last executing test programs:

2m20.439045541s ago: executing program 0 (id=4027):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)

2m20.318980448s ago: executing program 0 (id=4031):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000)

2m20.258553678s ago: executing program 0 (id=4033):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r1}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x10008, 0x1, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

2m20.187033264s ago: executing program 0 (id=4035):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x7)
readv(r0, &(0x7f0000000640)=[{&(0x7f00000007c0)=""/191, 0xbf}], 0x1)
write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[], 0xfe33)

2m20.126698761s ago: executing program 0 (id=4038):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000000c0)={@empty, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x8)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10)

2m20.056562165s ago: executing program 0 (id=4040):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)

2m5.060277721s ago: executing program 32 (id=4040):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)

1m53.282984353s ago: executing program 2 (id=4448):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0xc0000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m53.183933253s ago: executing program 2 (id=4449):
r0 = socket$netlink(0x10, 0x3, 0x9)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd2a, 0x10000, {0x0, 0x0, 0x12, r2, {0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x30, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xf}, @TCA_CAKE_RTT={0x8, 0x7, 0x4}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xc8}]}}]}, 0x60}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000b40)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fcdbdf250e00000008000300", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r9, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x851}, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r9, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x24b3, 0x16}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x80)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x13, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x40800)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x74, r12, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x8000080)
r13 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4, 0x5}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0xc000)

1m53.143340812s ago: executing program 2 (id=4450):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b0000000000000000000800001008000300040001000c0001800600000088480000"], 0x28}}, 0x8000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00'})
socket(0x10, 0x803, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
accept4(r2, 0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000a80)={0x100000011, @multicast2, 0x4e24, 0x0, 'ovf\x00', 0x3, 0xb6bc, 0x5b}, 0x2c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, 0x0, 0x24044884)
syz_genetlink_get_family_id$ipvs(0x0, r3)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001600), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040))

1m52.875892138s ago: executing program 2 (id=4452):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000040))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000000200)={0x823, 0x81, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
sendto$unix(r1, &(0x7f000000c580)="528348f2d536c1748cce2716a33c2c290f7b5e83ca10671aaf2a7e6eadcb0fc426775b88fc572f161b89d0bd24af553e37ed67fce5a883b32264c0827a37a9b572a36ffec2141d2d07bc1db022791cd29cc2d70d32e0edbd3beb837ee4fb35b18ea3a17fd03084aeae9762c9", 0x6c, 0x4040000, 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f000000c600), &(0x7f000000c640)=0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f000000c6c0), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f000000c780)={&(0x7f000000c680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000c740)={&(0x7f000000c700)={0x14, r4, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005001}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f000000c8c0)={'wg1\x00', <r5=>0x0})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f000000ca00)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f000000c980), &(0x7f000000c9c0)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f000000cac0)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f000000ca40), &(0x7f000000ca80)='%-5lx  \x00'}, 0x20)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f000000cb00)={0xffffffffffffffff, 0x4, 0x10}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000cc00)={0x14, 0x1, &(0x7f000000c7c0)=@raw=[@alu={0x4, 0x0, 0x1, 0x8, 0x4, 0x100, 0x1}], &(0x7f000000c800)='GPL\x00', 0x1, 0x4d, &(0x7f000000c840)=""/77, 0x40f00, 0x12, '\x00', r5, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f000000c900)={0x9, 0x1}, 0x8, 0x10, &(0x7f000000c940)={0x3, 0xb, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000cb40)=[r6, 0xffffffffffffffff, r7, r8], &(0x7f000000cb80)=[{0x2, 0x3, 0x4}, {0x5, 0x3, 0x9, 0x2}, {0x3, 0x5, 0x6, 0x2}, {0x5, 0x5, 0x10, 0x2}, {0x0, 0x3, 0x9, 0x4}, {0x1, 0x1, 0x7, 0x7}, {0x0, 0x4, 0x9, 0x8}, {0x2, 0x5, 0x2, 0x1}], 0x10, 0x2}, 0x94)
ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f000000ccc0))
socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f000000cd00)={0x7, 'wlan0\x00', {0x9}, 0x69})
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000000cd40)={0x0, 0x9, 0x9, 0x7f}, &(0x7f000000cd80)=0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f000000ce00)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r9, &(0x7f000000cec0)={&(0x7f000000cdc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f000000ce80)={&(0x7f000000ce40)={0x28, r4, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x53}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x48000)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x1010, r3, 0xf833c000)
sendmsg$NL80211_CMD_START_AP(r9, &(0x7f000000d080)={&(0x7f000000cf00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000d040)={&(0x7f000000cf40)={0xe8, r4, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x86, 0xe}}}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}], @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xff44}]}, 0xe8}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000000)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f000000d180)={&(0x7f000000d0c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000d140)={&(0x7f000000d100)={0x24, r4, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f000000d280)={&(0x7f000000d1c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f000000d240)={&(0x7f000000d200)={0x18, 0x140f, 0x20, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f000000d4c0)={&(0x7f000000d2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000d480)={&(0x7f000000d300)={0x140, r4, 0x501, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}, @NL80211_ATTR_IE={0xbe, 0x2a, [@perr={0x84, 0xaf, {0xc4, 0xb, [{{}, @device_b, 0x660, @void, 0x2c}, {{0x0, 0x1}, @broadcast, 0xfffffffd, @value=@device_b, 0xe}, {{}, @device_b, 0x10, @void, 0x28}, {{0x0, 0x1}, @device_b, 0x3334068d, @value, 0x1d}, {{}, @device_b, 0x986a, @void, 0xc}, {{0x0, 0x1}, @device_b, 0x7ff, @value, 0x20}, {{}, @broadcast, 0xfffffffc, @void, 0xe}, {{}, @device_a, 0x401, @void, 0x39}, {{0x0, 0x1}, @broadcast, 0x1, @value=@device_b, 0x15}, {{}, @broadcast, 0x3, @void, 0x39}, {{0x0, 0x1}, @device_a, 0xcca, @value=@device_b, 0x26}]}}, @supported_rates={0x1, 0x4, [{0x4}, {0x4, 0x1}, {0x36}, {0x1b, 0x1}]}, @supported_rates={0x1, 0x1, [{0xc}]}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x58}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x41, 0x2a, [@peer_mgmt={0x75, 0x4, {0x1, 0x9, @void, @void, @void}}, @measure_req={0x26, 0x35, {0x3, 0x4, 0x80, "cd81e316eb00e4fb3e467797deddba6a6a971180905cc7d1c86bd0c41d6335acc111ca8470954606a0cacd7409cd80859be5"}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@peer_mgmt={0x75, 0x6, {0x0, 0x1000, @val, @void, @void}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4}, 0x4008000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f000000d540)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f000000d600)={&(0x7f000000d500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f000000d5c0)={&(0x7f000000d580)={0x1c, r4, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1m52.725831058s ago: executing program 2 (id=4454):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000000014000780080011400000000005001500100000000500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c000180"], 0x44}, 0x1, 0x0, 0x0, 0x200440e5}, 0xc000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a000d0e25bd7000fcdb4c0f000000040000000008000a"], 0x20}}, 0x0)
socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
shutdown(r6, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, r4)

1m51.695111227s ago: executing program 2 (id=4464):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x93}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
unshare(0x62040200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x18) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x93}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async)
unshare(0x62040200) (async)

1m49.296682386s ago: executing program 1 (id=4490):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b0000000000000000000800001008000300040001000c0001800600000088480000"], 0x28}}, 0x8000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f0000000340))
recvmmsg$unix(r5, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f000000e280)=""/4096, 0x1000}, {&(0x7f0000000680)=""/141, 0x8d}], 0x4, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000800), 0x6e, &(0x7f000000f480)=[{&(0x7f000000f280)=""/178, 0xb2}, {&(0x7f000000f340)=""/162, 0xa2}, {&(0x7f000000f400)=""/72, 0x48}], 0x3, &(0x7f000000f4c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f000000f540), 0x6e, &(0x7f0000012a00)=[{&(0x7f000000f5c0)=""/186, 0xba}, {&(0x7f000000f680)=""/238, 0xee}, {&(0x7f000000f780)=""/4096, 0x1000}, {&(0x7f0000010780)=""/121, 0x79}, {&(0x7f0000010800)}, {&(0x7f0000010840)=""/4096, 0x1000}, {&(0x7f0000011840)=""/194, 0xc2}, {&(0x7f0000011940)=""/4096, 0x1000}, {&(0x7f0000012940)=""/176, 0xb0}], 0x9, &(0x7f0000012ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x3, 0x60, &(0x7f0000012c40)={0x0, 0x989680})
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000100085060000000000007e80b6000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc, 0x20}, @val={0xd, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x5, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r13 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r13, 0x8004f50c, &(0x7f0000000240))
r14 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f00000003c0)={0x0, @default, @rose={'rose', 0x0}, 0x9, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xd2, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'veth1\x00', <r15=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

1m49.076454518s ago: executing program 1 (id=4494):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r1, 0xffffe000)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x2000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r3, 0xb4807000)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18)
connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18)
sendmmsg(r4, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {&(0x7f0000000400)="73fd5418cdbef924ba442463287fbdde2ab7da9d2b26d6b741a60e2aba6555bff157db432a06da33ed74145ddfec5146fe85c31fd70ec45ce1d1fe8dbf85f5e9eed99d6adec3a8a271e9fa501ef5898da20a50c603fbb5af49e0c36b53c91e33ccd527e2ba5edab0f61b9833642fcc839ced7b2ae3c5ab3c565aa52b38f42b865e07775777066808b3a7c4e70e4c05717bc6da503324a9ab9e13b738908b5e9f5b080b464098931a725cfbf8403017399050e250f8cb8b99bd8e5b138dcd386b324e381a36f63aac6099b8aa3979408d4f9db909a8d353a3dc533e2b558cd5921dbf0b33760bb481ffd108e820e871b6e19a87f8141e990d94de13dd8faee04b4e732b122fc85beb7f0163f169e9744ce609ea57fdaafd954cd8562ab91b47176ed0548096ca08ad7264c40f882894a2dbfa9bbc37bdc253a477eb4ae52faa1e6632bfc950b0209bb048349ea50d3527fbbc31a706ffe7c566551ca79d4b0e1359275f044cfbf90cd8497ed033fa064e58f0c11a1a8d18cf53866d4d7b232fb54ed86ea9654440deabd4e8ca66061633ba34a298732ba9605fe31a530f5198aa3e1d1c0fda4c036dc845c835b1959dc0b13cf15c75f58c6ef62f56588d7043c03cfeff1f7b0792e514ac00c9d7570ac95037f6fa4f0cfd7263649bd2b5342320f74ef89799307f596d5db41c683f615da96eb5a5b802fa8ecf3764f6ffd5271e66b382e0e14b81f145c22d4f90306ef02c8c8921521e46b23f72b2fdd2b4fc9a3eb6f03207ada71244714e67cbf65c138215e612a8c9a4420aa45fc39164f5cfc4f9fc014fcfd10b856c3ebd4e1e877046aaee29a642b211f356cb7ed483eda92450d5ff66ff23a20a8bb845265a2939cb34c48a2b22b33bb3e774383588b9f7a53333eb20f4c1054368e34d3acc692d3b12f746b729a122b0aa62a74f5bf0040d589f815c1bce1b4a5934384998df3ab48fe41f0b90fb4d4d8cb01bfecfc86a96d91facba50a5828a8f62bb8759f3dfaeb728e3e42744e83fbad739bd03de69d1c78f6d01b714b11a284caa1ebba69fe7d29e2cbc43db1e6d249545a7c6debd66b5b5f53d4c1d6cebcb2fa427160eb86e48047aab6ce43f7fa0d5bb1dc99ba03e65a7bf178ccba74cf71dec7712414b38f7bf98065a518366839ca4f4a1887ad28d495c1d5c4aa413128d80ab031bd7694cf1101fe9dd65e99849ce6b2e69d6e371bd1df1022e32125747356748d0d3b30fa7d2aa6394707a60b572606d7297091fb45a5534cf269f77f6fc61c92b94f141f06ba8e347667c2fb2c87de5eacf60fadc48f7d7c5516be44807b48583ecc13e00a58143e134706700d28357ac38611494311b049dd497cc5ce315051e215a57f33939d320f808f8dcdedeb60f42b71d618e272506f0bc28843d3fd337989d74600299ab187395347c5bfbb665e5bc03e27978c0b0a464355a47da458690f957122beac9bb139b4223bd156ad74bb76e6880823e52f9eb806aad122892ebd8355ff6cb15ff2e0ce7cad2219a333999318f59c986b4bee11b9f05e355fe32e98732015f17eb19db77088c55d321828bec2dd25ba0da232717e8dafed91f96636d930f3c38b46da4c5541ae963e30e89a341af805176d9e1c9c88068bd81f4acf0325d24fa76dacbff3b88615699f08ded43403b7aeecdd2bbec00e60555317a4e24828ba9e8b9a737621d8ba12fa83c963d67a5a5e5ebbf29ac272cad91786c269fc053ce3f50bb0c05926ccefcc4548d42142efbd86460ec4516aa48e34b54af6319b8c948b69a1fd0d49930d844f13cf5bd1e67c662cdca6dc5f4daf11a75a123ed0a740dfe3014515917a2b01d691803cd7c8f4c46a2fefeab1608498503df514da7c62692b3c2b927b0f09164b367a260aee0c619575891e98ec8391a0b385d4b9ca4a421e2766047cbc11264e89f7d704e7c83d7e50b1c2fa3648c90cb8f66d93f40df5ac3fdd206a3997a5efb0a2cab9c07e00165c2b1cb2c2baf1b06493c4809d1d5dd5c7e6dbc22f1385482f54d4fb96e9e8aec587fe68b7d2d033c7efe622918e0d8661c89582f50db39a3376c1684b9dcfb10ef6cca665c75e2b7e468e7cb3a15604b759b0d949f459b982181f5f423f5dfc8b209665c9763ed0545f9ebf77661559312b4c2fc9518434530f75bf17d1ab39be227845a1d1c9982f2e27601009c36c9ce9cf11da012532e09d23ef2a749a5ca8df867", 0x62c}, {0x0, 0xe}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r7, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1020, &(0x7f0000001200)=""/4128, 0x40f00}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000640)={'hsr0\x00', <r11=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r11, 0xffffffffffffffff, 0x2, 0x1}, 0x50)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

1m48.76670324s ago: executing program 1 (id=4496):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000000000000a0101400000000004000000000000000a01010900000000000000000000000000000003000000000a0000200868b000000000000000000034a2579aa2ef4602b31f73bf4916bf56094df1022a505b30620d6424054879eb6e8e6fbbda15e8fd1c332b5cf9816a4a6ca868e51f61377c5a230f702b7a4d7457915b906c04bcb71ad705bf9d6884113d5556202ea4f35a9b000f5191866dbb2a69543d93f41892df193392eb136d58de71ebba31d030514173c60c0eb2884172780a840b9f2dd84a84fdf547b7a20f39976d59d806731e4097cd92", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x8000000)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/21, &(0x7f00000000c0)=0x15)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x5c14d826, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000280)=0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={r5, 0x3}, 0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r5, @in={{0x2, 0x4e20, @local}}, 0x0, 0x7, 0x400, 0x3, 0xde, 0xaa, 0x1}, 0x9c)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)

1m47.905991063s ago: executing program 1 (id=4502):
socket$packet(0x11, 0x2, 0x300)
socket$can_raw(0x1d, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67200000000000150600000fff070067070000200000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
pipe(&(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES8=r1, @ANYRES8=r0, @ANYRES32], 0x54}}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m47.905713469s ago: executing program 1 (id=4503):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x37000000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000004, 0x3032, 0xffffffffffffffff, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r5], 0x54}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0)

1m47.746068812s ago: executing program 1 (id=4504):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$int_out(r0, 0x5460, &(0x7f0000000080))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rpcgss_need_reencode\x00', r1, 0x0, 0x8}, 0x18)
unshare(0x62040200)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$int_out(r0, 0x5460, &(0x7f0000000080)) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2400}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rpcgss_need_reencode\x00', r1, 0x0, 0x8}, 0x18) (async)
unshare(0x62040200) (async)

1m36.680953524s ago: executing program 33 (id=4464):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x93}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
unshare(0x62040200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x18) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x93}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async)
unshare(0x62040200) (async)

1m34.681804041s ago: executing program 3 (id=4565):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001a000001ee642bbd7000fbdbdf250a8080f0fd000008001000000c000900010108007765f04b890bacfeecff6d65fcbfe42c3f8405b5e4273c321e20195b85ff35555337e151954b86cad6e84c4de05fded848b75b39c7a79977dcd86278ec5d06221d8b4829b283dd4a89827dd59cc9a95e237352fe446c0db828458434240896", @ANYRES32=r1, @ANYBLOB="0600150006000000"], 0x30}}, 0x0)

1m34.615791697s ago: executing program 3 (id=4566):
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af60, &(0x7f0000000280)={0x3, 0x0, [{0x4, 0xae, &(0x7f0000000040)=""/174}, {0x100000, 0xd2, &(0x7f0000000100)=""/210}, {0x2000, 0x71, &(0x7f0000000200)=""/113}]})

1m34.612768866s ago: executing program 3 (id=4567):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc, 0x624b, 0x100, 0xffff, 0x7cf0, 0xfffffffe, 0x4, 0x9, 0x2, 0x8, 0x7fffffff, 0xfffffff9, 0xe, 0x6, 0x8, 0x7, 0x2, 0x2, 0x74, 0x59bd, 0x8, 0x0, 0x10, 0x62e, 0x8000, 0x5, 0xd3, 0x7, 0xec11, 0xe, 0x2, 0x1, 0x4, 0xe, 0x4, 0x9, 0x1, 0x7, 0x3000, 0x43b2, 0x0, 0x9, 0x4b8ed944, 0x9, 0xa, 0x3, 0x7f, 0xfffffffb, 0x6, 0x2, 0xb, 0x81, 0x0, 0x7fff, 0x5, 0x17b2083b, 0x7, 0x3, 0x8a, 0x3, 0x8, 0x2, 0x0, 0xe, 0x7, 0x9, 0x80000001, 0x1, 0x4, 0x9, 0x3, 0x101, 0x4, 0xe, 0x5, 0x0, 0x6, 0xffff, 0x4, 0xf, 0x1, 0x7, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x3e3, 0x2, 0x6c, 0xffff8001, 0x6, 0xf16, 0x6f41, 0xf, 0x5542ebd1, 0x7, 0x81, 0x0, 0x5, 0xfff, 0x7, 0x2, 0xfffffffd, 0x3, 0x1, 0x6b3, 0xffff, 0x0, 0x8, 0x7, 0x2, 0x80000000, 0x2d0, 0x5, 0x9, 0xdf, 0x0, 0x8, 0x9a8, 0x1, 0x6, 0x5000000, 0xf1e, 0x4, 0x5, 0x5, 0x1000, 0x1, 0xe5, 0x8000, 0xee33, 0x5, 0x8, 0x7fff, 0x9, 0x60, 0x7f, 0x10001, 0x5b3d, 0x8, 0xfffffff9, 0xb14, 0x9, 0x5, 0x0, 0x5, 0xa15c, 0x8, 0x91f, 0xc1, 0x5, 0x3ff, 0x4, 0x14d, 0x6, 0x7ff, 0x5, 0x3, 0x7, 0xfffffff9, 0x8, 0x6, 0x80000001, 0xd, 0x4, 0x10001, 0x0, 0x0, 0x8, 0x3, 0xff, 0x64, 0x401, 0x2, 0x7f8e8029, 0x5, 0x6, 0x1ff, 0x1, 0x5, 0x0, 0x0, 0x1, 0x7, 0x401, 0xa, 0xf, 0xa, 0xfffffffc, 0x6c, 0x102, 0x2, 0x872, 0x78, 0x81, 0x20000, 0x1, 0x1, 0x9, 0x101, 0x81, 0x2, 0x8, 0x8001, 0xa, 0x7, 0x40, 0x5, 0x1, 0x5, 0x80, 0xfffffffb, 0x7, 0x4, 0x1ff, 0xce0, 0x99fa, 0x6, 0x4, 0xa, 0x9, 0x4, 0xfffffffc, 0x8, 0xd, 0xc5, 0x1000, 0x7, 0x4, 0x2, 0x101, 0x1, 0x6, 0x4, 0x2, 0xffff2001, 0x8, 0x7d96, 0xfe000000, 0x175, 0x5, 0x400, 0x40000000, 0x2300000, 0x4, 0x2, 0x5, 0x3, 0x1, 0x101, 0x4, 0x0, 0x2, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8c1, 0x3, 0x4, 0x0, 0x2, 0x2, 0x5, 0x5, 0xfffffaf1, 0x9, 0x84, 0x4, 0x2b, 0x3, 0x10, 0x5, 0x10000, 0x1a, 0x6, 0x8, 0x7f0, 0x2, 0x40, 0x7, 0x1f, 0x8000, 0x80000000, 0x6, 0x2, 0x7fffffff, 0x4, 0x38d, 0x4e, 0x401, 0x7, 0x8, 0xfffffff9, 0x6, 0xf76, 0xfff, 0x2, 0x5, 0x5, 0x5, 0x7800000, 0x8, 0x0, 0x8, 0x3, 0x3, 0x5, 0x9, 0x8000, 0x1, 0xcb3, 0x5, 0xe7, 0x786, 0x3, 0x7, 0x3, 0x3, 0x6, 0x8120, 0xfffffff1, 0x6, 0x4, 0x0, 0x1, 0xcdc1, 0x7, 0x1ff, 0x7, 0x0, 0x8, 0x1, 0x1, 0x81, 0x1, 0x8000, 0x3ff, 0x9, 0x7, 0x6, 0x2, 0x56b8, 0x7, 0x7, 0x7, 0xfff, 0xc, 0x40, 0x6, 0x2, 0xe5, 0x7, 0xa, 0x72, 0x9, 0x1, 0x3, 0x2, 0xffffffff, 0xfffffffa, 0x1000, 0x5ead, 0x5, 0x100, 0x200, 0x6, 0x8b12, 0x7, 0x81, 0x5, 0x0, 0x7, 0x401, 0x3f, 0x7f, 0x7ffc, 0x7, 0xc, 0x80000000, 0x15ae, 0x1, 0x0, 0x31, 0x2, 0x3, 0x2, 0x5, 0x4, 0xcf11, 0x278e, 0x7fffffff, 0xd7c8, 0x1, 0x8, 0x1, 0xee, 0x3, 0xff, 0x8, 0x1, 0x7f, 0x2, 0x5f6d, 0x0, 0x2, 0x400, 0x6, 0x9, 0xfffffe01, 0x3, 0xbde, 0x9, 0x2, 0x0, 0xd, 0x1, 0x400002, 0x2, 0x5, 0x6, 0x3, 0x0, 0x6, 0xafd, 0x2, 0x5, 0xe4, 0x7fd, 0x9, 0x200, 0xfffffc00, 0xc, 0x9, 0x0, 0x5, 0x6, 0x1, 0x4, 0x1, 0x2, 0x8, 0x4, 0x1c, 0x7, 0x7, 0x96, 0x7, 0x3, 0x80, 0x1, 0x8, 0xfffd, 0x0, 0x2, 0x10000, 0x80, 0x1000, 0x1, 0x401, 0x3082, 0x7, 0x4d51, 0x200, 0x2, 0x2, 0x1, 0xfffffffa, 0xea97, 0x6, 0x90b, 0x7fffffff, 0x1, 0x10, 0x6, 0x7, 0x0, 0x2, 0x6, 0x2c48d9e9, 0x9, 0x3, 0x0, 0x1, 0x7, 0x5, 0x2, 0xffffffff, 0xc, 0xeb82, 0x8, 0xfff, 0x6, 0x1c00, 0x1, 0x1, 0x1, 0xfffffc01, 0x4a0, 0x80000001, 0x8, 0x4, 0x800000, 0x2, 0x3ff, 0xa735, 0x3, 0x80000001, 0x6, 0x4a, 0x58, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0x9, 0x5, 0x6, {0x6, 0x1, 0x200, 0x7, 0x2, 0x2}, {0xe, 0x0, 0x1ff, 0x2, 0x7fff, 0x3}, 0x7, 0x400, 0xd}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r4, &(0x7f0000009280)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2001, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b2b, &(0x7f0000000000)={'wlan1\x00'})

1m34.525266811s ago: executing program 3 (id=4568):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x1)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r8, 0x321, 0x70bd65, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040085}, 0x4000000)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1m34.40370131s ago: executing program 3 (id=4569):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc, 0x624b, 0x100, 0xffff, 0x7cf0, 0xfffffffe, 0x4, 0x9, 0x2, 0x8, 0x7fffffff, 0xfffffff9, 0xe, 0x6, 0x8, 0x7, 0x2, 0x2, 0x74, 0x59bd, 0x8, 0x0, 0x10, 0x62e, 0x8000, 0x5, 0xd3, 0x7, 0xec11, 0xe, 0x2, 0x1, 0x4, 0xe, 0x4, 0x9, 0x1, 0x7, 0x3000, 0x43b2, 0x0, 0x9, 0x4b8ed944, 0x9, 0xa, 0x3, 0x7f, 0xfffffffb, 0x6, 0x2, 0xb, 0x81, 0x0, 0x7fff, 0x5, 0x17b2083b, 0x7, 0x3, 0x8a, 0x3, 0x8, 0x2, 0x0, 0xe, 0x7, 0x9, 0x80000001, 0x1, 0x4, 0x9, 0x3, 0x101, 0x4, 0xe, 0x5, 0x0, 0x6, 0xffff, 0x4, 0xf, 0x1, 0x7, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x3e3, 0x2, 0x6c, 0xffff8001, 0x6, 0xf16, 0x6f41, 0xf, 0x5542ebd1, 0x7, 0x81, 0x0, 0x5, 0xfff, 0x7, 0x2, 0xfffffffd, 0x3, 0x1, 0x6b3, 0xffff, 0x0, 0x8, 0x7, 0x2, 0x80000000, 0x2d0, 0x5, 0x9, 0xdf, 0x0, 0x8, 0x9a8, 0x1, 0x6, 0x5000000, 0xf1e, 0x4, 0x5, 0x5, 0x1000, 0x1, 0xe5, 0x8000, 0xee33, 0x5, 0x8, 0x7fff, 0x9, 0x60, 0x7f, 0x10001, 0x5b3d, 0x8, 0xfffffff9, 0xb14, 0x9, 0x5, 0x0, 0x5, 0xa15c, 0x8, 0x91f, 0xc1, 0x5, 0x3ff, 0x4, 0x14d, 0x6, 0x7ff, 0x5, 0x3, 0x7, 0xfffffff9, 0x8, 0x6, 0x80000001, 0xd, 0x4, 0x10001, 0x0, 0x0, 0x8, 0x3, 0xff, 0x64, 0x401, 0x2, 0x7f8e8029, 0x5, 0x6, 0x1ff, 0x1, 0x5, 0x0, 0x0, 0x1, 0x7, 0x401, 0xa, 0xf, 0xa, 0xfffffffc, 0x6c, 0x102, 0x2, 0x872, 0x78, 0x81, 0x20000, 0x1, 0x1, 0x9, 0x101, 0x81, 0x2, 0x8, 0x8001, 0xa, 0x7, 0x40, 0x5, 0x1, 0x5, 0x80, 0xfffffffb, 0x7, 0x4, 0x1ff, 0xce0, 0x99fa, 0x6, 0x4, 0xa, 0x9, 0x4, 0xfffffffc, 0x8, 0xd, 0xc5, 0x1000, 0x7, 0x4, 0x2, 0x101, 0x1, 0x6, 0x4, 0x2, 0xffff2001, 0x8, 0x7d96, 0xfe000000, 0x175, 0x5, 0x400, 0x40000000, 0x2300000, 0x4, 0x2, 0x5, 0x3, 0x1, 0x101, 0x4, 0x0, 0x2, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8c1, 0x3, 0x4, 0x0, 0x2, 0x2, 0x5, 0x5, 0xfffffaf1, 0x9, 0x84, 0x4, 0x2b, 0x3, 0x10, 0x5, 0x10000, 0x1a, 0x6, 0x8, 0x7f0, 0x2, 0x40, 0x7, 0x1f, 0x8000, 0x80000000, 0x6, 0x2, 0x7fffffff, 0x4, 0x38d, 0x4e, 0x401, 0x7, 0x8, 0xfffffff9, 0x6, 0xf76, 0xfff, 0x2, 0x5, 0x5, 0x5, 0x7800000, 0x8, 0x0, 0x8, 0x3, 0x3, 0x5, 0x9, 0x8000, 0x1, 0xcb3, 0x5, 0xe7, 0x786, 0x3, 0x7, 0x3, 0x3, 0x6, 0x8120, 0xfffffff1, 0x6, 0x4, 0x0, 0x1, 0xcdc1, 0x7, 0x1ff, 0x7, 0x0, 0x8, 0x1, 0x1, 0x81, 0x1, 0x8000, 0x3ff, 0x9, 0x7, 0x6, 0x2, 0x56b8, 0x7, 0x7, 0x7, 0xfff, 0xc, 0x40, 0x6, 0x2, 0xe5, 0x7, 0xa, 0x72, 0x9, 0x1, 0x3, 0x2, 0xffffffff, 0xfffffffa, 0x1000, 0x5ead, 0x5, 0x100, 0x200, 0x6, 0x8b12, 0x7, 0x81, 0x5, 0x0, 0x7, 0x401, 0x3f, 0x7f, 0x7ffc, 0x7, 0xc, 0x80000000, 0x15ae, 0x1, 0x0, 0x31, 0x2, 0x3, 0x2, 0x5, 0x4, 0xcf11, 0x278e, 0x7fffffff, 0xd7c8, 0x1, 0x8, 0x1, 0xee, 0x3, 0xff, 0x8, 0x1, 0x7f, 0x2, 0x5f6d, 0x0, 0x2, 0x400, 0x6, 0x9, 0xfffffe01, 0x3, 0xbde, 0x9, 0x2, 0x0, 0xd, 0x1, 0x400002, 0x2, 0x5, 0x6, 0x3, 0x0, 0x6, 0xafd, 0x2, 0x5, 0xe4, 0x7fd, 0x9, 0x200, 0xfffffc00, 0xc, 0x9, 0x0, 0x5, 0x6, 0x1, 0x4, 0x1, 0x2, 0x8, 0x4, 0x1c, 0x7, 0x7, 0x96, 0x7, 0x3, 0x80, 0x1, 0x8, 0xfffd, 0x0, 0x2, 0x10000, 0x80, 0x1000, 0x1, 0x401, 0x3082, 0x7, 0x4d51, 0x200, 0x2, 0x2, 0x1, 0xfffffffa, 0xea97, 0x6, 0x90b, 0x7fffffff, 0x1, 0x10, 0x6, 0x7, 0x0, 0x2, 0x6, 0x2c48d9e9, 0x9, 0x3, 0x0, 0x1, 0x7, 0x5, 0x2, 0xffffffff, 0xc, 0xeb82, 0x8, 0xfff, 0x6, 0x1c00, 0x1, 0x1, 0x1, 0xfffffc01, 0x4a0, 0x80000001, 0x8, 0x4, 0x800000, 0x2, 0x3ff, 0xa735, 0x3, 0x80000001, 0x6, 0x4a, 0x58, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0x9, 0x5, 0x6, {0x6, 0x1, 0x200, 0x7, 0x2, 0x2}, {0xe, 0x0, 0x1ff, 0x2, 0x7fff, 0x3}, 0x7, 0x400, 0xd}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r4, &(0x7f0000009280)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2001, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b2b, &(0x7f0000000000)={'wlan1\x00'})

1m34.30382596s ago: executing program 3 (id=4570):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x4, 0x1000000}, 0x10)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_IP_PROTO={0x5, 0x1f, 0x4c56b0bc22f6060}]}, 0x24}}, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) (async)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
close(0x3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="675bcaa3c5140000000002010400000000000800000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6, <r7=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="d40000001900100027bd7000fddbdf25fc010000000000000000000000000001ff0200000000002000000000000000014e2300014e2100000a2020a0000000", @ANYRES32, @ANYBLOB="0500000000000000008000000000000001000000000000008501000000000000ffffffffffffffff070000000000000002000000000000002f660000000000000700000000000000080000000000000000010000000000007f0000000000000004000000bd6b6e0001", @ANYRESDEC, @ANYRES64=r7, @ANYRESOCT=r0, @ANYRES64=r6, @ANYRESDEC=r5, @ANYRES16=r5], 0xd4}, 0x1, 0x0, 0x0, 0x84}, 0x40812) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="d40000001900100027bd7000fddbdf25fc010000000000000000000000000001ff0200000000002000000000000000014e2300014e2100000a2020a0000000", @ANYRES32, @ANYBLOB="0500000000000000008000000000000001000000000000008501000000000000ffffffffffffffff070000000000000002000000000000002f660000000000000700000000000000080000000000000000010000000000007f0000000000000004000000bd6b6e0001", @ANYRESDEC, @ANYRES64=r7, @ANYRESOCT=r0, @ANYRES64=r6, @ANYRESDEC=r5, @ANYRES16=r5], 0xd4}, 0x1, 0x0, 0x0, 0x84}, 0x40812)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4044804}], 0x1, 0x10051)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000280)=0x8)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) (async)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
unshare(0x62040200) (async)
unshare(0x62040200)
write$tun(0xffffffffffffffff, 0x0, 0x3e)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000)
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendto$inet6(r8, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0)

1m32.119301704s ago: executing program 34 (id=4504):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$int_out(r0, 0x5460, &(0x7f0000000080))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rpcgss_need_reencode\x00', r1, 0x0, 0x8}, 0x18)
unshare(0x62040200)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$int_out(r0, 0x5460, &(0x7f0000000080)) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2400}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rpcgss_need_reencode\x00', r1, 0x0, 0x8}, 0x18) (async)
unshare(0x62040200) (async)

1m19.313984856s ago: executing program 35 (id=4570):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x4, 0x1000000}, 0x10)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_IP_PROTO={0x5, 0x1f, 0x4c56b0bc22f6060}]}, 0x24}}, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) (async)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
close(0x3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="675bcaa3c5140000000002010400000000000800000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6, <r7=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="d40000001900100027bd7000fddbdf25fc010000000000000000000000000001ff0200000000002000000000000000014e2300014e2100000a2020a0000000", @ANYRES32, @ANYBLOB="0500000000000000008000000000000001000000000000008501000000000000ffffffffffffffff070000000000000002000000000000002f660000000000000700000000000000080000000000000000010000000000007f0000000000000004000000bd6b6e0001", @ANYRESDEC, @ANYRES64=r7, @ANYRESOCT=r0, @ANYRES64=r6, @ANYRESDEC=r5, @ANYRES16=r5], 0xd4}, 0x1, 0x0, 0x0, 0x84}, 0x40812) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="d40000001900100027bd7000fddbdf25fc010000000000000000000000000001ff0200000000002000000000000000014e2300014e2100000a2020a0000000", @ANYRES32, @ANYBLOB="0500000000000000008000000000000001000000000000008501000000000000ffffffffffffffff070000000000000002000000000000002f660000000000000700000000000000080000000000000000010000000000007f0000000000000004000000bd6b6e0001", @ANYRESDEC, @ANYRES64=r7, @ANYRESOCT=r0, @ANYRES64=r6, @ANYRESDEC=r5, @ANYRES16=r5], 0xd4}, 0x1, 0x0, 0x0, 0x84}, 0x40812)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4044804}], 0x1, 0x10051)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000280)=0x8)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) (async)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
unshare(0x62040200) (async)
unshare(0x62040200)
write$tun(0xffffffffffffffff, 0x0, 0x3e)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000)
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendto$inet6(r8, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0)

1m6.052324774s ago: executing program 5 (id=4898):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="980000001000ffff2dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES32=r3, @ANYBLOB="000000001942f04f74be27e9c6e222c550df8c994f818ca0ddcdb581d302040000000000000073e943109a518145337c9dc6b991288c255fb508e6bf7f094d", @ANYRES32=r3, @ANYBLOB, @ANYRES64=r4], 0x98}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090)

1m5.97275673s ago: executing program 5 (id=4900):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async, rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) (rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r5=>0x0}) (async)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) (async)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x10, 0x0, "b20fc19dcea1a2f64cd3368960179b0a3811acf296c264b1b3fb980632bb28e0fd5bdc0e3d3c15e77d4993e70a79f1256777954e7ec11252c1f5824eccf4ee5fd8450c8ad9ce5dc6f62732c5b8b06018"}, 0xd8) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) (async, rerun: 32)
r9 = socket$unix(0x1, 0x2, 0x0) (rerun: 32)
bind$unix(r9, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32)
r10 = socket$unix(0x1, 0x2, 0x0) (rerun: 32)
r11 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32)
sendmmsg(r11, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) (async, rerun: 32)
connect$unix(r10, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32)
readv(r9, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) (async)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32=r5, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}]}}}]}, 0x48}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000480001002abd7000fddbdf250a002000", @ANYRES32=0x0, @ANYBLOB="02000000080002000100000014000100ff"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0)

1m5.901642s ago: executing program 5 (id=4901):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048884)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b2b, &(0x7f0000000000)={'wlan1\x00'})

1m5.820892364s ago: executing program 5 (id=4902):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111750000000000851000000200000085000000a0000000951f0000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0}) (async)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x3}, 0xe)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fadbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300d39be0341076f2c60000f0fa9ca0538380ea851406a42b2663ff6d501600000000dc2ac58ea79ff63cbc1c54b5be89ad277c57dff9fe1031990edfd08a7cf4e53f41866ba2eb8c4f3b1afc3852ee705f3b024f3e89cce47e05d0961101caa0e1a6ade706ba5395fb2669396f5862fbaf"], 0x58}, 0x1, 0x0, 0x0, 0x10008001}, 0x44080)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01001500000000000000010000001403018079d501000a0000000800050003000000"], 0x28}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0x4, 0x4}, 0x6) (async)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xa, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r11=>0x0})
sendmsg$can_raw(r10, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r11}, 0xfd99, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x1, 0x3, 0x4, 0x0, "352bc764aef32890"}, 0x10}, 0x2}, 0x2000000) (async)
close(r0)

1m5.722959216s ago: executing program 5 (id=4905):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af60, &(0x7f0000000080)={0x1, 0x300, [{0x100000, 0x17, &(0x7f0000000040)=""/23}]})

1m5.653737609s ago: executing program 5 (id=4906):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 64)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000000)=""/158, &(0x7f00000000c0)=0x9e) (async, rerun: 64)
unshare(0x6a040000) (async, rerun: 64)
socket$kcm(0x21, 0x2, 0x2)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYBLOB], 0x6c}}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r6, 0x0, 0x0) (async, rerun: 32)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1fffffe641931863ab70b2250000000000000000003600885877b101800000000000002e4521b14e6788eb27bae2b0"], 0x20}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x4, 0xa, 0xa, 0x240}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00'}, 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x4000) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0)

56.952763953s ago: executing program 6 (id=5010):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x900, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)

56.849494504s ago: executing program 6 (id=5011):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xd, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x1a, &(0x7f0000000080)={0x0, 0xfffffffffffffe77}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

56.791986791s ago: executing program 6 (id=5013):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, 0x0, 0x20008000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x64, 0x2c, 0x8, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {0xb}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x0, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x7f}, {0x1ff, 0xfffff001, 0x9}}}, @TCF_EM_NBYTE={0x0, 0x3, 0x0, 0x0, {{0x6, 0x2, 0x4c8c}, {0xca5f, 0x0, 0x1, "a6a7ea5e283878a9"}}}, @TCF_EM_CMP={0x0, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x3072}, {0xff, 0x8, 0xf754, 0x4, 0xd, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x2, 0x0, 0x0, {{0xa, 0x9, 0x1000}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_cmd={0xa, 0x0, 0x3, 0xfffe, 0xff, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x20000000, 0x7883, 0x0, 0x1, 0x1, 0x6162b9dd, [0x0, 0x3]}})
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r13)
r14 = socket$unix(0x1, 0x1, 0x0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0x10, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x302ec7847031f152}, @TCA_TBF_PARMS={0x28, 0x1, {{0x28, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7c, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x9320}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x1bf}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x3f45f490}, @TCA_HHF_EVICT_TIMEOUT={0x8}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r16, {}, {0x2, 0xb}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1d, 0x1, 0x0, 0x4, 0x0, 0x1}, {0xd, 0x2, 0x6, 0xff, 0x5, 0x801}, 0x2, 0xfffffffd, 0x1756}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xfb757fd6f69f56d1}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4081}, 0x4080)

56.642217808s ago: executing program 6 (id=5015):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x2c}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async)
recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r2)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xb020}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, r5, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async)
setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4)
recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) (async)
close(0x4)
r6 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@null, @rose, @netrom, @netrom, @null, @bcast, @bcast, @null]}, &(0x7f0000000000)=0x48, 0x800)
recvfrom$ax25(r6, &(0x7f00000001c0)=""/249, 0xf9, 0x2001, &(0x7f00000002c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd48040ffff0300080002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

56.392999874s ago: executing program 6 (id=5017):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, <r0=>0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0x254}, 0xc)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%+9llu \x00'}, 0x20)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40, 0x0, r3, 0x1, '\x00', r1, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0xf, &(0x7f00000002c0)=@raw=[@alu={0x4, 0x0, 0x2, 0x8, 0x7, 0xfffffffffffffffe}, @exit, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @alu={0x7, 0x0, 0x1, 0x3, 0x0, 0x50, 0x4}, @call={0x85, 0x0, 0x0, 0x45}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @alu={0x7, 0x1, 0x5, 0x4, 0x6, 0xfffffffffffffff4, 0x10}], &(0x7f0000000340)='GPL\x00', 0xc0e, 0xab, &(0x7f0000000380)=""/171, 0x41000, 0x0, '\x00', r5, @fallback=0x10, r6, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x8, 0xfffffffe, 0x4}, 0x10, 0x0, r7, 0x6, &(0x7f0000000540)=[r4, r3, r4, r4], &(0x7f0000000580)=[{0x4, 0x3, 0x3, 0x6}, {0x3, 0x1, 0x6}, {0x1, 0x5, 0x3, 0x8}, {0x2, 0x4, 0x3, 0x2}, {0x3, 0x5, 0x5, 0x9}, {0x0, 0x1, 0xf}], 0x10, 0x8}, 0x94)
socket$kcm(0x29, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='timer_start\x00', r7, 0x0, 0xe6fe}, 0x18)
r8 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, 0x0, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x400}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6293b34c}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x100}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd}]}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2, <r9=>0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r7}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r9}, &(0x7f0000000940), &(0x7f0000000980)=r7}, 0x20)
r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r10, 0xaf01, 0x0)
pipe(&(0x7f0000000a40)={<r11=>0xffffffffffffffff})
ioctl$VHOST_VDPA_GET_VRING_NUM(r11, 0x8002af76, &(0x7f0000000a80))
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ac0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r12, &(0x7f0000000b00)='tasks\x00', 0x2, 0x0)

56.342442466s ago: executing program 6 (id=5019):
r0 = socket$inet(0x10, 0xa, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async)
unshare(0x62040200) (async, rerun: 64)
r2 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64)
ioctl$int_in(r2, 0x5421, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r3, 0x0, 0x19, 0xffffffffffffffff, &(0x7f0000000340)=0x10) (async)
r4 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYRES64=r4], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10}, 0x94) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
sendto$llc(r4, &(0x7f0000000180)="ccd0b1195f16b94bb92206c5e70b0b148b7bfbf7b57bb1c57d7138d231a4ac738a2ed63659", 0x25, 0x0, &(0x7f00000001c0)={0x1a, 0x312, 0x7f, 0x1, 0x3, 0x6, @broadcast}, 0x10) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 64)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64)
r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r6, &(0x7f0000000280), 0x9)
r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
recvmsg(r11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) (async)
sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="04d093", 0x3}], 0x1}, 0x3) (async)
r12 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)

50.661820535s ago: executing program 36 (id=4906):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 64)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000000)=""/158, &(0x7f00000000c0)=0x9e) (async, rerun: 64)
unshare(0x6a040000) (async, rerun: 64)
socket$kcm(0x21, 0x2, 0x2)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYBLOB], 0x6c}}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r6, 0x0, 0x0) (async, rerun: 32)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1fffffe641931863ab70b2250000000000000000003600885877b101800000000000002e4521b14e6788eb27bae2b0"], 0x20}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x4, 0xa, 0xa, 0x240}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00'}, 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x4000) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0)

41.340612054s ago: executing program 37 (id=5019):
r0 = socket$inet(0x10, 0xa, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async)
unshare(0x62040200) (async, rerun: 64)
r2 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64)
ioctl$int_in(r2, 0x5421, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r3, 0x0, 0x19, 0xffffffffffffffff, &(0x7f0000000340)=0x10) (async)
r4 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYRES64=r4], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10}, 0x94) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
sendto$llc(r4, &(0x7f0000000180)="ccd0b1195f16b94bb92206c5e70b0b148b7bfbf7b57bb1c57d7138d231a4ac738a2ed63659", 0x25, 0x0, &(0x7f00000001c0)={0x1a, 0x312, 0x7f, 0x1, 0x3, 0x6, @broadcast}, 0x10) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 64)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64)
r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r6, &(0x7f0000000280), 0x9)
r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00000041000701feffffffffffffff017c00000000478d04000180cd507d1a1f1898d9279dee307a810f1d070972a75230505bad74d9349167015bb463781ffdb01b203f4cce986fece04bcee4a97b37627323610d968e1b9c51a70000838d32873e029c7f8367744788004e00e0fd9baf367b305c33db58b6ba0d5339addb9c52ac0dc296e963d50690006bcf4003000000000000005d77e899ea32d05b723bfc014b3091c6b0f59f7d34685c6b7c27c8fcbba78bb9e5a1a3afeef7377cd0ba0275aa69c0867a4762cbdc2f620f912ba293828d17eacebbc8487ad4ff861444463b3b7b85afcc5a7a949d51fe3b7d090150d2bc0ad85f1cc44233f09c02be199e3c734d993cd0dc3f0ce5"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
recvmsg(r11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) (async)
sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="04d093", 0x3}], 0x1}, 0x3) (async)
r12 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)

10.259362126s ago: executing program 8 (id=5582):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="a6960613dd"], 0x38}}, 0x40084c0)
recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmmsg$sock(r3, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000003c0)={r7, 0x2}, 0x8)
sendmsg$inet_sctp(r2, &(0x7f0000000340)={&(0x7f0000000180)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=[@sndrcv={0x30, 0x84, 0x1, {0x3f8, 0x8, 0x200, 0x83a4, 0x8, 0x401, 0x6, 0x3}}, @authinfo={0x18, 0x84, 0x6, {0x1ff}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x4, 0x8, 0x28, 0x2, 0x81, 0x9, 0x1, r7}}], 0x78, 0x20008000}, 0x2004c001)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0xa}}, 0x26)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4004af07, &(0x7f0000000000)={0x8, 0x4, 0x1})

9.409004536s ago: executing program 8 (id=5590):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000fcffffff0c00000008000300e4"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'virt_wifi0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind(r3, &(0x7f0000000580)=@llc={0x1a, 0xffff, 0x1, 0x4, 0x4, 0x38, @random="cd43612bf6b9"}, 0x80)
unshare(0x24020400)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)

9.308335544s ago: executing program 8 (id=5591):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061188b000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x44}, 0x1, 0xba01}, 0x810)

9.199248153s ago: executing program 8 (id=5594):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r1, 0x321, 0x70bd65, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0xa1ffffffffffffff, 0x0, 0x4040085}, 0x4000000)

9.198175244s ago: executing program 8 (id=5595):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af60, &(0x7f0000000080)={0x1, 0x0, [{0x10fffe, 0x17, &(0x7f0000000040)=""/23}]})

9.086979575s ago: executing program 8 (id=5596):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x9, 0x4, 0x2}, 0x50) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x9, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r3, 0x0)
splice(r3, 0x0, r2, 0x0, 0x2, 0x0)
unshare(0x6a040000) (async)
unshare(0x6a040000)
unshare(0x200)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r4}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r4}, 0x10)

2.118273018s ago: executing program 7 (id=5688):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r7, &(0x7f0000000100), 0xa, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r7)
sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r9, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x38}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014})
r10 = socket$netlink(0x10, 0x3, 0x6)
writev(r10, 0x0, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a80140007002001000000000000000000000000000014003580776731000000e5ffffff000000000000"], 0x50}}, 0x0)

1.224449284s ago: executing program 7 (id=5695):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}}], 0x1, 0x40848c0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3a)
getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)=""/77, &(0x7f0000000000)=0x4d)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2, 0xa, 0x2)
syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001811000014d08a901c8cbb2cca0010000000000000ca4d4a631167ba0421c4f9a367c1bbaa7db9e2111fdbabe5beeed7a7096cbf594c03d3a262a5988399f4257702e64e8573145b510730249f9a114276ceba51884bcd14c647ff7a7dcf868e2f9cae62ab32cd20e892770ac1e1", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94)
getsockname$ax25(r2, &(0x7f00000002c0)={{0x3, @rose}, [@netrom, @netrom, @bcast, @remote, @netrom, @remote, @remote, @rose]}, &(0x7f0000000340)=0x89)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000804000000ff14000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000ecbea2000000000000b7031a000600000000590000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10)
socket$kcm(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r5}, 0x18)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x26e1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_int(r9, 0x29, 0xb, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f00000001c0)=0xffffffffffffffff)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4008004)
close(r6)

488.46999ms ago: executing program 4 (id=5703):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="05"], 0x1c}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4040090)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0)

488.2658ms ago: executing program 4 (id=5704):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c"], 0x0, 0x24}, 0x20)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x4008af24, &(0x7f0000000040))

408.542218ms ago: executing program 4 (id=5705):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004d", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r1=>0x0}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="3b0000000000e21d843cd7a6c00a000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="227c88b57847ee173d52e266b0013f5e0a"], 0x50)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
write$tcp_mem(r2, &(0x7f00000003c0)={0x2, 0x20, 0xfffffffffffffffe, 0x20, 0x8}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x16, 0x30, 0x0, @void, @void, @void, @value, r1}, 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x9c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x83}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100004}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x999}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7d41}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x9c}}, 0x0)

197.91249ms ago: executing program 7 (id=5706):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)={0x3, 0x0, [{0x4, 0xae, &(0x7f0000000040)=""/174}, {0x100000, 0xd2, &(0x7f0000000100)=""/210}, {0x2000, 0x71, &(0x7f0000000200)=""/113, 0x604}]})

196.84272ms ago: executing program 4 (id=5707):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x10040)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x50, 0xffffffffffffffff, 0xffffe000)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x143040, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x5, 0xc, 0x7, 0x5}]})
close(0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0), &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1a, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000140), &(0x7f0000000380), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
r3 = epoll_create1(0x0)
writev(r3, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000480))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000", @ANYRES8, @ANYBLOB="ff2d0f5d3848edf9ed472f09e242623aed9994483545df31bd5b6b7fd00811c0f48adab106edf3ba7358c609a6fc19af71ca83d903013835863548aade38ca2842e614880074910a4d400ff69e7661bed16169e99870bc671be28c54cea450068dbda73f642fb66cb05786cb5b1fdb2327f9006dd3b43e9755aeaa8df853c104b951aa62d702f16d92f48f1589917ac9504e2b15ff9acb90417fcdd86fc87be6810369", @ANYRES64=r0, @ANYRESHEX, @ANYRESHEX=r5, @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x400c005}, 0x408dc)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

196.493326ms ago: executing program 7 (id=5708):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x14, 0x0, &(0x7f00000001c0)="b9e403c6631e394901a05dc7cf1c8cef782da475", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x3}}}, 0x24}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x44}, 0x10) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c0002800600020020"], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) (async)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

115.017816ms ago: executing program 7 (id=5709):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x12, &(0x7f0000000140)=ANY=[], 0x18}, 0x800)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4008af03, &(0x7f0000000000)={0x8, 0x4, 0x1})

114.524952ms ago: executing program 4 (id=5710):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
close(0xffffffffffffffff)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x40, 0x4c, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840)
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20008864}, 0x4800)
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)={r6})
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000080)={r6})
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000000c0))
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=@gettfilter={0x0, 0x2e, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff1, 0x10}, {0xe, 0xffe0}}, [{0x0, 0xb, 0x1}, {}, {0x0, 0xb, 0x76}, {0x0, 0xb, 0xa}, {0x0, 0xb, 0x4}, {0x0, 0xb, 0x7f2}, {}]}, 0x50}, 0x1, 0x0, 0x0, 0x14000840}, 0x4000050)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x4000000, 0x0, {0x0, 0x0, 0x0, r7, {0xc}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x5}}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0xc}}]}}]}, 0x3c}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="020300031900000000070000fbdbcf2502000100000004d608004f0d00000000030006000000000002004e20ac1414aa0000000000000000030005003200000002004e207f000001000000000000000001000900000000000400030018000000fc0100000000000007000000000000000000000000000c000800120000000200000000000100000006003c0007ff00000000000000000000e0000001000000000000000000000000e0000001000000000000000000000000020010"], 0xc8}, 0x1, 0x7}, 0x40)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r9)

385.071µs ago: executing program 4 (id=5711):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x20}}, {0x14, 0x4, @private0}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async)
r0 = socket(0x10, 0x80002, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0xff2}]}, 0x48}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x1, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x980) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffe0, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x2000000a, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r5, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

0s ago: executing program 7 (id=5712):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 64)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async, rerun: 64)
r3 = socket(0x10, 0x3, 0x0) (async, rerun: 64)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=@newtfilter={0x64, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0x9}, {}, {0xe, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0x2, {0x2, 0x0, 0x4}, 0x2}, 0x18) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000006080)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="110026bd7000fddbdf250700000008000300", @ANYRES32=r9, @ANYBLOB="0c009900fbfffffffcffffff08000500010000001400040070696d72656700000000000000000000eec46fa3322af7ca85dc31081347b56adac3b3030eda536f9bbd68e96f4c3e1a473a98068bfc6b6aa45e66e3822d8306"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20004014)

kernel console output (not intermixed with test programs):

lue rounded to 1000 ms
[  267.183098][T16533] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode 802.3ad(4)
[  267.370826][T16539] ipvlan2: entered promiscuous mode
[  267.399872][T16538] ipvlan2: entered promiscuous mode
[  267.581824][T16547] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.595642][T16547] tipc: Resetting bearer <eth:syzkaller0>
[  267.600898][T16546] tipc: Disabling bearer <eth:syzkaller0>
[  267.679603][T16549] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.683159][T16549] syzkaller0: entered promiscuous mode
[  267.686847][T16549] syzkaller0: entered allmulticast mode
[  267.705517][T16549] tipc: Resetting bearer <eth:syzkaller0>
[  267.710145][T16548] tipc: Resetting bearer <eth:syzkaller0>
[  267.724341][T16548] tipc: Disabling bearer <eth:syzkaller0>
[  267.815563][T16551] netlink: 'syz.1.4471': attribute type 5 has an invalid length.
[  267.818801][T16551] netlink: 'syz.1.4471': attribute type 7 has an invalid length.
[  267.830890][T16551] : entered promiscuous mode
[  268.102931][T16556] batadv1: entered promiscuous mode
[  268.628020][T16570] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  268.846317][T16575] mac80211_hwsim hwsim18 : renamed from wlan0
[  269.070825][T16594] netlink: 'syz.3.4485': attribute type 22 has an invalid length.
[  269.086065][T16594] netlink: 'syz.3.4485': attribute type 22 has an invalid length.
[  269.086162][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  269.092719][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  269.097616][   T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  269.101007][   T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  269.176594][T16599] netlink: 'syz.1.4487': attribute type 3 has an invalid length.
[  269.179605][T16599] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  269.191715][T16599] netlink: 'syz.1.4487': attribute type 10 has an invalid length.
[  269.272640][T16606] dvmrp8: entered allmulticast mode
[  269.277161][T16605] dvmrp8: left allmulticast mode
[  269.358019][T16610] netlink: 'syz.1.4490': attribute type 1 has an invalid length.
[  269.360940][T16610] netlink: 'syz.1.4490': attribute type 1 has an invalid length.
[  269.482349][T16610] __nla_validate_parse: 9 callbacks suppressed
[  269.482366][T16610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4490'.
[  269.491143][T16614] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  269.496128][T16610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4490'.
[  269.496600][T16614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4492'.
[  269.833576][T16635] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4495'.
[  269.843100][T16637] bond0: (slave gretap0): Opening slave failed
[  269.846281][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  269.851523][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  269.854271][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  269.857080][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  270.246397][T16655] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.251268][T16655] syzkaller0: entered promiscuous mode
[  270.253479][T16655] syzkaller0: entered allmulticast mode
[  270.258935][T16655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4501'.
[  270.261885][T16655] IPVS: Unknown mcast interface: wg0
[  270.752823][T16657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4502'.
[  270.862777][T16661] bond3: (slave ip6gretap1): making interface the new active one
[  270.866141][T16661] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  271.016970][T16653] tipc: Resetting bearer <eth:syzkaller0>
[  271.028461][T16653] tipc: Disabling bearer <eth:syzkaller0>
[  271.156981][T16670] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.160125][T16670] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  271.374615][T16673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4506'.
[  272.070273][T16678] bond2: option mode: unable to set because the bond device has slaves
[  272.075770][T16678] netlink: 'syz.3.4507': attribute type 4 has an invalid length.
[  272.088713][T16678] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  272.094516][T16678] bond2: (slave macvlan2): Enslaving as an active interface with an up link
[  272.197303][T16684] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.200240][T16685] syzkaller0: entered promiscuous mode
[  272.202014][T16685] syzkaller0: entered allmulticast mode
[  272.215650][   T55] Bluetooth: hci3: command 0x0419 tx timeout
[  272.226562][T16683] tipc: Resetting bearer <eth:syzkaller0>
[  272.240736][T16683] tipc: Disabling bearer <eth:syzkaller0>
[  272.345143][T16687] bond0: (slave bond_slave_0): Releasing backup interface
[  272.350191][T16687] bond0: (slave bond_slave_1): Releasing backup interface
[  272.357544][T16687] team0: Port device team_slave_0 removed
[  272.361565][T16687] team0: Port device team_slave_1 removed
[  272.365177][T16687] bond2: (slave ip6gretap2): Releasing active interface
[  272.370988][T16687] bond2: (slave macvlan2): making interface the new active one
[  272.380216][T16687] bond2: (slave macvlan2): Releasing active interface
[  272.410754][T16687] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  272.517452][T16693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4513'.
[  272.625709][T16695] ip6erspan0: entered allmulticast mode
[  272.713659][T16697] syzkaller0: entered promiscuous mode
[  272.716240][T16697] syzkaller0: entered allmulticast mode
[  274.130539][    C1] vcan0: j1939_tp_txtimer: 0xffff88810fccc800: tx aborted with unknown reason: -2
[  274.134644][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810fccdc00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[  274.142100][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810fccc800: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[  274.260383][T16715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4521'.
[  274.302350][T16719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4522'.
[  274.708833][T16738] tap0: tun_chr_ioctl cmd 1074025677
[  274.710609][T16738] tap0: linktype set to 825
[  275.386461][T16748] 8021q: adding VLAN 0 to HW filter on device team0
[  275.391856][T16748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  275.433504][T16750] dvmrp8: entered allmulticast mode
[  276.258827][T16749] dvmrp8: left allmulticast mode
[  276.354328][T16753] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20131
[  276.637472][T16764] __nla_validate_parse: 2 callbacks suppressed
[  276.637492][T16764] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4535'.
[  276.740704][T16768] 8021q: adding VLAN 0 to HW filter on device bond3
[  276.865718][T16768] bond3 (unregistering): Released all slaves
[  276.906959][T16769] 8021q: adding VLAN 0 to HW filter on device bond3
[  277.017042][T16769] bond3 (unregistering): Released all slaves
[  278.929576][T16782] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  278.933462][T16782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4540'.
[  279.237439][T16796] netlink: 'syz.3.4542': attribute type 1 has an invalid length.
[  279.268442][T16796] bond3: entered promiscuous mode
[  279.270502][T16796] bond3: entered allmulticast mode
[  279.272881][T16796] 8021q: adding VLAN 0 to HW filter on device bond3
[  279.391672][T16804] netlink: 'syz.3.4544': attribute type 1 has an invalid length.
[  279.399794][T16804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4544'.
[  279.402984][T16804] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4544'.
[  279.516974][ T5295] udevd[5295]: worker [5849] /devices/virtual/block/nbd0 timeout; kill it
[  279.520470][ T5295] udevd[5295]: seq 11496 '/devices/virtual/block/nbd0' killed
[  279.574236][T16807] netlink: 'syz.3.4545': attribute type 10 has an invalid length.
[  279.588564][T16807] team0: Port device dummy0 added
[  279.597221][T16807] netlink: 'syz.3.4545': attribute type 10 has an invalid length.
[  279.611278][T16807] team0: Port device dummy0 removed
[  280.299387][   T61] block nbd0: Possible stuck request ffff888021728000: control (read@0,1024B). Runtime 180 seconds
[  280.303128][   T61] block nbd0: Possible stuck request ffff888021728200: control (read@1024,1024B). Runtime 180 seconds
[  280.306719][   T61] block nbd0: Possible stuck request ffff888021728400: control (read@2048,1024B). Runtime 180 seconds
[  280.310067][   T61] block nbd0: Possible stuck request ffff888021728600: control (read@3072,1024B). Runtime 180 seconds
[  280.422649][T16809] netlink: 'syz.3.4546': attribute type 1 has an invalid length.
[  280.426252][T16809] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  280.479861][T16815] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  280.490388][T16815] netlink: 'syz.3.4547': attribute type 1 has an invalid length.
[  280.494305][T16817] netlink: 'syz.3.4547': attribute type 1 has an invalid length.
[  280.533569][T16815] 8021q: adding VLAN 0 to HW filter on device bond5
[  280.538265][T16815] bond4: (slave bond5): making interface the new active one
[  280.541640][T16815] bond4: (slave bond5): Enslaving as an active interface with an up link
[  280.546582][T16815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4547'.
[  280.551371][T16815] 8021q: adding VLAN 0 to HW filter on device bond4
[  280.704122][T16823] syz_tun: entered allmulticast mode
[  280.820327][T16822] syz_tun: left allmulticast mode
[  280.919516][T16830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.923277][T16830] syzkaller0: entered promiscuous mode
[  280.925545][T16830] syzkaller0: entered allmulticast mode
[  280.949311][T16830] tipc: Resetting bearer <eth:syzkaller0>
[  280.953483][T16830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4551'.
[  280.960388][T16829] tipc: Resetting bearer <eth:syzkaller0>
[  280.975969][T16829] tipc: Disabling bearer <eth:syzkaller0>
[  281.084212][T16832] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.089204][T16832] syzkaller0: entered promiscuous mode
[  281.091058][T16832] syzkaller0: entered allmulticast mode
[  281.114961][T16832] tipc: Resetting bearer <eth:syzkaller0>
[  281.120155][T16831] tipc: Resetting bearer <eth:syzkaller0>
[  281.131689][T16831] tipc: Disabling bearer <eth:syzkaller0>
[  281.212539][T16834] netlink: 'syz.3.4553': attribute type 3 has an invalid length.
[  281.227221][T16834] macvlan3: entered allmulticast mode
[  281.229534][T16834] veth1_vlan: entered allmulticast mode
[  281.233713][T16834] veth1_vlan: left allmulticast mode
[  281.433012][T16838] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.479768][T16838] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.493929][T16839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  281.531010][T16838] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.591240][T16838] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.674737][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  281.691088][ T5853] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  281.708267][ T5853] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  281.720406][ T5853] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  281.961643][T16847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4559'.
[  282.084109][T16853] Bluetooth: MGMT ver 1.23
[  282.089239][T16853] netlink: 'syz.3.4561': attribute type 13 has an invalid length.
[  282.092298][T16853] netlink: 'syz.3.4561': attribute type 17 has an invalid length.
[  282.142516][T16853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  282.191770][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  282.194998][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  282.198508][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  282.201626][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  282.204477][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  282.211514][T16857] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  282.215198][T16857] syzkaller0: entered promiscuous mode
[  282.219553][T16857] syzkaller0: entered allmulticast mode
[  282.236504][T16857] tipc: Resetting bearer <eth:syzkaller0>
[  282.243349][T16856] tipc: Resetting bearer <eth:syzkaller0>
[  282.256750][T16856] tipc: Disabling bearer <eth:syzkaller0>
[  282.408446][T16854] chnl_net:caif_netlink_parms(): no params data found
[  282.489272][T16854] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.492275][T16854] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.495589][T16854] bridge_slave_0: entered allmulticast mode
[  282.499435][T16854] bridge_slave_0: entered promiscuous mode
[  282.503973][T16854] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.507519][T16854] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.510465][T16854] bridge_slave_1: entered allmulticast mode
[  282.513854][T16854] bridge_slave_1: entered promiscuous mode
[  282.550661][T16854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  282.557425][T16854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  282.594541][T16854] team0: Port device team_slave_0 added
[  282.599675][T16854] team0: Port device team_slave_1 added
[  282.634754][T16854] batman_adv: batadv0: Adding interface: batadv_slave_0
[  282.637557][T16854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.648144][T16854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.654312][T16854] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.657692][T16854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.667635][T16854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.707791][T16854] hsr_slave_0: entered promiscuous mode
[  282.711052][T16854] hsr_slave_1: entered promiscuous mode
[  282.714022][T16854] debugfs: 'hsr0' already exists in 'hsr'
[  282.716654][T16854] Cannot create hsr debugfs directory
[  282.893533][T16854] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  282.898735][T16854] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  282.904713][T16854] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  282.911592][T16854] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  282.979858][T16854] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.995016][T16854] 8021q: adding VLAN 0 to HW filter on device team0
[  283.000986][ T4812] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.003573][ T4812] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.012327][ T4812] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.014649][ T4812] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.191257][T16854] 8021q: adding VLAN 0 to HW filter on device batadv0
[  283.351537][T16854] veth0_vlan: entered promiscuous mode
[  283.359411][T16854] veth1_vlan: entered promiscuous mode
[  283.388760][T16854] veth0_macvtap: entered promiscuous mode
[  283.396278][T16854] veth1_macvtap: entered promiscuous mode
[  283.413048][T16854] batman_adv: batadv0: Interface activated: batadv_slave_0
[  283.425777][T16854] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.437095][ T5908] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.441097][ T5908] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.444534][ T5908] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.455101][ T5908] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.537826][ T7589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.540761][ T7589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.568017][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.570968][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.677717][T16881] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4560'.
[  283.683516][T16881] netlink: 'syz.4.4560': attribute type 11 has an invalid length.
[  283.710160][T16881] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4560'.
[  283.760466][T16885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4563'.
[  283.819103][T16886] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.4563'.
[  284.144692][T16899] syzkaller0: entered promiscuous mode
[  284.149216][T16899] syzkaller0: entered allmulticast mode
[  284.216214][   T55] Bluetooth: hci4: command tx timeout
[  284.292102][T16901] validate_nla: 2 callbacks suppressed
[  284.292119][T16901] netlink: 'syz.3.4569': attribute type 1 has an invalid length.
[  284.341101][T16903] netlink: 'syz.3.4570': attribute type 31 has an invalid length.
[  284.344663][T16903] syz_tun: entered allmulticast mode
[  284.349577][T16903] syz_tun: left allmulticast mode
[  285.251717][T16911] syzkaller1: entered promiscuous mode
[  285.253661][T16911] syzkaller1: entered allmulticast mode
[  286.296014][   T55] Bluetooth: hci4: command tx timeout
[  286.764663][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  286.770993][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  286.777368][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  286.780476][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  286.783584][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  286.871817][T16918] bridge0: port 3(macsec1) entered blocking state
[  286.874492][T16918] bridge0: port 3(macsec1) entered disabled state
[  286.879030][T16918] macsec1: entered allmulticast mode
[  286.882840][T16918] macsec1: left allmulticast mode
[  287.036882][T16915] chnl_net:caif_netlink_parms(): no params data found
[  287.065081][T16928] netlink: 'syz.4.4576': attribute type 1 has an invalid length.
[  287.168438][T16915] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.171328][T16915] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.174068][T16915] bridge_slave_0: entered allmulticast mode
[  287.178735][T16915] bridge_slave_0: entered promiscuous mode
[  287.184424][T16915] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.187423][T16915] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.190102][T16915] bridge_slave_1: entered allmulticast mode
[  287.194014][T16915] bridge_slave_1: entered promiscuous mode
[  287.215706][T16915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.220589][T16915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.247323][T16915] team0: Port device team_slave_0 added
[  287.250625][T16915] team0: Port device team_slave_1 added
[  287.280716][T16915] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.282888][T16915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.295550][T16915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.300892][T16915] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.305391][T16915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.325476][T16915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.375247][T16915] hsr_slave_0: entered promiscuous mode
[  287.379015][T16915] hsr_slave_1: entered promiscuous mode
[  287.381845][T16915] debugfs: 'hsr0' already exists in 'hsr'
[  287.384122][T16915] Cannot create hsr debugfs directory
[  287.527642][T16915] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  287.532466][T16915] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  287.537546][T16915] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  287.544126][T16915] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  287.567340][T16915] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.569630][T16915] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.572048][T16915] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.574197][T16915] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.614903][T16915] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.625052][ T4812] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.629301][ T4812] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.643124][T16915] 8021q: adding VLAN 0 to HW filter on device team0
[  287.653658][ T4812] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.656734][ T4812] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.668705][ T4812] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.671588][ T4812] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.841680][T16915] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.088298][T16915] veth0_vlan: entered promiscuous mode
[  288.097094][T16915] veth1_vlan: entered promiscuous mode
[  288.133116][T16915] veth0_macvtap: entered promiscuous mode
[  288.142268][T16915] veth1_macvtap: entered promiscuous mode
[  288.178314][T16953] syzkaller0: entered promiscuous mode
[  288.180322][T16953] syzkaller0: entered allmulticast mode
[  288.185103][T16915] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.198652][T16915] batman_adv: batadv0: Interface activated: batadv_slave_1
[  288.218856][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.227047][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.239944][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.245708][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.325028][ T7594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.332563][ T7594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.349144][ T7592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.351671][ T7592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.376003][ T5841] Bluetooth: hci4: command tx timeout
[  288.408669][T16956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  288.448723][T16961] netlink: 'syz.5.4580': attribute type 39 has an invalid length.
[  288.628798][T16970] tipc: Started in network mode
[  288.630411][T16970] tipc: Node identity 3e516422de0a, cluster identity 4711
[  288.633414][T16970] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.637668][T16970] syzkaller0: entered promiscuous mode
[  288.639827][T16970] syzkaller0: entered allmulticast mode
[  288.647804][T16970] tipc: Resetting bearer <eth:syzkaller0>
[  288.652690][T16969] tipc: Resetting bearer <eth:syzkaller0>
[  288.663776][T16969] tipc: Disabling bearer <eth:syzkaller0>
[  288.787744][T16972] pimreg: entered allmulticast mode
[  288.794694][T16972] dvmrp8: entered allmulticast mode
[  288.865786][ T5841] Bluetooth: hci5: command tx timeout
[  288.869035][T16972] block nbd1: server does not support multiple connections per device.
[  288.874077][T16972] block nbd1: shutting down sockets
[  288.881906][T16971] pimreg: left allmulticast mode
[  288.884790][T16971] dvmrp8: left allmulticast mode
[  288.975011][T16975] netlink: 'syz.4.4585': attribute type 2 has an invalid length.
[  288.976121][T16976] netlink: 'syz.4.4585': attribute type 2 has an invalid length.
[  288.990304][T16975] : entered promiscuous mode
[  289.170714][T16988] netlink: 'syz.4.4589': attribute type 1 has an invalid length.
[  289.253616][T16992] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4591'.
[  289.338613][T16994] netlink: 'syz.4.4592': attribute type 1 has an invalid length.
[  289.389014][T16994] veth3: entered promiscuous mode
[  289.430698][T16995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4592'.
[  289.532786][T16999] netlink: 'syz.4.4594': attribute type 8 has an invalid length.
[  290.122559][T17011] netlink: 'syz.5.4599': attribute type 1 has an invalid length.
[  290.360341][T17023] : entered promiscuous mode
[  290.414778][T17025] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  290.455704][ T5841] Bluetooth: hci4: command tx timeout
[  290.642901][T17036] netlink: 'syz.4.4609': attribute type 1 has an invalid length.
[  290.649307][T17037] netlink: 'syz.4.4609': attribute type 1 has an invalid length.
[  290.860128][T17044] veth0_to_team: entered allmulticast mode
[  290.878974][T17044] netlink: 'syz.4.4611': attribute type 39 has an invalid length.
[  290.935573][ T5841] Bluetooth: hci5: command tx timeout
[  291.002441][T17048] delete_channel: no stack
[  291.005203][T17048] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4613'.
[  291.047748][T17053] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4614'.
[  291.168726][T17053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.181313][T17053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.186704][T17053] bond0 (unregistering): Released all slaves
[  291.394722][T17071] netlink: 'syz.5.4621': attribute type 1 has an invalid length.
[  291.439009][T17071] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  291.528265][T17080] netlink: 'syz.4.4622': attribute type 4 has an invalid length.
[  291.581088][T17085] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4624'.
[  291.639603][T17088] netlink: 'syz.4.4625': attribute type 1 has an invalid length.
[  291.642056][T17088] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4625'.
[  291.646690][T17088] netlink: 'syz.4.4625': attribute type 3 has an invalid length.
[  291.889440][T17108] bridge_slave_0: left allmulticast mode
[  291.891938][T17108] bridge_slave_0: left promiscuous mode
[  291.894677][T17108] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.903418][T17108] bridge_slave_1: left allmulticast mode
[  291.907419][T17108] bridge_slave_1: left promiscuous mode
[  291.910214][T17108] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.922498][T17108] bond0: (slave bond_slave_0): Releasing backup interface
[  291.933752][T17108] bond0: (slave bond_slave_1): Releasing backup interface
[  291.949573][T17108] team0: Port device team_slave_0 removed
[  291.958556][T17108] team0: Port device team_slave_1 removed
[  291.961034][T17108] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.964987][T17108] batman_adv: batadv0: Removing interface: batadv_slave_0
[  291.968692][T17108] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.971207][T17108] batman_adv: batadv0: Removing interface: batadv_slave_1
[  292.084617][T16954] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0
[  292.087680][T16954] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0
[  292.091634][T16954] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0
[  292.094480][T16954] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0
[  292.396910][T17131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4642'.
[  292.560346][T17139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4646'.
[  292.728449][T17147] team0: Port device dummy0 added
[  292.735662][T17147] team0: Port device dummy0 removed
[  293.016456][ T5841] Bluetooth: hci5: command tx timeout
[  293.400250][T17163] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.403998][T17163] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4654'.
[  293.430330][T17163] vlan2: entered allmulticast mode
[  293.432265][T17163] bond0: entered allmulticast mode
[  293.565203][T17172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4656'.
[  293.705128][T17178] syz_tun: entered allmulticast mode
[  293.823694][T17187] xt_socket: unknown flags 0xfc
[  293.873824][T17188] wg1: entered promiscuous mode
[  293.875567][T17188] wg1: entered allmulticast mode
[  294.271390][T17200] bond2 (unregistering): Released all slaves
[  294.771311][T17218] __nla_validate_parse: 4 callbacks suppressed
[  294.771330][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4675'.
[  294.782079][T17218] validate_nla: 4 callbacks suppressed
[  294.782095][T17218] netlink: 'syz.5.4675': attribute type 4 has an invalid length.
[  294.788798][T17215] netlink: 'syz.4.4673': attribute type 1 has an invalid length.
[  295.014045][T17229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4679'.
[  295.090873][T17231] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  295.095184][T17231] syzkaller0: entered promiscuous mode
[  295.098292][ T5841] Bluetooth: hci5: command tx timeout
[  295.100827][T17231] syzkaller0: entered allmulticast mode
[  295.122649][T17230] tipc: Resetting bearer <eth:syzkaller0>
[  295.141244][T17230] tipc: Disabling bearer <eth:syzkaller0>
[  295.280165][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4683'.
[  295.283711][T17238] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  295.342455][T17242] dvmrp0: entered allmulticast mode
[  295.499005][T17255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4687'.
[  295.512117][T17255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4687'.
[  295.557485][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4688'.
[  295.749815][T17265] sctp: [Deprecated]: syz.4.4691 (pid 17265) Use of int in max_burst socket option deprecated.
[  295.749815][T17265] Use struct sctp_assoc_value instead
[  295.843298][T17266] bridge0: port 3(erspan0) entered blocking state
[  295.846468][T17266] bridge0: port 3(erspan0) entered disabled state
[  295.849296][T17266] erspan0: entered allmulticast mode
[  295.852995][T17266] erspan0: entered promiscuous mode
[  295.859810][T17266] bridge0: port 3(erspan0) entered blocking state
[  295.862578][T17266] bridge0: port 3(erspan0) entered forwarding state
[  295.903948][T17273] erspan0: left allmulticast mode
[  295.906255][T17273] erspan0: left promiscuous mode
[  295.908431][T17273] bridge0: port 3(erspan0) entered disabled state
[  295.949879][T17274] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4693'.
[  296.011312][T17277] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4694'.
[  296.015530][T17276] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4694'.
[  296.095805][T17279] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.101873][T17279] bond0: (slave rose0): Enslaving as an active interface with an up link
[  296.310529][T17295] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  296.313687][T17295] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  296.359566][   T33] audit: type=1107 audit(1755943932.712:4): pid=17294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  296.393289][T17297] syzkaller0: entered promiscuous mode
[  296.399087][T17297] syzkaller0: entered allmulticast mode
[  296.493828][T17302] dvmrp8: entered allmulticast mode
[  296.500561][T17302] netlink: 'syz.4.4705': attribute type 1 has an invalid length.
[  296.504472][T17302] netlink: 212 bytes leftover after parsing attributes in process `syz.4.4705'.
[  296.509230][T17302] netlink: 'syz.4.4705': attribute type 1 has an invalid length.
[  296.513696][T17301] dvmrp8: left allmulticast mode
[  296.708683][T17314] bond0 (unregistering): Released all slaves
[  296.764137][T17317] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  296.864381][T17323] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.241607][   T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  297.255621][   T12] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0
[  297.262990][   T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  297.269264][   T12] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0
[  297.273940][   T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  297.278306][   T12] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0
[  297.281851][   T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  297.285658][   T12] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20001 - 0
[  297.683573][T17334] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.712343][T17335] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  297.764521][T17334] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.825909][T17334] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.894683][T17334] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.989520][T16954] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.002416][T16954] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.012850][T16165] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.026338][T16165] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.178134][T17342] netlink: 'syz.5.4722': attribute type 1 has an invalid length.
[  299.162007][T17371] tipc: Started in network mode
[  299.164091][T17371] tipc: Node identity 1e380fde0be, cluster identity 4711
[  299.167354][T17371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.177439][T17371] tipc: Resetting bearer <eth:syzkaller0>
[  299.192551][T17370] tipc: Disabling bearer <eth:syzkaller0>
[  299.386327][T17377] netlink: 'syz.5.4735': attribute type 1 has an invalid length.
[  299.554748][   T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  299.559204][   T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  299.562491][   T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  299.567335][   T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  299.570738][   T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  299.726372][T17380] chnl_net:caif_netlink_parms(): no params data found
[  299.792450][T17380] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.795093][T17380] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.798346][T17380] bridge_slave_0: entered allmulticast mode
[  299.801415][T17380] bridge_slave_0: entered promiscuous mode
[  299.805171][T17380] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.808136][T17380] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.810966][T17380] bridge_slave_1: entered allmulticast mode
[  299.813879][T17380] bridge_slave_1: entered promiscuous mode
[  299.855598][T17380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.862236][T17380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.907242][T17380] team0: Port device team_slave_0 added
[  299.911714][T17380] team0: Port device team_slave_1 added
[  299.932875][T17393] netlink: 'syz.4.4739': attribute type 1 has an invalid length.
[  299.938669][T17394] netlink: 'syz.4.4739': attribute type 1 has an invalid length.
[  299.960559][T17394] __nla_validate_parse: 6 callbacks suppressed
[  299.960588][T17394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4739'.
[  299.961535][T17395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4739'.
[  299.963063][T17394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4739'.
[  299.965633][T17380] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.967513][T17395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4739'.
[  299.969887][T17380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.969911][T17380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.971711][T17380] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.995245][T17380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.003093][T17380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.046940][T17380] hsr_slave_0: entered promiscuous mode
[  300.049588][T17380] hsr_slave_1: entered promiscuous mode
[  300.052580][T17380] debugfs: 'hsr0' already exists in 'hsr'
[  300.054913][T17380] Cannot create hsr debugfs directory
[  300.089828][T17397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4740'.
[  300.098320][T17397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4740'.
[  300.196735][T17401] netlink: 'syz.4.4742': attribute type 39 has an invalid length.
[  300.209137][T17401] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4742'.
[  300.236881][T17405] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  300.257909][ T5882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  300.277806][T17380] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  300.283430][T17380] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  300.293919][T17380] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  300.300541][T17380] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  300.312242][T17407] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4745'.
[  300.536115][ T5882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  301.670731][   T55] Bluetooth: hci6: command tx timeout
[  302.015143][T17423] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4748'.
[  302.022048][T17423] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4748'.
[  302.056438][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  302.126384][T17430] netlink: 'syz.5.4749': attribute type 2 has an invalid length.
[  302.182138][T17380] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.214438][T17380] 8021q: adding VLAN 0 to HW filter on device team0
[  302.225346][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.228195][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.282727][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.285738][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.641762][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.644545][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.734911][T17380] 8021q: adding VLAN 0 to HW filter on device batadv0
[  302.901851][T17466] netlink: 'syz.4.4759': attribute type 4 has an invalid length.
[  303.005119][T17380] veth0_vlan: entered promiscuous mode
[  303.037996][T17380] veth1_vlan: entered promiscuous mode
[  303.081150][T17479] netlink: 'syz.5.4763': attribute type 12 has an invalid length.
[  303.095137][T17380] veth0_macvtap: entered promiscuous mode
[  303.124848][T17380] veth1_macvtap: entered promiscuous mode
[  303.129869][T17480] tap0: tun_chr_ioctl cmd 1074025677
[  303.132132][T17480] tap0: linktype set to 804
[  303.177591][T17380] batman_adv: batadv0: Interface activated: batadv_slave_0
[  303.208810][T17380] batman_adv: batadv0: Interface activated: batadv_slave_1
[  303.234453][T16165] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.238878][T16165] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.258155][T16165] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.261011][T16165] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.343608][T17489] netlink: 'syz.5.4766': attribute type 1 has an invalid length.
[  303.368912][T17488] 8021q: adding VLAN 0 to HW filter on device bond2
[  303.371811][T17488] bridge0: port 1(bond2) entered blocking state
[  303.374075][T17488] bridge0: port 1(bond2) entered disabled state
[  303.379747][T17488] bond2: entered allmulticast mode
[  303.383877][T17488] bond2: entered promiscuous mode
[  303.394736][ T9825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.397688][ T9825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.436393][ T9825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.439336][ T9825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.735884][   T55] Bluetooth: hci6: command tx timeout
[  303.944468][T17511] netlink: 'syz.6.4772': attribute type 1 has an invalid length.
[  304.321698][T17519] netlink: 'syz.5.4775': attribute type 30 has an invalid length.
[  304.599256][T17529] tipc: Started in network mode
[  304.600959][T17529] tipc: Node identity 061b1659ef43, cluster identity 4711
[  304.603349][T17529] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.643574][T17529] tipc: Resetting bearer <eth:syzkaller0>
[  304.660310][T17536] IPVS: set_ctl: invalid protocol: 47 172.30.0.6:20000
[  304.669885][T17528] tipc: Disabling bearer <eth:syzkaller0>
[  305.124396][T17563] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.186621][T17564] syzkaller0: entered promiscuous mode
[  305.189004][T17564] syzkaller0: entered allmulticast mode
[  305.214067][T17564] tipc: Resetting bearer <eth:syzkaller0>
[  305.600114][T17568] __nla_validate_parse: 5 callbacks suppressed
[  305.600170][T17568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4793'.
[  305.694035][T17571] netlink: 'syz.6.4794': attribute type 1 has an invalid length.
[  305.697898][T17571] netlink: 'syz.6.4794': attribute type 1 has an invalid length.
[  305.816650][   T55] Bluetooth: hci6: command tx timeout
[  305.817150][T17578] netlink: 'syz.4.4796': attribute type 10 has an invalid length.
[  305.826293][T17578] team0: Port device dummy0 added
[  305.853852][T17580] syzkaller0: entered promiscuous mode
[  305.863336][T17580] syzkaller0: entered allmulticast mode
[  305.895246][T17580] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.4797'.
[  305.899866][T17580] netlink: zone id is out of range
[  305.901667][T17580] netlink: zone id is out of range
[  305.903629][T17580] netlink: zone id is out of range
[  305.906535][T17580] netlink: zone id is out of range
[  305.908423][T17580] netlink: zone id is out of range
[  305.910484][T17580] netlink: zone id is out of range
[  305.912537][T17580] netlink: zone id is out of range
[  305.914479][T17580] netlink: get zone limit has 8 unknown bytes
[  305.964652][T17562] tipc: Resetting bearer <eth:syzkaller0>
[  305.980788][T17562] tipc: Disabling bearer <eth:syzkaller0>
[  306.017133][T17588] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4801'.
[  306.020443][T17588] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4801'.
[  306.023424][T17588] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4801'.
[  306.030233][T17588] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4801'.
[  306.044802][T17588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4801'.
[  306.257182][T17596] syzkaller0: entered promiscuous mode
[  306.259016][T17596] syzkaller0: entered allmulticast mode
[  306.277594][T17596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  306.333738][T17605] netlink: 'syz.4.4808': attribute type 10 has an invalid length.
[  306.338224][T17596] bond1 (unregistering): Released all slaves
[  306.360064][T17605] netlink: 'syz.4.4808': attribute type 10 has an invalid length.
[  306.364687][T17605] team0: Port device dummy0 removed
[  306.406213][T17595] tipc: Resetting bearer <eth:syzkaller0>
[  307.405563][   T47] tipc: Node number set to 366481374
[  307.737902][T17595] tipc: Disabling bearer <eth:syzkaller0>
[  307.749019][T17615] dummy0: entered promiscuous mode
[  307.751099][T17615] macsec1: entered allmulticast mode
[  307.752871][T17615] dummy0: entered allmulticast mode
[  307.757439][T17615] dummy0: left allmulticast mode
[  307.759428][T17615] dummy0: left promiscuous mode
[  307.905879][   T55] Bluetooth: hci6: command tx timeout
[  307.958714][T17632] netlink: 'syz.6.4818': attribute type 3 has an invalid length.
[  307.982120][T17632] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  308.093741][T17643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4822'.
[  308.096992][T17643] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4822'.
[  308.110414][T17644] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4822'.
[  308.141181][T17648] netlink: 'syz.5.4820': attribute type 1 has an invalid length.
[  308.153208][T16165] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  308.200170][T17648] 8021q: adding VLAN 0 to HW filter on device bond1
[  308.204442][T16165] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  308.217421][T16165] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  308.239072][T17635] bond1: (slave geneve2): making interface the new active one
[  308.255706][T17635] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  308.259147][T16165] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  308.270194][T17641] bond1: entered promiscuous mode
[  308.272237][T17641] geneve2: entered promiscuous mode
[  308.290870][T17655] bridge: RTM_NEWNEIGH with invalid ether address
[  308.310838][T17635] syz.5.4820 (17635) used greatest stack depth: 18776 bytes left
[  308.593445][T17679] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.621777][T17686] pim6reg1: entered promiscuous mode
[  308.623521][T17686] pim6reg1: entered allmulticast mode
[  308.640956][T17688] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  308.643192][T17679] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.648285][ T8896] IPVS: starting estimator thread 0...
[  308.651398][T17688] tipc: Failed to remove unknown binding: 66,1,1/0:3780595627/3780595629
[  308.665966][T17688] tipc: Failed to remove unknown binding: 66,1,1/0:3780595627/3780595629
[  308.670658][T17688] tipc: Failed to remove unknown binding: 66,1,1/0:3780595627/3780595629
[  308.703825][T17679] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.745536][T17689] IPVS: using max 61 ests per chain, 146400 per kthread
[  308.773069][T17679] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.800037][T17693] netlink: 'syz.6.4837': attribute type 1 has an invalid length.
[  308.899367][ T5908] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.914424][T16954] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.943287][ T5908] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.975690][ T5908] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.119485][T17713] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  309.539101][T17736] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.544216][T17736] syzkaller0: entered promiscuous mode
[  309.548878][T17736] syzkaller0: entered allmulticast mode
[  309.587753][T17736] tipc: Resetting bearer <eth:syzkaller0>
[  309.593157][T17735] tipc: Resetting bearer <eth:syzkaller0>
[  309.606132][T17735] tipc: Disabling bearer <eth:syzkaller0>
[  309.766393][T17743] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.774686][T17743] tipc: Resetting bearer <eth:syzkaller0>
[  309.791562][T17742] tipc: Disabling bearer <eth:syzkaller0>
[  309.990664][T17752] netlink: 'syz.4.4857': attribute type 8 has an invalid length.
[  310.150989][T17754] tap0: tun_chr_ioctl cmd 1074025676
[  310.153113][T17754] tap0: owner set to 0
[  310.243193][T17758] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  310.273277][T17760] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  310.277244][T17760] syzkaller0: entered promiscuous mode
[  310.279138][T17760] syzkaller0: entered allmulticast mode
[  310.299288][T17760] tipc: Resetting bearer <eth:syzkaller0>
[  310.302961][T17755] tipc: Resetting bearer <eth:syzkaller0>
[  310.323248][T17755] tipc: Disabling bearer <eth:syzkaller0>
[  310.380341][   T61] block nbd0: Possible stuck request ffff888021728000: control (read@0,1024B). Runtime 210 seconds
[  310.383978][   T61] block nbd0: Possible stuck request ffff888021728200: control (read@1024,1024B). Runtime 210 seconds
[  310.388045][   T61] block nbd0: Possible stuck request ffff888021728400: control (read@2048,1024B). Runtime 210 seconds
[  310.391512][   T61] block nbd0: Possible stuck request ffff888021728600: control (read@3072,1024B). Runtime 210 seconds
[  310.584108][T17774] netlink: 'syz.6.4863': attribute type 12 has an invalid length.
[  310.753006][T17785] __nla_validate_parse: 18 callbacks suppressed
[  310.753025][T17785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4869'.
[  310.826996][T17792] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  310.829690][T17792] syzkaller0: entered promiscuous mode
[  310.831426][T17792] syzkaller0: entered allmulticast mode
[  310.837316][T17792] tipc: Resetting bearer <eth:syzkaller0>
[  310.849929][T17792] tipc: Disabling bearer <eth:syzkaller0>
[  311.014947][T17801] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  311.020475][T17801] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4873'.
[  311.024533][T17801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4873'.
[  311.061036][T17803] netlink: 'syz.6.4875': attribute type 16 has an invalid length.
[  311.064271][T17803] netlink: 'syz.6.4875': attribute type 17 has an invalid length.
[  311.164011][T17808] tls_set_device_offload_rx: netdev not found
[  311.168612][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4877'.
[  311.188351][T17808] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7
[  311.280439][T17808] bond3: entered promiscuous mode
[  311.289438][T17808] bond3: entered allmulticast mode
[  311.295134][T17808] 8021q: adding VLAN 0 to HW filter on device bond3
[  311.397345][T17815] netlink: 'syz.4.4879': attribute type 3 has an invalid length.
[  311.400462][T17815] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4879'.
[  311.456687][T17815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4879'.
[  311.598264][T17823] netlink: 'syz.4.4881': attribute type 74 has an invalid length.
[  311.709471][T17828] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4883'.
[  311.824166][T17834] bond4: (slave ip6gretap1): making interface the new active one
[  311.828586][T17834] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  312.204555][T17861] smc: net device bond0 erased user defined pnetid SYZ2
[  312.248143][T17861] bond0 (unregistering): Released all slaves
[  312.371204][T17867] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  312.374166][T17867] syzkaller0: entered promiscuous mode
[  312.376750][T17867] syzkaller0: entered allmulticast mode
[  312.392708][T17867] tipc: Resetting bearer <eth:syzkaller0>
[  312.397638][T17866] tipc: Resetting bearer <eth:syzkaller0>
[  312.410705][T17866] tipc: Disabling bearer <eth:syzkaller0>
[  312.492324][T17869] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.498265][T17869] tipc: Failed to remove unknown binding: 66,1,1/0:785386258/785386260
[  312.641779][T17882] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4898'.
[  312.846157][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4902'.
[  312.849019][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4902'.
[  312.854054][T17901] netlink: 'syz.5.4902': attribute type 10 has an invalid length.
[  313.120891][T17925] netlink: 'syz.6.4904': attribute type 29 has an invalid length.
[  313.183126][T17929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  313.190208][T17929] syzkaller0: entered promiscuous mode
[  313.192146][T17929] syzkaller0: entered allmulticast mode
[  313.320249][T17928] tipc: Resetting bearer <eth:syzkaller0>
[  313.342755][T17928] tipc: Disabling bearer <eth:syzkaller0>
[  313.431201][T17934] openvswitch: netlink: Flow key attr not present in new flow.
[  313.878603][T17937] sit0: entered promiscuous mode
[  313.883273][T17937] netlink: 'syz.6.4911': attribute type 1 has an invalid length.
[  314.297435][T17944] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.301235][T17944] syzkaller0: entered promiscuous mode
[  314.303538][T17944] syzkaller0: entered allmulticast mode
[  314.322505][T17943] tipc: Resetting bearer <eth:syzkaller0>
[  314.339848][T17943] tipc: Disabling bearer <eth:syzkaller0>
[  314.486276][T17949] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  314.490653][T17948] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  314.738934][T17957] netlink: 'syz.4.4917': attribute type 1 has an invalid length.
[  314.759967][T17957] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address
[  314.764193][T17957] bond0: (slave vxcan1): Error -95 calling set_mac_address
[  314.842225][T17957] gretap1: entered promiscuous mode
[  314.849296][T17957] bond0: (slave gretap1): making interface the new active one
[  314.853083][T17957] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  314.982398][T17970] syzkaller1: entered promiscuous mode
[  314.984207][T17970] syzkaller1: entered allmulticast mode
[  315.070599][T17976] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  315.073717][T17977] syzkaller0: entered promiscuous mode
[  315.080920][T17977] syzkaller0: entered allmulticast mode
[  315.088206][T17976] tipc: Resetting bearer <eth:syzkaller0>
[  315.091152][T17977] tipc: Resetting bearer <eth:syzkaller0>
[  315.103861][T17977] tipc: Disabling bearer <eth:syzkaller0>
[  315.120336][T17979] veth1_macvtap: left promiscuous mode
[  315.182827][T17982] netlink: 'syz.4.4926': attribute type 1 has an invalid length.
[  315.204370][T17982] bond5: entered promiscuous mode
[  315.209424][T17982] 8021q: adding VLAN 0 to HW filter on device bond5
[  315.212434][T17982] netlink: 'syz.4.4926': attribute type 1 has an invalid length.
[  315.470392][T18003] veth0_to_team: left allmulticast mode
[  315.490956][T18003] bond3: left promiscuous mode
[  315.492518][T18003] bond3: left allmulticast mode
[  315.509772][T18003] gretap1: left promiscuous mode
[  315.516465][T18003] bond5: left promiscuous mode
[  315.542348][T18003] hsr_slave_0: left promiscuous mode
[  315.545174][T18003] hsr_slave_1: left promiscuous mode
[  315.839686][T18028] __nla_validate_parse: 11 callbacks suppressed
[  315.839699][T18028] netlink: 264 bytes leftover after parsing attributes in process `syz.6.4941'.
[  315.875104][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4943'.
[  315.878125][T18036] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4943'.
[  316.000237][T18043] sit0: left promiscuous mode
[  316.065082][T18043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  316.082642][T18045] validate_nla: 35 callbacks suppressed
[  316.082659][T18045] netlink: 'syz.4.4947': attribute type 1 has an invalid length.
[  316.324184][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4949'.
[  316.327684][T18061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4949'.
[  316.485856][T18053] block nbd1: server does not support multiple connections per device.
[  316.489229][T18067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4954'.
[  316.491897][T18053] block nbd1: shutting down sockets
[  316.497877][T18067] xfrm1: entered promiscuous mode
[  316.500666][T18067] xfrm1: entered allmulticast mode
[  316.517457][T18070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4954'.
[  316.646043][T18076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4956'.
[  316.705863][T18061] block nbd1: server does not support multiple connections per device.
[  316.709359][T18061] block nbd1: shutting down sockets
[  316.821561][T18080] bond0: (slave vlan0): Opening slave failed
[  316.839386][T18081] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  316.842839][T18081] syzkaller0: entered promiscuous mode
[  316.844631][T18081] syzkaller0: entered allmulticast mode
[  316.864496][T18079] tipc: Resetting bearer <eth:syzkaller0>
[  316.881385][T18079] tipc: Disabling bearer <eth:syzkaller0>
[  317.395542][T18088] nbd6: detected capacity change from 0 to 63
[  317.399234][T18090] block nbd6: NBD_DISCONNECT
[  317.403546][T18090] block nbd6: Disconnected due to user request.
[  317.407300][T18090] block nbd6: shutting down sockets
[  317.411946][    C1] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.414680][T18088] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4961'.
[  317.414980][    C1] Buffer I/O error on dev nbd6, logical block 0, async page read
[  317.420955][    C1] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.422676][T18088] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  317.423861][    C1] Buffer I/O error on dev nbd6, logical block 1, async page read
[  317.431058][    C1] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.433965][    C1] Buffer I/O error on dev nbd6, logical block 2, async page read
[  317.436744][    C1] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.439666][    C1] Buffer I/O error on dev nbd6, logical block 3, async page read
[  317.446027][T16517] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.449666][T16517] Buffer I/O error on dev nbd6, logical block 0, async page read
[  317.452337][T16517] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.456022][T16517] Buffer I/O error on dev nbd6, logical block 1, async page read
[  317.458612][T16517] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.461516][T16517] Buffer I/O error on dev nbd6, logical block 2, async page read
[  317.464077][T16517] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.467218][T16517] Buffer I/O error on dev nbd6, logical block 3, async page read
[  317.469678][T16517] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.472584][T16517] Buffer I/O error on dev nbd6, logical block 0, async page read
[  317.475120][T16517] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.478425][T16517] Buffer I/O error on dev nbd6, logical block 1, async page read
[  317.485754][T16517] ldm_validate_partition_table(): Disk read failed.
[  317.488943][T16517] Dev nbd6: unable to read RDB block 0
[  317.491691][T16517]  nbd6: unable to read partition table
[  317.499935][T16517] ldm_validate_partition_table(): Disk read failed.
[  317.502937][T16517] Dev nbd6: unable to read RDB block 0
[  317.506673][T16517]  nbd6: unable to read partition table
[  317.764284][T18105] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  317.767755][T18105] syzkaller0: entered promiscuous mode
[  317.769579][T18105] syzkaller0: entered allmulticast mode
[  317.792520][T18104] tipc: Resetting bearer <eth:syzkaller0>
[  317.806281][T18104] tipc: Disabling bearer <eth:syzkaller0>
[  317.914115][T18107] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  318.358710][T18113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4969'.
[  319.335524][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  319.408147][T18139] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  319.558004][T18148] netlink: 'syz.6.4980': attribute type 1 has an invalid length.
[  319.563909][T18148] 0X: renamed from caif0
[  319.568615][T18148] 0X: entered allmulticast mode
[  319.570408][T18148] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  319.668421][T18152] netlink: 'syz.4.4982': attribute type 1 has an invalid length.
[  319.909073][T18170] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode
[  320.127965][T18189] mac80211_hwsim hwsim21 wlan0: left allmulticast mode
[  320.130435][T18189] xfrm1: left promiscuous mode
[  320.132081][T18189] xfrm1: left allmulticast mode
[  320.633724][T18201] netlink: 'syz.6.4997': attribute type 1 has an invalid length.
[  321.048658][T18215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.052047][T18215] syzkaller0: entered promiscuous mode
[  321.054221][T18215] syzkaller0: entered allmulticast mode
[  321.069379][T18213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.073020][T18213] syzkaller0: entered promiscuous mode
[  321.075248][T18213] syzkaller0: entered allmulticast mode
[  321.081196][T18214] tipc: Resetting bearer <eth:syzkaller0>
[  321.097664][T18214] tipc: Disabling bearer <eth:syzkaller0>
[  321.122523][T18213] tipc: Resetting bearer <eth:syzkaller0>
[  321.131797][T18212] tipc: Resetting bearer <eth:syzkaller0>
[  321.147486][T18212] tipc: Disabling bearer <eth:syzkaller0>
[  321.317710][T18224] __nla_validate_parse: 11 callbacks suppressed
[  321.317728][T18224] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5004'.
[  321.462888][T18222] team0 (unregistering): Port device team_slave_0 removed
[  321.473576][T18222] team0 (unregistering): Port device team_slave_1 removed
[  321.495782][ T8896] syz0: Port: 1 Link DOWN
[  321.649332][T18235] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5009'.
[  321.712837][T18240] netlink: 'syz.4.5009': attribute type 9 has an invalid length.
[  321.717982][T18240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5009'.
[  321.736511][T18240] macvlan0: entered promiscuous mode
[  321.738803][T18240] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode
[  321.741747][T18240] macvlan0: entered allmulticast mode
[  321.743850][T18240] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode
[  321.801547][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5011'.
[  321.805078][T18245] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5011'.
[  321.810768][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5011'.
[  321.814237][T18245] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5011'.
[  321.880008][T18249] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.884073][T18249] syzkaller0: entered promiscuous mode
[  321.887220][T18249] syzkaller0: entered allmulticast mode
[  321.904062][T18248] tipc: Resetting bearer <eth:syzkaller0>
[  321.938326][T18248] tipc: Disabling bearer <eth:syzkaller0>
[  321.952709][T18251] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5014'.
[  321.968426][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5014'.
[  321.971834][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5014'.
[  322.733388][T18275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.737485][T18275] syzkaller0: entered promiscuous mode
[  322.739732][T18275] syzkaller0: entered allmulticast mode
[  322.762896][T18274] tipc: Resetting bearer <eth:syzkaller0>
[  322.779496][T18274] tipc: Disabling bearer <eth:syzkaller0>
[  323.001544][T18281] team0: Port device sit2 added
[  326.452034][T18323] __nla_validate_parse: 2 callbacks suppressed
[  326.452051][T18323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5039'.
[  326.568548][T18327] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.572288][T18327] syzkaller0: entered promiscuous mode
[  326.574510][T18327] syzkaller0: entered allmulticast mode
[  326.596741][T18326] tipc: Resetting bearer <eth:syzkaller0>
[  326.613778][T18326] tipc: Disabling bearer <eth:syzkaller0>
[  326.776310][T18333] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5042'.
[  326.970560][T18336] netlink: 'syz.4.5043': attribute type 4 has an invalid length.
[  326.970614][T18337] netlink: 'syz.4.5043': attribute type 4 has an invalid length.
[  326.978711][T18336] netlink: 'syz.4.5043': attribute type 4 has an invalid length.
[  327.273169][T18350] netlink: 'syz.4.5048': attribute type 39 has an invalid length.
[  327.314591][T18352] netlink: 'syz.4.5049': attribute type 1 has an invalid length.
[  327.341530][T18352] bond9: entered promiscuous mode
[  327.343478][T18352] bond9: entered allmulticast mode
[  327.345612][T18352] 8021q: adding VLAN 0 to HW filter on device bond9
[  327.360277][T18352] bridge7: entered promiscuous mode
[  327.362042][T18352] bridge7: entered allmulticast mode
[  327.364373][T18352] bond9: (slave bridge7): Enslaving as a backup interface with an up link
[  327.392244][T18352] mac80211_hwsim hwsim21 wlan0: left allmulticast mode
[  327.394928][T18352] mac80211_hwsim hwsim21 wlan0: left promiscuous mode
[  327.619136][T18367] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  327.622780][T18367] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  327.627458][T18367] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  327.808189][T18372] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5057'.
[  328.309463][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  328.315761][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  328.322958][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  328.337771][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  328.342300][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  328.643005][T18400] netlink: 'syz.4.5066': attribute type 8 has an invalid length.
[  328.659756][T18388] chnl_net:caif_netlink_parms(): no params data found
[  328.722145][T18403] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5067'.
[  328.726769][T18403] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5067'.
[  328.751687][T18388] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.754013][T18388] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.756503][T18388] bridge_slave_0: entered allmulticast mode
[  328.759288][T18388] bridge_slave_0: entered promiscuous mode
[  328.762731][T18388] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.765144][T18388] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.768208][T18388] bridge_slave_1: entered allmulticast mode
[  328.770935][T18388] bridge_slave_1: entered promiscuous mode
[  328.803038][T18388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  328.808564][T18388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  328.834874][T18388] team0: Port device team_slave_0 added
[  328.841916][T18388] team0: Port device team_slave_1 added
[  328.871709][T18388] batman_adv: batadv0: Adding interface: batadv_slave_0
[  328.873856][T18388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.884716][T18416] netlink: 'syz.4.5070': attribute type 10 has an invalid length.
[  328.885057][T18388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  328.887625][T18416] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5070'.
[  328.892458][T18388] batman_adv: batadv0: Adding interface: batadv_slave_1
[  328.900159][T18388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.911214][T18388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  328.916091][T18416] team0: Device geneve0 is of different type
[  328.918122][T18416] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  328.956312][T18388] hsr_slave_0: entered promiscuous mode
[  328.958802][T18388] hsr_slave_1: entered promiscuous mode
[  328.960970][T18388] debugfs: 'hsr0' already exists in 'hsr'
[  328.962695][T18388] Cannot create hsr debugfs directory
[  329.085866][T18388] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  329.091041][T18388] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  329.097605][T18388] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  329.103299][T18388] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  329.129205][T18388] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.131405][T18388] bridge0: port 2(bridge_slave_1) entered forwarding state
[  329.133661][T18388] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.135948][T18388] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.188660][T18388] 8021q: adding VLAN 0 to HW filter on device bond0
[  329.202131][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.208299][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.222879][T18388] 8021q: adding VLAN 0 to HW filter on device team0
[  329.238767][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.241136][ T9823] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.251147][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.253391][ T9823] bridge0: port 2(bridge_slave_1) entered forwarding state
[  329.411570][T18388] 8021q: adding VLAN 0 to HW filter on device batadv0
[  329.599621][T18388] veth0_vlan: entered promiscuous mode
[  329.613464][T18388] veth1_vlan: entered promiscuous mode
[  329.652090][T18388] veth0_macvtap: entered promiscuous mode
[  329.660954][T18388] veth1_macvtap: entered promiscuous mode
[  329.679810][T18388] batman_adv: batadv0: Interface activated: batadv_slave_0
[  329.692340][T18388] batman_adv: batadv0: Interface activated: batadv_slave_1
[  329.704122][T16165] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  329.708289][T16165] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  329.713020][T16165] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  329.728883][T16165] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  329.851382][ T7594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  329.854504][ T7594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  329.900063][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  329.903126][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  329.981792][T18445] netlink: 'syz.7.5060': attribute type 12 has an invalid length.
[  330.071073][T18445] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5060'.
[  330.082914][T18445] netlink: 'syz.7.5060': attribute type 1 has an invalid length.
[  330.089892][T18445] netlink: 'syz.7.5060': attribute type 2 has an invalid length.
[  330.092951][T18445] netlink: 1156 bytes leftover after parsing attributes in process `syz.7.5060'.
[  330.282582][T18458] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.380915][   T55] Bluetooth: hci7: command tx timeout
[  330.391820][T18463] vlan2: entered allmulticast mode
[  330.393823][T18463] veth1: entered allmulticast mode
[  330.709878][T18485] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  330.716343][T18485] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5089'.
[  330.719238][T18485] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5089'.
[  330.944586][T18499] veth3: entered promiscuous mode
[  331.145208][T18510] 8021q: VLANs not supported on lo
[  331.232152][T18514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.240511][T18514] syzkaller0: entered promiscuous mode
[  331.242208][T18514] syzkaller0: entered allmulticast mode
[  331.265422][T18513] tipc: Resetting bearer <eth:syzkaller0>
[  331.283318][T18513] tipc: Disabling bearer <eth:syzkaller0>
[  331.504723][T18520] !: renamed from dummy0
[  331.921724][T18526] __nla_validate_parse: 1 callbacks suppressed
[  331.921743][T18526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5105'.
[  332.455663][   T55] Bluetooth: hci7: command tx timeout
[  333.102945][T18561] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5118'.
[  333.412339][T18566] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5120'.
[  333.489657][T18569] netlink: 'syz.7.5121': attribute type 11 has an invalid length.
[  333.492843][T18569] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5121'.
[  333.706269][T18573] syzkaller1: entered allmulticast mode
[  333.745972][T18573] gretap1: entered promiscuous mode
[  333.747872][T18573] gretap1: entered allmulticast mode
[  334.535762][   T55] Bluetooth: hci7: command tx timeout
[  334.658033][T18578] validate_nla: 4 callbacks suppressed
[  334.658056][T18578] netlink: 'syz.7.5124': attribute type 1 has an invalid length.
[  334.752424][T18581] netlink: 'syz.7.5125': attribute type 13 has an invalid length.
[  334.759846][T18582] netlink: 'syz.7.5125': attribute type 13 has an invalid length.
[  334.763709][T18582] netlink: 'syz.7.5125': attribute type 17 has an invalid length.
[  334.764040][T18581] netlink: 'syz.7.5125': attribute type 17 has an invalid length.
[  334.828263][T18582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  334.839842][T18581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  336.123121][T18599] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  336.540250][T18615] syzkaller0: entered promiscuous mode
[  336.542410][T18615] syzkaller0: entered allmulticast mode
[  336.551192][T18615] syzkaller0: mtu less than device minimum
[  336.553864][T18615] netlink: 284 bytes leftover after parsing attributes in process `syz.7.5137'.
[  336.615748][   T55] Bluetooth: hci7: command tx timeout
[  336.650806][T18617] netlink: 'syz.7.5138': attribute type 1 has an invalid length.
[  336.686365][T18617] bond2: (slave gretap2): making interface the new active one
[  336.689845][T18617] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  336.956629][T18631] dummy0: entered promiscuous mode
[  336.958874][T18631] macsec1: entered promiscuous mode
[  336.961233][T18631] macsec1: entered allmulticast mode
[  336.963551][T18631] dummy0: entered allmulticast mode
[  336.969737][T18631] dummy0: left allmulticast mode
[  336.971982][T18631] dummy0: left promiscuous mode
[  337.103275][T18634] tipc: Started in network mode
[  337.106365][T18634] tipc: Node identity fed02443402e, cluster identity 4711
[  337.108971][T18634] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.112034][T18634] syzkaller0: entered promiscuous mode
[  337.114412][T18634] syzkaller0: entered allmulticast mode
[  337.147532][T18633] tipc: Resetting bearer <eth:syzkaller0>
[  337.167166][T18633] tipc: Disabling bearer <eth:syzkaller0>
[  337.602319][ T5841] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  337.607960][ T5841] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  337.610948][ T5841] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  337.617226][ T5841] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  337.620489][T18649] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.623370][T18649] bond_slave_1: entered promiscuous mode
[  337.624043][ T5841] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  337.625131][T18649] bond_slave_1: entered allmulticast mode
[  337.634443][T18649] tipc: Resetting bearer <eth:syzkaller0>
[  337.704354][T18648] tipc: Disabling bearer <eth:syzkaller0>
[  337.822426][T18646] chnl_net:caif_netlink_parms(): no params data found
[  337.866028][T18658] netlink: 'syz.7.5152': attribute type 11 has an invalid length.
[  337.886485][T18646] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.888831][T18646] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.891264][T18646] bridge_slave_0: entered allmulticast mode
[  337.894041][T18646] bridge_slave_0: entered promiscuous mode
[  337.898199][T18646] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.900445][T18646] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.902976][T18646] bridge_slave_1: entered allmulticast mode
[  337.907005][T18646] bridge_slave_1: entered promiscuous mode
[  337.941948][T18646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  337.948678][T18646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  337.989697][T18646] team0: Port device team_slave_0 added
[  337.993424][T18646] team0: Port device team_slave_1 added
[  338.013640][T18646] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.016990][T18646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.024839][T18646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.031567][T18646] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.033918][T18646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.043374][T18646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.078009][T18646] hsr_slave_0: entered promiscuous mode
[  338.080491][T18646] hsr_slave_1: entered promiscuous mode
[  338.083662][T18646] debugfs: 'hsr0' already exists in 'hsr'
[  338.086117][T18646] Cannot create hsr debugfs directory
[  338.221254][T18646] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  338.227664][T18646] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  338.234660][T18646] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  338.241133][T18646] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  338.277704][T18646] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.280636][T18646] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.283693][T18646] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.286692][T18646] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.357669][T18646] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.373958][ T9825] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.378469][ T9825] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.390804][T18646] 8021q: adding VLAN 0 to HW filter on device team0
[  338.410352][ T9825] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.413270][ T9825] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.424344][ T9825] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.427255][ T9825] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.598224][T18646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.836698][T18646] veth0_vlan: entered promiscuous mode
[  338.856452][T18646] veth1_vlan: entered promiscuous mode
[  338.911904][T18646] veth0_macvtap: entered promiscuous mode
[  338.928493][T18646] veth1_macvtap: entered promiscuous mode
[  338.980467][T18646] batman_adv: batadv0: Interface activated: batadv_slave_0
[  339.004067][T18646] batman_adv: batadv0: Interface activated: batadv_slave_1
[  339.031410][T16165] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.034877][T16165] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.039276][T16165] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.042554][T16165] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  339.050836][T18682] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5156'.
[  339.141424][ T9823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.144434][ T9823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.184292][ T9823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.188600][ T9823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.240074][T18685] syzkaller0: entered promiscuous mode
[  339.245651][T18685] syzkaller0: entered allmulticast mode
[  339.493840][T18693] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5159'.
[  339.561061][T18695] pimreg: entered allmulticast mode
[  339.565092][T18695] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5159'.
[  339.655862][   T55] Bluetooth: hci8: command tx timeout
[  340.122834][T18704] netlink: 'syz.7.5162': attribute type 8 has an invalid length.
[  340.362274][T18720] syzkaller0: entered promiscuous mode
[  340.364000][T18720] syzkaller0: entered allmulticast mode
[  340.479042][   T61] block nbd0: Possible stuck request ffff888021728000: control (read@0,1024B). Runtime 240 seconds
[  340.483570][   T61] block nbd0: Possible stuck request ffff888021728200: control (read@1024,1024B). Runtime 240 seconds
[  340.488848][   T61] block nbd0: Possible stuck request ffff888021728400: control (read@2048,1024B). Runtime 240 seconds
[  340.493847][   T61] block nbd0: Possible stuck request ffff888021728600: control (read@3072,1024B). Runtime 240 seconds
[  340.544129][T18725] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5169'.
[  340.560241][T18722] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  340.562949][T18722] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  340.575496][T18725] bridge0: entered promiscuous mode
[  340.643880][T18722] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  340.662504][T18722] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  340.799408][T18722] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  340.825183][T18732] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5171'.
[  340.828574][T18722] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  340.887485][T18722] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  340.926026][T18722] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  340.955649][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5172'.
[  341.028300][T18736] team_slave_0: entered promiscuous mode
[  341.031595][T18736] team_slave_1: entered promiscuous mode
[  341.125858][T18736] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  341.158773][T18722] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  341.178609][T18722] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  341.255233][T18740] netlink: 'syz.4.5174': attribute type 1 has an invalid length.
[  341.260882][T18740] netlink: 'syz.4.5174': attribute type 1 has an invalid length.
[  341.268749][T18741] netlink: 'syz.4.5174': attribute type 1 has an invalid length.
[  341.271987][T18741] netlink: 'syz.4.5174': attribute type 1 has an invalid length.
[  341.289904][T18722] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  341.292328][T18722] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  341.336250][T18722] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  341.338554][T18722] Bluetooth: hci7: Error when powering off device on rfkill (-4)
[  341.401757][T18722] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  341.404496][T18722] Bluetooth: hci8: Error when powering off device on rfkill (-4)
[  341.404582][T18740] netlink: 'syz.4.5174': attribute type 1 has an invalid length.
[  341.412969][T18741] netlink: 'syz.4.5174': attribute type 1 has an invalid length.
[  341.440214][T18740] 8021q: adding VLAN 0 to HW filter on device bond10
[  341.606995][T18748] tipc: Started in network mode
[  341.608791][T18748] tipc: Node identity 2af393bd26a3, cluster identity 4711
[  341.616598][T18748] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.624360][T18748] syzkaller0: entered promiscuous mode
[  341.645785][T18748] syzkaller0: entered allmulticast mode
[  341.707934][T18747] tipc: Resetting bearer <eth:syzkaller0>
[  341.724887][T18747] tipc: Disabling bearer <eth:syzkaller0>
[  341.797758][T18758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5179'.
[  342.101884][T18774] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  342.331348][T18793] netlink: 'syz.8.5191': attribute type 11 has an invalid length.
[  342.579162][T18800] 8021q: adding VLAN 0 to HW filter on device bond3
[  342.604211][T18800] bond_slave_0: entered promiscuous mode
[  342.607380][T18800] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  342.612427][T18800] bond3: (slave macvlan2): Enslaving as a backup interface with an up link
[  342.770058][T18809] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5197'.
[  343.053889][T18817] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5199'.
[  343.059460][T18817] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5199'.
[  343.309563][T18840] netlink: 'syz.4.5208': attribute type 83 has an invalid length.
[  344.291205][T18894] pim6reg1: entered promiscuous mode
[  344.293359][T18894] pim6reg1: entered allmulticast mode
[  344.475253][T18918] netlink: 'syz.7.5234': attribute type 32 has an invalid length.
[  344.485619][T18918] __nla_validate_parse: 5 callbacks suppressed
[  344.485630][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5234'.
[  344.499679][T18920] bridge_slave_0: left allmulticast mode
[  344.501498][T18920] bridge_slave_0: left promiscuous mode
[  344.503301][T18920] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.511084][T18920] bridge_slave_1: left allmulticast mode
[  344.513594][T18920] bridge_slave_1: left promiscuous mode
[  344.522045][T18920] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.533609][T18920] bond0: (slave bond_slave_0): Releasing backup interface
[  344.544229][T18920] bond0: (slave bond_slave_1): Releasing backup interface
[  344.554810][T18920] team_slave_0: left promiscuous mode
[  344.564351][T18920] team0: Port device team_slave_0 removed
[  344.569205][T18920] team_slave_1: left promiscuous mode
[  344.576639][T18920] team0: Port device team_slave_1 removed
[  344.580578][T18920] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  344.583648][T18920] batman_adv: batadv0: Removing interface: batadv_slave_0
[  344.590448][T18920] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  344.593469][T18920] batman_adv: batadv0: Removing interface: batadv_slave_1
[  344.650688][T18918] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  345.113933][T18944] batman_adv: batadv0: Adding interface: dummy0
[  345.117262][T18944] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.129916][T18944] batman_adv: batadv0: Interface activated: dummy0
[  345.153312][T18944] batman_adv: batadv0: Adding interface: ip6gretap1
[  345.156594][T18944] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.167470][T18944] batman_adv: batadv0: Interface activated: ip6gretap1
[  345.835226][T18956] IPv6: sit2: Disabled Multicast RS
[  346.011037][T18961] dvmrp0: left allmulticast mode
[  346.065032][T18964] netlink: 'syz.7.5250': attribute type 10 has an invalid length.
[  346.087026][T18961] rdma_rxe: rxe_newlink: failed to add lo
[  346.114136][T18964] 8021q: adding VLAN 0 to HW filter on device team0
[  346.120206][T18964] team_slave_0: entered promiscuous mode
[  346.122045][T18964] team_slave_1: entered promiscuous mode
[  346.124360][T18964] bond0: (slave team0): Enslaving as an active interface with an up link
[  346.138569][T18964] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5250'.
[  346.264932][T18977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5254'.
[  346.614403][T18997] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5261'.
[  346.646365][T18997] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5261'.
[  346.765850][T19001] syzkaller0: entered promiscuous mode
[  346.767919][T19001] syzkaller0: entered allmulticast mode
[  346.880751][T19005] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5264'.
[  346.982425][T19009] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5266'.
[  347.004090][T19009] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5266'.
[  347.009898][T19009] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5266'.
[  347.130579][T19023] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5271'.
[  347.277445][T19028] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.302618][T19034] bridge0: left promiscuous mode
[  347.306999][T19034] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  347.359651][T19028] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.375657][T19036] team_slave_0: left promiscuous mode
[  347.378895][T19036] team_slave_1: left promiscuous mode
[  347.520530][T19036] bond0: (slave team0): Releasing backup interface
[  347.531364][T19036] team0 (unregistering): Port device team_slave_0 removed
[  347.538275][T19036] team0 (unregistering): Port device team_slave_1 removed
[  347.587107][T19028] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.691010][T19028] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.853733][T19047] macsec0: entered promiscuous mode
[  347.856428][T19047] erspan0: entered promiscuous mode
[  347.861903][T19047] erspan0: left promiscuous mode
[  347.888030][   T13] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.894867][   T13] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.909474][ T5908] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.947241][   T13] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.010692][T19056] netlink: 'syz.8.5283': attribute type 1 has an invalid length.
[  348.013825][T19056] netlink: 'syz.8.5283': attribute type 1 has an invalid length.
[  348.070246][T19056] syzkaller1: entered promiscuous mode
[  348.072380][T19056] syzkaller1: entered allmulticast mode
[  348.082323][T19056] netlink: 'syz.8.5283': attribute type 1 has an invalid length.
[  348.113230][T19056] 8021q: adding VLAN 0 to HW filter on device bond1
[  348.162894][T19062] syzkaller1: entered promiscuous mode
[  348.165245][T19062] syzkaller1: entered allmulticast mode
[  348.253123][T19064] veth1_to_bond: entered allmulticast mode
[  348.319979][T19066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.323307][T19066] syzkaller0: entered promiscuous mode
[  348.326317][T19066] syzkaller0: entered allmulticast mode
[  348.336466][T19066] tipc: Resetting bearer <eth:syzkaller0>
[  348.339354][T19065] tipc: Resetting bearer <eth:syzkaller0>
[  348.354055][T19065] tipc: Disabling bearer <eth:syzkaller0>
[  348.507277][T19068] geneve2: entered promiscuous mode
[  348.509760][T19068] geneve2: entered allmulticast mode
[  348.517563][   T12] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 56062 - 0
[  348.521208][   T12] netdevsim netdevsim7 netdevsim0: set [1, 2] type 2 family 0 port 56185 - 0
[  348.526110][   T12] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 56062 - 0
[  348.529859][   T12] netdevsim netdevsim7 netdevsim1: set [1, 2] type 2 family 0 port 56185 - 0
[  348.533536][   T12] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 56062 - 0
[  348.538937][   T12] netdevsim netdevsim7 netdevsim2: set [1, 2] type 2 family 0 port 56185 - 0
[  348.542483][   T12] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 56062 - 0
[  348.550632][   T12] netdevsim netdevsim7 netdevsim3: set [1, 2] type 2 family 0 port 56185 - 0
[  348.871869][T19089] netlink: 'syz.7.5294': attribute type 1 has an invalid length.
[  348.899255][T19090] netlink: 'syz.7.5294': attribute type 3 has an invalid length.
[  348.969841][T19061] veth1_to_bond: left allmulticast mode
[  349.082008][T19105] netlink: 'syz.4.5299': attribute type 1 has an invalid length.
[  349.085229][T19105] netlink: 'syz.4.5299': attribute type 1 has an invalid length.
[  349.125757][T19108] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.196104][T19108] syzkaller0: entered promiscuous mode
[  349.198263][T19108] syzkaller0: entered allmulticast mode
[  349.201460][T19108] tipc: Resetting bearer <eth:syzkaller0>
[  349.212336][T19107] tipc: Resetting bearer <eth:syzkaller0>
[  350.189209][  T973] tipc: Node number set to 3204326467
[  351.154560][T19107] tipc: Disabling bearer <eth:syzkaller0>
[  351.244138][T19119] netlink: 'syz.4.5303': attribute type 4 has an invalid length.
[  351.296746][T19123] __nla_validate_parse: 4 callbacks suppressed
[  351.296767][T19123] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5304'.
[  351.307505][T19123] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5304'.
[  351.334060][T19123] 8021q: adding VLAN 0 to HW filter on device bond5
[  351.351018][T19123] netlink: 4208 bytes leftover after parsing attributes in process `syz.7.5304'.
[  351.356506][T19127] netlink: 4208 bytes leftover after parsing attributes in process `syz.7.5304'.
[  351.499477][T19138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5308'.
[  351.526189][T19132] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.529761][T19132] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 56062 - 0
[  351.532873][T19132] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 56185 - 0
[  351.599984][T19132] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.603662][T19132] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 56062 - 0
[  351.607752][T19132] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 56185 - 0
[  351.674512][T19132] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.681246][T19132] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 56062 - 0
[  351.685449][T19132] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 56185 - 0
[  351.747606][T19132] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.750858][T19132] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 56062 - 0
[  351.754070][T19132] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 56185 - 0
[  351.854981][   T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 56185 - 0
[  351.859224][   T12] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 56062 - 0
[  351.863159][   T12] netdevsim netdevsim7 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  351.879467][   T13] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 56185 - 0
[  351.882793][   T13] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 56062 - 0
[  351.888907][   T13] netdevsim netdevsim7 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  351.904543][   T13] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 56185 - 0
[  351.908632][   T13] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 56062 - 0
[  351.912181][   T13] netdevsim netdevsim7 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  351.929653][   T12] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 56185 - 0
[  351.933092][   T12] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 56062 - 0
[  351.940463][   T12] netdevsim netdevsim7 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  352.316788][T19149] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5313'.
[  352.328181][T19149] bridge_slave_1: left allmulticast mode
[  352.335897][T19149] bridge_slave_1: left promiscuous mode
[  352.338650][T19149] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.350019][T19149] bridge_slave_0: left allmulticast mode
[  352.352484][T19149] bridge_slave_0: left promiscuous mode
[  352.355107][T19149] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.372507][T19154] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5314'.
[  352.584097][T19156] sctp: [Deprecated]: syz.4.5315 (pid 19156) Use of int in maxseg socket option.
[  352.584097][T19156] Use struct sctp_assoc_value instead
[  352.635184][T19166] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5318'.
[  353.259960][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  353.471665][T19183] 8021q: adding VLAN 0 to HW filter on device team0
[  353.480452][T19183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  353.786531][T19188] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5327'.
[  353.793203][T19188] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5327'.
[  353.814734][T19187] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  353.998528][T19193] vlan0: entered allmulticast mode
[  354.000911][T19193] bridge0: entered allmulticast mode
[  354.061540][T19199] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode
[  354.276218][T19208] netlink: 'syz.8.5333': attribute type 58 has an invalid length.
[  354.424139][T19219] netlink: 'syz.8.5337': attribute type 1 has an invalid length.
[  354.878638][T19227] netlink: 'syz.4.5341': attribute type 13 has an invalid length.
[  354.881041][T19227] netlink: 'syz.4.5341': attribute type 17 has an invalid length.
[  354.895243][T19227] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  355.081185][T19247] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.137221][T19247] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.154004][T19249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  355.184294][T19247] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.260486][T19247] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.348263][ T5908] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.351234][ T5908] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.362890][ T5908] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.381155][ T5908] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.500461][T19270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  355.502794][T19270] IPv6: NLM_F_CREATE should be set when creating new route
[  355.586891][T19274] gtp1: entered promiscuous mode
[  356.451103][T19347] Bluetooth: MGMT ver 1.23
[  356.461785][T19348] __nla_validate_parse: 38 callbacks suppressed
[  356.461804][T19348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5377'.
[  356.480250][T19339] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5372'.
[  356.489133][T19339] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5372'.
[  356.686333][T19356] 8021q: VLANs not supported on wg2
[  356.725132][T19361] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5381'.
[  356.782009][T19365] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.785078][T19365] syzkaller0: entered promiscuous mode
[  356.788227][T19365] syzkaller0: entered allmulticast mode
[  356.820250][T19365] tipc: Resetting bearer <eth:syzkaller0>
[  356.834366][T19364] tipc: Resetting bearer <eth:syzkaller0>
[  356.859366][T19367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5384'.
[  356.864213][T19364] tipc: Disabling bearer <eth:syzkaller0>
[  356.919950][T19370] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.930162][T19370] syzkaller0: mtu less than device minimum
[  356.954790][T19373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5386'.
[  356.954788][T19372] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5386'.
[  356.998144][T19372] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5386'.
[  357.031390][T19376] geneve4: entered promiscuous mode
[  357.035018][T16165] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  357.038910][T16165] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  357.043832][T16165] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  357.049277][T16165] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  357.502907][T19412] IPv6: sit2: Disabled Multicast RS
[  357.506709][T19412] sit2: entered allmulticast mode
[  357.748525][T19428] netlink: 'syz.8.5404': attribute type 1 has an invalid length.
[  357.799874][T19428] 8021q: adding VLAN 0 to HW filter on device bond3
[  357.804842][T19428] bond2: (slave bond3): making interface the new active one
[  357.812452][T19428] bond2: (slave bond3): Enslaving as an active interface with an up link
[  357.882563][T19437] netlink: 'syz.7.5407': attribute type 39 has an invalid length.
[  357.933536][T19428] netlink: 'syz.8.5404': attribute type 12 has an invalid length.
[  358.021051][T19438] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[  358.035687][ T8896] tipc: Node number set to 3764085794
[  358.202398][T19455] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5413'.
[  358.271526][T19455] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5413'.
[  358.275132][T19455] openvswitch: netlink: Flow key attr not present in new flow.
[  358.304579][ T8896] IPVS: starting estimator thread 0...
[  358.475672][T19459] IPVS: using max 57 ests per chain, 136800 per kthread
[  358.564863][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  358.567465][    C0] vcan0: j1939_xtp_rx_dat: no rx connection found
[  358.569866][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  358.572275][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  358.574932][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  358.577576][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  358.580277][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  358.582940][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  358.585927][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  358.588546][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  358.591161][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  358.593882][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  358.596432][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  358.598833][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  358.601273][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  358.603739][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  358.606436][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  358.609309][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  358.612473][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  358.615569][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  358.618634][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  358.621680][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  358.624716][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  358.627835][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  358.630888][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  358.633893][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  358.637044][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  358.640069][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  358.643162][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  358.646267][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  358.649291][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  358.652317][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  358.789792][T19466] netlink: 'syz.4.5417': attribute type 10 has an invalid length.
[  358.839693][T19468] netlink: 'syz.4.5418': attribute type 1 has an invalid length.
[  358.861797][T19468] 8021q: adding VLAN 0 to HW filter on device bond11
[  358.867541][T19468] mac80211_hwsim hwsim21 wlan0: left allmulticast mode
[  358.879136][T19468] vlan0: entered allmulticast mode
[  358.881172][T19468] veth1: entered allmulticast mode
[  358.884462][T19468] bond11: (slave vlan0): Opening slave failed
[  359.092806][T19477] syzkaller1: entered promiscuous mode
[  359.094738][T19477] syzkaller1: entered allmulticast mode
[  359.130522][T19479] bridge11: port 1(veth3) entered blocking state
[  359.132948][T19479] bridge11: port 1(veth3) entered disabled state
[  359.135742][T19479] veth3: entered allmulticast mode
[  359.138982][T19479] veth3: entered promiscuous mode
[  359.144559][T19479] bridge11: port 2(veth0_to_bond) entered blocking state
[  359.150542][T19479] bridge11: port 2(veth0_to_bond) entered disabled state
[  359.153275][T19479] veth0_to_bond: entered allmulticast mode
[  359.156899][T19479] veth0_to_bond: entered promiscuous mode
[  359.252106][T19482] netlink: 'syz.4.5424': attribute type 9 has an invalid length.
[  359.560308][T19510] rdma_rxe: rxe_newlink: failed to add lo
[  359.602438][T19508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  359.619519][T19513] : entered promiscuous mode
[  360.617078][T19570] netlink: 'syz.7.5452': attribute type 30 has an invalid length.
[  360.629608][T19570] netlink: 'syz.7.5452': attribute type 30 has an invalid length.
[  360.632795][T16165] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  360.632838][T16165] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  360.639647][T16165] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  360.660326][T16165] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  361.308136][T19592] netlink: 'syz.8.5458': attribute type 1 has an invalid length.
[  361.457162][T19594] x9: renamed from bridge_slave_0 (while UP)
[  361.462392][T19594] netlink: 'syz.8.5459': attribute type 5 has an invalid length.
[  361.649628][T19604] __nla_validate_parse: 13 callbacks suppressed
[  361.649643][T19604] netlink: 19 bytes leftover after parsing attributes in process `syz.7.5461'.
[  361.656531][T19603] netlink: 332 bytes leftover after parsing attributes in process `syz.8.5462'.
[  361.753974][T19609] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5466'.
[  361.857497][T19624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5470'.
[  361.969967][T19637] netlink: 128 bytes leftover after parsing attributes in process `syz.8.5471'.
[  361.973127][T19637] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5471'.
[  362.053425][ T5908] netdevsim netdevsim7 eth0: set [1, 3] type 2 family 0 port 20001 - 0
[  362.066029][ T5908] netdevsim netdevsim7 eth1: set [1, 3] type 2 family 0 port 20001 - 0
[  362.074458][ T5908] netdevsim netdevsim7 eth2: set [1, 3] type 2 family 0 port 20001 - 0
[  362.078312][ T5908] netdevsim netdevsim7 eth3: set [1, 3] type 2 family 0 port 20001 - 0
[  362.099478][T19643] openvswitch: netlink: Missing key (keys=40, expected=80)
[  362.104886][T19643] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5475'.
[  362.182838][T19653] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5478'.
[  362.450871][T19671] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5486'.
[  362.595239][T19681] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5487'.
[  362.773088][T19692] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.852542][T19692] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.906042][T19692] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.987596][T19692] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.085648][   T13] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.103866][   T13] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.115785][   T13] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.140510][ T5908] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.284276][T19712] syz.7.5497 (19712) used greatest stack depth: 18376 bytes left
[  363.332483][T19717] syzkaller0: entered promiscuous mode
[  363.334349][T19717] syzkaller0: entered allmulticast mode
[  363.458838][T19722] tun0: tun_chr_ioctl cmd 2147767520
[  363.759722][T19736] geneve0: entered allmulticast mode
[  364.440501][T19745] team0: Device is already in use.
[  365.116314][T19784] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  365.638285][T19818] validate_nla: 4 callbacks suppressed
[  365.638302][T19818] netlink: 'syz.8.5531': attribute type 7 has an invalid length.
[  365.678398][T19826] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.681839][T19826] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode
[  365.684982][T19826] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode
[  365.694453][T19826] syzkaller0: mtu greater than device maximum
[  365.861026][T19834] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.864919][T19834] syzkaller0: entered promiscuous mode
[  365.866996][T19834] syzkaller0: entered allmulticast mode
[  365.893464][T19834] tipc: Resetting bearer <eth:syzkaller0>
[  365.904420][T19833] tipc: Resetting bearer <eth:syzkaller0>
[  365.924105][T19833] tipc: Disabling bearer <eth:syzkaller0>
[  365.931729][T19837] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  365.937616][T19837] syzkaller0: entered promiscuous mode
[  365.939721][T19837] syzkaller0: entered allmulticast mode
[  365.944690][T19837] tipc: Resetting bearer <eth:syzkaller0>
[  366.459164][T19867] bridge0: port 2(vlan0) entered blocking state
[  366.462213][T19867] bridge0: port 2(vlan0) entered disabled state
[  366.464994][T19867] vlan0: entered allmulticast mode
[  366.469632][T19867] vlan0: left allmulticast mode
[  366.665189][T19878] __nla_validate_parse: 13 callbacks suppressed
[  366.665206][T19878] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5551'.
[  366.682021][T19880] netlink: 'syz.7.5552': attribute type 39 has an invalid length.
[  366.789217][T19890] x9: renamed from bridge_slave_0 (while UP)
[  366.800074][T19890] netlink: 'syz.7.5556': attribute type 12 has an invalid length.
[  367.004322][T19907] bond0: (slave vlan0): Opening slave failed
[  367.076723][T19912] netlink: 'syz.8.5561': attribute type 2 has an invalid length.
[  367.079620][T19912] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5561'.
[  367.084644][T19912] netlink: 112 bytes leftover after parsing attributes in process `syz.8.5561'.
[  367.165780][T19918] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.553583][T19943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5568'.
[  367.590731][T19943] pim6reg: entered allmulticast mode
[  367.593498][T19943] pim6reg: left allmulticast mode
[  367.721392][T19957] pim6reg1: entered promiscuous mode
[  367.723094][T19957] pim6reg1: entered allmulticast mode
[  367.904791][T19963] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5570'.
[  367.941040][T19969] tipc: Resetting bearer <eth:syzkaller0>
[  368.042510][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5574'.
[  368.051320][T19975] netlink: 'syz.4.5574': attribute type 30 has an invalid length.
[  368.070005][T16165] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  368.072989][T16165] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  368.076271][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5574'.
[  368.079413][T16165] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  368.082045][T16165] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  368.085082][T19975] netlink: 'syz.4.5574': attribute type 30 has an invalid length.
[  368.340148][T20003] netlink: 'syz.8.5581': attribute type 10 has an invalid length.
[  368.342540][T20003] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5581'.
[  368.356957][T20003] geneve0: entered promiscuous mode
[  368.359987][T20003] team0: Port device geneve0 added
[  368.932775][T20014] veth0_to_bond: left allmulticast mode
[  368.934695][T20014] veth0_to_bond: left promiscuous mode
[  368.937351][T20014] bridge11: port 2(veth0_to_bond) entered disabled state
[  368.942208][T20014] bond2: left allmulticast mode
[  368.944162][T20014] bond2: left promiscuous mode
[  368.947023][T20014] bridge0: port 1(bond2) entered disabled state
[  368.952277][T20014] bond4: (slave ip6gretap1): Releasing active interface
[  368.959455][T20014] bond0: (slave gretap1): Releasing active interface
[  368.965172][T20014] team0: Port device sit2 removed
[  368.968626][T20014] bond9: (slave bridge7): Releasing backup interface
[  368.971658][T20014] bridge7: left promiscuous mode
[  368.973505][T20014] bridge7: left allmulticast mode
[  368.977487][T20014] veth3: left allmulticast mode
[  368.979256][T20014] veth3: left promiscuous mode
[  368.981791][T20014] bridge11: port 1(veth3) entered disabled state
[  368.992035][T20015] team0: Mode changed to "broadcast"
[  369.183169][T20026] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  369.201800][T20026] syzkaller0: mtu greater than device maximum
[  369.396486][T20037] ipvlan2: entered promiscuous mode
[  369.399125][T20037] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  369.410038][T20040] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5592'.
[  369.490577][T20045] mac80211_hwsim hwsim35 ": renamed from wlan0
[  369.764338][T20064] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5600'.
[  369.768205][T20064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  370.141140][T20096] netlink: 'syz.4.5610': attribute type 1 has an invalid length.
[  370.163531][T20096] 8021q: adding VLAN 0 to HW filter on device bond12
[  370.190424][T20096] bond12: (slave geneve5): making interface the new active one
[  370.196410][T20096] bond12: (slave geneve5): Enslaving as an active interface with an up link
[  370.332405][T20115] IPv6: sit3: Disabled Multicast RS
[  370.412657][T20117] netlink: 'syz.4.5617': attribute type 1 has an invalid length.
[  370.438246][T20117] bond13: (slave vti0): The slave device specified does not support setting the MAC address
[  370.444159][T20117] bond13: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  370.452041][T20117] bond13: (slave vti0): making interface the new active one
[  370.456060][T20117] bond13: (slave vti0): Enslaving as an active interface with an up link
[  370.536714][   T61] block nbd0: Possible stuck request ffff888021728000: control (read@0,1024B). Runtime 270 seconds
[  370.540605][   T61] block nbd0: Possible stuck request ffff888021728200: control (read@1024,1024B). Runtime 270 seconds
[  370.544500][   T61] block nbd0: Possible stuck request ffff888021728400: control (read@2048,1024B). Runtime 270 seconds
[  370.548526][   T61] block nbd0: Possible stuck request ffff888021728600: control (read@3072,1024B). Runtime 270 seconds
[  370.561038][T20126] macvlan0: left promiscuous mode
[  370.562933][T20126] macvlan0: left allmulticast mode
[  370.564905][T20126] bond9: left promiscuous mode
[  370.567044][T20126] bond9: left allmulticast mode
[  370.572943][T20126] tipc: Resetting bearer <eth:syzkaller0>
[  370.576828][T20126] syzkaller0: left promiscuous mode
[  370.578436][T20126] syzkaller0: left allmulticast mode
[  370.582413][T20126] geneve4: left promiscuous mode
[  370.624069][ T5908] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.632778][ T5908] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.636058][ T5908] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.639385][ T5908] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.651007][ T5908] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.654237][ T5908] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.662861][ T5908] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.666680][ T5908] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.684059][T20155] __nla_validate_parse: 7 callbacks suppressed
[  371.684072][T20155] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5627'.
[  371.684397][T20156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5627'.
[  371.691557][T20155] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5627'.
[  371.703215][T20156] bridge0: port 1(batadv1) entered blocking state
[  371.710460][T20156] bridge0: port 1(batadv1) entered disabled state
[  371.713316][T20156] batadv1: entered allmulticast mode
[  371.723672][T20156] batadv1: entered promiscuous mode
[  371.814694][T20167] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  371.832338][T20167] syzkaller0: mtu greater than device maximum
[  372.028076][T20181] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.5634'.
[  372.142774][ T7594] tipc: Resetting bearer <eth:syzkaller0>
[  372.148258][T20193] bridge0: port 1(erspan0) entered blocking state
[  372.151916][T20193] bridge0: port 1(erspan0) entered disabled state
[  372.155117][T20193] erspan0: entered allmulticast mode
[  372.162250][T20193] erspan0: entered promiscuous mode
[  372.206688][T16954] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  372.210728][T16954] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  372.240568][T20199] bpq0: entered promiscuous mode
[  372.391955][T20202] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5641'.
[  372.474041][T20218] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  372.647953][T20233] tipc: Resetting bearer <eth:syzkaller0>
[  372.667023][T20235] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5649'.
[  372.672325][T20233] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  372.754004][T20240] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  372.759233][T20240] tipc: Resetting bearer <eth:syzkaller0>
[  372.771237][T20240] syzkaller0: mtu greater than device maximum
[  373.819052][T20264] IPv6: syztnl1: Disabled Multicast RS
[  374.258111][T20284] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  374.263394][T20284] syzkaller0: entered promiscuous mode
[  374.268328][T20284] syzkaller0: entered allmulticast mode
[  374.283330][T20284] syzkaller0: mtu greater than device maximum
[  374.724159][T20295] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5668'.
[  374.734035][T20295] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5668'.
[  374.783132][T20295] tipc: Resetting bearer <eth:syzkaller0>
[  374.786051][T20295] tipc: Resetting bearer <eth:syzkaller0>
[  375.067208][T20303] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5670'.
[  375.131749][ T8896] IPVS: starting estimator thread 0...
[  375.235596][T20307] IPVS: using max 61 ests per chain, 146400 per kthread
[  375.559739][T20331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5675'.
[  375.572704][T20324] sctp: [Deprecated]: syz.4.5675 (pid 20324) Use of struct sctp_assoc_value in delayed_ack socket option.
[  375.572704][T20324] Use struct sctp_sack_info instead
[  375.596438][T20324] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  375.606681][T20332] netlink: 'syz.7.5677': attribute type 1 has an invalid length.
[  375.644120][T20332] 8021q: adding VLAN 0 to HW filter on device bond7
[  375.992712][T20354] netlink: 'syz.7.5683': attribute type 12 has an invalid length.
[  376.050250][T20354] vlan0: entered promiscuous mode
[  376.685726][T20385] wg1: entered promiscuous mode
[  376.695734][T20385] wg1: entered allmulticast mode
[  376.757644][T20389] __nla_validate_parse: 5 callbacks suppressed
[  376.757663][T20389] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5690'.
[  377.342066][T20405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5693'.
[  377.360832][T20405] macvtap0: entered promiscuous mode
[  377.364365][T20405] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode
[  377.371898][T20405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5693'.
[  377.440478][T20407] netlink: 308 bytes leftover after parsing attributes in process `syz.4.5694'.
[  377.444130][T20407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5694'.
[  377.524632][T20413] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5695'.
[  377.839586][T20434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5699'.
[  378.159974][T20448] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5703'.
[  378.502351][T20460] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5708'.
[  378.505728][T20461] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5708'.
[  378.570440][T20465] netlink: 'syz.4.5710': attribute type 1 has an invalid length.
[  378.578044][T20465] netlink: 'syz.4.5710': attribute type 2 has an invalid length.
[  378.583428][T20465] netlink: 'syz.4.5710': attribute type 1 has an invalid length.
[  378.588713][T20465] netlink: 'syz.4.5710': attribute type 2 has an invalid length.
[  378.710211][T16954] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  378.713299][T16954] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  378.718493][T16954] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  378.721161][T16954] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  378.737458][T15444] unregister_netdevice: waiting for syz_tun to become free. Usage count = 3
[  378.740695][T15444] ref_tracker: netdev@ffff888121db8610 has 1/1 users at
[  378.740695][T15444]      ib_device_set_netdev+0x31f/0x6d0
[  378.740695][T15444]      siw_newlink+0x40c/0xd70
[  378.740695][T15444]      nldev_newlink+0x4a5/0x5a0
[  378.740695][T15444]      rdma_nl_rcv+0x6ae/0x980
[  378.740695][T15444]      netlink_unicast+0x82f/0x9e0
[  378.740695][T15444]      netlink_sendmsg+0x805/0xb30
[  378.740695][T15444]      __sock_sendmsg+0x21c/0x270
[  378.740695][T15444]      ____sys_sendmsg+0x505/0x830
[  378.740695][T15444]      ___sys_sendmsg+0x21f/0x2a0
[  378.740695][T15444]      __x64_sys_sendmsg+0x19b/0x260
[  378.740695][T15444]      do_syscall_64+0xfa/0x3b0
[  378.740695][T15444]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.740695][T15444] 

VM DIAGNOSIS:
10:13:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000007ffff RDI=0000000000080000 RBP=00000000000003f8 RSP=ffffc90006db6810
R8 =ffff888020d80237 R9 =1ffff110041b0046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99afa912 R14=ffffffff99def3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f27e15f66c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe95c174c40 CR3=0000000026b22000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=ffff888032aad640 RDX=0000000000000000
RSI=0000000000001000 RDI=0000000000000000 RBP=000000000003b648 RSP=ffffc900067472d8
R8 =0000000000000000 R9 =ffffffff822e4c5d R10=dffffc0000000000 R11=fffff940001db241
R12=000000000003b648 R13=dffffc0000000000 R14=ffff88805fffa4f0 R15=0000000000001000
RIP=ffffffff8b798120 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555d9e5500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fac7b6e56c0 CR3=0000000027bde000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fac7aa12e53
XMM06=0000000000000000 00007fac7aa12e4d XMM07=0000000000000000 00007fac7aa12e61
XMM08=0000000000000000 00007fac7aa12ee7 XMM09=0000000000000000 00007fac7aa12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
