last executing test programs:

24.113092767s ago: executing program 4 (id=7503):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a1c000000000a010200000000000000000100ffff08000240000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073017a320000000014000000060a0104000000000000000001"], 0x84}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="436e65745f636c73202d6e65745f7072696f202b6e6574202d706572665f6576656e742046b3109d038ebb63a4a125c1a49606d4a3dd29909ed8bbb6751a3e692a15f6950bc98d715efb7f606ebb2078"], 0x24)
r3 = socket$kcm(0x2, 0x0, 0x73)
ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000000)={0x4, 0x200})
r4 = socket$kcm(0x2, 0x2, 0x73)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x6}, 0x8)
close(r4)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100001042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0900000000000000140075006e657464657673696d3000000000000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x240088c4}, 0x4000054)

23.154973017s ago: executing program 4 (id=7511):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f0000000040)={0x1d, r2}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d80100dbe68963b37a11accf981d8e6f00", @ANYRES16=r5, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x8000}, 0xc005)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000680)=[{{0x4}, {0x4, 0x1, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x10)
close(0x4)
r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f0000000040)={@default, @bcast, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @bcast, @bcast, @default]})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0xf, @broadcast}]}}}]}, 0x3c}, 0x1, 0xff7f}, 0x0)

22.155277129s ago: executing program 4 (id=7516):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) (async)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) (async, rerun: 32)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, 0x5c) (async, rerun: 32)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) (async)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r2}, 0x18) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x36, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0)

21.887940326s ago: executing program 4 (id=7520):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11}, 0xa) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0)

21.580388227s ago: executing program 4 (id=7523):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$inet6_icmp(0xa, 0x2, 0x3a)
ppoll(&(0x7f0000000000)=[{r0, 0x18}], 0x1, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r3, 0x1, 0x70bd2b, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x240048d4}, 0x4000004)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0xf0b, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

18.699953301s ago: executing program 4 (id=7539):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
r2 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
socket$packet(0x11, 0x2, 0x300)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040)
r4 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r4], 0xa4}, 0x1, 0x0, 0x0, 0x48804}, 0x801)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x58}}}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
listen(r1, 0x7)
socket$kcm(0x10, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="340000fa", @ANYRES16=r8, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800090002000000"], 0x34}}, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f00070100000000fcdbdf25047c0000040000000c00018008000f"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)

6.13653467s ago: executing program 1 (id=7555):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7806}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x440b0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x200, 0x70bd2a, 0x25dfdbff, {0x2, 0x18, 0x1, 0xfe, r5}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}]}, 0x20}}, 0x804)
r6 = accept$alg(r3, 0x0, 0x0)
bind(r6, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x3}, 0x80)

5.023051474s ago: executing program 0 (id=7561):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10)
write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)

5.019951786s ago: executing program 1 (id=7563):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f00000003c0)=0x14) (async)
r1 = socket$can_raw(0x1d, 0x3, 0x1) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r2)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="e9050000714f2ea2175860038c760a189007daca9e3906a291c61c88637777971f8fba5fbbcb39c4b425458904047f1c38c55bd8d0f9ff4f1c630103c2879a485b832f88e067326f60bf1818348e262f234f60d4f428b7984cc9e32eb5cee417bbeaa70000000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fcdbdf2521000000050020000900000009001f007068793000000000"], 0x28}, 0x1, 0x0, 0x0, 0x240488b0}, 0x40000) (async)
setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000080)=0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r4=>0x0})
listen(r0, 0x7) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_buf(r6, 0x29, 0x2d, &(0x7f00000001c0), &(0x7f0000000200)) (async)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8845) (async)
sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r4}, 0x10, &(0x7f00000003c0)={&(0x7f0000000140)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x75, 0x0, 0x0, 0x0, "fa77068e9ba7f60291c0c2883b46271c1679c3c0cf5101a328bb3fbd261e7eba5594caf70eec1c694f644e13312db4bda5b524b6e151c1deaf3e9edb7a56adcb"}, 0x48}, 0x2, 0x0, 0x0, 0x20008004}, 0x10048808)

4.882845649s ago: executing program 0 (id=7564):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000180)=0x6, 0x4)
socket$unix(0x1, 0x1, 0x0)
sendmsg$sock(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="b5ad5e67eb17aa583b7c51b2d2608af9da5f47fb179fe7c3174368ad55074b41fcc27a93e71ef2ec772167910ef9d5dea7110fc8bac01284d8870cefe3dd44e2fa27d9e864bcca77abbf53c41c30b5a2d51bed383e84707f0e8c309bef22eb929f12f733866ec38b079aa0d7149c328fef870d1711b87138c67565dbbab1bad81d6504d2", 0x84}, {&(0x7f0000000040)="9bfc3b", 0x3}, {&(0x7f0000000300)="63b01a51c224d7b6fb52d778ad70212a1f83115ca200018fa7a18309b3048ea74f676eae601e9706a4e75a2f8bf99c354e44a299956f9ff0819c0a60dca2b398eb5f44a9b24f9afb3bcb027851028fa8cf4e16503898d2c0162742c05d8650e63bd6ddc007e3bf8eccb1a9d4a891bcab2bf0", 0x72}], 0x3, &(0x7f0000000380)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x3d}}, @timestamping={{0x14, 0x1, 0x25, 0xf31}}, @mark={{0x14, 0x1, 0x24, 0xe5c}}], 0x60}, 0x100c0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'wg0\x00', 0x800})
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3a6168654", 0x6}, {&(0x7f0000000a80)='\x00\x00\x00egS!\x00', 0x8}], 0x2)

4.853128991s ago: executing program 2 (id=7565):
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x240040c0)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'batadv_slave_0\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x5, 0x7, 0x9, 0x2, 0x2, 0x8, 0x3, 0x4}}) (async)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000010101020000000000000000020000092000018006000340000400001400018008000100ac14141508000200ac1414a824001980080002001800000008000200800a000008000200010400000800010008040000"], 0x58}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000200001000000000000001a08000200ac1e0001000000000000009eeaac5bdcd55f7c0000000000007bf4fb91b7089b0600decd1582f9e3b8d884f6c685e850cd803b6740b039026b9f91939de80d260ee58874f6dacffdf26e42ff8b85b17344d8e93d1bbc3c6eefdde8846572cd63a22aa6b36a36859777d93e8811f1b985291df7d771606456887f843c14006eff15e33e1955822da56f3b"], 0x24}}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x16c, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x158, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xb}, {0xc, 0x4}}}, @m_xt={0x58, 0x17, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x90b}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x1f, 0x6, "f62f5842d5a9b8e8524ed558e3b65cc1fc86a749027b865caa0a1c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0xa4, 0x1c, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, {0x6a, 0x6, "2b45b9197ecf7bcbd6d5d0b89e829e9d769f0a6fcdf2f493491fd74e2215c1ff57261a537b40d82cf2a7e591517e2575dfd2d9175e10cab5f40f0e8cd5d063c0ec791f379873f196923734be8ec74e54b7c9aee8b3ba3986a11dc9d804cd96293f161fe9ffc4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x16c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0)

4.781180165s ago: executing program 1 (id=7566):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122d000000fbff9500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x7, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0xfffe, 0x4, 0x2, 0xd06, 0x6, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x6, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0xb4}}, 0x24000851)
close(0x3)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
r13 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r13, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
shutdown(r13, 0x1)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f00000003c0)=0x90)
sendmsg$NFT_BATCH(r12, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000231000010000000000000000000a00000a20000000020a010300000000000000000200000a09000100737993300000000014000000110001002d26677cc71e0100000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000840000000a20000000000a03000000000000000000010000000900010073790000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000400900010073797a30000000000800054000000002580000009cd501020000000000000000010000000900020073797a320000000018000380140000801000018004000280060001800000000009000100737900010000000000000000000000000a"], 0xc8}}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@remote, @in6=@local}}, {{@in=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f00000000c0)=0xe8)

4.687264772s ago: executing program 0 (id=7567):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000282e3648b8fcd3a89fc93e35d909000000280000000400000002000000000000110300000000000000000000000000000d0011000002000000000000080200000000006100460d4d6e2306b1e187c796563a004ac038ef27ac0269128e21"], 0x0, 0x44}, 0x28)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600), 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000200)=ANY=[@ANYBLOB="4b000000007baaaaaaaaaabb0800450f001400650000018990780a015b18f64f9cd5393736524201010a010100"], 0x0)
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100002500010300000000c00e000001"], 0x114}], 0x1}, 0x40000)
recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0xffff776b}, {{0x0, 0x0, 0x0, 0x4b}, 0x606}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000200)}, 0x6}], 0x4, 0x20, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="288a0efd6dc4f915260f30", 0xb)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0)
r6 = accept$alg(r4, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000080)=0x7, 0x4)
getsockopt$inet6_buf(r7, 0x29, 0x6, 0x0, &(0x7f0000000240))
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="5bdbd57a0e656889", 0x8}], 0x1, &(0x7f00000006c0)=[@op={0x18}], 0x18, 0x2}], 0x1, 0x485c)
recvmmsg(r6, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000540)=""/100, 0x64}], 0x1}, 0x400}], 0x1, 0x2103, 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000005c74c3aba0effe35bb00000000000061091000ffe300fd00a78f2ca1180f004302022c128a41554c30a0061c2553d0fe3ef7ab2956d4ce43363603e71347f7bc5a4dac15a0aa0fb213cdbc115b76e4883cecbfec7a9ab24a2284ab4b6c21b5ef8348b77707167e4ff22cedd28b3bb44e92076525ac1d7f29455c6af89126e80e2227c7308f431606614e8227d74190cc40af03a711ff0366c3989e1c69b323ee05de91f5d776c9897c9acc94561aad5c25ba2115ecc59801fc98d74d4feea4177c9576daa4a5ff8a4eb965587d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

4.538704226s ago: executing program 2 (id=7568):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@typed={0x4, 0x7, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@typed={0x4, 0x7, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r2)
sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)={0x2c, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x14)

4.414574931s ago: executing program 2 (id=7569):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000004300190c1000000000000000020000000c00010069705f76746930008ab712b6d7171730a56276d7cfdb151521cd0fac5a679574fde692bb4529d1fd13a3a77bf0568bed5244486a121db94948551083094ab7660b826d24daafa62ab47201656ce40a1ef4188ab5e7b4cfb9591499fe43d9ff9d6c4593268cd4f47a6d2ca2120d36be8ba3118c399e3d"], 0x20}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x18, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000004300190c1000000000000000020000000c00010069705f76746930008ab712b6d7171730a56276d7cfdb151521cd0fac5a679574fde692bb4529d1fd13a3a77bf0568bed5244486a121db94948551083094ab7660b826d24daafa62ab47201656ce40a1ef4188ab5e7b4cfb9591499fe43d9ff9d6c4593268cd4f47a6d2ca2120d36be8ba3118c399e3d"], 0x20}}, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x18, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async)

4.344683658s ago: executing program 2 (id=7570):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_GET(r0, 0x0, 0x20004080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r7, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000002700)=""/4086, 0xff6}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000005740)=""/4088, 0xff8}, {&(0x7f0000000340)=""/51, 0x33}, {&(0x7f0000000600)=""/21, 0x15}, {&(0x7f0000004700)=""/4092, 0xffc}, {&(0x7f0000000540)=""/163, 0xa3}, {&(0x7f0000001940)=""/195, 0xc3}, {&(0x7f0000000440)=""/176, 0xb0}], 0x9}, 0x40002142)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x4, 0x4, 0x1, 0x1}], 0x10, 0x26}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x101}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x74e229780a8e95be}, 0x4000000)

3.98174106s ago: executing program 2 (id=7573):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0xc0400)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x29, 0x5, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async)
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

3.654736478s ago: executing program 2 (id=7574):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8040)
setsockopt$sock_attach_bpf(r1, 0x110, 0x7, 0x0, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ppoll(&(0x7f0000000080)=[{r3, 0x409c}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@delqdisc={0x238, 0x25, 0x4, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xb, 0xfff1}, {0xffe0, 0x4}, {0x4, 0xffe4}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xc017}}, @TCA_RATE={0x6}, @TCA_STAB={0x120, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x5, 0x2, 0x7, 0x2, 0x101, 0x0, 0x2}}, {0x8, 0x2, [0xfff9, 0x5]}}, {{0x1c, 0x1, {0x6, 0xda, 0x101, 0x40, 0x1, 0x45d, 0xffffff11, 0xa}}, {0x18, 0x2, [0x401, 0x1, 0xb3d, 0x4, 0x5, 0x9, 0x5, 0x6, 0x2, 0x3]}}, {{0x1c, 0x1, {0x8, 0x80, 0x7, 0x5, 0x2, 0x4, 0x2, 0x3}}, {0xa, 0x2, [0x0, 0x2, 0x7]}}, {{0x1c, 0x1, {0x40, 0x3, 0x4, 0x5, 0x1, 0x6, 0x0, 0x4}}, {0xc, 0x2, [0xff, 0x0, 0xb, 0x400]}}, {{0x1c, 0x1, {0xb, 0x5, 0xaac, 0x0, 0x1, 0x0, 0x8, 0x4}}, {0xc, 0x2, [0x8, 0x583, 0xe0d, 0x3]}}, {{0x1c, 0x1, {0xff, 0x3, 0x7e1b, 0x1, 0x0, 0x6, 0x9, 0x4}}, {0xc, 0x2, [0x80, 0x6, 0xffea, 0x8]}}, {{0x1c, 0x1, {0x84, 0xe, 0x8, 0xe, 0x2, 0x7f, 0x3, 0x1}}, {0x6, 0x2, [0x64]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xc8}, @TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3c, 0x2, 0x1bc, 0x4, 0x2, 0x4, 0x9, 0x2}}, {0x8, 0x2, [0xba0, 0x1cc7]}}, {{0x1c, 0x1, {0xe, 0xec, 0x1ff, 0x6ab5, 0x1, 0x100, 0xcbc, 0x2}}, {0x8, 0x2, [0xd0ea, 0x8001]}}, {{0x1c, 0x1, {0x64, 0x0, 0x8, 0x371, 0x2, 0x3, 0xffffffff, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x2, 0xd, 0x1, 0x3, 0x2, 0x9, 0x1, 0x7}}, {0x12, 0x2, [0x1, 0x9, 0x401, 0x1ff, 0x9, 0xbce3, 0x0]}}, {{0x1c, 0x1, {0x5, 0x33, 0x96f, 0x6, 0x2, 0x80000001, 0x800}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x238}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0xf0bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}}, 0x0)

3.348481032s ago: executing program 32 (id=7539):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
r2 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
socket$packet(0x11, 0x2, 0x300)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040)
r4 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r4], 0xa4}, 0x1, 0x0, 0x0, 0x48804}, 0x801)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x58}}}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
listen(r1, 0x7)
socket$kcm(0x10, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="340000fa", @ANYRES16=r8, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800090002000000"], 0x34}}, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f00070100000000fcdbdf25047c0000040000000c00018008000f"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)

3.298159389s ago: executing program 0 (id=7576):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) (async, rerun: 64)
r6 = socket$netlink(0x10, 0x3, 0x9) (rerun: 64)
bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x14)
bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc)
r9 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r10 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) (async)
r11 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc)
r12 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc)
bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x4) (rerun: 64)

2.853752039s ago: executing program 3 (id=7578):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xec99, 0x81, 0x7, 0x48e0, 0x1ff, 0x80000001}, {0x0, 0x80000001, 0x0, 0x3, 0x1, 0x3}], ['\x00', '\x00']})

2.627051933s ago: executing program 0 (id=7579):
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = socket$inet(0xa, 0x801, 0x84)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r5 = accept4(r1, 0x0, 0x0, 0x80000)
getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x7fffffff}, &(0x7f0000000340)=0x8)
write$cgroup_int(r0, &(0x7f0000000140), 0xfffffdef)
write$cgroup_subtree(r0, 0x0, 0x12)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x1000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60b3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4000000)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x20, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790)

2.507974809s ago: executing program 3 (id=7580):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa0833}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31}]}}}]}, 0x3c}}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000000000007111ba00000000008500000002000000850000007600000095000000000000009500a505000000009cc83af6d6de61804d8104aa83bac7c46f406a83cdbda081fb9965d6fe297ce93af85621a3fd3536fe0bd47c163d20d7aaea2cfee53a693d98695a47cb64b55247cdf30a3db4"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)

2.028338372s ago: executing program 1 (id=7581):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
close(0xffffffffffffffff)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000440)={{r0}, 0x6, &(0x7f0000000300)=[0x6, 0x0, 0x1, 0x2, 0x7fff, 0x0], 0x100000000, 0x3})
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000340), &(0x7f0000000380)=0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000000000ceffffff00000a480000000c0a010100004e857b400000000000000a0000050900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100000000000800034000000001140000001100010000004adb6f0b02d4c6a9000a"], 0x70}, 0x1, 0x0, 0x0, 0x24040050}, 0x40)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
writev(r2, &(0x7f00000005c0)=[{&(0x7f00000004c0)="cce40763aa3f7155fd65c7721e086fff7fff8d4c411095ac4937737e666973b4be23ef915aaf82525dc18c402bd31fd822dffefecac1e0d8ee7673b3e870fd397e1cfff0399895ee4ac20d61c251b9a11da8b4cdf6dc3ca8b1aa774106128f497b8774db0be0f31ba66bebb5612e33c32ae7a602a2fb413c35101463637bafce3837b79655ce726cf9b41fa66767e05396887a6948f7814b57e48c0c016cad1a4a7a33030b2b886ab5ef68d12787ddd08d0273c45e3250e318e7ae4d354c7e4eb61b5c29451a582dc7fd4219cd9bb8743f8bdbf29ef91b9ff1def458f8e9", 0xde}], 0x1)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r4)
sendmsg$alg(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000880)="9991ebcf25a3893cb367ba89edca2652", 0x10}], 0x1, &(0x7f0000000d40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8890}, 0x1)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r6, 0x4, 0x6, 0x9, 0x3665, 0x68, @private0, @remote, 0x20, 0x41, 0x8c, 0x6}})
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.487883336s ago: executing program 0 (id=7582):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="b701040000000000001f4c0fb717e0dba1d6628b1b23cfa1c2201ab0d57ec0c80deda7495a4d1b3e51ca87051526b85d3ed77bf048664ffb16a3df09342d97dfe21d33b3cb60f0d66967b71480", @ANYRES16=r1, @ANYRES32=r1], 0xb8}, 0x1, 0x0, 0x0, 0x8001}, 0x8800)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0266ed48b400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bind$tipc(r5, 0x0, 0x0)
recvmmsg$unix(r5, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0))
getsockname$packet(r0, &(0x7f00000007c0), &(0x7f0000000800)=0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcb7, 0x10, 0x0, 0x1c}, 0x94)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00!', 0x2}, {&(0x7f0000000140)="abffa99a7d6ed2dcacc958fd3a5c773e03b4a54890c6ba34d4a318f17925141e844a5882851431385aa863defbc0d479f945bbd8eb945276a091970bbeccd52a559731b33c20fd6eb7d6adb5ba81c0eccf6ee0dfd3f702812d39c7853360046b50ad6a4436d4247a5e920c58f140a138faa35246b17306e25f6e34b456ccefe6c20a544cb784ec517071b8f1563bb232c4019084d9003f1a2832609a0e8eb141c1ded373dd38c0e827721ecab5570c9b"}, {&(0x7f0000000240)="43e51f1bce2ede7abb6a4b66c403f7e047ecee20f0c2fcb0e9a0fa457ecafec104711845155c12d3083c2643fa79d4831d46244b8543a725fd5366f46c47f28a49d9cd9504e8fcb98c7295b91fddb7740713db6271cd2cabd133fcda03c5c0f034350170b69e304f501b3d0b0adab4ab55293a945272119c6ce79f8290df879fff628d42f94b5057e51e8a86a1879350d393acc57a51418944c4ebd0bc038ee67565694f4a4a655c4c280a6c171c3d9f3526cd4edb361a"}, {&(0x7f0000000300)="f2671cb24621eed7e7a51d5659a146245add4a2f90cb80f9129d9a161de443485cc5ee75345f3572a222faec0745c7d800937747222bbd7f4dc9514a4799640f8255dc6a4743dab90efdb54b411a188a4e021ae5b392d4de7029e547a196c8990184ef06499677b80d5e21e063b3e263e1b2d2df8b2200a968be53e544fc"}], 0x1000000000000215, 0x5, 0x0)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r7, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}], 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
accept(r9, &(0x7f00000003c0)=@can, &(0x7f0000000640)=0x80)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
accept4$unix(r10, 0x0, 0x0, 0x0)
r11 = openat$cgroup_ro(r8, &(0x7f0000000440)='blkio.bfq.sectors\x00', 0x275a, 0x0)
pread64(r11, 0x0, 0x0, 0xcd32)
socket$inet6_sctp(0xa, 0x1, 0x84)

1.487306047s ago: executing program 3 (id=7583):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x50, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
close(r0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
close(r1) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
connect$can_bcm(r2, &(0x7f0000000000), 0x10) (async)
sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x50, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async)

1.157826944s ago: executing program 3 (id=7584):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1000}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x719}]}]}, 0x60}}, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'nr0\x00'})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1e0, r2, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x76}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbd5f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e4a83ad}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x43, 0x3, "0fd5f002df44b56aba7d2d926f09bac30b1db9874f3e926c16d339992c2d59f630e4505981b5c643c26f61e8959468f6ee88219d1df0d5ce2d57b6a24fc195"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "eca267702a43bf826eee8b6c6c63b9fc3b5d827a3071553eec438406"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x83, 0x3, "68fc4ed94f5045ad1cc6de660e576e93202ac6e556ecfcec39538c6dcba683757dbda88bce8642f8db2bd0f891a094aac5d49105f1f9180551b32638f4116712723e685b243a814c47a246139e9dccb25c4cb911be27f0d529f37475d777d86fbd5deb6bf40bb7352f44d5784911ca3fff40003def20eac219753cca76cb78"}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8044}, 0x40)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x214, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffbc7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xca58}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x28ae}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x88}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd5c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xee17}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x28}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x10}, 0x24000000)
r3 = socket$unix(0x1, 0x5, 0x0)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x90, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x12}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x76c}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4008000)
r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @loopback}, &(0x7f0000000980)=0x10, 0x80800)
connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e20, @broadcast}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f00000018c0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001880)={&(0x7f0000000ac0)={0xd94, r7, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xc, 0x3b}}}}, [@NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x80}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x228, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x184, 0xe, 0x0, 0x1, [{0x39, 0x0, "f10b0d6afe1a7172d8fbf921fd4cca9a871d72991f6b29736cdda9c129ece7fd9331c00e59181fb22cc2b093a037b23086afa42863"}, {0x40, 0x0, "0aea9580e90689e27c22d4edaba609870f9b5c9d90ce4bb6306fd2b63fdf4366dbfca84e3965ba19ee6c8336d65c0d512bb57e70a75f069a21121725"}, {0x7e, 0x0, "3605f644bf8070a92e1cefdeecdb52ba5cb2b2a7895abbffd1bfc44972316c788bce970e2dbca7f28a39a3bf9b8e79a8c646c7bac3556cca0309226fc7b29f851cd6dc08c22ac368c38c6ed7da83ace20fcdf60a2a6680d0c23d430f6d8b5d9bf010c9dce8dbe60f1c5a8b225c87d283bc38e10388ec76e02d12"}, {0x84, 0x0, "dad15cc0fb07180c473c9e7215ba46361048831454f90f518abedcbabc425ba449413b02c97e426a707dd7deb1ce34df176f5d519fe3d5dfd76a35750d22310720976ab6a2e8aba601ca28236ff8925827640351f0e65952bccfe3c2333fcdd7d2cab35fb8552db03ec61a1efb282617bcee9470d749d31f4e603df5328a0bca"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x101}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x85, 0xb, "7fe29abdb73db59248f57ae1bf0d4e34de3538bbb0504478026d8ad26757c8f0b109008386d4c48ebe1386bc3dc5cc9b778f2455390971d3de555268002e65062ee702c9fa3ef72fdb1f051f4938a5f5a6655499669f105ffb46477e0c65a936fb3c0583ac98e7cc039a4cc4a494b2946a0ca2eb55d33125df8c6534d0a620666d"}]}, @NL80211_ATTR_NAN_FUNC={0x308, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x304, 0xe, 0x0, 0x1, [{0xdf, 0x0, "256d23006cd9ec8d6da085ca5b76bb452d6daa33d4fe489cd0f42b455dfda6a9eeb05e8f3b096c24163aa215d4fa6aa0a73065d8a6f6c6c67410b487e1f267bdbbe954350b3ac6f9cf177ef93f739f4a5e3244916706d0d8e6db7b6e6b7a932ea8785ca75e4dbc5d42b7c76cc089599647c5f822e8017bbbc9250e2074c00d8de7eb02278869a95814db466193abaa5091c38d14219c14b7589e7edebd87783feb8d9e4dbe5a2b3905446bedc5aea8ce54ea8a28a74f9e8b3effb5925ec5fb971c1d44f30a3abc26adf09fb835da04f008fdef68d7d1cc2435371f"}, {0xc, 0x0, "450969d289b5ad4a"}, {0x5d, 0x0, "0616c8aeb7225c1cac28072bb03ae80a4fcef85d14f741f083aa49080b0426315d173819697c908cc975dc9d377c6ea64185d79fb89007bba78104d5b2f8b431d4ded3bb7c742a67bce43d81d736a92ee142a73e1946201fdc"}, {0x69, 0x0, "ad96327d259976a69690b0840835d2e0fc3caae41d223de313c6471d3f36377a5f444a51fe641e857ed9666e53c8f95ab017678a24bf6a34f0b54029e0bf1b16f47ac67ddd70aa1e41f4603b740b74939c8e44ea716bb0beb53a3858034bc976c8b2ddd6d8"}, {0x5c, 0x0, "88fcac4e417e45a23391a3fd64404f99788344b059ea9324c8d8f9ed9e9c268dc7f2fadb40389533169a113e3cdb25a192821d69ae3a8c178a5590d136ba72d30c3c820f811eb6161643db94492eb18071e53278fe8f903a"}, {0x68, 0x0, "43df43ba7ee84138e7232c50a650de0f10e2e4253015edfd32c3b5254eeb81d6b4cc0c3f541aeca1b69200f678728650e781cc5311b76ea6b6c20e63b2e9c8a4871ee758181b08455342f50c0ea393bc7613707c3df2a9ba9d3b72f7ef118bcd71b8110e"}, {0x81, 0x0, "d75ceaf340afc3aec187458b848e6a0f2faa810732552543dae77c069df173a2f7e7e18338c6c4df2a7cbb590b8c8a6ed30f2d8f49a3af4226bb0a113edec738e143460b7e50d8891f7715e63f6415ad3fcefcc9d869f587285115344d6abe795e543155c0e5efc62590372007d522a1cc40dd672cd5cb50fdc1b54adb"}]}]}, @NL80211_ATTR_NAN_FUNC={0x71c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x40}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xb}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4b8, 0xd, 0x0, 0x1, [{0x5b, 0x0, "4d1a00e02cd8e0f11dfe3041af4ecd78e8b4b049654d0c8aeab1ee2e94f4eba93d81b98947798f310f9816bf2629a8ad042ef55a3d68a98ec012dd5b10fec0e577a192a221270d6c859f0d45280c104c02dce659da2925"}, {0xd2, 0x0, "8fca1bd42c5f9313b89f2b16afab3abeafbd24ed167d6b820c5cc4143d10ed29454c9b4562b7ee8b4f265621392a64071caf6d5b70da00c38ede6d86aa7df34bb18686c3086dd94a477658277c2b95446f9dd5566286e568af38bec5c4a6582089439ee63c687af6f36980b3f424d10fc66a0431ba86ccac2b7b69be2f102b4ed3dd94818b3619b896a432b03fd5e9684522de9add01c9ab938345c01117f662e2fc066e0c4e8464ad7d1cc2b5b72e2ff70bb6c9e4150dfabc6c1175243499427feb2af2197b36cdb3138799a174"}, {0xb2, 0x0, "5d7c4abe3b99c898454826dcf25470585a2e761327d33cf739c93362d9b974429f2832207ae3590e3098d6465e23381df231270cfb46d85ce9de69cbe350667ee7e06bb3ad005a56be16a624ad4400a5a5ba698f23f1b3128723a0c3d6f1e9d3b92cbbd00a94957a98164639079ad92580ccec18f36c497ba9f9a16c05d67ef73ed41750c77ea9f33084671fd5f4324c97dea8116af71a47ed7046ad8b75ae8678ceb86e18e7660c789ad5a80ad5"}, {0x7a, 0x0, "dfd738b5ea3cce5d9f74f2821fba3c964858965edd13f385e068b81dacfd11f2e7080fa930858e0de1ceccd7832ebf2182d1ce6cf77a17e70dee15e7d1dc591b3514d0de0ddeb6019bc5184b3c27b4cfc5118a9ba07fac313e489d704f27297b8f000214377caa070b74b873e32e5b4e73385902cee5"}, {0xf7, 0x0, "5ccb90ba29124c53c34a2c2fc917f5acf1b005a6e27172485362469acd985fd83b0fbb699af5fa278f8c66562d654ad7edada9d4afc4cd8b9b42d39900fcd3d4b1cf4a5bbe5df232a1010038248b6214aa25285db246f31c9272c026f170fccff253249e682b0967aac0a3dbbe25ce93181f62144a2b1dc6bb2e85fe5d6ff3d710f3e930bc43be3f3e8845a2feddc5b943e6ba09ae3a6eb6a53c94bac2a951fb7846282716e08fcfef85593f88ca50058e740f83f65a9640ce6ff42be72d6a126abec0963a17763b4e1fec9fe8f6d35919198c6225c76190399d3deee1506ea3adccc75ecd875bb6bc4be0559699836b7b0b2c"}, {0x87, 0x0, "48d44993a06aee71bee1ef7de0b221b575c5849cbe2e35daaa25afa5c823cfb965386f60c90c96e1d7e4ca80ddb02485d0ec03baa14c982a86998c0627d68ec3c0d5d48c321fb9bb3047db1fe7d7980982d50b07fbd9b6471651f87d7b39404b41d299d67e82af9a329d574f69ae8ccb787c5129f2d5c1624dd9348f51162b64bd68d7"}, {0xd3, 0x0, "38bed9cca46d1cd1d8435126c13460dcaaca20a401c7d753b9d79f8cdc06789edec4b3a722a1a7b8324e363626c77fd0f2b71a3f78dd5e39c21f09c05e5ebe82512552b7946152b188bbdf3ad972a21899e38c780552ffdd47c6bac148f3cc5ea448c60342fdff177b766b9a8e5642f1c267095ea6261eba93cf3f6535fe51a117781c1e0ffb37ccb3cd6356746f36c6f5eca110ffb2808eadf0dc6ba9ad431dac877ecbdbddf4aec743ee71fb8f24e11efe989a46ee3ac026509834f8e9ea087aadc2079527d9a2fb3c7fdc98a7d8"}]}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_SRF={0x23c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x10}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "cb3179b76b597d3496fd0f6aa5120ffe91c5aff1246706749f59017a60287a7b8d1fb3d82bd9dc1f62a472a118423e3a4aee908e46c7d94dc01b568b147ae036b57c1c67fd6985e44c58a6a79a96e60170d1affb354ffd2a947b80de0aff84005132357b710aa9f47e2c27151093164b15041945bf17ac8bd4f8057417e46ae6f4894657f5c3b04473522a08fc9c70b82d49ae6e26ee08560568de9074cb57c4c11be2d3bd27f71b83102d892d28523595685bd8b82fdaaba6fd3c2ca29253e9a4b79fc026045bf539b744038c405c39c64a6cdb2d1f1d6bde30c4e5b067865ef0da9a448f7c4c0d84af9fdb365c4383973cc8adcf7d9852ffb68d27b1390d"}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa}]}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xbc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x73}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x98, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x82}]}, @NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "38d27b588c9f"}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x3}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x6}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}]}, 0xd94}, 0x1, 0x0, 0x0, 0x1}, 0x8011)
ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000001a00)={<r9=>r3, &(0x7f0000001900)='\x00', 0x222003, &(0x7f0000001940)={@_ha_fsid={[0xa39, 0xffe0000]}, {0x9, 0x2, 0x4b, 0x81}}, 0xc53a, &(0x7f0000001980)={@_ha_fsid}, &(0x7f00000019c0)=0xfffffeff})
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001c40)={r9, 0x0, 0xc9, 0x0, &(0x7f0000001a40)="d225406f84073836dffcf4fdf9cc3e03d7e29cd421fac54ced45d30ea1653aca7e45b76006b031ee9a7efa5c46236c4744575995b30ef95e28fb8ce981736d6a0cd412f4d0af57ff70822d0270702b7142163bcd2347e3994359278b1e0ec1c79c2a6a08f7c99649fc5930c6ad6a7d630a7bbcdb44e11292ef14180f6d8a5e483c2c313f2cdaa751bc33e50bd1d31faa3a7ce5d443398a6a88069b716ab90ae4b12ddee9bde3461a2da1e1f090b9f0a359c05a78ffb95a058181cdc816fdb3b7080b10eb27213d8e81", 0x0, 0x7, 0x0, 0xfd, 0x0, &(0x7f0000001b40)="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", 0x0, 0x2, 0x0, 0x7d}, 0x50)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001d00), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x4c, r10, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2005}, 0x10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r11, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x24, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x20004080)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002040)={r9, &(0x7f0000001f40)="d218f7035d85770eae3d9ae8c9a03c91178f410dd0761a5632076c3a75414bcbdf7eeaf94923647a5adb64dea5ab0d5d36858a38104f8c0123cc71b0978a7e7ba9da8af51bfcc63d3da9f0713112561cb6d96a5bc9ca007f5b47c84c9cd3d9d95b54dd3fde30de7ab2b92d1624cbe7647d28476ae78a0329a44ff8f84d727da1fc81", &(0x7f0000002000)=""/49, 0x4}, 0x20)
socket$inet6(0xa, 0xa, 0x2)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000002380)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002340)={&(0x7f00000020c0)={0x268, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfd1c}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a6d}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1800000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x57}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x10, @loopback, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa4c3}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9f6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcd3}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x50, 0x140d, 0x100, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004090}, 0x8000)
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f00000026c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002680)={&(0x7f0000002540)={0x128, 0x1403, 0x200, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x16007800}, 0xc, &(0x7f0000002880)={&(0x7f0000002740)={0x118, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x65e}, @TIPC_NLA_NODE_ID={0x3f, 0x3, "fc8651e373be70ffd8b100ad28dc52823341577566125e0169d14211976df06b608bec6d5cab49d891906987f36095ccb23a90b38ad8b1a611af18"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcbe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2d}]}]}, 0x118}}, 0x20008000)

889.100863ms ago: executing program 1 (id=7585):
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f00000002c0)="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", 0xfc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0xa, 0x1f}]}, 0x34}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}, 0x0, 0x1}, 0x90)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r5, 0xb, 0x9, 0x10a, 0xa1, 0xcea}, &(0x7f0000000040)=0x14)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0xa, 0x0, {0x0, 0x1000000}}]}}, &(0x7f00000006c0)=""/184, 0x32, 0xb8, 0x1}, 0x20)

246.168586ms ago: executing program 1 (id=7586):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newtfilter={0x4c, 0x2c, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff2}, {0xf, 0xe}, {0xf, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0xfffff503}, @TCA_RATE={0x6, 0x5, {0xfe, 0x7f}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0xd, 0x7}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f539af21094aaaaaaaaaabb86dd601200b000483a0000000000000000000000000000000000ff02000000000000000000000000000104039078000000006000000000002c00fc010000000000000000000000000000200100000000000000000000000000012f01000000000000070822ebffff00fc00000000000000003830cd"], 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [{0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4041080)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000005000d0a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b09000200"], 0x64}, 0x1, 0x0, 0x0, 0x4008870}, 0x24000010)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x30, r10, 0xa9c22000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0037006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$netlink(0x10, 0x3, 0x0)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000004010500ac1414bb000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb00000000000000000000000000000000010300000000000000000000000000002001000000000000000000000000000100000000ff00000002bbae00fe8800000000000000000000000000010000000004"], 0x1bc}}, 0x0)
setsockopt$inet_int(r11, 0x0, 0x13, &(0x7f0000d10ffc), 0x4)

228.357993ms ago: executing program 3 (id=7587):
r0 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x130, 0x2, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x252}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3a}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20008000}, 0x40080c1) (async)
sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2020)

0s ago: executing program 3 (id=7588):
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB="2902000000000000c910fc0100000000000000000000000000000000000000005657bcf961205894c1d75fc6747eeafaa280d863dce4244544bcd9997d5fa0a99c2519744ef94a5e8c4803e89351382f383e20b73b2c10901ef7f2e6e87968d54d079652d2c3"], 0x20)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540020000253c0011800a0001006c696d69740000002c0002800c0002400000000000000003080003400000002008000440000000010c000140ffffffffffffffff140000001000010000000000000000000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x810}, 0xc4)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r2, &(0x7f0000000500)="f3f8d712db266f5d", 0x8, 0x40, &(0x7f0000000540)={0xa, 0x4e20, 0x9, @loopback, 0x7fffffff}, 0x1c) (async)
r3 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800)
writev(r3, &(0x7f00000017c0)=[{&(0x7f0000000200)="6b44dcda5347d4539209e4b1b68689108e1f65fc86fbfeeacaddc72c0942c39a73ddbc9a451509dbf9e22f2ea67e86efdf08db7b2871614c1ab5c98701286b23566ce6a5a977c36c7e592f83c024b450ffb8ac31cb65393298a91e", 0x5b}, {&(0x7f0000000400)="4187aa02f5c0115f1c63d55775536e8abaea9f68d3036196ac24c1a70939fb7624cf9004255488bd31c268077280d672c0bdba2d1a263a6b7415eb33482a4e48737569a8a35d9f3842ddae74586ff0cbf265b394ab550308c5127e6b9ab0a3e1ddbb758d05f4b2c101b986108cfd676d450b5963b0cbf75ebe66e197785e1a83c33b6b30987757f764be87586cde917d98cda2a03185e85ce0867b1c37959c65c31d34ee4353e0c9db6d100a80aceb92790584645b453b44dad5f53d1b11c73f49b6351854fe56cd6301441d85028efba086dc85103deae554e6b323680f", 0xde}, {&(0x7f0000001880)="650d9f6f6ea90e93d5da3a9334b142168b3ce48d017ccdedb673cbcf82f82ce49122daa3ef8d4b2d6616c64d00cf31baa04c32d2c3cbadea87a58dc57c519632ea87dbb8188ed27907c29408fb455a0a2611db656b81565d370ea0b2d9b6665eeb6beb25f08146911c04113e48e45966eb67a451a4cb23d0cd71b3c39a5aaf7d54acf1664c54e5e119cef29d122993feff299240c4936b3664c70586d6bf242adae270623f25b8005bc82ad554733f7c4c50b7de88cdafb45e1fa7b001a068dd5e42218b2b27693444625f407cd9583f5c9b948eedef06e34fbb0a55de39349562", 0xe1}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="569de007a3e12039f566326c709af92562b22d05da8c6f12a17916d5a90bd1e7a97218ac1339570003ad32aed7d05f61295856f61a034616c7c6e97d11f20c1b3b998068b6e5d951addb537aad583a459d0ab409bc3a60bb75e9e1ca4e24e2af110aa241cb6de90250f693a42dc49f3a1c9ec80e6fe084733fe98bb0d541d53d477f7d2871e8b10ae430c625cfcf3a80e7addee6ec0d427994a4b3583572358cbee234433ab47480362907a75af0d01c1d09e10dbe1db37a64a1b8598eb49301449aed59c883e142573c262b4f090ff09726ecfbfd444d7d528459607aba86aae545891e81fccc", 0xe7}, {&(0x7f0000000600)="9bcf24fbdb054b17a1a28ed51f5033a43c6f9bdcba5aad17fe151ed3732f9d6653cd554e75bc2153aa8196ea4b4d80bb17f0a8ae04b95f2d695b08511ac40bc842cf780ad559a22486c33f46c806eee93ee995689c32b1f14285de90ecccb0be0601e372cc53eebf117fc824c86bd99e", 0x70}], 0x6) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000050000000008000100ac1e0101080002006401010108000300", @ANYRES32=r4], 0x34}}, 0x0) (async)
r6 = gettid()
syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/cgroup\x00') (async)
sendmsg$nl_generic(r4, &(0x7f0000001840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000022c0)={0x12d8, 0x35, 0x8, 0x70bd27, 0x25dfdbfc, {0x3}, [@generic="2ba4ec1fbffeb7a928176f2236666cb75d07387a0595e4737611c0cfe07a886dfc3ac4c764c1e1ea2e02829f79e514067f5232c0f26a39ccaeb5a106841ee0a6a757fb1f7782757acf346373e9cea4d53be1be6295280559ed2ce43a6491ddd9d730025ff84de73c7589b8d00ca7e6c632f768f79cc6a5bd17a5090356048a6e81bdbc98b843f9e64dda3a2bfdbf2f00171a2aa07b71b0af6423d8d454b852", @nested={0x108c, 0xb9, 0x0, 0x1, [@generic="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", @typed={0x8, 0x87, 0x0, 0x0, @pid=r6}, @generic="d3b4cdb9d735362ed755cccfa63931cf3212d8c89cd51e3e8801965de7f8c26980e53d6f15bb268f6b842ef0a108be74efc9e9ef8829622e581dd0204ae0d34dc8802bfee1238c2d23906d86d76f5ae27061bcdf9c82b4f829f07086977ed447078d862fa546e694cfae6794a724d4db1d9bce2edac5755f563c71fe5b0ca91d"]}, @nested={0x99, 0xfb, 0x0, 0x1, [@generic="f47c055695934f900303139dd89d00c8dfe90d9bb1c7c4458f8fb4044b000382dc7398b7c00a155dfeabcb1d455ea37a6df80f109d5d3de1930a17c7372d24689e9001cab7aa0fb7b332eb507dc03ee28aea2cf3964dd0f3b5cfd6e8aa44506de31e57ce7c5e8642c65cd08c213a0c8e78bd7ee406f18ecdf05f0b0bb46c5e2669631a7eef28f26c8bdd8162c8", @typed={0x8, 0x62, 0x0, 0x0, @ipv4=@loopback}]}, @generic="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"]}, 0x12d8}, 0x1, 0x0, 0x0, 0x4080}, 0x4040011) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000018c0)={'team0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="02000000835c0000300012800b000100697036677265000020000280050008000300000014000700fc00000000000000000000000000000308000a00", @ANYRES32=r8], 0x58}}, 0x48010) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x2}) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r11) (async)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x89b0, &(0x7f0000000080)={'bridge0\x00', 0x2000}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

kernel console output (not intermixed with test programs):

s `syz.4.6223'.
[  822.611969][T28440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  822.811930][T28440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  822.836076][T28440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  823.056485][T28440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  823.075011][T28440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  823.111172][T28641] netlink: 'syz.2.6232': attribute type 1 has an invalid length.
[  823.156222][T28641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6232'.
[  823.266765][T28440] bond0: (slave netdevsim0): Releasing backup interface
[  823.312763][T28440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  823.347675][T28440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  823.747628][T28440] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  823.798838][T28440] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  823.808916][T28666] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  823.831823][T28666] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  823.859597][T28440] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  823.876093][ T5836] Bluetooth: hci0: command tx timeout
[  823.882849][T28440] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  824.248140][T28440] 8021q: adding VLAN 0 to HW filter on device bond0
[  824.358788][T28440] 8021q: adding VLAN 0 to HW filter on device team0
[  824.404527][T18901] bridge0: port 1(bridge_slave_0) entered blocking state
[  824.411789][T18901] bridge0: port 1(bridge_slave_0) entered forwarding state
[  824.510083][T18901] bridge0: port 2(bridge_slave_1) entered blocking state
[  824.517431][T18901] bridge0: port 2(bridge_slave_1) entered forwarding state
[  824.547402][T28706] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  824.629259][T28440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  824.763448][T28719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6248'.
[  824.778535][T28721] xt_hashlimit: size too large, truncated to 1048576
[  824.793431][T28719] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6248'.
[  824.862846][T28719] netlink: 'syz.3.6248': attribute type 39 has an invalid length.
[  824.863048][T28725] –: renamed from vxcan1 (while UP)
[  825.053508][T28730] netlink: 'syz.2.6251': attribute type 10 has an invalid length.
[  825.107518][T28732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6252'.
[  825.410805][T28750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6255'.
[  825.424989][T28749] syzkaller0: entered promiscuous mode
[  825.430534][T28749] syzkaller0: entered allmulticast mode
[  825.463608][T28753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6257'.
[  825.507633][T28440] 8021q: adding VLAN 0 to HW filter on device batadv0
[  825.710972][T28440] veth0_vlan: entered promiscuous mode
[  825.728956][T28764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6260'.
[  825.768065][T28440] veth1_vlan: entered promiscuous mode
[  825.806585][T28769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6261'.
[  825.858094][T28773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6262'.
[  825.871480][T28440] veth0_macvtap: entered promiscuous mode
[  825.902403][T28440] veth1_macvtap: entered promiscuous mode
[  825.957021][ T5836] Bluetooth: hci0: command tx timeout
[  825.980849][T28440] batman_adv: batadv0: Interface activated: batadv_slave_0
[  826.037846][T28440] batman_adv: batadv0: Interface activated: batadv_slave_1
[  826.053705][T18903] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  826.066883][T18903] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  826.101150][T18903] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  826.129730][T18903] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  826.166606][T28778] gre0: entered promiscuous mode
[  826.171629][T28778] gre0: entered allmulticast mode
[  826.252656][T28781] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6266'.
[  826.359672][T28781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6266'.
[  826.391354][T18903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  826.407906][T18903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  826.477767][T28793] netlink: 'syz.3.6268': attribute type 1 has an invalid length.
[  826.550250][T18903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  826.569415][T18903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  827.197550][T28817] syzkaller0: entered promiscuous mode
[  827.203190][T28817] syzkaller0: entered allmulticast mode
[  827.391606][T28790] netlink: 'syz.2.6269': attribute type 3 has an invalid length.
[  827.446465][T25768] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  827.457825][T25768] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  827.467492][T25768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  827.480672][T25768] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  827.505183][T25768] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  828.620652][ T6736] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  828.633403][ T6736] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  828.693934][T28888] 8021q: adding VLAN 0 to HW filter on device bond8
[  828.722922][T28829] chnl_net:caif_netlink_parms(): no params data found
[  828.771185][T28891] bond8: (slave geneve4): Enslaving as an active interface with an up link
[  828.888993][ T6736] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  828.920764][ T6736] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  828.973264][T18905] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20003 - 0
[  828.984580][T18905] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0
[  829.152747][T18905] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0
[  829.164399][T18905] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0
[  829.227555][ T6736] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  829.246017][ T6736] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  829.465702][ T6736] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  829.486629][ T6736] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  829.507972][T28932] netlink: 'syz.1.6298': attribute type 1 has an invalid length.
[  829.558559][ T5836] Bluetooth: hci3: command tx timeout
[  829.652791][T28944] SET target dimension over the limit!
[  829.674222][T28932] 8021q: adding VLAN 0 to HW filter on device bond3
[  829.742774][T28829] bridge0: port 1(bridge_slave_0) entered blocking state
[  829.761226][T28829] bridge0: port 1(bridge_slave_0) entered disabled state
[  829.770916][T28829] bridge_slave_0: entered allmulticast mode
[  829.780390][T28829] bridge_slave_0: entered promiscuous mode
[  829.796357][T28829] bridge0: port 2(bridge_slave_1) entered blocking state
[  829.837435][T28829] bridge0: port 2(bridge_slave_1) entered disabled state
[  829.847038][T28956] __nla_validate_parse: 15 callbacks suppressed
[  829.847061][T28956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6301'.
[  829.892388][T28829] bridge_slave_1: entered allmulticast mode
[  829.917859][T28829] bridge_slave_1: entered promiscuous mode
[  829.938916][T28955] tc_dump_action: action bad kind
[  830.063462][T28960] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  830.130906][T28829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  830.221499][T28829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  830.398762][T28975] mac80211_hwsim hwsim79 wlan0: entered promiscuous mode
[  830.599162][T28829] team0: Port device team_slave_0 added
[  830.610120][T28829] team0: Port device team_slave_1 added
[  830.748271][T28988] bridge1: entered promiscuous mode
[  830.767036][T28988] bridge1: entered allmulticast mode
[  830.803689][ T6736] veth7: left allmulticast mode
[  830.813430][ T6736] veth7: left promiscuous mode
[  830.819963][ T6736] bridge1: port 1(veth7) entered disabled state
[  831.341862][ T6736] bond8 (unregistering): (slave ip6gretap2): Releasing active interface
[  831.393928][ T6736] bond11 (unregistering): (slave ip6gre1): Releasing backup interface
[  831.574293][T29037] netlink: 'syz.2.6319': attribute type 29 has an invalid length.
[  831.590948][T29037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6319'.
[  831.634231][ T6736] dvmrp0 (unregistering): left allmulticast mode
[  831.640834][ T5836] Bluetooth: hci3: command 0x041b tx timeout
[  831.768939][ T6736] bond7 (unregistering): (slave bridge3): Releasing active interface
[  831.777288][ T6736] bridge3 (unregistering): left promiscuous mode
[  831.783823][ T6736] bridge3 (unregistering): left allmulticast mode
[  831.880701][ T6736] bond13 (unregistering): (slave bridge0): Releasing backup interface
[  832.033535][ T6736] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  832.046668][ T6736] bond_slave_0: left promiscuous mode
[  832.059333][ T6736] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  832.068924][ T6736] bond_slave_1: left promiscuous mode
[  832.078445][ T6736] .` (unregistering): Released all slaves
[  832.097911][ T6736] bond1 (unregistering): (slave lo): Releasing backup interface
[  832.106401][ T6736] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  832.120700][ T6736] bond1 (unregistering): Released all slaves
[  832.139761][ T6736] bond2 (unregistering): Released all slaves
[  832.155704][ T6736] bond3 (unregistering): Released all slaves
[  832.173016][ T6736] bond4 (unregistering): Released all slaves
[  832.193272][ T6736] bond5 (unregistering): (slave veth5): Releasing active interface
[  832.207491][ T6736] bond5 (unregistering): Released all slaves
[  832.222399][ T6736] bond6 (unregistering): Released all slaves
[  832.243073][ T6736] bond7 (unregistering): Released all slaves
[  832.258038][ T6736] bond8 (unregistering): Released all slaves
[  832.284192][ T6736] bond9 (unregistering): (slave vcan0): Releasing backup interface
[  832.293341][ T6736] vcan0: left promiscuous mode
[  832.303983][ T6736] bond9 (unregistering): Released all slaves
[  832.321691][ T6736] bond0 (unregistering): Released all slaves
[  832.344125][ T6736] bond10 (unregistering): Released all slaves
[  832.382885][ T6736] bond11 (unregistering): Released all slaves
[  832.399433][ T6736] bond12 (unregistering): Released all slaves
[  832.417371][ T6736] bond13 (unregistering): Released all slaves
[  832.441498][ T6736] bond14 (unregistering): Released all slaves
[  832.461213][T28829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  832.469002][T28829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  832.498254][T28829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  832.525267][T28829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  832.532899][T28829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  832.559994][T28829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  832.694472][ T6736] : left promiscuous mode
[  832.727407][T29042] team0: Device ip6gre1 is of different type
[  832.785357][T28829] hsr_slave_0: entered promiscuous mode
[  832.792490][T28829] hsr_slave_1: entered promiscuous mode
[  832.799442][T28829] debugfs: 'hsr0' already exists in 'hsr'
[  832.818980][T28829] Cannot create hsr debugfs directory
[  832.832809][ T6736] tipc: Disabling bearer <udp:syz2>
[  832.844122][ T6736] tipc: Left network mode
[  832.879014][T29044] 8021q: VLANs not supported on gre0
[  833.557919][ T6736] hsr_slave_0: left promiscuous mode
[  833.564061][ T6736] hsr_slave_1: left promiscuous mode
[  833.570381][ T6736] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  833.578818][ T6736] batman_adv: batadv0: Removing interface: batadv_slave_0
[  833.591530][ T6736] veth1_macvtap: left promiscuous mode
[  833.597630][ T6736] veth1_vlan: left promiscuous mode
[  833.603022][ T6736] veth0_vlan: left promiscuous mode
[  833.715284][ T5836] Bluetooth: hci3: command 0x041b tx timeout
[  834.116921][ T6736] IPVS: stop unused estimator thread 0...
[  834.449399][T29029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  834.496734][T28829] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  834.557023][T28829] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  834.628962][T28829] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  834.695639][T28829] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  834.721132][T29066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6326'.
[  834.743224][T29066] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6326'.
[  835.049363][T29090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6333'.
[  835.099348][T28829] 8021q: adding VLAN 0 to HW filter on device bond0
[  835.115484][T29090] openvswitch: netlink: Missing key (keys=40, expected=80)
[  835.127958][T29086] syzkaller0: entered promiscuous mode
[  835.130127][T29094] netlink: 'syz.0.6334': attribute type 14 has an invalid length.
[  835.133491][T29086] syzkaller0: entered allmulticast mode
[  835.190135][T29094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6334'.
[  835.236379][T29086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6332'.
[  835.263476][T29094] netlink: 'syz.0.6334': attribute type 14 has an invalid length.
[  835.295023][T29094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6334'.
[  835.304232][T18910] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  835.370240][T18910] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  835.456395][T28829] 8021q: adding VLAN 0 to HW filter on device team0
[  835.489962][T18910] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  835.527415][T29115] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  835.544868][T18910] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  835.565480][T29108] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  835.621222][T29108] bond9: (slave lo): Enslaving as an active interface with an up link
[  835.665237][T29108] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  835.791843][T18910] bridge0: port 1(bridge_slave_0) entered blocking state
[  835.799131][T18910] bridge0: port 1(bridge_slave_0) entered forwarding state
[  835.816476][ T5836] Bluetooth: hci3: command 0x041b tx timeout
[  835.877740][T18910] bridge0: port 2(bridge_slave_1) entered blocking state
[  835.884994][T18910] bridge0: port 2(bridge_slave_1) entered forwarding state
[  835.916337][T29127] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6340'.
[  835.971133][T29129] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6341'.
[  835.981501][T29126] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6340'.
[  836.156776][T29134] netlink: 'syz.4.6342': attribute type 2 has an invalid length.
[  836.184730][T29134] netlink: 'syz.4.6342': attribute type 2 has an invalid length.
[  836.235533][T29136] wlan0 speed is unknown, defaulting to 1000
[  836.267230][T29136] wlan0 speed is unknown, defaulting to 1000
[  836.307291][T29136] wlan0 speed is unknown, defaulting to 1000
[  836.380196][T29136] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  836.478999][T29136] wlan0 speed is unknown, defaulting to 1000
[  836.510688][T29136] wlan0 speed is unknown, defaulting to 1000
[  836.557026][T29136] wlan0 speed is unknown, defaulting to 1000
[  836.595647][T29136] wlan0 speed is unknown, defaulting to 1000
[  836.608980][T29136] wlan0 speed is unknown, defaulting to 1000
[  836.636807][T29136] wlan0 speed is unknown, defaulting to 1000
[  836.662232][T29136] wlan0 speed is unknown, defaulting to 1000
[  836.672505][T29153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6345'.
[  836.691680][T29136] wlan0 speed is unknown, defaulting to 1000
[  836.716659][T29153] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6345'.
[  836.767972][T29136] wlan0 speed is unknown, defaulting to 1000
[  836.778365][T29160] C: renamed from lo (while UP)
[  836.788333][T29160] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  836.865065][T29158] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  836.983745][T28829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  837.168836][T28829] veth0_vlan: entered promiscuous mode
[  837.240096][T28829] veth1_vlan: entered promiscuous mode
[  837.262051][T29176] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  837.271047][T29179] netlink: 'syz.2.6352': attribute type 1 has an invalid length.
[  837.309349][T29175] wlan0 speed is unknown, defaulting to 1000
[  837.321009][T29182] xt_hashlimit: size too large, truncated to 1048576
[  837.407780][T28829] veth0_macvtap: entered promiscuous mode
[  837.553875][T28829] veth1_macvtap: entered promiscuous mode
[  837.873518][T28829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  837.881424][ T5836] Bluetooth: hci3: command 0x041b tx timeout
[  837.897649][T28829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  837.920412][T18909] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  837.942605][T18909] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  837.986178][T18909] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  838.013764][T29209] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6360'.
[  838.046847][T18909] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  838.171651][T18903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  838.209497][T18903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  838.319943][T18903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  838.339461][T18903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  838.359299][T29220] batman_adv: batadv0: Removing interface: batadv_slave_0
[  838.376948][T29220] batman_adv: batadv0: Removing interface: batadv_slave_1
[  838.396484][T29220] batman_adv: batadv0: Removing interface: netdevsim0
[  838.676919][T29236] hsr_slave_0: left promiscuous mode
[  838.699348][T29236] hsr_slave_1: left promiscuous mode
[  838.961563][T25768] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  838.970498][T25768] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  838.983510][T25768] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  839.022935][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  839.037197][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  839.231865][T29249] wlan0 speed is unknown, defaulting to 1000
[  841.086863][ T5836] Bluetooth: hci4: command tx timeout
[  841.451481][T29275] __nla_validate_parse: 2 callbacks suppressed
[  841.451502][T29275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6378'.
[  841.758473][T29280] netlink: 'syz.0.6379': attribute type 1 has an invalid length.
[  841.788187][T29282] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6380'.
[  841.852104][T29280] bond1: entered promiscuous mode
[  841.858163][T29280] 8021q: adding VLAN 0 to HW filter on device bond1
[  841.867201][T29282] 0·: renamed from hsr_slave_1 (while UP)
[  841.877149][T29282] 0·: entered allmulticast mode
[  841.886085][T29282] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  841.935343][T29284] bond1: (slave bridge1): making interface the new active one
[  841.945836][T29284] bridge1: entered promiscuous mode
[  841.953023][T29284] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  841.987656][T18903] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  841.999952][T18903] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0
[  842.059352][T29280] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  842.083223][T29280] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  842.201221][T18903] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.222589][T18903] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0
[  842.310665][T29304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6383'.
[  842.456501][T18903] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.490540][T18903] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0
[  842.697299][T29322] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6388'.
[  842.709379][T18903] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.721784][T18903] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0
[  842.832984][T29327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6390'.
[  843.000889][T18903] bridge_slave_1: left allmulticast mode
[  843.023016][T18903] bridge_slave_1: left promiscuous mode
[  843.047775][T18903] bridge0: port 2(bridge_slave_1) entered disabled state
[  843.062434][T18903] bridge_slave_0: left promiscuous mode
[  843.068537][T18903] bridge0: port 1(bridge_slave_0) entered disabled state
[  843.158869][ T5836] Bluetooth: hci4: command tx timeout
[  843.323852][T18903] tipc: Disabling bearer <eth:xfrm0>
[  843.420912][T29350] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  843.443641][T18903] bond8 (unregistering): (slave geneve4): Releasing backup interface
[  843.920266][T18903] bond1 (unregistering): Released all slaves
[  843.936039][T18903] bond2 (unregistering): Released all slaves
[  843.951455][T18903] bond0 (unregistering): Released all slaves
[  843.976703][T18903] bond3 (unregistering): Released all slaves
[  843.997121][T18903] bond4 (unregistering): Released all slaves
[  844.013533][T18903] bond5 (unregistering): Released all slaves
[  844.031716][T18903] bond6 (unregistering): Released all slaves
[  844.050598][T18903] bond7 (unregistering): Released all slaves
[  844.072330][T18903] bond8 (unregistering): Released all slaves
[  844.089292][T18903] bond9 (unregistering): (slave lo): Releasing backup interface
[  844.103463][T18903] bond9 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  844.120443][T18903] bond9 (unregistering): Released all slaves
[  844.301113][T29249] chnl_net:caif_netlink_parms(): no params data found
[  844.325530][T29364] netlink: 'syz.1.6398': attribute type 6 has an invalid length.
[  844.344330][T18903] : left promiscuous mode
[  844.884229][T29390] blkio.reset_stats is deprecated
[  844.969808][T18903] tipc: Left network mode
[  845.168748][T29400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6402'.
[  845.238486][ T5836] Bluetooth: hci4: command tx timeout
[  845.451251][T29412] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.6406'.
[  845.463055][T29412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6406'.
[  845.488313][T29404] macvlan1: entered promiscuous mode
[  845.497881][T29249] bridge0: port 1(bridge_slave_0) entered blocking state
[  845.506472][T29249] bridge0: port 1(bridge_slave_0) entered disabled state
[  845.518868][T29249] bridge_slave_0: entered allmulticast mode
[  845.541222][T29249] bridge_slave_0: entered promiscuous mode
[  845.563549][T29249] bridge0: port 2(bridge_slave_1) entered blocking state
[  845.580768][T29249] bridge0: port 2(bridge_slave_1) entered disabled state
[  845.595853][T29249] bridge_slave_1: entered allmulticast mode
[  845.619223][T29249] bridge_slave_1: entered promiscuous mode
[  845.831712][T29249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  845.867278][T29249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  846.068969][T29440] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6410'.
[  846.145283][T29249] team0: Port device team_slave_0 added
[  846.180347][T29249] team0: Port device team_slave_1 added
[  846.357099][T29461] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6417'.
[  846.439768][T29249] batman_adv: batadv0: Adding interface: batadv_slave_0
[  846.461022][T29249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  846.532003][T29249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  846.551945][T29457] netlink: 'syz.4.6415': attribute type 15 has an invalid length.
[  846.606838][T18903] hsr_slave_0: left promiscuous mode
[  846.617793][T18903] hsr_slave_1: left promiscuous mode
[  847.259176][T18903] pim6reg (unregistering): left allmulticast mode
[  847.319388][ T5836] Bluetooth: hci4: command tx timeout
[  847.431166][T18903] team0 (unregistering): Port device team_slave_1 removed
[  847.448444][T18903] team0 (unregistering): Port device team_slave_0 removed
[  847.577349][T29249] batman_adv: batadv0: Adding interface: batadv_slave_1
[  847.585022][T29249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  847.613933][T29249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  847.776765][T29249] hsr_slave_0: entered promiscuous mode
[  847.795661][T29249] hsr_slave_1: entered promiscuous mode
[  847.936974][T29509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6424'.
[  848.243643][T29525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6429'.
[  848.496495][T18903] IPVS: stop unused estimator thread 0...
[  848.738921][T29556] netlink: 'syz.3.6433': attribute type 12 has an invalid length.
[  848.874164][T29556] bond1: option primary_reselect: invalid value (255)
[  848.892084][T29556] bond1 (unregistering): Released all slaves
[  848.967897][T29557] syzkaller1: entered promiscuous mode
[  848.983670][T29557] syzkaller1: entered allmulticast mode
[  849.058032][T29574] delete_channel: no stack
[  849.068594][T29564] bond1: (slave syz_tun): Device is not bonding slave
[  849.077140][T29564] bond1: option active_slave: invalid value (syz_tun)
[  849.089843][T29564] bond1 (unregistering): Released all slaves
[  849.127780][T29550] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6433'.
[  849.187727][T29542] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6433'.
[  849.478709][T29249] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  849.496929][T29249] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  849.511779][T29249] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  849.529200][T29249] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  849.666425][T29249] 8021q: adding VLAN 0 to HW filter on device bond0
[  849.691089][T29249] 8021q: adding VLAN 0 to HW filter on device team0
[  849.707314][T18909] bridge0: port 1(bridge_slave_0) entered blocking state
[  849.714563][T18909] bridge0: port 1(bridge_slave_0) entered forwarding state
[  849.758921][T18909] bridge0: port 2(bridge_slave_1) entered blocking state
[  849.766139][T18909] bridge0: port 2(bridge_slave_1) entered forwarding state
[  850.052332][T29249] 8021q: adding VLAN 0 to HW filter on device batadv0
[  850.132812][T29249] veth0_vlan: entered promiscuous mode
[  850.149074][T29249] veth1_vlan: entered promiscuous mode
[  850.207432][T29249] veth0_macvtap: entered promiscuous mode
[  850.223741][T29249] veth1_macvtap: entered promiscuous mode
[  850.249323][T29249] batman_adv: batadv0: Interface activated: batadv_slave_0
[  850.266939][T29249] batman_adv: batadv0: Interface activated: batadv_slave_1
[  850.283401][ T6736] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  850.299692][ T6736] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  850.311913][ T6736] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  850.331515][ T6736] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  850.434277][T18909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  850.451136][T18909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  850.502559][ T6736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  850.512182][ T6736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  850.603205][T29616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6367'.
[  850.613758][T29616] tipc: Invalid UDP bearer configuration
[  850.613808][T29616] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  857.663820][T12946] lec:lec_start_xmit: lec0:No lecd attached
[  863.074707][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5410 ms
[  863.082737][    C1] lec:lec_tx_timeout: lec0
[  870.038441][T29654] netlink: 'syz.1.6443': attribute type 6 has an invalid length.
[  870.051470][T29658] syzkaller0: entered promiscuous mode
[  870.057209][T29658] syzkaller0: entered allmulticast mode
[  870.078760][T29665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6442'.
[  870.233036][T29669] batadv1: entered allmulticast mode
[  870.371192][ T1298] lec:lec_start_xmit: lec0:No lecd attached
[  870.381547][T29675] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6449'.
[  870.395080][T29675] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6449'.
[  870.486091][T29685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6451'.
[  870.511973][T29685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6451'.
[  870.530539][T29685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6451'.
[  870.662635][T29691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6453'.
[  871.020527][T29705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6457'.
[  871.080888][T29705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6457'.
[  871.185060][T29714] netlink: 'syz.2.6459': attribute type 5 has an invalid length.
[  871.225049][T29714] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  871.461830][T29723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6463'.
[  871.553367][T29723] syzkaller0: entered promiscuous mode
[  871.559527][T29723] syzkaller0: entered allmulticast mode
[  871.574184][T29726] netlink: 'syz.2.6464': attribute type 1 has an invalid length.
[  873.563474][T29741] team0: Port device team_slave_0 removed
[  873.695481][T29745] macvlan2: entered promiscuous mode
[  873.700870][T29745] macvlan2: entered allmulticast mode
[  873.737650][T29751] bond0: entered promiscuous mode
[  873.746408][T29751] bond_slave_0: entered promiscuous mode
[  873.752342][T29751] bond_slave_1: entered promiscuous mode
[  873.763101][T29753] SET target dimension over the limit!
[  873.775524][T29751] bridge0: entered promiscuous mode
[  873.786471][T29751] gretap0: entered promiscuous mode
[  873.793617][T29751] debugfs: 'hsr0' already exists in 'hsr'
[  873.827253][T29751] Cannot create hsr debugfs directory
[  873.833075][T29751] hsr0: entered promiscuous mode
[  873.869004][T29755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  874.027140][T29769] sctp: [Deprecated]: syz.1.6475 (pid 29769) Use of int in max_burst socket option.
[  874.027140][T29769] Use struct sctp_assoc_value instead
[  874.170807][T29774] 0: reclassify loop, rule prio 0, protocol 700
[  874.491430][T29787] bond1: Invalid ad_actor_system MAC address.
[  874.498551][T29787] bond1: option ad_actor_system: invalid value (1)
[  874.525533][T29787] bond1 (unregistering): Released all slaves
[  874.675046][T29811] Cannot find set identified by id 3 to match
[  875.111908][T29829] netlink: 'syz.1.6490': attribute type 5 has an invalid length.
[  875.334135][T29855] __nla_validate_parse: 9 callbacks suppressed
[  875.334160][T29855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6498'.
[  875.394299][T29857] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  875.430628][T29859] netlink: 348 bytes leftover after parsing attributes in process `syz.2.6500'.
[  875.443730][T29860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6497'.
[  875.539538][T29867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  875.767132][T29883] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6507'.
[  876.117320][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  876.125427][    C1] lec:lec_tx_timeout: lec0
[  876.618408][T29932] bond1: entered promiscuous mode
[  876.634740][T29939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6523'.
[  876.693949][T29939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6523'.
[  876.723412][T29944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6528'.
[  876.812786][T29946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6529'.
[  876.831089][T29945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6528'.
[  876.847100][T29946] netlink: 'syz.3.6529': attribute type 10 has an invalid length.
[  876.871648][T29946] gtp0: entered promiscuous mode
[  876.877032][T29946] gtp0: entered allmulticast mode
[  876.926973][ T6736] bond0: (slave syz_tun): link status definitely down, disabling slave
[  877.004859][T29954] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  877.083489][T29964] ipt_ECN: cannot use operation on non-tcp rule
[  877.147727][T29964] 8021q: VLANs not supported on lo
[  877.659686][T30012] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6550'.
[  878.146782][T30041] IPv6: sit1: Disabled Multicast RS
[  878.168213][T30041] sit1: entered allmulticast mode
[  878.307618][T30053] netlink: 'syz.2.6562': attribute type 1 has an invalid length.
[  878.598794][T30065] netlink: 'syz.4.6566': attribute type 1 has an invalid length.
[  878.615137][T30065] netlink: 'syz.4.6566': attribute type 7 has an invalid length.
[  878.653539][T30065] netlink: 'syz.4.6566': attribute type 8 has an invalid length.
[  879.230703][T30088] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  879.238571][T30088] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  879.272482][T30090] netlink: 'syz.4.6577': attribute type 16 has an invalid length.
[  879.284246][T30088] tun0: tun_chr_ioctl cmd 1074025675
[  879.285324][T30091] netlink: 'syz.4.6577': attribute type 16 has an invalid length.
[  879.291769][T30088] tun0: persist disabled
[  879.329971][T30090] netlink: 'syz.4.6577': attribute type 17 has an invalid length.
[  879.345696][T30091] netlink: 'syz.4.6577': attribute type 17 has an invalid length.
[  879.450534][T30090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  879.489437][T30091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  879.611617][T30100] syzkaller0: entered allmulticast mode
[  879.676936][T26763] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  879.698873][T26763] CPU: 1 UID: 0 PID: 26763 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  879.698905][T26763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  879.698919][T26763] Call Trace:
[  879.698928][T26763]  <TASK>
[  879.698938][T26763]  dump_stack_lvl+0xe8/0x150
[  879.698980][T26763]  dump_header+0xd3/0x4c0
[  879.699011][T26763]  oom_kill_process+0x3ab/0x970
[  879.699054][T26763]  out_of_memory+0x106c/0x1410
[  879.699077][T26763]  ? percpu_ref_put+0x19/0x180
[  879.699108][T26763]  ? __pfx___mutex_lock+0x10/0x10
[  879.699141][T26763]  ? __pfx_out_of_memory+0x10/0x10
[  879.699161][T26763]  ? do_raw_spin_unlock+0xf5/0x210
[  879.699197][T26763]  try_charge_memcg+0xc53/0x1560
[  879.699226][T26763]  ? __lock_acquire+0x6b5/0x2cf0
[  879.699270][T26763]  ? __pfx_try_charge_memcg+0x10/0x10
[  879.699294][T26763]  ? xa_load+0x60/0x210
[  879.699326][T26763]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  879.699357][T26763]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  879.699389][T26763]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  879.699421][T26763]  __swap_cache_prepare_and_add+0x52a/0x700
[  879.699477][T26763]  swap_cache_alloc_folio+0xf1/0x240
[  879.699515][T26763]  swap_cluster_readahead+0x53a/0x690
[  879.699557][T26763]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  879.699606][T26763]  ? get_vma_policy+0x27b/0x3c0
[  879.699639][T26763]  swapin_readahead+0x196/0xc50
[  879.699688][T26763]  ? __pfx_swapin_readahead+0x10/0x10
[  879.699725][T26763]  ? swap_table_get+0x1e/0x260
[  879.699756][T26763]  ? swap_table_get+0x1e/0x260
[  879.699785][T26763]  ? swap_table_get+0x1e/0x260
[  879.699818][T26763]  ? swap_table_get+0x216/0x260
[  879.699852][T26763]  ? swap_cache_get_folio+0x513/0x520
[  879.699891][T26763]  do_swap_page+0x56f/0x5a20
[  879.699950][T26763]  ? do_swap_page+0x127/0x5a20
[  879.699979][T26763]  ? __pfx_do_swap_page+0x10/0x10
[  879.700009][T26763]  ? __pte_offset_map+0x1ae/0x240
[  879.700056][T26763]  ? pte_offset_map_rw_nolock+0xea/0x160
[  879.700095][T26763]  handle_mm_fault+0x12d2/0x3310
[  879.700145][T26763]  ? handle_mm_fault+0xee/0x3310
[  879.700188][T26763]  ? __pfx_handle_mm_fault+0x10/0x10
[  879.700219][T26763]  ? lock_vma_under_rcu+0x45a/0x500
[  879.700273][T26763]  do_user_addr_fault+0xa73/0x1340
[  879.700313][T26763]  ? rcu_is_watching+0x15/0xb0
[  879.700346][T26763]  ? trace_page_fault_user+0x84/0x210
[  879.700379][T26763]  exc_page_fault+0x6a/0xc0
[  879.700416][T26763]  asm_exc_page_fault+0x26/0x30
[  879.700440][T26763] RIP: 0033:0x7feeb615cfce
[  879.700462][T26763] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  879.700482][T26763] RSP: 002b:00007ffc24b33128 EFLAGS: 00010246
[  879.700503][T26763] RAX: 0000000000000000 RBX: 000055558653b500 RCX: 00007feeb615cfce
[  879.700520][T26763] RDX: 00007ffc24b33180 RSI: 0000000000000000 RDI: 0000000000000000
[  879.700534][T26763] RBP: 00007ffc24b331ec R08: 0000000000000000 R09: 0000000000000000
[  879.700548][T26763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  879.700562][T26763] R13: 00000000000927c0 R14: 00000000000d678d R15: 00007ffc24b33240
[  879.700598][T26763]  </TASK>
[  879.700608][T26763] memory: usage 307200kB, limit 307200kB, failcnt 1188
[  879.940933][T30110] netlink: Unknown conntrack attr (0)
[  880.054985][T26763] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0
[  880.062953][T26763] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  880.080817][T26763] Memory cgroup stats for /syz1:
[  880.081004][T26763] cache 0
[  880.089135][T26763] rss 0
[  880.091931][T26763] rss_huge 0
[  880.096323][T26763] shmem 0
[  880.099314][T26763] mapped_file 0
[  880.102868][T26763] dirty 0
[  880.109216][T26763] writeback 0
[  880.173825][T26763] workingset_refault_anon 28
[  880.181704][T26763] workingset_refault_file 397
[  880.188188][T26763] swap 204800
[  880.191790][T26763] swapcached 249856
[  880.197062][T26763] pgpgin 121673
[  880.200631][T26763] pgpgout 121672
[  880.204215][T26763] pgfault 244261
[  880.208767][T26763] pgmajfault 27
[  880.212278][T26763] inactive_anon 0
[  880.308478][T26763] active_anon 4096
[  880.309176][T30118] netem: incorrect gi model size
[  880.312270][T26763] inactive_file 0
[  880.317349][T30118] netem: change failed
[  880.363479][T30116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  880.435668][T26763] active_file 0
[  880.465143][T26763] unevictable 0
[  880.468756][T26763] hierarchical_memory_limit 314572800
[  880.515731][T26763] hierarchical_memsw_limit 9223372036854771712
[  880.567919][T30129] netlink: 'syz.3.6590': attribute type 62 has an invalid length.
[  880.570230][T26763] total_cache 0
[  880.601219][T26763] total_rss 0
[  880.647310][T26763] total_rss_huge 0
[  880.684024][T26763] total_shmem 0
[  880.717086][T26763] total_mapped_file 0
[  880.753728][T26763] total_dirty 0
[  880.778589][T26763] total_writeback 0
[  880.799604][T26763] total_workingset_refault_anon 28
[  880.822729][T26763] total_workingset_refault_file 397
[  880.882596][T26763] total_swap 204800
[  880.912726][T26763] total_swapcached 249856
[  880.933737][T26763] total_pgpgin 121673
[  880.954581][T26763] total_pgpgout 121672
[  880.969107][T26763] total_pgfault 244261
[  880.983487][T26763] total_pgmajfault 27
[  880.995662][T26763] total_inactive_anon 0
[  881.018701][T26763] total_active_anon 4096
[  881.038914][T26763] total_inactive_file 0
[  881.057541][T30147] __nla_validate_parse: 15 callbacks suppressed
[  881.057568][T30147] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6594'.
[  881.061229][T26763] total_active_file 0
[  881.115450][T26763] total_unevictable 0
[  881.124165][T26763] anon_cost 0
[  881.133806][T26763] file_cost 0
[  881.141190][T26763] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6551,pid=30015,uid=0
[  881.204091][T26763] Memory cgroup out of memory: OOM victim 30015 (syz.1.6551) is already exiting. Skip killing the task
[  881.260215][T30153] syzkaller0: entered promiscuous mode
[  881.267932][T30153] syzkaller0: entered allmulticast mode
[  881.294915][T30153] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6596'.
[  881.347033][T30154] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6596'.
[  881.411569][T30158] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.6597'.
[  881.439467][T30160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6598'.
[  881.455545][T30158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6597'.
[  881.543457][T30162] netlink: 'syz.2.6598': attribute type 1 has an invalid length.
[  881.570973][T30162] netlink: 16138 bytes leftover after parsing attributes in process `syz.2.6598'.
[  881.593405][T30164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6599'.
[  881.827924][T30160] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6598'.
[  882.092852][T30186] Cannot find del_set index 1 as target
[  882.133504][T30186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6603'.
[  882.931212][T30214] x_tables: duplicate underflow at hook 3
[  883.194279][T30221] netlink: 'syz.3.6617': attribute type 2 has an invalid length.
[  883.207643][T30221] netlink: 'syz.3.6617': attribute type 62 has an invalid length.
[  884.987526][T30179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  885.223458][T30236] IPv6: sit1: Disabled Multicast RS
[  885.247209][T30236] sit1: entered allmulticast mode
[  885.363639][T30246] veth1_macvtap: left promiscuous mode
[  885.370448][T30246] macsec0: entered promiscuous mode
[  885.379952][T30246] macsec0: entered allmulticast mode
[  885.545659][T30246] syzkaller0: entered promiscuous mode
[  885.555011][T30246] syzkaller0: entered allmulticast mode
[  887.990291][T30269] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  888.016843][T30269] batman_adv: batadv0: Removing interface: batadv_slave_0
[  888.051983][T30279] geneve2: entered promiscuous mode
[  888.118290][T30286] __nla_validate_parse: 9 callbacks suppressed
[  888.118314][T30286] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6638'.
[  888.142271][T30291] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  888.162124][T30291] batman_adv: batadv0: Removing interface: batadv_slave_0
[  888.171251][T30291] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  888.180169][T30291] batman_adv: batadv0: Removing interface: batadv_slave_1
[  888.615194][T30258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  888.860321][T30317] netlink: 'syz.4.6645': attribute type 15 has an invalid length.
[  889.146368][T30340] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6649'.
[  889.202762][T30334] syzkaller0: entered promiscuous mode
[  889.209834][T30334] syzkaller0: entered allmulticast mode
[  890.835068][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  891.299325][T30371] netlink: 'syz.3.6660': attribute type 21 has an invalid length.
[  891.309357][T30371] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6660'.
[  892.208593][T30344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  892.430963][T30379] netlink: 'syz.0.6662': attribute type 15 has an invalid length.
[  892.488532][T30386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6665'.
[  892.740317][T30402] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  892.776778][T30402] bond1 (unregistering): Released all slaves
[  892.968692][T30418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6673'.
[  893.032472][T30422] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.6674'.
[  893.095323][T30418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6673'.
[  893.143709][T30418] bond0: entered promiscuous mode
[  893.162968][T30418] bond_slave_0: entered promiscuous mode
[  893.171762][T30418] bond_slave_1: entered promiscuous mode
[  893.196791][T30418] bond0: left promiscuous mode
[  893.201746][T30418] bond_slave_0: left promiscuous mode
[  893.208248][T30418] bond_slave_1: left promiscuous mode
[  893.220147][T30430] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  893.253972][T30432] netlink: 'syz.2.6678': attribute type 15 has an invalid length.
[  893.541771][T30452] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  893.659237][T30463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6687'.
[  893.868041][T30474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6690'.
[  893.877962][T30475] netlink: 'syz.3.6691': attribute type 15 has an invalid length.
[  893.883186][T30474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6690'.
[  894.388027][T30502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6703'.
[  894.433240][T30513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6707'.
[  894.627721][T30525] batadv_slave_0: entered promiscuous mode
[  894.686884][T30524] batadv_slave_0: left promiscuous mode
[  894.827600][T30537] TC_ACT_REPEAT abuse ?
[  894.838584][T30537] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000
[  894.870282][T30539] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6715'.
[  895.073956][T30548] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6717'.
[  895.171246][T30551] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  895.296020][T30560] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6720'.
[  895.340705][T30563] netlink: 'syz.0.6722': attribute type 3 has an invalid length.
[  895.476239][T30569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6724'.
[  895.844670][T30597] netlink: 'syz.4.6730': attribute type 1 has an invalid length.
[  896.006427][T30597] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  896.085192][T30612] x_tables: duplicate underflow at hook 4
[  896.138055][T30612] x_tables: duplicate underflow at hook 4
[  896.156197][T30612] x_tables: duplicate underflow at hook 4
[  896.162054][T30612] x_tables: duplicate underflow at hook 4
[  896.194324][T30619] syzkaller0: entered promiscuous mode
[  896.210940][T30619] syzkaller0: entered allmulticast mode
[  896.233605][T30622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6735'.
[  896.262958][T30612] x_tables: duplicate underflow at hook 4
[  896.324649][T30612] x_tables: duplicate underflow at hook 4
[  896.330526][T30612] x_tables: duplicate underflow at hook 4
[  896.350258][T30612] x_tables: duplicate underflow at hook 4
[  896.402201][T30612] x_tables: duplicate underflow at hook 4
[  896.411160][T30612] x_tables: duplicate underflow at hook 4
[  896.502483][T17199] IPVS: starting estimator thread 0...
[  896.604890][T30633] IPVS: using max 24 ests per chain, 57600 per kthread
[  896.766385][T30642] syzkaller0: entered promiscuous mode
[  896.880540][T30647] netlink: 'syz.2.6746': attribute type 21 has an invalid length.
[  896.965642][T30647] netlink: 'syz.2.6746': attribute type 6 has an invalid length.
[  897.248495][T30668] mac80211_hwsim hwsim85 wlan0: entered allmulticast mode
[  897.622867][T30682] syzkaller0: entered promiscuous mode
[  897.639262][T30682] syzkaller0: entered allmulticast mode
[  898.155573][T30707] netlink: 'syz.2.6766': attribute type 10 has an invalid length.
[  898.179282][T30707] bridge0: port 2(bridge_slave_1) entered disabled state
[  898.187307][T30707] bridge0: port 1(bridge_slave_0) entered disabled state
[  898.211770][T30712] netlink: 'syz.3.6767': attribute type 11 has an invalid length.
[  898.227092][T30707] bridge0: port 2(bridge_slave_1) entered blocking state
[  898.234375][T30707] bridge0: port 2(bridge_slave_1) entered forwarding state
[  898.241972][T30707] bridge0: port 1(bridge_slave_0) entered blocking state
[  898.249217][T30707] bridge0: port 1(bridge_slave_0) entered forwarding state
[  898.266619][T30707] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  898.293426][T30712] netlink: 'syz.3.6767': attribute type 11 has an invalid length.
[  898.334671][T30708] bridge_slave_1: left allmulticast mode
[  898.340409][T30708] bridge_slave_1: left promiscuous mode
[  898.368901][T30708] bridge0: port 2(bridge_slave_1) entered disabled state
[  898.383271][T30708] bridge_slave_0: left allmulticast mode
[  898.391269][T30708] bridge_slave_0: left promiscuous mode
[  898.399022][T30708] bridge0: port 1(bridge_slave_0) entered disabled state
[  898.421337][T30708] bond0: (slave bridge0): Releasing backup interface
[  898.479683][T18901] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  898.490363][T18901] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  898.500504][T18901] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  898.520934][T30726] netlink: 'syz.4.6770': attribute type 33 has an invalid length.
[  898.544766][T18901] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  898.711840][T30731] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  898.733338][T30735] __nla_validate_parse: 14 callbacks suppressed
[  898.733362][T30735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6775'.
[  898.797862][T30735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6775'.
[  899.227147][T30769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  899.234532][T30769] IPv6: NLM_F_CREATE should be set when creating new route
[  899.562435][T30799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  899.754309][T30811] xt_CT: You must specify a L4 protocol and not use inversions on it
[  899.938376][T30817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6799'.
[  900.394331][T30841] netlink: 'syz.2.6805': attribute type 21 has an invalid length.
[  900.450370][T30841] netlink: 'syz.2.6805': attribute type 21 has an invalid length.
[  900.506486][T30841] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6805'.
[  900.557986][T30838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  900.658002][T30852] netlink: 'syz.3.6806': attribute type 4 has an invalid length.
[  900.745546][T30856] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6809'.
[  900.838876][T30861] netlink: 'syz.1.6811': attribute type 3 has an invalid length.
[  901.051785][T30869] openvswitch: netlink: IP tunnel dst address not specified
[  901.070491][T30869] netlink: 'syz.4.6814': attribute type 1 has an invalid length.
[  901.101222][T30869] netlink: 212 bytes leftover after parsing attributes in process `syz.4.6814'.
[  901.137053][T30869] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6814'.
[  901.261746][T30876] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6817'.
[  901.323308][T30882] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6818'.
[  901.332915][T30882] netlink: 320 bytes leftover after parsing attributes in process `syz.1.6818'.
[  901.682212][T17199] IPVS: starting estimator thread 0...
[  901.688938][T30899] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  901.786808][T30906] IPVS: using max 29 ests per chain, 69600 per kthread
[  902.238309][T30934] netlink: 'syz.0.6834': attribute type 1 has an invalid length.
[  902.767184][T30964] openvswitch: netlink: Missing key (keys=40, expected=100)
[  902.788687][T30971] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication
[  902.978631][T30982] IPv6: sit2: Disabled Multicast RS
[  902.986238][T30982] sit2: entered allmulticast mode
[  903.156674][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  903.183232][T30986] tc_dump_action: action bad kind
[  903.220396][T30990] tc_dump_action: action bad kind
[  903.261635][T30990] pim6reg: entered allmulticast mode
[  903.278393][T30990] pim6reg: left allmulticast mode
[  903.397083][T30993] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  903.424417][T30993] bond1 (unregistering): Released all slaves
[  903.600332][T31016] syzkaller0: entered promiscuous mode
[  903.605954][T31016] syzkaller0: entered allmulticast mode
[  903.742594][T31019] Cannot find del_set index 49151 as target
[  903.773599][T31022] __nla_validate_parse: 6 callbacks suppressed
[  903.773620][T31022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6856'.
[  903.816038][T31022] netlink: 'syz.3.6856': attribute type 7 has an invalid length.
[  903.866000][T31022] netlink: 'syz.3.6856': attribute type 8 has an invalid length.
[  903.889391][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  903.908202][T31022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6856'.
[  904.133748][T31040] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6860'.
[  904.237898][T31048] netlink: 'syz.1.6862': attribute type 3 has an invalid length.
[  904.271224][T31048] netlink: 'syz.1.6862': attribute type 3 has an invalid length.
[  904.316464][T31056] : entered promiscuous mode
[  904.395967][T31059] netlink: 192 bytes leftover after parsing attributes in process `syz.4.6866'.
[  904.444404][T31062] tipc: Failed to remove unknown binding: 66,0,0/2667621950:2173098708/2173098709
[  904.469522][T31062] tipc: Failed to remove unknown binding: 66,0,0/2667621950:2173098708/2173098709
[  904.491053][T31065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6868'.
[  904.506575][T31065] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6868'.
[  904.537425][T31066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6868'.
[  904.548759][T31066] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6868'.
[  904.922890][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  904.941119][T31092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6877'.
[  905.116679][T31098] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  905.659064][T31124] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6887'.
[  905.681778][T31127] syzkaller0: entered promiscuous mode
[  905.687760][T31127] syzkaller0: entered allmulticast mode
[  905.960678][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  906.034871][T17199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  906.093208][T31145] validate_nla: 1 callbacks suppressed
[  906.093231][T31145] netlink: 'syz.1.6894': attribute type 29 has an invalid length.
[  906.108408][T31145] netlink: 'syz.1.6894': attribute type 29 has an invalid length.
[  906.197132][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  906.340626][T31165] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  906.364748][T31165] batman_adv: batadv0: Removing interface: batadv_slave_0
[  906.382857][T31165] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  906.398823][T31165] batman_adv: batadv0: Removing interface: batadv_slave_1
[  906.434353][T31170] netlink: 'syz.1.6901': attribute type 1 has an invalid length.
[  906.528291][T31173] bond2: Invalid ad_actor_system MAC address.
[  906.535957][T31173] bond2: option ad_actor_system: invalid value (1)
[  906.549092][T31173] bond2 (unregistering): Released all slaves
[  906.588931][T31170] bond4: (slave gretap1): making interface the new active one
[  906.598777][T31170] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  906.816906][T31188] netlink: 'syz.3.6906': attribute type 178 has an invalid length.
[  906.837645][T18910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  906.849371][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  906.859415][T17199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  907.046978][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  907.368463][T31212] wlan0 speed is unknown, defaulting to 1000
[  907.874340][T31236] lo speed is unknown, defaulting to 1000
[  907.897705][T31236] lo speed is unknown, defaulting to 1000
[  907.918494][T31236] lo speed is unknown, defaulting to 1000
[  907.976488][T31236] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  908.069734][T31236] lo speed is unknown, defaulting to 1000
[  908.081239][T31236] lo speed is unknown, defaulting to 1000
[  908.102242][T31236] lo speed is unknown, defaulting to 1000
[  908.136931][T31236] lo speed is unknown, defaulting to 1000
[  908.159391][T31236] lo speed is unknown, defaulting to 1000
[  908.187672][T31236] lo speed is unknown, defaulting to 1000
[  908.221859][T31236] lo speed is unknown, defaulting to 1000
[  908.248940][T31236] lo speed is unknown, defaulting to 1000
[  908.302352][T31255] syzkaller1: entered promiscuous mode
[  908.322219][T31255] syzkaller1: entered allmulticast mode
[  908.348645][T31236] lo speed is unknown, defaulting to 1000
[  909.067582][T31299] net_ratelimit: 147 callbacks suppressed
[  909.067601][T31299] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  909.156281][T24884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  910.194908][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  911.085702][T24881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  911.235372][T24884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  911.334759][T24881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  912.277123][T24885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  913.315187][T24884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  914.116034][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  914.357986][T24885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  915.395168][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  916.435194][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  916.444263][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  917.155570][T17199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  917.476396][T24885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  918.516253][T24885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  919.556799][T24884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.194877][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.595253][T24885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.916539][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.557801][T24881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.635146][T24884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.650453][T12946] lec:lec_start_xmit: lec0:No lecd attached
[  922.675371][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  923.235575][T17199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  923.715277][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.755012][T24885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.794894][T24884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  926.275953][T24881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  926.835489][T24884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  927.074564][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5420 ms
[  927.082636][    C1] lec:lec_tx_timeout: lec0
[  927.875753][T24885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  928.915262][T24885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  929.314853][T17199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  929.955880][T24885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.996045][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  931.157477][T17199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  931.470044][T31312] __nla_validate_parse: 11 callbacks suppressed
[  931.470066][T31312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6941'.
[  931.503313][T31312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6941'.
[  931.517371][T31313] siw: device registration error -23
[  931.557445][T31313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  931.608645][T31313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  931.774848][T31332] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6945'.
[  931.796297][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  931.810954][ T1298] lec:lec_start_xmit: lec0:No lecd attached
[  931.873278][T31327] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  931.880577][T24891] IPVS: starting estimator thread 0...
[  931.985345][T31337] IPVS: using max 26 ests per chain, 62400 per kthread
[  932.018846][T31345] netlink: 'syz.0.6948': attribute type 2 has an invalid length.
[  932.021233][T31342] sctp: [Deprecated]: syz.1.6949 (pid 31342) Use of int in max_burst socket option.
[  932.021233][T31342] Use struct sctp_assoc_value instead
[  932.053287][T31345] �9: entered promiscuous mode
[  932.054314][T24885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  932.188972][T31342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6949'.
[  932.235551][T31342] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6949'.
[  932.672311][T31382] netlink: 294 bytes leftover after parsing attributes in process `syz.0.6958'.
[  932.706138][T31382] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  932.735824][T31390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6960'.
[  932.820889][T31395] nbd: must specify at least one socket
[  933.234128][T31416] block nbd2: Unsupported socket: should be TCP or UNIX.
[  933.328649][T31423] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6972'.
[  933.506793][T31431] xt_check_table_hooks: 23 callbacks suppressed
[  933.506817][T31431] x_tables: duplicate underflow at hook 1
[  933.510799][T31429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6975'.
[  933.535404][T31427] nbd4: detected capacity change from 0 to 63
[  933.546472][T31432] block nbd4: NBD_DISCONNECT
[  933.552055][T31432] block nbd4: Disconnected due to user request.
[  933.573264][T31421] blk_print_req_error: 138 callbacks suppressed
[  933.573287][T31421] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  933.578515][T31432] block nbd4: shutting down sockets
[  933.594020][T31421] buffer_io_error: 138 callbacks suppressed
[  933.594075][T31421] Buffer I/O error on dev nbd4, logical block 0, async page read
[  933.642599][   T25] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  933.654039][   T25] Buffer I/O error on dev nbd4, logical block 1, async page read
[  933.662422][   T25] Buffer I/O error on dev nbd4, logical block 2, async page read
[  933.670650][   T25] Buffer I/O error on dev nbd4, logical block 3, async page read
[  933.681515][T31421] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  933.693570][T31434] xt_policy: output policy not valid in PREROUTING and INPUT
[  933.737977][T31421] Buffer I/O error on dev nbd4, logical block 0, async page read
[  933.746599][T31421] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  933.756696][T31421] Buffer I/O error on dev nbd4, logical block 1, async page read
[  933.764759][T31421] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  933.775054][T31421] Buffer I/O error on dev nbd4, logical block 2, async page read
[  933.783408][T31421] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  933.797019][T31421] Buffer I/O error on dev nbd4, logical block 3, async page read
[  933.805341][T31421] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  933.816916][T31421] Buffer I/O error on dev nbd4, logical block 0, async page read
[  933.847799][T31421] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  933.878277][ T5836] Bluetooth: hci5: command 0x0406 tx timeout
[  933.887621][T31421] Buffer I/O error on dev nbd4, logical block 1, async page read
[  933.910047][T31421] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  933.932429][T31443] netlink: 'syz.2.6980': attribute type 1 has an invalid length.
[  933.975724][T31421] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  934.003274][T31449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6980'.
[  934.042020][T31421] ldm_validate_partition_table(): Disk read failed.
[  934.063243][T31443] 8021q: adding VLAN 0 to HW filter on device bond1
[  934.090000][T31421] Dev nbd4: unable to read RDB block 0
[  934.102103][T31421]  nbd4: unable to read partition table
[  934.113969][T31421] ldm_validate_partition_table(): Disk read failed.
[  934.135584][T31421] Dev nbd4: unable to read RDB block 0
[  934.141791][T31421]  nbd4: unable to read partition table
[  934.803517][T31495] FAULT_INJECTION: forcing a failure.
[  934.803517][T31495] name failslab, interval 1, probability 0, space 0, times 0
[  934.820821][T31495] CPU: 1 UID: 0 PID: 31495 Comm: syz.4.6995 Not tainted syzkaller #0 PREEMPT(full) 
[  934.820852][T31495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  934.820866][T31495] Call Trace:
[  934.820876][T31495]  <TASK>
[  934.820885][T31495]  dump_stack_lvl+0xe8/0x150
[  934.820922][T31495]  should_fail_ex+0x412/0x560
[  934.820958][T31495]  should_failslab+0xa8/0x100
[  934.821047][T31495]  __kmalloc_cache_noprof+0x88/0x660
[  934.821074][T31495]  ? sctp_add_bind_addr+0x8c/0x370
[  934.821179][T31495]  ? __pfx_sctp_get_port_local+0x10/0x10
[  934.821219][T31495]  sctp_add_bind_addr+0x8c/0x370
[  934.821245][T31495]  ? sctp_auto_asconf_init+0x15c/0x1e0
[  934.821282][T31495]  sctp_do_bind+0x5b2/0x9d0
[  934.821327][T31495]  sctp_connect_new_asoc+0x270/0x6b0
[  934.821364][T31495]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  934.821405][T31495]  ? __local_bh_enable_ip+0xd0/0x130
[  934.821448][T31495]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  934.821476][T31495]  ? security_sctp_bind_connect+0x7e/0x2c0
[  934.821562][T31495]  sctp_sendmsg+0x1528/0x2c10
[  934.821613][T31495]  ? __pfx_sctp_sendmsg+0x10/0x10
[  934.821650][T31495]  ? aa_sk_perm+0x6d5/0x900
[  934.821726][T31495]  ? __pfx_aa_sk_perm+0x10/0x10
[  934.821756][T31495]  ? sock_rps_record_flow+0x19/0x400
[  934.821816][T31495]  ? inet_sendmsg+0x2f4/0x370
[  934.821844][T31495]  ____sys_sendmsg+0x80a/0x9f0
[  934.821878][T31495]  ? __pfx_____sys_sendmsg+0x10/0x10
[  934.821912][T31495]  ? import_iovec+0x73/0xa0
[  934.821952][T31495]  ___sys_sendmsg+0x2a5/0x360
[  934.821981][T31495]  ? __pfx____sys_sendmsg+0x10/0x10
[  934.822045][T31495]  ? __fget_files+0x2a/0x420
[  934.822078][T31495]  ? __fget_files+0x3a0/0x420
[  934.822123][T31495]  __x64_sys_sendmsg+0x1bd/0x2a0
[  934.822149][T31495]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  934.822183][T31495]  ? __pfx_ksys_write+0x10/0x10
[  934.822221][T31495]  do_syscall_64+0x14d/0xf80
[  934.822242][T31495]  ? trace_irq_disable+0x3b/0x150
[  934.822275][T31495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.822297][T31495]  ? clear_bhb_loop+0x40/0x90
[  934.822324][T31495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.822346][T31495] RIP: 0033:0x7f8b6799c799
[  934.822369][T31495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  934.822388][T31495] RSP: 002b:00007f8b6887f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  934.822412][T31495] RAX: ffffffffffffffda RBX: 00007f8b67c15fa0 RCX: 00007f8b6799c799
[  934.822429][T31495] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003
[  934.822443][T31495] RBP: 00007f8b6887f090 R08: 0000000000000000 R09: 0000000000000000
[  934.822456][T31495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  934.822468][T31495] R13: 00007f8b67c16038 R14: 00007f8b67c15fa0 R15: 00007ffcc7329848
[  934.822503][T31495]  </TASK>
[  935.405332][T31506] mac80211_hwsim hwsim84 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  935.460322][T31506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  935.757836][T31527] FAULT_INJECTION: forcing a failure.
[  935.757836][T31527] name failslab, interval 1, probability 0, space 0, times 0
[  935.791236][T31529] netlink: 'syz.3.7008': attribute type 20 has an invalid length.
[  935.801248][T31529] IPv6: NLM_F_CREATE should be specified when creating new route
[  935.822788][T31527] CPU: 1 UID: 0 PID: 31527 Comm: syz.2.7007 Not tainted syzkaller #0 PREEMPT(full) 
[  935.822817][T31527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  935.822832][T31527] Call Trace:
[  935.822841][T31527]  <TASK>
[  935.822851][T31527]  dump_stack_lvl+0xe8/0x150
[  935.822888][T31527]  should_fail_ex+0x412/0x560
[  935.822930][T31527]  should_failslab+0xa8/0x100
[  935.822961][T31527]  __kmalloc_cache_noprof+0x88/0x660
[  935.822986][T31527]  ? sctp_association_new+0x89/0x25e0
[  935.823142][T31527]  sctp_association_new+0x89/0x25e0
[  935.823177][T31527]  ? sctp_do_bind+0x661/0x9d0
[  935.823223][T31527]  sctp_connect_new_asoc+0x2e4/0x6b0
[  935.823261][T31527]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  935.823303][T31527]  ? __local_bh_enable_ip+0xd0/0x130
[  935.823331][T31527]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  935.823358][T31527]  ? security_sctp_bind_connect+0x7e/0x2c0
[  935.823386][T31527]  sctp_sendmsg+0x1528/0x2c10
[  935.823437][T31527]  ? __pfx_sctp_sendmsg+0x10/0x10
[  935.823475][T31527]  ? aa_sk_perm+0x6d5/0x900
[  935.823512][T31527]  ? __pfx_aa_sk_perm+0x10/0x10
[  935.823542][T31527]  ? sock_rps_record_flow+0x19/0x400
[  935.823568][T31527]  ? inet_sendmsg+0x2f4/0x370
[  935.823596][T31527]  ____sys_sendmsg+0x80a/0x9f0
[  935.823629][T31527]  ? __pfx_____sys_sendmsg+0x10/0x10
[  935.823663][T31527]  ? import_iovec+0x73/0xa0
[  935.823702][T31527]  ___sys_sendmsg+0x2a5/0x360
[  935.823732][T31527]  ? __pfx____sys_sendmsg+0x10/0x10
[  935.823794][T31527]  ? __fget_files+0x2a/0x420
[  935.823827][T31527]  ? __fget_files+0x3a0/0x420
[  935.823869][T31527]  __x64_sys_sendmsg+0x1bd/0x2a0
[  935.823894][T31527]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  935.823926][T31527]  ? __pfx_ksys_write+0x10/0x10
[  935.823962][T31527]  do_syscall_64+0x14d/0xf80
[  935.823983][T31527]  ? trace_irq_disable+0x3b/0x150
[  935.824015][T31527]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  935.824039][T31527]  ? clear_bhb_loop+0x40/0x90
[  935.824078][T31527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  935.824100][T31527] RIP: 0033:0x7f441099c799
[  935.824123][T31527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  935.824142][T31527] RSP: 002b:00007f441188c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  935.824167][T31527] RAX: ffffffffffffffda RBX: 00007f4410c15fa0 RCX: 00007f441099c799
[  935.824184][T31527] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003
[  935.824198][T31527] RBP: 00007f441188c090 R08: 0000000000000000 R09: 0000000000000000
[  935.824212][T31527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  935.824225][T31527] R13: 00007f4410c16038 R14: 00007f4410c15fa0 R15: 00007fff69f86628
[  935.824262][T31527]  </TASK>
[  936.139099][T31530] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  936.194083][T31533] xt_hashlimit: size too large, truncated to 1048576
[  936.427290][T31543] wlan0 speed is unknown, defaulting to 1000
[  936.440171][T31543] lo speed is unknown, defaulting to 1000
[  936.557345][T31555] can: request_module (can-proto-0) failed.
[  936.855021][T31572] netlink: 'syz.3.7021': attribute type 1 has an invalid length.
[  937.005842][T31588] __nla_validate_parse: 3 callbacks suppressed
[  937.005864][T31588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7024'.
[  937.024636][T31573] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  937.074529][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms
[  937.091031][    C1] lec:lec_tx_timeout: lec0
[  937.107510][T31574] bond1: (slave gretap1): making interface the new active one
[  937.135312][T31574] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  937.704888][T31626] netlink: 'syz.3.7030': attribute type 10 has an invalid length.
[  937.739681][T31626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7030'.
[  937.799704][T31625] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  937.827986][T31625] bond2: (slave lo): Enslaving as an active interface with an up link
[  937.859527][T31625] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  937.967677][T31635] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  938.115971][T18906] wlan1: Trigger new scan to find an IBSS to join
[  938.208588][T31648] netlink: 'syz.4.7038': attribute type 16 has an invalid length.
[  938.217045][T31648] netlink: 'syz.4.7038': attribute type 17 has an invalid length.
[  938.258534][T31648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  938.333458][T31653] netlink: 'syz.0.7039': attribute type 1 has an invalid length.
[  938.341524][T31653] netlink: 'syz.0.7039': attribute type 4 has an invalid length.
[  938.350253][T31653] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7039'.
[  940.538932][T31610] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  940.786375][T31660] tipc: Started in network mode
[  940.809672][T31660] tipc: Node identity 5e4e91e2e7b4, cluster identity 4711
[  940.839113][T31660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  940.857597][T31670] syzkaller0: entered promiscuous mode
[  940.885758][T31670] syzkaller0: entered allmulticast mode
[  940.962399][T31679] netlink: 'syz.0.7049': attribute type 58 has an invalid length.
[  940.974409][T31670] tipc: Resetting bearer <eth:syzkaller0>
[  940.995924][T31679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7049'.
[  941.013822][T31672] netlink: 'syz.2.7046': attribute type 21 has an invalid length.
[  941.032602][T31672] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7046'.
[  941.076243][T18906] wlan1: Trigger new scan to find an IBSS to join
[  941.124331][T31658] tipc: Resetting bearer <eth:syzkaller0>
[  941.196423][T31658] tipc: Disabling bearer <eth:syzkaller0>
[  941.303192][T31696] syzkaller0: entered promiscuous mode
[  941.318286][T31696] syzkaller0: entered allmulticast mode
[  941.348346][T31698] ipt_REJECT: ECHOREPLY no longer supported.
[  941.388477][T31703] xt_ipcomp: unknown flags 1D
[  941.625493][T31718] IPVS: set_ctl: invalid protocol: 136 172.30.1.1:20002
[  941.799311][T31728] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  941.839627][T31735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7066'.
[  941.978846][T31745] sctp: [Deprecated]: syz.3.7070 (pid 31745) Use of struct sctp_assoc_value in delayed_ack socket option.
[  941.978846][T31745] Use struct sctp_sack_info instead
[  942.004018][T31745] sctp: [Deprecated]: syz.3.7070 (pid 31745) Use of struct sctp_assoc_value in delayed_ack socket option.
[  942.004018][T31745] Use struct sctp_sack_info instead
[  942.048974][T31744] bond2: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  942.062358][T31744] bond2: entered promiscuous mode
[  942.085205][T31744] bond2: entered allmulticast mode
[  942.091124][T31744] 8021q: adding VLAN 0 to HW filter on device bond2
[  942.135575][T31698] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  942.324312][T31771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7076'.
[  942.432564][T31771] 8021q: adding VLAN 0 to HW filter on device bond5
[  942.516588][T31771] 8021q: adding VLAN 0 to HW filter on device bond5
[  942.534319][T31771] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  942.610122][T31771] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  943.149990][T31810] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7086'.
[  943.416387][T31829] netlink: 'syz.4.7090': attribute type 2 has an invalid length.
[  943.437485][T31831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7091'.
[  943.450682][T31829] netlink: 'syz.4.7090': attribute type 3 has an invalid length.
[  943.488538][T31835] netlink: 'syz.1.7092': attribute type 1 has an invalid length.
[  943.504722][T31835] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7092'.
[  943.516431][T31836] netlink: 'syz.1.7092': attribute type 1 has an invalid length.
[  943.524981][T31836] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7092'.
[  943.530509][T31838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7090'.
[  943.569346][T31838] netlink: 50 bytes leftover after parsing attributes in process `syz.4.7090'.
[  943.572783][T31840] netlink: 'syz.0.7093': attribute type 4 has an invalid length.
[  943.583061][T31838] netlink: 50 bytes leftover after parsing attributes in process `syz.4.7090'.
[  943.623550][T31840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7093'.
[  943.646645][T31843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7094'.
[  943.660673][T31840] syzkaller0: entered promiscuous mode
[  943.669352][T31840] syzkaller0: entered allmulticast mode
[  943.911321][T31855] netlink: 'syz.1.7099': attribute type 3 has an invalid length.
[  943.940102][T31862] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  943.974262][T31860] tipc: Started in network mode
[  943.990643][T31860] tipc: Node identity 42b9de84a46, cluster identity 4711
[  943.999677][T31860] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  944.017208][T31860] syzkaller0: entered promiscuous mode
[  944.023718][T31860] syzkaller0: entered allmulticast mode
[  944.120812][ T5836] Bluetooth: hci0: command 0x0406 tx timeout
[  944.133857][T18910] wlan1: Trigger new scan to find an IBSS to join
[  944.150211][T31860] tipc: Resetting bearer <eth:syzkaller0>
[  944.167605][T31858] tipc: Resetting bearer <eth:syzkaller0>
[  944.240191][T31858] tipc: Disabling bearer <eth:syzkaller0>
[  944.267598][T31880] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  944.516291][T31888] netlink: 'syz.1.7106': attribute type 1 has an invalid length.
[  944.587440][T31894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  944.810348][T31914] netlink: 'syz.3.7111': attribute type 11 has an invalid length.
[  945.000802][T31913] team0: Port device team_slave_0 removed
[  945.035060][T30966] wlan1: Creating new IBSS network, BSSID 46:84:2e:18:61:96
[  945.333736][T31941] netlink: 'syz.0.7121': attribute type 1 has an invalid length.
[  945.360072][T31949] syzkaller1: entered promiscuous mode
[  945.365912][T31949] syzkaller1: entered allmulticast mode
[  945.764887][T31973] netlink: 'syz.1.7129': attribute type 23 has an invalid length.
[  946.293942][T32001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  946.628322][T32027] netlink: 'syz.1.7145': attribute type 21 has an invalid length.
[  946.641093][T32027] IPv6: NLM_F_CREATE should be specified when creating new route
[  946.820202][T32038] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  947.127310][T32067] xt_hashlimit: overflow, rate too high: 0
[  947.265024][T32071] openvswitch: netlink: Message has 1 unknown bytes.
[  947.285576][T32071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  947.764249][T32099] openvswitch: netlink: IP tunnel dst address not specified
[  947.819858][T32099] __nla_validate_parse: 19 callbacks suppressed
[  947.819880][T32099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7166'.
[  947.859079][T32099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7166'.
[  947.957454][T18905] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0
[  947.968856][T32099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7166'.
[  947.982552][T18905] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0
[  948.004800][T32099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7166'.
[  948.017553][T18905] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0
[  948.040186][T18905] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0
[  948.425913][T32132] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7179'.
[  948.477074][T32128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7175'.
[  948.573882][T32141] netlink: 260 bytes leftover after parsing attributes in process `syz.4.7180'.
[  948.622151][T32144] xt_CT: You must specify a L4 protocol and not use inversions on it
[  948.686958][T24885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.705816][T32144] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  948.811495][T32157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7182'.
[  948.830614][T18905] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  948.860881][T18905] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  948.870649][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  948.891427][T18901] nci: nci_rsp_packet: unsupported rsp opcode 0xf00
[  949.130264][T32175] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7187'.
[  949.259192][T32180] validate_nla: 3 callbacks suppressed
[  949.259218][T32180] netlink: 'syz.0.7191': attribute type 21 has an invalid length.
[  949.290855][T32180] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7191'.
[  949.476386][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  949.594911][T32155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  949.635509][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  949.648321][T32185] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  949.682585][T32188] netlink: 'syz.1.7194': attribute type 2 has an invalid length.
[  949.690999][T32188] netlink: 'syz.1.7194': attribute type 2 has an invalid length.
[  949.721655][T24884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  950.052619][T24881] lo speed is unknown, defaulting to 1000
[  950.355871][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  950.374696][T24881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  950.596206][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  950.659117][T32247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  950.668842][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  950.767694][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  950.995238][T18901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  951.008721][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  951.018319][T24891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  952.754789][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  952.864132][T32200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  953.090950][T32263] __nla_validate_parse: 13 callbacks suppressed
[  953.090973][T32263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7219'.
[  953.152327][T32263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7219'.
[  953.162462][T32271] tap0: tun_chr_ioctl cmd 2148553947
[  953.272919][T32275] tipc: Enabled bearer <udp:syz1>, priority 10
[  953.289794][T32275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7223'.
[  953.346466][T32282] bridge0: port 1(bridge_slave_0) entered disabled state
[  953.368450][T32281] netlink: 'syz.4.7225': attribute type 1 has an invalid length.
[  953.923739][T32309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7232'.
[  954.066669][T32318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7233'.
[  954.357057][ T5836] Bluetooth: hci3: command 0x041b tx timeout
[  954.385703][   T10] tipc: Node number set to 3873037956
[  954.392735][T32331] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7235'.
[  954.427639][T32331] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7235'.
[  954.437816][T32336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7237'.
[  954.448024][T32336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7237'.
[  954.457485][T32336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7237'.
[  954.541620][T32336] bond6: option packets_per_slave: invalid value (18446744073709551615)
[  954.553497][T32336] bond6: option packets_per_slave: allowed values 0 - 65535
[  954.569184][T32336] bond6 (unregistering): Released all slaves
[  954.981788][T32373] syzkaller1: entered promiscuous mode
[  954.988044][T32373] syzkaller1: entered allmulticast mode
[  955.065485][T32378] netlink: 'syz.4.7251': attribute type 1 has an invalid length.
[  955.165525][T24885] net_ratelimit: 5 callbacks suppressed
[  955.165546][T24885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.360475][T32396] netlink: 'syz.0.7256': attribute type 4 has an invalid length.
[  955.441198][T32405] ipt_REJECT: ECHOREPLY no longer supported.
[  955.545466][T32407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.556189][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.565955][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.574496][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.582974][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.591392][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.599799][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.608251][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.616716][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.664090][T32412] xt_hashlimit: size too large, truncated to 1048576
[  955.797117][T32415] –: renamed from 
[  957.070220][T32453] bridge0: port 1(bridge_slave_0) entered disabled state
[  957.107709][T32453] bridge0: port 2(bridge_slave_1) entered disabled state
[  957.300141][T32448] wlan0 speed is unknown, defaulting to 1000
[  957.341708][T32448] lo speed is unknown, defaulting to 1000
[  957.579353][T32462] netlink: 'syz.1.7274': attribute type 24 has an invalid length.
[  958.435099][T32482] __nla_validate_parse: 41 callbacks suppressed
[  958.435122][T32482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7280'.
[  958.489109][T32483] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7280'.
[  958.513355][T32482] vlan2: entered allmulticast mode
[  958.522264][T32482] bond0: entered allmulticast mode
[  958.529601][T32482] bond_slave_0: entered allmulticast mode
[  958.538752][T32482] bond_slave_1: entered allmulticast mode
[  958.676775][T32483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  958.708183][T32483] bond_slave_0: left allmulticast mode
[  958.730380][T32483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  958.759862][T32483] bond_slave_1: left allmulticast mode
[  958.778902][T32483] bond0 (unregistering): Released all slaves
[  958.853540][T32491] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add()
[  958.873817][T32492] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add()
[  959.148764][T32496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7284'.
[  959.206401][T32496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7284'.
[  959.269682][T32499] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7285'.
[  959.572294][T32505] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7287'.
[  959.598171][T32512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7290'.
[  959.892717][T32518] syzkaller0: entered promiscuous mode
[  959.907174][T32518] syzkaller0: entered allmulticast mode
[  960.115570][T32524] netlink: 'syz.4.7291': attribute type 3 has an invalid length.
[  960.174476][    C1] net_ratelimit: 28776 callbacks suppressed
[  960.174509][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  960.188836][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  960.197205][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  960.205600][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  960.213940][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  960.222291][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  960.230854][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  960.239218][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  960.247624][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  960.255998][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  960.398931][T32528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7296'.
[  960.481016][T32533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7298'.
[  960.594654][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  961.033281][T32545] Bluetooth: MGMT ver 1.23
[  961.507296][T32485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  962.542349][T32589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7315'.
[  962.638977][T32589] xt_hashlimit: overflow, rate too high: 0
[  962.712929][T32597] ipvlan2: entered allmulticast mode
[  962.737253][T32597] batadv_slave_1: entered allmulticast mode
[  962.773964][T32597] batman_adv: batadv0: Adding interface: ipvlan2
[  962.800184][T32597] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  962.882782][T32597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  962.906302][T32604] netlink: 'syz.1.7318': attribute type 15 has an invalid length.
[  962.961767][T32597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  963.000508][T32597] batman_adv: batadv0: Interface activated: ipvlan2
[  963.044408][T32605] tipc: Started in network mode
[  963.073412][T32605] tipc: Node identity e2242f86d69b, cluster identity 4711
[  963.137086][T32605] tipc: Enabled bearer <eth:xfrm0>, priority 11
[  963.266676][T30966] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  963.312312][T30966] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  963.369546][T30966] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  963.425274][T30966] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  963.761373][T32625] __nla_validate_parse: 6 callbacks suppressed
[  963.761396][T32625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7328'.
[  964.333024][T24891] tipc: Node number set to 884944774
[  964.383422][T32657] netlink: 'syz.3.7333': attribute type 15 has an invalid length.
[  964.713258][T32672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7339'.
[  964.816327][T32674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7337'.
[  964.839000][T18909] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  964.852714][T18909] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  964.874986][ T5887] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  965.141786][T24891] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  965.184574][    C0] net_ratelimit: 29989 callbacks suppressed
[  965.184598][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.199013][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.207443][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.215889][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.224254][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.232670][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.241137][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.249571][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.257976][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.266416][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.633054][T32689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7345'.
[  965.649489][T24891] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  966.650066][T32710] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7347'.
[  966.818826][T32712] wlan0 speed is unknown, defaulting to 1000
[  966.928420][T32712] lo speed is unknown, defaulting to 1000
[  967.201888][T32720] netlink: 'syz.3.7350': attribute type 15 has an invalid length.
[  968.027457][T32730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7353'.
[  969.234688][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  969.987521][T32753] netlink: 'syz.3.7361': attribute type 15 has an invalid length.
[  970.194612][    C0] net_ratelimit: 24790 callbacks suppressed
[  970.194635][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  970.209086][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  970.217649][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  970.226110][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  970.234591][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  970.243077][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  970.251572][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  970.259993][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  970.268469][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  970.280088][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.273233][  T310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7369'.
[  971.727089][  T325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7372'.
[  971.767749][  T325] chnl_net:caif_netlink_parms(): no params data found
[  971.860948][  T331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7371'.
[  972.149650][  T345] IPv6: NLM_F_CREATE should be specified when creating new route
[  972.490532][  T349] tun0: tun_chr_ioctl cmd 1074025675
[  972.517824][  T349] tun0: persist disabled
[  972.818695][  T361] netlink: 'syz.4.7380': attribute type 1 has an invalid length.
[  972.848658][  T361] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7380'.
[  973.315304][  T370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7388'.
[  973.557215][  T371] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  973.812552][  T371] bond0 (unregistering): Released all slaves
[  974.140345][  T404] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7394'.
[  974.233235][  T406] ip6gretap0: entered promiscuous mode
[  974.243666][  T406] ip6gretap0: entered allmulticast mode
[  974.740517][  T421] netlink: 'syz.0.7401': attribute type 1 has an invalid length.
[  974.751598][  T421] netlink: 'syz.0.7401': attribute type 1 has an invalid length.
[  974.782147][  T422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7400'.
[  974.898798][  T422] bond5: entered promiscuous mode
[  975.047413][T32641] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  975.153044][  T432] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  975.193039][  T437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7403'.
[  975.204649][    C1] net_ratelimit: 25944 callbacks suppressed
[  975.204674][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.219073][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.227456][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.235867][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.244244][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.252681][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.261162][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.269590][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.277999][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.286446][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.306095][  T432] bond6: (slave lo): Enslaving as an active interface with an up link
[  975.396258][  T440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7404'.
[  975.637715][  T446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7405'.
[  976.112319][  T455] xt_cgroup: path and classid specified
[  976.594636][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  976.666574][  T464] netlink: 'syz.1.7412': attribute type 12 has an invalid length.
[  977.088187][ T1326] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  977.128240][ T1326] netdevsim netdevsim3 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0
[  977.182749][ T1326] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  977.692087][  T498] SET target dimension over the limit!
[  977.949941][  T504] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  978.514949][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  979.298765][  T557] netlink: 'syz.2.7435': attribute type 21 has an invalid length.
[  979.348975][  T557] IPv6: NLM_F_CREATE should be specified when creating new route
[  979.387825][  T557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  979.395212][  T557] IPv6: NLM_F_CREATE should be set when creating new route
[  979.402551][  T557] IPv6: NLM_F_CREATE should be set when creating new route
[  979.409861][  T557] IPv6: NLM_F_CREATE should be set when creating new route
[  979.537907][  T561] netlink: 'syz.3.7436': attribute type 21 has an invalid length.
[  979.560081][  T561] IPv6: NLM_F_CREATE should be specified when creating new route
[  979.572245][  T561] __nla_validate_parse: 3 callbacks suppressed
[  979.572265][  T561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7436'.
[  979.606052][  T561] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7436'.
[  979.641623][  T562] netlink: 'syz.3.7436': attribute type 21 has an invalid length.
[  980.214464][    C1] net_ratelimit: 25328 callbacks suppressed
[  980.214488][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  980.228916][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  980.237439][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  980.245852][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  980.254284][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  980.262720][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  980.271120][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  980.279588][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  980.288054][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  980.296459][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  982.168354][  T599] syzkaller0: entered promiscuous mode
[  982.188851][  T599] syzkaller0: entered allmulticast mode
[  982.776954][  T612] netdevsim netdevsim1 
: renamed from netdevsim0 (while UP)
[  982.918746][  T619] netlink: 59 bytes leftover after parsing attributes in process `syz.1.7452'.
[  982.981947][  T623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7452'.
[  983.035609][  T623] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7452'.
[  983.381883][  T634] netlink: 'syz.1.7455': attribute type 15 has an invalid length.
[  983.767069][  T648] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma?
[  984.019803][  T663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7459'.
[  984.271530][  T668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7465'.
[  984.409882][  T668] 8021q: adding VLAN 0 to HW filter on device bond7
[  984.699250][  T679] netlink: 'syz.1.7467': attribute type 15 has an invalid length.
[  984.887645][  T681] syzkaller0: entered promiscuous mode
[  984.900298][  T681] syzkaller0: entered allmulticast mode
[  984.938215][  T686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7470'.
[  985.009222][T12946] lec:lec_start_xmit: lec0:No lecd attached
[  985.072642][  T688] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7470'.
[  985.224474][    C1] net_ratelimit: 26623 callbacks suppressed
[  985.224498][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  985.239140][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  985.247582][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  985.256065][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  985.264622][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  985.273022][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  985.281514][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  985.289966][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  985.299544][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  985.308065][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  985.686543][  T695] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000
[  990.116537][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms
[  990.124652][    C1] lec:lec_tx_timeout: lec0
[  990.234559][    C1] net_ratelimit: 30824 callbacks suppressed
[  990.234584][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  990.248940][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  990.257252][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  990.265650][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  990.273970][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  990.282400][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  990.292719][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  990.301179][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  990.309557][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  990.318002][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  990.528521][T24883] wlan0 speed is unknown, defaulting to 1000
[  990.535397][T24883] syz1: Port: 1 Link DOWN
[  990.864018][  T726] syzkaller0: entered promiscuous mode
[  990.949334][   T30] audit: type=1107 audit(1773894829.900:20): pid=729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  990.952264][   T30] audit: type=1107 audit(1773894829.900:21): pid=729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  991.597630][  T740] netlink: 'syz.1.7480': attribute type 15 has an invalid length.
[  993.496053][  T748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7483'.
[  993.551117][ T1298] lec:lec_start_xmit: lec0:No lecd attached
[  993.660615][  T750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7484'.
[  993.959894][  T762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7484'.
[  995.248852][    C1] net_ratelimit: 29808 callbacks suppressed
[  995.248875][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  995.263196][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  995.271534][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  995.279967][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  995.288360][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  995.296769][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  995.305250][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  995.313527][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  995.321900][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  995.330269][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  996.552191][  T771] netlink: 'syz.0.7488': attribute type 1 has an invalid length.
[  996.612317][  T771] syzkaller0: entered promiscuous mode
[  996.625809][  T771] syzkaller0: entered allmulticast mode
[  996.809024][  T774] mac80211_hwsim hwsim84 ÿ
: renamed from wlan1 (while UP)
[  997.019440][  T782] netlink: 'syz.4.7491': attribute type 83 has an invalid length.
[  997.084182][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  997.572876][  T795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7494'.
[  997.621123][  T798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7495'.
[  998.233199][  T813] netlink: 'syz.2.7498': attribute type 15 has an invalid length.
[  999.008131][  T830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7506'.
[  999.074514][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5520 ms
[  999.082615][    C1] lec:lec_tx_timeout: lec0
[  999.220184][  T839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7508'.
[  999.276535][  T840] syzkaller1: entered promiscuous mode
[  999.307483][  T844] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7507'.
[  999.329222][  T840] syzkaller1: entered allmulticast mode
[  999.360725][  T844] netlink: 'syz.1.7507': attribute type 1 has an invalid length.
[  999.448241][  T844] netlink: 'syz.1.7507': attribute type 2 has an invalid length.
[  999.498066][  T845] vlan2: entered allmulticast mode
[  999.536939][  T840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7509'.
[  999.557545][  T839] netlink: 'syz.3.7508': attribute type 21 has an invalid length.
[  999.583287][  T845] bridge4: entered allmulticast mode
[  999.639539][  T848] bridge4: port 1(erspan0) entered blocking state
[  999.675734][  T848] bridge4: port 1(erspan0) entered disabled state
[  999.709983][  T848] erspan0: entered allmulticast mode
[  999.758492][  T848] erspan0: entered promiscuous mode
[  999.831957][  T839] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7508'.
[  999.944067][  T858] netlink: 'syz.4.7511': attribute type 15 has an invalid length.
[ 1000.254621][    C0] net_ratelimit: 25939 callbacks suppressed
[ 1000.254648][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1000.269041][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1000.277446][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1000.285824][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1000.294220][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1000.302656][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1000.311044][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1000.319466][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1000.327892][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1000.336366][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1000.689936][  T870] netlink: 'syz.4.7516': attribute type 9 has an invalid length.
[ 1000.718433][  T877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7518'.
[ 1000.985076][  T886] netlink: 'syz.1.7521': attribute type 5 has an invalid length.
[ 1001.096152][  T893] netlink: 'syz.2.7522': attribute type 1 has an invalid length.
[ 1001.247713][  T897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7522'.
[ 1001.299743][  T902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7522'.
[ 1001.346712][  T893] bond0: entered promiscuous mode
[ 1001.359550][  T893] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1001.442885][  T902] bond0: entered allmulticast mode
[ 1001.459393][  T907] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add()
[ 1001.477275][  T900] IPVS: Unknown mcast interface: vcan0
[ 1001.542538][  T893] bond0: (slave bridge2): making interface the new active one
[ 1001.587221][  T893] bridge2: entered promiscuous mode
[ 1001.600084][  T893] bridge2: entered allmulticast mode
[ 1001.711735][  T916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7525'.
[ 1001.748437][  T893] bond0: (slave bridge2): Enslaving as an active interface with an up link
[ 1001.821800][  T916] syz_tun (unregistering): left allmulticast mode
[ 1001.851034][  T916] bond0: (slave syz_tun): Releasing backup interface
[ 1002.070544][  T919] netlink: 'syz.2.7526': attribute type 15 has an invalid length.
[ 1002.680847][  T944] netlink: 324 bytes leftover after parsing attributes in process `syz.3.7531'.
[ 1003.393179][  T955] x_tables: duplicate underflow at hook 2
[ 1003.828807][  T965] wlan0 speed is unknown, defaulting to 1000
[ 1003.837142][  T965] lo speed is unknown, defaulting to 1000
[ 1004.239536][  T978] netlink: 'syz.1.7538': attribute type 15 has an invalid length.
[ 1004.565312][  T974] netlink: 'syz.4.7539': attribute type 1 has an invalid length.
[ 1005.264594][    C0] net_ratelimit: 23270 callbacks suppressed
[ 1005.264620][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1005.279004][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1005.287510][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1005.296035][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1005.304388][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1005.312736][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1005.321191][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1005.329654][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1005.338085][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1005.346505][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1005.693947][  T996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7544'.
[ 1006.196154][T32639] ÿ
: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1008.596184][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1010.274595][    C0] net_ratelimit: 32677 callbacks suppressed
[ 1010.274619][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.289114][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.297502][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.305860][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.314196][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.322683][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.331005][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.339357][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.347705][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1010.356160][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.284628][    C0] net_ratelimit: 35239 callbacks suppressed
[ 1015.284653][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.298963][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.307301][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.315704][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.323988][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.332317][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.340745][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.349198][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.357507][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.365916][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1015.738407][ T1010] netlink: 192 bytes leftover after parsing attributes in process `syz.2.7548'.
[ 1015.933709][ T1020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7551'.
[ 1016.071869][ T1017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7550'.
[ 1016.747726][ T1030] netlink: 'syz.0.7552': attribute type 15 has an invalid length.
[ 1016.762944][ T1039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7553'.
[ 1016.795557][ T1038] netlink: 'syz.1.7555': attribute type 1 has an invalid length.
[ 1016.923799][ T1038] bond6: entered promiscuous mode
[ 1016.961193][ T1038] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1017.000786][ T1039] bridge5: port 1(veth0_to_bond) entered blocking state
[ 1017.046577][ T1039] bridge5: port 1(veth0_to_bond) entered disabled state
[ 1017.093426][ T1039] veth0_to_bond: entered allmulticast mode
[ 1017.130920][ T1039] veth0_to_bond: entered promiscuous mode
[ 1017.405383][ T1047] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1017.419589][ T1047] bond6: (slave vcan0): The slave device specified does not support setting the MAC address
[ 1017.443826][ T1047] bond6: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[ 1017.506984][ T1047] bond6: (slave vcan0): making interface the new active one
[ 1017.514623][ T1047] vcan0: entered promiscuous mode
[ 1017.521970][ T1047] bond6: (slave vcan0): Enslaving as an active interface with an up link
[ 1017.947222][ T1084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7565'.
[ 1017.987867][ T1082] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7565'.
[ 1018.016928][ T1082] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7565'.
[ 1018.034680][ T1086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7566'.
[ 1018.054552][ T1082] netlink: 'syz.2.7565': attribute type 5 has an invalid length.
[ 1018.070382][ T1082] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7565'.
[ 1018.092108][ T1088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7566'.
[ 1020.098350][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1020.110031][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1020.120221][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1020.128658][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1020.137258][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1020.294508][    C0] net_ratelimit: 22214 callbacks suppressed
[ 1020.294530][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1020.308995][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1020.317413][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1020.325831][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1020.334239][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1020.342737][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1020.351174][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1020.359632][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1020.368074][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1020.378892][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1021.206817][ T1141] wlan0 speed is unknown, defaulting to 1000
[ 1021.246864][ T1141] lo speed is unknown, defaulting to 1000
[ 1022.083246][ T1186] netlink: 'syz.1.7585': attribute type 12 has an invalid length.
[ 1022.195365][   T51] Bluetooth: hci2: command tx timeout
[ 1022.650385][ T1200] __nla_validate_parse: 2 callbacks suppressed
[ 1022.650409][ T1200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7586'.
[ 1022.758569][ T1200] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1022.877647][ T1200] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1023.031076][ T1206] team0: Device ip6gre3 is of different type
[ 1023.187731][ T1141] chnl_net:caif_netlink_parms(): no params data found
[ 1023.473678][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1023.484186][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1023.492441][ T1141] bridge_slave_0: entered allmulticast mode
[ 1023.501107][ T1141] bridge_slave_0: entered promiscuous mode
[ 1023.512795][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1023.520980][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1023.528886][ T1141] bridge_slave_1: entered allmulticast mode
[ 1023.538192][ T1141] bridge_slave_1: entered promiscuous mode
[ 1023.592301][ T1141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1023.608273][ T1141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1023.658790][ T1141] team0: Port device team_slave_0 added
[ 1023.669470][ T1141] team0: Port device team_slave_1 added
[ 1023.717323][ T1141] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1023.724698][ T1141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1023.753118][ T1141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1023.766944][ T1141] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1023.773944][ T1141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1023.808423][ T1141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1023.882560][ T1141] hsr_slave_0: entered promiscuous mode
[ 1023.890164][ T1141] hsr_slave_1: entered promiscuous mode
[ 1023.897879][ T1141] debugfs: 'hsr0' already exists in 'hsr'
[ 1023.903684][ T1141] Cannot create hsr debugfs directory
[ 1024.195035][T24884] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI
[ 1024.207092][T24884] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267]
[ 1024.215728][T24884] CPU: 1 UID: 0 PID: 24884 Comm: kworker/1:9 Not tainted syzkaller #0 PREEMPT(full) 
[ 1024.225225][T24884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1024.235329][T24884] Workqueue: events l2cap_info_timeout
[ 1024.241152][T24884] RIP: 0010:kasan_byte_accessible+0x12/0x30
[ 1024.247142][T24884] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e
[ 1024.266918][T24884] RSP: 0018:ffffc9000214f828 EFLAGS: 00010202
[ 1024.273055][T24884] RAX: dffffc0000000000 RBX: ffffffff8973f0b8 RCX: 0000000080000001
[ 1024.281096][T24884] RDX: 0000000000000000 RSI: ffffffff8973f0b8 RDI: 000000000000004c
[ 1024.289170][T24884] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 1024.297182][T24884] R10: dffffc0000000000 R11: ffffffff8aadd690 R12: 0000000000000000
[ 1024.305196][T24884] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001
[ 1024.313207][T24884] FS:  0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000
[ 1024.322180][T24884] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1024.328801][T24884] CR2: 00007f29a38044e8 CR3: 000000005e9ea000 CR4: 00000000003526f0
[ 1024.336819][T24884] Call Trace:
[ 1024.340130][T24884]  <TASK>
[ 1024.343106][T24884]  __kasan_check_byte+0x12/0x40
[ 1024.348075][T24884]  lock_acquire+0x79/0x2e0
[ 1024.352576][T24884]  lock_sock_nested+0x48/0x100
[ 1024.357453][T24884]  ? l2cap_sock_ready_cb+0x46/0x160
[ 1024.362778][T24884]  l2cap_sock_ready_cb+0x46/0x160
[ 1024.367859][T24884]  l2cap_conn_start+0x779/0xff0
[ 1024.372769][T24884]  ? __pfx_l2cap_conn_start+0x10/0x10
[ 1024.378192][T24884]  ? l2cap_info_timeout+0x60/0xa0
[ 1024.383263][T24884]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1024.388395][T24884]  ? __pfx___mutex_lock+0x10/0x10
[ 1024.393470][T24884]  l2cap_info_timeout+0x68/0xa0
[ 1024.398374][T24884]  ? process_scheduled_works+0xa25/0x1830
[ 1024.404163][T24884]  process_scheduled_works+0xb02/0x1830
[ 1024.409776][T24884]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1024.415810][T24884]  ? assign_work+0x3d5/0x5e0
[ 1024.420447][T24884]  worker_thread+0xa50/0xfc0
[ 1024.425101][T24884]  kthread+0x388/0x470
[ 1024.429237][T24884]  ? __pfx_worker_thread+0x10/0x10
[ 1024.434389][T24884]  ? __pfx_kthread+0x10/0x10
[ 1024.439019][T24884]  ret_from_fork+0x51e/0xb90
[ 1024.443674][T24884]  ? __pfx_ret_from_fork+0x10/0x10
[ 1024.448920][T24884]  ? __switch_to+0xc7d/0x1450
[ 1024.453688][T24884]  ? __pfx_kthread+0x10/0x10
[ 1024.458321][T24884]  ret_from_fork_asm+0x1a/0x30
[ 1024.463631][T24884]  </TASK>
[ 1024.466788][T24884] Modules linked in:
[ 1024.472815][T24884] ---[ end trace 0000000000000000 ]---
[ 1024.519322][   T51] Bluetooth: hci2: command tx timeout
[ 1024.683706][ T1141] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1024.690964][T24884] RIP: 0010:kasan_byte_accessible+0x12/0x30
[ 1024.697561][T24884] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e
[ 1024.721951][ T1141] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1024.729665][T24884] RSP: 0018:ffffc9000214f828 EFLAGS: 00010202
[ 1024.750163][ T1141] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1024.774076][ T1141] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1024.785727][T24884] RAX: dffffc0000000000 RBX: ffffffff8973f0b8 RCX: 0000000080000001
[ 1024.816171][T24884] RDX: 0000000000000000 RSI: ffffffff8973f0b8 RDI: 000000000000004c
[ 1024.840481][T24884] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 1024.866489][T24884] R10: dffffc0000000000 R11: ffffffff8aadd690 R12: 0000000000000000
[ 1024.884354][T24884] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001
[ 1024.903049][T24884] FS:  0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000
[ 1024.916959][T24884] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1024.923804][T24884] CR2: 00005555889724e8 CR3: 0000000079906000 CR4: 00000000003526f0
[ 1024.932412][T24884] Kernel panic - not syncing: Fatal exception
[ 1024.939139][T24884] Kernel Offset: disabled
[ 1024.943565][T24884] Rebooting in 86400 seconds..