last executing test programs:

2.159847268s ago: executing program 4 (id=4516):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe8000000000000000000000000000000004000000000000071800000000040000d604"], 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x400, 0x240, 0x240, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x128, 0x150, 0x0, {0x7a00000010000000}, [@common=@srh={{0x30}, {0x2b, 0x0, 0x2, 0xa, 0xda, 0x2880, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="87002dbd7000000000001e0000000a0004007770616e310000000500010002090000"], 0x28}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044)

2.042757735s ago: executing program 1 (id=4519):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x3c}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000040000008900000008000300", @ANYRES32=r6, @ANYBLOB="1406023224b886b8ebccba005d899fcdb2e2c77d27c305"], 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000040000008900000008000300", @ANYRES32=r6, @ANYBLOB="1406023224b886b8ebccba005d899fcdb2e2c77d27c305"], 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x80)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080)={'team0\x00', <r8=>0x0})
socket(0x23, 0x6, 0x8) (async)
socket(0x23, 0x6, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x30d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_GROUP={0x8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x30}}, 0x4000080)

2.003993475s ago: executing program 4 (id=4520):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000007000000040000000c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000794fc2769559d1616859100c8139abdab33d5d2224fe1893e5e1e42f1fecffa494e1ece76ac4a81cef0aab74c92661295fafe1984833a2c5a18db03a9c855b5722f9c656443386abbef1327434a111566ee82d8cc6610d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
r3 = socket$inet6(0xa, 0x5, 0x0)
close(0x3)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000080)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'osf\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x2c}}, 0x0)
setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @loopback, 0xffff}, 0x1c)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r7)
ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r7, @ANYRES32=r6])
socket$netlink(0x10, 0x3, 0x4)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r10, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r9, 0x1, 0xd8}, 0x14)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}], 0x1c)
connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x7}}, 0x24)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf6fec5eade4bb02aa4f152b8bdfdf8ffffffffffeeff547930a8abf35fd3908aa4e150e020a1a45f8d6700ff00000000f669011b4504090bc057a5cdb706ceac9856bad67505a783d6f5d0542b83f636ab45c12311d14da9bf"], 0x0, 0x4}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r1, 0x58, &(0x7f0000000580)}, 0x10)

1.816338466s ago: executing program 0 (id=4522):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
tee(r3, r4, 0x8f5, 0x100000000000000)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0xd, 'wg2\x00'})
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

1.798140418s ago: executing program 1 (id=4523):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x2, 0x146, [0x2000000025c0, 0x0, 0x0, 0x2000000025f0, 0x200000002620], 0x0, 0x0, &(0x7f00000025c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x8, 0xc, 'batadv0\x00', 'netdevsim0\x00', 'ipvlan1\x00', 'veth1_to_bond\x00', @remote, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @random="d685fc5d0114", [0x7f, 0x0, 0x101, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x5a, 0x6, {0x6}}}}}]}]}, 0x1be)
socket(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x1, 0xa, 0x0, 0x1}, 0x20)
syz_emit_ethernet(0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa99879e18f3ff88aa200081001b008906"], 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4404c}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x890b, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf0400000000", @ANYRES32=r5, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f0000000440)="bad330fbc9b55400040000ea0756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
r10 = socket$inet6(0xa, 0x80000, 0x10000)
sendto$inet6(r10, &(0x7f0000000000)="ca463f", 0x3, 0x80, &(0x7f00000000c0)={0xa, 0x4e20, 0xf, @loopback, 0x1}, 0x1c)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [{{0x254, 0x1, {{0x1, 0xfffffff9}, 0x2, 0xa, 0x40, 0x4, 0x1, 'syz0\x00', "a8ade9db18a9e1d93ee4ab381d1f2d57bf24d5a049b3e40ba20d8b981ce6931f", "af7af1d3b3c3ad33171d5f3ebe5ecc5d874c3a06e44c3142a7af088e33b5cb39", [{0x5, 0xb, {0x0, 0x4d}}, {0x7, 0x5, {0x3, 0x8}}, {0x3, 0x6, {0x3, 0x7ff}}, {0x3, 0x1fa0, {0x0, 0xff}}, {0x401, 0x5, {0x0, 0x5}}, {0x2, 0xfffc, {0x0, 0x1}}, {0x4, 0x9dc, {0x2, 0x7}}, {0x5, 0x400, {0x2, 0xfffffff9}}, {0xfffc, 0x1, {0x0, 0x800}}, {0xfff7, 0x10, {0x3, 0x6}}, {0x7df, 0x7, {0x0, 0x2d}}, {0x6, 0x9, {0x0, 0xffffffff}}, {0x4, 0x0, {0x3, 0xfffff000}}, {0x400, 0x1, {0x3}}, {0x0, 0x9, {0x3, 0xe}}, {0x0, 0xf, {0x1, 0x565}}, {0x81c, 0x1, {0x1, 0x2c}}, {0x6072, 0x7fff, {0x1, 0x3}}, {0x5, 0x3, {0x2, 0x3}}, {0x5, 0x9, {0x2, 0x4}}, {0xb9, 0xfffb, {0x1, 0x7}}, {0x0, 0x5, {0x3, 0x81}}, {0x5, 0x5, {0x0, 0xd65}}, {0x9, 0x6c01, {0x0, 0x5}}, {0x7, 0xa, {0x1, 0x7bd6}}, {0x6, 0x2, {0x1, 0xc600000}}, {0xfffa, 0x2, {0x0, 0x8}}, {0x2, 0xbe}, {0x6, 0x8c, {0x4, 0x5}}, {0x5, 0x5, {0x3, 0x3}}, {0x3, 0x1, {0x3, 0x3}}, {0xd29e, 0x3, {0x3, 0x1ff}}, {0x1e70, 0x5, {0x3, 0xfffffbff}}, {0x7, 0x6, {0x2, 0xff}}, {0x3, 0xc6b, {0x0, 0xf}}, {0xc, 0x5, {0x3, 0x3}}, {0x2, 0x1, {0x1, 0x9}}, {0x3, 0x0, {0x1, 0x9}}, {0x0, 0x7a8, {0x0, 0x6}}, {0x0, 0xfffa, {0x3, 0xa8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x20004c00)

1.598055518s ago: executing program 1 (id=4527):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000fdafbdff682401ecdf606f0895924ae73be1e207000400"/40], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000030000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000af000000000000008510000001000000950000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

1.487499563s ago: executing program 3 (id=4529):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000004f40)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000005080)={0x0, 0x0, &(0x7f0000005040)={&(0x7f0000004f80)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r9=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4)
bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10)
bind$xdp(r7, &(0x7f0000000240)={0x2c, 0x1, r9, 0x0, r8}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8)
sendto$inet6(r5, &(0x7f0000000180)="aa", 0x1, 0x8891, &(0x7f0000000100)={0xa, 0x8000, 0x6, @dev, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4d92, @loopback, 0x3}}, 0xfff8, 0x5}, 0x90)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x8, 0x645}, 0x3c)
connect$inet(r0, &(0x7f0000000200)={0x2, 0xce20, @remote}, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)

1.400220936s ago: executing program 1 (id=4530):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r2=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r2, 0x4}, 0x8)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000002000010000000000000000000a8010000000000118000100050015000200000014000100ff020000000000007d8d77fd000000010500130001000000140002"], 0x90}}, 0x0)

1.249771244s ago: executing program 2 (id=4531):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000000180)=0xe8)
sendmsg$nl_generic(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xfc, 0x1c, 0x300, 0x70bd2a, 0x25dfdbfe, {0x1a}, [@nested={0xe5, 0xa9, 0x0, 0x1, [@nested={0x4, 0x34}, @generic="ee89ab801e5d5a7e82b01860e5806112841f06f8bf2498f7bf130453", @typed={0x8, 0x68, 0x0, 0x0, @uid=r2}, @generic="96353ae0ae70bfc3303b15f86585f3fb77ea31336a0af9925eea65729b6f81b128fb1ff46a8069de8205956ad6d896386d22398c3ecd6b1a39e5361ef0db0aa98701ea2b2bdd3a748726898364d219ad5bc4e7b03458dbc6c47f29e713aa8d4fc58dd03b71c585b6d73baee110f47233787c40107c82df7ea8d430c8be4fb966a42e685830a5c15263aaa50e22c37cacb9b6dad35726a706e3faf2732f0b947e1ae209e87c2ceaf77eb0a79aa2abe74943", @typed={0x8, 0x101, 0x0, 0x0, @u32=0x6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80004}, 0x40840)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a6970006d616300000005000400000000000900020073797a3100000000200007800c00018008000140000000000800080000000000080006400000000005000500020000000500010006"], 0x6c}}, 0x0)

1.191674412s ago: executing program 2 (id=4532):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94)
r4 = socket(0x2b, 0x80000, 0x2) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) (async)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r7 = socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) (async)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x2c, r11, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x1) (async)
socket$netlink(0x10, 0x3, 0xc) (async)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)
r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_FLUSHABLE(r13, 0x112, 0x8, &(0x7f00000000c0), 0x4) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x7f, 0x2002}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) (async)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000003c0)='hybla', 0x5)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4)
sendmsg$unix(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500008100005ab3082d8003000100697001000000000000000000680002800400120008000a009f162d", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)

1.080123331s ago: executing program 3 (id=4533):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000ac85500000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9e, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x7, 0xb, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x3, 0x3, 0xa, 0x2}], 0x10, 0xfffff119}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002740)={r0, 0xffffffffffffffff, 0x5, 0x0, @val=@tracing={0x0, 0x5}}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095", @ANYRES16=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x4, 0x3, 0x0, {0xa, 0x4e23, 0xfffffffb, @mcast1, 0x3}}}, 0x80)

1.007002671s ago: executing program 4 (id=4534):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000004c0), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000010400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000040f5"], 0x48}}, 0x0) (async)
sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000010400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000040f5"], 0x48}}, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000000180)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x1, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@ra={0x94, 0x4}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x1a, 0x0, @local, @remote}}}}, 0x42)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90)
socket$kcm(0x29, 0x2, 0x0)

966.871962ms ago: executing program 3 (id=4535):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x7a, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000000208"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x7fe2, 0x3}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000380)={<r6=>r0, &(0x7f0000000180)='\x00', 0x101000, &(0x7f0000000240)={@align=0x2, {0x1, 0x1, 0x7, 0x6}}, 0xe52, &(0x7f0000000280), &(0x7f0000000340)=0xfffffff2})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x1, 0x4, 0x9, 0x0, r5, 0xd, '\x00', 0x0, r6}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r7}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r9=>0x0})
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000002c0)={r9, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
socket(0x28, 0x6, 0xfffffff4)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0)

920.714883ms ago: executing program 2 (id=4536):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES16, @ANYBLOB="579f29d47000ffdbcf25160000000c0006000100000001000000", @ANYRES64=r0, @ANYRES16=r0, @ANYRES8, @ANYRESOCT=0x0, @ANYRES8, @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x4018010}, 0x4000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001040)=@newtaction={0x199c, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, {0x1708, 0x1, [@m_xt={0x284, 0x7, 0x0, 0x0, {{0x7}, {0x1c4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TARG={0x79, 0x6, {0x3ff, 'nat\x00', 0x3, 0x5, "15fdd0ad12b00dd7bda5041d935de005cdbc74c722631119e8299a2f9bfc2aa6132edc3cf9016865791dbd56735b6ea68707a3d31d9ab6163261e995f16ab2c7e194d9712a7d7de5c4b38b201dfb4c"}}, @TCA_IPT_TARG={0x123, 0x6, {0x4, 'raw\x00', 0x2, 0x6e, "c3759fdbdfa8f5248661042c880c56287ff991cbdb3f56d345061a2b30b59ea604d29414c614c203952d659d64ef0d1607a4a8b206b2eb434cc806832f2bdf4ab98ecd26246b39560e09b09076840608887703c9c9cebfddebb8b82aab7f101fc32c557b778890adb5ec5d17935945941a6067ae0b77dd24fa7c6f9c8627c5ca8a85795f0e74c20874e14e2ad2fcff04a083f7fd221ebdd5352caa37a54de09762b47eec97c535e1d4580fb4df696fe4770bfca4e8c30955f72c3341ed84485feadc8469f3ef7d020ccef82cfe091e54b755b5f303c69e7a60903a1e881eefe4c9e39977c31be9290d5e07c18e671e7ada7c18000e27f8c04c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x9c, 0x6, "d1632b3b3252d6ad55e77dc77d82dc31d0a2db6e7b4e25ba02c738f24b0f5e70f67b07ddcd730ef24a64554ad75e1053fb3ab2342cf00bd71428fa14e1bb6e22e5d07cc7be24858d995f13c3f3d72ab59da24041c67ae828e301f1aff48488309b27b2bf02ef7fd30acdcdc63684e82866727df2ba82d2161f0474dc169fc97234b69322a51766d9acb700d035e0c386baa3744153b38ba3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x78, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x20}, @TCA_CT_MARK={0x8, 0x5, 0x101}, @TCA_CT_ACTION={0x6, 0x3, 0x2d}]}, {0x37, 0x6, "97ea32b72dd7e51bd13571993c2bb53c7f7b04b5c0db6568726ad01a5b0677eb32df066f71636b1adeb1127346e497836f48ed"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xfc, 0x1, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x101}, @TCA_CTINFO_ACT={0x18, 0x3, {0x387, 0xa5d1, 0x2, 0x7}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffa2c}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7938}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x401, 0x1, 0x3ff, 0x5}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xc}]}, {0x66, 0x6, "5cfc9a4f037359ac5678ef0204b6628d862e438d3c278c3c99af683bb8526e63b7e04a1d94b240d90a4e387d683557b3469dcfbc0a75cf682e11e530aa9625ff0a21c3d0530ada2f35c8da20d24ea626eb8ec3c8f4bb38f7b4e43eb89dc097eef077"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x10c, 0x14, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x6, 0x7, 0x2}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x10000000, 0x200, 0x9}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x20000000, 0x4, 0x9}, 0xc}}]}, {0x88, 0x6, "5c380cb2606a4fb30497e7f75a6226a22869b50f873e73038550205a54a14970b16311c125231e9df17a7b7e59e22bc0920e351075c2893763e542253bb268fdd3513f4817db84996ea86e64e3ee2167a44103f671b73c689a1d3e637581cf7f6b658500bfedb04891dd0af96f5de614f32fd8232fb1715b97824605a8657c8559359b4d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x144, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xfeff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x40}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x10bc, 0x1b, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x47c, 0x10000, 0x1, 0x10001, 0x5}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7fff, 0x7, 0x0, 0x6}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xf000, 0x5, 0x8, 0x7c}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xce59, 0xa77, 0x5, 0x800, 0x2}, 0x4e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x80000001, 0x1, 0xe6, 0x5}, 0x5}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x204, 0x1, [@m_tunnel_key={0x98, 0x1b, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x53, 0x6, "fbde1d175768820e4895c15f5e5f422a68eb1a37848b6b88744dc7f07f94aab5e10f303cc3f356ba999b5f4526ab5f8ffffe5197e686b4b6a99035f0cf2df5cd9bc86e77f63c603d68ecc3b479553a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x168, 0xb, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7eb, 0x8, 0x3, 0x4, 0x10}, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xcfc3, 0x3, 0x6, 0x4, 0x9}, @broadcast, @rand_addr=0x64010102, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x4, 0x10000000, 0x3ff, 0x4}, @multicast2, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x70, 0xc08, 0x2, 0x5f8, 0x7fffffff}, @multicast1, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x9, 0x8, 0xc, 0x9}, @local, @empty, 0xff}}]}, {0x75, 0x6, "de28f559e7df94d487fb67c09e234d37a3c528857cfeb5f7e6af5d8a835ce82c0793c63efef28d715ea140a29da8bb310507ebc73ccd6a8b0bcbd285b0e4b20fe226dde236da4356f0fcaa391aa70c9ef28581d051351ee3a6f21a30c4bf2380bf443466435d0cf6b93d27e4b9d7f87c1d"}, {0xc}, {0xc, 0x8, {0x7, 0x1}}}}]}]}, 0x199c}}, 0x0)

920.236892ms ago: executing program 0 (id=4537):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r1}, 0x8)
write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) (async)
ioctl$TUNSETIFF(r2, 0x5421, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

794.940335ms ago: executing program 0 (id=4538):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "000800003f98afbe"}, 0xfffffffffffffdf2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2})
write$cgroup_devices(r2, &(0x7f0000000000)={'a', ' *:* ', 'm\x00'}, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x2001})
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)
write(r0, 0x0, 0x0)

792.15658ms ago: executing program 2 (id=4539):
syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x1000000000003b) (async)
ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x1000000000003b)
shutdown(r5, 0x2) (async)
shutdown(r5, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x5)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000440)=@ethtool_eeprom={0xb, 0xff, 0xaa2}}) (async)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000440)=@ethtool_eeprom={0xb, 0xff, 0xaa2}})
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbfac3c6c}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000040)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x2c, 0x107, 0x70bd2b, 0x0, {0x9, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r11, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xfffffbff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc01}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001100)={&(0x7f0000000b00)={0x5f4, r11, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0xffffffff}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x831}, {0x8, 0x0, 0x9f08}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x81}, {0x8, 0x0, 0x7fffffff}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9551}, @NL80211_ATTR_SCAN_SUPP_RATES={0x584, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x102, 0x3, "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"}, @NL80211_BAND_2GHZ={0x91, 0x0, "a2183eb3a2313e143b1b9e5e07d64ae21dfa193fc4300a72a03f123a6be6c4d6753de0be2446df3ca956167fad71b5087feb8ace391fd714387b9aa2c11966c0bdd081af09e810aad1117e8ce75b50b7def3d070600e57b19c316ad5244bb07f4051fcd70fbfb86925140122651fadb09ef52e1e90e763c880ddb77ccf19c48ae14ad205df3c943a540755bbc4"}, @NL80211_BAND_5GHZ={0xdc, 0x1, "4460e3af7a3a146fae6b5485b1131397088ee3dc6c4f28249ca7c65820d021f247f0e2bc9fa7b8a5228e5d6d648c57f145161c95d37697cd8a94aff39dcf53c51b6cf00307a25e0a29a10797ac1ee72bbdc89e59a2b072aedb450c1f7bd9762f74eb825b3eea52ce0906654bb9f432b86e338a6bf54406b943dbb993414a59c55f30d521145511a424f167fa7ab86bfae9ff244697cf3c0f889556cc394cded3f82fa34039da974e11a186ffbb6ec7528d24f3d644f2d9aa644afb89847fa6941271652583025710f06058ab2bae5c9ffb22f05b3a39baf8"}, @NL80211_BAND_2GHZ={0xea, 0x0, "774989fb312163b36c17573f929f836f9d3155a24e90fb4469e786df286a05c9a8570bdd058ec64bf5916d59e9da21d1e642442ef75e182215f97e4e24fdf594558a3b72cea9f083e500dada7e1defb6b3baaa7869c1d7e0d8de40526c0523c4d44c65ad1fcb01aae59bf23c72cf986136ba91a766207c80d695e401bbe21c83194a896f72fcecc13d812aac20a791dd60763bf2ea7f8314babfb960d36a996a6bb1fcb7a1949cff7c28b6f3ddfec75540939fb1b78f51e1266659de1df748f417c5d3ea5a5ade779350b5c8e65765669f14ad9e5b9024e32601bb139e331daf5837c628c2ae"}, @NL80211_BAND_6GHZ={0xf9, 0x3, "b1882c9cbe593743b07a609ea1b617c6ab3ac925c89b642b2d63fb794bf463046a88d54dc7356ecfdb6ecbb9caebc5c8f59a1f6ffa6c6a757963c877df0ba99f46e928d64a5860f3eeaf60d8c98178c9aaa1b815a257a35285a9fb498ceb1ec9fea33e47902c9afb2a37cf04850866f9882ebce4e4d24a91db3241b49854ae5a17f7e66e96d92ca242592008ffa15fb6f94da5c1397b1a7557e15b90f0850138866df5301b21d86d4bde4c15e5d929f0054178b3d0a7671daf89263cbadc4d17cd38f6f05cb1c7194d750a33cd07bd65e67acd1a1a5cff8fb5be32afec50076076c9153020d48e7243fc0b51256f95c1e86230dc96"}, @NL80211_BAND_60GHZ={0x7e, 0x2, "77b13008205e58274f68c76b5193b8f342ac793e2489f2d286621d8a0c65c4cf7243c5a87ec125f23420b19b8871c4333889d48abad1a4d5b320bf65120f14496207db8d4bc7b008e6c187905d4bbe55a1214456a429ca69cf6b5dcac51972b2b8e8bae2d174d55014b49d7a94adc0e2b642aa92d0290e8ab591"}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x9d, 0x3, "0c9e5a153a749922d776ab9c1e33d7c51dc08fc5a2b7313009a415996dfa48911b1f8b037da912d36f03718a6ed326357c024bbb5794a6163c623116bfb4a70ef4f72b6d7a20d0de876afe1afb2fba1cf1fcca3dc15fe6e44e1ff0cfbf432f347fdb04d4ab0466af323f0845d051c342934d2f7aaa43006f30bd48d2501cb66979409153d106eaae7eaf35366b90db8bf7c29300657e0ce52f"}]}]}, 0x5f4}, 0x1, 0x0, 0x0, 0x400d0}, 0x400c000) (async)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001100)={&(0x7f0000000b00)={0x5f4, r11, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0xffffffff}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x831}, {0x8, 0x0, 0x9f08}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x81}, {0x8, 0x0, 0x7fffffff}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9551}, @NL80211_ATTR_SCAN_SUPP_RATES={0x584, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x102, 0x3, "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"}, @NL80211_BAND_2GHZ={0x91, 0x0, "a2183eb3a2313e143b1b9e5e07d64ae21dfa193fc4300a72a03f123a6be6c4d6753de0be2446df3ca956167fad71b5087feb8ace391fd714387b9aa2c11966c0bdd081af09e810aad1117e8ce75b50b7def3d070600e57b19c316ad5244bb07f4051fcd70fbfb86925140122651fadb09ef52e1e90e763c880ddb77ccf19c48ae14ad205df3c943a540755bbc4"}, @NL80211_BAND_5GHZ={0xdc, 0x1, "4460e3af7a3a146fae6b5485b1131397088ee3dc6c4f28249ca7c65820d021f247f0e2bc9fa7b8a5228e5d6d648c57f145161c95d37697cd8a94aff39dcf53c51b6cf00307a25e0a29a10797ac1ee72bbdc89e59a2b072aedb450c1f7bd9762f74eb825b3eea52ce0906654bb9f432b86e338a6bf54406b943dbb993414a59c55f30d521145511a424f167fa7ab86bfae9ff244697cf3c0f889556cc394cded3f82fa34039da974e11a186ffbb6ec7528d24f3d644f2d9aa644afb89847fa6941271652583025710f06058ab2bae5c9ffb22f05b3a39baf8"}, @NL80211_BAND_2GHZ={0xea, 0x0, "774989fb312163b36c17573f929f836f9d3155a24e90fb4469e786df286a05c9a8570bdd058ec64bf5916d59e9da21d1e642442ef75e182215f97e4e24fdf594558a3b72cea9f083e500dada7e1defb6b3baaa7869c1d7e0d8de40526c0523c4d44c65ad1fcb01aae59bf23c72cf986136ba91a766207c80d695e401bbe21c83194a896f72fcecc13d812aac20a791dd60763bf2ea7f8314babfb960d36a996a6bb1fcb7a1949cff7c28b6f3ddfec75540939fb1b78f51e1266659de1df748f417c5d3ea5a5ade779350b5c8e65765669f14ad9e5b9024e32601bb139e331daf5837c628c2ae"}, @NL80211_BAND_6GHZ={0xf9, 0x3, "b1882c9cbe593743b07a609ea1b617c6ab3ac925c89b642b2d63fb794bf463046a88d54dc7356ecfdb6ecbb9caebc5c8f59a1f6ffa6c6a757963c877df0ba99f46e928d64a5860f3eeaf60d8c98178c9aaa1b815a257a35285a9fb498ceb1ec9fea33e47902c9afb2a37cf04850866f9882ebce4e4d24a91db3241b49854ae5a17f7e66e96d92ca242592008ffa15fb6f94da5c1397b1a7557e15b90f0850138866df5301b21d86d4bde4c15e5d929f0054178b3d0a7671daf89263cbadc4d17cd38f6f05cb1c7194d750a33cd07bd65e67acd1a1a5cff8fb5be32afec50076076c9153020d48e7243fc0b51256f95c1e86230dc96"}, @NL80211_BAND_60GHZ={0x7e, 0x2, "77b13008205e58274f68c76b5193b8f342ac793e2489f2d286621d8a0c65c4cf7243c5a87ec125f23420b19b8871c4333889d48abad1a4d5b320bf65120f14496207db8d4bc7b008e6c187905d4bbe55a1214456a429ca69cf6b5dcac51972b2b8e8bae2d174d55014b49d7a94adc0e2b642aa92d0290e8ab591"}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x9d, 0x3, "0c9e5a153a749922d776ab9c1e33d7c51dc08fc5a2b7313009a415996dfa48911b1f8b037da912d36f03718a6ed326357c024bbb5794a6163c623116bfb4a70ef4f72b6d7a20d0de876afe1afb2fba1cf1fcca3dc15fe6e44e1ff0cfbf432f347fdb04d4ab0466af323f0845d051c342934d2f7aaa43006f30bd48d2501cb66979409153d106eaae7eaf35366b90db8bf7c29300657e0ce52f"}]}]}, 0x5f4}, 0x1, 0x0, 0x0, 0x400d0}, 0x400c000)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x100, 0x0, 0x200, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x0)

694.708804ms ago: executing program 3 (id=4540):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0x0, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth0_to_bridge\x00'})
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000340)={0x400, 0x1})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x2a, &(0x7f00000000c0)=0x7a, 0x30)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(0x3)
sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006a0000000000000800010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4c830)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x10, 0xfff3}, {}, {0x9, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf7}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x18, 0x2b, 0xff, @remote, @mcast2, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0)

616.315512ms ago: executing program 4 (id=4541):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000001006e657464657673696d0000000f0002006e657464657673691d730b6d3000000800730000000000"], 0x3c}}, 0x0)
unshare(0x22020600)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c0001800600060088a80000100007"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x34, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="e5"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac08, 0xfac01, 0xfac09]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40850}, 0x810)

611.724576ms ago: executing program 0 (id=4542):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x39, 0x0, @void}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x30011}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2)
ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, &(0x7f0000000140))
sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r4, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xbe0f, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

493.954142ms ago: executing program 1 (id=4543):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x28040)
epoll_create(0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000cc0)=ANY=[], 0xfe33)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00')

423.319198ms ago: executing program 2 (id=4544):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000ff01000000000000", @ANYRES32, @ANYBLOB="0200000000000000000000000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000200"/28], 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000440)={&(0x7f00000003c0)=""/128, 0x111000, 0x800, 0xfffffffe, 0x2}, 0x20)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xf, 0x22e27cdf, 0xfffffff7, 0x70100, r0, 0x2, '\x00', 0x0, r1, 0x1, 0x1, 0x1, 0x9, @void, @value, @value=r2}, 0x50)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000000000085000000c4000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000280)={r6}, &(0x7f0000000380)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)={r6, 0x9, 0x63, "c6332c9759b26ad305e921bab8a337772c6dfc623464a6ba82405111f9edd657dbec663b8efd35c5f674a140fd2fc0f7b15190ec6f297b36a37a3db17b54f94f69f6676064cb211b46fd48c382f39359bfad5115cb8f9bad9b764219e1c224a60113d1"}, 0x6b)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback=0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$tipc(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)="7102b87fd4a29eb711d3d8dd9d30a576adc9f6e273aa268bf88d9b6b401a48d9897f02e252e0882cc55d14a5949d95b3fa8e0fdefbdb9d5f2b2402455bb8ea9669c041e99a804b3a84e5be4329c6ac5ccfd26d65bf13d7dc9ce767be3e7d49acf525dca7523b6bc44d49b40ce43b8cb32004f23c12750711d0858c8d0d41dc8700148a722a3cbc6abb", 0x89}], 0x1, 0x0, 0x0, 0x20008000}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x21, &(0x7f0000000540), 0x4)
sendmsg$inet(r8, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r9, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x7, 0xfe6156a8f5cb6b1c, 0x1, 0x2, <r11=>0x0}, &(0x7f0000000200)=0x10)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r11, @in={{0x2, 0x4e22, @private=0xa010100}}}, 0xfffffffffffffffc)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r12)
sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, r13, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0xc000)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), r12)

352.809976ms ago: executing program 4 (id=4545):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000814) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000010"], 0x18}, 0x1, 0x0, 0x0, 0x4048811}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlinkprop={0x60, 0x6c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14091, 0x40}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg0\x00'}, {0x14, 0x35, 'caif0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40000)

305.106156ms ago: executing program 3 (id=4546):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000a0601010000000d0000000000000000050001"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c000240000000000000008108000340fffffffd0c0001400000000000000007"], 0xb8}}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
getsockname$packet(r5, 0x0, &(0x7f0000000380))
r6 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r6, &(0x7f00000000c0)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x1, @private2, 0x6}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000007000014ac1414bb00000000"], 0x18, 0x48d5}, 0x8050)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000002c0)=0x10401, 0x4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x324)

304.332673ms ago: executing program 0 (id=4547):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000350000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4318123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8}, 0x94)

195.332316ms ago: executing program 4 (id=4548):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r1, 0x10c, 0x6, 0x0, 0xfffffffffffffe45)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x10011, 0x2, 0x2, 0xc, 0xc}, 0x20)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r8 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async)
getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES64=r3, @ANYRES16], 0x3c}}, 0x8001)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r7, r10, 0x25, 0x0, @val=@netkit={@void, @value=r7}}, 0x1c)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r6, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r6, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
ioctl(r2, 0x8b32, &(0x7f0000000040))
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) (async)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0)
r11 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
socket$can_raw(0x1d, 0x3, 0x1) (async)
r12 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r12, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x60) (async)
recvmsg$can_raw(r12, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x60)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb, 0x20010, r2, 0x42b9d000) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb, 0x20010, r2, 0x42b9d000)
sendto$inet6(r11, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

161.948074ms ago: executing program 2 (id=4549):
r0 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="a905000000407464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x34}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0], 0x17}}], 0x2, 0x800)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x50)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$inet(0xa, 0x3, 0x81)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20008802}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x1, 0x4, {{0x7, 0x4, 0x3, 0x1a, 0x1c, 0x64, 0x0, 0x5, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}]}}, 0x0, 0x4e}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="8f4961884fc4", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x6, 0x2, 0x4}}}}}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000060000000d00000002000004000000000000080003000001000000000b00000005000000100000000000000b0500000005f7000000000008040000000c0000000000000c04000000002e2e005f00"], &(0x7f0000000680)=""/223, 0x66, 0xdf, 0x1, 0x1000}, 0x28)
r8 = accept4(r4, 0x0, 0x0, 0x80000)
setsockopt(r8, 0x84, 0x7d, &(0x7f0000000040)="0200000bcdb7f681", 0x8)
setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000d10ffc), 0x4)

101.028029ms ago: executing program 0 (id=4550):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="35b0bd780000fdffffdfffffffff"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x844)

98.339931ms ago: executing program 1 (id=4551):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=ANY=[@ANYBLOB="6cfbff00", @ANYRES16=r3, @ANYBLOB="000200000000000000002d0000003500a900a47d6fa5cd71e8877d57a08bf99fb7ccbaa09edf7d5cb4c0709efa59ce3c0888b2c69bef92d07d5f8ed1c5adb5bde95e430000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x6c}}, 0x4000000)
sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
r4 = accept(r0, &(0x7f00000010c0)=@sco, &(0x7f0000001180)=0x80)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x60, 0x0, &(0x7f0000000f00))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000011c0)={0x1ff}, 0x4)
syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r9)
sendmsg$NFC_CMD_DISABLE_SE(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000026c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="010029bd7000fbdbdf2512000008"], 0x14}, 0x1, 0x0, 0x0, 0x20044110}, 0x200000d4)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000025c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fddbdf2555000000080001005100000008000300", @ANYRES32=r10, @ANYBLOB="5c335d1c98b35313313193d110fc02ac767ca8474b8b5130a680093851a7cccfb9f6b7088fc8881d1a8a8f6b8a7aefee366c36d18623ae668a95a1255ab50e36c5aaf03b9b2407000000000000001e5e1548a5f0a1f5d8bcf45603073d66a857d39c25519bf4d8ff222db748d7a1af43c7bd4656cf1b23b950f1e7cb8e694cbc4fb4f08b3c08c444032b489dfad2bafb64ccec45b74e3a06d8f677f1e1741e"], 0x24}}, 0x240040c0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r7)
r11 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r11, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r12, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000001080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb00011}, 0xc, &(0x7f0000001000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="020027bd7000ffdbdf2505000000081d0300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x50)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="01000000", @ANYRES16=r13, @ANYBLOB="100000000000000000005500000008000300", @ANYRES32=r10, @ANYBLOB="0fba0dc13a1b5b82e211ff590349cdee5c927eabd33bd02547ec5810299bb73011d6961d98a7d89e1772433539b198ccb1ff"], 0x1c}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000013c0), r4)
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100)
mmap(&(0x7f00009e3000/0x4000)=nil, 0x4000, 0xb635773f06ebbee4, 0x1010, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000001300)={r7, &(0x7f0000001200)='nfc\x00', 0x400000, &(0x7f0000001240)={@_ha_fsid={[0xffff3c67, 0x7]}, {0xc4, 0xfffe, 0x100, 0x80000001}}, 0x200, &(0x7f0000001280)={@_ha_fsid}, &(0x7f00000012c0)=0x4})

0s ago: executing program 3 (id=4552):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001800dd8d0000000000000000020000000000000600000000060c0008800800018004000300"/52], 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001800dd8d0000000000000000020000000000000600000000060c0008800800018004000300"/52], 0x34}}, 0x0) (async)

kernel console output (not intermixed with test programs):

netlink: 500 bytes leftover after parsing attributes in process `syz.1.2626'.
[  298.017484][T14955] netlink: 'syz.3.2628': attribute type 1 has an invalid length.
[  298.050117][T14955] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2628'.
[  298.063559][T14960] Bluetooth: hci0: Opcode 0x080f failed: -22
[  298.074256][T14955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2628'.
[  298.074786][T14960] netlink: 'syz.0.2630': attribute type 11 has an invalid length.
[  298.260381][T14972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.933141][T15008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2647'.
[  298.988289][T15008] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  299.000961][T15008] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  299.117101][T15008] macvlan3: entered promiscuous mode
[  299.127592][T15008] macvlan3: entered allmulticast mode
[  299.135166][T15008] bond8: (slave macvlan3): Error -98 calling set_mac_address
[  299.145853][T15020] netlink: 'syz.0.2649': attribute type 27 has an invalid length.
[  299.155107][T15020] netlink: 'syz.0.2649': attribute type 4 has an invalid length.
[  299.169425][T15020] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2649'.
[  299.395584][T15028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2653'.
[  299.410468][T15029] netlink: 'syz.1.2653': attribute type 4 has an invalid length.
[  299.419549][T15029] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2653'.
[  300.095163][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2669'.
[  300.475293][T15100] tunl0: entered promiscuous mode
[  301.321673][T15135] bond9: entered promiscuous mode
[  301.526155][T15157] Bluetooth: MGMT ver 1.23
[  302.237877][T15188] validate_nla: 1 callbacks suppressed
[  302.237900][T15188] netlink: 'syz.0.2707': attribute type 11 has an invalid length.
[  302.537207][T15201] xt_l2tp: v2 doesn't support IP mode
[  302.706340][T15212] netlink: 'syz.4.2714': attribute type 21 has an invalid length.
[  302.706422][T15214] xt_hashlimit: max too large, truncated to 1048576
[  302.804823][T15214] netlink: 'syz.0.2715': attribute type 1 has an invalid length.
[  302.834665][T15219] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003
[  302.964631][T15215] 8021q: adding VLAN 0 to HW filter on device bond11
[  303.002103][T15215] bond10: (slave bond11): making interface the new active one
[  303.005022][T15229] __nla_validate_parse: 9 callbacks suppressed
[  303.005040][T15229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2715'.
[  303.017286][T15215] bond10: (slave bond11): Enslaving as an active interface with an up link
[  303.065352][T15214] bond10: (slave gretap2): Enslaving as a backup interface with an up link
[  303.121798][T15229] 8021q: adding VLAN 0 to HW filter on device bond10
[  303.196752][T15241] Cannot find map_set index 135 as target
[  303.265409][T15245] netlink: 'syz.1.2723': attribute type 1 has an invalid length.
[  303.290337][T15245] netlink: 'syz.1.2723': attribute type 2 has an invalid length.
[  303.300149][T15245] netlink: 'syz.1.2723': attribute type 1 has an invalid length.
[  303.320677][T15245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2723'.
[  303.342394][T15247] net_ratelimit: 50 callbacks suppressed
[  303.342413][T15247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.932871][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2736'.
[  303.954481][T15286] netlink: 'syz.1.2736': attribute type 12 has an invalid length.
[  304.098336][T15292] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2739'.
[  304.105583][T15297] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  304.119463][T15292] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2739'.
[  304.157938][T15292] netlink: 'syz.4.2739': attribute type 6 has an invalid length.
[  304.192713][T15292] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2739'.
[  304.275667][T15305] netlink: 'syz.3.2743': attribute type 10 has an invalid length.
[  304.284366][T15305] veth1_vlan: left allmulticast mode
[  304.304691][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2744'.
[  304.463295][T15319] netlink: 'syz.1.2748': attribute type 1 has an invalid length.
[  304.500187][T15319] bond13: entered promiscuous mode
[  304.506030][T15319] 8021q: adding VLAN 0 to HW filter on device bond13
[  304.567991][T15319] macvtap1: entered allmulticast mode
[  304.575923][T15324] block nbd6: Unsupported socket: should be TCP or UNIX.
[  304.615632][T15325] macvtap2: entered allmulticast mode
[  304.721479][T15319] bond13: (slave bridge0): making interface the new active one
[  304.755838][T15319] bridge0: entered promiscuous mode
[  304.775702][T15319] bond13: (slave bridge0): Enslaving as an active interface with an up link
[  304.884681][T15345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2750'.
[  304.933954][T15339] 8021q: adding VLAN 0 to HW filter on device bond10
[  305.175812][T15355] 8021q: adding VLAN 0 to HW filter on device bond13
[  305.274326][T15359] bond13: (slave veth7): Enslaving as an active interface with a down link
[  305.286649][T15374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2757'.
[  305.324341][T15355] 8021q: adding VLAN 0 to HW filter on device batadv1
[  305.332767][T15355] bond13: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  305.383151][T15363] netdevsim netdevsim4: Direct firmware load for .. failed with error -2
[  305.394401][T15363] netdevsim netdevsim4: Falling back to sysfs fallback for: ..
[  305.627493][T15387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2762'.
[  305.837467][T15396] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.912868][T15402] gretap0: entered promiscuous mode
[  305.935682][T15402] gretap0: left promiscuous mode
[  306.273768][T15425] xt_l2tp: v2 doesn't support IP mode
[  306.324082][T15424] bond14: entered promiscuous mode
[  306.330438][T15424] 8021q: adding VLAN 0 to HW filter on device bond14
[  306.366802][T15424] IPv6: NLM_F_CREATE should be specified when creating new route
[  306.484695][T15424] 8021q: adding VLAN 0 to HW filter on device bond14
[  306.507369][T15424] bond14: (slave ip6gre4): The slave device specified does not support setting the MAC address
[  306.522308][T15424] bond14: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode
[  306.542892][T15424] bond14: (slave ip6gre4): making interface the new active one
[  306.551564][T15424] ip6gre4: entered promiscuous mode
[  306.561124][T15424] bond14: (slave ip6gre4): Enslaving as an active interface with an up link
[  306.633229][T15447] batadv2: entered allmulticast mode
[  306.713910][T15451] batadv2: entered allmulticast mode
[  307.295488][T15496] pimreg3: entered allmulticast mode
[  307.359539][T15500] Cannot find del_set index 3 as target
[  307.780677][T15520] netlink: zone id is out of range
[  307.815707][T15520] netlink: zone id is out of range
[  307.838034][T15520] netlink: zone id is out of range
[  307.864807][T15520] netlink: zone id is out of range
[  307.874481][T15520] netlink: zone id is out of range
[  307.880730][T15520] netlink: zone id is out of range
[  307.886482][T15520] netlink: zone id is out of range
[  307.894307][T15520] netlink: zone id is out of range
[  308.116788][T15538] __nla_validate_parse: 9 callbacks suppressed
[  308.116809][T15538] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.2803'.
[  308.193835][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2803'.
[  308.458437][T15560] validate_nla: 5 callbacks suppressed
[  308.458456][T15560] netlink: 'syz.0.2814': attribute type 28 has an invalid length.
[  308.509157][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2814'.
[  308.518775][T15560] netlink: 'syz.0.2814': attribute type 3 has an invalid length.
[  308.519351][T15567] netlink: 'syz.1.2813': attribute type 2 has an invalid length.
[  308.533860][T15560] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2814'.
[  308.557907][T15567] netlink: 'syz.1.2813': attribute type 1 has an invalid length.
[  308.579594][T15565] netlink: 'syz.2.2812': attribute type 4 has an invalid length.
[  308.611715][T15565] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2812'.
[  308.659520][T15565] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2812'.
[  309.019273][T15591] 
: (slave lo): Releasing backup interface
[  309.071160][T15591] 
: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  309.094898][T15591] bridge_slave_0: left allmulticast mode
[  309.106005][T15591] bridge_slave_0: left promiscuous mode
[  309.120126][T15591] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.151363][T15591] bridge_slave_1: left allmulticast mode
[  309.167991][T15591] bridge_slave_1: left promiscuous mode
[  309.182201][T15591] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.213637][T15591] bond8: (slave veth0_to_bond): Releasing backup interface
[  309.230670][T15591] team0: Port device team_slave_0 removed
[  309.241117][T15591] team0: Port device team_slave_1 removed
[  309.247650][T15591] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.264211][T15591] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.282766][T15602] netlink: 'syz.1.2825': attribute type 2 has an invalid length.
[  309.291615][T15591] net_ratelimit: 54 callbacks suppressed
[  309.291634][T15591] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  309.314173][T15602] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2825'.
[  309.324937][T15592] C: left promiscuous mode
[  309.576263][T15609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2828'.
[  310.056117][T15592] ipvlan0: left allmulticast mode
[  310.078583][T15592] veth0_vlan: left allmulticast mode
[  310.169787][T15620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.220363][T15592] sit1: left promiscuous mode
[  310.231923][T15592] sit1: left allmulticast mode
[  310.250712][T15592] geneve3: left promiscuous mode
[  310.258796][T15592] geneve3: left allmulticast mode
[  310.284812][T15592] vlan2: left allmulticast mode
[  310.292516][T15592] bond0: left allmulticast mode
[  310.310546][T15592] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  310.323854][T15592] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  310.350515][T15592] macvlan2: left promiscuous mode
[  310.359059][T15592] macvlan2: left allmulticast mode
[  310.472781][T15592] vlan5: left allmulticast mode
[  310.478370][T15592] bond7: left allmulticast mode
[  310.491087][T15592] bond9: left promiscuous mode
[  310.511569][T15597] ip6gre2: entered allmulticast mode
[  310.520182][T15597] team0: Port device ip6gre2 added
[  310.530820][   T47] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  310.554426][   T47] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.572020][   T47] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0
[  310.607841][ T1025] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  310.627648][ T1025] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.664558][ T1025] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[  310.695397][ T1025] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  310.710935][ T1025] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.730401][ T1025] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[  310.769878][ T1025] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  310.781645][ T1025] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.794909][ T1025] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[  310.816670][T15642] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2833'.
[  310.840642][T15638] bridge5: entered promiscuous mode
[  310.856570][T15638] bridge5: entered allmulticast mode
[  310.875569][T15639] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  310.906973][T15648] xt_hashlimit: size too large, truncated to 1048576
[  310.939759][T15649] xt_bpf: check failed: parse error
[  311.017234][T15652] Unknown options in mask b7f2
[  311.070315][T15659] netlink: 'syz.4.2838': attribute type 16 has an invalid length.
[  311.109964][T15659] netlink: 'syz.4.2838': attribute type 3 has an invalid length.
[  311.144084][T15659] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2838'.
[  311.157381][T15657] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  311.200001][T15667] xt_policy: output policy not valid in PREROUTING and INPUT
[  311.379438][T15677] 8021q: VLANs not supported on wg0
[  311.606493][T15690] IPVS: Error connecting to the multicast addr
[  312.051299][T15714] x_tables: duplicate underflow at hook 4
[  312.063652][T15717] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component
[  312.081813][T15718] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component
[  312.500921][T15737] syzkaller0: entered promiscuous mode
[  312.523763][T15737] syzkaller0: entered allmulticast mode
[  312.843674][T15756] openvswitch: netlink: Message has -2 unknown bytes.
[  312.850664][T15748] openvswitch: netlink: Flow actions attr not present in new flow.
[  313.011326][T15763] team0: Port device macvlan1 removed
[  313.060947][T15768] netlink: 'syz.4.2872': attribute type 1 has an invalid length.
[  313.225274][T15768] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  313.473176][T15789] __nla_validate_parse: 9 callbacks suppressed
[  313.473199][T15789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2876'.
[  313.568421][T15795] netlink: 'syz.1.2879': attribute type 1 has an invalid length.
[  313.605373][T15795] netlink: 'syz.1.2879': attribute type 7 has an invalid length.
[  313.634628][T15795] netlink: 'syz.1.2879': attribute type 8 has an invalid length.
[  313.653801][T15795] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2879'.
[  313.663593][T15795] NCSI netlink: No device for ifindex 65584
[  313.701995][T15808] netlink: 'syz.3.2880': attribute type 21 has an invalid length.
[  313.832316][T15815] netlink: 'syz.2.2883': attribute type 10 has an invalid length.
[  313.841267][T15815] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2883'.
[  313.993392][T15808] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  314.028334][T15808] bond5 (unregistering): Released all slaves
[  314.050993][T15826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2886'.
[  314.072609][T15826] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2886'.
[  314.165393][T15830] netlink: 'syz.2.2888': attribute type 1 has an invalid length.
[  314.230753][T15834] netlink: 'syz.3.2889': attribute type 3 has an invalid length.
[  314.264178][T15836] netlink: 'syz.2.2890': attribute type 1 has an invalid length.
[  314.274814][T15836] netlink: 'syz.2.2890': attribute type 1 has an invalid length.
[  314.283585][T15836] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2890'.
[  316.808260][T15811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  316.964481][ T5641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  316.984921][ T5641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  317.005590][ T5641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  317.022533][ T5641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  317.031284][ T5641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  317.064364][ T5650] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  317.074618][ T5650] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  317.094196][ T5650] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  317.140023][ T5650] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  317.154338][ T5650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  317.262420][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  317.287975][ T4962] block nbd1: Possible stuck request ffff8880278ce000: control (read@0,1024B). Runtime 180 seconds
[  317.298952][ T4962] block nbd1: Possible stuck request ffff8880278ce1c0: control (read@1024,1024B). Runtime 180 seconds
[  317.301411][T15865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2897'.
[  317.310650][ T4962] block nbd1: Possible stuck request ffff8880278ce380: control (read@2048,1024B). Runtime 180 seconds
[  317.331878][ T4962] block nbd1: Possible stuck request ffff8880278ce540: control (read@3072,1024B). Runtime 180 seconds
[  317.382804][T15861] netlink: 'syz.1.2896': attribute type 4 has an invalid length.
[  317.573290][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2899'.
[  317.610996][T15878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2899'.
[  317.898580][T15902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  317.898871][ T1674] block nbd4: Possible stuck request ffff8880279c0000: control (read@0,1024B). Runtime 150 seconds
[  317.921616][ T1674] block nbd4: Possible stuck request ffff8880279c01c0: control (read@1024,1024B). Runtime 150 seconds
[  317.938931][ T1674] block nbd4: Possible stuck request ffff8880279c0380: control (read@2048,1024B). Runtime 150 seconds
[  317.950794][ T1674] block nbd4: Possible stuck request ffff8880279c0540: control (read@3072,1024B). Runtime 150 seconds
[  318.040092][T15849] lo speed is unknown, defaulting to 1000
[  318.049045][T15849] lo speed is unknown, defaulting to 1000
[  318.378289][T15921] xt_hashlimit: size too large, truncated to 1048576
[  318.449989][T15927] –: renamed from vxcan1 (while UP)
[  318.451123][T15880] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  318.951524][T15941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2913'.
[  319.014255][T15949] netlink: 'syz.2.2915': attribute type 1 has an invalid length.
[  319.065917][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2917'.
[  319.080564][T15949] bond14: entered promiscuous mode
[  319.086241][T15949] 8021q: adding VLAN 0 to HW filter on device bond14
[  319.258865][ T5641] Bluetooth: hci5: command tx timeout
[  319.416186][T15968] IPVS: set_ctl: invalid protocol: 34917 172.30.1.3:20001
[  319.428098][T15974] IPVS: set_ctl: invalid protocol: 34917 172.30.1.3:20001
[  319.437248][T15971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2921'.
[  319.483984][T15971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2921'.
[  319.505878][T15978] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  319.656868][T15988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2923'.
[  319.697317][T15849] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.709160][T15849] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.718284][T15849] bridge_slave_0: entered allmulticast mode
[  319.752573][T15849] bridge_slave_0: entered promiscuous mode
[  319.774474][T15993] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2925'.
[  319.783718][T15849] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.785168][T15849] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.785375][T15849] bridge_slave_1: entered allmulticast mode
[  319.863868][T15849] bridge_slave_1: entered promiscuous mode
[  320.028987][T15849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  320.073367][T15849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  320.174294][T15849] team0: Port device team_slave_0 added
[  320.189488][T15849] team0: Port device team_slave_1 added
[  320.222550][T16014] netlink: 'syz.3.2929': attribute type 1 has an invalid length.
[  320.252766][T16014] netlink: 'syz.3.2929': attribute type 7 has an invalid length.
[  320.261854][T16014] netlink: 'syz.3.2929': attribute type 8 has an invalid length.
[  320.271124][T16014] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2929'.
[  320.281776][T15849] batman_adv: batadv0: Adding interface: batadv_slave_0
[  320.285528][T16014] NCSI netlink: No device for ifindex 65584
[  320.291369][T15849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  320.323512][T15849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  320.337155][T15849] batman_adv: batadv0: Adding interface: batadv_slave_1
[  320.344210][T15849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  320.388073][T15849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  320.431714][T16021] vlan0: entered promiscuous mode
[  320.624204][T15849] hsr_slave_0: entered promiscuous mode
[  320.632910][T15849] hsr_slave_1: entered promiscuous mode
[  320.640019][T15849] debugfs: 'hsr0' already exists in 'hsr'
[  320.646134][T15849] Cannot create hsr debugfs directory
[  320.769099][ T5773] hid-generic 0005:07C0:7FFF.0001: item fetching failed at offset 0/1
[  320.775113][T16035] bond5: Removing last ns target with arp_interval on
[  320.778672][ T5773] hid-generic 0005:07C0:7FFF.0001: probe with driver hid-generic failed with error -22
[  320.934549][T16043] veth3: entered allmulticast mode
[  320.964516][T16053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2940'.
[  321.346827][ T5641] Bluetooth: hci5: command tx timeout
[  321.459470][T16072] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2946'.
[  321.607428][T16077] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  321.805133][T15849] team0: Port device netdevsim1 removed
[  322.011522][T16097] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available
[  322.024631][ T5745] IPVS: starting estimator thread 0...
[  322.121674][T16103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2959'.
[  322.132812][T16098] IPVS: using max 28 ests per chain, 67200 per kthread
[  322.381611][T16121] netlink: 'syz.0.2963': attribute type 16 has an invalid length.
[  322.412267][T16121] netlink: 'syz.0.2963': attribute type 17 has an invalid length.
[  322.443227][T16121] netlink: 'syz.0.2963': attribute type 27 has an invalid length.
[  322.749378][T15849] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  322.801056][T15849] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  322.803736][T16142] netlink: 'syz.0.2970': attribute type 6 has an invalid length.
[  322.816591][T15849] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  322.841743][T15849] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  322.872573][T15849] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  322.924608][T15849] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  322.959911][T15849] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  322.994914][T15849] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  323.286036][T16177] netlink: 'syz.2.2976': attribute type 1 has an invalid length.
[  323.418969][ T5641] Bluetooth: hci5: command tx timeout
[  323.458809][T16177] 8021q: adding VLAN 0 to HW filter on device bond15
[  323.480072][T16175] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  323.655515][T15849] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.718649][T15849] 8021q: adding VLAN 0 to HW filter on device team0
[  323.737463][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.744733][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.772271][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.779584][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.885197][T16205] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  323.936535][T16203] pim6reg1: entered promiscuous mode
[  323.957786][T16203] pim6reg1: entered allmulticast mode
[  324.356295][T16235] __nla_validate_parse: 3 callbacks suppressed
[  324.356312][T16235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2990'.
[  324.662734][T16251] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available
[  324.901415][T16262] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  324.950909][T16264] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2999'.
[  324.980386][T16264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2999'.
[  325.045705][T16264] netlink: 'syz.1.2999': attribute type 10 has an invalid length.
[  325.066024][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2999'.
[  325.422762][T15849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  325.502845][ T5641] Bluetooth: hci5: command tx timeout
[  325.764644][T16294] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3008'.
[  325.951832][T16306] syzkaller0: entered promiscuous mode
[  325.967002][T16306] syzkaller0: entered allmulticast mode
[  326.273146][T15849] veth0_vlan: entered promiscuous mode
[  326.305476][T15849] veth1_vlan: entered promiscuous mode
[  326.370489][T15849] veth0_macvtap: entered promiscuous mode
[  326.383676][T15849] veth1_macvtap: entered promiscuous mode
[  326.403564][T15849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  326.420227][T15849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  326.436255][ T3281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.445907][ T3281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.457660][ T3281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.469444][ T3281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.560908][   T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.576345][   T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.603590][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.611951][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.684729][T16327] netlink: 'syz.4.2893': attribute type 1 has an invalid length.
[  329.075029][T16335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3020'.
[  329.261978][T16343] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3023'.
[  329.304368][T16343] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3023'.
[  329.375858][ T5650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  329.388466][ T5650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  329.412135][ T5650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  329.423270][ T5650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  329.432540][ T5650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  329.630844][ T5745] IPVS: starting estimator thread 0...
[  329.750305][T16360] IPVS: using max 31 ests per chain, 74400 per kthread
[  329.790224][ T5632] ±ÿ (unregistering): left allmulticast mode
[  330.143179][T16374] netlink: 'syz.3.3028': attribute type 23 has an invalid length.
[  330.187243][T16376] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3029'.
[  330.215848][T16376] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3029'.
[  330.226604][T16376] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3029'.
[  330.332671][T16348] lo speed is unknown, defaulting to 1000
[  330.349682][T16348] lo speed is unknown, defaulting to 1000
[  330.692842][T16393] syzkaller0: entered promiscuous mode
[  330.707113][T16393] syzkaller0: entered allmulticast mode
[  330.802152][T16403] netlink: 'syz.4.3039': attribute type 2 has an invalid length.
[  331.505133][ T5650] Bluetooth: hci3: command tx timeout
[  332.334677][T16441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.293147][ T4997] udevd[4997]: worker [5737] /devices/virtual/block/nbd1 timeout; kill it
[  333.307827][ T4997] udevd[4997]: seq 11922 '/devices/virtual/block/nbd1' killed
[  333.315694][ T4997] udevd[4997]: worker [5999] /devices/virtual/block/nbd4 is taking a long time
[  333.578331][ T5650] Bluetooth: hci3: command tx timeout
[  334.223790][T16474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3049'.
[  334.235673][T16474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3049'.
[  334.290841][T16348] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.299010][T16348] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.307876][T16348] bridge_slave_0: entered allmulticast mode
[  334.316492][T16348] bridge_slave_0: entered promiscuous mode
[  334.330662][T16348] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.338002][T16348] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.345272][T16348] bridge_slave_1: entered allmulticast mode
[  334.352733][T16348] bridge_slave_1: entered promiscuous mode
[  334.385783][T16348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.399822][T16348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.430958][T16348] team0: Port device team_slave_0 added
[  334.439443][T16348] team0: Port device team_slave_1 added
[  334.465790][T16348] batman_adv: batadv0: Adding interface: batadv_slave_0
[  334.472904][T16348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  334.501089][T16348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  334.515365][T16348] batman_adv: batadv0: Adding interface: batadv_slave_1
[  334.522956][T16348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  334.550092][T16348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  334.593496][T16348] hsr_slave_0: entered promiscuous mode
[  334.600021][T16348] hsr_slave_1: entered promiscuous mode
[  334.606209][T16348] debugfs: 'hsr0' already exists in 'hsr'
[  334.612516][T16348] Cannot create hsr debugfs directory
[  334.762467][T16348] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  334.775162][T16348] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.865681][T16348] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  334.877735][T16348] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.970815][T16348] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  334.981406][T16348] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.657941][ T5650] Bluetooth: hci3: command tx timeout
[  336.818688][T16443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  336.871027][T16348] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  336.928335][T16348] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  336.953501][T16348] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  336.986814][T16348] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  337.009317][T16348] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  337.027321][T16348] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  337.043368][T16348] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  337.047402][T16486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3052'.
[  337.065868][T16348] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  337.256782][T16348] 8021q: adding VLAN 0 to HW filter on device bond0
[  337.283416][T16503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3055'.
[  337.298714][T16348] 8021q: adding VLAN 0 to HW filter on device team0
[  337.319591][  T771] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.326843][  T771] bridge0: port 1(bridge_slave_0) entered forwarding state
[  337.346377][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.353637][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  337.570497][T16514] openvswitch: netlink: EtherType 50a is less than min 600
[  337.583107][T16514] openvswitch: netlink: EtherType 50a is less than min 600
[  337.754876][ T5650] Bluetooth: hci3: command tx timeout
[  337.938931][T16531] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.956181][T16348] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.076098][T16348] veth0_vlan: entered promiscuous mode
[  338.110354][T16348] veth1_vlan: entered promiscuous mode
[  338.175693][T16534] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3064'.
[  338.212847][T16348] veth0_macvtap: entered promiscuous mode
[  338.242881][T16348] veth1_macvtap: entered promiscuous mode
[  338.299919][T16348] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.355992][T16348] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.401685][  T771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.421430][  T771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.443928][  T771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.468349][  T771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.693115][T16554] nbd: must specify a device to reconfigure
[  338.715908][T14149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.733391][T14149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.802253][T16556] nbd: must specify a device to reconfigure
[  338.825284][ T6873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.849314][ T6873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.919206][T16564] tipc: Started in network mode
[  338.924705][T16564] tipc: Node identity aaaaaaaaaa35, cluster identity 4711
[  338.933257][T16564] tipc: Enabled bearer <eth:macvlan1>, priority 14
[  338.946512][T16564] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3074'.
[  339.465475][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  339.477117][ T5641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  339.490947][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  339.506470][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  339.515323][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  339.606423][T16582] xt_SECMARK: invalid mode: 9
[  340.048750][ T5752] tipc: Node number set to 10463914
[  340.291852][T16576] lo speed is unknown, defaulting to 1000
[  340.321097][T16576] lo speed is unknown, defaulting to 1000
[  340.373805][T16614] pimreg: entered allmulticast mode
[  341.571346][T16656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3097'.
[  341.588148][ T5641] Bluetooth: hci1: command tx timeout
[  341.595475][T16656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3097'.
[  341.620351][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3098'.
[  341.630016][T16656] netlink: 'syz.4.3097': attribute type 12 has an invalid length.
[  341.654129][T16656] netlink: 'syz.4.3097': attribute type 11 has an invalid length.
[  341.665908][T16658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3098'.
[  341.720626][T16665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3099'.
[  341.863807][T16668] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  342.007106][T16576] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.015940][T16576] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.023300][T16576] bridge_slave_0: entered allmulticast mode
[  342.032339][T16576] bridge_slave_0: entered promiscuous mode
[  342.042328][T16576] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.050112][T16576] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.058450][T16576] bridge_slave_1: entered allmulticast mode
[  342.066489][T16576] bridge_slave_1: entered promiscuous mode
[  342.118242][T16576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  342.141999][T16576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  342.245914][T16576] team0: Port device team_slave_0 added
[  342.263544][T16576] team0: Port device team_slave_1 added
[  342.429419][T16576] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.436574][T16576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  342.466326][T16576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.487267][T16576] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.495352][T16576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  342.522751][T16576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.616566][T16702] netlink: 'syz.0.3111': attribute type 2 has an invalid length.
[  342.653491][T16702] netlink: 'syz.0.3111': attribute type 8 has an invalid length.
[  342.664823][T16576] hsr_slave_0: entered promiscuous mode
[  342.690822][T16576] hsr_slave_1: entered promiscuous mode
[  342.703148][T16576] debugfs: 'hsr0' already exists in 'hsr'
[  342.709439][T16702] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3111'.
[  342.719349][T16576] Cannot create hsr debugfs directory
[  343.117014][T16721] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3117'.
[  343.238882][T16576] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.316617][T16725] geneve2: entered promiscuous mode
[  343.322449][T16725] geneve2: entered allmulticast mode
[  343.346586][ T6873] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  343.362069][ T6873] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  343.391506][T16730] netlink: 'syz.1.3121': attribute type 1 has an invalid length.
[  343.426050][T16730] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3121'.
[  343.453459][T16576] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.542759][ T6873] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  343.571652][ T6873] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  343.605341][T16739] netem: change failed
[  343.658472][ T5641] Bluetooth: hci1: command tx timeout
[  343.811731][T16576] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.852222][T16734] lo speed is unknown, defaulting to 1000
[  343.863032][T16734] lo speed is unknown, defaulting to 1000
[  343.928955][T16576] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.300606][T16762] netlink: 'syz.2.3129': attribute type 1 has an invalid length.
[  344.415953][T16762] 8021q: adding VLAN 0 to HW filter on device bond16
[  344.538266][T16762] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3129'.
[  344.571782][T16762] netlink: 'syz.2.3129': attribute type 1 has an invalid length.
[  344.605036][T16765] bond16: (slave geneve3): making interface the new active one
[  344.618441][T16768] netlink: 'syz.1.3130': attribute type 10 has an invalid length.
[  344.639379][T16768] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3130'.
[  344.651376][T16765] bond16: (slave geneve3): Enslaving as an active interface with an up link
[  344.931661][T16776] syzkaller0: entered promiscuous mode
[  344.937275][T16776] syzkaller0: entered allmulticast mode
[  345.739168][ T5641] Bluetooth: hci1: command tx timeout
[  347.349182][ T4962] block nbd1: Possible stuck request ffff8880278ce000: control (read@0,1024B). Runtime 210 seconds
[  347.361141][ T4962] block nbd1: Possible stuck request ffff8880278ce1c0: control (read@1024,1024B). Runtime 210 seconds
[  347.373556][ T4962] block nbd1: Possible stuck request ffff8880278ce380: control (read@2048,1024B). Runtime 210 seconds
[  347.385119][ T4962] block nbd1: Possible stuck request ffff8880278ce540: control (read@3072,1024B). Runtime 210 seconds
[  347.541059][T16576] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  347.566701][T16576] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  347.577814][T16796] ve: renamed from gre0 (while UP)
[  347.641612][T16576] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  347.666625][T16576] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  347.686167][T16576] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  347.717380][T16576] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  347.744803][T16576] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  347.813503][T16576] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  347.824252][ T5641] Bluetooth: hci1: command tx timeout
[  347.933974][T16810] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  347.987065][ T1674] block nbd4: Possible stuck request ffff8880279c0000: control (read@0,1024B). Runtime 180 seconds
[  347.999077][ T1674] block nbd4: Possible stuck request ffff8880279c01c0: control (read@1024,1024B). Runtime 180 seconds
[  348.010733][ T1674] block nbd4: Possible stuck request ffff8880279c0380: control (read@2048,1024B). Runtime 180 seconds
[  348.021828][ T1674] block nbd4: Possible stuck request ffff8880279c0540: control (read@3072,1024B). Runtime 180 seconds
[  348.202349][T16825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3139'.
[  348.217234][T16576] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.296920][T16576] 8021q: adding VLAN 0 to HW filter on device team0
[  348.300891][T16827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3140'.
[  348.338841][T16827] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3140'.
[  348.353188][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.360436][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.408221][T16827] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3140'.
[  348.455917][T16834] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_batadv, syncid = 2, id = 0
[  348.474243][T14146] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.481579][T14146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.777089][T16849] xt_hashlimit: size too large, truncated to 1048576
[  348.846380][T16852] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20005
[  349.328991][T16878] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3154'.
[  349.649446][T16576] 8021q: adding VLAN 0 to HW filter on device batadv0
[  349.791276][T16576] veth0_vlan: entered promiscuous mode
[  349.826159][T16576] veth1_vlan: entered promiscuous mode
[  349.892779][T16576] veth0_macvtap: entered promiscuous mode
[  349.915618][T16576] veth1_macvtap: entered promiscuous mode
[  349.922229][   T29] audit: type=1800 audit(1779858374.832:6): pid=16898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3159" name="memory.events" dev="tmpfs" ino=3322 res=0 errno=0
[  349.972958][   T29] audit: type=1804 audit(1779858374.862:7): pid=16898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3159" name="/newroot/648/memory.events" dev="tmpfs" ino=3322 res=1 errno=0
[  350.028842][T16576] batman_adv: batadv0: Interface activated: batadv_slave_0
[  350.090159][T16576] batman_adv: batadv0: Interface activated: batadv_slave_1
[  350.171278][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.182324][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.202081][T16903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  350.202721][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.240338][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.332342][T16914] openvswitch: netlink: IP tunnel dst address not specified
[  350.774944][  T771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.795147][  T771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.859047][T16926] netlink: 'syz.4.3167': attribute type 2 has an invalid length.
[  350.872966][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.908001][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.049114][T16934] tipc: New replicast peer: 255.255.255.255
[  351.076201][T16934] tipc: Enabled bearer <udp:syz2>, priority 10
[  351.385518][T16946] netem: change failed
[  351.633283][ T5650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  351.652237][ T5650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  351.666177][ T5650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  351.683759][ T5650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  351.695843][ T5650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  352.187563][ T5832] tipc: Node number set to 379530761
[  352.554890][T16997] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb
[  352.737416][T16951] lo speed is unknown, defaulting to 1000
[  352.757353][T16951] lo speed is unknown, defaulting to 1000
[  352.845477][T17009] netlink: 'syz.4.3193': attribute type 4 has an invalid length.
[  353.039061][T17016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  353.160731][T17022] netlink: 'syz.3.3197': attribute type 1 has an invalid length.
[  353.176607][T17022] netlink: 'syz.3.3197': attribute type 2 has an invalid length.
[  353.423030][T17029] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  353.626068][T17032] netlink: 'syz.0.3202': attribute type 7 has an invalid length.
[  353.659454][T17054] netlink: 45 bytes leftover after parsing attributes in process `syz.4.3204'.
[  353.675478][T17032] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3202'.
[  353.741805][ T5650] Bluetooth: hci2: command tx timeout
[  353.851454][T17060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3206'.
[  353.974312][T17060] xt_l2tp: invalid flags combination: 8
[  354.095494][T17071] tipc: MTU too low for tipc bearer
[  354.369613][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3214'.
[  354.719930][T16951] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.740427][T16951] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.756796][T16951] bridge_slave_0: entered allmulticast mode
[  354.780200][T16951] bridge_slave_0: entered promiscuous mode
[  354.791416][T16951] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.798933][T16951] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.806326][T16951] bridge_slave_1: entered allmulticast mode
[  354.814485][T16951] bridge_slave_1: entered promiscuous mode
[  354.936303][T16951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.967077][T16951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  355.091541][T16951] team0: Port device team_slave_0 added
[  355.104612][T16951] team0: Port device team_slave_1 added
[  355.239398][T16951] batman_adv: batadv0: Adding interface: batadv_slave_0
[  355.261871][T16951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  355.301138][T16951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  355.349604][T16951] batman_adv: batadv0: Adding interface: batadv_slave_1
[  355.357160][T16951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  355.391271][T16951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  355.643844][T16951] hsr_slave_0: entered promiscuous mode
[  355.663888][T16951] hsr_slave_1: entered promiscuous mode
[  355.671007][T16951] debugfs: 'hsr0' already exists in 'hsr'
[  355.678850][T16951] Cannot create hsr debugfs directory
[  355.818287][ T5650] Bluetooth: hci2: command tx timeout
[  355.914357][T17153] Bluetooth: MGMT ver 1.23
[  356.282371][T16951] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  356.305614][T16951] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.317878][T17170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3235'.
[  356.510974][T17173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3238'.
[  356.626739][T17179] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  356.635969][T17179] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  357.140203][T16951] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  357.151472][T16951] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.236725][T16951] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  357.249273][T16951] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.292364][T17186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3241'.
[  357.382387][T16951] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  357.392932][T16951] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.501058][T17197] syzkaller0: entered promiscuous mode
[  357.520478][T17197] syzkaller0: entered allmulticast mode
[  357.725975][T17206] xt_CT: You must specify a L4 protocol and not use inversions on it
[  357.813138][T17207] xt_CT: You must specify a L4 protocol and not use inversions on it
[  357.865718][T17213] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3247'.
[  357.898955][ T5650] Bluetooth: hci2: command tx timeout
[  357.972313][T17219] batadv_slave_1: entered promiscuous mode
[  358.749562][T17216] batadv_slave_1: left promiscuous mode
[  359.002789][T17227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3250'.
[  359.977866][ T5650] Bluetooth: hci2: command tx timeout
[  360.156588][T17181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  360.184504][T16951] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  360.229283][T16951] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  360.249154][T16951] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  360.309132][T16951] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  360.323215][T16951] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  360.347338][T16951] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  360.387386][T16951] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  360.413450][T17234] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3253'.
[  360.415130][T16951] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  360.536630][T17248] IPv6: NLM_F_CREATE should be specified when creating new route
[  360.563915][T17248] netlink: 'syz.4.3256': attribute type 1 has an invalid length.
[  360.700428][T16951] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.753927][T16951] 8021q: adding VLAN 0 to HW filter on device team0
[  360.788900][  T771] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.796171][  T771] bridge0: port 1(bridge_slave_0) entered forwarding state
[  360.826829][T17258] netlink: 'syz.4.3259': attribute type 9 has an invalid length.
[  360.855263][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.862532][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  360.966478][T17267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3262'.
[  361.385588][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3266'.
[  361.816517][   T29] audit: type=1804 audit(1779858386.722:8): pid=17298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3271" name="/newroot/49/cgroup.controllers" dev="tmpfs" ino=268 res=1 errno=0
[  361.915394][   T29] audit: type=1800 audit(1779858386.722:9): pid=17298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3271" name="cgroup.controllers" dev="tmpfs" ino=268 res=0 errno=0
[  362.034266][T17306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  362.255050][T16951] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.429232][T16951] veth0_vlan: entered promiscuous mode
[  362.496463][T16951] veth1_vlan: entered promiscuous mode
[  362.618082][T16951] veth0_macvtap: entered promiscuous mode
[  362.645194][T16951] veth1_macvtap: entered promiscuous mode
[  362.702036][T16951] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.729749][T17329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3279'.
[  362.753541][T17329] netlink: 'syz.3.3279': attribute type 13 has an invalid length.
[  362.756325][T16951] batman_adv: batadv0: Interface activated: batadv_slave_1
[  362.776394][ T6873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  362.805755][T17329] veth1_macvtap: left promiscuous mode
[  362.812637][T17329] macsec0: entered allmulticast mode
[  362.832719][ T6873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  362.856782][ T6873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  362.933866][ T6873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.130867][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.157323][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.197570][T17340] bridge_slave_0: left allmulticast mode
[  363.204069][T17340] bridge_slave_0: left promiscuous mode
[  363.211832][T17340] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.225106][T17340] bridge_slave_1: left allmulticast mode
[  363.234129][T17340] bridge_slave_1: left promiscuous mode
[  363.240599][T17340] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.250578][T17344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3282'.
[  363.265248][T17340] bond0: (slave bond_slave_0): Releasing backup interface
[  363.284606][T17340] bond0: (slave bond_slave_1): Releasing backup interface
[  363.305979][T17340] team0: Port device team_slave_0 removed
[  363.316921][T17340] team0: Port device team_slave_1 removed
[  363.323898][T17340] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  363.332405][T17340] batman_adv: batadv0: Removing interface: batadv_slave_0
[  363.348539][T17340] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  363.356577][T17340] batman_adv: batadv0: Removing interface: batadv_slave_1
[  363.372611][T17340] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  363.574929][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.596774][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.643831][T17353] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3283'.
[  364.098775][T17363] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  364.143577][T17363] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  364.166310][T17369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3289'.
[  364.209385][T17371] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  364.226963][T17371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.268506][ T5641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  364.286104][ T5641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  364.295435][ T5641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  364.312960][ T5641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  364.321120][ T5641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  364.684161][T17385] netlink: 'syz.4.3292': attribute type 83 has an invalid length.
[  365.049927][T17372] lo speed is unknown, defaulting to 1000
[  365.055548][T17401] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3295'.
[  365.070292][T17372] lo speed is unknown, defaulting to 1000
[  365.106800][T17401] netlink: 'syz.3.3295': attribute type 2 has an invalid length.
[  365.575250][T17418] openvswitch: netlink: IPv4 tun info is not correct
[  365.584807][T17415] syzkaller0: entered promiscuous mode
[  365.592354][T17418] netlink: 'syz.4.3302': attribute type 4 has an invalid length.
[  365.603683][T17415] syzkaller0: entered allmulticast mode
[  365.605793][T17418] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3302'.
[  365.652171][T17415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3299'.
[  365.689704][T17420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3303'.
[  365.763400][T17422] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3299'.
[  366.014516][T17436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  366.059999][T17436] netlink: 'syz.1.3307': attribute type 4 has an invalid length.
[  366.106123][T17436] netlink: 'syz.1.3307': attribute type 4 has an invalid length.
[  366.185189][T17442] netlink: 'syz.3.3310': attribute type 2 has an invalid length.
[  366.221555][T17447] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3312'.
[  366.240508][T17445] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3311'.
[  366.378441][ T5641] Bluetooth: hci4: command tx timeout
[  366.404653][T17455] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3314'.
[  366.681059][T17469] netlink: 'syz.3.3318': attribute type 1 has an invalid length.
[  366.693639][T17469] netlink: 'syz.3.3318': attribute type 2 has an invalid length.
[  366.704394][T17472] netlink: 'syz.4.3317': attribute type 1 has an invalid length.
[  366.752377][T17470] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3318'.
[  366.772307][T17372] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.811119][T17372] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.839247][T17372] bridge_slave_0: entered allmulticast mode
[  366.867976][T17372] bridge_slave_0: entered promiscuous mode
[  366.935055][T17372] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.938728][T17484] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003
[  366.950369][T17372] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.950704][T17372] bridge_slave_1: entered allmulticast mode
[  366.952945][T17372] bridge_slave_1: entered promiscuous mode
[  366.963471][T17488] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003
[  366.980655][T17487] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  367.130889][T17372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.161542][T17372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  367.261217][T17501] netlink: 'syz.4.3327': attribute type 3 has an invalid length.
[  367.269936][T17501] netlink: 'syz.4.3327': attribute type 1 has an invalid length.
[  367.311162][T17372] team0: Port device team_slave_0 added
[  367.346689][T17372] team0: Port device team_slave_1 added
[  367.435744][T17509] netlink: 'syz.3.3328': attribute type 1 has an invalid length.
[  367.465455][T17372] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.476782][T17372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.506037][T17372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  367.570548][T17372] batman_adv: batadv0: Adding interface: batadv_slave_1
[  367.587060][T17372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.614446][T17372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  367.783664][T17526] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  367.838018][T17527] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  367.881292][T17372] hsr_slave_0: entered promiscuous mode
[  367.892168][T17372] hsr_slave_1: entered promiscuous mode
[  367.899424][T17372] debugfs: 'hsr0' already exists in 'hsr'
[  367.905293][T17372] Cannot create hsr debugfs directory
[  368.477855][ T5641] Bluetooth: hci4: command tx timeout
[  368.814655][T17573] syzkaller1: entered promiscuous mode
[  368.856685][T17573] syzkaller1: entered allmulticast mode
[  369.136684][T17372] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.413518][T17372] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.722867][T17372] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.169763][T17372] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  370.194646][T17372] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  370.203456][T17372] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  370.232549][T17372] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  370.241666][T17372] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  370.264761][T17662] __nla_validate_parse: 10 callbacks suppressed
[  370.264783][T17662] netlink: 159784 bytes leftover after parsing attributes in process `syz.4.3362'.
[  370.292978][T17372] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  370.309312][T17372] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  370.334847][T17372] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  370.496983][T17372] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.538914][ T5641] Bluetooth: hci4: command tx timeout
[  370.572771][T17681] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3367'.
[  370.575798][T17372] 8021q: adding VLAN 0 to HW filter on device team0
[  370.599049][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.606286][ T6873] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.623458][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.630738][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.652680][T17681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3367'.
[  370.672285][T17682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3367'.
[  371.230450][T17708] netlink: 45 bytes leftover after parsing attributes in process `syz.1.3373'.
[  371.326012][T17716] netdevsim netdevsim3: Direct firmware load for . failed with error -2
[  371.341371][T17716] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  371.717609][T17372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  371.830900][T17740] veth3: entered promiscuous mode
[  371.836097][T17740] veth3: entered allmulticast mode
[  371.847363][T17742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3380'.
[  371.862001][T17742] validate_nla: 6 callbacks suppressed
[  371.862019][T17742] netlink: 'syz.1.3380': attribute type 11 has an invalid length.
[  371.879353][T17372] veth0_vlan: entered promiscuous mode
[  371.892161][T17372] veth1_vlan: entered promiscuous mode
[  371.908729][T17742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3380'.
[  371.943810][T17742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3380'.
[  371.944657][T17372] veth0_macvtap: entered promiscuous mode
[  371.952831][T17742] netlink: 'syz.1.3380': attribute type 11 has an invalid length.
[  371.952854][T17742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3380'.
[  371.982883][ T3281] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  371.991831][ T3281] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  372.002292][   T47] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  372.014355][   T47] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  372.024984][T17372] veth1_macvtap: entered promiscuous mode
[  372.050980][T17372] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.066418][T17372] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.130678][ T1025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.149435][ T1025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.178303][ T1025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.200746][ T1025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.223655][T17747] netlink: 'syz.3.3382': attribute type 11 has an invalid length.
[  372.233361][T17747] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3382'.
[  372.273196][T17748] netlink: 'syz.3.3382': attribute type 11 has an invalid length.
[  372.454788][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.489998][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.616576][  T771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.629352][ T5641] Bluetooth: hci4: command tx timeout
[  372.659938][  T771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.823618][T17771] netlink: 'syz.1.3391': attribute type 7 has an invalid length.
[  372.846296][T17771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  372.904296][T17773] netlink: 'syz.3.3392': attribute type 64 has an invalid length.
[  372.992012][T17781] pim6reg527: entered allmulticast mode
[  373.149688][T17791] netlink: 'syz.3.3394': attribute type 4 has an invalid length.
[  373.983610][T14146] wlan1: Trigger new scan to find an IBSS to join
[  374.024419][T17837] sctp: [Deprecated]: syz.2.3407 (pid 17837) Use of struct sctp_assoc_value in delayed_ack socket option.
[  374.024419][T17837] Use struct sctp_sack_info instead
[  374.042957][T17841] IPVS: length: 142 != 24
[  374.365569][T17846] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.373424][T17846] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.499336][T17846] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  374.777041][T17871] netlink: 'syz.3.3418': attribute type 83 has an invalid length.
[  375.564683][T17885] openvswitch: netlink: IPv6 tunnel dst address is zero
[  375.643455][T17887] netlink: 'syz.0.3422': attribute type 13 has an invalid length.
[  375.809065][T17890] netem: change failed
[  375.840917][T17892] __nla_validate_parse: 7 callbacks suppressed
[  375.840936][T17892] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3423'.
[  376.093565][T17894] pim6reg: entered allmulticast mode
[  376.112754][T17894] pim6reg: left allmulticast mode
[  376.677118][T17916] unsupported nlmsg_type 40
[  376.919743][T17933] netlink: 'syz.2.3436': attribute type 1 has an invalid length.
[  376.978745][T17925] xt_hashlimit: size too large, truncated to 1048576
[  377.004869][T17935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3435'.
[  377.021797][   T47] wlan1: Trigger new scan to find an IBSS to join
[  377.029259][T17933] bond1: entered promiscuous mode
[  377.034852][T17933] 8021q: adding VLAN 0 to HW filter on device bond1
[  377.087284][T17939] macvtap1: entered allmulticast mode
[  377.104211][T17935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3435'.
[  377.136497][T17933] macvtap2: entered allmulticast mode
[  377.192272][T17933] bond1: (slave bridge1): making interface the new active one
[  377.209652][T17932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3435'.
[  377.224179][T17933] bridge1: entered promiscuous mode
[  377.227822][T17932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3435'.
[  377.252077][T17933] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  377.421141][ T4962] block nbd1: Possible stuck request ffff8880278ce000: control (read@0,1024B). Runtime 240 seconds
[  377.435033][ T4962] block nbd1: Possible stuck request ffff8880278ce1c0: control (read@1024,1024B). Runtime 240 seconds
[  377.446408][ T4962] block nbd1: Possible stuck request ffff8880278ce380: control (read@2048,1024B). Runtime 240 seconds
[  377.458303][ T4962] block nbd1: Possible stuck request ffff8880278ce540: control (read@3072,1024B). Runtime 240 seconds
[  377.657283][T17959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3440'.
[  377.861477][T17963] netlink: 'syz.0.3441': attribute type 16 has an invalid length.
[  377.896562][T17966] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.910546][T17963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3441'.
[  377.949067][T17964] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3441'.
[  378.061165][ T1674] block nbd4: Possible stuck request ffff8880279c0000: control (read@0,1024B). Runtime 210 seconds
[  378.072351][ T1674] block nbd4: Possible stuck request ffff8880279c01c0: control (read@1024,1024B). Runtime 210 seconds
[  378.085810][ T1674] block nbd4: Possible stuck request ffff8880279c0380: control (read@2048,1024B). Runtime 210 seconds
[  378.097465][ T1674] block nbd4: Possible stuck request ffff8880279c0540: control (read@3072,1024B). Runtime 210 seconds
[  378.119399][T17969] lo speed is unknown, defaulting to 1000
[  378.121621][T17975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3445'.
[  378.127038][T17969] lo speed is unknown, defaulting to 1000
[  378.205968][T17977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3447'.
[  378.715947][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  378.874911][T17998] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  379.983317][ T3315] wlan1: Creating new IBSS network, BSSID 2a:c0:ea:de:8d:c2
[  380.073053][T18059] netlink: 'syz.1.3470': attribute type 25 has an invalid length.
[  380.308969][ T5774] IPVS: starting estimator thread 0...
[  380.407821][T18074] IPVS: using max 25 ests per chain, 60000 per kthread
[  380.461348][T18079] IPv6: NLM_F_CREATE should be specified when creating new route
[  380.954917][  T771] wlan1: Trigger new scan to find an IBSS to join
[  381.389777][T18122] netlink: 'syz.2.3486': attribute type 16 has an invalid length.
[  381.426029][T18122] __nla_validate_parse: 4 callbacks suppressed
[  381.426050][T18122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3486'.
[  381.456647][ T5745] IPVS: starting estimator thread 0...
[  381.460193][T18117] lo speed is unknown, defaulting to 1000
[  381.463883][T18123] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20001
[  381.485153][T18117] lo speed is unknown, defaulting to 1000
[  381.567837][T18124] IPVS: using max 30 ests per chain, 72000 per kthread
[  381.956586][T18142] netlink: 892 bytes leftover after parsing attributes in process `syz.4.3493'.
[  382.199782][T18148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3496'.
[  382.643042][T18160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3501'.
[  382.650952][T18161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3498'.
[  382.791491][T18159] openvswitch: netlink: Actions may not be safe on all matching packets
[  382.806149][T18167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3502'.
[  382.836163][T18167] netlink: 23 bytes leftover after parsing attributes in process `syz.2.3502'.
[  382.838601][T18170] nbd: must specify a size in bytes for the device
[  383.089215][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3505'.
[  383.118489][T18178] IPVS: set_ctl: invalid protocol: 20005 127.0.0.1:20000
[  383.257349][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3507'.
[  383.275916][T18186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3509'.
[  383.386946][T18190] siw: device registration error -23
[  383.860104][T18219] xt_hashlimit: size too large, truncated to 1048576
[  383.979088][  T771] wlan1: Trigger new scan to find an IBSS to join
[  384.036633][T18223] IPVS: persistence engine module ip_vs_pe_À
 not found
[  384.338262][T18243] netlink: 'syz.4.3524': attribute type 1 has an invalid length.
[  384.359220][T18242] netlink: 'syz.4.3524': attribute type 1 has an invalid length.
[  384.442486][T18249] syzkaller0: entered promiscuous mode
[  384.475645][T18249] syzkaller0: entered allmulticast mode
[  384.580658][T18249] tipc: Started in network mode
[  384.602607][T18249] tipc: Node identity 56a4831e172d, cluster identity 4711
[  384.632117][T18249] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.703375][T18247] tipc: Resetting bearer <eth:syzkaller0>
[  384.716084][T18271] netlink: 'syz.0.3531': attribute type 1 has an invalid length.
[  384.737341][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  384.744775][T18271] IPv6: NLM_F_CREATE should be set when creating new route
[  384.782901][T18247] tipc: Disabling bearer <eth:syzkaller0>
[  384.790047][T18271] netlink: 'syz.0.3531': attribute type 1 has an invalid length.
[  384.813748][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  384.823064][T18271] netlink: 'syz.0.3531': attribute type 1 has an invalid length.
[  384.832164][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  384.840287][T18271] netlink: 'syz.0.3531': attribute type 1 has an invalid length.
[  384.859890][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  384.879463][T18271] netlink: 'syz.0.3531': attribute type 1 has an invalid length.
[  384.900417][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  384.941013][T18271] netlink: 'syz.0.3531': attribute type 1 has an invalid length.
[  384.990607][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.041623][T18271] netlink: 'syz.0.3531': attribute type 1 has an invalid length.
[  385.079456][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.107157][T18271] netlink: 'syz.0.3531': attribute type 1 has an invalid length.
[  385.128850][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.144017][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.160662][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.175650][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.190501][T18293] IPVS: set_ctl: invalid protocol: 59 172.20.20.43:20004
[  385.205289][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.211636][T18293] syzkaller0: entered promiscuous mode
[  385.219054][T18293] syzkaller0: entered allmulticast mode
[  385.233149][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.242008][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.251095][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.292803][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.304795][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.318566][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.326353][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.335006][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.343897][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.354895][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.381823][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.395695][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.405769][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.428788][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.450776][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.471604][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.473654][T18304] sctp: [Deprecated]: syz.3.3541 (pid 18304) Use of struct sctp_assoc_value in delayed_ack socket option.
[  385.473654][T18304] Use struct sctp_sack_info instead
[  385.493153][T18271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.824850][T18316] syzkaller0: entered promiscuous mode
[  385.854262][T18316] syzkaller0: entered allmulticast mode
[  385.940755][T18323] bond1: entered promiscuous mode
[  385.946494][T18323] 8021q: adding VLAN 0 to HW filter on device bond1
[  386.941382][ T3281] wlan1: Trigger new scan to find an IBSS to join
[  387.847031][T14146] wlan1: Creating new IBSS network, BSSID 1e:e6:ff:d7:7e:38
[  388.504251][T18353] 8021q: adding VLAN 0 to HW filter on device macsec1
[  388.546084][  T809] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  388.871922][T18372] __nla_validate_parse: 9 callbacks suppressed
[  388.871945][T18372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3563'.
[  389.052059][T18372] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3563'.
[  389.098106][T18372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.105645][T18390] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3569'.
[  389.210788][T18395] syzkaller0: entered promiscuous mode
[  389.216328][T18395] syzkaller0: entered allmulticast mode
[  389.299673][T18406] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3571'.
[  389.362088][T18410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3570'.
[  389.383385][T18413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3575'.
[  389.392970][T18413] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  389.649840][T18421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3577'.
[  389.659704][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3577'.
[  391.989934][T18384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  392.544488][T18452] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3587'.
[  392.554651][T18452] openvswitch: netlink: Flow key attr not present in new flow.
[  392.639716][T18458] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  392.766208][T18471] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3593'.
[  392.964163][T18482] x_tables: unsorted entry at hook 1
[  393.280429][T18492] xt_hashlimit: size too large, truncated to 1048576
[  393.795790][T18512] xt_hashlimit: size too large, truncated to 1048576
[  393.857554][T18510] bond1: entered promiscuous mode
[  393.863482][T18510] bond1: entered allmulticast mode
[  393.869931][T18510] 8021q: adding VLAN 0 to HW filter on device bond1
[  394.499036][T18541] validate_nla: 23 callbacks suppressed
[  394.499058][T18541] netlink: 'syz.0.3615': attribute type 61 has an invalid length.
[  394.528576][T18541] __nla_validate_parse: 1 callbacks suppressed
[  394.528596][T18541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3615'.
[  394.582332][T18539] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  394.719684][T18554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3618'.
[  394.758536][T18554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3618'.
[  394.962509][T18561] netlink: 'syz.4.3622': attribute type 1 has an invalid length.
[  395.054707][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3621'.
[  395.207681][T18541] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.216844][T18541] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.322551][T18541] A link change request failed with some changes committed already. Interface vxcan0 may have been left with an inconsistent configuration, please check.
[  395.364280][T18561] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  395.381848][T18566] netlink: 'syz.2.3621': attribute type 1 has an invalid length.
[  395.398916][T18566] netlink: 'syz.2.3621': attribute type 2 has an invalid length.
[  395.485687][T18577] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.3626'.
[  395.561206][T18579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3627'.
[  395.645345][T18586] netlink: 'syz.3.3630': attribute type 5 has an invalid length.
[  395.747158][T18595] netlink: 'syz.1.3633': attribute type 1 has an invalid length.
[  395.778991][T18597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3632'.
[  395.836508][T18595] bond1: entered promiscuous mode
[  395.848940][T18595] 8021q: adding VLAN 0 to HW filter on device bond1
[  396.393013][T18631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  396.663596][T18649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3647'.
[  396.673812][T18649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3647'.
[  396.950138][T18664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3654'.
[  396.982742][T18664] ipvlan2: entered allmulticast mode
[  396.988690][T18664] syz_tun: entered allmulticast mode
[  397.081596][ T3281] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  397.097406][ T3281] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  397.106659][ T3281] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  397.138466][ T3281] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  397.305839][T18687] sctp: [Deprecated]: syz.1.3658 (pid 18687) Use of struct sctp_assoc_value in delayed_ack socket option.
[  397.305839][T18687] Use struct sctp_sack_info instead
[  397.414217][T18687] macvlan0: entered promiscuous mode
[  397.846503][T18716] IPVS: ip_vs_add_dest(): server weight less than zero
[  398.072197][T18726] veth1_macvtap: left promiscuous mode
[  398.460870][T18702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  398.783404][T18753] netlink: 'syz.1.3679': attribute type 1 has an invalid length.
[  398.834573][T18753] 8021q: adding VLAN 0 to HW filter on device bond2
[  398.870907][T18753] bond2: (slave gretap2): making interface the new active one
[  398.881548][T18753] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  399.710810][T18797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  399.736500][T18795] syzkaller0: entered promiscuous mode
[  399.767243][T18795] syzkaller0: entered allmulticast mode
[  400.029953][T18818] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048)
[  400.077443][T18785] sctp: [Deprecated]: syz.1.3689 (pid 18785) Use of struct sctp_assoc_value in delayed_ack socket option.
[  400.077443][T18785] Use struct sctp_sack_info instead
[  400.199710][T18831] __nla_validate_parse: 9 callbacks suppressed
[  400.199732][T18831] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3700'.
[  400.233725][T15615] IPVS: starting estimator thread 0...
[  400.320819][T18838] IPVS: set_ctl: invalid protocol: 119 224.0.0.2:20001
[  400.337855][T18833] IPVS: using max 26 ests per chain, 62400 per kthread
[  400.341946][T18838] sctp: [Deprecated]: syz.2.3702 (pid 18838) Use of int in maxseg socket option.
[  400.341946][T18838] Use struct sctp_assoc_value instead
[  400.384747][T18838] sctp: [Deprecated]: syz.2.3702 (pid 18838) Use of int in maxseg socket option.
[  400.384747][T18838] Use struct sctp_assoc_value instead
[  400.557208][T18848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3706'.
[  400.776655][T18863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3711'.
[  400.808224][T18863] openvswitch: netlink: Flow key attr not present in new flow.
[  401.182031][T18884] bond1: option lp_interval: invalid value (0)
[  401.188415][T18884] bond1: option lp_interval: allowed values 1 - 2147483647
[  401.502974][T18884] bond1 (unregistering): Released all slaves
[  401.766085][T18922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3722'.
[  401.995002][T18941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3728'.
[  402.054535][T18941] netlink: 'syz.3.3728': attribute type 1 has an invalid length.
[  402.064652][T18941] netlink: 'syz.3.3728': attribute type 2 has an invalid length.
[  402.086166][T18947] syzkaller0: entered promiscuous mode
[  402.092070][T18947] syzkaller0: entered allmulticast mode
[  402.330961][T18965] netlink: 'syz.4.3735': attribute type 13 has an invalid length.
[  402.332573][T18970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3737'.
[  402.354122][T18965] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3735'.
[  402.368392][T18969] xt_hashlimit: size too large, truncated to 1048576
[  402.401833][T18970] ipvlan2: entered allmulticast mode
[  402.599692][T18978] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.3740'.
[  402.626878][T18978] openvswitch: netlink: Message has 6 unknown bytes.
[  402.692773][T18986] syzkaller0: entered promiscuous mode
[  402.728343][T18986] syzkaller0: entered allmulticast mode
[  402.994985][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3747'.
[  403.044579][T19004] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3749'.
[  404.123771][T19054] veth1_macvtap: entered allmulticast mode
[  404.240162][T19054] veth1_macvtap (unregistering): left allmulticast mode
[  404.437553][T19076] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  404.471381][T19067] bridge3: entered promiscuous mode
[  404.483116][T19067] bridge3: entered allmulticast mode
[  405.810170][T19133] __nla_validate_parse: 45 callbacks suppressed
[  405.810193][T19133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3784'.
[  405.993755][T19160] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3790'.
[  406.050438][T19163] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3791'.
[  406.134705][T19163] xt_TPROXY: Can be used only with -p tcp or -p udp
[  406.540714][T19194] openvswitch: netlink: IPv4 tun info is not correct
[  406.549710][T19196] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3801'.
[  406.995458][T19215] can: request_module (can-proto-0) failed.
[  407.293484][T19236] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  407.373357][T19244] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002
[  407.514221][ T4962] block nbd1: Possible stuck request ffff8880278ce000: control (read@0,1024B). Runtime 270 seconds
[  407.525727][ T4962] block nbd1: Possible stuck request ffff8880278ce1c0: control (read@1024,1024B). Runtime 270 seconds
[  407.537728][ T4962] block nbd1: Possible stuck request ffff8880278ce380: control (read@2048,1024B). Runtime 270 seconds
[  407.549899][ T4962] block nbd1: Possible stuck request ffff8880278ce540: control (read@3072,1024B). Runtime 270 seconds
[  408.003383][  T771] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  408.139434][ T1674] block nbd4: Possible stuck request ffff8880279c0000: control (read@0,1024B). Runtime 240 seconds
[  408.151682][ T1674] block nbd4: Possible stuck request ffff8880279c01c0: control (read@1024,1024B). Runtime 240 seconds
[  408.163319][ T1674] block nbd4: Possible stuck request ffff8880279c0380: control (read@2048,1024B). Runtime 240 seconds
[  408.174592][ T1674] block nbd4: Possible stuck request ffff8880279c0540: control (read@3072,1024B). Runtime 240 seconds
[  410.258259][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3819'.
[  410.296845][T19268] netlink: 'syz.3.3820': attribute type 1 has an invalid length.
[  410.325450][T19268] netlink: 'syz.3.3820': attribute type 11 has an invalid length.
[  410.356089][T19268] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3820'.
[  410.443738][T19274] bond3: entered allmulticast mode
[  410.482803][T19275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3820'.
[  410.544332][T19274] veth5: entered allmulticast mode
[  410.568564][T19274] bond3: (slave veth5): Enslaving as an active interface with an up link
[  410.708193][T19297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3827'.
[  410.850809][T19299] gtp0: entered promiscuous mode
[  410.856056][T19299] gtp0: entered allmulticast mode
[  410.900514][T19302] syzkaller1: entered promiscuous mode
[  410.906193][T19302] syzkaller1: entered allmulticast mode
[  410.969870][T19308] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3829'.
[  411.092821][T19313] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  411.221190][T19276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  411.431198][T19325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  411.547274][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3837'.
[  411.554762][T19330] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3838'.
[  411.836912][T19347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3846'.
[  411.866925][T19347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3846'.
[  411.917239][T19347] gretap0: entered promiscuous mode
[  411.932663][T19347] gretap0: left promiscuous mode
[  412.177297][T19365] netlink: 'syz.0.3849': attribute type 1 has an invalid length.
[  412.227323][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3849'.
[  412.254023][T19365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3849'.
[  412.284527][T19365] netlink: 'syz.0.3849': attribute type 2 has an invalid length.
[  412.294401][T19365] netlink: 'syz.0.3849': attribute type 2 has an invalid length.
[  412.305641][T19365] netlink: 'syz.0.3849': attribute type 2 has an invalid length.
[  412.437616][T19383] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000
[  412.572312][T19391] vlan2: entered allmulticast mode
[  412.604358][T19391] bond0: entered allmulticast mode
[  412.627357][T19396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3856'.
[  412.639306][T19391] bond_slave_0: entered allmulticast mode
[  412.645188][T19391] bond_slave_1: entered allmulticast mode
[  412.662252][T19391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3856'.
[  412.935239][T19416] syzkaller1: entered promiscuous mode
[  412.949482][T19421] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3864'.
[  412.955849][T19416] syzkaller1: entered allmulticast mode
[  413.043055][T19421] bond0 (unregistering): Released all slaves
[  413.859099][T19474] veth0: entered promiscuous mode
[  414.114777][T19489] veth1_macvtap: left promiscuous mode
[  414.196731][T19494] pim6reg: entered allmulticast mode
[  414.216511][T19489] SET target dimension over the limit!
[  414.458644][T19511] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.291823][T14149] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  415.324288][T14149] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  415.358944][T14149] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  415.433057][T14149] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  415.546058][T19582] macvlan2: entered allmulticast mode
[  415.578218][T19582] dummy0: entered allmulticast mode
[  415.664383][T19590] IPv6: NLM_F_CREATE should be specified when creating new route
[  416.191805][ T6890] nci: nci_data_exchange_complete: no rx callback, dropping rx data...
[  416.223507][ T5292] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  416.549441][T19612] sctp: [Deprecated]: syz.4.3918 (pid 19612) Use of int in max_burst socket option deprecated.
[  416.549441][T19612] Use struct sctp_assoc_value instead
[  416.569109][T19646] __nla_validate_parse: 9 callbacks suppressed
[  416.569151][T19646] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3927'.
[  416.586642][T19646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3927'.
[  416.597201][T19642] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3927'.
[  416.609194][T19642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3927'.
[  416.831300][T19615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  417.041360][T19664] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3931'.
[  417.119850][T19667] netlink: 'syz.0.3933': attribute type 11 has an invalid length.
[  417.147284][T19667] netlink: 'syz.0.3933': attribute type 4 has an invalid length.
[  417.165783][T19667] netlink: 'syz.0.3933': attribute type 6 has an invalid length.
[  417.171194][T19665] syzkaller0: entered promiscuous mode
[  417.192232][T19667] netlink: 199556 bytes leftover after parsing attributes in process `syz.0.3933'.
[  417.195762][T19665] syzkaller0: entered allmulticast mode
[  417.316588][T19674] openvswitch: netlink: Flow actions attr not present in new flow.
[  417.484748][T19681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3937'.
[  418.375113][T19736] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3954'.
[  418.414696][T19736] openvswitch: netlink: Missing key (keys=40, expected=100)
[  418.459339][T19736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3954'.
[  418.518335][T19736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3954'.
[  418.844339][T19757] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  419.172175][T19774] 8021q: VLANs not supported on ip6tnl0
[  419.406367][T19781] 8021q: adding VLAN 0 to HW filter on device bond4
[  419.463739][T19793] bond4: (slave dummy0): Enslaving as an active interface with an up link
[  419.550224][T19781] bond4 (unregistering): (slave dummy0): Releasing backup interface
[  419.602463][T19781] bond4 (unregistering): Released all slaves
[  419.648624][T19812] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  420.075526][T19820] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  420.090172][T19820] bond2 (unregistering): Released all slaves
[  420.181213][T19833] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  420.202653][T19843] netlink: 'syz.1.3989': attribute type 15 has an invalid length.
[  420.301072][ T1025] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  420.450486][T19860] netlink: 'syz.1.3993': attribute type 21 has an invalid length.
[  420.473948][T19860] IPv6: NLM_F_CREATE should be specified when creating new route
[  420.976652][T19894] netlink: 'syz.4.4004': attribute type 1 has an invalid length.
[  420.993183][T19894] netlink: 'syz.4.4004': attribute type 1 has an invalid length.
[  421.013444][T19894] netlink: 'syz.4.4004': attribute type 8 has an invalid length.
[  421.313872][T19909] syzkaller1: entered promiscuous mode
[  421.320676][T19909] syzkaller1: entered allmulticast mode
[  422.200837][T19961] netlink: 'syz.1.4022': attribute type 1 has an invalid length.
[  422.226229][T19961] __nla_validate_parse: 21 callbacks suppressed
[  422.226250][T19961] netlink: 476 bytes leftover after parsing attributes in process `syz.1.4022'.
[  422.266950][T19961] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.4022'.
[  423.025384][T20000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4032'.
[  423.085296][T20004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4032'.
[  423.214975][T20010] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4034'.
[  423.295741][T20015] netlink: 'syz.2.4036': attribute type 2 has an invalid length.
[  423.482776][T20023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4038'.
[  423.791549][T20035] netlink: 'syz.0.4042': attribute type 3 has an invalid length.
[  423.823699][T20035] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4042'.
[  424.016481][T20046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4045'.
[  424.048271][T20046] block nbd7: Unsupported socket: should be TCP or UNIX.
[  424.376880][T20065] bridge0: port 1(veth1_to_bridge) entered blocking state
[  424.409861][T20065] bridge0: port 1(veth1_to_bridge) entered disabled state
[  424.434080][T20065] veth1_to_bridge: entered allmulticast mode
[  424.475580][T20065] veth1_to_bridge: entered promiscuous mode
[  424.490386][T20065] bridge0: port 1(veth1_to_bridge) entered blocking state
[  424.497759][T20065] bridge0: port 1(veth1_to_bridge) entered forwarding state
[  424.780119][T20092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4059'.
[  424.843455][T20085] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4060'.
[  425.156506][T20109] tipc: Started in network mode
[  425.173820][T20109] tipc: Node identity 5a526776bfef, cluster identity 4711
[  425.182492][T20109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  425.200711][T20111] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode
[  425.231411][T20111] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode
[  425.259547][T20109] syzkaller0: entered promiscuous mode
[  425.282340][T20109] syzkaller0: entered allmulticast mode
[  425.307425][T20122] netlink: 'syz.1.4066': attribute type 11 has an invalid length.
[  425.487447][T20109] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  425.586820][T20107] tipc: Resetting bearer <eth:syzkaller0>
[  425.631199][T20135] xt_nat: multiple ranges no longer supported
[  425.691402][T20107] tipc: Disabling bearer <eth:syzkaller0>
[  426.555795][T20194] syzkaller1: entered promiscuous mode
[  426.566629][T20194] syzkaller1: entered allmulticast mode
[  426.785559][T20201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  426.799260][T20202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  427.081764][T20217] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  427.374953][T20233] xt_HMARK: spi-set and port-set can't be combined
[  427.491010][T20238] netlink: 'syz.3.4098': attribute type 1 has an invalid length.
[  427.584693][T20238] bond2: entered promiscuous mode
[  427.591217][T20238] 8021q: adding VLAN 0 to HW filter on device bond2
[  427.606745][T20242] IPv6: sit1: Disabled Multicast RS
[  427.614097][T20242] sit1: entered allmulticast mode
[  427.753657][T20255] 8021q: adding VLAN 0 to HW filter on device team0
[  427.873155][T20262] __nla_validate_parse: 22 callbacks suppressed
[  427.873177][T20262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4105'.
[  427.928109][T20262] nbd: must specify at least one socket
[  428.192801][T20284] netlink: 'syz.1.4108': attribute type 29 has an invalid length.
[  428.395572][T20293] netem: change failed
[  428.561777][T20305] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4119'.
[  428.567433][T20302] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4118'.
[  428.602094][ T1025] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  428.630083][ T5759] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  428.641717][ T1025] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  428.728054][ T5773] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  428.765355][T20316] sctp: [Deprecated]: syz.4.4122 (pid 20316) Use of int in maxseg socket option.
[  428.765355][T20316] Use struct sctp_assoc_value instead
[  428.790742][T20316] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4122'.
[  428.807050][T20316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4122'.
[  428.950451][T20328] netlink: 'syz.0.4124': attribute type 29 has an invalid length.
[  428.973667][T20328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4124'.
[  429.217601][T20343] IPv6: NLM_F_CREATE should be specified when creating new route
[  429.252713][T20343] ieee802154 phy1 wpan1: encryption failed: -22
[  429.320718][T20352] netlink: 'syz.4.4132': attribute type 11 has an invalid length.
[  429.336445][T20352] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4132'.
[  429.361341][ T5773] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  431.810498][T20328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  432.023227][T20369] netlink: 'syz.4.4138': attribute type 1 has an invalid length.
[  432.187085][T20385] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4143'.
[  432.298046][T20387] set match dimension is over the limit!
[  433.026405][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  433.170171][T20369] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  433.457252][T20405] netlink: 'syz.4.4148': attribute type 1 has an invalid length.
[  433.504102][T20409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4147'.
[  433.509509][T20410] Cannot find add_set index 46338 as target
[  433.721337][T20419] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4153'.
[  433.817110][T20427] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4154'.
[  433.852126][T20427] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  433.976959][T20434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4156'.
[  434.161286][T20443] xt_hashlimit: size too large, truncated to 1048576
[  434.180406][T20441] macvlan0: left promiscuous mode
[  434.192109][T20446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4161'.
[  434.213231][T20441] netlink: 'syz.1.4159': attribute type 2 has an invalid length.
[  434.233610][T20446] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4161'.
[  434.608659][T20469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  434.647112][T20469] x_tables: ip6_tables: mh match: only valid for protocol 135
[  435.089507][T20491] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4170'.
[  435.169193][T20491] 8021q: VLANs not supported on ip6gre0
[  435.199781][T20494] lo speed is unknown, defaulting to 1000
[  435.247923][T20494] lo speed is unknown, defaulting to 1000
[  435.456151][T20515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4175'.
[  435.489999][T20515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4175'.
[  435.723902][T20499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  435.735649][T20499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.807319][T20533] netlink: 'syz.2.4182': attribute type 1 has an invalid length.
[  435.876164][T20533] bond2: entered promiscuous mode
[  435.882952][T20533] 8021q: adding VLAN 0 to HW filter on device bond2
[  436.083010][T20545] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4185'.
[  436.094123][T20547] netlink: 'syz.4.4183': attribute type 8 has an invalid length.
[  436.322796][T20499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  436.354428][T20499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.495962][T20551] batadv1: entered allmulticast mode
[  436.551466][T20568] netlink: 'syz.3.4189': attribute type 1 has an invalid length.
[  436.671612][T20499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  436.712432][T20499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.008998][T20499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  437.020523][T20499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.223924][T14149] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  437.236275][T14149] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  437.315263][  T771] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  437.340343][  T771] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  437.415555][  T771] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  437.428219][  T771] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  437.495496][ T6890] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  437.510006][ T6890] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  437.579146][ T4962] block nbd1: Possible stuck request ffff8880278ce000: control (read@0,1024B). Runtime 300 seconds
[  437.592684][ T4962] block nbd1: Possible stuck request ffff8880278ce1c0: control (read@1024,1024B). Runtime 300 seconds
[  437.604820][ T4962] block nbd1: Possible stuck request ffff8880278ce380: control (read@2048,1024B). Runtime 300 seconds
[  437.616949][ T4962] block nbd1: Possible stuck request ffff8880278ce540: control (read@3072,1024B). Runtime 300 seconds
[  438.219537][ T1674] block nbd4: Possible stuck request ffff8880279c0000: control (read@0,1024B). Runtime 270 seconds
[  438.230915][ T1674] block nbd4: Possible stuck request ffff8880279c01c0: control (read@1024,1024B). Runtime 270 seconds
[  438.242087][ T1674] block nbd4: Possible stuck request ffff8880279c0380: control (read@2048,1024B). Runtime 270 seconds
[  438.253260][ T1674] block nbd4: Possible stuck request ffff8880279c0540: control (read@3072,1024B). Runtime 270 seconds
[  439.030484][   T82] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  440.140017][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  440.147133][ T1315] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  440.633227][ T4997] udevd[4997]: worker [5999] /devices/virtual/block/nbd4 timeout; kill it
[  440.642227][ T4997] udevd[4997]: seq 13035 '/devices/virtual/block/nbd4' killed
[  442.058057][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  447.339409][ T5650] Bluetooth: hci5: command 0x0406 tx timeout
[  452.457911][ T5641] Bluetooth: hci3: command 0x0406 tx timeout
[  459.977846][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  460.082006][T20608] netlink: 'syz.3.4194': attribute type 2 has an invalid length.
[  460.153744][T20611] netlink: 'syz.2.4196': attribute type 3 has an invalid length.
[  460.283655][T20616] __nla_validate_parse: 4 callbacks suppressed
[  460.283674][T20616] netlink: 284 bytes leftover after parsing attributes in process `syz.0.4198'.
[  460.331114][T20616] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4198'.
[  460.346077][T20616] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4198'.
[  460.356764][T20616] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4198'.
[  460.462608][T20633] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4202'.
[  460.480845][T20633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4202'.
[  460.660824][T20644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4204'.
[  461.214009][T20675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4212'.
[  461.237012][T20675] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4212'.
[  461.506539][T20689] netlink: 'syz.4.4218': attribute type 30 has an invalid length.
[  461.583697][T20695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4219'.
[  461.758691][T20696] xt_cluster: node mask cannot exceed total number of nodes
[  461.815766][T20695] openvswitch: netlink: IP tunnel dst address not specified
[  462.237350][T20729] netlink: 'syz.2.4230': attribute type 1 has an invalid length.
[  462.353002][T20729] 8021q: adding VLAN 0 to HW filter on device bond3
[  462.382012][T20734] vlan2: entered allmulticast mode
[  462.387468][T20734] bond3: entered allmulticast mode
[  462.433129][T20729] bond3: (slave geneve2): making interface the new active one
[  462.441657][T20729] geneve2: entered allmulticast mode
[  462.455428][T20729] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  462.697875][ T5650] Bluetooth: hci1: command 0x0406 tx timeout
[  462.913066][T20774] sctp: [Deprecated]: syz.2.4242 (pid 20774) Use of int in max_burst socket option.
[  462.913066][T20774] Use struct sctp_assoc_value instead
[  462.931773][T20774] sctp: [Deprecated]: syz.2.4242 (pid 20774) Use of int in maxseg socket option.
[  462.931773][T20774] Use struct sctp_assoc_value instead
[  464.514135][T20872] team_slave_1: entered promiscuous mode
[  464.532556][T20872] team0: Port device team_slave_1 removed
[  464.551340][T20876] netlink: 'syz.0.4270': attribute type 12 has an invalid length.
[  464.562945][T20876] netlink: 'syz.0.4270': attribute type 12 has an invalid length.
[  465.529869][T20926] __nla_validate_parse: 10 callbacks suppressed
[  465.529884][T20926] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.4282'.
[  467.237998][T20857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  467.531654][T20934] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4285'.
[  467.587708][T20941] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4285'.
[  467.614611][T20938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4286'.
[  467.663976][ T4962] block nbd1: Possible stuck request ffff8880278ce000: control (read@0,1024B). Runtime 330 seconds
[  467.679372][ T4962] block nbd1: Possible stuck request ffff8880278ce1c0: control (read@1024,1024B). Runtime 330 seconds
[  467.696060][ T4962] block nbd1: Possible stuck request ffff8880278ce380: control (read@2048,1024B). Runtime 330 seconds
[  467.707877][ T4962] block nbd1: Possible stuck request ffff8880278ce540: control (read@3072,1024B). Runtime 330 seconds
[  468.007539][T20958] IPVS: set_ctl: invalid protocol: 40 224.0.0.2:20002
[  468.302464][ T1674] block nbd4: Possible stuck request ffff8880279c0000: control (read@0,1024B). Runtime 300 seconds
[  468.320456][ T1674] block nbd4: Possible stuck request ffff8880279c01c0: control (read@1024,1024B). Runtime 300 seconds
[  468.333020][ T1674] block nbd4: Possible stuck request ffff8880279c0380: control (read@2048,1024B). Runtime 300 seconds
[  468.348498][ T1674] block nbd4: Possible stuck request ffff8880279c0540: control (read@3072,1024B). Runtime 300 seconds
[  468.563002][T20984] netlink: 'syz.4.4300': attribute type 16 has an invalid length.
[  468.574213][T20986] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4303'.
[  468.584323][T20984] netlink: 'syz.4.4300': attribute type 3 has an invalid length.
[  468.595507][T20984] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4300'.
[  468.951033][T21004] syzkaller0: entered promiscuous mode
[  468.979664][T21004] syzkaller0: entered allmulticast mode
[  469.011987][T21008] netlink: 'syz.1.4308': attribute type 11 has an invalid length.
[  469.027229][T21008] netlink: 'syz.1.4308': attribute type 5 has an invalid length.
[  469.062430][T21008] netlink: 6548 bytes leftover after parsing attributes in process `syz.1.4308'.
[  469.073477][T21010] netlink: 'syz.1.4308': attribute type 11 has an invalid length.
[  469.083719][T21010] netlink: 'syz.1.4308': attribute type 5 has an invalid length.
[  469.092432][T21010] netlink: 6548 bytes leftover after parsing attributes in process `syz.1.4308'.
[  469.391744][T21028] netlink: 'syz.3.4313': attribute type 29 has an invalid length.
[  469.412477][T21030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4314'.
[  469.426262][T21028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4313'.
[  469.485194][T21034] nbd: socks must be embedded in a SOCK_ITEM attr
[  469.509677][T21034] block nbd7: shutting down sockets
[  469.727551][T21053] netlink: 'syz.3.4320': attribute type 11 has an invalid length.
[  469.762742][T21053] netlink: 'syz.3.4320': attribute type 4 has an invalid length.
[  469.800061][T21053] netlink: 'syz.3.4320': attribute type 6 has an invalid length.
[  469.955001][T14149] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  470.041035][T21072] netlink: 'syz.3.4325': attribute type 33 has an invalid length.
[  470.097153][T21075] bridge_slave_1: left allmulticast mode
[  470.122918][T21075] bridge_slave_1: left promiscuous mode
[  470.138349][T21075] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.164821][T21075] bridge_slave_0: left allmulticast mode
[  470.172389][T21075] bridge_slave_0: left promiscuous mode
[  470.181792][T21075] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.456135][T21077] bond4: option arp_all_targets: invalid value (18446744073709551613)
[  470.535320][T21077] bond4 (unregistering): Released all slaves
[  471.179620][T21131] __nla_validate_parse: 70 callbacks suppressed
[  471.179640][T21131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4344'.
[  471.203996][T21131] xfrm1: entered promiscuous mode
[  471.210301][T21131] xfrm1: entered allmulticast mode
[  471.310369][T21143] netlink: 'syz.2.4346': attribute type 2 has an invalid length.
[  471.683903][T21159] netlink: 'syz.3.4351': attribute type 4 has an invalid length.
[  471.903825][T21170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4355'.
[  472.011126][T21173] bond4: option resend_igmp: invalid value (32767)
[  472.017764][T21173] bond4: option resend_igmp: allowed values 0 - 255
[  472.025820][T21173] bond4 (unregistering): Released all slaves
[  472.133795][T21176] bridge_slave_0: left allmulticast mode
[  472.144337][T21176] bridge_slave_0: left promiscuous mode
[  472.152267][T21176] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.164758][T21176] bridge_slave_1: left allmulticast mode
[  472.171260][T21176] bridge_slave_1: left promiscuous mode
[  472.177161][T21176] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.192451][T21176] bond0: (slave bond_slave_0): Releasing backup interface
[  472.204750][T21176] bond0: (slave bond_slave_1): Releasing backup interface
[  472.217819][T21176] team0: Port device team_slave_0 removed
[  472.224507][T21176] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  472.235170][T21176] batman_adv: batadv0: Removing interface: batadv_slave_0
[  472.244746][T21176] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  472.252855][T21176] batman_adv: batadv0: Removing interface: batadv_slave_1
[  472.264181][T21176] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  472.294338][T21178] ip6gre3: entered allmulticast mode
[  472.308041][T21178] team0: Port device ip6gre3 added
[  473.287677][T21183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4358'.
[  474.122526][T21126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  474.343194][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4359'.
[  474.356899][T21188] netlink: 'syz.4.4360': attribute type 1 has an invalid length.
[  474.485636][T21188] 8021q: adding VLAN 0 to HW filter on device bond1
[  474.555092][T21197] bond1: (slave veth5): Enslaving as an active interface with a down link
[  474.591405][T21203] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  474.703728][T21188] bond1: (slave veth7): Enslaving as an active interface with a down link
[  474.888152][T21215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4366'.
[  475.162932][T21215] syzkaller0: entered promiscuous mode
[  475.184409][T21215] syzkaller0: entered allmulticast mode
[  475.489530][T21249] x_tables: duplicate underflow at hook 1
[  478.061264][ T5641] Bluetooth: hci2: command 0x0406 tx timeout
[  478.421968][T21259] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  478.434291][T21266] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  478.444861][T21265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4380'.
[  478.445728][T21259] bond2 (unregistering): Released all slaves
[  478.584193][T21265] netlink: 27936 bytes leftover after parsing attributes in process `syz.2.4380'.
[  478.927321][T21286] IPv6: sit2: Disabled Multicast RS
[  479.277590][T21304] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  479.333593][T21308] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  479.363257][T21308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.375123][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4394'.
[  479.565197][T21320] netlink: 'syz.1.4396': attribute type 8 has an invalid length.
[  479.591475][T21320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4396'.
[  479.630078][T21320] veth1_to_team: entered promiscuous mode
[  479.644703][T21320] gretap0: entered promiscuous mode
[  479.654466][ T5832] hid-generic 0005:04F3:7FFF.0002: item fetching failed at offset 0/1
[  479.665171][T21320] veth1_to_team: left promiscuous mode
[  479.668824][ T5832] hid-generic 0005:04F3:7FFF.0002: probe with driver hid-generic failed with error -22
[  479.680787][T21320] gretap0: left promiscuous mode
[  480.025415][T21340] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  480.185318][T21347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4407'.
[  480.261968][T21358] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.4410'.
[  480.314648][T21358] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.4410'.
[  480.434990][T21350] bond4 (unregistering): Released all slaves
[  480.472304][T21366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4412'.
[  480.888708][T21389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4417'.
[  480.927317][T21390] syzkaller0: entered promiscuous mode
[  480.952785][T21390] syzkaller0: entered allmulticast mode
[  481.194169][T21405] gre0: entered promiscuous mode
[  481.336706][T21414] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4425'.
[  481.367588][T21417] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  481.402257][T21417] bond4 (unregistering): Released all slaves
[  481.512814][T21418] ipvlan0: entered allmulticast mode
[  481.547051][T21418] veth0_vlan: entered allmulticast mode
[  481.864333][T21435] 8021q: VLANs not supported on ip6_vti0
[  481.885916][T21435] netlink: 'syz.2.4432': attribute type 10 has an invalid length.
[  482.165831][T21447] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  482.293809][T21459] xt_hashlimit: size too large, truncated to 1048576
[  482.936989][T21481] veth0: entered promiscuous mode
[  483.147068][T21480] veth0: left promiscuous mode
[  483.259584][T21499] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add()
[  483.385285][T21511] openvswitch: netlink: Key type 305 is out of range max 32
[  483.417584][T21511] openvswitch: netlink: Key type 305 is out of range max 32
[  483.441332][T21511] openvswitch: netlink: Key type 305 is out of range max 32
[  483.470399][T21511] openvswitch: netlink: Key type 305 is out of range max 32
[  483.495990][T21511] openvswitch: netlink: Key type 305 is out of range max 32
[  483.534436][T21511] openvswitch: netlink: Key type 305 is out of range max 32
[  483.586599][T21522] netlink: 'syz.1.4457': attribute type 11 has an invalid length.
[  483.590172][T21511] openvswitch: netlink: Key type 305 is out of range max 32
[  483.619628][T21511] openvswitch: netlink: Key type 305 is out of range max 32
[  483.620426][T21522] __nla_validate_parse: 6 callbacks suppressed
[  483.620467][T21522] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4457'.
[  483.627288][T21511] openvswitch: netlink: Key type 305 is out of range max 32
[  483.655706][T21511] openvswitch: netlink: Key type 305 is out of range max 32
[  483.664497][T21511] openvswitch: netlink: Key type 305 is out of range max 32
[  483.672943][T21511] openvswitch: netlink: Key type 305 is out of range max 32
[  483.711117][T21524] bond2: entered promiscuous mode
[  483.931903][T21539] vlan2: entered allmulticast mode
[  483.944038][T21539] bond0: entered allmulticast mode
[  483.944672][T21538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4462'.
[  484.302807][T21564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4468'.
[  484.323365][T21564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4468'.
[  484.391312][T21571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  484.398653][T21571] IPv6: NLM_F_CREATE should be set when creating new route
[  484.415697][T21571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4468'.
[  484.455184][T21568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4469'.
[  484.595839][T21580] netlink: 'syz.4.4474': attribute type 23 has an invalid length.
[  484.625467][T21581] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4473'.
[  484.652514][T21585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4476'.
[  484.841762][T21595] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4478'.
[  485.125387][T21609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4483'.
[  486.846427][T21693] 8021q: adding VLAN 0 to HW filter on device bond4
[  486.944515][T21694] macvlan3: entered promiscuous mode
[  486.983785][T21694] macvlan3: entered allmulticast mode
[  487.012228][T21694] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  487.050707][T21702] ip6t_REJECT: ECHOREPLY is not supported
[  487.332449][T21718] ip6t_srh: unknown srh invflags 4000
[  487.370874][T21726] ip6t_srh: unknown srh invflags 4000
[  487.391831][T21726] netlink: 'syz.4.4516': attribute type 4 has an invalid length.
[  487.401416][T21726] netlink: 'syz.4.4516': attribute type 1 has an invalid length.
[  487.519414][T21732] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  487.792116][T21749] geneve2: entered promiscuous mode
[  488.064378][T21760] tipc: Enabling <eth:lo> not permitted
[  488.086792][T21760] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  488.430263][T21782] xt_limit: Overflow, try lower: 271964/0
[  488.541327][T21785] syzkaller1: entered promiscuous mode
[  488.555578][T21785] syzkaller1: entered allmulticast mode
[  488.678584][T21798] __nla_validate_parse: 16 callbacks suppressed
[  488.678622][T21798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4535'.
[  488.798933][T21803] netlink: 'syz.2.4539': attribute type 1 has an invalid length.
[  489.134573][T21821] bridge3: entered promiscuous mode
[  489.148567][T21821] bridge3: entered allmulticast mode
[  489.171862][T21821] team0: Port device bridge3 added
[  489.180827][T21826] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4546'.
[  489.419333][   T30] INFO: task udevd:5737 blocked in I/O wait for more than 143 seconds.
[  489.431048][   T30]       Not tainted syzkaller #0
[  489.443973][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  489.461871][   T30] task:udevd           state:D stack:22088 pid:5737  tgid:5737  ppid:4997   task_flags:0x400140 flags:0x00080002
[  489.484509][   T30] Call Trace:
[  489.488019][   T30]  <TASK>
[  489.491079][   T30]  __schedule+0x1821/0x5740
[  489.495716][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  489.501456][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  489.506482][   T30]  ? __pfx___schedule+0x10/0x10
[  489.511961][   T30]  ? schedule+0x90/0x360
[  489.517300][   T30]  schedule+0x164/0x360
[  489.522129][   T30]  io_schedule+0x7f/0xd0
[  489.523555][T21835] bond4: entered promiscuous mode
[  489.530463][   T30]  folio_wait_bit_common+0x6d8/0xbc0
[  489.539430][T21852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4552'.
[  489.548628][   T30]  ? filemap_get_entry+0xcd/0x3f0
[  489.553406][T21835] bond4: entered allmulticast mode
[  489.553740][   T30]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  489.566244][   T30]  ? filemap_read_folio+0x23e/0x3b0
[  489.572559][   T30]  ? __pfx_wake_page_function+0x10/0x10
[  489.576307][T21852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4552'.
[  489.581842][   T30]  ? __filemap_get_folio_mpol+0x7a9/0xb00
[  489.594140][   T30]  do_read_cache_folio+0x1ad/0x590
[  489.599820][   T30]  ? __pfx_blkdev_read_folio+0x10/0x10
[  489.605337][   T30]  read_part_sector+0xb6/0x2b0
[  489.610298][   T30]  adfspart_check_POWERTEC+0x9a/0x7a0
[  489.617204][   T30]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  489.623711][   T30]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  489.638886][   T30]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  489.650311][   T30]  bdev_disk_changed+0x817/0x1770
[  489.664305][   T30]  ? __pfx_bdev_disk_changed+0x10/0x10
[  489.678006][   T30]  blkdev_get_whole+0x380/0x510
[  489.684260][   T30]  bdev_open+0x31e/0xd30
[  489.697775][   T30]  blkdev_open+0x470/0x610
[  489.702306][   T30]  ? __pfx_blkdev_open+0x10/0x10
[  489.707296][   T30]  do_dentry_open+0x822/0x13a0
[  489.712234][   T30]  vfs_open+0x3b/0x340
[  489.716439][   T30]  ? path_openat+0x2df0/0x3860
[  489.722815][   T30]  path_openat+0x2e08/0x3860
[  489.727591][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  489.733404][   T30]  ? stack_depot_save_flags+0x33/0x810
[  489.740167][   T30]  ? __pfx_path_openat+0x10/0x10
[  489.745350][   T30]  ? __x64_sys_openat+0x138/0x170
[  489.751460][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  489.756499][   T30]  do_file_open+0x23e/0x4a0
[  489.761932][   T30]  ? __pfx_do_file_open+0x10/0x10
[  489.767065][   T30]  ? _raw_spin_unlock+0x28/0x50
[  489.772139][   T30]  ? alloc_fd+0x64b/0x6c0
[  489.776551][   T30]  do_sys_openat2+0x113/0x200
[  489.782991][   T30]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  489.789359][   T30]  ? __pfx_do_sys_openat2+0x10/0x10
[  489.794641][   T30]  ? rcu_is_watching+0x15/0xb0
[  489.800617][   T30]  __x64_sys_openat+0x138/0x170
[  489.805546][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.813447][   T30]  do_syscall_64+0x174/0xf80
[  489.819720][   T30]  ? clear_bhb_loop+0x40/0x90
[  489.825683][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.831722][   T30] RIP: 0033:0x7fd501aa7407
[  489.836169][   T30] RSP: 002b:00007ffe2a1484b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  489.845111][   T30] RAX: ffffffffffffffda RBX: 00007fd50214b880 RCX: 00007fd501aa7407
[  489.853812][   T30] RDX: 00000000000a0800 RSI: 000055b074bfad10 RDI: ffffffffffffff9c
[  489.862366][   T30] RBP: 000055b074bd2910 R08: 0000000000000000 R09: 0000000000000000
[  489.871740][   T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b074beff10
[  489.880884][   T30] R13: 000055b074be0190 R14: 0000000000000000 R15: 000055b074beff10
[  489.890238][   T30]  </TASK>
[  489.893485][   T30] 
[  489.893485][   T30] Showing all locks held in the system:
[  489.903482][   T30] 1 lock held by khungtaskd/30:
[  489.910384][   T30]  #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  489.921865][   T30] 5 locks held by kworker/u8:5/82:
[  489.928546][   T30]  #0: ffff8880b863aee0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150
[  489.938617][   T30]  #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  489.947584][   T30]  #2: ffff8880637f0780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460
[  489.963454][   T30]  #3: ffffffff9a6f6bf0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580
[  489.974420][   T30]  #4: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550
[  489.989785][   T30] 2 locks held by getty/5390:
[  489.994557][   T30]  #0: ffff888031d690a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  490.005766][   T30]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  490.016149][   T30] 1 lock held by udevd/5737:
[  490.021626][   T30]  #0: ffff8880269ba350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  490.033789][   T30] 1 lock held by udevd/5999:
[  490.039641][   T30]  #0: ffff888027916350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  490.049642][   T30] 4 locks held by syz.1.4551/21841:
[  490.054967][   T30] 1 lock held by syz.1.4551/21846:
[  490.060319][   T30] 
[  490.062703][   T30] =============================================
[  490.062703][   T30] 
[  490.080746][   T30] NMI backtrace for cpu 0
[  490.080769][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  490.080791][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  490.080801][   T30] Call Trace:
[  490.080809][   T30]  <TASK>
[  490.080818][   T30]  dump_stack_lvl+0xe8/0x150
[  490.080845][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  490.080872][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  490.080894][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  490.080921][   T30]  sys_info+0x135/0x170
[  490.080952][   T30]  watchdog+0xfd3/0x1030
[  490.080986][   T30]  ? watchdog+0x1c9/0x1030
[  490.081019][   T30]  kthread+0x389/0x470
[  490.081043][   T30]  ? __pfx_watchdog+0x10/0x10
[  490.081066][   T30]  ? __pfx_kthread+0x10/0x10
[  490.081092][   T30]  ret_from_fork+0x514/0xb70
[  490.081116][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  490.081137][   T30]  ? __switch_to+0xc79/0x1410
[  490.081166][   T30]  ? __pfx_kthread+0x10/0x10
[  490.081189][   T30]  ret_from_fork_asm+0x1a/0x30
[  490.081219][   T30]  </TASK>
[  490.081227][   T30] Sending NMI from CPU 0 to CPUs 1:
[  490.195675][    C1] NMI backtrace for cpu 1
[  490.195695][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  490.195712][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  490.195721][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  490.195752][    C1] Code: 7b 80 02 e9 c3 f8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 01 24 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  490.195770][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242
[  490.195785][    C1] RAX: 0000000000122a61 RBX: ffffffff819a959a RCX: 0000000080000001
[  490.195797][    C1] RDX: 0000000000000001 RSI: ffffffff8df9fdcd RDI: ffffffff8c28b5e0
[  490.195807][    C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b
[  490.195818][    C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001
[  490.195828][    C1] R13: 1ffff11003b5a000 R14: 0000000000000001 R15: 1ffff11003b5a000
[  490.195839][    C1] FS:  0000000000000000(0000) GS:ffff8881253ab000(0000) knlGS:0000000000000000
[  490.195851][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  490.195862][    C1] CR2: 0000200001000000 CR3: 000000007d816000 CR4: 00000000003526f0
[  490.195877][    C1] Call Trace:
[  490.195884][    C1]  <TASK>
[  490.195890][    C1]  default_idle+0x9/0x20
[  490.195908][    C1]  default_idle_call+0x72/0xb0
[  490.195927][    C1]  do_idle+0x36a/0x5f0
[  490.195943][    C1]  ? asm_sysvec_call_function_single+0x1a/0x20
[  490.195964][    C1]  ? __pfx_do_idle+0x10/0x10
[  490.195984][    C1]  cpu_startup_entry+0x43/0x60
[  490.196001][    C1]  start_secondary+0x101/0x110
[  490.196015][    C1]  common_startup_64+0x13e/0x147
[  490.196042][    C1]  </TASK>
[  490.369553][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  490.376439][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  490.385578][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  490.395669][   T30] Call Trace:
[  490.398979][   T30]  <TASK>
[  490.401943][   T30]  vpanic+0x56c/0xa60
[  490.405981][   T30]  ? __pfx___schedule+0x10/0x10
[  490.410959][   T30]  ? __pfx_vpanic+0x10/0x10
[  490.415494][   T30]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  490.421721][   T30]  panic+0xc5/0xd0
[  490.425478][   T30]  ? __pfx_panic+0x10/0x10
[  490.429928][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  490.435422][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  490.441595][   T30]  watchdog+0x102c/0x1030
[  490.445940][   T30]  ? watchdog+0x1c9/0x1030
[  490.450370][   T30]  kthread+0x389/0x470
[  490.454444][   T30]  ? __pfx_watchdog+0x10/0x10
[  490.459126][   T30]  ? __pfx_kthread+0x10/0x10
[  490.463725][   T30]  ret_from_fork+0x514/0xb70
[  490.468325][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  490.473436][   T30]  ? __switch_to+0xc79/0x1410
[  490.478211][   T30]  ? __pfx_kthread+0x10/0x10
[  490.482825][   T30]  ret_from_fork_asm+0x1a/0x30
[  490.487709][   T30]  </TASK>
[  490.491378][   T30] Kernel Offset: disabled
[  490.495698][   T30] Rebooting in 86400 seconds..