last executing test programs:

5m38.823486353s ago: executing program 3 (id=2642):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x400000000010, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x8, 0x4)
r2 = socket$unix(0x1, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xffe0}, {}, {0x8, 0x2}}}, 0x24}}, 0x0)

5m38.400772917s ago: executing program 3 (id=2647):
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x91}]}, 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x4}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffff85fd}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8}]}}]}, 0x50}}, 0x0)

5m38.255095725s ago: executing program 3 (id=2649):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x3e, 0x200, 0x70bd2d, 0x25dfdbfd, {0x4, 0x7c}, [@generic="71f718b08d578af31dc0c6ffa59a6df9a19893f10faaa75018ab26439622261381724ddfeb3152dbc30936f2c69846692e7dcbe42179f733a670903653bc231c531487aad2a234b46fb0a1d157922433d5be0b1982223562d4c8bec6ee29c5199f10639e4973fb94ddc21395f26239885ab97f0ceafc0d6321add0536730c5dfdbdc0b9b81a8a3d48cb90df9ed581f1b443297a3edb969"]}, 0xac}}, 0x0)

5m38.193664637s ago: executing program 3 (id=2650):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8915, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x750, 0x450, 0x450, 0x0, 0x290, 0x360, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r3)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002ab97000fbdbdf250f0000000e0001156e657464657673696d0000000f0002006e657464657673696d308d6a27fe0b00090000000600110002000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x200c0850)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe)
getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000040)=0x2)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..'])
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
openat$cgroup(r7, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f0000000080)={0x8, 'syz1\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a000100"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f0000000380)=[{{&(0x7f0000000500)=@isdn={0x22, 0x9, 0x0, 0x53}, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000003a40)=ANY=[@ANYBLOB="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"], 0x2b0}}], 0x1, 0x4805)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x20, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140))

5m38.066675711s ago: executing program 3 (id=2653):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x111, 0x4, 0x3a0, 0x0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg1\x00', 'lo\x00', {}, {}, 0x0, 0x158}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d3041818000100009500740000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0022b1dee0000012f400e6ff0e400058"}}}]}, 0x48}}, 0x20008080)

5m37.956716372s ago: executing program 3 (id=2656):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0x70b525, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x24040020}, 0x4000080)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0)

5m22.882313012s ago: executing program 32 (id=2656):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0x70b525, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x24040020}, 0x4000080)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2m30.64452426s ago: executing program 5 (id=4916):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0)
getsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000680), &(0x7f00000006c0)=0x4) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) (async)
write$cgroup_subtree(r0, 0x0, 0x4d)
r3 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10)
syz_emit_ethernet(0x66, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a92fb2", 0x0, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}}}}}}}, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000100)=""/197, &(0x7f0000000200)=0xc5) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) (async)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) (async)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) (async, rerun: 64)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x3, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async, rerun: 64)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@private}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000003c0)={'gre0\x00', <r9=>0x0, 0x10, 0x700, 0x5, 0x3, {{0x15, 0x4, 0x2, 0x36, 0x54, 0x68, 0x6, 0x2f, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}, {[@generic={0x86, 0x6, "c360ca2d"}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0xe, "3f0db8b13e7967b4cd44aa83"}, @timestamp_addr={0x44, 0xc, 0xe1, 0x1, 0x6, [{@broadcast, 0x3}]}, @rr={0x7, 0x7, 0xb1, [@loopback]}, @timestamp_prespec={0x44, 0x14, 0x3d, 0x3, 0x0, [{@remote, 0x7}, {@local, 0x3}]}]}}}}}) (rerun: 32)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240), 0xc, &(0x7f0000000600)={&(0x7f0000000480)=@updsa={0x170, 0x1a, 0x200, 0x70bd2b, 0x25dfdbfd, {{@in6=@loopback, @in=@broadcast, 0x4e20, 0x400, 0x4e22, 0x7, 0xa, 0xa0, 0xc0, 0x33, r6, r8}, {@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x4d6, 0x17}, @in=@loopback, {0x2, 0x3, 0x7fff, 0x9, 0x2, 0x2a9, 0x7, 0x6}, {0x3, 0x4400000000000000, 0x1, 0x1}, {0x20000, 0x9, 0x6}, 0x70bd25, 0x3501, 0xa, 0x6, 0x7, 0x92}, [@sec_ctx={0x24, 0x8, {0x20, 0x8, 0x1, 0x7, 0x18, "d8ab4fdc7b1a21c2d74dee606261ec4af9fb40cc0bfa6774"}}, @migrate={0x50, 0x11, [{@in=@private=0xa010100, @in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@empty, 0x3c, 0x1, 0x0, 0x3501, 0xa, 0xa}]}, @offload={0xc, 0x1c, {r9, 0x3}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000008}, 0x80)
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f00000000c0)={'ip6erspan0\x00', {0x2, 0x0, @empty}})

2m30.093687508s ago: executing program 5 (id=4922):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xfff)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000040)="9c65903a97a60a75af4b837037f85279dfcb797ba377b68602002d8085a558563aa21b5369d55731479aea272f077afe88c66537f1a8d23635cff519f94110e60fa57e40aa1f9ba09c3106ad99a7158a8047b9ab2b97b0f12224b6d743a3933c198695791abb1ae4c42dbbd57ab8ced915e87b8ab719f867a41ef3dc6b524a224e58b727a0deb9a38c36b4eb9b2b532b60dc4071659a08114342c2c08c9ba873320cd58dc56e62a9a535b857f34f48309fd30eba2f316222ee7982c0137b106182f51cfd1dc08b7afcaa84aabab53068525704a4f14a40f61109d784732092fb420ff9d8d76991ca7c45a4066c62e7a76029e03d23dbf1f860")
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, 0x8)

2m29.177161197s ago: executing program 5 (id=4931):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf}, 0x94)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f00000002c0)=@framed={{}, [@generic={0x40}]}, &(0x7f0000000300)='syzkaller\x00', 0x9, 0xd0, &(0x7f0000000340)=""/208}, 0x90)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0)

2m27.823430809s ago: executing program 5 (id=4936):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket(0x11, 0x3, 0x0)
setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r3=>0x0})
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r3, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="000302e8ffff000000002d3922ff65b4355e953d23d27c69e074889fa8e7ee962184588e5fd8c5ee00a7472916f510027afb3654f0", 0x18}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256e8be", 0xffe8}, {&(0x7f0000000140)="55f0e46e5a", 0x5}, {&(0x7f0000000540)="d6cbcbd01a9287bce454d54ecea0f66b7367fbf6880d06443c29d1e06a5aa68da2a864699d98950e5555ab", 0x2b}], 0x4}, 0x40011)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000240)={0x7, 0x7, 0x202, 0x1ff, 0x2, 0x9, 0x6, 0xa3d, r6}, 0x20)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000180)={r6, @in={{0x2, 0x4e23, @remote}}}, 0x84)
sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x7, &(0x7f00000000c0)="fa", 0x1)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000800)={0x4, {{0xa, 0x4e21, 0x1aef, @empty, 0x1}}, 0x1, 0x3, [{{0xa, 0x4e20, 0x4, @mcast2, 0x4}}, {{0xa, 0x4e20, 0xfffffff9, @mcast1, 0x29}}, {{0xa, 0x4e21, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x30}, 0xe}}]}, 0x210)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d800800010002"], 0x24}, 0x1, 0x5502000000000000}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xd, 0x4}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000)

2m27.184229682s ago: executing program 5 (id=4945):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x630, 0x1b8, 0x0, 0x428, 0x0, 0x0, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@ipv6={@mcast1, @local, [], [], 'xfrm0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x6, 0x72}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x2280], 0x4, 0x2}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x8000, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5, 0x8}, {}, {0x0, 0x1}, {}, {}, {0x8}, {0x1}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x5}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x3, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x80000000, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {0x0, 0x1}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {0x0, 0x3}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x1, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) (async, rerun: 64)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x34c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x4, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x31c, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x6}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0x6}}, @TCA_BASIC_ACT={0x4}, @TCA_BASIC_ACT={0x2e8, 0x3, [@m_gact={0x54, 0x18, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12f7, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x954, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x5a0, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0xd0, 0x14, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0xffe0}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8001}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xfff2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2ad, 0x80000001, 0x1, 0x9}}]}, {0x74, 0x6, "787a854051cb096c5356ce2a51df0f5c1bcc617468492651c7e42b431b613c10f67613a2209cef42220d4528f9c4de16ef9b65c674b38fe67c5f7dce839ab62113db9baaf88f466b333f2e31fee81d3c55200df20268d53cdd9302252d78096f8e5645a65b8be58b7d18733cc086bfdb"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd8, 0xc, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0x7}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x80}]}, {0x89, 0x6, "4364dcc00f88c8c2b187f853619aaed3f85d299949ee2ad71b7ac696ed2c41f5c65a4f2bc3148e771d2afde91ff71511a6f8741d99ebfd0e485accab1c20014f11dbbfe4586724558b74b37afcbe88dc7a6b0aebcfbf076b26bd6e3b31d28435a37886a8cef0c14f72551d748faacd44bb761af5ef33e9e659fc7cac1b4f349cf7ccbd7f6a"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xe8, 0x9, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xd}}]}, {0x8d, 0x6, "e8aa9a1c9fd221800a326fe61cfe55fd2dde73254b10965f013cd36ed2d3382a1bb0da6b5a3d53f4cf48a41ca70a5f4075545c7672e9639044ceb13b8f21ede88b8cc74d6d54079230e9a67e46b6313183d0c908a0426cdb615fa05260b1574c26d15d2d9da38724bf04562411ee9ab324787f0ea83fc7b353262ae19d8d4119b4fbdfe40f5e3441d3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x34c}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6002003800080000fe800000000000000000000000000000fe8000000000000000000000000000aa73000103000008"], 0x0) (async, rerun: 32)
r7 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r9, <r10=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x18}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080101000000000000000005000007060002408863000004000480090001007379343000000000050003002f"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) (async)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x4004001) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b402000000400000611178000000000085000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) (async, rerun: 32)
r11 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async, rerun: 32)
ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000000)) (async, rerun: 32)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r12, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)

2m26.909245138s ago: executing program 5 (id=4952):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000300)={0x1a, 0x2, 0xd, 0x10, 0x8, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x10)
getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x98}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x77f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6ca}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10008000}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x35, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xadb093008d8e070b}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r3, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
accept4$llc(r0, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000003c0)=0x10, 0x80000)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00'})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}]}]}, 0x4c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r7=>0x0, 0x20, 0x1, 0x7ff, 0xfffffffb, {{0x1a, 0x4, 0x1, 0x5, 0x68, 0x67, 0x0, 0x3, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x64, 0x1, 0x9, [{@rand_addr=0x64010100, 0x5}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@broadcast, 0x1}]}, @rr={0x7, 0xb, 0xfc, [@loopback, @loopback]}, @timestamp_addr={0x44, 0x24, 0x71, 0x1, 0xf, [{@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0xa}, {@multicast1, 0x2}]}]}}}}})
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r9=>0x0})
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="000000eaffffe8aaa26a8b8b8e3f8ffaffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000001"], 0x48)
bind$packet(r8, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x6, 0x6, @remote}, 0x14)
sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@ipv6_getnexthop={0x24, 0x6a, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)

2m11.833446498s ago: executing program 33 (id=4952):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000300)={0x1a, 0x2, 0xd, 0x10, 0x8, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x10)
getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x98}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x77f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6ca}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10008000}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x35, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xadb093008d8e070b}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r3, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
accept4$llc(r0, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000003c0)=0x10, 0x80000)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00'})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}]}]}, 0x4c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r7=>0x0, 0x20, 0x1, 0x7ff, 0xfffffffb, {{0x1a, 0x4, 0x1, 0x5, 0x68, 0x67, 0x0, 0x3, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x64, 0x1, 0x9, [{@rand_addr=0x64010100, 0x5}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@broadcast, 0x1}]}, @rr={0x7, 0xb, 0xfc, [@loopback, @loopback]}, @timestamp_addr={0x44, 0x24, 0x71, 0x1, 0xf, [{@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0xa}, {@multicast1, 0x2}]}]}}}}})
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r9=>0x0})
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="000000eaffffe8aaa26a8b8b8e3f8ffaffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000001"], 0x48)
bind$packet(r8, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x6, 0x6, @remote}, 0x14)
sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@ipv6_getnexthop={0x24, 0x6a, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)

46.619746083s ago: executing program 0 (id=6156):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10)
bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async)
bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)

46.404485883s ago: executing program 0 (id=6160):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6cbed115ba0000100001c7910000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c000a800500080004000000"], 0x38}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6cbed115ba0000100001c7910000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c000a800500080004000000"], 0x38}}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f0000000000)) (async)

46.328260155s ago: executing program 0 (id=6162):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffd2, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB="d8259bc399850a6e07fefc8029f7a3b89ff758047d2b7df4f6f6a581ceb6983e32b856c5a68bf7f82aa28e41160336bfa621340cc4b9049cd86315023f8dd854290903269fa3c8e5bcb951f5e41c58c707a478636b228fff471b0512914e6fe9fda86bb65dc381416bdac833a4400a3f0d18c6dd417fd75fcc1b4dc7d26ee8f6151d7e8f74d5a259bb36d08ccdfdcf1f7bafe655cd91e27538ee46e10d45c7c5166ccbbb5c8ab4fc1076f61225139ea8afe7d854ba6e5c06796d1f", @ANYRESOCT=r0], 0x44}, 0x1, 0x0, 0x0, 0x40080c4}, 0x2004c084)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$inet(r2, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000000c0)="fb43d3958653c4", 0x7}], 0x1}}], 0x2, 0x4044805)
splice(r1, 0x0, r2, 0x0, 0x8000000000025a5, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x2, 0x7, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xbf2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xed68}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

45.293094826s ago: executing program 0 (id=6174):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffdd0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

44.316699397s ago: executing program 0 (id=6178):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4040000)
r2 = socket$inet(0x2, 0x5, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)={0x538, 0x12, 0x100, 0x70bd2d, 0x25dfdbfd, {0x2c, 0x5, 0x5, 0x2, {0x4e24, 0x4e20, [0x8, 0x4, 0x40, 0x4], [0x8001, 0x7, 0x7, 0x40000], r1, [0x9, 0x2]}, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x90, 0x1, "a4d3fac4b9a3e815be84e8ff24c609fe677bd15229f3bb6e0a45dbe1224b41df152297d8727cff6dd14db49176e4384e9f2c57c52f336cc8dbf81f6731843763c6a70e76aa678247f3490a9d0b87393f8742a334f1b02677657a31abe95363ca14fbc9899961f24938ce31914cd289f15d8fc25155e6edc5ede074fbb5344ca5b0ec6505787a7d4ee508798a"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "ebbc5347bf1c2722c155ee2b0c885c3f05328d5f287182f4964347f69a300f99058071a40600f75797f7329c81"}, @INET_DIAG_REQ_BYTECODE={0xe0, 0x1, "30dfeac405c5cdfdeb1aac3f85b9a9cf2e82dae582449e95884910126776ac458544b3da8fe9332e956ddc9ae00fd0ed16b7dd11a3ca692bc7f289103b0ae45a7dbab89df99c8c9e6030a65cd159799341c9adebf22c254d75d46d41c6e82b3f03052819990e8bd5ee051079555fa79b88232f20241e448e9d5128d6650e6c2d97f43c73eae909ce9d250522282e2a3c94cc48897a6b1d6f7fbe5168b636d52b7203d8532e30e9f213fa1ae2f58de160683a2774a61fedda4fba74c753891e1f86fc407c0611727a5ece119ec9d1161754b5255146a2891be7f0e927"}, @INET_DIAG_REQ_BYTECODE={0x3c, 0x1, "9d1a93fa4b521f9e5081111fea172132fec56c797bff72b41faed91f65df945f228cb0143e9fb08ac28123b011141fd7a5a4ea870a7ae17d"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "6848366cc33a85ddb186e93d9f7557349ae97bc7a62f16d80f78f0781b8a015abd42b7a159109dd11a9581c5e15f6db5bc657a386c0c97741b72a2711e0e202b8164f6faa4f883e91dff34ffc156e3c79e3c0a8afb9d88b701037d8f6d05ea9770456484748f858a073b54b7db5510"}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "57f98d4929c9d81dede8ce25a98acc717a8fe3787d25cc390860c8e6e00e1d2e10533433f2103d7aceff5d60d50c75283895d1139e5aa01e18b8518b4fd7399c6d"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "ac3f7b7e999ca96e5ce4ae115526782ccbd6102f9d7b9e184b3fe49eb5e9b34c4a9bb94c096b6bcdf7fdc64e886411ae712a754bcd594d0300acca72ec553baee629288c916ebcad1e741ff5a0424f22b255cc492f8470592e1929b0e939e32842d103b65c0b6c705eea770c724087897e9bfba560be390e3951433953835cd81bb93b9d95a62a80fe390a838fc8b2282ac7de4fae5c4a793e428e0b322e129c766e9b680c51179a732ecc1e24dd9e5d9f3df2004f4d57084e"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "90c1bfaf8daa3becac1acef659beef859a3196812a97d2947df897c804b8e6beebb5644863cd0ff9a72bb9e5413a446c659c226a888090f630936dc733233c75bfaf8b464f46c8c3c122a5"}, @INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "e8d77b0f4be12523d97a532dcfa68e2e62a001823276cecd483531f798d0cca8d92bfb218631df12ece4d81609fd2c6437904afc480ed6531472262841fef3047ffc417c41b6c00350a89007e68a6af04131ccd182cc9e0353796b494f3abaf4482de925e95ad1d8eadae9e9c092ee61a9e37b8f05834aea2378f0f4c3160480882dcd5b743a4b140708b4eb01848f4ba12c374697e4c80eb4c41f3f921b6cb112cda236528719bdca8a07db961556b9e7a098b04206efb019ebafd4e3"}, @INET_DIAG_REQ_BYTECODE={0x79, 0x1, "6bf3257459b8b14211cc6161a4a952c2028f8dcd39767b80e603ece68042982ce6a0d899f545b470e645b7d4da6b87badbcde5146abf19f7cf6e77f35014bf7bc99ff94605181b33860ae58f01aad0a5a1b9d6ae979d685eccabf573c837c368e8634194fcdd9b6a65eaa80d4776d9895cf793a708"}]}, 0x538}, 0x1, 0x0, 0x0, 0x4}, 0x4004)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000280)={0x0, 0xffffff1d, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x0)
connect$inet(r2, &(0x7f0000000680)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x6}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x94, 0x1a4, 0x80000000, 0x8050, 0x1, 0x7, '\x00', r1, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x9}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1d, 0xa, 0x9, 0x101, 0x420, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1, <r9=>0xffffffffffffffff}, 0x4)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0x9, 0x8}, 0xc)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x4018, r2}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xa, &(0x7f0000000400)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7d}, @map_idx={0x18, 0x5}, @map_idx={0x18, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000480)='GPL\x00', 0x4, 0x8, &(0x7f00000004c0)=""/8, 0x41000, 0x79, '\x00', r1, 0x0, r5, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xa, 0x4, 0x880}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000800)=[r6, r7, r8, r9, r10, r11], &(0x7f0000000840)=[{0x5, 0x4, 0xe, 0xa}, {0x5, 0x2, 0xc, 0xc}, {0x2, 0xfffffffd, 0xb, 0xb}, {0x3, 0x2, 0x10, 0x7}, {0x3, 0x5, 0x200, 0x4}, {0x5, 0x3, 0x6, 0xc}], 0x10, 0xd1}, 0x94)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2b}, @in6=@private2, {}, {0x0, 0x0, 0x0, 0x400}, {0x0, 0x31638d34}, 0x0, 0x4, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

44.106361157s ago: executing program 0 (id=6180):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x8}]}}]}, 0x3c}}, 0x20008000)
bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r2}, 0x8)
r3 = socket$inet(0x2, 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x4000)
sendto$inet(r3, &(0x7f00000002c0)="57ee696a90f26a78cc43080f68c0689a6aec451ee80de8b795e6a442fce1dc438b040168a7352ce32672838b90c5bf561b33379bde66de9f08c6d8e4cca76f1e79ca4ca29a6aca84718b478594e4d5ddc818718ff2c13ae44a8c0832896c552b35165bab09dc3484cc082313f6600ebb0aed4333ca44732716f814fe9c190d68f61925b9e9ecc85510014d61b6fc8558c2d676a8825ccdf773ee0e1fe93d97426b9aa24e29ce017e18b97c6d441287dd792aac1cd4654033d41a11f8179d7044830552806bb98b0fbeb1cc3e43a60bbafd03569cf488f136fae85c6b124576d25c0cc0f7d59ea7686125fc5be53b7e6884", 0xf1, 0x10, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x4}, 0x8)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={<r5=>0x0, 0xae46}, &(0x7f0000000040)=0xc)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x200480c9}, 0x20048000)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r8}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x152, &(0x7f00000006c0)={@link_local, @local, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@ipv6={0x86dd, @udp={0x1, 0x6, "7340bb", 0x118, 0x11, 0x0, @private2, @mcast2, {[@fragment={0x16, 0x0, 0x4, 0x1, 0x0, 0x3, 0x64}, @routing={0x2f, 0xa, 0x0, 0x6, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @routing={0x32, 0xc, 0x1, 0x9, 0x0, [@local, @remote, @dev={0xfe, 0x80, '\x00', 0x19}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @local]}, @fragment={0x3b, 0x0, 0x6, 0x0, 0x0, 0x18, 0x68}], {0x4e20, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "6329f38eec1e42f17af6cdf6c5f3461ee2ab1c0a84caa6ec", "d226001480dda06148b7c0e5093496cdeb5f86677fb25f2bb0e40e2391799142"}}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1daa0059be0e8100711019000000000097", @ANYRES16=r6, @ANYRES32=r6], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000500)={r5, 0x8cb}, &(0x7f0000000580)=0x8)

29.048112297s ago: executing program 34 (id=6180):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x8}]}}]}, 0x3c}}, 0x20008000)
bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r2}, 0x8)
r3 = socket$inet(0x2, 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x4000)
sendto$inet(r3, &(0x7f00000002c0)="57ee696a90f26a78cc43080f68c0689a6aec451ee80de8b795e6a442fce1dc438b040168a7352ce32672838b90c5bf561b33379bde66de9f08c6d8e4cca76f1e79ca4ca29a6aca84718b478594e4d5ddc818718ff2c13ae44a8c0832896c552b35165bab09dc3484cc082313f6600ebb0aed4333ca44732716f814fe9c190d68f61925b9e9ecc85510014d61b6fc8558c2d676a8825ccdf773ee0e1fe93d97426b9aa24e29ce017e18b97c6d441287dd792aac1cd4654033d41a11f8179d7044830552806bb98b0fbeb1cc3e43a60bbafd03569cf488f136fae85c6b124576d25c0cc0f7d59ea7686125fc5be53b7e6884", 0xf1, 0x10, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x4}, 0x8)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={<r5=>0x0, 0xae46}, &(0x7f0000000040)=0xc)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x200480c9}, 0x20048000)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r8}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x152, &(0x7f00000006c0)={@link_local, @local, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@ipv6={0x86dd, @udp={0x1, 0x6, "7340bb", 0x118, 0x11, 0x0, @private2, @mcast2, {[@fragment={0x16, 0x0, 0x4, 0x1, 0x0, 0x3, 0x64}, @routing={0x2f, 0xa, 0x0, 0x6, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @routing={0x32, 0xc, 0x1, 0x9, 0x0, [@local, @remote, @dev={0xfe, 0x80, '\x00', 0x19}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @local]}, @fragment={0x3b, 0x0, 0x6, 0x0, 0x0, 0x18, 0x68}], {0x4e20, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "6329f38eec1e42f17af6cdf6c5f3461ee2ab1c0a84caa6ec", "d226001480dda06148b7c0e5093496cdeb5f86677fb25f2bb0e40e2391799142"}}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1daa0059be0e8100711019000000000097", @ANYRES16=r6, @ANYRES32=r6], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000500)={r5, 0x8cb}, &(0x7f0000000580)=0x8)

2.255748462s ago: executing program 4 (id=6748):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000040)={0xf, 0xfff, 0x6, 0x7fffffff, 0xfffffa7d})
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000080)=@rose={'rose', 0x0}, 0x10)
bind$isdn(r0, &(0x7f00000000c0)={0x22, 0x2, 0x7f, 0x9}, 0x6)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0xce66, @bearer=@l2={'ib', 0x3a, 'vxcan1\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x44040)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), r0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0xc002)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0xa, 0x9, 0x2, 0x1ff, 0xf], 0x1, &(0x7f0000000380)=[{}, {}, {}, {}], 0x0, [{}]}, 0x88)
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}]}, 0x28}}, 0x8000)
ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000580)=0x5)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x220e0040}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x40044)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0)
sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xd0, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xafe}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48020}, 0x1000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000900)={'team0\x00', <r4=>0x0})
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000940), &(0x7f0000000980)=0x4)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000009c0)='io.stat\x00', 0x0, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a40)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r2, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x7f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x48004)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, 0x0, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_MASK={0x1c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
bind$xdp(r5, &(0x7f0000000c80)={0x2c, 0x3, r4, 0x39, r0}, 0x10)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, r2, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8895)
setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000dc0)={@private=0xa010100, @multicast1, 0xffffffffffffffff, "5663f65cb5a3126beaf29aed6e4444679c14acacad9b150b2373d1c57450293d", 0x3800000, 0x3a3, 0x1, 0x9}, 0x3c)
write$6lowpan_control(r5, &(0x7f0000000e00)='connect aa:aa:aa:aa:aa:11 1', 0x1b)
bind$rose(r5, &(0x7f0000000e40)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000e80)={r5})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000000fc0)={&(0x7f0000000ec0), 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x5c, r2, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20008040)

2.084469444s ago: executing program 4 (id=6751):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000500)=0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip_vti0\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040d1}, 0x40080d4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)

2.04905746s ago: executing program 1 (id=6753):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200025bd7000ffdbdf254b00000008000300030000000c00a70009000000000000000e00a900666972737404bb70f4a041464efded5b206e616d650000000e0001006e657464657673696d0000000f00020089442835aef6274f1b2700a5baf740ec1d032f15128eedc168b8"], 0x58}, 0x1, 0x0, 0x0, 0xa26f33bbcdc61d12}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r6, 0x0, 0x2}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf2503000000050021000000000005001300050000cb19590ed4000800110000000005001300080000000c00730007c1000000000000000500060000060002000000000008000b000400000008000000000000000000000000000000f14b519c91a930d75894f0d66851c59d4c5c24b85e9d9e551dea027385663c685ce54ebe873abdec76c1a828dad2143073a010361afb9c7f90c6f0bbc60f740bd9642cc8215e48721def03f6af0d7c2667a905c34322b8a99c14f2b74de4cefb46fa"], 0x6c}, 0x1, 0x0, 0x0, 0x801}, 0x811)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11002abd7000030000000f00200008000300", @ANYRES32=r8, @ANYBLOB="05002e0000000000"], 0x24}}, 0x0)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r10, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
sendto(r10, 0x0, 0x0, 0x80, &(0x7f0000001080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x20}}, 0x0)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e24, @dev}}, 0x0, 0x0, 0x16, 0x0, "2dc449fece8cb528c1167cda2ec7f88cbc48e94eaecf2995cac75d7361e1e25922ac1bb66c4e0a1035d63c4489380da2ba0b833b375af8b695f6c65b54b958488600fb374f7ca2a47000"}, 0xd8)

2.036478593s ago: executing program 4 (id=6754):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180), 0x4)
getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000080))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000380)={{0x2, 0x4e23, @multicast2}, {0x6, @multicast}, 0x68, {0x2, 0x4e24, @empty}, 'bond0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000feffffff0000000001000100180000008000200000000000000000009f000000000000020000000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

1.964252462s ago: executing program 7 (id=6755):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 64)
setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, 0x0, 0xfeac) (async, rerun: 64)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) (async)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r4)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r4], 0x378}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r6=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000004c0)={r6, 0x3, 0x3, "2a9a9e"}, 0xb)
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44) (async)
r7 = socket(0x2a, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000480)={'sit0\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x20, 0x20, 0x2f90, 0x5, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x66, 0x0, 0x81, 0x4, 0x0, @rand_addr=0x64010102, @empty}}}})
sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0x404c040) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x100, 0x0, 0x0, {[@mptcp=@generic={0xae, 0x2}]}}}}}}}}, 0x0)

1.914620947s ago: executing program 1 (id=6757):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xdd, 0x5, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1f8a7}]}}]}, 0x44}}, 0x20000082)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbf8ffffffbbaaaaaaaaaa3e08004500001c000300ac1414aa0d996b78fffe0009e9ff00000010000000a0"], 0x0)
setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0xf}, {0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x0, {[0xfffffff9, 0xffffff0e, 0xa, 0x3, 0x4, 0x7, 0x8, 0x3]}}, 0x5c)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94)
unshare(0x100)

1.856931742s ago: executing program 4 (id=6758):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
recvmmsg(r1, &(0x7f0000001e00)=[{{&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000640)=""/200, 0xc8}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f0000001ec0)=""/183, 0xb7}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000580)=""/59, 0x3b}, {&(0x7f0000001800)=""/212, 0xd4}], 0x7, &(0x7f00000005c0)=""/47, 0x2f}, 0x100}, {{&(0x7f0000001980)=@nfc, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000780)=""/81, 0x51}, {&(0x7f0000001a80)=""/96, 0x60}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/189, 0xbd}], 0x4, &(0x7f0000001d00)=""/236, 0xec}, 0x401}], 0x2, 0x120, &(0x7f0000001e80)={0x0, 0x3938700})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x2, 0x0, &(0x7f0000000000)="259a", 0x0, 0xf11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r3=>0x0, 0x0, 0x1, 0xb, 0x22e, 0x48, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x700, 0x7, 0x9}})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6, @remote}, 0x10)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x13, {0x0, "fea22255b36d2a6f2096c248b30c"}}]}, 0x30}}, 0x0)
socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0xfffffffffffffc99)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x1f4, 0x24, 0x0, &(0x7f0000000a80)="ff410800b083dcc1010b3efc88643acd3aaf0ae90021bd21762ae38f0000000000000053", 0x0, 0x2fe, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r4, 0xa11c}, 0x8)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x8200}}, 0x20}, 0x1, 0x0, 0x0, 0x4004050}, 0x44005)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xa010100}]}, 0x1c}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc)
setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4)

1.801695793s ago: executing program 2 (id=6759):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockname$packet(r2, 0x0, &(0x7f0000000000))
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r3, 0x29, 0x3e, 0x0, &(0x7f0000000040))
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000040)={0x0, 0xffffffffffffffc0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES8, @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0)

1.798840979s ago: executing program 6 (id=6760):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
getpeername(r1, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpeername$unix(r2, &(0x7f00000000c0), &(0x7f0000000040)=0x6e)
bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e22, 0x2000000, @private1}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x80000000)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r5 = accept4(r3, 0x0, 0x0, 0x0)
sendto(r5, &(0x7f0000000200)='9', 0x1, 0x20008080, 0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c)
sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000000240)={0x0, 0xffffff3a, &(0x7f0000000100)={&(0x7f0000003180)=ANY=[], 0x588}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
recvfrom(r4, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f00000000c0)=0xb40, 0x4)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005000300000000000c0001800800014080ffffff05001400fa00000005000500020000000500010006"], 0x68}}, 0x0)

1.790078686s ago: executing program 7 (id=6761):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010200000000000000000000000005000500000000000900020073797a3000000000100003006269746d61703a706f7274000c00000005000100070000000500040000000000"], 0x54}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009000300040000000000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a65637400001400028008000140000000000500020000000000100001800a000100726564697200000008000b40000000000900010073797a300000000014000000110001"], 0xe8}}, 0x0)
socket$isdn(0x22, 0x2, 0x23)

1.627881979s ago: executing program 2 (id=6762):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000002c0)=0x10)
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000080)=0x4)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x60, 0x0, 0x1, 0xfff, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x12)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/80, 0x50}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x44, 0x66, 0x4, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff1, 0xfff1}, {0xd, 0x8}, {0x1fffe, 0xa}}, [{0x8, 0xb, 0x10}, {0x8, 0xb, 0x7}, {0x8}, {0x8, 0xb, 0xffff2488}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004000f"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170002d17028008000500", @ANYRES32=r1, @ANYBLOB="08001f00", @ANYRES32=r1, @ANYBLOB="075ba59eb522457f35bfcc02d2a1f68cbda2c6e8dc83e50a116d15526cc2dfb149ba4a63f4e6755c2459986c11ebb75b60f3759c96d2e4af67b9e3ec1c524951242c2272fe7bd1d2a21d8de8d17d3fe92612ae05de8b75433b6b39817e1e"], 0x44}}, 0x4)

1.627234263s ago: executing program 1 (id=6763):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a5108000200104013"], 0x44}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=<r4=>0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100), 0x10)
sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000)
syz_genetlink_get_family_id$nl802154(0x0, r0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

1.556012487s ago: executing program 7 (id=6764):
r0 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64)
r1 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'xfrm0\x00'}) (async)
bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
listen(r1, 0x2) (async)
shutdown(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x3d0, 0x1398, 0x1398, 0x3d0, 0x1398, 0x3, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x2b8, 0x2e0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x8, 0x7c7, 0x5d, 0x2, 0x4, 0x2, 0x99, 0x0, 0x80, 0x78}, {0x8000000000000001}}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0xff000000, 0xffff00], 0x0, 0x8, 0x89, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500)
connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) (async)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140)=0x2, 0x4)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x14, 0x14, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) (async, rerun: 64)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0)

1.549197517s ago: executing program 6 (id=6765):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x2020) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000003b80))
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'lo\x00'}) (async)
unshare(0x26020480) (async)
r4 = socket(0x22, 0x3, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg(r5, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x30, 0x84, 0x1, "59766fe282f0381b5cc7a195cb5ade0d64bc2d9ad30419f432"}], 0x30}}], 0x2, 0x0) (async)
bind$vsock_stream(r5, &(0x7f0000000740), 0x10) (async)
r6 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x277963f4935cfbf9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0xc8ed, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 64)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) (async, rerun: 64)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', <r10=>0x0, 0x29, 0x5, 0x4, 0x4, 0x1, @loopback, @mcast2, 0x8000, 0x8, 0x4, 0x8}})
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@ll={0x11, 0x6, r10, 0x1, 0x80, 0x6, @broadcast}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186c6e8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x113}, {&(0x7f00000000c0)="0a985d78", 0x4}], 0x3}, 0x0)

1.500451944s ago: executing program 4 (id=6766):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x31, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf25260000000c00018008000100", @ANYRES64=r4], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4000080)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffb, {0x0, 0x0, 0x0, r6, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x24004000)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r5, @ANYBLOB="08001b"], 0x30}}, 0x0)

1.433621864s ago: executing program 1 (id=6767):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1060310}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xb, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
write$tun(r0, &(0x7f0000000100)={@val={0x0, 0xa01}, @val={0x2, 0x1, 0x8, 0x7fff, 0x938, 0x5}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @private2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mcast2}}, 0x42)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000180)=0x7, 0x4)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10)
r2 = socket(0x21, 0xf, 0x7f)
getpeername$ax25(r2, &(0x7f0000000200)={{0x3, @default}, [@default, @rose, @default, @netrom, @default, @bcast, @bcast, @netrom]}, &(0x7f0000000280)=0x48)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000002c0)=0xf1, 0x4)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'})
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000340)={'filter\x00', 0xfb, "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"}, &(0x7f0000000480)=0x11f)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r2)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000600)={&(0x7f00000004c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r4, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4880)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000640)={'mangle\x00', 0x0, [0x3, 0x7f, 0x58, 0x5, 0x2]}, &(0x7f00000006c0)=0x54)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000700)={<r6=>0x0, 0xf3, "b5c6554deafdfa3c4b821b60ad0d008a394dcc4e71b8b90d7fef35ff2e13c1fd142140d21872eab2a146131b23ad721192556e445725576ef321dbab9b7027d52412911e944bf6ac2f36f5de793b2037e3a502b9c6f7f6e184907c105916ee7b3a4ff394379fdb87463a3989ed70de6a1ea2f28b09889584b4d06bd95d81485a3f8cd8c401086ffd630622465dfc9aa249d0cde36f1c5e753f7f04511ae320565a5aff92e674589838c4d0fa8e8ee66d4121f89f37a7959947de4892e50317ef782ad4bb72eee4e87aa460d6e15ec60cd9cb164fdd0cdb7473db909b28ba755c87614bb8c8cf98fe60c7e879b6787de9e284d8"}, &(0x7f0000000800)=0xfb)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000840)={r6, 0x2c2, 0x30, 0x6, 0x1}, &(0x7f0000000880)=0x18)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xb8, 0x13, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x65, 0x8, "829652ca6ea7acf524e32f3de57a11aed7cc7ca1519375a21f0351ccfadf54c01b1379f317e061c30c384fc7dfe53972ab884bfa4367b800ac38e85e9b1227fc878e8d1e2e87d676dec5c9faae5ad2732b2dd9fefc14ae54bd4f108a1b6ed6c6f3"}, @NFTA_OBJ_USERDATA={0x17, 0x8, "3b7265d98b1db22b41fc6e6ccaaad22aec17c4"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x400c884}, 0x8000)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mreqn(r8, 0x0, 0x32, &(0x7f0000000a40)={@private, @multicast2}, &(0x7f0000000a80)=0xc)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000ac0))
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000b00)={'filter\x00', 0x4}, 0x68)
r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTLQI(r9, 0x0, 0x3, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_buf(r10, 0x29, 0xcc, &(0x7f0000000c00)="cdcd7bb10d91f84b90030a1c3d9c10afdb050b0eaeeca3529267859b61bb79311a3ae0b65c31f32d2aaf511eafefec51c284b3ecd4af5013a707d9dd75e44c0a6739c997dab9bea36fa7b5784a561a7d4084f3811a1e6339288f555dfb8970e35e45a50702aa200b53391d4c91fac009d78211505b576f214aee81cf19582e069d7967a4f9667a865cdca915f0ccdfa2ce073dc2e79f6cfd2b644913c41de1dd5f86ea47c08931361910b6cbc650fb358dff4dde83d471353900f4068b07a65f835344c357cebfc87277053e2039f9b7d158db4fa76bd59df26abb", 0xdb)
getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000d00)={0x7, 0x7, 0x1}, &(0x7f0000000d40)=0x28)
socket$netlink(0x10, 0x3, 0x4)

1.376627934s ago: executing program 2 (id=6768):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x4, 0x8, 0x201}, 0x14}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 83)

672.214063ms ago: executing program 4 (id=6769):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x60480)
connect$netlink(r3, &(0x7f0000000300)=@unspec, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getpid()
ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000000)={0x4, 0x8, "3bf631", 0x8})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r7, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f00000001c0), 0x10)

671.712095ms ago: executing program 7 (id=6770):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001600156f00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="1400000000000000000000000031e18148008d2a8461afd0ca3d9d06dfc5b18d73791ffcaf"], 0x2c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001600156f00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="1400000000000000000000000031e18148008d2a8461afd0ca3d9d06dfc5b18d73791ffcaf"], 0x2c}}, 0x0)
getpid() (async)
r4 = getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/mnt\x00')

624.764938ms ago: executing program 1 (id=6771):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000080000000000000a64000000060a0104000000000000000002000000e28161378d00002400028008000140000000000800024000000003080003400000000108000440fffdffff0900010073797a30000000000900020073797a32"], 0x8c}}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000ef25d2480a838fcb82eecf560e0013", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3000000040000100fcff07000400000001000000040048800c00018008001080040010800c000200000000000000000062ff2cba39b34c17c1791d69392475607f9fb1dfe9df12aba586c5a047bca3df54b6e3711f06d79fc802cf67399db59306c25685d3d7af3eaa5c94d745e29de2ccea1a1db76cb3eae138b39aa5be7e999ad33eeb3935dd7ef179f76a4ec5cad0723da973d7fd4098826674fefe459afac19bd69a1cf6a9f85c9315eb3e59e809bb122e64710565d5773cd4f682895696e0c57a1b9a475217c930413cff5e7868109b334949b46eac851490eb0f83f44d33a8d2e6e58653f3bc6b"], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x100, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006c000000720a00ff00000000730a9fff00000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000101400000000000000000000000000000000cd0c05122000"], 0x18}, 0x1, 0x0, 0x0, 0x4000842}, 0x1)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r9, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f0000000600)={0x8, 0xb, 0x0, 0x4, 0x0, 0xfe, 0x4}, 0xc)
sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="eb03fd00", @ANYRES16, @ANYBLOB="59e3000000000000000008000000100004800900050073797a3000000000"], 0x24}}, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getchain={0x3c, 0x66, 0x300, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x5, 0x8}, {0xffe0, 0xfff2}, {0xfff2, 0xfff1}}, [{0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x10000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000400)={{0x73, @empty, 0x4e24, 0x2, 'none\x00', 0x1, 0x81, 0x5d}, {@loopback, 0x4e21, 0x10000, 0x4, 0x7e1, 0x9}}, 0x44)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

488.172112ms ago: executing program 6 (id=6772):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0)=0xc8, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000001600)=ANY=[@ANYBLOB="850000001900000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

440.756505ms ago: executing program 2 (id=6773):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
bind(r0, &(0x7f0000000240)=@rc={0x1f, @any, 0x7a}, 0x80)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0xfffffff9, 0x25dfdbff, {0x0, 0x0, 0x74, 0x0, 0x24408, 0x55007}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xaacd}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x20000004)
bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r7, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x7c, 0x4a, 0x200, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async)
bind(r0, &(0x7f0000000240)=@rc={0x1f, @any, 0x7a}, 0x80) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0xfffffff9, 0x25dfdbff, {0x0, 0x0, 0x74, 0x0, 0x24408, 0x55007}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xaacd}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x20000004) (async)
bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
sendmsg$tipc(r7, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x7c, 0x4a, 0x200, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)

409.016731ms ago: executing program 7 (id=6774):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50)
sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000006c0)="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", 0x163}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a", 0x71}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09", 0xd6}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2090)
setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000600)=0x80, 0x4)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r2, &(0x7f0000006380)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x7, @private0, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000aa", @ANYRES32=0x0, @ANYBLOB="00000000ca685559b2c948d543f9263af9fbd24e79bb6a402de63d7cba349623fddbdd9e1903c727c5cbe51de3cb2b48f8b12394166a019c66e41d0cbd1c30c8eda9da"], 0x28}}], 0x1, 0x8044)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f0000000380)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x22a}, 0x28)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000000)={'wlan1\x00', 0x1ff})

363.285307ms ago: executing program 6 (id=6775):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c)
read$alg(r1, &(0x7f0000000dc0)=""/134, 0x86)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x400, 0x240, 0x240, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x128, 0x150, 0x0, {0x7a00000010000000}, [@common=@srh={{0x30}, {0x2b, 0x0, 0x2, 0xa, 0xda, 0x2880, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600)
r4 = socket(0x3a, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x40}}, 0x0)

204.324816ms ago: executing program 6 (id=6776):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880140001801000108004000f8005000300000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0)

203.887111ms ago: executing program 2 (id=6777):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {0x54}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0)
close(r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0)

176.637712ms ago: executing program 7 (id=6778):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x304)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})

104.064971ms ago: executing program 6 (id=6779):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) (async)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x20bbfb2b, 0xf2, 0x45ff, 0x9, 0xfffffffc, 0xb5, 0x10001, 0x2, 0x81}}}}]}, 0x58}}, 0x180c0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6)

28.500854ms ago: executing program 2 (id=6780):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x20, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e700000000f008001ffff2e1ffff8100632f0806", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r2, 0x1}, 0x1c}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/138, 0x8a}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

0s ago: executing program 1 (id=6781):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="170000000000000000840000c500000014010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00003dd4ff00"/28], 0x48)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', <r1=>0x0})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="e00cbd73001a000000000000a9a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a70700000000030600000000000000000000721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', <r4=>r1, 0x2f, 0x4, 0xfb, 0xff, 0x64, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x8000, 0x4, 0x80000001}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000480)={<r6=>0x0, 0x4a, "02f5d30b9c16ee5c96bb11f1e8f3d267d14cbae5311470bf84d8021dbc9600cdd5a741bd1d621fe86aaa605ac9ee99e4d878319b6d9da2b53f51dd11a2c19cebc9ccf630f4076d215b6f"}, &(0x7f0000000500)=0x52)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000540)=@assoc_id=r6, 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000120a09000000000000000000020000000900020073797a310000000008000440000000df8f3a0008000340000000011400000011000100"/88], 0x58}}, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_int(r8, 0x0, 0x17, &(0x7f00000001c0), &(0x7f0000000040)=0x3)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000000fd7d1934c1695ddb74cbd60a713a81232187c29135c8e904efa0ad6e8e78651f8fc5f783635f4afd1badb2086276db42f49e3c663c8b582f4ae75d1e45b3362d7b5d4b", @ANYRES16=r9, @ANYBLOB="000129bd7000fcdbdf25030000000500050000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x5)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r10, 0xc00, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r4, 0x1, 0x6, @multicast}, 0x10)

kernel console output (not intermixed with test programs):

799895][T25803] macsec0: entered promiscuous mode
[  520.807471][T25803] macsec0: entered allmulticast mode
[  520.827398][T25804] veth1_macvtap: entered allmulticast mode
[  520.855497][T25804] macsec0: left promiscuous mode
[  520.864826][T25804] macsec0: left allmulticast mode
[  520.870013][T25804] veth1_macvtap: left allmulticast mode
[  520.901014][T25803] macsec0: entered promiscuous mode
[  520.907612][T25803] macsec0: entered allmulticast mode
[  521.266148][T25827] netlink: 'syz.6.5605': attribute type 1 has an invalid length.
[  521.294777][T25827] netlink: 'syz.6.5605': attribute type 1 has an invalid length.
[  521.358131][T25827] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  521.424637][T25831] __nla_validate_parse: 13 callbacks suppressed
[  521.424654][T25831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5608'.
[  521.480862][T25831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5608'.
[  521.771756][T25849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5613'.
[  521.782834][T25849] netlink: 'syz.1.5613': attribute type 7 has an invalid length.
[  521.791924][T25849] netlink: 'syz.1.5613': attribute type 8 has an invalid length.
[  521.820790][T25849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5613'.
[  522.037904][T25853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5615'.
[  522.048263][T25853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5615'.
[  522.058321][T25853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5615'.
[  522.263295][T25873] IPv6: NLM_F_CREATE should be specified when creating new route
[  522.345291][T25875] netlink: 'syz.2.5622': attribute type 1 has an invalid length.
[  522.360399][T25878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5623'.
[  522.379966][T25878] netlink: 'syz.4.5623': attribute type 7 has an invalid length.
[  522.393732][T25878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5623'.
[  522.427024][T25875] 8021q: adding VLAN 0 to HW filter on device bond8
[  522.449167][T25876] bond8: (slave geneve2): making interface the new active one
[  522.459497][T25876] bond8: (slave geneve2): Enslaving as an active interface with an up link
[  522.472567][T16703] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  522.486010][T16703] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  522.498954][T16703] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  522.513702][  T122] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  522.695183][T25901] netlink: 380 bytes leftover after parsing attributes in process `syz.0.5627'.
[  522.852068][T25909] team0: Caught tx_queue_len zero misconfig
[  523.351564][T25943] netlink: 'syz.1.5638': attribute type 11 has an invalid length.
[  523.596772][T10137] net_ratelimit: 36 callbacks suppressed
[  523.596793][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  523.635870][T25953] tipc: Started in network mode
[  523.649885][T25953] tipc: Node identity 46871df7bd4c, cluster identity 4711
[  523.683460][T25953] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  523.705986][T25953] +
: renamed from syzkaller0
[  523.712320][T25953] tipc: Disabling bearer <eth:syzkaller0>
[  523.757913][ T3512] bond2: (slave bridge1): failed to get link speed/duplex
[  523.772990][T25963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  523.789797][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.810591][T25963] batadv_slave_0: Caught tx_queue_len zero misconfig
[  523.832863][T25967] validate_nla: 1 callbacks suppressed
[  523.832876][T25967] netlink: 'syz.6.5646': attribute type 1 has an invalid length.
[  523.846915][ T8571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.874981][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  523.923648][T25971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.942612][T25970] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  523.994475][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  524.021672][T25976] netlink: 'syz.6.5649': attribute type 12 has an invalid length.
[  524.054515][T25976] bond2: Unable to set down delay as MII monitoring is disabled
[  524.065507][T25976] bond2 (unregistering): Released all slaves
[  524.104010][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  524.228056][T16703] bond2: (slave bridge1): failed to get link speed/duplex
[  524.586606][T25996] policy can only be matched on NF_INET_PRE_ROUTING
[  524.586629][T25996] unable to load match
[  524.612951][T25998] macsec0: entered promiscuous mode
[  524.623213][T26002] netlink: 'syz.2.5658': attribute type 1 has an invalid length.
[  524.646695][T25999] macsec0: left promiscuous mode
[  524.651833][T25999] macsec0: left allmulticast mode
[  525.213085][T26042] bond2: entered promiscuous mode
[  525.231586][T26042] 8021q: adding VLAN 0 to HW filter on device bond2
[  525.551596][T26077] netlink: 'syz.2.5676': attribute type 1 has an invalid length.
[  525.828614][T26054] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.836501][T26054] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.009774][T26064] 8021q: adding VLAN 0 to HW filter on device bond2
[  526.020912][T26064] bond2: (slave sit2): The slave device specified does not support setting the MAC address
[  526.032664][T26064] bond2: (slave sit2): Error -95 calling set_mac_address
[  526.578799][T26127] siw: device registration error -23
[  526.598532][T26127] __nla_validate_parse: 11 callbacks suppressed
[  526.598552][T26127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5688'.
[  526.634437][T26128] netlink: 'syz.2.5689': attribute type 29 has an invalid length.
[  527.100469][T26142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5690'.
[  527.280049][T26137] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.287286][T26137] bridge0: port 2(bridge_slave_1) entered forwarding state
[  527.294877][T26137] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.302043][T26137] bridge0: port 1(bridge_slave_0) entered forwarding state
[  527.324968][T26178] Cannot find del_set index 3 as target
[  527.368124][T26137] 8021q: adding VLAN 0 to HW filter on device team0
[  527.529152][T26177] bridge7: the hash_elasticity option has been deprecated and is always 16
[  527.991419][T26215] netlink: 'syz.4.5706': attribute type 1 has an invalid length.
[  528.021314][T26215] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5706'.
[  528.208341][T26224] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5709'.
[  528.647663][T26243] net_ratelimit: 28 callbacks suppressed
[  528.647684][T26243] openvswitch: netlink: Message has 8 unknown bytes.
[  528.694573][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  528.726706][T26190] vxcan1 speed is unknown, defaulting to 1000
[  528.751139][T26243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5714'.
[  528.806037][T16703] bond2: (slave bridge1): failed to get link speed/duplex
[  528.907613][   T29] audit: type=1800 audit(1774117109.824:11): pid=26256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5719" name="memory.events" dev="tmpfs" ino=654 res=0 errno=0
[  528.946682][  T122] bond2: (slave bridge1): failed to get link speed/duplex
[  529.034677][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.119782][  T122] bond2: (slave bridge1): failed to get link speed/duplex
[  529.244208][  T122] bond2: (slave bridge1): failed to get link speed/duplex
[  529.265799][T26277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5724'.
[  529.364041][  T122] bond2: (slave bridge1): failed to get link speed/duplex
[  529.536365][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  529.597666][T26289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5726'.
[  529.665738][T10143] bond2: (slave bridge1): failed to get link speed/duplex
[  530.038398][T26305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5731'.
[  530.412116][T26318] ip6tnl0: Caught tx_queue_len zero misconfig
[  530.430311][T26319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5737'.
[  530.442396][T26318] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5736'.
[  530.470054][T26319] netlink: 'syz.4.5737': attribute type 1 has an invalid length.
[  530.556767][T26324] netlink: 'syz.2.5736': attribute type 64 has an invalid length.
[  530.561437][T26319] 8021q: adding VLAN 0 to HW filter on device bond8
[  530.584253][T26318] vcan2: entered promiscuous mode
[  530.591939][T26318] vcan2: entered allmulticast mode
[  530.640557][T26323] netlink: 'syz.6.5739': attribute type 16 has an invalid length.
[  530.651495][T26326] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.667130][T26326] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.813585][T26319] bond8: (slave geneve3): making interface the new active one
[  530.826859][T26319] bond8: (slave geneve3): Enslaving as an active interface with an up link
[  531.362304][T26363] syzkaller0: entered promiscuous mode
[  531.796338][T26350] vxcan1 speed is unknown, defaulting to 1000
[  531.821071][T26385] __nla_validate_parse: 1 callbacks suppressed
[  531.821089][T26385] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5753'.
[  531.862247][T26385] ieee802154 phy1 wpan1: encryption failed: -22
[  531.873320][T26385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5753'.
[  531.883695][T26384] delete_channel: no stack
[  532.126540][T26399] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5758'.
[  532.261083][T26408] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5761'.
[  532.295632][T26408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5761'.
[  532.334778][T26405] nbd5: detected capacity change from 0 to 127
[  532.354083][ T5148] block nbd5: Receive control failed (result -104)
[  532.562354][T26422] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5765'.
[  532.593724][T26422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5765'.
[  532.714757][T26430] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.750510][T26437] netlink: 'syz.2.5768': attribute type 2 has an invalid length.
[  532.759253][T26437] netlink: 'syz.2.5768': attribute type 2 has an invalid length.
[  532.796499][T26439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5765'.
[  532.805718][T26439] netlink: 'syz.4.5765': attribute type 1 has an invalid length.
[  532.813458][T26439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5765'.
[  532.860770][T26438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5768'.
[  533.149042][T26452] netlink: 'syz.0.5772': attribute type 33 has an invalid length.
[  533.190603][T26454] geneve2: entered promiscuous mode
[  533.197231][T26454] geneve2: entered allmulticast mode
[  533.270644][T26452] bond12: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  533.297931][T26452] bond12 (unregistering): Released all slaves
[  533.328442][T26456] gre2: entered promiscuous mode
[  533.333455][T26456] gre2: entered allmulticast mode
[  533.342168][ T1093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0
[  533.352100][ T1093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0
[  533.500486][ T1093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0
[  533.522372][T26464] netlink: 'syz.6.5774': attribute type 29 has an invalid length.
[  533.552556][T26456] netlink: 'syz.6.5774': attribute type 29 has an invalid length.
[  533.605223][T26458] netlink: 'syz.6.5774': attribute type 29 has an invalid length.
[  533.743982][ T1093] net_ratelimit: 25 callbacks suppressed
[  533.744004][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  533.896865][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  533.941056][T26486] bond2: entered allmulticast mode
[  533.994608][ T8571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.128523][T26485] bond2: left allmulticast mode
[  534.193644][T26490] 8021q: adding VLAN 0 to HW filter on device bond10
[  534.243324][T26495] 8021q: adding VLAN 0 to HW filter on device bond12
[  534.252315][T26498] bond10: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  534.263508][T26498] bond10: entered allmulticast mode
[  534.303195][T26496] bond9: (slave xfrm1): The slave device specified does not support setting the MAC address
[  534.334512][T26496] bond9: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  534.357454][T26496] bond9: (slave xfrm1): making interface the new active one
[  534.368824][T26496] bond9: (slave xfrm1): Enslaving as an active interface with an up link
[  534.420229][T26499] bond12: (slave veth7): Enslaving as an active interface with a down link
[  534.465871][T26500] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link
[  534.624012][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  534.688411][T26525] Cannot find del_set index 0 as target
[  534.709449][T26524] syzkaller0: entered promiscuous mode
[  534.732399][T26524] syzkaller0: entered allmulticast mode
[  534.798619][ T3512] bond2: (slave bridge1): failed to get link speed/duplex
[  534.923878][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  534.962397][T26535] bond10: option primary_reselect: invalid value (255)
[  534.976808][T26535] bond10 (unregistering): Released all slaves
[  535.057502][T26544] xt_ecn: cannot match TCP bits for non-tcp packets
[  535.088398][T26538] xt_TPROXY: Can be used only with -p tcp or -p udp
[  535.095261][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  535.204026][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  535.259325][T26557] openvswitch: netlink: Message has 8 unknown bytes.
[  535.292234][T26560] xt_hashlimit: size too large, truncated to 1048576
[  535.304435][T26557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  535.547111][T26578] validate_nla: 10 callbacks suppressed
[  535.547133][T26578] netlink: 'syz.1.5806': attribute type 1 has an invalid length.
[  535.612581][T26578] 8021q: adding VLAN 0 to HW filter on device bond16
[  535.813613][T26600] netlink: 'syz.4.5810': attribute type 7 has an invalid length.
[  535.835445][T26600] netlink: 'syz.4.5810': attribute type 7 has an invalid length.
[  536.177801][T26625] vlan1: entered allmulticast mode
[  536.184633][T26625] veth0_vlan: entered allmulticast mode
[  536.198689][T26626] xfrm0: entered allmulticast mode
[  536.277775][T26625] syzkaller0: entered promiscuous mode
[  536.283282][T26625] syzkaller0: entered allmulticast mode
[  536.470419][T26645] ipt_ECN: cannot use operation on non-tcp rule
[  536.915542][T26664] __nla_validate_parse: 14 callbacks suppressed
[  536.915562][T26664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5829'.
[  539.067561][T26667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5831'.
[  539.121432][ T5911] net_ratelimit: 8 callbacks suppressed
[  539.121448][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.147482][T26669] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  539.235290][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  539.356661][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  539.358429][T26682] netlink: 'syz.6.5836': attribute type 1 has an invalid length.
[  539.484348][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  539.544952][T26696] sit2: entered promiscuous mode
[  539.549987][T26696] sit2: entered allmulticast mode
[  539.596635][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  539.624946][T26703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5842'.
[  539.697317][T26705] tipc: Started in network mode
[  539.743949][T26705] tipc: Node identity 4, cluster identity 4711
[  539.777948][T26705] tipc: Node number set to 4
[  539.824232][T26713] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5844'.
[  539.845402][ T3512] bond2: (slave bridge1): failed to get link speed/duplex
[  539.854703][T26718] xt_ecn: cannot match TCP bits for non-tcp packets
[  540.016296][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  540.155532][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  540.273975][ T3512] bond2: (slave bridge1): failed to get link speed/duplex
[  540.540047][T26764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5860'.
[  540.550417][T26757] wireguard0: entered promiscuous mode
[  540.557350][T26757] wireguard0: entered allmulticast mode
[  540.581917][T26757] team0: Device wireguard0 is of different type
[  540.591176][T26764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5860'.
[  540.606386][T26764] SET target dimension over the limit!
[  540.643273][T26764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.709997][T26774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.728082][T26765] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  540.741653][T26765] bond10 (unregistering): Released all slaves
[  540.779134][T26776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.860061][T26781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.872440][T26779] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  541.122964][T26793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5864'.
[  541.148719][T26793] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5864'.
[  541.178224][T26795] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5866'.
[  541.647865][T26833] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5874'.
[  541.777297][T26840] 8021q: VLANs not supported on ipvlan1
[  541.895261][T26849] 8021q: VLANs not supported on ip_vti0
[  542.069288][T26859] __nla_validate_parse: 3 callbacks suppressed
[  542.069309][T26859] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5884'.
[  542.245869][T26874] ip6tnl0: Caught tx_queue_len zero misconfig
[  542.252438][T26874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5889'.
[  542.295799][T26874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5889'.
[  542.933618][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  542.959389][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  542.970122][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  542.982979][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  542.995420][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  543.055605][ T5148] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  543.067350][ T5148] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  543.076410][ T5148] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  543.089587][ T5148] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  543.099507][ T5148] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  543.789206][T26907] vxcan1 speed is unknown, defaulting to 1000
[  543.803564][ T1093] tipc: Subscription rejected, illegal request
[  544.182380][T26963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5917'.
[  544.202510][T26966] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  544.214666][ T3512] net_ratelimit: 33 callbacks suppressed
[  544.214686][ T3512] bond2: (slave bridge1): failed to get link speed/duplex
[  544.318044][T26969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5918'.
[  544.337555][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  544.476489][T26976] netlink: 'syz.1.5920': attribute type 1 has an invalid length.
[  544.501897][T26976] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5920'.
[  544.524109][T26976] NCSI netlink: No device for ifindex 0
[  544.599307][T26979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5920'.
[  544.615611][T26979] nbd: must specify a size in bytes for the device
[  544.636308][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  544.825168][  T122] bond2: (slave bridge1): failed to get link speed/duplex
[  544.856180][T26998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  544.881503][T27001] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  544.940137][T26907] chnl_net:caif_netlink_parms(): no params data found
[  545.194334][ T5148] Bluetooth: hci7: command tx timeout
[  545.228239][T27025] x_tables: unsorted entry at hook 2
[  545.283720][T26907] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.291731][T26907] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.301293][T26907] bridge_slave_0: entered allmulticast mode
[  545.326741][T26907] bridge_slave_0: entered promiscuous mode
[  545.340844][T26907] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.348507][T26907] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.357271][T26907] bridge_slave_1: entered allmulticast mode
[  545.377662][T26907] bridge_slave_1: entered promiscuous mode
[  545.427115][T27033] netlink: 'syz.6.5935': attribute type 7 has an invalid length.
[  545.469375][T26907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  545.483572][T27036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5936'.
[  545.487503][T26907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  545.502149][T27033] netlink: 'syz.6.5935': attribute type 7 has an invalid length.
[  545.511764][ T1093] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  545.521565][ T1093] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  545.569335][ T1093] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  545.636393][ T1093] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  545.648734][T26907] team0: Port device team_slave_0 added
[  545.660306][T26907] team0: Port device team_slave_1 added
[  545.758746][T26907] batman_adv: batadv0: Adding interface: batadv_slave_0
[  545.793985][T26907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  545.909042][T26907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  545.929325][T26907] batman_adv: batadv0: Adding interface: batadv_slave_1
[  545.936835][T26907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  546.085811][T26907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  546.164626][ T8568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.187580][T27057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5942'.
[  546.210164][T27058] veth0: Caught tx_queue_len zero misconfig
[  546.223921][T27058] netlink: 'syz.2.5942': attribute type 3 has an invalid length.
[  546.299720][T27057] bond0: entered promiscuous mode
[  546.308706][T27057] bond0: left promiscuous mode
[  546.337396][T27061] netlink: 'syz.6.5943': attribute type 4 has an invalid length.
[  546.448551][T26907] hsr_slave_0: entered promiscuous mode
[  546.466018][T26907] hsr_slave_1: entered promiscuous mode
[  546.473227][T26907] debugfs: 'hsr0' already exists in 'hsr'
[  546.481594][T26907] Cannot create hsr debugfs directory
[  546.645729][T27075] netlink: 'syz.6.5948': attribute type 15 has an invalid length.
[  546.654529][T27075] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5948'.
[  546.880365][T27083] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002
[  546.911707][T26907] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  546.926637][T26907] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.940275][T26907] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  547.019638][T27088] xt_TPROXY: Can be used only with -p tcp or -p udp
[  547.027721][  T122] bond2: (slave bridge1): failed to get link speed/duplex
[  547.062405][T26907] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  547.084634][T26907] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.096465][T26907] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  547.121470][T10143] tipc: Subscription rejected, illegal request
[  547.136574][T27085] __nla_validate_parse: 3 callbacks suppressed
[  547.136594][T27085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5953'.
[  547.154915][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  547.273136][T26907] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  547.285403][ T5830] Bluetooth: hci7: command tx timeout
[  547.292401][T27110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5959'.
[  547.302702][T26907] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.311008][T27110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5959'.
[  547.330238][T26907] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  547.352680][T27103] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5957'.
[  547.368596][T27110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5959'.
[  547.375317][  T122] bond2: (slave bridge1): failed to get link speed/duplex
[  547.381537][T27110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5959'.
[  547.396493][T27102] syzkaller0: entered promiscuous mode
[  547.403308][T27102] syzkaller0: entered allmulticast mode
[  547.448307][T26907] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  547.470312][T26907] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.496513][T26907] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  547.532471][T27110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5959'.
[  547.554888][T27110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5959'.
[  547.591432][T27118] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5963'.
[  547.626534][T10143] veth0_to_bond: left allmulticast mode
[  547.632517][T10143] veth0_to_bond: left promiscuous mode
[  547.643009][T10143] bridge6: port 2(veth0_to_bond) entered disabled state
[  547.654378][T10143] veth13: left allmulticast mode
[  547.659362][T10143] veth13: left promiscuous mode
[  547.665068][T10143] bridge6: port 1(veth13) entered disabled state
[  547.858634][T10143] gretap0 (unregistering): left promiscuous mode
[  548.082028][T10143] bond4 (unregistering): (slave bridge5): Releasing active interface
[  548.090285][T10143] bridge5 (unregistering): left promiscuous mode
[  548.097335][T10143] bridge5 (unregistering): left allmulticast mode
[  548.218926][T10143] bond0 (unregistering): left promiscuous mode
[  548.229089][T10143] bond0 (unregistering): Released all slaves
[  548.239060][T10143] bond1 (unregistering): Released all slaves
[  548.251729][T10143] bond2 (unregistering): Released all slaves
[  548.269368][T10143] bond3 (unregistering): Released all slaves
[  548.286562][T10143] bond4 (unregistering): Released all slaves
[  548.535897][T10143] tipc: Left network mode
[  548.706481][T27135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5969'.
[  548.729467][T26907] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  548.761042][T10143] IPVS: stopping master sync thread 8008 ...
[  548.791747][T26907] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  548.801750][T27139] netlink: 'syz.4.5970': attribute type 7 has an invalid length.
[  548.810392][T27139] netlink: 'syz.4.5970': attribute type 8 has an invalid length.
[  548.865038][T26907] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  548.952917][T26907] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  549.141737][T27161] xt_hashlimit: size too large, truncated to 1048576
[  549.304378][T21829] net_ratelimit: 4 callbacks suppressed
[  549.304397][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  549.355357][ T5830] Bluetooth: hci7: command 0x040f tx timeout
[  549.421566][T26907] 8021q: adding VLAN 0 to HW filter on device bond0
[  549.585537][T26907] 8021q: adding VLAN 0 to HW filter on device team0
[  549.615441][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.622644][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  549.682799][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.690028][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  549.734983][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  549.903978][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  550.034050][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  550.149855][ T3512] bond2: (slave bridge1): failed to get link speed/duplex
[  550.265031][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  550.356827][T27198] netlink: 'syz.4.5984': attribute type 2 has an invalid length.
[  550.374245][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  550.384731][T27198] netlink: 'syz.4.5984': attribute type 2 has an invalid length.
[  550.468522][T26907] 8021q: adding VLAN 0 to HW filter on device batadv0
[  550.510666][T27200] erspan0: entered promiscuous mode
[  550.615118][T10143] hsr_slave_0: left promiscuous mode
[  550.624359][T10143] hsr_slave_1: left promiscuous mode
[  550.656243][T10143] veth1_macvtap: left promiscuous mode
[  550.666870][T10143] veth0_macvtap: left promiscuous mode
[  550.672515][T10143] veth1_vlan: left promiscuous mode
[  550.680751][T10143] veth0_vlan: left promiscuous mode
[  550.903274][T10143] pim6reg (unregistering): left allmulticast mode
[  551.238231][T27215] netlink: 'syz.4.5992': attribute type 2 has an invalid length.
[  551.311384][T27217] netlink: 'syz.4.5993': attribute type 178 has an invalid length.
[  551.380415][T27172] vxcan1 speed is unknown, defaulting to 1000
[  551.446318][ T5148] Bluetooth: hci7: command 0x040f tx timeout
[  551.472867][T26907] veth0_vlan: entered promiscuous mode
[  551.498739][T26907] veth1_vlan: entered promiscuous mode
[  551.524528][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  551.545070][T26907] veth0_macvtap: entered promiscuous mode
[  551.592302][T26907] veth1_macvtap: entered promiscuous mode
[  551.618126][T27223] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  551.641370][T26907] batman_adv: batadv0: Interface activated: batadv_slave_0
[  551.670450][T26907] batman_adv: batadv0: Interface activated: batadv_slave_1
[  551.715600][ T3512] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  551.739099][ T3512] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  551.766535][T21829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  551.798796][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  551.826857][T16699] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  551.931140][T24484] smc: removing ib device syz1
[  551.944439][  T122] bond2: (slave bridge1): failed to get link speed/duplex
[  552.418253][T27242] 8021q: VLANs not supported on ip6_vti0
[  552.464723][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  552.496282][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.786575][T27260] netlink: 'syz.2.6005': attribute type 1 has an invalid length.
[  552.980682][T27269] ipt_ECN: cannot use operation on non-tcp rule
[  553.039525][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  553.071140][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  553.367583][T27283] __nla_validate_parse: 3 callbacks suppressed
[  553.367601][T27283] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5897'.
[  553.393527][T27279] syzkaller0: entered promiscuous mode
[  553.464001][T27279] syzkaller0: entered allmulticast mode
[  553.518144][T27279] team0: No ports can be present during mode change
[  553.526654][ T5148] Bluetooth: hci7: command 0x040f tx timeout
[  553.562545][T27282] bond7: (slave veth0_to_bond): Releasing active interface
[  553.621132][T27282] .`: (slave bond_slave_0): Releasing backup interface
[  553.637891][T27282] bond_slave_0: left promiscuous mode
[  553.670929][T27282] .`: (slave bond_slave_1): Releasing backup interface
[  553.694323][T27282] bond_slave_1: left promiscuous mode
[  553.753524][T27282] team0: Port device team_slave_0 removed
[  553.798239][T27282] team0: Port device team_slave_1 removed
[  553.819164][T27282] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  553.840685][T27282] batman_adv: batadv0: Removing interface: batadv_slave_0
[  553.861501][T27282] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  553.882515][T27282] batman_adv: batadv0: Removing interface: batadv_slave_1
[  554.108405][T27299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6013'.
[  556.056209][T27299] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  556.094246][T24484] net_ratelimit: 8 callbacks suppressed
[  556.094265][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  556.102531][T10143] IPVS: stop unused estimator thread 0...
[  556.197611][T27309] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6016'.
[  556.244619][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  556.354100][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  556.414665][T27320] netlink: 788 bytes leftover after parsing attributes in process `syz.6.6021'.
[  556.471443][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  556.508888][T27323] netlink: 'syz.6.6021': attribute type 61 has an invalid length.
[  556.517135][T27323] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6021'.
[  556.605856][T27323] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6021'.
[  556.615591][T27323] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6021'.
[  556.626505][T10143] bond2: (slave bridge1): failed to get link speed/duplex
[  556.815881][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  556.826382][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  556.838429][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  556.847027][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  556.854257][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  556.858279][T27335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6025'.
[  556.880972][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  556.988717][T27333] vxcan1 speed is unknown, defaulting to 1000
[  557.060591][T27345] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6027'.
[  557.526453][T17321] syz_tun (unregistering): left allmulticast mode
[  557.532929][T17321] syz_tun (unregistering): left promiscuous mode
[  557.533538][T27369] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  557.544253][T17321] bridge0: port 1(syz_tun) entered disabled state
[  557.680093][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  557.850532][T27381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6034'.
[  557.873899][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  557.922394][T27389] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  558.115953][T27333] chnl_net:caif_netlink_parms(): no params data found
[  558.307450][T27333] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.324496][T27333] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.331905][T27333] bridge_slave_0: entered allmulticast mode
[  558.343636][T27333] bridge_slave_0: entered promiscuous mode
[  558.352781][T27333] bridge0: port 2(bridge_slave_1) entered blocking state
[  558.360101][T27333] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.368027][T27333] bridge_slave_1: entered allmulticast mode
[  558.375885][T27333] bridge_slave_1: entered promiscuous mode
[  558.462656][T27418] __nla_validate_parse: 1 callbacks suppressed
[  558.462675][T27418] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6044'.
[  558.493121][T27333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  558.508488][T27418] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6044'.
[  558.523307][T27333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  558.577709][T27425] netlink: 'syz.0.6045': attribute type 1 has an invalid length.
[  558.668162][T27425] bond1 (unregistering): Released all slaves
[  558.702672][T27431] netlink: 'syz.6.6046': attribute type 1 has an invalid length.
[  558.753756][T27333] team0: Port device team_slave_0 added
[  558.788234][T27333] team0: Port device team_slave_1 added
[  558.797634][T27425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6045'.
[  558.847242][T27441] netlink: 'syz.1.6049': attribute type 83 has an invalid length.
[  558.911099][T27441] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6049'.
[  558.935226][T27333] batman_adv: batadv0: Adding interface: batadv_slave_0
[  558.945454][T27333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  558.958946][T27442] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6050'.
[  558.983247][ T5148] Bluetooth: hci6: command tx timeout
[  559.012354][T27333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  559.076437][T27447] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  559.101491][T27447] bond3: (slave lo): Enslaving as an active interface with an up link
[  559.109577][T27458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6053'.
[  559.119861][T27442] hsr_slave_0: left promiscuous mode
[  559.127355][T27442] hsr_slave_1: left promiscuous mode
[  559.138602][T27442] hsr0 (unregistering): left allmulticast mode
[  559.167937][T27333] batman_adv: batadv0: Adding interface: batadv_slave_1
[  559.176375][T27333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  559.208837][T27333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  559.303546][T27333] hsr_slave_0: entered promiscuous mode
[  559.320822][T27333] hsr_slave_1: entered promiscuous mode
[  559.336671][T27333] debugfs: 'hsr0' already exists in 'hsr'
[  559.343018][T27333] Cannot create hsr debugfs directory
[  559.440574][T27472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6058'.
[  559.599229][T27470] syzkaller0: entered promiscuous mode
[  559.609077][T27470] syzkaller0: entered allmulticast mode
[  559.615949][T27478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6060'.
[  559.715854][T27481] netlink: 'syz.2.6061': attribute type 1 has an invalid length.
[  559.747358][T27485] netlink: 277 bytes leftover after parsing attributes in process `syz.6.6062'.
[  559.790539][T27490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6061'.
[  559.834336][T27481] 8021q: adding VLAN 0 to HW filter on device bond11
[  559.896884][T27490] bond11: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  559.908839][T27490] bond11: entered allmulticast mode
[  561.038325][ T5148] Bluetooth: hci6: command tx timeout
[  561.584486][T24484] net_ratelimit: 9 callbacks suppressed
[  561.584504][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  561.768328][T27333] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  561.781113][T27333] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.792706][T27333] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  561.846343][T10143] bond2: (slave bridge1): failed to get link speed/duplex
[  562.040374][T27333] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  562.054941][T27333] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.078098][T27333] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  562.104007][T10143] bond2: (slave bridge1): failed to get link speed/duplex
[  562.117934][T27526] syzkaller1: entered promiscuous mode
[  562.123549][T27526] syzkaller1: entered allmulticast mode
[  562.126156][T27550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.142276][T27540] vxcan1 speed is unknown, defaulting to 1000
[  562.227011][T27333] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  562.254217][T27333] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.274019][T27333] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  562.365888][T27333] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  562.382846][T27333] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.395117][T27333] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  562.404084][T27558] netlink: 'syz.2.6079': attribute type 1 has an invalid length.
[  562.496055][T27560] bond12: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  562.511815][T27560] bond12: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  562.526731][T27560] bond12: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode
[  562.675178][T10143] bond2: (slave bridge1): failed to get link speed/duplex
[  562.702193][T27564] h: entered promiscuous mode
[  562.808930][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  562.821159][ T2450] block nbd5: Possible stuck request ffff888026230000: control (read@0,1024B). Runtime 30 seconds
[  562.834548][ T2450] block nbd5: Possible stuck request ffff888026230200: control (read@1024,1024B). Runtime 30 seconds
[  562.846218][ T2450] block nbd5: Possible stuck request ffff888026230400: control (read@2048,1024B). Runtime 30 seconds
[  562.857197][ T2450] block nbd5: Possible stuck request ffff888026230600: control (read@3072,1024B). Runtime 30 seconds
[  562.915229][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  562.971503][T27571] ip6gre1: entered allmulticast mode
[  563.118772][ T5148] Bluetooth: hci6: command tx timeout
[  563.170016][T27333] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  563.191956][T27333] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  563.244708][T27333] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  563.268347][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  563.286472][T27585] nbd: couldn't find a device at index 0
[  563.295235][T27585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.311869][T27333] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  563.354040][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.362910][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.479492][T27599] __nla_validate_parse: 4 callbacks suppressed
[  563.479509][T27599] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6091'.
[  563.517569][T27599] netlink: 35 bytes leftover after parsing attributes in process `syz.1.6091'.
[  563.547079][T27599] netlink: 'syz.1.6091': attribute type 5 has an invalid length.
[  563.567967][T27599] netlink: 'syz.1.6091': attribute type 6 has an invalid length.
[  563.582990][T27333] 8021q: adding VLAN 0 to HW filter on device bond0
[  563.590363][T27599] netlink: 35 bytes leftover after parsing attributes in process `syz.1.6091'.
[  563.648330][T27333] 8021q: adding VLAN 0 to HW filter on device team0
[  563.667385][T21829] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.674566][T21829] bridge0: port 1(bridge_slave_0) entered forwarding state
[  563.705556][T21829] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.712730][T21829] bridge0: port 2(bridge_slave_1) entered forwarding state
[  563.731671][T27611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6096'.
[  563.740830][T27611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6096'.
[  563.752642][T27611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6096'.
[  563.891764][T27622] syzkaller1: entered promiscuous mode
[  563.898583][T27622] syzkaller1: entered allmulticast mode
[  563.908933][T27621] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6098'.
[  563.920397][T27622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6096'.
[  563.941600][T27622] lo speed is unknown, defaulting to 1000
[  563.961636][T27622] lo speed is unknown, defaulting to 1000
[  563.985031][T27622] lo speed is unknown, defaulting to 1000
[  564.006286][T27611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  564.012688][T27622] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  564.046710][T27622] lo speed is unknown, defaulting to 1000
[  564.057055][T27622] lo speed is unknown, defaulting to 1000
[  564.066773][T27622] lo speed is unknown, defaulting to 1000
[  564.087085][T27622] lo speed is unknown, defaulting to 1000
[  564.096493][T27622] lo speed is unknown, defaulting to 1000
[  564.101891][T27333] 8021q: adding VLAN 0 to HW filter on device batadv0
[  564.126970][T27622] lo speed is unknown, defaulting to 1000
[  564.146417][T27622] lo speed is unknown, defaulting to 1000
[  564.179173][T27622] lo speed is unknown, defaulting to 1000
[  564.202113][T27622] lo speed is unknown, defaulting to 1000
[  564.222789][T27622] lo speed is unknown, defaulting to 1000
[  564.234694][T27622] lo speed is unknown, defaulting to 1000
[  564.274387][T27638] FAULT_INJECTION: forcing a failure.
[  564.274387][T27638] name failslab, interval 1, probability 0, space 0, times 0
[  564.287094][T27638] CPU: 0 UID: 0 PID: 27638 Comm: syz.2.6101 Not tainted syzkaller #0 PREEMPT(full) 
[  564.287117][T27638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  564.287128][T27638] Call Trace:
[  564.287135][T27638]  <TASK>
[  564.287142][T27638]  dump_stack_lvl+0xe8/0x150
[  564.287178][T27638]  should_fail_ex+0x412/0x560
[  564.287212][T27638]  should_failslab+0xa8/0x100
[  564.287239][T27638]  __kmalloc_node_track_caller_noprof+0xeb/0x7b0
[  564.287261][T27638]  ? nf_ct_ext_add+0x1b6/0x460
[  564.287383][T27638]  ? __nf_conntrack_alloc+0x81/0x3e0
[  564.287432][T27638]  ? nf_ct_ext_add+0x1b6/0x460
[  564.287469][T27638]  krealloc_node_align_noprof+0x1ae/0x390
[  564.287497][T27638]  nf_ct_ext_add+0x1b6/0x460
[  564.287525][T27638]  init_conntrack+0x6b4/0xf70
[  564.287553][T27638]  ? __pfx_init_conntrack+0x10/0x10
[  564.287577][T27638]  ? __pfx___nf_conntrack_find_get+0x10/0x10
[  564.287599][T27638]  ? __siphash_unaligned+0x22e/0x3b0
[  564.287660][T27638]  nf_conntrack_in+0xbd8/0x15e0
[  564.287680][T27638]  ? lockdep_hardirqs_on+0x7a/0x110
[  564.287743][T27638]  ? __pfx_nf_conntrack_in+0x10/0x10
[  564.287768][T27638]  ? ip6t_do_table+0x1df/0x1560
[  564.287836][T27638]  ? __pfx_ip6t_do_table+0x10/0x10
[  564.287850][T27638]  ? nf_nat_ipv6_in+0x203/0x2c0
[  564.287904][T27638]  ? __pfx_nf_nat_ipv6_in+0x10/0x10
[  564.287924][T27638]  ? __lock_acquire+0x6b5/0x2cf0
[  564.287961][T27638]  ? ipv6_defrag+0x2d6/0x3b0
[  564.287980][T27638]  ? __pfx_ipv6_conntrack_in+0x10/0x10
[  564.288002][T27638]  nf_hook_slow+0xc5/0x220
[  564.288050][T27638]  nf_hook_slow_list+0x1d0/0x3a0
[  564.288073][T27638]  ? __pfx_nf_hook_slow_list+0x10/0x10
[  564.288091][T27638]  ? __netif_receive_skb_core+0x12d5/0x31a0
[  564.288174][T27638]  ip6_sublist_rcv+0xc8c/0xda0
[  564.288238][T27638]  ? ip6_sublist_rcv+0xb0b/0xda0
[  564.288262][T27638]  ? rcu_read_unlock+0x87/0xa0
[  564.288284][T27638]  ? __pfx_ip6_sublist_rcv+0x10/0x10
[  564.288311][T27638]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  564.288333][T27638]  ? ip6_rcv_core+0xa2/0x1740
[  564.288361][T27638]  ipv6_list_rcv+0x3f4/0x450
[  564.288390][T27638]  ? __pfx_ipv6_list_rcv+0x10/0x10
[  564.288415][T27638]  ? kasan_save_track+0x4f/0x80
[  564.288434][T27638]  ? kasan_save_track+0x3e/0x80
[  564.288459][T27638]  ? __kasan_slab_alloc+0x6c/0x80
[  564.288479][T27638]  ? kmem_cache_alloc_bulk_noprof+0x570/0x7e0
[  564.288502][T27638]  ? __pfx_ipv6_list_rcv+0x10/0x10
[  564.288523][T27638]  __netif_receive_skb_list_core+0x5ff/0x810
[  564.288564][T27638]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  564.288603][T27638]  netif_receive_skb_list_internal+0x995/0xcf0
[  564.288635][T27638]  ? netif_receive_skb_list_internal+0x501/0xcf0
[  564.288663][T27638]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  564.288697][T27638]  ? __xdp_build_skb_from_frame+0x34b/0x730
[  564.288725][T27638]  netif_receive_skb_list+0x55/0x4b0
[  564.288748][T27638]  ? bpf_test_run_xdp_live+0x1921/0x1cf0
[  564.288780][T27638]  bpf_test_run_xdp_live+0x1946/0x1cf0
[  564.288823][T27638]  ? bpf_test_run_xdp_live+0x438/0x1cf0
[  564.288858][T27638]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  564.288908][T27638]  ? 0xffffffffa0201818
[  564.288924][T27638]  ? 0xffffffffa0201890
[  564.288937][T27638]  ? 0xffffffffa02018cc
[  564.288976][T27638]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  564.289005][T27638]  ? _copy_from_user+0x94/0xb0
[  564.289025][T27638]  ? bpf_test_init+0x113/0x150
[  564.289048][T27638]  ? xdp_convert_md_to_buff+0x5b/0x330
[  564.289078][T27638]  bpf_prog_test_run_xdp+0x81c/0x1160
[  564.289118][T27638]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  564.289148][T27638]  ? __fget_files+0x2a/0x420
[  564.289179][T27638]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  564.289207][T27638]  bpf_prog_test_run+0x2c7/0x340
[  564.289232][T27638]  __sys_bpf+0x643/0x950
[  564.289262][T27638]  ? __pfx___sys_bpf+0x10/0x10
[  564.289307][T27638]  ? ksys_write+0x242/0x270
[  564.289330][T27638]  ? __pfx_ksys_write+0x10/0x10
[  564.289359][T27638]  __x64_sys_bpf+0x7c/0x90
[  564.289386][T27638]  do_syscall_64+0x14d/0xf80
[  564.289407][T27638]  ? trace_irq_disable+0x3b/0x150
[  564.289434][T27638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.289460][T27638]  ? clear_bhb_loop+0x40/0x90
[  564.289485][T27638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.289504][T27638] RIP: 0033:0x7f205fb9c799
[  564.289522][T27638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  564.289538][T27638] RSP: 002b:00007f206097f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  564.289558][T27638] RAX: ffffffffffffffda RBX: 00007f205fe15fa0 RCX: 00007f205fb9c799
[  564.289572][T27638] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  564.289584][T27638] RBP: 00007f206097f090 R08: 0000000000000000 R09: 0000000000000000
[  564.289595][T27638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  564.289606][T27638] R13: 00007f205fe16038 R14: 00007f205fe15fa0 R15: 00007ffc270dd378
[  564.289639][T27638]  </TASK>
[  565.199645][ T5148] Bluetooth: hci6: command tx timeout
[  565.295067][T27333] veth0_vlan: entered promiscuous mode
[  565.487616][T27675] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.6112'.
[  565.910858][T27686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6116'.
[  567.237434][T27665] syzkaller0: entered promiscuous mode
[  567.243088][T27665] syzkaller0: entered allmulticast mode
[  567.260159][T27677] 
: renamed from bond0 (while UP)
[  567.360615][T27333] veth1_vlan: entered promiscuous mode
[  567.414142][T16703] net_ratelimit: 19 callbacks suppressed
[  567.414161][T16703] bond2: (slave bridge1): failed to get link speed/duplex
[  567.474809][T27333] veth0_macvtap: entered promiscuous mode
[  567.509847][T27333] veth1_macvtap: entered promiscuous mode
[  567.606311][T27696] ip6tnl3: entered promiscuous mode
[  567.624022][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  567.653661][T27333] batman_adv: batadv0: Interface activated: batadv_slave_0
[  567.685671][T27333] batman_adv: batadv0: Interface activated: batadv_slave_1
[  567.702777][ T3512] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  567.727273][ T3512] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  567.744626][  T122] bond2: (slave bridge1): failed to get link speed/duplex
[  567.767682][ T3512] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  567.798274][ T3512] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  567.904753][T10143] bond2: (slave bridge1): failed to get link speed/duplex
[  568.002789][T10143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.018401][  T122] bond2: (slave bridge1): failed to get link speed/duplex
[  568.050425][T10143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.178657][T10143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.186676][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  568.218948][T10143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.251122][T27735] xt_socket: unknown flags 0x50
[  568.347029][T27741] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  568.384329][ T3512] bond2: (slave bridge1): failed to get link speed/duplex
[  568.470044][T27741] bridge_slave_1: entered promiscuous mode
[  568.535823][T27756] netlink: 'syz.6.6134': attribute type 9 has an invalid length.
[  568.549508][T27756] netlink: 'syz.6.6134': attribute type 6 has an invalid length.
[  568.571926][T27757] netlink: 'syz.6.6134': attribute type 9 has an invalid length.
[  568.579850][ T3512] bond2: (slave bridge1): failed to get link speed/duplex
[  568.580229][T27757] netlink: 'syz.6.6134': attribute type 6 has an invalid length.
[  568.647396][T27761] __nla_validate_parse: 5 callbacks suppressed
[  568.647414][T27761] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.6135'.
[  568.667320][T27761] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  568.790373][T27776] netlink: 'syz.2.6139': attribute type 29 has an invalid length.
[  568.800731][T27776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6139'.
[  568.839585][T27782] netlink: 'syz.2.6141': attribute type 1 has an invalid length.
[  568.864165][T27782] bond13: entered promiscuous mode
[  568.870172][T27782] bond13: entered allmulticast mode
[  568.877346][T27782] 8021q: adding VLAN 0 to HW filter on device bond13
[  568.897516][T27782] bridge7: entered promiscuous mode
[  568.902899][T27782] bridge7: entered allmulticast mode
[  568.909016][T27782] bond13: (slave bridge7): Enslaving as a backup interface with an up link
[  568.929846][T27782] bridge8: entered promiscuous mode
[  568.935621][T27782] bridge8: entered allmulticast mode
[  568.941434][T27782] bond13: (slave bridge8): Enslaving as a backup interface with a down link
[  571.212089][T27735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  571.440280][T27800] netlink: 'syz.0.6146': attribute type 1 has an invalid length.
[  571.461054][T27801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6145'.
[  571.478235][T27800] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6146'.
[  571.525532][T27799] netlink: 'syz.0.6146': attribute type 1 has an invalid length.
[  571.548158][T27799] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6146'.
[  571.794188][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  571.808903][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  571.821760][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  571.830018][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  571.843075][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  571.884443][T27814] vxcan1 speed is unknown, defaulting to 1000
[  572.068628][T27823] IPVS: set_ctl: invalid protocol: 113 127.0.0.1:20002
[  572.188401][T27832] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 2, id = 0
[  572.343056][T27814] lo speed is unknown, defaulting to 1000
[  572.499116][  T122] net_ratelimit: 40 callbacks suppressed
[  572.499144][  T122] bond2: (slave bridge1): failed to get link speed/duplex
[  572.547240][ T8568] IPVS: starting estimator thread 0...
[  572.675998][T27857] IPVS: using max 36 ests per chain, 86400 per kthread
[  572.736829][T27861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6158'.
[  572.737324][T27814] chnl_net:caif_netlink_parms(): no params data found
[  572.824683][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  572.933622][T27874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6165'.
[  572.970971][T27814] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.979630][T27814] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.987248][T27814] bridge_slave_0: entered allmulticast mode
[  572.998041][T27814] bridge_slave_0: entered promiscuous mode
[  573.008521][T27814] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.016007][T27814] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.023319][T27814] bridge_slave_1: entered allmulticast mode
[  573.031492][T27814] bridge_slave_1: entered promiscuous mode
[  573.097788][T27879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6166'.
[  573.109963][T27879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6166'.
[  573.190598][T27879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6166'.
[  573.662478][T27879] __nla_validate_parse: 21 callbacks suppressed
[  573.662498][T27879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6166'.
[  573.687296][T27879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6166'.
[  573.707162][T27879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6166'.
[  573.720970][T27879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6166'.
[  573.750681][T27879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6166'.
[  573.761863][T27879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6166'.
[  573.787144][T27879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6166'.
[  573.803612][T27879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6166'.
[  573.822771][T27879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6166'.
[  573.833556][T27879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6166'.
[  573.914437][ T5148] Bluetooth: hci0: command tx timeout
[  573.927954][T27879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  573.966149][T27879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  574.335297][T27879] geneve2: left promiscuous mode
[  574.340269][T27879] geneve2: left allmulticast mode
[  574.410082][T27879] ip6tnl1: left allmulticast mode
[  574.473478][T27814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  574.534975][T27814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  574.578797][T10143] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  574.597330][T10143] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  574.610335][T10143] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  574.620253][T10143] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  574.637120][T27929] netlink: 'syz.0.6178': attribute type 2 has an invalid length.
[  574.650214][T27929] netlink: 'syz.0.6178': attribute type 1 has an invalid length.
[  574.672975][T10143] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  574.682637][T10143] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  574.692679][T10143] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  574.702463][T10143] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  574.747044][T27814] team0: Port device team_slave_0 added
[  574.755965][T10143] bond2: (slave bridge1): failed to get link speed/duplex
[  574.790431][T27814] team0: Port device team_slave_1 added
[  574.858480][T27935] netem: change failed
[  574.873557][T27814] batman_adv: batadv0: Adding interface: batadv_slave_0
[  574.883494][T27814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  574.922422][T27814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  574.940383][T27814] batman_adv: batadv0: Adding interface: batadv_slave_1
[  574.948451][T27814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  574.981253][T27814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  575.054511][T27814] hsr_slave_0: entered promiscuous mode
[  575.061421][T27814] hsr_slave_1: entered promiscuous mode
[  575.070922][T27814] debugfs: 'hsr0' already exists in 'hsr'
[  575.077235][T27814] Cannot create hsr debugfs directory
[  575.213229][T27946] netlink: 'syz.2.6183': attribute type 1 has an invalid length.
[  575.299407][T27946] bond14: (slave bridge9): making interface the new active one
[  575.309054][T27946] bond14: (slave bridge9): Enslaving as an active interface with an up link
[  575.356630][T27946] 8021q: adding VLAN 0 to HW filter on device bond14
[  575.374838][ T3512] bond2: (slave bridge1): failed to get link speed/duplex
[  575.452354][T27814] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  575.528847][  T122] bond2: (slave bridge1): failed to get link speed/duplex
[  575.566228][T27814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  575.663218][T27814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  575.690600][T27967] netlink: 'syz.4.6190': attribute type 1 has an invalid length.
[  575.701611][T27967] xt_hashlimit: size too large, truncated to 1048576
[  575.709046][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  575.846778][T10143] bond2: (slave bridge1): failed to get link speed/duplex
[  575.974514][T10143] bond2: (slave bridge1): failed to get link speed/duplex
[  575.989217][T27814] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  575.995946][ T5148] Bluetooth: hci0: command tx timeout
[  576.011546][T27814] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  576.029264][T27814] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  576.048932][T27814] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  576.154922][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  576.182608][T27990] netlink: 'syz.4.6196': attribute type 10 has an invalid length.
[  576.196622][T27990] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.206403][T27990] bridge_slave_1: left allmulticast mode
[  576.212068][T27990] bridge_slave_1: left promiscuous mode
[  576.220092][T27990] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.245570][T27990] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  576.271600][T27814] 8021q: adding VLAN 0 to HW filter on device bond0
[  576.313367][T27814] 8021q: adding VLAN 0 to HW filter on device team0
[  576.332120][T27998] syz.4.6199: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  576.342884][T10137] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.349848][T27998] CPU: 1 UID: 0 PID: 27998 Comm: syz.4.6199 Not tainted syzkaller #0 PREEMPT(full) 
[  576.349875][T27998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  576.349888][T27998] Call Trace:
[  576.349895][T27998]  <TASK>
[  576.349905][T27998]  dump_stack_lvl+0xe8/0x150
[  576.349937][T27998]  warn_alloc+0x249/0x340
[  576.349962][T27998]  ? stack_trace_save+0xa9/0x100
[  576.349987][T27998]  ? __pfx_warn_alloc+0x10/0x10
[  576.350016][T27998]  ? kasan_save_track+0x4f/0x80
[  576.350035][T27998]  ? kasan_save_track+0x3e/0x80
[  576.350052][T27998]  ? __kasan_kmalloc+0x93/0xb0
[  576.350072][T27998]  ? __kmalloc_cache_noprof+0x31c/0x660
[  576.350091][T27998]  ? xskq_create+0x56/0x170
[  576.350110][T27998]  ? xsk_setsockopt+0x54c/0x990
[  576.350135][T27998]  ? do_sock_setsockopt+0x17c/0x1b0
[  576.350154][T27998]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  576.350173][T27998]  ? do_syscall_64+0x14d/0xf80
[  576.350198][T27998]  __vmalloc_node_range_noprof+0x132/0x1730
[  576.350248][T27998]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  576.350276][T27998]  ? __kasan_kmalloc+0x93/0xb0
[  576.350303][T27998]  vmalloc_user_noprof+0xad/0xe0
[  576.350325][T27998]  ? xskq_create+0xbf/0x170
[  576.350343][T27998]  xskq_create+0xbf/0x170
[  576.350363][T27998]  xsk_init_queue+0x8a/0xe0
[  576.350393][T27998]  xsk_setsockopt+0x54c/0x990
[  576.350423][T27998]  ? __pfx_xsk_setsockopt+0x10/0x10
[  576.350449][T27998]  ? __pfx_aa_sk_perm+0x10/0x10
[  576.350480][T27998]  ? aa_sock_opt_perm+0xff/0x1a0
[  576.350511][T27998]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  576.350531][T27998]  ? __pfx_xsk_setsockopt+0x10/0x10
[  576.350559][T27998]  do_sock_setsockopt+0x17c/0x1b0
[  576.350593][T27998]  __x64_sys_setsockopt+0x13d/0x1b0
[  576.350619][T27998]  do_syscall_64+0x14d/0xf80
[  576.350639][T27998]  ? trace_irq_disable+0x3b/0x150
[  576.350665][T27998]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.350685][T27998]  ? clear_bhb_loop+0x40/0x90
[  576.350709][T27998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.350728][T27998] RIP: 0033:0x7ff9d739c799
[  576.350745][T27998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  576.350761][T27998] RSP: 002b:00007ff9d8323028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  576.350781][T27998] RAX: ffffffffffffffda RBX: 00007ff9d7615fa0 RCX: 00007ff9d739c799
[  576.350795][T27998] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  576.350806][T27998] RBP: 00007ff9d7432c99 R08: 0000000000000004 R09: 0000000000000000
[  576.350819][T27998] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  576.350830][T27998] R13: 00007ff9d7616038 R14: 00007ff9d7615fa0 R15: 00007fff764fd488
[  576.350861][T27998]  </TASK>
[  576.350869][T27998] Mem-Info:
[  576.354008][T10137] bridge0: port 1(bridge_slave_0) entered forwarding state
[  576.368861][T10143] bond2: (slave bridge1): failed to get link speed/duplex
[  576.384615][T27998] active_anon:6953 inactive_anon:0 isolated_anon:0
[  576.384615][T27998]  active_file:3348 inactive_file:40182 isolated_file:0
[  576.384615][T27998]  unevictable:768 dirty:97 writeback:0
[  576.384615][T27998]  slab_reclaimable:13728 slab_unreclaimable:140298
[  576.384615][T27998]  mapped:39773 shmem:1418 pagetables:3599
[  576.384615][T27998]  sec_pagetables:0 bounce:0
[  576.384615][T27998]  kernel_misc_reclaimable:0
[  576.384615][T27998]  free:1233669 free_pcp:25953 free_cma:0
[  576.409752][T10137] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.454183][T27998] Node 0 active_anon:27812kB inactive_anon:0kB active_file:13392kB inactive_file:160532kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:85364kB dirty:388kB writeback:0kB shmem:4136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18480kB pagetables:14256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  576.457671][T10137] bridge0: port 2(bridge_slave_1) entered forwarding state
[  576.462308][T27998] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73728kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  576.520939][T28003] netem: invalid attributes len -24
[  576.589683][T27998] Node 0 DMA free:11080kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:184kB local_pcp:92kB free_cma:0kB
[  576.589750][T27998] lowmem_reserve[]: 0
[  576.609391][T28003] netem: change failed
[  576.619175][T27998]  2492 2493 2493 2493
[  576.848353][T27998] Node 0 DMA32 free:1203708kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28236kB inactive_anon:0kB active_file:13392kB inactive_file:160532kB unevictable:1536kB writepending:392kB zspages:0kB present:3129332kB managed:2552712kB mlocked:0kB bounce:0kB free_pcp:42076kB local_pcp:22588kB free_cma:0kB
[  576.930195][T27998] lowmem_reserve[]: 0 0 0 0 0
[  576.947923][T27998] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  576.986022][T27998] lowmem_reserve[]: 0 0 0 0 0
[  576.991805][T27998] Node 1 Normal free:3720304kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:59980kB local_pcp:32288kB free_cma:0kB
[  577.071360][T27998] lowmem_reserve[]: 0 0 0 0 0
[  577.133191][T27998] Node 0 DMA: 2*4kB (U) 0*8kB 0*16kB 2*32kB (U) 0*64kB 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11080kB
[  577.155093][T27998] Node 0 DMA32: 6898*4kB (UME) 6000*8kB (UME) 3590*16kB (UME) 640*32kB (UME) 171*64kB (UME) 306*128kB (UME) 778*256kB (UM) 552*512kB (UM) 338*1024kB (UME) 84*2048kB (UM) 0*4096kB = 1203560kB
[  577.201215][T27998] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  577.213516][T27998] Node 1 Normal: 4*4kB (UM) 10*8kB (UM) 17*16kB (UM) 8*32kB (UM) 16*64kB (UM) 10*128kB (UM) 9*256kB (UM) 8*512kB (UM) 8*1024kB (UM) 4*2048kB (U) 902*4096kB (UM) = 3720304kB
[  577.235658][T27998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  577.246755][T27998] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  577.256959][T27998] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  577.268757][T27998] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  577.290065][T27998] 44944 total pagecache pages
[  577.304768][T27998] 0 pages in swap cache
[  577.309110][T27998] Free swap  = 124996kB
[  577.313274][T27998] Total swap = 124996kB
[  577.318784][T27998] 2097051 pages RAM
[  577.322680][T27998] 0 pages HighMem/MovableOnly
[  577.327518][T27998] 427038 pages reserved
[  577.331679][T27998] 0 pages cma reserved
[  577.426323][T27814] 8021q: adding VLAN 0 to HW filter on device batadv0
[  577.476102][T28037] gre1: entered promiscuous mode
[  577.491028][T28037] gre1: entered allmulticast mode
[  577.563938][  T122] net_ratelimit: 5 callbacks suppressed
[  577.563957][  T122] bond2: (slave bridge1): failed to get link speed/duplex
[  577.625493][T27814] veth0_vlan: entered promiscuous mode
[  577.676779][T27814] veth1_vlan: entered promiscuous mode
[  577.732117][T28049] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  577.732882][T28052] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  577.756794][T16703] bond2: (slave bridge1): failed to get link speed/duplex
[  577.782699][T27814] veth0_macvtap: entered promiscuous mode
[  577.801839][T27814] veth1_macvtap: entered promiscuous mode
[  577.843053][T27814] batman_adv: batadv0: Interface activated: batadv_slave_0
[  577.890844][T27814] batman_adv: batadv0: Interface activated: batadv_slave_1
[  577.955427][ T3512] bond2: (slave bridge1): failed to get link speed/duplex
[  577.978542][T10137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  578.015018][T10137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  578.025794][T16703] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  578.057637][T16703] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  578.074001][ T5148] Bluetooth: hci0: command tx timeout
[  578.139208][T28070] x_tables: ip6_tables: mh match: only valid for protocol 135
[  578.154408][    C1] syz_tun: tun_net_xmit 42
[  578.232752][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.252114][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  578.264755][T16703] bond2: (slave bridge1): failed to get link speed/duplex
[  578.343689][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.366632][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  578.374193][T16703] bond2: (slave bridge1): failed to get link speed/duplex
[  578.426805][T28082] batman_adv: batadv0: Adding interface: dummy0
[  578.433182][T28082] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  578.461926][T28082] batman_adv: batadv0: Interface activated: dummy0
[  578.478532][T28082] batadv0: mtu less than device minimum
[  578.486230][T28082] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  578.498431][T28082] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  578.711090][T28087] 8021q: adding VLAN 0 to HW filter on device bond4
[  578.906771][T28104] __nla_validate_parse: 63 callbacks suppressed
[  578.906789][T28104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6226'.
[  578.945211][T28104] bond3: option mode: unable to set because the bond device has slaves
[  579.193920][    C1] syz_tun: tun_net_xmit 42
[  579.288404][T28132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6234'.
[  579.311356][T28132] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  579.405719][T28142] 8021q: adding VLAN 0 to HW filter on device team0
[  579.467637][T28143] bond5: invalid ARP target 0.0.0.0 specified for addition
[  579.476320][T28143] bond5: option arp_ip_target: invalid value (0)
[  579.506831][T28143] bond5 (unregistering): Released all slaves
[  579.533096][T28148] netlink: 'syz.2.6239': attribute type 11 has an invalid length.
[  579.620799][T28153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6239'.
[  579.735019][T28152] syzkaller0: entered allmulticast mode
[  579.746095][T28155] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6241'.
[  579.760391][T28151] syzkaller0 (unregistering): left allmulticast mode
[  579.807514][T28162] netlink: 'syz.4.6240': attribute type 10 has an invalid length.
[  579.837824][T28162] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6240'.
[  579.927859][T28162] dummy0: entered promiscuous mode
[  579.934937][T28162] batman_adv: batadv0: Interface deactivated: dummy0
[  579.944937][T28162] batman_adv: batadv0: Removing interface: dummy0
[  579.952916][T28162] bridge0: port 2(dummy0) entered blocking state
[  579.960041][T28162] bridge0: port 2(dummy0) entered disabled state
[  579.986776][T28162] dummy0: entered allmulticast mode
[  580.012268][T28162] bridge0: port 2(dummy0) entered blocking state
[  580.018812][T28162] bridge0: port 2(dummy0) entered forwarding state
[  580.118100][T28173] ip6tnl0: Caught tx_queue_len zero misconfig
[  580.154933][ T5148] Bluetooth: hci0: command tx timeout
[  580.190968][T28177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6248'.
[  580.233934][    C1] syz_tun: tun_net_xmit 42
[  580.238804][T28181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6247'.
[  580.327017][T28186] netlink: 'syz.2.6251': attribute type 32 has an invalid length.
[  580.330370][T28184] lo: Caught tx_queue_len zero misconfig
[  580.539224][T28199] vlan2: entered promiscuous mode
[  580.554031][T28199] vlan2: entered allmulticast mode
[  580.564673][T28199] hsr_slave_1: entered allmulticast mode
[  581.152144][T28241] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6271'.
[  581.171714][T28243] tipc: Failed to obtain node identity
[  581.180728][T28243] tipc: Enabling of bearer <ib:gretap0> rejected, failed to enable media
[  581.205773][T28241] netlink: 'syz.6.6271': attribute type 7 has an invalid length.
[  581.243890][T28241] netlink: 'syz.6.6271': attribute type 8 has an invalid length.
[  581.261141][T28241] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6271'.
[  581.277224][T28254] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 0, id = 0
[  581.281373][T28255] netlink: 'syz.2.6273': attribute type 1 has an invalid length.
[  581.296291][T28255] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6273'.
[  581.313133][T28241] bridge0: entered promiscuous mode
[  581.328889][T28241] gretap0: entered promiscuous mode
[  581.336074][T28241] erspan0: entered promiscuous mode
[  581.342615][T28241] debugfs: 'hsr0' already exists in 'hsr'
[  581.351098][T28241] Cannot create hsr debugfs directory
[  581.373691][T28241] hsr0: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  581.386359][T28241] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  581.397470][T28241] hsr0: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network
[  581.498329][T28261] bond15: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  581.534190][T28261] bond15 (unregistering): Released all slaves
[  581.769189][T28274] netlink: 'syz.1.6280': attribute type 21 has an invalid length.
[  581.777974][T28274] netlink: 'syz.1.6280': attribute type 1 has an invalid length.
[  582.264518][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  582.300550][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  582.308985][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  582.323625][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  582.338396][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  582.401964][T28290] 8021q: VLANs not supported on sit0
[  582.431433][T28287] vxcan1 speed is unknown, defaulting to 1000
[  582.650989][T28287] lo speed is unknown, defaulting to 1000
[  582.786050][T21829] net_ratelimit: 48 callbacks suppressed
[  582.786067][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  582.929097][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  582.946273][T28287] chnl_net:caif_netlink_parms(): no params data found
[  583.120195][T28287] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.128804][T28287] bridge0: port 1(bridge_slave_0) entered disabled state
[  583.133562][T28335] netlink: 'syz.4.6296': attribute type 1 has an invalid length.
[  583.136649][T28287] bridge_slave_0: entered allmulticast mode
[  583.138509][T28287] bridge_slave_0: entered promiscuous mode
[  583.205051][T28335] 8021q: adding VLAN 0 to HW filter on device bond1
[  583.225135][T28287] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.232386][T28287] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.241391][T28287] bridge_slave_1: entered allmulticast mode
[  583.249505][T28287] bridge_slave_1: entered promiscuous mode
[  583.286214][T28337] vlan4: entered promiscuous mode
[  583.291580][T28337] bond1: entered promiscuous mode
[  583.312026][T28337] vlan4: entered allmulticast mode
[  583.332190][T28337] bond1: entered allmulticast mode
[  583.377993][T28287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  583.390572][T28287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  583.436091][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  583.473298][T28287] team0: Port device team_slave_0 added
[  583.488626][T28347] netlink: 'syz.6.6301': attribute type 2 has an invalid length.
[  583.488970][T28287] team0: Port device team_slave_1 added
[  583.496716][T28347] netlink: 'syz.6.6301': attribute type 1 has an invalid length.
[  583.542437][T28287] batman_adv: batadv0: Adding interface: batadv_slave_0
[  583.549945][T28287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  583.576909][T28287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  583.589834][T28287] batman_adv: batadv0: Adding interface: batadv_slave_1
[  583.597403][T28287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  583.627588][T28287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  583.686618][T28287] hsr_slave_0: entered promiscuous mode
[  583.693489][T28287] hsr_slave_1: entered promiscuous mode
[  583.700733][T28287] debugfs: 'hsr0' already exists in 'hsr'
[  583.707469][T28287] Cannot create hsr debugfs directory
[  583.801054][T28357] xt_TPROXY: Can be used only with -p tcp or -p udp
[  584.028403][T28287] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.041028][T28287] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  584.065055][T28370] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  584.079973][T28370] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  584.089491][T28370] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  584.397346][ T5148] Bluetooth: hci5: command tx timeout
[  584.463627][T28287] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.474745][T28287] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  584.495633][T28370] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  584.585395][T28370] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  584.604492][T28370] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  584.632418][T28370] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  584.672570][T28287] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.683446][T28287] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  584.699563][T28370] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  584.709254][T28370] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  584.718985][T28370] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  584.733940][T28370] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  584.786691][T28287] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.800688][T28287] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  584.840111][T28370] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  584.850031][T28370] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  584.874525][T16703] bond2: (slave bridge1): failed to get link speed/duplex
[  584.962594][T28396] __nla_validate_parse: 36 callbacks suppressed
[  584.962614][T28396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6316'.
[  585.100547][T28287] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  585.133143][T28287] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  585.156416][T28287] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  585.165172][T28405] validate_nla: 2 callbacks suppressed
[  585.165189][T28405] netlink: 'syz.4.6320': attribute type 2 has an invalid length.
[  585.168642][T28287] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  585.174646][T28405] netlink: 'syz.4.6320': attribute type 1 has an invalid length.
[  585.211111][T28410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6321'.
[  585.250075][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  585.601054][T28422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6323'.
[  585.718227][T28430] netlink: 'syz.1.6324': attribute type 21 has an invalid length.
[  585.727751][T28430] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6324'.
[  585.766586][T28430] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6324'.
[  585.828262][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  585.932551][T28287] 8021q: adding VLAN 0 to HW filter on device bond0
[  585.984570][T16703] bond2: (slave bridge1): failed to get link speed/duplex
[  586.038192][T28287] 8021q: adding VLAN 0 to HW filter on device team0
[  586.059399][T28441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  586.154065][T10137] bridge0: port 1(bridge_slave_0) entered blocking state
[  586.161302][T10137] bridge0: port 1(bridge_slave_0) entered forwarding state
[  586.196710][T10143] bridge0: port 2(bridge_slave_1) entered blocking state
[  586.203906][T10143] bridge0: port 2(bridge_slave_1) entered forwarding state
[  586.238173][T16703] bond2: (slave bridge1): failed to get link speed/duplex
[  586.398207][T10143] bond2: (slave bridge1): failed to get link speed/duplex
[  586.474768][ T5148] Bluetooth: hci5: command tx timeout
[  586.488010][T28465] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6333'.
[  586.559204][T28474] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6333'.
[  586.810914][T28480] netlink: 'syz.4.6337': attribute type 4 has an invalid length.
[  586.912804][T28287] 8021q: adding VLAN 0 to HW filter on device batadv0
[  586.939647][T28492] h: entered promiscuous mode
[  586.961182][T28494] geneve2: entered promiscuous mode
[  586.967023][T28494] geneve2: entered allmulticast mode
[  586.976739][T21829] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  586.994761][T21829] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  587.003584][T21829] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  587.057363][T21829] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  587.080670][T28503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6342'.
[  587.161088][T28287] veth0_vlan: entered promiscuous mode
[  587.192799][T28287] veth1_vlan: entered promiscuous mode
[  587.206381][T28508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6345'.
[  587.221515][T28508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6345'.
[  587.275125][T28287] veth0_macvtap: entered promiscuous mode
[  587.297375][T28287] veth1_macvtap: entered promiscuous mode
[  587.382988][T28287] batman_adv: batadv0: Interface activated: batadv_slave_0
[  587.437769][T28287] batman_adv: batadv0: Interface activated: batadv_slave_1
[  587.492009][T21829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  587.511080][T21829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  587.559847][T21829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  587.571854][T21829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  587.607852][T28529] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  587.639125][T28529] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  587.648691][T28529] gretap1: entered promiscuous mode
[  587.654498][T28529] gretap1: entered allmulticast mode
[  587.689684][T28532] netlink: 'syz.6.6350': attribute type 1 has an invalid length.
[  587.804027][T10137] net_ratelimit: 4 callbacks suppressed
[  587.804046][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  587.868774][T24484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.885921][T24484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  587.935372][T10143] bond2: (slave bridge1): failed to get link speed/duplex
[  587.942673][T10137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.959734][T10137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.054554][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  588.142611][T28563] netlink: 'syz.6.6360': attribute type 1 has an invalid length.
[  588.163987][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  588.275968][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  588.323759][T28578] hsr0: entered promiscuous mode
[  588.330444][T28578] macvlan2: entered allmulticast mode
[  588.337887][T28578] hsr0: entered allmulticast mode
[  588.343046][T28578] bridge0: entered allmulticast mode
[  588.348501][T28578] gretap0: entered allmulticast mode
[  588.374728][T28581] veth1_macvtap: left promiscuous mode
[  588.426495][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  588.544296][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  588.556460][ T5148] Bluetooth: hci5: command tx timeout
[  588.654507][T16703] bond2: (slave bridge1): failed to get link speed/duplex
[  588.904620][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  588.999890][T28595] ±ÿ: renamed from team_slave_1 (while UP)
[  589.054349][T16703] bond2: (slave bridge1): failed to get link speed/duplex
[  589.270940][T28608] netlink: 'syz.2.6375': attribute type 13 has an invalid length.
[  589.577035][T28631] netlink: 'syz.6.6381': attribute type 11 has an invalid length.
[  589.748354][T28640] team0: Device gtp0 is up. Set it down before adding it as a team port
[  589.971648][T28654] netlink: 'syz.4.6389': attribute type 1 has an invalid length.
[  590.138666][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  590.149774][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  590.171090][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  590.179416][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  590.187454][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  590.241253][T28661] vxcan1 speed is unknown, defaulting to 1000
[  590.626110][T28661] lo speed is unknown, defaulting to 1000
[  590.634518][ T5148] Bluetooth: hci5: command tx timeout
[  591.024345][T28700] syzkaller1: entered promiscuous mode
[  591.029852][T28700] syzkaller1: entered allmulticast mode
[  591.075837][T28661] chnl_net:caif_netlink_parms(): no params data found
[  591.104737][T28668] __nla_validate_parse: 10 callbacks suppressed
[  591.104758][T28668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6394'.
[  591.126851][T28668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6394'.
[  591.166874][T28708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6402'.
[  591.176923][T28708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6402'.
[  591.191514][T28708] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  591.198838][T28708] IPv6: NLM_F_CREATE should be set when creating new route
[  591.206115][T28708] IPv6: NLM_F_CREATE should be set when creating new route
[  591.303169][T28715] netlink: 'syz.1.6405': attribute type 1 has an invalid length.
[  591.312066][T28715] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6405'.
[  591.321519][T28715] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6405'.
[  591.333105][T28717] netlink: 'syz.4.6404': attribute type 1 has an invalid length.
[  591.365918][T28717] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6404'.
[  591.406193][T28717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6404'.
[  591.428158][T28661] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.484044][T28661] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.491466][T28661] bridge_slave_0: entered allmulticast mode
[  591.516164][T28661] bridge_slave_0: entered promiscuous mode
[  591.536649][T28661] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.544472][T28661] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.551939][T28661] bridge_slave_1: entered allmulticast mode
[  591.576938][T28661] bridge_slave_1: entered promiscuous mode
[  591.680576][T28661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  591.697972][T28661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  591.814999][T28661] team0: Port device team_slave_0 added
[  591.845140][T28661] team0: Port device team_slave_1 added
[  591.872272][T28747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6414'.
[  591.937367][T28661] batman_adv: batadv0: Adding interface: batadv_slave_0
[  591.975581][T28661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  592.013717][T28757] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6415'.
[  592.022820][T28661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  592.042038][T28759] netlink: 'syz.2.6417': attribute type 3 has an invalid length.
[  592.052331][T28661] batman_adv: batadv0: Adding interface: batadv_slave_1
[  592.067943][T28661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  592.109882][T28661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  592.217635][T28771] netlink: 'syz.6.6415': attribute type 8 has an invalid length.
[  592.241243][ T5148] Bluetooth: hci3: command tx timeout
[  592.272376][T28757] bond5: entered promiscuous mode
[  592.278306][T28757] 8021q: adding VLAN 0 to HW filter on device bond5
[  592.301600][T28756] macvlan3: entered promiscuous mode
[  592.307704][T28756] macvlan3: entered allmulticast mode
[  592.315238][T28756] bond5: (slave macvlan3): Opening slave failed
[  592.714012][ T5148] Bluetooth: hci5: command tx timeout
[  592.745729][T28661] hsr_slave_0: entered promiscuous mode
[  592.752538][T28661] hsr_slave_1: entered promiscuous mode
[  592.760222][T28661] debugfs: 'hsr0' already exists in 'hsr'
[  592.766466][T28661] Cannot create hsr debugfs directory
[  592.886702][ T2450] block nbd5: Possible stuck request ffff888026230000: control (read@0,1024B). Runtime 60 seconds
[  592.898119][ T2450] block nbd5: Possible stuck request ffff888026230200: control (read@1024,1024B). Runtime 60 seconds
[  592.909739][ T2450] block nbd5: Possible stuck request ffff888026230400: control (read@2048,1024B). Runtime 60 seconds
[  592.921948][ T2450] block nbd5: Possible stuck request ffff888026230600: control (read@3072,1024B). Runtime 60 seconds
[  593.115176][T24484] net_ratelimit: 17 callbacks suppressed
[  593.115196][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  593.290180][T28797] syzkaller0: entered promiscuous mode
[  593.296071][T28797] syzkaller0: entered allmulticast mode
[  593.427106][T28661] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  593.444369][T28661] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  593.466169][T28661] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  593.500200][T28661] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  593.703980][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  593.797588][T28661] 8021q: adding VLAN 0 to HW filter on device bond0
[  593.847478][T28661] 8021q: adding VLAN 0 to HW filter on device team0
[  593.881482][T24484] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.888675][T24484] bridge0: port 1(bridge_slave_0) entered forwarding state
[  593.920545][T28843] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  593.938831][T24484] bridge0: port 2(bridge_slave_1) entered blocking state
[  593.946038][T24484] bridge0: port 2(bridge_slave_1) entered forwarding state
[  593.976002][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  594.096172][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  594.225958][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  594.314563][ T5148] Bluetooth: hci3: command tx timeout
[  594.340328][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  594.434642][T28661] 8021q: adding VLAN 0 to HW filter on device batadv0
[  594.494712][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  594.624825][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  594.744809][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  594.857999][T10143] bond2: (slave bridge1): failed to get link speed/duplex
[  594.937982][T28892] netlink: 'syz.1.6451': attribute type 2 has an invalid length.
[  594.980899][T28892] netlink: 'syz.1.6451': attribute type 1 has an invalid length.
[  594.999529][T28892] netlink: 'syz.1.6451': attribute type 2 has an invalid length.
[  595.023601][T28661] veth0_vlan: entered promiscuous mode
[  595.087889][T28661] veth1_vlan: entered promiscuous mode
[  595.167669][T28661] veth0_macvtap: entered promiscuous mode
[  595.191563][T28661] veth1_macvtap: entered promiscuous mode
[  595.227520][T28661] batman_adv: batadv0: Interface activated: batadv_slave_0
[  595.259183][T28661] batman_adv: batadv0: Interface activated: batadv_slave_1
[  595.281237][ T1093] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  595.336494][ T1093] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  595.399054][T28908] netlink: 'syz.1.6456': attribute type 7 has an invalid length.
[  595.408269][T28908] netlink: 'syz.1.6456': attribute type 8 has an invalid length.
[  595.417613][ T1093] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  595.499557][ T1093] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  595.620790][T28917] netlink: 'syz.4.6458': attribute type 1 has an invalid length.
[  595.648126][T16703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  595.675610][T16703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  595.781036][T21829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  595.811875][T21829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.283289][T28952] __nla_validate_parse: 15 callbacks suppressed
[  596.283309][T28952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6472'.
[  596.398715][ T5148] Bluetooth: hci3: command tx timeout
[  596.590115][T28966] syzkaller1: entered promiscuous mode
[  596.598667][T28966] syzkaller1: entered allmulticast mode
[  596.747108][T28976] veth0: entered promiscuous mode
[  596.764802][T28976] validate_nla: 3 callbacks suppressed
[  596.764821][T28976] netlink: 'syz.1.6478': attribute type 10 has an invalid length.
[  596.785670][T28976] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.793255][T28976] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.839437][T28976] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.846724][T28976] bridge0: port 2(bridge_slave_1) entered forwarding state
[  596.854268][T28976] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.861413][T28976] bridge0: port 1(bridge_slave_0) entered forwarding state
[  596.887174][T28976] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  596.915590][T28978] netlink: 'syz.2.6480': attribute type 12 has an invalid length.
[  596.924700][T28974] veth0: left promiscuous mode
[  596.996063][T28984] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6482'.
[  597.011648][T28984] syzkaller0: entered promiscuous mode
[  597.017921][T28984] syzkaller0: entered allmulticast mode
[  597.028307][T28984] tc action pedit offset must be on 32 bit boundaries
[  597.035659][T28984] tc action pedit offset must be on 32 bit boundaries
[  597.042449][T28984] tc action pedit offset must be on 32 bit boundaries
[  597.049238][T28984] tc action pedit offset must be on 32 bit boundaries
[  597.056009][T28984] tc action pedit offset must be on 32 bit boundaries
[  597.062774][T28984] tc action pedit offset must be on 32 bit boundaries
[  597.069545][T28984] tc action pedit offset must be on 32 bit boundaries
[  597.076304][T28984] tc action pedit offset must be on 32 bit boundaries
[  597.083080][T28984] tc action pedit offset must be on 32 bit boundaries
[  597.089866][T28984] tc action pedit offset must be on 32 bit boundaries
[  597.168810][T28990] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6484'.
[  597.207322][T28989] ip6gre0: Master is either lo or non-ether device
[  597.602827][T29022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6493'.
[  597.612942][T29022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6493'.
[  597.625379][T29022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6493'.
[  597.792605][T29032] netlink: 'syz.7.6494': attribute type 62 has an invalid length.
[  597.842693][T29038] netlink: 'syz.2.6498': attribute type 21 has an invalid length.
[  597.933745][T29042] sctp: [Deprecated]: syz.6.6499 (pid 29042) Use of struct sctp_assoc_value in delayed_ack socket option.
[  597.933745][T29042] Use struct sctp_sack_info instead
[  597.965547][T29038] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6498'.
[  598.021486][T29050] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6502'.
[  598.122645][T29047] team0 (unregistering): Port device team_slave_0 removed
[  598.152356][T29047] team0 (unregistering): Port device team_slave_1 removed
[  598.209591][T29055] bond1: entered promiscuous mode
[  598.217850][T29055] bond1: entered allmulticast mode
[  598.235129][T29055] 8021q: adding VLAN 0 to HW filter on device bond1
[  598.294883][T21829] net_ratelimit: 22 callbacks suppressed
[  598.294906][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  598.378052][T29078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  598.434183][T16703] bond2: (slave bridge1): failed to get link speed/duplex
[  598.479694][ T5148] Bluetooth: hci3: command tx timeout
[  598.544164][ T3512] bond2: (slave bridge1): failed to get link speed/duplex
[  598.654779][ T3512] bond2: (slave bridge1): failed to get link speed/duplex
[  598.804819][ T3512] bond2: (slave bridge1): failed to get link speed/duplex
[  598.914151][ T3512] bond2: (slave bridge1): failed to get link speed/duplex
[  598.965481][T29107] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6518'.
[  598.993004][T29107] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  599.146897][T29117] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6520'.
[  599.156566][T16703] bond2: (slave bridge1): failed to get link speed/duplex
[  599.265380][ T3512] bond2: (slave bridge1): failed to get link speed/duplex
[  599.396399][ T3512] bond2: (slave bridge1): failed to get link speed/duplex
[  599.481713][    C1] vcan0: j1939_tp_rxtimer: 0xffff888095e0b400: rx timeout, send abort
[  599.534872][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  599.668657][T21829] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  599.700767][T21829] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  599.719144][T21829] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  599.748534][T21829] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  599.878943][T29144] syzkaller0: entered promiscuous mode
[  599.898140][T29144] syzkaller0: entered allmulticast mode
[  599.981839][    C1] vcan0: j1939_tp_rxtimer: 0xffff888095e0b800: rx timeout, send abort
[  599.990386][    C1] vcan0: j1939_tp_rxtimer: 0xffff888095e0b400: abort rx timeout. Force session deactivation
[  600.089139][T29153] netlink: 'syz.4.6532': attribute type 7 has an invalid length.
[  600.295438][T29153] gretap0: entered promiscuous mode
[  600.318401][T29153] gretap0: left promiscuous mode
[  600.490156][    C1] vcan0: j1939_tp_rxtimer: 0xffff888095e0b800: abort rx timeout. Force session deactivation
[  600.520032][T29166] geneve3: entered promiscuous mode
[  600.794867][T29190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  601.333238][T29223] __nla_validate_parse: 5 callbacks suppressed
[  601.333257][T29223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6553'.
[  601.497539][T29228] netlink: 'syz.7.6555': attribute type 1 has an invalid length.
[  601.515218][T29228] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6555'.
[  601.534050][T29228] netlink: 1 bytes leftover after parsing attributes in process `syz.7.6555'.
[  601.542944][T29232] netlink: 294 bytes leftover after parsing attributes in process `syz.2.6556'.
[  601.608853][T29228] netlink: 658 bytes leftover after parsing attributes in process `syz.7.6555'.
[  601.818334][T29245] netlink: 408 bytes leftover after parsing attributes in process `syz.2.6560'.
[  602.021009][T29254] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6561'.
[  602.031675][T29255] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6564'.
[  602.058310][T29256] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6564'.
[  602.070612][T29258] netlink: 'syz.4.6562': attribute type 3 has an invalid length.
[  602.087841][T29258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6562'.
[  602.370418][T29269] syzkaller0: entered promiscuous mode
[  602.400693][T29269] syzkaller0: entered allmulticast mode
[  602.753739][T29293] wlan0 speed is unknown, defaulting to 1000
[  602.806666][T29293] wlan0 speed is unknown, defaulting to 1000
[  602.816258][T29293] wlan0 speed is unknown, defaulting to 1000
[  602.879310][T29293] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  602.903356][T29303] vxcan1 speed is unknown, defaulting to 1000
[  602.916538][T29293] wlan0 speed is unknown, defaulting to 1000
[  602.926707][T29293] wlan0 speed is unknown, defaulting to 1000
[  602.935359][T29293] wlan0 speed is unknown, defaulting to 1000
[  602.947827][T29293] wlan0 speed is unknown, defaulting to 1000
[  602.960811][T29293] wlan0 speed is unknown, defaulting to 1000
[  602.993008][T29293] wlan0 speed is unknown, defaulting to 1000
[  603.057822][T29293] wlan0 speed is unknown, defaulting to 1000
[  603.084966][T29293] wlan0 speed is unknown, defaulting to 1000
[  603.092779][T29293] wlan0 speed is unknown, defaulting to 1000
[  603.141565][T29293] wlan0 speed is unknown, defaulting to 1000
[  603.177654][T29293] wlan0 speed is unknown, defaulting to 1000
[  603.206300][T29293] wlan0 speed is unknown, defaulting to 1000
[  603.294176][T29293] wlan0 speed is unknown, defaulting to 1000
[  603.314554][T29293] wlan0 speed is unknown, defaulting to 1000
[  603.512484][T29293] wlan0 speed is unknown, defaulting to 1000
[  603.512568][T29303] lo speed is unknown, defaulting to 1000
[  603.543649][T29331] netlink: 'syz.7.6589': attribute type 1 has an invalid length.
[  603.664943][T10137] net_ratelimit: 27 callbacks suppressed
[  603.664963][T10137] bond2: (slave bridge1): failed to get link speed/duplex
[  603.712604][T29341] openvswitch: netlink: Flow actions attr not present in new flow.
[  603.779090][T29336] bond6: Unable to set down delay as MII monitoring is disabled
[  603.802610][T29336] bond6 (unregistering): Released all slaves
[  603.979597][T29348] syzkaller0: entered promiscuous mode
[  603.996333][T29348] syzkaller0: entered allmulticast mode
[  604.031878][ T3512] bond2: (slave bridge1): failed to get link speed/duplex
[  604.078294][T27915] hid-generic 0005:0B57:0C6E.0003: unknown main item tag 0x0
[  604.096526][T27915] hid-generic 0005:0B57:0C6E.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  604.265776][T16703] bond2: (slave bridge1): failed to get link speed/duplex
[  604.614537][T16703] bond2: (slave bridge1): failed to get link speed/duplex
[  604.753982][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  604.820611][T29394] xt_l2tp: v2 tid > 0xffff: 1114244
[  604.864840][ T3512] bond2: (slave bridge1): failed to get link speed/duplex
[  604.975131][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  605.027490][T29414] netlink: 'syz.4.6607': attribute type 2 has an invalid length.
[  605.049384][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  605.071893][T29414] netlink: 'syz.4.6607': attribute type 1 has an invalid length.
[  605.125456][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  605.338639][T29433] vlan2: entered allmulticast mode
[  605.346624][T29433] bridge8: entered allmulticast mode
[  605.393704][    C1] vcan0: j1939_tp_rxtimer: 0xffff888073eba000: rx timeout, send abort
[  605.892523][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055bea400: rx timeout, send abort
[  605.901986][    C1] vcan0: j1939_tp_rxtimer: 0xffff888073eba000: abort rx timeout. Force session deactivation
[  606.113305][T29479] netlink: 'syz.7.6631': attribute type 1 has an invalid length.
[  606.400843][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055bea400: abort rx timeout. Force session deactivation
[  606.448634][T29495] __nla_validate_parse: 22 callbacks suppressed
[  606.448654][T29495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6636'.
[  606.495122][T29495] netlink: 'syz.4.6636': attribute type 7 has an invalid length.
[  606.523109][T29495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6636'.
[  606.535977][T29501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  606.543248][T29501] IPv6: NLM_F_CREATE should be set when creating new route
[  606.597792][T29505] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96
[  607.286951][T29545] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6654'.
[  607.392122][T29548] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6655'.
[  607.451676][T29555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6658'.
[  607.471298][T29557] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  607.497655][T29557] bond2: (slave lo): Enslaving as an active interface with an up link
[  607.653380][T29569] netlink: 'syz.6.6662': attribute type 1 has an invalid length.
[  608.189816][T29596] bond3: option mode: unable to set because the bond device has slaves
[  608.220678][T29596] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6667'.
[  608.231481][T29596] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6667'.
[  608.247709][T29598] erspan0: entered promiscuous mode
[  608.262424][T29598] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6668'.
[  608.304599][T29596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6667'.
[  608.352515][T29602] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6669'.
[  608.754709][T21829] net_ratelimit: 35 callbacks suppressed
[  608.754737][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  608.965003][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  609.105571][  T122] bond2: (slave bridge1): failed to get link speed/duplex
[  609.224023][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  609.394468][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  609.503999][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  609.613947][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  609.730698][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  609.773590][T29682] netlink: 'syz.4.6688': attribute type 7 has an invalid length.
[  609.799923][T29684] netlink: 'syz.4.6688': attribute type 7 has an invalid length.
[  609.854904][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  609.940596][T29687] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  609.977000][T29687] bond1 (unregistering): Released all slaves
[  610.090384][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  610.218746][T29696] delete_channel: no stack
[  610.242203][T29701] syzkaller1: entered promiscuous mode
[  610.254060][T29701] syzkaller1: entered allmulticast mode
[  610.913094][T29718] syzkaller0: entered promiscuous mode
[  610.919080][T29718] syzkaller0: entered allmulticast mode
[  611.325489][T29735] netlink: 'syz.1.6705': attribute type 4 has an invalid length.
[  611.405014][T29739] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  611.791758][T29761] __nla_validate_parse: 5 callbacks suppressed
[  611.791796][T29761] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6712'.
[  612.133956][T29784] Bluetooth: MGMT ver 1.23
[  612.139238][T29784] IPv6: NLM_F_CREATE should be specified when creating new route
[  612.537329][T29800] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6723'.
[  612.576217][T29800] bridge0: port 2(dummy0) entered disabled state
[  612.598918][T29800] dummy0 (unregistering): left allmulticast mode
[  612.613970][T29800] bridge0: port 2(dummy0) entered disabled state
[  613.775025][  T122] net_ratelimit: 29 callbacks suppressed
[  613.775046][  T122] bond2: (slave bridge1): failed to get link speed/duplex
[  613.894170][  T122] bond2: (slave bridge1): failed to get link speed/duplex
[  614.005259][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  614.114550][ T1093] bond2: (slave bridge1): failed to get link speed/duplex
[  614.224435][T24484] bond2: (slave bridge1): failed to get link speed/duplex
[  614.334286][  T122] bond2: (slave bridge1): failed to get link speed/duplex
[  614.453982][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  614.564526][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  614.674038][T21829] bond2: (slave bridge1): failed to get link speed/duplex
[  614.784081][  T122] bond2: (slave bridge1): failed to get link speed/duplex
[  614.940388][T29774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  615.150310][T29815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6727'.
[  615.171602][T29814] sit2: entered promiscuous mode
[  615.269721][T29821] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  615.317600][T29816] netlink: 'syz.4.6725': attribute type 39 has an invalid length.
[  615.334566][T29809] netlink: 'syz.1.6726': attribute type 1 has an invalid length.
[  615.432616][T29809] bond1: entered promiscuous mode
[  615.462604][T29809] bond1: entered allmulticast mode
[  615.469547][T29809] 8021q: adding VLAN 0 to HW filter on device bond1
[  615.875115][T29852] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6737'.
[  615.889858][T29852] syzkaller0: entered promiscuous mode
[  615.896179][T29852] syzkaller0: entered allmulticast mode
[  615.907007][T29852] tcf_pedit_act: 7 callbacks suppressed
[  615.907025][T29852] tc action pedit offset must be on 32 bit boundaries
[  615.919825][T29852] tc action pedit offset must be on 32 bit boundaries
[  615.926634][T29852] tc action pedit offset must be on 32 bit boundaries
[  615.933414][T29852] tc action pedit offset must be on 32 bit boundaries
[  615.940217][T29852] tc action pedit offset must be on 32 bit boundaries
[  615.947023][T29852] tc action pedit offset must be on 32 bit boundaries
[  615.953830][T29852] tc action pedit offset must be on 32 bit boundaries
[  615.960639][T29852] tc action pedit offset must be on 32 bit boundaries
[  615.967538][T29852] tc action pedit offset must be on 32 bit boundaries
[  615.974346][T29852] tc action pedit offset must be on 32 bit boundaries
[  616.047171][T29859] netlink: 'syz.6.6740': attribute type 21 has an invalid length.
[  616.055384][T29859] IPv6: NLM_F_CREATE should be specified when creating new route
[  616.063292][T29859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  616.070613][T29859] IPv6: NLM_F_CREATE should be set when creating new route
[  616.077881][T29859] IPv6: NLM_F_CREATE should be set when creating new route
[  616.085151][T29859] IPv6: NLM_F_CREATE should be set when creating new route
[  616.169459][T13608] IPVS: starting estimator thread 0...
[  616.264815][T29862] IPVS: using max 29 ests per chain, 69600 per kthread
[  616.432159][T29873] syzkaller0: entered promiscuous mode
[  616.438029][T29873] syzkaller0: entered allmulticast mode
[  616.737448][T29890] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6749'.
[  616.786138][T29890] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6749'.
[  617.109806][T29919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6758'.
[  617.159991][T29924] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6761'.
[  617.228614][T29927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6762'.
[  617.269352][T29923] delete_channel: no stack
[  617.338304][T29927] macvtap1: entered promiscuous mode
[  617.343762][T29927] vlan0: entered promiscuous mode
[  617.352813][T29927] macvtap1: entered allmulticast mode
[  617.370477][T29927] vlan0: entered allmulticast mode
[  617.383221][T29927] veth0_vlan: entered allmulticast mode
[  617.426628][T29941] xt_hashlimit: invalid interval
[  617.593235][T29949] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  617.616186][T29949] bond2: (slave lo): Enslaving as an active interface with an up link
[  617.638048][T29947] FAULT_INJECTION: forcing a failure.
[  617.638048][T29947] name failslab, interval 1, probability 0, space 0, times 0
[  617.650740][T29947] CPU: 0 UID: 0 PID: 29947 Comm: syz.2.6768 Not tainted syzkaller #0 PREEMPT(full) 
[  617.650764][T29947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  617.650775][T29947] Call Trace:
[  617.650784][T29947]  <TASK>
[  617.650793][T29947]  dump_stack_lvl+0xe8/0x150
[  617.650825][T29947]  should_fail_ex+0x412/0x560
[  617.650861][T29947]  should_failslab+0xa8/0x100
[  617.650876][T29947]  ? __nf_conntrack_alloc+0x81/0x3e0
[  617.650892][T29947]  kmem_cache_alloc_noprof+0x87/0x650
[  617.650904][T29947]  ? nf_ct_pernet+0x45/0x270
[  617.650919][T29947]  __nf_conntrack_alloc+0x81/0x3e0
[  617.650934][T29947]  init_conntrack+0x16f/0xf70
[  617.650952][T29947]  ? __pfx_init_conntrack+0x10/0x10
[  617.650968][T29947]  ? __pfx___nf_conntrack_find_get+0x10/0x10
[  617.650980][T29947]  ? __siphash_unaligned+0x22e/0x3b0
[  617.651000][T29947]  nf_conntrack_in+0xbd8/0x15e0
[  617.651013][T29947]  ? lockdep_hardirqs_on+0x7a/0x110
[  617.651037][T29947]  ? __pfx_nf_conntrack_in+0x10/0x10
[  617.651052][T29947]  ? ip6t_do_table+0x1df/0x1560
[  617.651066][T29947]  ? __pfx_ip6t_do_table+0x10/0x10
[  617.651076][T29947]  ? nf_nat_ipv6_in+0x203/0x2c0
[  617.651093][T29947]  ? __pfx_nf_nat_ipv6_in+0x10/0x10
[  617.651107][T29947]  ? __lock_acquire+0x6b5/0x2cf0
[  617.651124][T29947]  ? ipv6_defrag+0x2d6/0x3b0
[  617.651136][T29947]  ? __pfx_ipv6_conntrack_in+0x10/0x10
[  617.651150][T29947]  nf_hook_slow+0xc5/0x220
[  617.651177][T29947]  nf_hook_slow_list+0x1d0/0x3a0
[  617.651190][T29947]  ? __pfx_nf_hook_slow_list+0x10/0x10
[  617.651206][T29947]  ip6_sublist_rcv+0xc8c/0xda0
[  617.651221][T29947]  ? ip6_sublist_rcv+0xb0b/0xda0
[  617.651234][T29947]  ? rcu_read_unlock+0x87/0xa0
[  617.651246][T29947]  ? __pfx_ip6_sublist_rcv+0x10/0x10
[  617.651266][T29947]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  617.651277][T29947]  ? ip6_rcv_core+0xa2/0x1740
[  617.651293][T29947]  ipv6_list_rcv+0x3f4/0x450
[  617.651310][T29947]  ? __pfx_ipv6_list_rcv+0x10/0x10
[  617.651332][T29947]  ? kasan_save_track+0x4f/0x80
[  617.651351][T29947]  ? kasan_save_track+0x3e/0x80
[  617.651367][T29947]  ? __kasan_slab_alloc+0x6c/0x80
[  617.651386][T29947]  ? kmem_cache_alloc_bulk_noprof+0x570/0x7e0
[  617.651401][T29947]  ? __pfx_ipv6_list_rcv+0x10/0x10
[  617.651414][T29947]  __netif_receive_skb_list_core+0x5ff/0x810
[  617.651439][T29947]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  617.651459][T29947]  netif_receive_skb_list_internal+0x995/0xcf0
[  617.651478][T29947]  ? netif_receive_skb_list_internal+0x501/0xcf0
[  617.651493][T29947]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  617.651512][T29947]  ? __xdp_build_skb_from_frame+0x34b/0x730
[  617.651528][T29947]  netif_receive_skb_list+0x55/0x4b0
[  617.651541][T29947]  ? bpf_test_run_xdp_live+0x1921/0x1cf0
[  617.651559][T29947]  bpf_test_run_xdp_live+0x1946/0x1cf0
[  617.651584][T29947]  ? bpf_test_run_xdp_live+0x438/0x1cf0
[  617.651604][T29947]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  617.651630][T29947]  ? 0xffffffffa0201818
[  617.651639][T29947]  ? 0xffffffffa0201850
[  617.651648][T29947]  ? 0xffffffffa0201890
[  617.651668][T29947]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  617.651683][T29947]  ? _copy_from_user+0x94/0xb0
[  617.651695][T29947]  ? bpf_test_init+0x113/0x150
[  617.651709][T29947]  ? xdp_convert_md_to_buff+0x5b/0x330
[  617.651726][T29947]  bpf_prog_test_run_xdp+0x81c/0x1160
[  617.651749][T29947]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  617.651767][T29947]  ? __fget_files+0x2a/0x420
[  617.651785][T29947]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  617.651801][T29947]  bpf_prog_test_run+0x2c7/0x340
[  617.651814][T29947]  __sys_bpf+0x643/0x950
[  617.651831][T29947]  ? __pfx___sys_bpf+0x10/0x10
[  617.651860][T29947]  ? ksys_write+0x242/0x270
[  617.651873][T29947]  ? __pfx_ksys_write+0x10/0x10
[  617.651895][T29947]  __x64_sys_bpf+0x7c/0x90
[  617.651921][T29947]  do_syscall_64+0x14d/0xf80
[  617.651942][T29947]  ? trace_irq_disable+0x3b/0x150
[  617.651961][T29947]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.651972][T29947]  ? clear_bhb_loop+0x40/0x90
[  617.651984][T29947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.651995][T29947] RIP: 0033:0x7f69f379c799
[  617.652005][T29947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  617.652015][T29947] RSP: 002b:00007f69f470f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  617.652027][T29947] RAX: ffffffffffffffda RBX: 00007f69f3a15fa0 RCX: 00007f69f379c799
[  617.652036][T29947] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  617.652043][T29947] RBP: 00007f69f470f090 R08: 0000000000000000 R09: 0000000000000000
[  617.652049][T29947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  617.652056][T29947] R13: 00007f69f3a16038 R14: 00007f69f3a15fa0 R15: 00007fff4003b368
[  617.652072][T29947]  </TASK>
[  618.428593][T29965] netlink: 'syz.2.6773': attribute type 1 has an invalid length.
[  618.440120][T29958] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6771'.
[  618.516051][T29965] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.589112][T29973] ip6t_srh: unknown srh invflags 4000
[  618.632260][T29972] mac80211_hwsim hwsim139 ÿ
: renamed from wlan1 (while UP)
[  618.790787][T29953] bridge1: entered promiscuous mode
[  618.796749][T29953] bridge1: entered allmulticast mode
[  618.815140][T29953] Bluetooth: hci4: Opcode 0x0401 failed: -22
[  618.836494][T29983] syzkaller0: entered allmulticast mode
[  619.109555][T29995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6781'.
[  619.123197][   T30] INFO: task syz.5.4952:23597 blocked for more than 143 seconds.
[  619.131083][   T30]       Not tainted syzkaller #0
[  619.136199][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  619.153261][   T30] task:syz.5.4952      state:D stack:26440 pid:23597 tgid:23595 ppid:16439  task_flags:0x400140 flags:0x00080002
[  619.177670][   T30] Call Trace:
[  619.184203][   T30]  <TASK>
[  619.190557][   T30]  __schedule+0x15dd/0x52d0
[  619.202595][   T30]  ? __pfx___schedule+0x10/0x10
[  619.210579][   T30]  ? schedule+0x90/0x360
[  619.215285][   T30]  schedule+0x164/0x360
[  619.219689][   T30]  schedule_preempt_disabled+0x13/0x30
[  619.226424][   T30]  __mutex_lock+0x7fe/0x1300
[  619.231425][   T30]  ? __mutex_lock+0x5ac/0x1300
[  619.237152][   T30]  ? nfsd_nl_threads_get_doit+0x1c0/0x790
[  619.243260][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  619.249235][   T30]  ? __nlmsg_put+0xef/0x1b0
[  619.257370][   T30]  ? genlmsg_put+0x137/0x2e0
[  619.262166][   T30]  nfsd_nl_threads_get_doit+0x1c0/0x790
[  619.268481][   T30]  ? kmem_cache_free+0x187/0x630
[  619.273606][   T30]  ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10
[  619.290008][   T30]  ? dev_hard_start_xmit+0x802/0x870
[  619.295835][   T30]  genl_family_rcv_msg_doit+0x22a/0x330
[  619.301482][   T30]  ? __asan_memcpy+0x40/0x70
[  619.308727][   T30]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  619.315794][   T30]  genl_rcv_msg+0x61c/0x7a0
[  619.320397][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  619.326088][   T30]  ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10
[  619.332254][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  619.337782][   T30]  netlink_rcv_skb+0x232/0x4b0
[  619.342645][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  619.348834][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  619.365140][   T30]  ? down_read+0x272/0x2e0
[  619.369608][   T30]  ? genl_rcv+0xd/0x40
[  619.374502][   T30]  genl_rcv+0x28/0x40
[  619.378686][   T30]  netlink_unicast+0x80f/0x9b0
[  619.383484][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  619.390921][   T30]  ? netlink_sendmsg+0x650/0xb40
[  619.401047][   T30]  ? skb_put+0x11b/0x210
[  619.406164][   T30]  netlink_sendmsg+0x813/0xb40
[  619.411400][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  619.417425][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  619.422522][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  619.428178][   T30]  ____sys_sendmsg+0x972/0x9f0
[  619.433087][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  619.441342][   T30]  ? import_iovec+0x73/0xa0
[  619.446418][   T30]  ___sys_sendmsg+0x2a5/0x360
[  619.451138][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  619.458884][   T30]  ? futex_wake+0x4ac/0x580
[  619.463481][   T30]  ? __fget_files+0x2a/0x420
[  619.469077][   T30]  ? __fget_files+0x3a0/0x420
[  619.473885][   T30]  __x64_sys_sendmsg+0x1bd/0x2a0
[  619.478965][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  619.484870][   T30]  ? rcu_is_watching+0x15/0xb0
[  619.489679][   T30]  do_syscall_64+0x14d/0xf80
[  619.496557][   T30]  ? trace_irq_disable+0x3b/0x150
[  619.501619][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.516784][   T30]  ? clear_bhb_loop+0x40/0x90
[  619.521526][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.528395][   T30] RIP: 0033:0x7f4bf9b9c799
[  619.532840][   T30] RSP: 002b:00007f4bfa9e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  619.542107][   T30] RAX: ffffffffffffffda RBX: 00007f4bf9e15fa0 RCX: 00007f4bf9b9c799
[  619.550414][   T30] RDX: 0000000024048000 RSI: 0000200000000000 RDI: 0000000000000005
[  619.561369][   T30] RBP: 00007f4bf9c32c99 R08: 0000000000000000 R09: 0000000000000000
[  619.569724][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  619.578044][   T30] R13: 00007f4bf9e16038 R14: 00007f4bf9e15fa0 R15: 00007ffcf5499788
[  619.586858][   T30]  </TASK>
[  619.590181][   T30] 
[  619.590181][   T30] Showing all locks held in the system:
[  619.598099][   T30] 1 lock held by khungtaskd/30:
[  619.603195][   T30]  #0: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  619.619224][   T30] 2 locks held by getty/5588:
[  619.625960][   T30]  #0: ffff888032ccb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  619.636214][   T30]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  619.647438][   T30] 1 lock held by udevd/5827:
[  619.652049][   T30]  #0: ffff888026189358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  619.665018][   T30] 3 locks held by kworker/u8:16/10137:
[  619.670501][   T30]  #0: ffff888031331948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  619.684657][   T30]  #1: ffffc9000c69fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  619.698649][   T30]  #2: ffffffff8fbcdbc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  619.708538][   T30] 2 locks held by syz.3.2656/15608:
[  619.721759][   T30]  #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  619.735576][   T30]  #1: ffffffff8ea85f88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  619.746347][   T30] 3 locks held by kworker/u8:32/21829:
[  619.751800][   T30]  #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  619.766639][   T30]  #1: ffffc9000d7e7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  619.778289][   T30]  #2: ffffffff8fbcdbc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  619.787635][   T30] 2 locks held by syz.5.4952/23597:
[  619.792922][   T30]  #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  619.801549][   T30]  #1: ffffffff8ea85f88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790
[  619.812209][   T30] 2 locks held by syz.0.6180/27934:
[  619.817656][   T30]  #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  619.826168][   T30]  #1: ffffffff8ea85f88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0
[  619.837690][   T30] 4 locks held by syz.4.6769/29955:
[  619.842903][   T30]  #0: ffff888092aa4148 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  619.853450][   T30]  #1: ffffffff8fc39970 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90
[  619.866840][   T30]  #2: ffff88807c68acd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x13d/0xdb0
[  619.877415][   T30]  #3: ffffffff8e7647b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  619.888537][   T30] 2 locks held by syz.7.6778/29980:
[  619.893725][   T30]  #0: ffffffff8fbcdbc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  619.903680][   T30]  #1: ffffffff8e7647b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  619.914886][   T30] 1 lock held by syz.6.6779/29984:
[  619.920007][   T30]  #0: ffffffff8fbcdbc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  619.929468][   T30] 1 lock held by syz.6.6779/29985:
[  619.934889][   T30]  #0: ffffffff8fbcdbc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0
[  619.945527][   T30] 1 lock held by syz.6.6779/29986:
[  619.950657][   T30]  #0: ffffffff8fbcdbc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  619.960356][   T30] 2 locks held by syz.1.6781/29991:
[  619.966524][   T30]  #0: ffffffff8f384ba8 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1b10
[  619.977117][   T30]  #1: ffffffff8fbcdbc8 (rtnl_mutex){+.+.}-{4:4}, at: ppp_ioctl+0x6ce/0x1b10
[  619.986584][   T30] 1 lock held by syz.1.6781/29993:
[  619.991687][   T30]  #0: ffffffff8f384ba8 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1b10
[  620.000607][   T30] 1 lock held by syz.1.6781/29994:
[  620.005797][   T30]  #0: ffffffff8f384ba8 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1b10
[  620.015086][   T30] 
[  620.017426][   T30] =============================================
[  620.017426][   T30] 
[  620.026314][   T30] NMI backtrace for cpu 0
[  620.026330][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  620.026349][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  620.026359][   T30] Call Trace:
[  620.026366][   T30]  <TASK>
[  620.026374][   T30]  dump_stack_lvl+0xe8/0x150
[  620.026405][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  620.026503][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  620.026537][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  620.026564][   T30]  sys_info+0x135/0x170
[  620.026584][   T30]  watchdog+0xfd9/0x1030
[  620.026617][   T30]  ? watchdog+0x21a/0x1030
[  620.026646][   T30]  kthread+0x388/0x470
[  620.026662][   T30]  ? __pfx_watchdog+0x10/0x10
[  620.026684][   T30]  ? __pfx_kthread+0x10/0x10
[  620.026702][   T30]  ret_from_fork+0x51e/0xb90
[  620.026732][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  620.026752][   T30]  ? __switch_to+0xc7d/0x1450
[  620.026782][   T30]  ? __pfx_kthread+0x10/0x10
[  620.026799][   T30]  ret_from_fork_asm+0x1a/0x30
[  620.026838][   T30]  </TASK>
[  620.026847][   T30] Sending NMI from CPU 0 to CPUs 1:
[  620.139739][    C1] NMI backtrace for cpu 1
[  620.139756][    C1] CPU: 1 UID: 0 PID: 27333 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  620.139777][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  620.139788][    C1] RIP: 0010:__lock_acquire+0x3b3/0x2cf0
[  620.139816][    C1] Code: 85 c0 74 1c 83 3d 90 45 70 0e 00 75 13 48 8d 3d 93 66 73 0e 48 c7 c6 e4 4c 01 8e 67 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 <41> 8b 45 20 25 ff 1f 00 00 48 0f a3 05 3c 73 82 12 73 17 48 69 c0
[  620.139832][    C1] RSP: 0018:ffffc9000fb772c8 EFLAGS: 00000002
[  620.139847][    C1] RAX: ffffffff93c51b80 RBX: 0000000000000002 RCX: 000000000000001e
[  620.139859][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  620.139870][    C1] RBP: 0000000000000001 R08: ffffffff821dae25 R09: ffffffff8e75e5e0
[  620.139882][    C1] R10: 0000000000000040 R11: 0000000000000000 R12: 000000000000001e
[  620.139892][    C1] R13: ffff88804a076700 R14: ffff88804a075b80 R15: ffff88804a0766d8
[  620.139906][    C1] FS:  000055556105e500(0000) GS:ffff88812555d000(0000) knlGS:0000000000000000
[  620.139921][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  620.139933][    C1] CR2: 00007ff9d75e7158 CR3: 000000003fe16000 CR4: 00000000003526f0
[  620.139948][    C1] Call Trace:
[  620.139955][    C1]  <TASK>
[  620.139966][    C1]  ? __alloc_frozen_pages_noprof+0x1de/0x380
[  620.139990][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  620.140011][    C1]  ? alloc_counters+0x64/0x5d0
[  620.140168][    C1]  ? do_syscall_64+0x14d/0xf80
[  620.140187][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.140207][    C1]  lock_acquire+0xf0/0x2e0
[  620.140227][    C1]  ? pfn_valid+0x125/0x4c0
[  620.140256][    C1]  ? pfn_valid+0x125/0x4c0
[  620.140279][    C1]  pfn_valid+0x141/0x4c0
[  620.140302][    C1]  ? pfn_valid+0x125/0x4c0
[  620.140326][    C1]  __vmap_pages_range_noflush+0x7ab/0xf40
[  620.140362][    C1]  __vmalloc_node_range_noprof+0x11cc/0x1730
[  620.140384][    C1]  ? __pfx___mutex_trylock_common+0x10/0x10
[  620.140420][    C1]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  620.140438][    C1]  ? xt_find_table_lock+0x54/0x3e0
[  620.140491][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  620.140510][    C1]  ? net_generic+0x1e/0x240
[  620.140529][    C1]  ? alloc_counters+0x64/0x5d0
[  620.140551][    C1]  vzalloc_noprof+0xb2/0xe0
[  620.140569][    C1]  ? alloc_counters+0x64/0x5d0
[  620.140592][    C1]  alloc_counters+0x64/0x5d0
[  620.140617][    C1]  ? xt_find_table_lock+0x35e/0x3e0
[  620.140638][    C1]  do_ipt_get_ctl+0xada/0x1240
[  620.140663][    C1]  ? do_ip_getsockopt+0x131d/0x1d40
[  620.140718][    C1]  ? __pfx_do_ipt_get_ctl+0x10/0x10
[  620.140740][    C1]  ? do_ip_getsockopt+0x131d/0x1d40
[  620.140763][    C1]  ? __mutex_trylock_common+0x158/0x260
[  620.140789][    C1]  ? __pfx___mutex_trylock_common+0x10/0x10
[  620.140816][    C1]  ? rcu_is_watching+0x15/0xb0
[  620.140839][    C1]  ? trace_contention_end+0x3d/0x150
[  620.140868][    C1]  ? nf_getsockopt+0x224/0x290
[  620.140889][    C1]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  620.140911][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  620.140930][    C1]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  620.140957][    C1]  nf_getsockopt+0x26e/0x290
[  620.140977][    C1]  ip_getsockopt+0x19e/0x230
[  620.140999][    C1]  ? __pfx_ip_getsockopt+0x10/0x10
[  620.141021][    C1]  ? sock_common_getsockopt+0x2d/0xb0
[  620.141045][    C1]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  620.141070][    C1]  do_sock_getsockopt+0x2d3/0x3f0
[  620.141089][    C1]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  620.141107][    C1]  ? fd_install+0x94/0x3d0
[  620.141135][    C1]  __x64_sys_getsockopt+0x1a4/0x240
[  620.141157][    C1]  do_syscall_64+0x14d/0xf80
[  620.141175][    C1]  ? trace_irq_disable+0x3b/0x150
[  620.141200][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.141217][    C1]  ? clear_bhb_loop+0x40/0x90
[  620.141236][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.141253][    C1] RIP: 0033:0x7ff9d739df6a
[  620.141268][    C1] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7
[  620.141282][    C1] RSP: 002b:00007fff764fd0f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000037
[  620.141300][    C1] RAX: ffffffffffffffda RBX: 00007fff764fd180 RCX: 00007ff9d739df6a
[  620.141312][    C1] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003
[  620.141323][    C1] RBP: 0000000000000003 R08: 00007fff764fd11c R09: 0000000000000000
[  620.141334][    C1] R10: 00007fff764fd180 R11: 0000000000000216 R12: 00007ff9d75e9fc0
[  620.141346][    C1] R13: 00007fff764fd11c R14: 0000000000000000 R15: 00007ff9d75ec180
[  620.141365][    C1]  </TASK>
[  620.620689][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  620.627576][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  620.636674][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  620.646741][   T30] Call Trace:
[  620.650016][   T30]  <TASK>
[  620.652934][   T30]  vpanic+0x56c/0xa60
[  620.656914][   T30]  ? __pfx___schedule+0x10/0x10
[  620.661765][   T30]  ? __pfx_vpanic+0x10/0x10
[  620.666261][   T30]  ? __pfx_console_unlock+0x10/0x10
[  620.671456][   T30]  panic+0xc5/0xd0
[  620.675168][   T30]  ? __pfx_panic+0x10/0x10
[  620.679576][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  620.684941][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  620.691091][   T30]  watchdog+0x1023/0x1030
[  620.695422][   T30]  ? watchdog+0x21a/0x1030
[  620.699849][   T30]  kthread+0x388/0x470
[  620.703915][   T30]  ? __pfx_watchdog+0x10/0x10
[  620.708596][   T30]  ? __pfx_kthread+0x10/0x10
[  620.713183][   T30]  ret_from_fork+0x51e/0xb90
[  620.717773][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  620.722879][   T30]  ? __switch_to+0xc7d/0x1450
[  620.727551][   T30]  ? __pfx_kthread+0x10/0x10
[  620.732133][   T30]  ret_from_fork_asm+0x1a/0x30
[  620.736907][   T30]  </TASK>
[  620.740292][   T30] Kernel Offset: disabled
[  620.744600][   T30] Rebooting in 86400 seconds..