}) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r0], 0x54}}, 0x4) (async)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000580)=0xaf) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001000)="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", 0x1ca}], 0x1, 0x0, 0x0, 0x81}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000540), 0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async, rerun: 64)
socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x8, 0x3000000000002}, 0x0) (async)
sendmsg$tipc(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000300)={0x0, <r7=>0xffffffffffffffff, 0x800}, &(0x7f0000000340)=0xc)
ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f00000005c0)={0x0, {0x2, 0x4e24, @rand_addr=0x64010101}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)='hsr0\x00', 0xfff, 0x7, 0xffff}) (async)
sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)

2m20.264933441s ago: executing program 3 (id=1579):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210128bd7004000000002c00000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0xf040}, 0x20000000)
r3 = socket(0x2, 0x2, 0x10000000000002)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="304579ee", @ANYRES16=r6, @ANYBLOB="020025bd7000ffdbdf2509000000080003000200000008000400ffff00003c0006800500020009000000080006000b00000008000300ffffffff0600010000000000050002000600000008000700", @ANYRES32=r7, @ANYBLOB="0800060010000000050005000a00000005000500800000000800030001000000"], 0x78}, 0x1, 0x0, 0x0, 0xc0}, 0x4c010)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3)

2m19.900505552s ago: executing program 0 (id=1581):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000e0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000058000000060a010400000000000000000200000a0900010073797a30000000000900020073797a30000000002c0004802800018007000100727400001c000280080001400000000a08000240000000009b000240000000041400000011000100"], 0xe0}}, 0x0)
r2 = openat$cgroup_int(r0, &(0x7f00000001c0)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='0g'], 0x27)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$cgroup_ro(r0, &(0x7f00000005c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffff})
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
accept(r4, &(0x7f0000000240)=@ieee802154, &(0x7f00000002c0)=0x80)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x1405, 0x621}, 0x10}}, 0x8000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x60, r6, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6394bc11539d"}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "70853e6e9a117572dab64fe551"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2m18.921342583s ago: executing program 0 (id=1583):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x3}]})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="30000000400007012abd700000000000017c0000040042801400018008000a00", @ANYRES32=r4, @ANYBLOB="06000600050a0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x48854}, 0xc010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@gettaction={0x40, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r5)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000007c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0200002000000200576c87202c10000200006250000c01ffff0000f80069c3de1b889dfedd752a10ff4d1d618137c146d90afb49f49e48b9f0c6235c8934e4a10402de622b7d4c10f4ff070000a6340c107f5c9f91e47c899e51ddba2d57b03433ee591898e2c251a42df81086a9390c0d54115dc4c841f4d3f034ae1837020062ef8caec7a06aebea6ae69a165ad2ce24468cacaeb7f31b8fed69d2b639fa8c43dd54103187c59609b178777c3970abbc867c7a14eeab8fad13b2f383cdbe9a5c17460e3ebaa8ef0fdb30a31f8f8d6974d45e8335205f81c980bd2baf812b7b50e4bff2346ce42fe5b376b4488106265b572d84f4d6299da492d617e95c2814b781063c6d038a57c3145f463d34048531a3ded820908f1a579f151bddabecafdfccf905f816fcc46d33300a478a3487c06e7e2fafe298e8048039a328fd8132b3e15fbd9caa68b982a275d8627b89168984afa8cbef4c2918542665cd335ede4276b6edaacb3ea9488bffe04729116f6776566c7e4da838319c8fa1aa8c7275ea5ce0b9bdd78dfe3bddda229da452c8d9543360ad020849d72d205d73feb2b1504d632d84d87d6b1f91aa219ab293be4064973d323904d4bd6ef28d4b17161fe4513c88ad4ebf6f1087297f93cd5dfa7137a027fcb73ae565a28d7e66e0d06df4633bb5fea015ba0d6a624caecb715e0330705b17680de858fc9d9da0bc36033007d9a4aca35df9b77c1a68db3c45883df798a52d6672cd76af3ad51cde0bbc01d2045d76cf85ee5271"], 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000)
sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f00000008c0)={0x0, 0xffffffffffffff8c, &(0x7f0000000900)={&(0x7f0000000940)={0x28, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000a40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012dbd7000fcdbdf251500000008000300", @ANYRES32=r11, @ANYBLOB="0a000600ffffffffffff00000a001a0008021100000100000a000600ffffffffffff00000a00ffffffff00000a001a00ffffffffffff00000a001a00ffffffffffff00"/84], 0x70}, 0x1, 0x0, 0x0, 0x20}, 0x8014)
sendmmsg(r5, &(0x7f0000000640), 0x40000000000009f, 0x0)
accept4(r3, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, 0x800)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRES32=r1, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600})

2m18.374936696s ago: executing program 3 (id=1585):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x30000}, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)=""/72, 0x83, 0x48, 0x1, 0x3}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, r3, 0x3, 0x2, 0x1}, 0x50)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
syz_emit_ethernet(0xd7, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc9, 0x0, 0x0, 0xfd, 0x1, 0x0, @local, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0x2b, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x2f, 0x1000, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0xc7, 0x3, 0xc}, @timestamp_addr={0x44, 0x14, 0xf2, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x6}]}, @ssrr={0x89, 0x23, 0x5f, [@multicast1, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @remote, @local]}, @lsrr={0x83, 0x1b, 0xf7, [@remote, @multicast2, @private=0xa010102, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}]}, @rr={0x7, 0x13, 0x9a, [@multicast2, @multicast1, @rand_addr=0x64010101, @private=0xa010102]}, @lsrr={0x83, 0x2f, 0x75, [@empty, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @local, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010102, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}]}]}}, "bc"}}}}}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmmsg(r4, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f00000051c0)=""/264, 0x108}, {&(0x7f0000002940)=""/202, 0xca}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f0000005300)=""/4110, 0x100e}, {&(0x7f0000000300)=""/141, 0x8d}, {&(0x7f0000004b80)=""/130, 0x82}, {&(0x7f0000004c40)=""/34, 0x22}], 0x8}, 0x9}], 0x1, 0x60, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={<r5=>0x2}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000001c0)={r5, 0x5}, 0x8)

2m18.008182731s ago: executing program 2 (id=1586):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'syztnl0\x00', <r2=>0x0, 0x700, 0x20, 0x8, 0x8, {{0xf, 0x4, 0x2, 0x12, 0x3c, 0x64, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp_prespec={0x44, 0x1c, 0xb4, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x24}, 0xdf}, {@multicast1, 0x80000001}, {@private=0xa010100, 0xfffffffa}]}, @lsrr={0x83, 0xb, 0x9e, [@multicast2, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000100)=@raw=[@generic={0x6, 0x1, 0x3, 0x2, 0x200}, @jmp={0x5, 0x1, 0x1, 0x2, 0x1, 0xfffffffffffffff8, 0x8}], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xd5, &(0x7f0000000180)=""/213, 0x40e00, 0x6, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000380)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x2, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r1], 0x0, 0x10, 0x2926}, 0x94)
r4 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$inet6_udp_int(r4, 0x11, 0x66, 0x0, &(0x7f0000000500))
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl1\x00', r2, 0x2f, 0x1, 0x0, 0x9, 0xa, @mcast1, @empty, 0x10, 0x8, 0x7, 0x7}})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB="bfa200000000000007020000d7feffff720200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bfa00000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m17.170015215s ago: executing program 3 (id=1587):
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x5, 0x0) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000400)={0x0, 0x8000}, 0x4) (async)
r1 = socket(0x200000000000011, 0x2, 0x1)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000006c0)={0x0, 0x8000}, 0x4) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 64)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[], 0x30}}, 0x4800)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004b0000400000000000059078ac1414000a010100441405030000000000000000e000000100000000830200004e200000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00009806780000"], 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b9be"], 0xb4}}, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
socket$inet6(0xa, 0x3, 0x3c) (rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) (async)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x18, 0x0, 0x2)
sendto$inet(r2, &(0x7f0000000700)="0da607a4b4eab16e9779b48b175109dd540ed500bdf5f83fe21aff1289539080a48e1e9acabab80f0377b2cce1d2c0b350e0019fc3eb7a34c4488ef8df98ac3b1faa9e2b4d7bae509d457dd4459dc35d67962003a57b4f391ee806e319da7214c22ca4c727bbfcf83ec52beb13bb08a0e20ba154a2f25272d00d4f5f529049e002374ce131fefa683f36709ee7fd889e5f39df88b56ebaa49c3369c1d6", 0x9d, 0xc010, &(0x7f0000000680)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async, rerun: 64)
bind$netlink(r7, 0x0, 0x0) (rerun: 64)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054)

2m17.000229316s ago: executing program 2 (id=1588):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbae6ce1b3172453ec5ad52d4662b5df25210000000c00555509001f00710000000000000000000000000000004eae952a2760fcd3fbd1d4d7e677bcd0a8198df1c28e55640fe6caf2a9279314cef262b09c18da72446719f93649aed9141e2d87e90bbddee1fb570490792ff2fa26a72d2c22611f893b742e4f71475d7d9067dec6b1df1212b777e189417458723d7053a6a43c5d083b0edc09c53379c0a96e7a0c749bec67dd975c11a9606c4b5a559b8a4205a594cdcaeb98522346c2e19b615836fd531d222d8bd96a463d2360fbfce60b0d438917cc3ef5d8b9eadfa89575bf402f5400422deb158313f66975ccbb0234ab8d1263fbb85e6808363ac9295c85f426696bc4b1e44797e0728ea1c68f63fd4af41d539fbea1bf"], 0x34}, 0x1, 0x0, 0x0, 0x4004850}, 0x4000)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000200)={0x0, 0xfffffffffffffee0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001500000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x60}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x3}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x10001}, 0x8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYRESDEC=r0], 0x5c}}, 0x0)

2m16.993315594s ago: executing program 0 (id=1589):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40000004)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0], 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000800)="000000000000000002", 0x0}, 0x50)
ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000))

2m9.765122355s ago: executing program 2 (id=1590):
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000640000004300000002"], 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xec}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r4)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000000840))
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0xfffffffe, r0}, 0x38)

2m8.932933505s ago: executing program 0 (id=1591):
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000580)={{<r0=>0xffffffffffffffff, &(0x7f0000000200)='memory.events\x00', 0x400080, &(0x7f00000002c0)={@_ha_fsid={[0x9, 0x5a]}, {0x1ff, 0x3, 0x5, 0x101}}, 0x5, &(0x7f0000000300), &(0x7f0000000340)=0x9}, 0x2, &(0x7f0000000500)=[{0x2, 0x8, &(0x7f0000000380)='(\\,\x00', &(0x7f00000003c0)="cd9e06d652f2a0d3e77d6fd0a7c0271a44c5dbc0611bdc1bc43b4e1d5d87aa5b527823f0ea2ed3756c944732052109377c0fb77643b8fd5295146b4472ad77f78246b41cc6de6fe5e1cefd3b8bdc6b541ff2f1026188ffe11350d5e5d1d60444f95dbd71a66397b3decbc2a2", 0x6c, 0x20}, {0x2, 0x2, &(0x7f0000000440)='\x00', &(0x7f0000000480)="be73397acb34fbb9b7a82def61ebdd01d8727335996a0ebd5a4f1cdef74e9169224c47751c0797a755aa0dd89aa15e6069d982fbcb94f3744ad4d8428dc5b3aa8b5813c3c861efc6be8cf12e50a5d8b729c3fbabed00f897eb5bf251d877292b752a352d24d0ff869077c971de1bf8da76119492d63121c5909991cea4d53b", 0x7f}]}) (async)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={<r1=>0x1, @in6={{0xa, 0x4e24, 0x7201c924, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x7}}, 0x0, 0x9, 0x4, 0x5, 0x380}, &(0x7f00000006c0)=0x98)
setsockopt$inet_sctp_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000740)={r1, 0x8001}, 0x8) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000940)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r3, 0x0, 0xe, 0x0, &(0x7f0000000a00)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
bind$packet(r2, &(0x7f0000000700)={0x11, 0x6, 0x1, 0x1, 0x0, 0x6, @random="ee52e7e07522"}, 0x14) (async)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000780)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) (async)
write(r2, &(0x7f00000007c0)="01", 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a44, 0x1700) (async)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x20000021)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000002000000000000070000000003000000000000080100000000000000000000020200000000002e2e"], 0x0, 0x44}, 0x28) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf001})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000280), 0x4) (async)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000240)={0x3, 0x38a80000, 0x2a, &(0x7f00000001c0)=""/42}) (async)
syz_emit_ethernet(0x15, &(0x7f0000000540)={@random="fb57e76be621", @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@x25={0x805, {0x3, 0x2, 0xf}}}}, 0x0)

2m2.068480577s ago: executing program 33 (id=1578):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x4c02})
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000400)=""/227, 0x1c}], 0x4) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', 0x1}) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r0], 0x54}}, 0x4) (async)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000580)=0xaf) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001000)="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", 0x1ca}], 0x1, 0x0, 0x0, 0x81}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000540), 0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async, rerun: 64)
socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x8, 0x3000000000002}, 0x0) (async)
sendmsg$tipc(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000300)={0x0, <r7=>0xffffffffffffffff, 0x800}, &(0x7f0000000340)=0xc)
ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f00000005c0)={0x0, {0x2, 0x4e24, @rand_addr=0x64010101}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)='hsr0\x00', 0xfff, 0x7, 0xffff}) (async)
sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)

1m57.177445962s ago: executing program 34 (id=1587):
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x5, 0x0) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000400)={0x0, 0x8000}, 0x4) (async)
r1 = socket(0x200000000000011, 0x2, 0x1)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000006c0)={0x0, 0x8000}, 0x4) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 64)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[], 0x30}}, 0x4800)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004b0000400000000000059078ac1414000a010100441405030000000000000000e000000100000000830200004e200000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00009806780000"], 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b9be"], 0xb4}}, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
socket$inet6(0xa, 0x3, 0x3c) (rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) (async)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x18, 0x0, 0x2)
sendto$inet(r2, &(0x7f0000000700)="0da607a4b4eab16e9779b48b175109dd540ed500bdf5f83fe21aff1289539080a48e1e9acabab80f0377b2cce1d2c0b350e0019fc3eb7a34c4488ef8df98ac3b1faa9e2b4d7bae509d457dd4459dc35d67962003a57b4f391ee806e319da7214c22ca4c727bbfcf83ec52beb13bb08a0e20ba154a2f25272d00d4f5f529049e002374ce131fefa683f36709ee7fd889e5f39df88b56ebaa49c3369c1d6", 0x9d, 0xc010, &(0x7f0000000680)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async, rerun: 64)
bind$netlink(r7, 0x0, 0x0) (rerun: 64)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054)

1m56.433618121s ago: executing program 0 (id=1594):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000000)={0x1, 0x4, 0x67a4, 0x6, 0x7})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@multicast2, @empty, <r4=>0x0}, &(0x7f0000000180)=0xc)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={<r5=>0x0, @multicast2}, &(0x7f0000000200)=0xc) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', <r6=>0x0, 0x20, 0x1, 0x3, 0x3, {{0x9, 0x4, 0x1, 0x9, 0x24, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@cipso={0x86, 0xe, 0x3, [{0x2, 0x8, "99625400a669"}]}, @noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000300)={'gre0\x00', <r7=>0x0, 0x7800, 0x0, 0x5, 0x4, {{0x23, 0x4, 0x3, 0x1f, 0x8c, 0x66, 0x0, 0x80, 0x29, 0x0, @loopback, @multicast2, {[@generic={0x86, 0x11, "e10c0c66963dada45863ebd9ceaefa"}, @ra={0x94, 0x4}, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x6, 0x12, "1ad32dc2c6014816fdaebc129bc7e464"}, {0x6, 0x7, "82cdc6af9d"}, {0x2, 0x2}, {0x7, 0x6, "067fdbbb"}, {0x0, 0x9, "1943f95ba6d505"}, {0x2, 0x4, "2cb5"}]}, @noop, @generic={0x7, 0x9, "15ec8a09c0da90"}, @lsrr={0x83, 0x17, 0x94, [@empty, @local, @local, @remote, @broadcast]}, @ra={0x94, 0x4}, @generic={0x82, 0x8, "d95ed244e108"}, @end]}}}}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, r2, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async)
ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000540)={0xffffffffffffffff, 0x4}) (async)
r8 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x0, 0x0, @remote}, &(0x7f00000005c0)=0x1c, 0x80800)
setsockopt$inet6_buf(r8, 0x29, 0xca, &(0x7f0000000600)="bff17ab11e8de5f152df2098c24607baa698d9d74ed23e02b7031751df6eefa0571b6d476b37c8ce859ceb0e41e3e9dc4ec886c2a7572f43aa9e25f927105cc96223b22627fbd433c80b9ea45a3c8e959d8f39c7edee9227d105b8be73958187e8d982a22012005ba1f4c1128efd7f729fddc583401b43ce2578d6d3a14912e01ac398", 0x83) (async)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x4010, r0}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map=r9, 0xf, 0x0, 0xffffffff, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)=@ipv6_newroute={0xc8, 0x18, 0x200, 0x70bd2b, 0x25dfdbff, {0xa, 0x10, 0x0, 0x8, 0xfd, 0x2, 0x0, 0x0, 0x1800}, [@RTA_PREF={0x5, 0x14, 0xfa}, @RTA_PREF={0x5}, @RTA_IIF={0x8, 0x3, r3}, @RTA_METRICS={0x5b, 0x8, 0x0, 0x1, "4327fc39ef4e4c76dc148bab3160be4e096ebb869efff6aacfdaea4596fd3370439b058bf22b115512ec09d35bd847c2444ee922999fcfce13f668d825c1be4a1cf1d39c475107cbe051ac165258df939c18c0fdf7fd97"}, @RTA_EXPIRES={0x8, 0x17, 0x6}, @RTA_MARK={0x8, 0x10, 0x7}, @RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x880}, 0x800) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r11, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x811}, 0x4040040) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000b40)={<r12=>0xffffffffffffffff})
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r12, &(0x7f0000000c40)={&(0x7f0000000b80), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, 0x1405, 0x8, 0x70bd2b, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0xb5}}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x400d0}, 0x8001) (async)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ec0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e80)={@cgroup=r13, 0xb, 0x0, 0xf5e, &(0x7f0000000d80)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000dc0)=[0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50)
r14 = epoll_create(0x1c911316) (async)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_ctl$EPOLL_CTL_DEL(r14, 0x2, r15) (async)
socket$unix(0x1, 0x2, 0x0)

1m56.432629928s ago: executing program 2 (id=1595):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4000041)
r1 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20004004) (async)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000180)={0x0, 0x7}) (async)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)

1m43.99910156s ago: executing program 2 (id=1596):
syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60cedd0000103afffee000000000000000000000000000bbff02000000000000000000ee0000000189009078000000000000000000000000f28e3abed528be4aebbc30b176013ec028"], 0x0)

1m36.816808289s ago: executing program 35 (id=1594):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000000)={0x1, 0x4, 0x67a4, 0x6, 0x7})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@multicast2, @empty, <r4=>0x0}, &(0x7f0000000180)=0xc)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={<r5=>0x0, @multicast2}, &(0x7f0000000200)=0xc) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', <r6=>0x0, 0x20, 0x1, 0x3, 0x3, {{0x9, 0x4, 0x1, 0x9, 0x24, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@cipso={0x86, 0xe, 0x3, [{0x2, 0x8, "99625400a669"}]}, @noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000300)={'gre0\x00', <r7=>0x0, 0x7800, 0x0, 0x5, 0x4, {{0x23, 0x4, 0x3, 0x1f, 0x8c, 0x66, 0x0, 0x80, 0x29, 0x0, @loopback, @multicast2, {[@generic={0x86, 0x11, "e10c0c66963dada45863ebd9ceaefa"}, @ra={0x94, 0x4}, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x6, 0x12, "1ad32dc2c6014816fdaebc129bc7e464"}, {0x6, 0x7, "82cdc6af9d"}, {0x2, 0x2}, {0x7, 0x6, "067fdbbb"}, {0x0, 0x9, "1943f95ba6d505"}, {0x2, 0x4, "2cb5"}]}, @noop, @generic={0x7, 0x9, "15ec8a09c0da90"}, @lsrr={0x83, 0x17, 0x94, [@empty, @local, @local, @remote, @broadcast]}, @ra={0x94, 0x4}, @generic={0x82, 0x8, "d95ed244e108"}, @end]}}}}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, r2, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async)
ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000540)={0xffffffffffffffff, 0x4}) (async)
r8 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x0, 0x0, @remote}, &(0x7f00000005c0)=0x1c, 0x80800)
setsockopt$inet6_buf(r8, 0x29, 0xca, &(0x7f0000000600)="bff17ab11e8de5f152df2098c24607baa698d9d74ed23e02b7031751df6eefa0571b6d476b37c8ce859ceb0e41e3e9dc4ec886c2a7572f43aa9e25f927105cc96223b22627fbd433c80b9ea45a3c8e959d8f39c7edee9227d105b8be73958187e8d982a22012005ba1f4c1128efd7f729fddc583401b43ce2578d6d3a14912e01ac398", 0x83) (async)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x4010, r0}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map=r9, 0xf, 0x0, 0xffffffff, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)=@ipv6_newroute={0xc8, 0x18, 0x200, 0x70bd2b, 0x25dfdbff, {0xa, 0x10, 0x0, 0x8, 0xfd, 0x2, 0x0, 0x0, 0x1800}, [@RTA_PREF={0x5, 0x14, 0xfa}, @RTA_PREF={0x5}, @RTA_IIF={0x8, 0x3, r3}, @RTA_METRICS={0x5b, 0x8, 0x0, 0x1, "4327fc39ef4e4c76dc148bab3160be4e096ebb869efff6aacfdaea4596fd3370439b058bf22b115512ec09d35bd847c2444ee922999fcfce13f668d825c1be4a1cf1d39c475107cbe051ac165258df939c18c0fdf7fd97"}, @RTA_EXPIRES={0x8, 0x17, 0x6}, @RTA_MARK={0x8, 0x10, 0x7}, @RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x880}, 0x800) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r11, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x811}, 0x4040040) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000b40)={<r12=>0xffffffffffffffff})
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r12, &(0x7f0000000c40)={&(0x7f0000000b80), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, 0x1405, 0x8, 0x70bd2b, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0xb5}}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x400d0}, 0x8001) (async)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ec0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e80)={@cgroup=r13, 0xb, 0x0, 0xf5e, &(0x7f0000000d80)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000dc0)=[0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50)
r14 = epoll_create(0x1c911316) (async)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_ctl$EPOLL_CTL_DEL(r14, 0x2, r15) (async)
socket$unix(0x1, 0x2, 0x0)

1m32.246545478s ago: executing program 2 (id=1598):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9e00000068000104b003546628f530ba18a353ec000000210e00020000001100002004000b00"], 0x1c}}, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)=<r2=>0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r3)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x40040)
write$nci(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="500404", @ANYBLOB="c0e698c023"], 0x7)
write$nci(r1, &(0x7f0000000880)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="23000000080000000c001b000300000001"], 0x50)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x6a}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x98}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80), &(0x7f0000000bc0), 0x5, r7}, 0x38)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r14=>0x0})
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r15)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r15, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e00150000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x77f432da62fcaaa1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r16, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4010)
sendmsg$NL80211_CMD_JOIN_MESH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x54, r13, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x25}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x5f}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xa}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff61}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x8000}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1a}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r17 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$sock_buf(r17, 0x1, 0x1c, 0x0, &(0x7f0000000ac0)=0xfc)
sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x1cc, r13, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}]}], @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x1800, 0x2, 0x92ee, 0x4, 0x6, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x5, 0xba3e, 0x3, 0x3, 0xfffe, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xec3a, 0x8000, 0x8, 0x7, 0x9, 0xd, 0x2000, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x200, 0x9, 0x9, 0x1, 0x4f, 0xfff8, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x12, 0x3, 0x30, 0x2e, 0x2, 0x5, 0x5, 0x7fd0163b21621dc3, 0xafc481b905620a3d, 0x6, 0x9, 0x2, 0x36, 0x4, 0x3, 0x9, 0x48, 0x3, 0x7f, 0x6, 0x18, 0x30, 0x9, 0x2, 0x1b, 0x6, 0x2, 0x9, 0x30, 0x5, 0x26]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0x9}, {0x0, 0x6}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x7}, {0x2, 0x6}, {0x1, 0x4}, {0x1, 0x7}, {0x3, 0x3}, {0x2, 0x7}, {0x4, 0x7}, {0x0, 0xa}, {0x2, 0x1}, {0x6, 0x4}, {0x3, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x2, 0x6}, {0x1, 0x4}, {0x3, 0x2}, {0x3, 0x2}, {0x2, 0x5}, {0x5, 0x8}, {0x5, 0x1}, {0x2, 0x8}, {0x6, 0x5}, {0x0, 0x9}, {0x6, 0x9}, {0x7, 0x9}, {0x4, 0x1}, {0x4, 0x9}, {0x1, 0xa}, {0x6, 0x7}, {0x5, 0x7}, {0x4, 0x8}, {0x7}, {0x3, 0x9}, {0x3, 0x4}, {0x6, 0x4}, {0x6, 0x2}, {0x3, 0x6}, {0x2, 0x6}, {0x0, 0x8}, {0x1, 0x1}, {0x2, 0x17}, {0x3, 0x4}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x101, 0x8900, 0x4, 0x5, 0x834, 0x800, 0xa]}}]}]}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0a, 0xfac01, 0x9, 0xfac0c]}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0xfac0c]}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac01]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac05, 0xfac00, 0xfac0b, 0xfac06, 0xfac01]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]]}, 0x1cc}, 0x1, 0x0, 0x0, 0x8800}, 0x800)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@getnexthop={0x20, 0x6a, 0x2, 0x70bd2d, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0)

0s ago: executing program 36 (id=1598):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9e00000068000104b003546628f530ba18a353ec000000210e00020000001100002004000b00"], 0x1c}}, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)=<r2=>0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r3)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x40040)
write$nci(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="500404", @ANYBLOB="c0e698c023"], 0x7)
write$nci(r1, &(0x7f0000000880)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="23000000080000000c001b000300000001"], 0x50)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x6a}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x98}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80), &(0x7f0000000bc0), 0x5, r7}, 0x38)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r14=>0x0})
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r15)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r15, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e00150000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x77f432da62fcaaa1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r16, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4010)
sendmsg$NL80211_CMD_JOIN_MESH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x54, r13, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x25}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x5f}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xa}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff61}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x8000}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1a}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r17 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$sock_buf(r17, 0x1, 0x1c, 0x0, &(0x7f0000000ac0)=0xfc)
sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x1cc, r13, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}]}], @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x1800, 0x2, 0x92ee, 0x4, 0x6, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x5, 0xba3e, 0x3, 0x3, 0xfffe, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xec3a, 0x8000, 0x8, 0x7, 0x9, 0xd, 0x2000, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x200, 0x9, 0x9, 0x1, 0x4f, 0xfff8, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x12, 0x3, 0x30, 0x2e, 0x2, 0x5, 0x5, 0x7fd0163b21621dc3, 0xafc481b905620a3d, 0x6, 0x9, 0x2, 0x36, 0x4, 0x3, 0x9, 0x48, 0x3, 0x7f, 0x6, 0x18, 0x30, 0x9, 0x2, 0x1b, 0x6, 0x2, 0x9, 0x30, 0x5, 0x26]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0x9}, {0x0, 0x6}, {0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x7}, {0x2, 0x6}, {0x1, 0x4}, {0x1, 0x7}, {0x3, 0x3}, {0x2, 0x7}, {0x4, 0x7}, {0x0, 0xa}, {0x2, 0x1}, {0x6, 0x4}, {0x3, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x2, 0x6}, {0x1, 0x4}, {0x3, 0x2}, {0x3, 0x2}, {0x2, 0x5}, {0x5, 0x8}, {0x5, 0x1}, {0x2, 0x8}, {0x6, 0x5}, {0x0, 0x9}, {0x6, 0x9}, {0x7, 0x9}, {0x4, 0x1}, {0x4, 0x9}, {0x1, 0xa}, {0x6, 0x7}, {0x5, 0x7}, {0x4, 0x8}, {0x7}, {0x3, 0x9}, {0x3, 0x4}, {0x6, 0x4}, {0x6, 0x2}, {0x3, 0x6}, {0x2, 0x6}, {0x0, 0x8}, {0x1, 0x1}, {0x2, 0x17}, {0x3, 0x4}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x101, 0x8900, 0x4, 0x5, 0x834, 0x800, 0xa]}}]}]}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0a, 0xfac01, 0x9, 0xfac0c]}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0xfac0c]}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac01]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac05, 0xfac00, 0xfac0b, 0xfac06, 0xfac01]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]]}, 0x1cc}, 0x1, 0x0, 0x0, 0x8800}, 0x800)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@getnexthop={0x20, 0x6a, 0x2, 0x70bd2d, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

 The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.220987][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.304844][ T5637] team0: Port device team_slave_0 added
[   81.345627][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.345642][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.345666][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.396513][ T5637] team0: Port device team_slave_1 added
[   81.418925][ T5640] hsr_slave_0: entered promiscuous mode
[   81.419624][ T5640] hsr_slave_1: entered promiscuous mode
[   81.420864][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.420876][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.420898][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.440807][ T5639] hsr_slave_0: entered promiscuous mode
[   81.441998][ T5639] hsr_slave_1: entered promiscuous mode
[   81.442734][ T5639] debugfs: 'hsr0' already exists in 'hsr'
[   81.442832][ T5639] Cannot create hsr debugfs directory
[   81.510006][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.510022][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.510043][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.552375][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.552390][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.552414][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.600356][ T5638] hsr_slave_0: entered promiscuous mode
[   81.601470][ T5638] hsr_slave_1: entered promiscuous mode
[   81.602190][ T5638] debugfs: 'hsr0' already exists in 'hsr'
[   81.602208][ T5638] Cannot create hsr debugfs directory
[   81.748554][ T5637] hsr_slave_0: entered promiscuous mode
[   81.749709][ T5637] hsr_slave_1: entered promiscuous mode
[   81.751083][ T5637] debugfs: 'hsr0' already exists in 'hsr'
[   81.751102][ T5637] Cannot create hsr debugfs directory
[   82.219798][ T5639] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.239798][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   82.240727][ T5639] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.245221][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   82.249746][ T5639] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.258341][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   82.269376][ T5639] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   82.280867][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   82.387183][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.387296][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.387632][ T5649] bridge_slave_0: entered allmulticast mode
[   82.389483][ T5649] bridge_slave_0: entered promiscuous mode
[   82.392160][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.392310][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.392685][ T5649] bridge_slave_1: entered allmulticast mode
[   82.394347][ T5649] bridge_slave_1: entered promiscuous mode
[   82.448822][ T5637] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.452720][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   82.454799][ T5637] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.456860][ T5644] Bluetooth: hci4: command tx timeout
[   82.456888][ T5644] Bluetooth: hci0: command tx timeout
[   82.456910][ T5644] Bluetooth: hci3: command tx timeout
[   82.456930][ T5644] Bluetooth: hci1: command tx timeout
[   82.456950][ T5644] Bluetooth: hci2: command tx timeout
[   82.463511][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   82.467147][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.477449][ T5637] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.482613][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   82.486463][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.504965][ T5637] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.511011][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   82.575946][ T5649] team0: Port device team_slave_0 added
[   82.582278][ T5649] team0: Port device team_slave_1 added
[   82.624665][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.624680][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.624710][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.626485][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.626497][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.626519][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.668966][ T5638] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   82.676587][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   82.682533][ T5638] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   82.712180][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   82.727354][ T5638] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   82.735847][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   82.769957][ T5649] hsr_slave_0: entered promiscuous mode
[   82.770757][ T5649] hsr_slave_1: entered promiscuous mode
[   82.771147][ T5649] debugfs: 'hsr0' already exists in 'hsr'
[   82.771165][ T5649] Cannot create hsr debugfs directory
[   82.789020][ T5638] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.798748][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   82.963105][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.963326][ T5640] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   82.966056][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   82.986363][ T5640] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   82.998662][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   83.014818][ T5640] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   83.021508][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.022282][ T5640] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   83.029005][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   83.068376][ T5639] 8021q: adding VLAN 0 to HW filter on device team0
[   83.125248][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.125355][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.155378][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.155481][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.196970][ T5649] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   83.199862][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.201531][ T5649] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   83.204836][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   83.205457][ T5649] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.210807][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.240366][ T5649] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   83.253838][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   83.266162][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.283129][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.358952][ T5638] 8021q: adding VLAN 0 to HW filter on device team0
[   83.376485][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.376579][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.403548][ T5637] 8021q: adding VLAN 0 to HW filter on device team0
[   83.405737][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.405794][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.463829][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.463984][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.491798][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.491907][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.509501][ T5638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.582093][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.681233][ T5640] 8021q: adding VLAN 0 to HW filter on device team0
[   83.724410][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.724516][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.738637][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.791745][ T5649] 8021q: adding VLAN 0 to HW filter on device team0
[   83.794683][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.794781][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.839641][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.839747][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.882046][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.882180][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.503391][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.527713][ T4953] Bluetooth: hci2: command tx timeout
[   84.527744][ T4953] Bluetooth: hci1: command tx timeout
[   84.527766][ T4953] Bluetooth: hci3: command tx timeout
[   84.527786][ T4953] Bluetooth: hci0: command tx timeout
[   84.527807][ T4953] Bluetooth: hci4: command tx timeout
[   84.690639][ T5639] veth0_vlan: entered promiscuous mode
[   84.702406][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.741832][ T5639] veth1_vlan: entered promiscuous mode
[   84.920950][ T5639] veth0_macvtap: entered promiscuous mode
[   84.930613][ T5638] veth0_vlan: entered promiscuous mode
[   84.942848][ T5639] veth1_macvtap: entered promiscuous mode
[   84.969303][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.973778][ T5638] veth1_vlan: entered promiscuous mode
[   85.012379][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.049941][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.121011][   T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.121164][   T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.121233][   T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.121296][   T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.176066][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.245901][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.254835][ T5638] veth0_macvtap: entered promiscuous mode
[   85.258549][ T5637] veth0_vlan: entered promiscuous mode
[   85.292448][ T5638] veth1_macvtap: entered promiscuous mode
[   85.333980][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.334003][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.351034][ T5637] veth1_vlan: entered promiscuous mode
[   85.390491][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.390509][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.453438][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.495810][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.553370][ T5649] veth0_vlan: entered promiscuous mode
[   85.561114][ T5637] veth0_macvtap: entered promiscuous mode
[   85.608821][ T5637] veth1_macvtap: entered promiscuous mode
[   85.631649][ T5649] veth1_vlan: entered promiscuous mode
[   85.652701][   T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.653395][   T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.653703][   T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.653869][   T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.703994][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.748706][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.750506][ T5639] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   85.798002][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.798020][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.848348][   T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.848785][   T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.900837][ T5649] veth0_macvtap: entered promiscuous mode
[   85.906892][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.906916][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.932089][ T5838] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2'.
[   85.947011][   T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.948671][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.949334][ T5649] veth1_macvtap: entered promiscuous mode
[   86.019602][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.019622][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.035015][ T5640] veth0_vlan: entered promiscuous mode
[   86.068260][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.104070][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.104090][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.105683][ T5640] veth1_vlan: entered promiscuous mode
[   86.113789][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.198656][  T289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.198701][  T289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.198736][  T289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.198768][  T289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.304419][ T5640] veth0_macvtap: entered promiscuous mode
[   86.348428][ T5640] veth1_macvtap: entered promiscuous mode
[   86.405223][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.405244][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.460969][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.508473][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.561162][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.561183][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.576873][  T155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.598707][   T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.598746][   T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.607169][ T5644] Bluetooth: hci4: command tx timeout
[   86.607198][ T5644] Bluetooth: hci0: command tx timeout
[   86.607219][ T5644] Bluetooth: hci3: command tx timeout
[   86.607240][ T5644] Bluetooth: hci1: command tx timeout
[   86.607260][ T5644] Bluetooth: hci2: command tx timeout
[   86.656837][   T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.765762][   T10] cfg80211: failed to load regulatory.db
[   86.802816][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.802837][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.959368][ T5857] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET)
[   86.965275][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.965293][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.035238][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'.
[   87.398105][ T5884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'.
[   87.600716][ T5892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17'.
[   87.606326][ T5892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17'.
[   87.956192][ T5915] pim6reg: entered allmulticast mode
[   88.120899][ T5925] netlink: 'syz.1.30': attribute type 4 has an invalid length.
[   88.126446][ T5925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.30'.
[   88.160034][ T5928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.30'.
[   88.161915][ T5926] netlink: 'syz.1.30': attribute type 4 has an invalid length.
[   88.225236][ T5934] ip_tables: iptables: counters copy to user failed while replacing table
[   88.225257][ T5932] netlink: 348 bytes leftover after parsing attributes in process `syz.2.31'.
[   88.281338][ T5932] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.838689][ T5965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.38'.
[   88.858099][   T30] audit: type=1800 audit(1793411620.218:2): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.38" name="memory.events" dev="tmpfs" ino=33 res=0 errno=-22
[   88.869691][   T30] audit: type=1804 audit(1793411620.248:3): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.38" name="/newroot/3/memory.events" dev="tmpfs" ino=33 res=1 errno=0
[   88.930603][ T5974] ip_tables: iptables: counters copy to user failed while replacing table
[   88.946056][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   88.946299][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   88.962988][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   89.083009][ T5981] openvswitch: netlink: nsh attr 359 is out of range max 3
[   89.178246][ T5369] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   89.468539][ T5369] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   89.500553][ T5297] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.614222][ T6013] SET target dimension over the limit!
[   89.716469][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'.
[   90.055926][ T5768] rxe_eth0 speed is unknown, defaulting to 1000
[   90.576837][ T6060] Zero length message leads to an empty skb
[   90.983052][ T6071] syzkaller0: entered promiscuous mode
[   90.983076][ T6071] syzkaller0: entered allmulticast mode
[   91.018418][ T6081] __nla_validate_parse: 4 callbacks suppressed
[   91.018445][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'.
[   91.405567][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'.
[   92.528655][ T4953] Bluetooth: hci4: command tx timeout
[   92.673388][ T6111] syzkaller0: entered promiscuous mode
[   92.673411][ T6111] syzkaller0: entered allmulticast mode
[   92.722905][ T6135] x_tables: duplicate underflow at hook 2
[   92.743303][ T6138] netlink: 44 bytes leftover after parsing attributes in process `syz.2.71'.
[   92.862656][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'.
[   92.862988][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.73'.
[   92.933553][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.73'.
[   93.024823][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'.
[   93.044236][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.73'.
[   93.141535][ T6156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.75'.
[   93.141555][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.75'.
[   93.329436][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   94.152638][ T6149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.172184][ T6149] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.204173][ T6151] ip6_vti0: entered promiscuous mode
[   94.212726][ T6163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.214823][ T6165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.294919][ T6173] warning: `syz.4.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   94.692630][ T6206] netlink: 'syz.1.87': attribute type 2 has an invalid length.
[   94.878178][ T6216] gretap0: entered promiscuous mode
[   95.413737][ T6246] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   95.614025][ T6255] ieee802154 phy0 wpan0: encryption failed: -22
[   95.882766][ T6278] xt_nfacct: accounting object `' does not exist
[   95.973656][ T6285] netlink: 'syz.0.113': attribute type 2 has an invalid length.
[   96.500653][   T53] block nbd1: Receive control failed (result -32)
[   96.502087][ T5644] block nbd0: Receive control failed (result -32)
[   96.503886][ T4953] block nbd0: Receive control failed (result -32)
[   96.504014][ T5648] block nbd1: Receive control failed (result -32)
[   96.780370][ T6314] __nla_validate_parse: 9 callbacks suppressed
[   96.780389][ T6314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.121'.
[   96.994160][ T6321] ip_tables: iptables: counters copy to user failed while replacing table
[   97.044993][   T30] audit: type=1804 audit(1793411628.418:4): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.123" name="/newroot/17/cgroup.controllers" dev="tmpfs" ino=106 res=1 errno=0
[   97.045042][   T30] audit: type=1800 audit(1793411628.418:5): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.123" name="cgroup.controllers" dev="tmpfs" ino=106 res=0 errno=-22
[   97.240301][ T6343] netlink: 33 bytes leftover after parsing attributes in process `syz.3.127'.
[   97.240324][ T6343] netlink: 140 bytes leftover after parsing attributes in process `syz.3.127'.
[   97.244015][ T6343] netlink: 33 bytes leftover after parsing attributes in process `syz.3.127'.
[   97.680744][ T6363] netlink: 'syz.4.132': attribute type 1 has an invalid length.
[   97.687393][ T6363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.132'.
[   97.833329][ T6376] sit0: entered promiscuous mode
[   97.844115][ T6376] netlink: 'syz.3.134': attribute type 1 has an invalid length.
[   97.844135][ T6376] netlink: 1 bytes leftover after parsing attributes in process `syz.3.134'.
[   97.849180][ T6371] ipt_rpfilter: unknown options
[   98.130091][ T6390] veth0_to_bond: entered allmulticast mode
[   98.341354][ T6398] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   98.678094][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'.
[   98.846067][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.150'.
[   98.940185][ T6422] tipc: Started in network mode
[   98.940219][ T6422] tipc: Node identity ac14140f, cluster identity 4711
[   98.940905][ T6422] tipc: New replicast peer: 255.255.255.255
[   98.950363][ T6422] tipc: Enabled bearer <udp:syz2>, priority 10
[   98.993249][ T6427] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   99.399874][ T6449] netlink: 'syz.3.159': attribute type 4 has an invalid length.
[   99.399897][ T6449] netlink: 5620 bytes leftover after parsing attributes in process `syz.3.159'.
[   99.541120][ T6453] netlink: 24 bytes leftover after parsing attributes in process `syz.1.160'.
[   99.679777][ T6454] netlink: 'syz.0.161': attribute type 4 has an invalid length.
[  100.064374][ T5784] tipc: Node number set to 2886997007
[  101.701736][ T6528] batman_adv: batadv0: Adding interface: syz_tun
[  101.701752][ T6528] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.701780][ T6528] batman_adv: batadv0: Interface activated: syz_tun
[  102.126793][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  102.985076][ T6560] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.576084][ T6491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  104.053635][ T6574] __nla_validate_parse: 5 callbacks suppressed
[  104.053654][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'.
[  104.053689][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'.
[  104.413045][ T6592] ip_tables: iptables: counters copy to user failed while replacing table
[  104.636932][ T6610] SET target dimension over the limit!
[  104.824889][ T6613] netlink: 45 bytes leftover after parsing attributes in process `syz.0.201'.
[  104.869455][ T6613] IPv6: sit1: Disabled Multicast RS
[  104.881813][ T6613] netlink: 'syz.0.201': attribute type 6 has an invalid length.
[  105.011409][ T6623] netlink: 'syz.4.203': attribute type 1 has an invalid length.
[  105.011432][ T6623] netlink: 'syz.4.203': attribute type 4 has an invalid length.
[  105.011445][ T6623] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.203'.
[  105.518695][ T6641] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  105.825047][ T6665] atomic_op ffff88806861b1e0 conn xmit_atomic 0000000000000000
[  106.322737][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.220'.
[  106.602960][ T6700] netlink: 'syz.2.223': attribute type 11 has an invalid length.
[  106.943267][ T6718] tap0: tun_chr_ioctl cmd 1074025676
[  106.943289][ T6718] tap0: owner set to 0
[  107.389005][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'.
[  107.389071][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'.
[  107.395780][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'.
[  107.480806][ T6748] netlink: 68 bytes leftover after parsing attributes in process `syz.4.239'.
[  107.481059][ T6748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.239'.
[  107.541863][ T6760] xt_socket: unknown flags 0xc
[  107.658306][ T6768] nftables ruleset with unbound set
[  107.835008][ T6781] xt_MASQUERADE: bad rangesize 2147483646
[  107.835382][ T6781] x_tables: duplicate underflow at hook 1
[  107.952974][ T6786] netlink: 'syz.4.249': attribute type 10 has an invalid length.
[  108.018372][ T6786] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  108.063662][ T6786] team0: Port device wlan0 added
[  108.517113][ T6834] netlink: 'syz.4.261': attribute type 18 has an invalid length.
[  108.597036][  T697] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.598792][   T57] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.598829][   T57] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.607833][  T697] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.663177][ T6837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.026211][ T6848] netlink: 'syz.4.266': attribute type 1 has an invalid length.
[  109.181409][ T6858] __nla_validate_parse: 7 callbacks suppressed
[  109.181428][ T6858] netlink: 304 bytes leftover after parsing attributes in process `syz.0.267'.
[  109.213705][ T6853] bond1: (slave gretap1): making interface the new active one
[  109.214906][ T6853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.215252][ T6853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.244197][ T6853] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  109.261121][ T6854] macvlan2: entered promiscuous mode
[  109.261140][ T6854] macvlan2: entered allmulticast mode
[  109.262023][ T6854] bond1: entered promiscuous mode
[  109.262038][ T6854] gretap1: entered promiscuous mode
[  109.262336][ T6854] bond1: entered allmulticast mode
[  109.262349][ T6854] gretap1: entered allmulticast mode
[  109.263693][ T6854] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  109.264484][ T6854] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  109.264615][ T6854] bond1: left allmulticast mode
[  109.264628][ T6854] gretap1: left allmulticast mode
[  109.264642][ T6854] bond1: left promiscuous mode
[  109.264653][ T6854] gretap1: left promiscuous mode
[  109.440108][ T6853] syz.4.266 (6853) used greatest stack depth: 18720 bytes left
[  109.631075][ T6867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.274'.
[  109.632917][ T6867] IPVS: lblc: UDP [fe80::aa]:8080 - no destination available
[  109.634516][ T6355] IPVS: starting estimator thread 0...
[  109.718949][ T6868] IPVS: using max 31 ests per chain, 74400 per kthread
[  109.782883][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'.
[  109.782962][ T6878] bridge_slave_1: left allmulticast mode
[  109.782980][ T6878] bridge_slave_1: left promiscuous mode
[  109.784195][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.817683][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.873936][ T6878] bridge_slave_0: left allmulticast mode
[  109.873962][ T6878] bridge_slave_0: left promiscuous mode
[  109.880390][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.333835][ T6926] ip_tables: iptables: counters copy to user failed while replacing table
[  110.337203][ T6925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.352898][ T6929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.458706][ T6933] Bluetooth: MGMT ver 1.23
[  110.566467][ T6939] netlink: 112 bytes leftover after parsing attributes in process `syz.2.291'.
[  110.570397][ T6939] sctp: [Deprecated]: syz.2.291 (pid 6939) Use of int in max_burst socket option deprecated.
[  110.570397][ T6939] Use struct sctp_assoc_value instead
[  110.713843][ T6946] xt_nfacct: accounting object `syz0' does not exist
[  110.900098][ T6955] xt_hashlimit: size too large, truncated to 1048576
[  111.001643][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'.
[  111.319223][ T6981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.563935][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.309'.
[  111.634085][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'.
[  112.633323][ T7058] netlink: 'syz.3.325': attribute type 1 has an invalid length.
[  112.670213][ T7058] bond1: entered promiscuous mode
[  112.670825][ T7058] 8021q: adding VLAN 0 to HW filter on device bond1
[  112.690616][ T7056] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  112.733080][ T7056] bond1: (slave bridge0): making interface the new active one
[  112.733102][ T7056] bridge0: entered promiscuous mode
[  112.734897][ T7056] bond1: (slave bridge0): Enslaving as an active interface with an up link
[  112.824874][ T7073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.330'.
[  112.912049][ T7078] netlink: 'syz.4.331': attribute type 2 has an invalid length.
[  113.051971][ T7088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.334'.
[  113.052858][ T7088] netlink: 'syz.1.334': attribute type 64 has an invalid length.
[  113.052876][ T7088] netlink: 5 bytes leftover after parsing attributes in process `syz.1.334'.
[  113.233684][ T7102] netlink: 'syz.2.338': attribute type 1 has an invalid length.
[  113.235661][ T7103] xt_CT: You must specify a L4 protocol and not use inversions on it
[  113.368341][ T7113] xt_CT: You must specify a L4 protocol and not use inversions on it
[  114.287537][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.572839][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.572933][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  116.132330][ T7095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  116.332541][ T7132] ieee802154 phy0 wpan0: encryption failed: -90
[  116.357424][ T7137] __nla_validate_parse: 5 callbacks suppressed
[  116.357442][ T7137] netlink: 80 bytes leftover after parsing attributes in process `syz.4.344'.
[  116.372544][ T7132] TC_ACT_REPEAT abuse ?
[  116.457423][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.350'.
[  116.497911][ T7152] tipc: Failed to remove unknown binding: 66,1,1/2886997007:565822070/565822072
[  116.584109][ T7160] netlink: 'syz.0.351': attribute type 1 has an invalid length.
[  116.633795][ T7153] bond2: option packets_per_slave: invalid value (18446744073709551615)
[  116.633817][ T7153] bond2: option packets_per_slave: allowed values 0 - 65535
[  116.661737][ T7153] bond2 (unregistering): Released all slaves
[  116.711844][ T7162] netlink: 'syz.0.351': attribute type 8 has an invalid length.
[  116.711864][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'.
[  116.759377][ T7167] netlink: 40 bytes leftover after parsing attributes in process `syz.4.352'.
[  116.760337][ T7167] ieee802154 phy0 wpan0: encryption failed: -22
[  116.760573][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.352'.
[  116.760599][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.352'.
[  116.828108][ T7161] 8021q: adding VLAN 0 to HW filter on device bond2
[  116.832769][ T7161] bond1: (slave bond2): making interface the new active one
[  116.833366][ T7161] bond1: (slave bond2): Enslaving as an active interface with an up link
[  116.834508][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.835502][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.921166][ T7153] bond2: option packets_per_slave: invalid value (18446744073709551615)
[  116.921189][ T7153] bond2: option packets_per_slave: allowed values 0 - 65535
[  116.924533][ T7153] bond2 (unregistering): Released all slaves
[  117.038478][ T7153] bond2: option packets_per_slave: invalid value (18446744073709551615)
[  117.038501][ T7153] bond2: option packets_per_slave: allowed values 0 - 65535
[  117.042199][ T7153] bond2 (unregistering): Released all slaves
[  117.133783][ T7178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.134237][   T57] IPVS: starting estimator thread 0...
[  117.226715][ T7179] IPVS: using max 28 ests per chain, 67200 per kthread
[  117.284412][ T7153] bond2: option packets_per_slave: invalid value (18446744073709551615)
[  117.284435][ T7153] bond2: option packets_per_slave: allowed values 0 - 65535
[  117.296098][ T7153] bond2 (unregistering): Released all slaves
[  117.375221][ T7183] x_tables: duplicate underflow at hook 1
[  117.785135][ T7202] x_tables: duplicate underflow at hook 1
[  117.800255][  T723] IPVS: starting estimator thread 0...
[  117.803857][ T7193] syzkaller1: entered promiscuous mode
[  117.803874][ T7193] syzkaller1: entered allmulticast mode
[  117.823335][ T7203] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20001
[  117.825286][ T7203] IPVS: fo: FWM 3 0x00000003 - no destination available
[  117.825359][    C1] IPVS: fo: FWM 3 0x00000003 - no destination available
[  117.887037][ T7204] IPVS: using max 25 ests per chain, 60000 per kthread
[  118.130805][ T5369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.181496][ T7220] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  118.380368][ T7241] IPVS: Unknown mcast interface: dvmrp0
[  118.384665][ T7241] IPVS: Unknown mcast interface: dvmrp0
[  118.519508][ T7252] ip_tables: iptables: counters copy to user failed while replacing table
[  118.574424][ T7260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.625210][ T7251] x_tables: duplicate underflow at hook 2
[  118.666579][ T7251] xt_hashlimit: size too large, truncated to 1048576
[  118.711319][ T7254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.372'.
[  119.127308][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.373'.
[  119.226490][ T7290] dvmrp0: entered allmulticast mode
[  119.330092][ T7298] netlink: 'syz.2.375': attribute type 97 has an invalid length.
[  119.330115][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'.
[  119.330134][ T7298] netlink: 'syz.2.375': attribute type 97 has an invalid length.
[  119.330147][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'.
[  119.393469][ T7303] netlink: 'syz.0.376': attribute type 1 has an invalid length.
[  119.406801][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  119.478607][ T7305] bond3: entered promiscuous mode
[  119.478630][ T7305] bond3: entered allmulticast mode
[  119.821899][ T7322] netlink: 'syz.3.382': attribute type 17 has an invalid length.
[  119.900432][ T7322] erspan0: entered promiscuous mode
[  119.902950][ T7322] gretap0: entered promiscuous mode
[  119.933038][ T7322] netlink: 'syz.3.382': attribute type 17 has an invalid length.
[  119.944411][ T7322] netlink: 'syz.3.382': attribute type 17 has an invalid length.
[  119.944628][ T7322] netlink: 'syz.3.382': attribute type 17 has an invalid length.
[  119.944835][ T7322] netlink: 'syz.3.382': attribute type 17 has an invalid length.
[  119.945032][ T7322] netlink: 'syz.3.382': attribute type 17 has an invalid length.
[  119.945225][ T7322] netlink: 'syz.3.382': attribute type 17 has an invalid length.
[  120.292266][ T5644] Bluetooth: hci2: unexpected cc 0x2060 length: 8 > 7
[  120.442907][ T7355] IPVS: set_ctl: invalid protocol: 14426 0.0.0.0:0
[  120.669054][ T7371] lo speed is unknown, defaulting to 1000
[  120.669124][ T7371] lo speed is unknown, defaulting to 1000
[  120.689763][   T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.689823][   T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.729854][ T7371] lo speed is unknown, defaulting to 1000
[  120.730978][ T7371] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  120.731012][ T7371] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  120.731054][ T7371] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  120.836043][ T7371] lo speed is unknown, defaulting to 1000
[  120.874822][ T7371] lo speed is unknown, defaulting to 1000
[  120.884369][ T7371] lo speed is unknown, defaulting to 1000
[  120.902221][ T7371] lo speed is unknown, defaulting to 1000
[  120.910754][ T7371] lo speed is unknown, defaulting to 1000
[  121.156270][ T7398] TCP: TCP_TX_DELAY enabled
[  121.928159][ T7440] syzkaller1: entered promiscuous mode
[  121.928181][ T7440] syzkaller1: entered allmulticast mode
[  122.058873][ T7446] __nla_validate_parse: 72 callbacks suppressed
[  122.058894][ T7446] netlink: 56 bytes leftover after parsing attributes in process `syz.0.416'.
[  122.423908][ T7469] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  122.457812][ T7474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.458004][ T7474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.458204][ T7474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.458369][ T7474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.458534][ T7474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.851562][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.851709][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.851878][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.852016][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.852156][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.852295][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.852428][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.852544][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.852689][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.852813][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.852940][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.853074][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.853215][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.856289][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.856448][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.858117][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.858265][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.858401][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.858532][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.858677][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.858807][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.860399][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.860535][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.860665][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.860796][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.860928][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.861401][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.861550][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.861681][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.861821][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.861953][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.862247][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  122.862378][ T7492] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  123.330441][ T7521] netlink: 32 bytes leftover after parsing attributes in process `syz.2.438'.
[  123.330912][ T7520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.438'.
[  123.805127][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'.
[  123.805149][ T7544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.443'.
[  125.845372][ T7499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  126.119335][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'.
[  126.119355][ T7568] netlink: 36 bytes leftover after parsing attributes in process `syz.1.450'.
[  126.119557][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'.
[  126.119571][ T7568] netlink: 36 bytes leftover after parsing attributes in process `syz.1.450'.
[  126.123831][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'.
[  126.364741][ T7586] bond2: Removing last arp target with arp_interval on
[  126.450062][ T7282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.450121][ T7282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.503735][ T7585] 8021q: adding VLAN 0 to HW filter on device bond2
[  126.616038][ T7608] validate_nla: 29 callbacks suppressed
[  126.616057][ T7608] netlink: 'syz.1.460': attribute type 1 has an invalid length.
[  126.654676][ T7617] netlink: 'syz.3.463': attribute type 1 has an invalid length.
[  126.657779][ T7608] bond3: entered promiscuous mode
[  126.658317][ T7608] 8021q: adding VLAN 0 to HW filter on device bond3
[  126.697524][ T7608] bond3: (slave bridge1): making interface the new active one
[  126.697546][ T7608] bridge1: entered promiscuous mode
[  126.701849][ T7608] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  126.763642][ T7608] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  126.763667][ T7608] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  126.828745][ T7622] ip_tables: iptables: counters copy to user failed while replacing table
[  126.848950][ T7623] netlink: 'syz.3.464': attribute type 26 has an invalid length.
[  127.102686][ T7639] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  127.201297][ T7640] netlink: 'syz.1.466': attribute type 1 has an invalid length.
[  127.201317][ T7640] __nla_validate_parse: 5 callbacks suppressed
[  127.201328][ T7640] netlink: 244 bytes leftover after parsing attributes in process `syz.1.466'.
[  127.423393][ T7605] netlink: 48 bytes leftover after parsing attributes in process `syz.4.462'.
[  127.955602][ T7675] xt_hashlimit: invalid interval
[  128.361655][ T7706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.485'.
[  128.696387][ T7728] 8021q: VLANs not supported on sit0
[  128.770675][ T7734] team0: Device ipvlan0 failed to register rx_handler
[  129.404043][ T7780] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  129.603173][ T7788] netlink: 27 bytes leftover after parsing attributes in process `syz.3.508'.
[  129.641633][ T7795] No such timeout policy "syz0"
[  129.920327][ T7801] TC_ACT_REPEAT abuse ?
[  130.272063][ T7818] ieee802154 phy0 wpan0: encryption failed: -22
[  130.381011][ T7818] netlink: 68 bytes leftover after parsing attributes in process `syz.3.517'.
[  130.383947][ T7819] netlink: 68 bytes leftover after parsing attributes in process `syz.3.517'.
[  130.546000][ T5644] Bluetooth: hci2: unexpected cc 0x1003 length: 0 < 9
[  130.563880][ T7838] netlink: 'syz.1.521': attribute type 1 has an invalid length.
[  130.792320][ T7838] bond4: entered promiscuous mode
[  130.792807][ T7838] 8021q: adding VLAN 0 to HW filter on device bond4
[  130.822724][ T7847] batman_adv: batadv0: Adding interface: gretap1
[  130.822739][ T7847] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  130.822767][ T7847] batman_adv: batadv0: Interface activated: gretap1
[  130.873039][ T7850] tunl0: entered promiscuous mode
[  130.883621][ T7850] netlink: 'syz.3.523': attribute type 3 has an invalid length.
[  130.883640][ T7850] netlink: 9 bytes leftover after parsing attributes in process `syz.3.523'.
[  130.903769][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'.
[  130.918537][ T7852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.524'.
[  130.919152][ T7852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.524'.
[  131.123444][ T7861] SET target dimension over the limit!
[  131.498771][ T7277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.498827][ T7277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.555672][ T7939] __nla_validate_parse: 4 callbacks suppressed
[  132.555692][ T7939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.547'.
[  132.578916][ T7939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.547'.
[  132.601802][ T7939] netlink: 'syz.4.547': attribute type 1 has an invalid length.
[  132.601820][ T7939] netlink: 'syz.4.547': attribute type 3 has an invalid length.
[  132.601832][ T7939] netlink: 'syz.4.547': attribute type 7 has an invalid length.
[  132.601844][ T7939] netlink: 'syz.4.547': attribute type 8 has an invalid length.
[  132.601856][ T7939] netlink: 184 bytes leftover after parsing attributes in process `syz.4.547'.
[  132.601888][ T7939] NCSI netlink: No device for ifindex 131092
[  132.746368][ T7947] netlink: 'syz.2.550': attribute type 11 has an invalid length.
[  132.758925][ T7947] netlink: 64 bytes leftover after parsing attributes in process `syz.2.550'.
[  132.850558][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  132.979302][ T7960] syzkaller1: entered allmulticast mode
[  133.083427][ T7973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.558'.
[  133.083449][ T7973] tipc: Invalid UDP bearer configuration
[  133.083495][ T7973] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  133.103160][ T7972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.559'.
[  133.175459][ T5369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.335988][ T7976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.418844][ T7998] hsr0: entered allmulticast mode
[  133.418867][ T7998] hsr_slave_0: entered allmulticast mode
[  133.420507][ T7998] hsr_slave_1: entered allmulticast mode
[  133.461128][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'.
[  133.463249][ T7999] veth1_vlan: left promiscuous mode
[  133.622331][ T8006] netlink: 'syz.0.567': attribute type 10 has an invalid length.
[  133.634032][ T8006] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  133.643214][ T8006] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  133.676511][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.699578][ T8008] netlink: 'syz.3.568': attribute type 1 has an invalid length.
[  133.782258][ T8008] bond3: entered promiscuous mode
[  133.783033][ T8008] 8021q: adding VLAN 0 to HW filter on device bond3
[  133.813773][ T8013] bond3: (slave bridge1): making interface the new active one
[  133.813796][ T8013] bridge1: entered promiscuous mode
[  133.815391][ T8013] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  133.842640][ T8005] netlink: 56 bytes leftover after parsing attributes in process `syz.3.568'.
[  133.842664][ T8005] netlink: 56 bytes leftover after parsing attributes in process `syz.3.568'.
[  133.988094][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.047011][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.118043][ T8033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.206896][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.245962][ T8034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.778215][ T8058] netlink: 'syz.1.582': attribute type 21 has an invalid length.
[  134.778236][ T8058] netlink: 128 bytes leftover after parsing attributes in process `syz.1.582'.
[  134.804357][ T5644] block nbd2: Receive control failed (result -32)
[  135.484905][ T8102] Driver unsupported XDP return value 0 on prog  (id 224) dev N/A, expect packet loss!
[  136.099604][ T8141] netlink: 'syz.4.611': attribute type 1 has an invalid length.
[  136.099658][ T8141] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  136.099668][ T8141] IPv6: NLM_F_CREATE should be set when creating new route
[  136.528281][   T65] net_ratelimit: 6 callbacks suppressed
[  136.528300][   T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.528353][   T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.773299][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.665670][ T8142] syzkaller0: entered promiscuous mode
[  137.665686][ T8142] syzkaller0: entered allmulticast mode
[  137.679347][ T8154] gretap0: entered promiscuous mode
[  137.683215][ T8161] 0ªî{X¹¦: renamed from gretap0
[  137.686068][ T8161] 0ªî{X¹¦: left promiscuous mode
[  137.686080][ T8161] 0ªî{X¹¦: entered allmulticast mode
[  137.697037][ T8161] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  137.804056][ T8171] __nla_validate_parse: 8 callbacks suppressed
[  137.804078][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'.
[  137.804093][ T8171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.616'.
[  137.825103][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.411181][ T8203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.624'.
[  138.479641][ T8209] netlink: 516 bytes leftover after parsing attributes in process `syz.2.625'.
[  138.877848][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.036264][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'.
[  139.250812][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.305874][ T5769] lo speed is unknown, defaulting to 1000
[  139.409638][ T8188] netlink: 52 bytes leftover after parsing attributes in process `syz.3.619'.
[  139.562893][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.636'.
[  139.660366][ T8263] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.716869][ T8263] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.916459][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.931061][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'.
[  139.931162][ T8271] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.955868][ T8271] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.009076][ T8281] bridge0: port 3(veth1_to_bridge) entered blocking state
[  140.009183][ T8281] bridge0: port 3(veth1_to_bridge) entered disabled state
[  140.009321][ T8281] veth1_to_bridge: entered allmulticast mode
[  140.026467][ T8281] veth1_to_bridge: entered promiscuous mode
[  140.029800][ T8281] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  140.033194][ T8281] bridge0: port 3(veth1_to_bridge) entered blocking state
[  140.033475][ T8281] bridge0: port 3(veth1_to_bridge) entered forwarding state
[  140.172695][ T8293] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  140.314119][ T8302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.645'.
[  140.449036][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.648'.
[  140.494023][  T723] IPVS: starting estimator thread 0...
[  140.494641][ T8311] IPVS: ip_vs_add_dest(): server weight less than zero
[  140.495494][ T8311] sctp: [Deprecated]: syz.0.649 (pid 8311) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.495494][ T8311] Use struct sctp_sack_info instead
[  140.541273][ T8316] netlink: 'syz.4.650': attribute type 1 has an invalid length.
[  140.549727][ T8316] Bluetooth: hci0: unsupported parameter 5134
[  140.549748][ T8316] Bluetooth: hci0: unsupported parameter 8192
[  140.549763][ T8316] Bluetooth: hci0: unsupported parameter 5134
[  140.549775][ T8316] Bluetooth: hci0: unsupported parameter 8192
[  140.586793][ T8314] IPVS: using max 30 ests per chain, 72000 per kthread
[  140.955043][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.983401][ T8343] netlink: 'syz.0.659': attribute type 11 has an invalid length.
[  141.510703][ T8371] netlink: 'syz.1.668': attribute type 1 has an invalid length.
[  141.574126][ T8385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.675694][ T8393] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  141.680944][ T8393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.693891][ T8393] netlink: 'syz.4.673': attribute type 3 has an invalid length.
[  141.774588][ T8395] ip_tables: iptables: counters copy to user failed while replacing table
[  141.967592][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.064185][ T8418] Cannot find del_set index 4 as target
[  142.286938][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.714398][ T8442] netlink: 'syz.2.688': attribute type 32 has an invalid length.
[  143.015183][ T8458] openvswitch: netlink: Port 536870913 exceeds max allowable 65535
[  143.018650][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.054325][ T8458] syzkaller1: entered promiscuous mode
[  143.054347][ T8458] syzkaller1: entered allmulticast mode
[  143.144021][ T8465] __nla_validate_parse: 13 callbacks suppressed
[  143.144041][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.699'.
[  143.153470][ T8466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.153857][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.429957][ T8475] netlink: 'syz.0.704': attribute type 1 has an invalid length.
[  143.429976][ T8475] netlink: 244 bytes leftover after parsing attributes in process `syz.0.704'.
[  143.616095][ T8483] netlink: 'syz.4.706': attribute type 30 has an invalid length.
[  143.681212][ T8492] netlink: 'syz.4.706': attribute type 30 has an invalid length.
[  143.719447][ T8495] netlink: 'syz.1.711': attribute type 2 has an invalid length.
[  143.719466][ T8495] netlink: 244 bytes leftover after parsing attributes in process `syz.1.711'.
[  143.854294][ T8504] netlink: 'syz.1.712': attribute type 21 has an invalid length.
[  143.854317][ T8504] netlink: 128 bytes leftover after parsing attributes in process `syz.1.712'.
[  143.893873][ T8504] netlink: 3 bytes leftover after parsing attributes in process `syz.1.712'.
[  143.935288][ T8508] bond4: option packets_per_slave: invalid value (18446744073709551615)
[  143.935312][ T8508] bond4: option packets_per_slave: allowed values 0 - 65535
[  143.949286][ T8508] bond4 (unregistering): Released all slaves
[  144.139878][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'.
[  144.243914][   T65] IPVS: starting estimator thread 0...
[  144.299382][ T8539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.724'.
[  144.302678][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'.
[  144.327821][ T8535] IPVS: using max 29 ests per chain, 69600 per kthread
[  144.379798][ T8544] xt_policy: too many policy elements
[  144.616972][ T8559] netlink: 193 bytes leftover after parsing attributes in process `syz.3.726'.
[  144.698881][ T8566] netlink: 193 bytes leftover after parsing attributes in process `syz.3.726'.
[  146.825918][ T8625] tipc: Invalid UDP bearer configuration
[  146.825964][ T8625] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  147.157684][ T8628] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  147.249645][   T29] net_ratelimit: 7 callbacks suppressed
[  147.249663][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.383386][ T8637] v: renamed from vlan1 (while UP)
[  147.572230][ T1178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.572290][ T1178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.723412][ T8649] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[  147.785444][ T8649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.785647][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.290913][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.372047][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.531488][ T8674] __nla_validate_parse: 5 callbacks suppressed
[  148.531506][ T8674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.751'.
[  148.531521][ T8674] nbd: must specify at least one socket
[  148.556826][ T8678] validate_nla: 3 callbacks suppressed
[  148.556842][ T8678] netlink: 'syz.3.754': attribute type 5 has an invalid length.
[  148.653879][ T8682] netlink: 'syz.1.755': attribute type 1 has an invalid length.
[  148.663732][ T8687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.751'.
[  148.663753][ T8687] nbd: must specify at least one socket
[  148.712559][ T8682] 8021q: adding VLAN 0 to HW filter on device bond5
[  148.716389][ T8682] netlink: 32 bytes leftover after parsing attributes in process `syz.1.755'.
[  148.872188][ T8682] bond5: (slave bridge3): making interface the new active one
[  148.894135][ T8682] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  149.047579][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.758'.
[  149.107474][ T8701] netlink: ct family unspecified
[  149.107508][ T8701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.124815][ T8696] team0 (unregistering): Port device team_slave_0 removed
[  149.150818][ T8696] team0 (unregistering): Port device team_slave_1 removed
[  149.176028][ T8707] netlink: 80 bytes leftover after parsing attributes in process `syz.1.760'.
[  149.176070][ T8707] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  149.196065][ T8696] team0 (unregistering): Port device wlan0 removed
[  150.863948][ T8765] netlink: 'syz.4.773': attribute type 8 has an invalid length.
[  150.901883][ T8766] netlink: 'syz.4.773': attribute type 8 has an invalid length.
[  151.132807][ T8770] syzkaller0: entered promiscuous mode
[  151.132828][ T8770] syzkaller0: entered allmulticast mode
[  151.381421][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.777'.
[  151.381444][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'.
[  151.381462][ T8778] netlink: 14 bytes leftover after parsing attributes in process `syz.3.777'.
[  151.393905][ T8775] x_tables: duplicate underflow at hook 1
[  152.447263][   T29] net_ratelimit: 10 callbacks suppressed
[  152.447277][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.719715][ T8730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  152.864325][ T8788] netlink: 32 bytes leftover after parsing attributes in process `syz.0.780'.
[  152.899125][ T8786] bond0: entered promiscuous mode
[  152.899147][ T8786] bond_slave_0: entered promiscuous mode
[  152.899367][ T8786] bond_slave_1: entered promiscuous mode
[  152.906912][ T8786] batadv0: entered promiscuous mode
[  152.915402][ T8791] SET target dimension over the limit!
[  152.917385][ T8786] 8021q: adding VLAN 0 to HW filter on device hsr1
[  152.984552][ T8791] syzkaller1: entered promiscuous mode
[  152.984575][ T8791] syzkaller1: entered allmulticast mode
[  153.253875][ T8815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'.
[  153.331845][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.331902][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.419746][ T8823] xt_IDLETIMER: timeout value is zero
[  153.492014][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.521304][ T8825] syzkaller1: entered promiscuous mode
[  153.521324][ T8825] syzkaller1: entered allmulticast mode
[  153.632679][ T8833] netlink: 'syz.2.797': attribute type 1 has an invalid length.
[  153.632726][ T8833] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  153.632738][ T8833] IPv6: NLM_F_CREATE should be set when creating new route
[  153.692676][ T8835] team_slave_1: entered promiscuous mode
[  153.820239][ T8844] __nla_validate_parse: 1 callbacks suppressed
[  153.820258][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'.
[  153.994572][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.804'.
[  154.447447][ T5369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.532312][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.547158][ T8898] netlink: 72 bytes leftover after parsing attributes in process `syz.4.813'.
[  155.072624][ T8917] xt_cgroup: invalid path, errno=-2
[  155.228151][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.819'.
[  155.247283][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  155.567277][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.585685][ T8924] netlink: 112 bytes leftover after parsing attributes in process `syz.2.821'.
[  155.753086][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'.
[  155.753106][ T8927] netlink: 2 bytes leftover after parsing attributes in process `syz.1.822'.
[  155.761435][ T8931] netlink: 96 bytes leftover after parsing attributes in process `syz.4.823'.
[  155.773552][ T8934] netlink: 96 bytes leftover after parsing attributes in process `syz.4.823'.
[  155.782279][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'.
[  155.961608][ T8935] bond4: option min_links: invalid value (18446744073709551614)
[  155.961631][ T8935] bond4: option min_links: allowed values 0 - 2147483647
[  155.963737][ T8935] bond4 (unregistering): Released all slaves
[  156.000042][ T8944] xt_hashlimit: size too large, truncated to 1048576
[  156.121705][ T8945] netlink: 'syz.4.826': attribute type 1 has an invalid length.
[  156.607481][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.945695][ T8973] xt_hashlimit: size too large, truncated to 1048576
[  156.966175][ T8972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.966391][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.488625][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.652232][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.369005][  T723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.369066][  T723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.697511][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.884457][ T9038] x_tables: duplicate underflow at hook 1
[  158.888478][ T9038] Cannot find add_set index 34 as target
[  159.116338][ T9042] openvswitch: netlink: Missing valid actions attribute.
[  159.116371][ T9042] openvswitch: netlink: Actions may not be safe on all matching packets
[  159.142335][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.480034][ T9048] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[  159.484067][ T9048] batman_adv: batadv0: Adding interface: gretap0
[  159.484083][ T9048] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  159.484113][ T9048] batman_adv: batadv0: Interface activated: gretap0
[  159.488360][  T723] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  159.496780][ T7287] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  159.496829][ T7287] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  159.496861][ T7287] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  159.728008][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.734336][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.750855][ T9055] __nla_validate_parse: 7 callbacks suppressed
[  159.750870][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.859'.
[  159.754453][ T9055] netlink: 36 bytes leftover after parsing attributes in process `syz.0.859'.
[  159.755045][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.859'.
[  160.156550][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.862'.
[  160.303412][ T9063] 8021q: adding VLAN 0 to HW filter on device bond4
[  160.312121][ T9068] netlink: 84 bytes leftover after parsing attributes in process `syz.1.864'.
[  160.435548][ T9068] veth4: entered allmulticast mode
[  160.538535][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'.
[  160.567622][ T9081] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000
[  161.427484][ T9110] netlink: 'syz.4.874': attribute type 11 has an invalid length.
[  161.427508][ T9110] netlink: 'syz.4.874': attribute type 5 has an invalid length.
[  161.427522][ T9110] netlink: 224 bytes leftover after parsing attributes in process `syz.4.874'.
[  161.715811][ T9131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.253550][ T9120] x_tables: unsorted entry at hook 1
[  162.525768][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.885'.
[  162.565032][ T9149] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  162.572355][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.885'.
[  162.801665][ T9152] bridge3: entered promiscuous mode
[  162.801745][ T9152] bridge3: entered allmulticast mode
[  162.897673][ T5784] net_ratelimit: 1034 callbacks suppressed
[  162.897693][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.277222][ T9166] netlink: 'syz.4.891': attribute type 21 has an invalid length.
[  163.277245][ T9166] netlink: 128 bytes leftover after parsing attributes in process `syz.4.891'.
[  163.277319][ T9166] netlink: 'syz.4.891': attribute type 4 has an invalid length.
[  163.277331][ T9166] netlink: 'syz.4.891': attribute type 5 has an invalid length.
[  163.282582][ T9166] lo: entered promiscuous mode
[  163.293285][ T9166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  163.553196][ T9185] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  163.715451][ T9188] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  163.750178][ T9170] syzkaller1: entered promiscuous mode
[  163.750199][ T9170] syzkaller1: entered allmulticast mode
[  163.767157][ T9197] lo: entered promiscuous mode
[  163.776255][ T9197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.157215][ T9204] gtp1: entered promiscuous mode
[  164.157237][ T9204] gtp1: entered allmulticast mode
[  164.778856][ T9224] __nla_validate_parse: 3 callbacks suppressed
[  164.778876][ T9224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.905'.
[  164.991490][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'.
[  164.991512][ T9233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.907'.
[  164.997393][ T9233] tunl0: entered promiscuous mode
[  165.013892][ T9233] netlink: 'syz.0.907': attribute type 3 has an invalid length.
[  165.013912][ T9233] netlink: 9 bytes leftover after parsing attributes in process `syz.0.907'.
[  165.034084][ T9235] xt_hl: Unknown TTL match mode: 255
[  165.245371][ T9245] syz_tun: entered allmulticast mode
[  165.245907][ T9243] syz_tun: left allmulticast mode
[  165.343842][ T9258] netlink: 72 bytes leftover after parsing attributes in process `syz.0.916'.
[  165.343867][ T9258] netlink: 72 bytes leftover after parsing attributes in process `syz.0.916'.
[  165.345979][ T9253] tipc: Started in network mode
[  165.346003][ T9253] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  165.346064][ T9253] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  165.348852][ T9258] Cannot find del_set index 4 as target
[  165.399182][ T9259] netlink: 'syz.4.914': attribute type 17 has an invalid length.
[  165.401480][ T9258] ip_tables: iptables: counters copy to user failed while replacing table
[  165.690211][ T9275] Cannot find set identified by id 0 to match
[  165.722342][ T9276] netlink: 'syz.0.921': attribute type 1 has an invalid length.
[  165.762897][ T9275] ip_tables: iptables: counters copy to user failed while replacing table
[  165.940881][ T9285] 8021q: adding VLAN 0 to HW filter on device bond6
[  165.956039][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.929'.
[  165.956066][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.929'.
[  165.963621][ T9289] syzkaller0: entered promiscuous mode
[  165.963642][ T9289] syzkaller0: entered allmulticast mode
[  166.210081][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'.
[  166.469759][ T9325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.940'.
[  166.562759][ T9331] xt_hashlimit: size too large, truncated to 1048576
[  166.886387][ T9351] netlink: 'syz.0.947': attribute type 2 has an invalid length.
[  167.004017][ T9358] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  167.007649][ T9358] Cannot find add_set index 65532 as target
[  167.108232][ T9365] netlink: 'syz.0.953': attribute type 2 has an invalid length.
[  167.108418][ T9365] netlink: 'syz.0.953': attribute type 2 has an invalid length.
[  167.108583][ T9365] netlink: 'syz.0.953': attribute type 2 has an invalid length.
[  167.109265][ T9365] netlink: 'syz.0.953': attribute type 2 has an invalid length.
[  167.109442][ T9365] netlink: 'syz.0.953': attribute type 2 has an invalid length.
[  167.109618][ T9365] netlink: 'syz.0.953': attribute type 2 has an invalid length.
[  167.109786][ T9365] netlink: 'syz.0.953': attribute type 2 has an invalid length.
[  167.109950][ T9365] netlink: 'syz.0.953': attribute type 2 has an invalid length.
[  167.110126][ T9365] netlink: 'syz.0.953': attribute type 2 has an invalid length.
[  167.251741][ T9361] smc: removing ib device rxe0
[  167.278668][ T9367] bond0: entered allmulticast mode
[  167.278689][ T9367] bond_slave_0: entered allmulticast mode
[  167.278707][ T9367] bond_slave_1: entered allmulticast mode
[  167.402164][ T9361] smbdirect: ib_dev[rxe0] removed
[  167.627787][ T9390] ip_tables: iptables: counters copy to user failed while replacing table
[  169.346370][ T9458] tap0: tun_chr_ioctl cmd 1074025672
[  169.346394][ T9458] tap0: ignored: set checksum disabled
[  169.773840][ T9480] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  169.832385][ T9482] tipc: Started in network mode
[  169.832414][ T9482] tipc: Node identity fe800000000000000000000000000013, cluster identity 8
[  169.833828][ T9482] tipc: Enabled bearer <udp:syz0>, priority 10
[  169.841661][ T9482] __nla_validate_parse: 42 callbacks suppressed
[  169.841676][ T9482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.981'.
[  169.895095][ T9485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.982'.
[  169.895117][ T9485] netlink: 120 bytes leftover after parsing attributes in process `syz.2.982'.
[  169.895160][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.982'.
[  170.152420][ T9495] netlink: 96 bytes leftover after parsing attributes in process `syz.1.985'.
[  170.402479][ T9512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  170.447143][ T5644] Bluetooth: hci4: command tx timeout
[  170.525333][ T9517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.994'.
[  170.525358][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.994'.
[  170.555396][ T9517] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  170.573794][ T9517] team0: Port device wlan0 added
[  170.721878][ T9531] netlink: 68 bytes leftover after parsing attributes in process `syz.2.999'.
[  170.949501][ T9553] bridge2: entered allmulticast mode
[  170.952109][ T5738] tipc: Node number set to 4269801491
[  171.612473][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'.
[  171.612497][ T9579] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1005'.
[  171.620825][ T9579] geneve2: entered promiscuous mode
[  171.620845][ T9579] geneve2: entered allmulticast mode
[  172.281305][ T9586] syzkaller0: entered promiscuous mode
[  172.281320][ T9586] syzkaller0: entered allmulticast mode
[  173.650473][ T9542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  173.819768][ T9593] validate_nla: 28 callbacks suppressed
[  173.819789][ T9593] netlink: 'syz.1.1010': attribute type 4 has an invalid length.
[  173.865569][   T29] lo speed is unknown, defaulting to 1000
[  173.865614][   T29] syz_device_name_32_chars_1234567: Port: 1 Link DOWN
[  173.880889][ T9593] netlink: 'syz.1.1010': attribute type 4 has an invalid length.
[  173.895572][ T5738] lo speed is unknown, defaulting to 1000
[  173.895594][ T5738] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE
[  173.956185][ T9604] xt_l2tp: v2 doesn't support IP mode
[  174.077843][ T9612] raw_sendmsg: syz.1.1013 forgot to set AF_INET. Fix it!
[  174.107278][ T9612] Unsupported ieee802154 address type: 0
[  174.422724][ T5644] Bluetooth: hci1: unexpected cc 0x100c length: 5 > 3
[  174.490619][ T9631] netlink: 'syz.1.1020': attribute type 18 has an invalid length.
[  174.640245][ T9646] bond2: option min_links: invalid value (18446744073709551614)
[  174.640270][ T9646] bond2: option min_links: allowed values 0 - 2147483647
[  174.672454][ T9646] bond2 (unregistering): Released all slaves
[  174.870159][ T9646] __nla_validate_parse: 5 callbacks suppressed
[  174.870181][ T9646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1024'.
[  174.926267][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'.
[  174.940968][ T9668] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1032'.
[  174.964973][ T9676] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1032'.
[  175.175439][ T5644] Bluetooth: hci3: connection err: -111
[  175.195183][ T9691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1035'.
[  175.606314][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1040'.
[  175.615917][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1040'.
[  175.642833][ T9703] xt_hashlimit: size too large, truncated to 1048576
[  175.954495][ T9717] bond2: Unable to set up delay as MII monitoring is disabled
[  175.976474][ T9717] bond2 (unregistering): Released all slaves
[  176.010159][ T9720] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  176.182482][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1044'.
[  176.202619][ T9730] x_tables: duplicate underflow at hook 3
[  176.203345][ T9727] sch_tbf: burst 0 is lower than device lo mtu (81) !
[  176.381084][ T9724] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1044'.
[  176.381105][ T9724] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1044'.
[  176.537592][ T9741] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.538109][ T9752] netlink: 'syz.4.1052': attribute type 2 has an invalid length.
[  176.538127][ T9752] netlink: 'syz.4.1052': attribute type 8 has an invalid length.
[  176.551777][ T9744] tunl0: left promiscuous mode
[  176.566032][ T9744] gretap0: left promiscuous mode
[  176.760797][ T9744] team_slave_1: left promiscuous mode
[  176.766066][ T9744] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.948775][ T9729] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  177.000632][ T9744] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  177.018791][ T9744] bond3: left promiscuous mode
[  177.018813][ T9744] bond3: left allmulticast mode
[  177.018979][ T9744] batman_adv: batadv0: Interface deactivated: gretap1
[  177.061692][ T9744] bridge3: left promiscuous mode
[  177.061716][ T9744] bridge3: left allmulticast mode
[  177.117035][   T57] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.117082][   T57] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.117118][   T57] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.117152][   T57] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.294991][ T9741] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.457359][ T9741] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.606928][ T9817] Bluetooth: hci0: unsupported parameter 5161
[  177.606950][ T9817] Bluetooth: hci0: unsupported parameter 8192
[  177.606962][ T9817] Bluetooth: hci0: unsupported parameter 5161
[  177.606972][ T9817] Bluetooth: hci0: unsupported parameter 8192
[  178.032184][ T9844] batman_adv: batadv0: Interface deactivated: syz_tun
[  178.122902][ T9844] batman_adv: batadv0: Removing interface: syz_tun
[  178.286931][ T5644] Bluetooth: hci3: command 0x0401 tx timeout
[  178.576786][ T7279] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.577237][ T7279] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.628412][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.636724][ T7279] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.651960][ T9866] nbd4: detected capacity change from 0 to 274877906944
[  178.662095][ T5644] block nbd4: Receive control failed (result -104)
[  178.683060][ T9749] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.715901][ T9872] netlink: 'syz.3.1070': attribute type 4 has an invalid length.
[  178.743815][ T9872] netlink: 'syz.3.1070': attribute type 4 has an invalid length.
[  178.789787][ T9749] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.882710][ T9749] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.019536][ T9749] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.993954][ T9941] __nla_validate_parse: 7 callbacks suppressed
[  179.993981][ T9941] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1090'.
[  180.160184][ T9954] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  180.184826][ T9955] netlink: 'syz.1.1095': attribute type 22 has an invalid length.
[  180.184845][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'.
[  180.255369][ T9959] IPVS: sh: FWM 1 0x00000001 - no destination available
[  180.292875][ T9955] netlink: 'syz.1.1095': attribute type 22 has an invalid length.
[  180.292896][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'.
[  180.553772][ T9966] netlink: 'syz.3.1100': attribute type 21 has an invalid length.
[  180.553795][ T9966] IPv6: NLM_F_CREATE should be specified when creating new route
[  180.584425][ T9965] netlink: 'syz.0.1098': attribute type 62 has an invalid length.
[  180.585915][ T9965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1098'.
[  180.585944][ T9965] bond0: entered promiscuous mode
[  180.585961][ T9965] bond_slave_0: entered promiscuous mode
[  180.586173][ T9965] bond_slave_1: entered promiscuous mode
[  180.586348][ T9965] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[  180.795089][ T9979] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  180.801342][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'.
[  180.801362][ T9985] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.809167][ T9985] batman_adv: batadv0: Removing interface: gretap1
[  181.045918][T10007] vxcan0: tx address claim with dest, not broadcast
[  181.053694][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'.
[  181.053716][T10008] netlink: 'syz.4.1109': attribute type 10 has an invalid length.
[  181.053725][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1109'.
[  181.083189][T10008] geneve2: entered promiscuous mode
[  181.083210][T10008] geneve2: entered allmulticast mode
[  181.956724][  T289] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.967551][  T289] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.967594][  T289] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.967626][  T289] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.924590][T10024] ip_vti0: entered promiscuous mode
[  182.932412][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'.
[  183.606968][ T9968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  183.776110][T10035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1119'.
[  183.794325][T10038] syzkaller1: entered promiscuous mode
[  183.794345][T10038] syzkaller1: entered allmulticast mode
[  183.855706][T10040] bond7: Unable to set peer notification delay as MII monitoring is disabled
[  183.867433][T10040] bond7 (unregistering): Released all slaves
[  184.125618][T10058] netlink: 'syz.2.1121': attribute type 1 has an invalid length.
[  184.202928][T10058] bond2: entered promiscuous mode
[  184.203451][T10058] 8021q: adding VLAN 0 to HW filter on device bond2
[  184.233797][T10056] 8021q: adding VLAN 0 to HW filter on device bond2
[  184.234011][T10056] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  184.234029][T10056] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  184.253772][T10056] bond2: (slave ip6gre1): making interface the new active one
[  184.253794][T10056] ip6gre1: entered promiscuous mode
[  184.263239][T10056] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[  186.761467][T10035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  186.762463][T10045] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1117'.
[  186.925424][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'.
[  187.264057][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'.
[  187.264454][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'.
[  187.298872][T10090] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1129'.
[  187.471151][T10102] tipc: Can't bind to reserved service type 0
[  189.946080][T10071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  190.121533][T10108] netlink: 'syz.1.1134': attribute type 1 has an invalid length.
[  190.121553][T10108] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1134'.
[  190.647929][T10141] netlink: 'syz.2.1140': attribute type 2 has an invalid length.
[  190.677599][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1140'.
[  190.752379][T10146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1141'.
[  191.121224][T10164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1144'.
[  191.366872][T10175] Bluetooth: hci0: unsupported parameter 5135
[  191.366894][T10175] Bluetooth: hci0: unsupported parameter 8192
[  191.366907][T10175] Bluetooth: hci0: unsupported parameter 5135
[  191.366919][T10175] Bluetooth: hci0: unsupported parameter 8192
[  191.682105][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1156'.
[  192.323653][T10232] __nla_validate_parse: 1 callbacks suppressed
[  192.323676][T10232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1167'.
[  192.323760][T10232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1167'.
[  192.385670][T10232] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  192.441804][T10226] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  193.014499][T10248] sctp: [Deprecated]: syz.3.1170 (pid 10248) Use of int in max_burst socket option.
[  193.014499][T10248] Use struct sctp_assoc_value instead
[  193.032520][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1173'.
[  193.032540][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1173'.
[  193.053520][T10250] netlink: 'syz.2.1171': attribute type 12 has an invalid length.
[  193.065212][T10247] pimreg: entered allmulticast mode
[  193.175242][T10258] netlink: 'syz.4.1175': attribute type 6 has an invalid length.
[  193.175263][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'.
[  193.355301][T10268] dvmrp0: entered allmulticast mode
[  193.494997][T10272] syzkaller1: entered promiscuous mode
[  193.495019][T10272] syzkaller1: entered allmulticast mode
[  193.566972][T10277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1181'.
[  193.567006][T10277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1181'.
[  193.588283][T10277] gretap0: entered promiscuous mode
[  193.602307][T10279] netlink: 'syz.2.1179': attribute type 2 has an invalid length.
[  193.607653][T10277] gretap0: left promiscuous mode
[  193.755220][T10246] infiniband syz1: set down
[  193.755330][T10246] infiniband syz1: added syz_tun
[  193.802339][T10246] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  193.802376][T10246] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  193.802517][T10246] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  193.867071][T10246] RDS/IB: syz1: added
[  193.867124][T10246] smc: adding ib device syz1 with port count 1
[  193.867142][T10246] smc:    ib device syz1 port 1 has no pnetid
[  193.924296][T10291] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1186'.
[  194.071170][T10307] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1186'.
[  194.487093][T10323] openvswitch: netlink: EtherType 50a is less than min 600
[  194.497909][T10325] bond0: (slave dummy0): Error: Device can not be enslaved while up
[  194.914787][T10348] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  194.914813][T10348] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  194.967578][T10350] vlan0: entered allmulticast mode
[  195.070125][T10356] IPVS: set_ctl: invalid protocol: 61 172.30.0.5:20002
[  195.410427][T10375] team0: Port device wlan0 removed
[  195.439620][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'.
[  195.465653][T10384] netlink: 'syz.1.1212': attribute type 32 has an invalid length.
[  195.468752][T10386] netlink: 'syz.1.1212': attribute type 32 has an invalid length.
[  195.517034][ T7286] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  195.517078][ T7286] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  195.517110][ T7286] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  195.517142][ T7286] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  195.655208][T10394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  195.914384][T10396] ovs-dp0: entered promiscuous mode
[  196.315061][T10420] ip_tables: iptables: counters copy to user failed while replacing table
[  196.466975][T10430] openvswitch: netlink: IP tunnel dst address not specified
[  196.518570][T10430] bond5: Unable to set up delay as MII monitoring is disabled
[  196.520898][T10430] bond5 (unregistering): Released all slaves
[  196.554464][T10436] openvswitch: netlink: Unknown key attributes 2
[  196.923905][T10453] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  197.026222][T10459] IPv4: Oversized IP packet from 127.202.26.0
[  197.330826][T10470] __nla_validate_parse: 124 callbacks suppressed
[  197.330849][T10470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1239'.
[  197.330896][T10470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1239'.
[  197.336034][T10470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1239'.
[  197.336083][T10470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1239'.
[  197.384375][T10470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1239'.
[  197.384431][T10470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1239'.
[  197.407687][T10470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1239'.
[  197.407744][T10470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1239'.
[  197.411255][T10470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1239'.
[  197.411307][T10470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1239'.
[  197.511283][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805577e000: rx timeout, send abort
[  197.513837][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805577e000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  197.669573][T10493] bridge0: port 1(veth0) entered blocking state
[  197.669741][T10493] bridge0: port 1(veth0) entered disabled state
[  197.669900][T10493] veth0: entered allmulticast mode
[  197.673314][T10493] veth0: entered promiscuous mode
[  197.674030][T10493] bridge0: port 1(veth0) entered blocking state
[  197.674177][T10493] bridge0: port 1(veth0) entered forwarding state
[  197.895961][T10513] syzkaller0: entered promiscuous mode
[  197.895983][T10513] syzkaller0: entered allmulticast mode
[  198.138582][T10529] netlink: 'syz.3.1251': attribute type 29 has an invalid length.
[  198.152264][T10532] netlink: 'syz.3.1251': attribute type 29 has an invalid length.
[  198.620321][T10552] ip6t_rt: unknown flags 36
[  198.624364][T10552] x_tables: duplicate underflow at hook 1
[  199.062596][T10578] tipc: Enabled bearer <ib:veth0_vlan>, priority 9
[  199.302844][T10597] x_tables: duplicate underflow at hook 2
[  199.474000][T10587] netlink: 'syz.1.1263': attribute type 10 has an invalid length.
[  199.476038][T10587] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.476726][T10587] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.663101][T10614] netlink: 'syz.3.1268': attribute type 2 has an invalid length.
[  200.176972][ T5769] tipc: Node number set to 1
[  200.812286][T10673] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  200.830053][T10673] bond6: (slave lo): Enslaving as an active interface with an up link
[  200.832660][T10673] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  200.872034][T10673] netlink: 'syz.4.1283': attribute type 21 has an invalid length.
[  200.920804][T10681] netlink: 'syz.2.1286': attribute type 1 has an invalid length.
[  201.486889][ T5643] Bluetooth: hci1: command 0x0406 tx timeout
[  201.486967][ T5643] Bluetooth: hci2: command 0x0406 tx timeout
[  201.490150][ T5643] Bluetooth: hci3: command 0x0401 tx timeout
[  201.836479][T10726] SET target dimension over the limit!
[  201.838482][T10726] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.000789][ T7286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  202.552885][T10739] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  202.760255][T10746] netlink: 'syz.3.1308': attribute type 1 has an invalid length.
[  202.760277][T10746] __nla_validate_parse: 21 callbacks suppressed
[  202.760290][T10746] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1308'.
[  203.100703][T10752] netlink: 'syz.2.1310': attribute type 83 has an invalid length.
[  203.497607][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'.
[  203.497633][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'.
[  203.592401][T10764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1313'.
[  204.259717][T10757] syzkaller0: entered promiscuous mode
[  204.264834][T10757] syzkaller0: entered allmulticast mode
[  204.607150][ T5644] Bluetooth: hci3: command 0x0401 tx timeout
[  204.852668][T10789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1319'.
[  204.970278][T10793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1320'.
[  205.464975][T10800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.594754][T10818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1325'.
[  207.747893][ T7286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  209.018215][  T623] block nbd4: Possible stuck request ffff888027e65080: control (read@0,4096B). Runtime 30 seconds
[  209.651412][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  211.576817][T10848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1331'.
[  212.023427][T10857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.313271][T10863] netlink: 'syz.3.1336': attribute type 4 has an invalid length.
[  212.728993][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'.
[  212.803607][ T7286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.885212][T10871] tipc: Failed to remove unknown binding: 66,0,0/1:2155316107/2155316108
[  212.896598][T10871] tipc: Failed to remove unknown binding: 66,0,0/1:2155316107/2155316108
[  213.389357][T10887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  213.389755][T10887] IPv4: Oversized IP packet from 127.202.26.0
[  213.391252][T10885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  213.391575][T10885] IPv4: Oversized IP packet from 127.202.26.0
[  213.607462][T10889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1343'.
[  213.626783][T10889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  213.626799][T10889] IPv6: NLM_F_CREATE should be set when creating new route
[  213.628128][T10889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1343'.
[  213.824291][T10891] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1344'.
[  213.914391][T10896] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1345'.
[  213.934631][T10894] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1346'.
[  213.978090][T10896] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.201513][T10900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.240957][T10900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.469634][T10896] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.912127][T10902] ip_vti0: entered promiscuous mode
[  214.967726][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'.
[  215.483712][T10907] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  216.214707][T10934] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1357'.
[  216.285771][T10933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1356'.
[  216.950201][T10941] netlink: 'syz.1.1358': attribute type 21 has an invalid length.
[  217.665427][T10957] netlink: 'syz.4.1363': attribute type 4 has an invalid length.
[  217.747308][T10961] netlink: 'syz.4.1363': attribute type 4 has an invalid length.
[  218.018698][ T7279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.358608][T10957] bond6: (slave lo): Releasing backup interface
[  218.374959][ T4953] Bluetooth: hci4: command 0x0405 tx timeout
[  218.528764][T10957] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  218.602719][T10957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  219.344664][T10993] netlink: 'syz.3.1371': attribute type 39 has an invalid length.
[  219.829041][T11001] __nla_validate_parse: 1 callbacks suppressed
[  219.829061][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1374'.
[  219.925625][T11006] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1375'.
[  220.002450][T11006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1375'.
[  220.131708][ T7287] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  220.411014][T11017] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  220.826299][T11024] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1379'.
[  221.474067][T11050] netlink: 'syz.3.1384': attribute type 1 has an invalid length.
[  221.740403][T11050] bond4: entered promiscuous mode
[  221.755161][T11050] 8021q: adding VLAN 0 to HW filter on device bond4
[  221.901118][T11054] bond4: (slave bridge4): making interface the new active one
[  221.901143][T11054] bridge4: entered promiscuous mode
[  221.915141][T11054] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  222.283606][T11064] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  222.293952][T11064] mac80211_hwsim hwsim10 wlan0: left allmulticast mode
[  222.697000][T11069] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  222.704452][T11070] netlink: Conntrack attr has 8 unknown bytes
[  223.935766][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1396'.
[  223.935789][T11088] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1396'.
[  224.049714][T11085] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  224.144149][T11085] bond6 (unregistering): Released all slaves
[  224.367286][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  224.871777][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1400'.
[  224.987431][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1400'.
[  224.987459][T11106] block nbd5: Unsupported socket: should be TCP or UNIX.
[  225.006755][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  227.023880][T11149] xt_CT: You must specify a L4 protocol and not use inversions on it
[  227.092789][ T4953] Bluetooth: hci4: command 0x0405 tx timeout
[  227.199131][T11152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.214104][T11152] gretap0: entered promiscuous mode
[  227.214300][T11152] gretap0: entered allmulticast mode
[  227.357082][T11152] tipc: Resetting bearer <eth:syzkaller0>
[  227.379134][T11152] netlink: 668 bytes leftover after parsing attributes in process `syz.4.1412'.
[  227.482118][T11150] tipc: Disabling bearer <eth:syzkaller0>
[  227.609466][T11162] sch_tbf: peakrate 4 is lower than or equals to rate 24576 !
[  227.645569][T11162] syzkaller1: entered promiscuous mode
[  227.645768][T11162] syzkaller1: entered allmulticast mode
[  228.739966][T11173] netlink: 'syz.0.1416': attribute type 1 has an invalid length.
[  228.845442][T11173] 8021q: adding VLAN 0 to HW filter on device bond6
[  228.916484][T11175] bond6: (slave geneve2): making interface the new active one
[  228.925217][T11175] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  229.006811][  T697] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.008695][ T7284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.008733][ T7284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.022238][  T697] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.833040][T11185] syzkaller0: entered promiscuous mode
[  229.833224][T11185] syzkaller0: entered allmulticast mode
[  229.860008][T11185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.966589][T11190] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1421'.
[  229.976104][T11185] tipc: Resetting bearer <eth:syzkaller0>
[  229.996478][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1420'.
[  230.167259][T11184] tipc: Resetting bearer <eth:syzkaller0>
[  230.168200][T11188] xt_hashlimit: size too large, truncated to 1048576
[  230.261086][T11184] tipc: Disabling bearer <eth:syzkaller0>
[  230.333571][T11197] xt_ecn: cannot match TCP bits for non-tcp packets
[  231.692739][T11220] netlink: 'syz.4.1428': attribute type 21 has an invalid length.
[  231.825916][T11222] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1429'.
[  231.847044][T11220] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1428'.
[  232.273280][T11225] netlink: 'syz.3.1431': attribute type 12 has an invalid length.
[  232.320333][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1431'.
[  232.490862][T11233] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component
[  232.491676][T11228] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1431'.
[  232.491696][T11228] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1431'.
[  233.326924][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  234.135460][T11261] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1438'.
[  234.751298][T11266] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  235.155817][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'.
[  235.173849][ T4953] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  235.186153][ T4953] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  235.197688][ T4953] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  235.211090][ T4953] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  235.214616][ T4953] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  235.954319][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1447'.
[  236.281633][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1447'.
[  236.338731][T11294] bond5: entered promiscuous mode
[  236.338927][T11294] bond5: entered allmulticast mode
[  237.328311][ T4953] Bluetooth: hci5: command tx timeout
[  237.674280][T11327] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  237.967621][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'.
[  237.972516][T11337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1458'.
[  238.035296][T11337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1458'.
[  238.202007][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'.
[  238.206216][T11272] lo speed is unknown, defaulting to 1000
[  238.215587][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'.
[  238.968803][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1465'.
[  239.091327][  T623] block nbd4: Possible stuck request ffff888027e65080: control (read@0,4096B). Runtime 60 seconds
[  239.416675][ T4953] Bluetooth: hci5: command tx timeout
[  239.610388][T11378] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  239.779074][T11368] 8021q: adding VLAN 0 to HW filter on device bond7
[  240.390983][T11388] geneve3: entered promiscuous mode
[  240.963205][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1473'.
[  241.063815][ T5002] udevd[5002]: worker [9818] /devices/virtual/block/nbd4 is taking a long time
[  241.488071][ T4953] Bluetooth: hci5: command tx timeout
[  242.402939][T11444] xt_hashlimit: size too large, truncated to 1048576
[  242.517304][T11450] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.1480'.
[  242.680048][T11450] 0ªX¹¦Dö»: renamed from gretap0
[  242.701407][T11450] 0ªX¹¦Dö»: entered allmulticast mode
[  242.823446][T11272] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.823846][T11272] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.824140][T11272] bridge_slave_0: entered allmulticast mode
[  242.850840][T11272] bridge_slave_0: entered promiscuous mode
[  242.886566][T11272] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.887537][T11272] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.888013][T11272] bridge_slave_1: entered allmulticast mode
[  242.915510][T11272] bridge_slave_1: entered promiscuous mode
[  243.191362][T11272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.253543][T11272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.481394][T11272] team0: Port device team_slave_0 added
[  243.506345][T11272] team0: Port device team_slave_1 added
[  243.568273][ T4953] Bluetooth: hci5: command tx timeout
[  243.793607][T11272] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.793625][T11272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.793650][T11272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.861161][T11272] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.861178][T11272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.861203][T11272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  244.804564][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1489'.
[  245.529730][T11482] syzkaller0: entered promiscuous mode
[  245.529928][T11482] syzkaller0: entered allmulticast mode
[  245.821117][T11498] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1490'.
[  245.829868][T11500] IPv6: NLM_F_CREATE should be specified when creating new route
[  250.606895][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  254.024267][T11272] hsr_slave_0: entered promiscuous mode
[  254.034673][T11272] hsr_slave_1: entered promiscuous mode
[  254.041266][T11272] debugfs: 'hsr0' already exists in 'hsr'
[  254.041285][T11272] Cannot create hsr debugfs directory
[  254.536167][T11516] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1493'.
[  254.536221][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1493'.
[  254.698180][T11524] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1493'.
[  254.837028][T11527] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  254.874846][T11533] IPVS: lblcr: FWM 3 0x00000003 - no destination available
[  254.875896][T11529] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  255.024367][ T6355] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.024402][ T6355] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.475307][T11544] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1497'.
[  255.585656][T11527] netlink: 'syz.4.1496': attribute type 3 has an invalid length.
[  256.708454][ T6355] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.708490][ T6355] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.753163][T11556] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1501'.
[  256.831046][T11557] netlink: 'syz.0.1500': attribute type 1 has an invalid length.
[  257.434074][ T6355] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.434110][ T6355] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.579468][T11567] ip_tables: iptables: counters copy to user failed while replacing table
[  258.030684][T11563] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  258.030721][T11563] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.478885][T11581] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1507'.
[  258.511073][T11580] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1507'.
[  259.145918][ T6355] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  259.146083][ T6355] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.313595][T11598] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1510'.
[  259.344035][T11587] bridge0: entered allmulticast mode
[  259.565335][T11593] bridge0: port 1(veth0) entered disabled state
[  259.889207][T11588] syzkaller0: entered promiscuous mode
[  259.889396][T11588] syzkaller0: entered allmulticast mode
[  262.217891][T11272] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  262.262049][T11272] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  262.394825][T11272] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  262.442091][T11272] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  262.524214][T11272] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  262.593681][T11272] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  262.595665][T11272] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  262.672619][T11272] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  263.373891][T11696] ipt_ah: unknown flags FF
[  263.672567][ T6355] bridge_slave_1: left allmulticast mode
[  263.672950][ T6355] bridge_slave_1: left promiscuous mode
[  263.684338][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.762082][ T6355] bridge_slave_0: left allmulticast mode
[  263.764566][ T6355] bridge_slave_0: left promiscuous mode
[  263.765480][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.939835][ T6355] dvmrp0: left allmulticast mode
[  263.940466][ T6355] pimreg: left allmulticast mode
[  269.187277][  T623] block nbd4: Possible stuck request ffff888027e65080: control (read@0,4096B). Runtime 90 seconds
[  269.378702][ T6355] bond3 (unregistering): (slave bridge1): Releasing backup interface
[  269.378772][ T6355] bridge1 (unregistering): left promiscuous mode
[  269.595611][ T6355] bond5 (unregistering): (slave bridge3): Releasing active interface
[  269.919476][ T6355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  269.984025][ T6355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.060607][ T6355] bond0 (unregistering): Released all slaves
[  270.150131][ T6355] bond1 (unregistering): Released all slaves
[  270.264689][ T6355] bond2 (unregistering): Released all slaves
[  270.344153][ T6355] bond3 (unregistering): Released all slaves
[  270.467917][ T6355] bond4 (unregistering): Released all slaves
[  270.637809][ T6355] bond5 (unregistering): Released all slaves
[  270.722958][ T6355] bond6 (unregistering): Released all slaves
[  270.817784][ T5297] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  270.947882][T11727] veth1_macvtap: left promiscuous mode
[  270.948077][T11727] macsec0: entered promiscuous mode
[  271.290583][ T6355] ovs-dp0: left promiscuous mode
[  271.618681][T11763] bridge0: Device is already in use.
[  271.675230][ T6355] tipc: Disabling bearer <ib:veth0_vlan>
[  271.736944][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'.
[  271.759856][ T6355] tipc: Left network mode
[  271.942070][T11760] netlink: 1371 bytes leftover after parsing attributes in process `syz.3.1536'.
[  273.756758][T11272] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.070505][T11808] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1546'.
[  274.105972][T11272] 8021q: adding VLAN 0 to HW filter on device team0
[  274.241808][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.241915][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.386463][ T7286] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.386628][ T7286] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.588147][T11817] netlink: 'syz.0.1549': attribute type 2 has an invalid length.
[  275.291434][T11825] netlink: 'syz.3.1552': attribute type 1 has an invalid length.
[  275.411589][T11834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1553'.
[  275.411627][T11834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1553'.
[  275.675612][T11825] bond6: entered promiscuous mode
[  275.683773][T11825] 8021q: adding VLAN 0 to HW filter on device bond6
[  275.764578][T11827] bond6: (slave bridge5): making interface the new active one
[  275.764602][T11827] bridge5: entered promiscuous mode
[  275.781736][T11827] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  275.944307][T11834] erspan0: entered promiscuous mode
[  275.953380][T11834] 0ªî{X¹¦: entered promiscuous mode
[  275.965888][T11834] debugfs: 'hsr1' already exists in 'hsr'
[  275.965911][T11834] Cannot create hsr debugfs directory
[  276.088360][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2
[  276.197987][ T6355] hsr_slave_0: left promiscuous mode
[  276.228793][ T6355] hsr_slave_1: left promiscuous mode
[  276.230997][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  276.231209][ T6355] batman_adv: batadv0: Removing interface: batadv_slave_1
[  276.510399][ T6355] veth1_macvtap: left promiscuous mode
[  276.510986][ T6355] veth0_macvtap: left promiscuous mode
[  276.512084][ T6355] veth1_vlan: left promiscuous mode
[  276.513597][ T6355] veth0_vlan: left promiscuous mode
[  278.652376][T11880] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1560'.
[  281.724115][ T6355] team0 (unregistering): Port device team_slave_1 removed
[  281.864310][ T6355] team0 (unregistering): Port device team_slave_0 removed
[  283.919911][ T1178] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed
[  284.135663][ T9778] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19)
[  284.143128][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1564'.
[  284.225059][T11895] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.563204][T11901] Bluetooth: MGMT ver 1.23
[  284.565971][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'.
[  284.665605][T11905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1566'.
[  285.166894][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  285.962880][ T6355] IPVS: stop unused estimator thread 0...
[  286.267062][T11936] netlink: ct family unspecified
[  286.275227][T11936] netlink: 'syz.4.1572': attribute type 7 has an invalid length.
[  286.982501][T11954] netlink: 'syz.4.1574': attribute type 10 has an invalid length.
[  287.470894][T11272] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.887427][T11965] x_tables: ip6_tables: mh match: only valid for protocol 135
[  287.889563][T11965] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  288.339400][T11979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1579'.
[  288.774214][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'.
[  288.934579][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3
[  289.581529][T11996] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  289.878660][T11999] openvswitch: netlink: EtherType 50a is less than min 600
[  289.939100][T11272] veth0_vlan: entered promiscuous mode
[  290.040165][T12000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1583'.
[  291.093224][T11272] veth1_vlan: entered promiscuous mode
[  291.431650][T11272] veth0_macvtap: entered promiscuous mode
[  291.506717][T11272] veth1_macvtap: entered promiscuous mode
[  293.049306][T12025] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1588'.
[  294.733982][T11272] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.284204][    C1] sched: DL replenish lagged too much
[  297.503181][T12026] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1587'.
[  299.423371][  T623] block nbd4: Possible stuck request ffff888027e65080: control (read@0,4096B). Runtime 120 seconds
[  320.249269][ T5644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  320.696973][ T5644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  320.797582][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  322.053094][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  322.347493][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  326.287920][ T4953] Bluetooth: hci2: command tx timeout
[  326.472741][ T4953] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  326.475534][ T4953] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  326.476663][ T4953] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  326.478671][ T4953] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  326.512235][ T4953] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  328.588998][ T5644] Bluetooth: hci2: command tx timeout
[  330.607086][ T5644] Bluetooth: hci2: command tx timeout
[  330.812808][ T5297] 8021q: adding VLAN 0 to HW filter on device eth4
[  330.934887][ T5644] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  331.111660][ T5644] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  331.124075][  T623] block nbd4: Possible stuck request ffff888027e65080: control (read@0,4096B). Runtime 150 seconds
[  331.247092][ T5644] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  331.424337][ T5644] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  331.497801][ T5644] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  332.027808][ T5648] Bluetooth: hci6: command tx timeout
[  332.712326][ T5648] Bluetooth: hci2: command tx timeout
[  334.276590][ T5644] Bluetooth: hci6: command tx timeout
[  335.197598][ T5644] Bluetooth: hci7: command tx timeout
[  336.286660][ T4953] Bluetooth: hci6: command tx timeout
[  337.247480][ T4953] Bluetooth: hci7: command tx timeout
[  338.401951][ T4953] Bluetooth: hci6: command tx timeout
[  339.377920][ T4953] Bluetooth: hci7: command tx timeout
[  341.594334][ T4953] Bluetooth: hci7: command tx timeout
[  353.013406][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  365.685483][ T5002] udevd[5002]: worker [9818] /devices/virtual/block/nbd4 timeout; kill it
[  372.330956][ T5002] udevd[5002]: seq 13421 '/devices/virtual/block/nbd4' killed
[  450.050632][ T5644] Bluetooth: hci2: command 0x0406 tx timeout
[  454.164018][ T5648] Bluetooth: hci6: command 0x0406 tx timeout
[  460.610289][   T53] Bluetooth: hci7: command 0x0406 tx timeout
[  481.012743][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  531.546008][   T32] INFO: task kworker/0:1H:623 blocked for more than 159 seconds.
[  531.546036][   T32]       Not tainted syzkaller #0
[  531.546047][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  531.546056][   T32] task:kworker/0:1H    state:D stack:25768 pid:623   tgid:623   ppid:2      task_flags:0x4208060 flags:0x00080000
[  531.546126][   T32] Workqueue: kblockd blk_mq_timeout_work
[  531.546163][   T32] Call Trace:
[  531.546170][   T32]  <TASK>
[  531.546185][   T32]  __schedule+0x17dd/0x5830
[  531.546209][   T32]  ? __lock_acquire+0x747/0x2de0
[  531.546263][   T32]  ? __pfx___schedule+0x10/0x10
[  531.546295][   T32]  ? schedule+0x90/0x2b0
[  531.546320][   T32]  schedule+0x164/0x2b0
[  531.546343][   T32]  schedule_timeout+0xc0/0x2c0
[  531.546372][   T32]  ? __pfx_schedule_timeout+0x10/0x10
[  531.566616][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  531.566658][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  531.566680][   T32]  ? wait_for_completion+0x26d/0x5d0
[  531.566703][   T32]  wait_for_completion+0x2c5/0x5d0
[  531.566740][   T32]  ? __pfx_wait_for_completion+0x10/0x10
[  531.566770][   T32]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  531.566795][   T32]  __synchronize_srcu+0x222/0x2f0
[  531.566826][   T32]  ? __pfx___synchronize_srcu+0x10/0x10
[  531.566852][   T32]  ? __pfx_wakeme_after_rcu+0x10/0x10
[  531.566882][   T32]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  531.566901][   T32]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  531.566932][   T32]  ? synchronize_srcu+0x20c/0x270
[  531.566961][   T32]  blk_mq_timeout_work+0x195/0x3e0
[  531.566988][   T32]  ? __pfx_blk_mq_timeout_work+0x10/0x10
[  531.567024][   T32]  ? rcu_is_watching+0x16/0xb0
[  531.567055][   T32]  ? process_scheduled_works+0x97a/0x1630
[  531.567085][   T32]  process_scheduled_works+0xc3d/0x1630
[  531.567150][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  531.567187][   T32]  ? assign_work+0x3cf/0x5d0
[  531.567223][   T32]  worker_thread+0xa47/0xfb0
[  531.567268][   T32]  ? __kthread_parkme+0x71/0x1f0
[  531.567300][   T32]  kthread+0x38b/0x480