last executing test programs:

17.872042475s ago: executing program 2 (id=923):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
socket$rds(0x15, 0x5, 0x0)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x271f, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
bind$rxrpc(r0, &(0x7f0000000340)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x4, @mcast2, 0x2}}, 0x24)
listen(r0, 0x8)
listen(r0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x530, 0x250, 0x160, 0xffffffff, 0x340, 0x250, 0x460, 0x460, 0xffffffff, 0x460, 0x460, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x4, 0x1, [0x49, 0x568, 0x7ff, 0x6, 0x3, 0x8, 0x9b48, 0x7, 0x7, 0x8, 0x0, 0x1000, 0x9, 0x1, 0x3]}}, @common=@eui64={{0x28}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@empty, @ipv6=@private0, @icmp_id=0x64, @gre_key=0xbe1}}}, {{@ipv6={@mcast1, @private0, [0x0, 0xffffff00, 0xff, 0xff000000], [0x0, 0x0, 0xffffff00, 0xffffff00], 'hsr0\x00', 'vlan0\x00', {}, {}, 0x3b, 0x6, 0x4, 0x4}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}, @ipv4=@multicast1, @icmp_id=0x68, @gre_key=0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, '\x00', {0x8}}}}, {{@ipv6={@empty, @private2, [0xffffff00, 0xffffff00, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffffff], 'geneve1\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x4, 0x7f, 0x2, 0x10}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x6, 0xff, 0x9, 0x85, 0x9, 0x466, 0xc08}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@broadcast, @port=0x4e20, @icmp_id=0x65}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)

17.803869536s ago: executing program 2 (id=926):
r0 = socket(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000004956c94496abfa200000000000007020000f8ffff0100000000000000ddd955a2e6127aa7ed00b704eb048720bc2c5fb6970000001000958e32e1650424446cbdba6f2a3eeb060000002f32c62a59e72640a5d4a4d93670d54c9d597b30980f8650559a08e36d4421fb12628ad5825d52061afc95813c736861940561fffb76e42dd7f4b1e634589e38bd8b7f46137faa8a77963afeb5a6e67f8a32aab6ff3bbf9927f2e79ab6de3cf5db00ce7b4733608e499650d6b1cabd29db661d439b9b281e3c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000041401002dbd7000fcdbdf2508000100010040000800010100000000080001000000065fba209f7f21980000"], 0x30}, 0x1, 0x0, 0x0, 0x671ec167a4b76124}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r2}, 0x18)
unshare(0x64000600)
r4 = socket$inet6(0x10, 0x2, 0x0)
write(r4, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c000000000000", 0xf5)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x18, @mcast1, @mcast2={0xff, 0x3}, 0x8, 0x80, 0xfffffffe, 0x80}})
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r5, &(0x7f0000000300)={&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}, 0x1c, 0x0}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.stat\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x401c5820, &(0x7f0000000080)={'dvmrp0\x00', @random="b75e22bfaf78"})
sendmmsg$inet6(r5, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5f}, 0x1c, 0x0, 0x0, &(0x7f0000000080)}}], 0x2, 0x0)

17.634769966s ago: executing program 1 (id=929):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0xff, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0000000108653904030405ffffff09c56a3000", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)

17.424449011s ago: executing program 2 (id=930):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x4000, 0x0, 0x5, 0x2}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r3)
sendmsg$NET_DM_CMD_START(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x2, 0x4}, 0x14}}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r5, 0x0, 0x0)
connect$netlink(r5, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
clock_gettime(0x0, 0x0)
sendmsg$can_bcm(r5, 0x0, 0x4804)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x4004840)
syz_genetlink_get_family_id$smc(0x0, r5)
setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x10000000000000], 0x0, 0x0}, 0x78)
write(r5, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)

17.423882832s ago: executing program 1 (id=931):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0xa, 0x4) (async)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0xa, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x6, 0x47, 0x40, 0x7}, {0x7, 0x4, 0x0, 0x1}]})
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='vlan0\x00') (async)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='vlan0\x00')
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20000884)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000280)=0x3, &(0x7f00000002c0)=0x2) (async)
getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000280)=0x3, &(0x7f00000002c0)=0x2)
r4 = socket$unix(0x1, 0x5, 0x0)
recvmsg$unix(r4, &(0x7f00000006c0)={&(0x7f0000000300), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/55, 0x37}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/217, 0xd9}], 0x4, &(0x7f0000000640)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2020) (async)
recvmsg$unix(r4, &(0x7f00000006c0)={&(0x7f0000000300), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/55, 0x37}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/217, 0xd9}], 0x4, &(0x7f0000000640)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r8=>0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2020)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000700)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000700)={'batadv0\x00', <r11=>0x0})
bind$packet(r10, &(0x7f0000000740)={0x11, 0x0, r11, 0x1, 0x3b, 0x6, @random="0ea18d126b98"}, 0x14)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r5}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r5}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r7, <r12=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%pK    \x00'}, 0x20)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r12, 0x80047213, &(0x7f0000000880))
bind$bt_l2cap(r9, &(0x7f00000008c0)={0x1f, 0x6446, @none, 0x4, 0x1}, 0xe)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000940)={0x7, 0x0, 0x601, 0x0, 0x7, 0x7, 0x8, 0x10001}, &(0x7f0000000980)=0x20) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000940)={0x7, 0x0, 0x601, 0x0, 0x7, 0x7, 0x8, 0x10001, <r13=>0x0}, &(0x7f0000000980)=0x20)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000009c0)={r13, @in6={{0xa, 0x4e20, 0x200, @empty}}}, &(0x7f0000000a80)=0x84)
sendmsg$nl_generic(r5, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xd8, 0x1d, 0x400, 0x70bd2d, 0x25dfdbfb, {0xc}, [@generic="3add60576a81510d0ec03bb9a18c9b3193cb657900dd9e9bd885de162e31251cd0ed3647666b", @nested={0x6e, 0x11d, 0x0, 0x1, [@generic="c5323a5ec557c530c5ce373d77385a5f880f0ddd546d1af98e604693792511dcad8cd61f5414b62781178dbc93e6443c9b198c9dc089afc6b22d30e6dd4bdb5c2526719ce1acd1dd765df9ccb78604bb72886a88815fd2b463d2215aec03f0461f1d", @typed={0x5, 0x30, 0x0, 0x0, @str='\x00'}]}, @nested={0xc, 0x7c, 0x0, 0x1, [@generic, @nested={0x4, 0x5}, @nested={0x4, 0x9f}]}, @nested={0x20, 0x90, 0x0, 0x1, [@nested={0x4, 0xbb}, @typed={0x8, 0x83, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0x36}, @typed={0x5, 0x83, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x50}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x804)
socket$can_raw(0x1d, 0x3, 0x1)
syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async)
r14 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000c80)={'wlan1\x00'})
r15 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
accept4$bt_l2cap(r15, &(0x7f0000000cc0), &(0x7f0000000d00)=0xe, 0x0)
sendmsg$FOU_CMD_DEL(r9, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x4c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20018000}, 0x40480c4)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000e80)=0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)

17.401286692s ago: executing program 1 (id=932):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$alg(0x26, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x149a40, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b1401"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x10)
write(r3, &(0x7f00000000c0)="510003000000", 0x6)
socket$kcm(0x2, 0x8, 0x2)
r4 = socket$inet(0xa, 0x801, 0x84)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x40, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0x4040040)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0)
accept4(r4, 0x0, 0x0, 0x80000)
write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000002034a94030008000400ffffffffffffaaaaaaaaaabb080045f0002c00000000002f9078ac1e0001e0000001000065580018907804e700000000000086ddffff000000009821d9f02f84492bbbd4be4a7a07f7270fbaebe2e58bf3bdde78b12eb4751b464bae68804e044e"], 0x48)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local})

16.737434124s ago: executing program 1 (id=936):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = socket(0x10, 0x80805, 0x4efdffd)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket(0x8, 0x3, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
unshare(0x10040000)
socket$nl_route(0x10, 0x3, 0x0)

16.537795828s ago: executing program 0 (id=937):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket(0x8, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c000900", @ANYRES32], 0x4c}}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

16.407615946s ago: executing program 1 (id=938):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x4000, 0x0, 0x5, 0x2}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r3)
sendmsg$NET_DM_CMD_START(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x4}, 0x14}}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r5, 0x0, 0x0)
connect$netlink(r5, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
clock_gettime(0x0, 0x0)
sendmsg$can_bcm(r5, 0x0, 0x4804)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e00000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001000000000006000340000200003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000070000000000000000010c00028005000100000000000800074000000000440010800800024000000fff0800024000000007080001"], 0xe0}}, 0x0)
syz_genetlink_get_family_id$smc(0x0, r5)
setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x10000000000000], 0x0, 0x0}, 0x78)
write(r5, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
unshare(0x68040200)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)

16.405302525s ago: executing program 2 (id=939):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r0}, 0x18)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000008500000056000000850000000800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90f2bb5bbb0a3d4b1c74af1f3e4bbd5254035a6773318d044587a418096c0b91fa06405c37af0659d7fe70e1c36c9c688d8173e50f0ccd677bf363212bec82ef7064994508835626522b2052006b59fcaa6edb8baf73fb71650fdeec344840c85f8775313a64cf00ee645f110eeaa2e844281e57d9f9dc0291fbc0be4056148c116f778782b1cd2bd059425145e95c372075d3e3c60cb257d5a9bd59b5919835", @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf2503000000180001801400020073797a5f74756e000000000000000000"], 0x2c}}, 0x4000080)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCGETLINKNAME(r7, 0x89e0, &(0x7f00000000c0)={0x1, 0x3})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x65}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
bind$rose(r1, &(0x7f0000000280)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x40)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x71}]}}]}, 0x3c}}, 0x0)
recvmmsg(r1, &(0x7f0000000000), 0x0, 0x40010001, 0x0)
recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x12140)

16.34440424s ago: executing program 0 (id=940):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)

16.245594865s ago: executing program 2 (id=941):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xbc}}, 0x20050800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "3e0e7a1b1378992d413042bb4cac4bf5"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="58d6e1cf9dc9"}]}, 0x3c}}, 0x400d0) (async)
sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "3e0e7a1b1378992d413042bb4cac4bf5"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="58d6e1cf9dc9"}]}, 0x3c}}, 0x400d0)

16.240428947s ago: executing program 0 (id=942):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$alg(0x26, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x149a40, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b1401"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x10)
write(r3, &(0x7f00000000c0)="510003000000", 0x6)
socket$kcm(0x2, 0x8, 0x2)
r4 = socket$inet(0xa, 0x801, 0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0)
accept4(r4, 0x0, 0x0, 0x80000)
write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000002034a94030008000400ffffffffffffaaaaaaaaaabb080045f0002c00000000002f9078ac1e0001e0000001000065580018907804e700000000000086ddffff000000009821d9f02f84492bbbd4be4a7a07f7270fbaebe2e58bf3bdde78b12eb4751b464bae68804e044e"], 0x48)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)

16.047529776s ago: executing program 2 (id=943):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44)
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000006000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00:\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(0x3)
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r6}, 0x0, &(0x7f0000001040)}, 0x20)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r8, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5bc}, 0x8)
bind$inet(r0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)

15.596188972s ago: executing program 0 (id=944):
r0 = socket$kcm(0x21, 0x2, 0x2)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000))
r1 = socket$inet6(0xa, 0x805, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001180), r2)
sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00'})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000014c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x9}, {0x2, 0xc}, {0xd, 0x2}}, ["", "", "", "", "", "", "", ""]}, 0x24}}, 0x4008810)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f00000002c0))
r4 = socket(0x10, 0x3, 0x4)
sendto$inet6(r4, &(0x7f0000000080), 0x0, 0x80, 0x0, 0x0)
accept$unix(r4, &(0x7f0000001340), &(0x7f00000013c0)=0x6e)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1}, 0xc)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r6, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
r8 = socket(0x1d, 0x2, 0x6)
ppoll(&(0x7f0000000380)=[{r8, 0x100}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r6, 0x5411, 0x0)
connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
r9 = socket(0x2e, 0x1, 0x0)
sendmmsg$inet(r9, &(0x7f0000001240)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}, {{&(0x7f0000000d40)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000e80)="cc", 0x1}], 0x1}}], 0x40002e9, 0x0)
writev(r7, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16, @ANYBLOB="0003abf2f60001002f0000020000000093e3", @ANYRES32, @ANYBLOB="2000178004000500040005"], 0x9c}}, 0x4004010)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)

15.375905243s ago: executing program 0 (id=945):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50)
r1 = socket$inet(0x2, 0x3, 0x6)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1, 0x2}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240001000a00000000000000000200000000000000000100008408000000060000000100f1a63e74a1140e71356a5b550000030000"], &(0x7f0000000380)=""/3, 0x46, 0x3, 0x1}, 0x20)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x400, 0x70bd2c, 0x25dfdbfd, "", ["", ""]}, 0x10}}, 0x810)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/196, 0xc4}, 0xfffffffc}], 0x1, 0x103, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd28, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x0, 0x7}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xd}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x42, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
r8 = socket$inet6(0xa, 0x3, 0x40)
setsockopt$inet6_int(r8, 0x29, 0x49, &(0x7f0000000000)=0x10000, 0xf)
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)

15.207927849s ago: executing program 0 (id=946):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffffffff9}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffffffff9}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r4, @ANYBLOB="08000c00ff"], 0x28}}, 0x0)
socket(0x2a, 0x2, 0x0) (async)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x7fff}, @TCA_CODEL_TARGET={0x8, 0x1, 0xd8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7f}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3ff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8b7}]}}]}, 0x6c}}, 0x4000000) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x7fff}, @TCA_CODEL_TARGET={0x8, 0x1, 0xd8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7f}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3ff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8b7}]}}]}, 0x6c}}, 0x4000000)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x3d, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @typed={0x4, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {0x0, 0x2f00}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000300)=0x5, 0x8)
socket$isdn_base(0x22, 0x3, 0x0)

524.626µs ago: executing program 1 (id=947):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0)
sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
recvmmsg(r4, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400})
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
close(0x3)

243.941µs ago: executing program 32 (id=943):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44)
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000006000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00:\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(0x3)
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r6}, 0x0, &(0x7f0000001040)}, 0x20)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r8, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5bc}, 0x8)
bind$inet(r0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)

0s ago: executing program 33 (id=946):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffffffff9}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffffffff9}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r4, @ANYBLOB="08000c00ff"], 0x28}}, 0x0)
socket(0x2a, 0x2, 0x0) (async)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x7fff}, @TCA_CODEL_TARGET={0x8, 0x1, 0xd8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7f}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3ff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8b7}]}}]}, 0x6c}}, 0x4000000) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x7fff}, @TCA_CODEL_TARGET={0x8, 0x1, 0xd8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7f}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3ff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8b7}]}}]}, 0x6c}}, 0x4000000)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x3d, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @typed={0x4, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {0x0, 0x2f00}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000300)=0x5, 0x8)
socket$isdn_base(0x22, 0x3, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:27493' (ED25519) to the list of known hosts.
syzkaller login: [   48.481445][ T5765] cgroup: Unknown subsys name 'net'
[   48.596880][ T5765] cgroup: Unknown subsys name 'cpuset'
[   48.601020][ T5765] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.048691][ T5765] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.415728][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.418798][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.421196][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.424281][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.428500][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.431917][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.457777][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.461677][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.465425][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.468280][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.504330][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.507348][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.510513][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.515683][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.519167][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.681678][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   54.777870][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   54.835868][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.838186][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.840642][ T5823] bridge_slave_0: entered allmulticast mode
[   54.843282][ T5823] bridge_slave_0: entered promiscuous mode
[   54.860929][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.863435][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.866328][ T5823] bridge_slave_1: entered allmulticast mode
[   54.869104][ T5823] bridge_slave_1: entered promiscuous mode
[   54.880768][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.883181][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.886160][ T5827] bridge_slave_0: entered allmulticast mode
[   54.888926][ T5827] bridge_slave_0: entered promiscuous mode
[   54.900676][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.922241][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.925204][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.927653][ T5827] bridge_slave_1: entered allmulticast mode
[   54.930308][ T5827] bridge_slave_1: entered promiscuous mode
[   54.934437][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.973231][ T5823] team0: Port device team_slave_0 added
[   54.980013][ T5823] team0: Port device team_slave_1 added
[   54.984110][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.001705][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   55.010507][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.049031][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.052058][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.064810][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.090596][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.092829][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.101345][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.110088][ T5827] team0: Port device team_slave_0 added
[   55.148059][ T5827] team0: Port device team_slave_1 added
[   55.206900][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.210012][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.213091][ T5832] bridge_slave_0: entered allmulticast mode
[   55.219065][ T5832] bridge_slave_0: entered promiscuous mode
[   55.223197][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.225663][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.233766][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.241052][ T5823] hsr_slave_0: entered promiscuous mode
[   55.245276][ T5823] hsr_slave_1: entered promiscuous mode
[   55.249118][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.252174][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.256005][ T5832] bridge_slave_1: entered allmulticast mode
[   55.259849][ T5832] bridge_slave_1: entered promiscuous mode
[   55.263564][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.265975][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.274019][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.325657][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.342032][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.361802][ T5827] hsr_slave_0: entered promiscuous mode
[   55.364329][ T5827] hsr_slave_1: entered promiscuous mode
[   55.366716][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.369535][ T5827] Cannot create hsr debugfs directory
[   55.418389][ T5832] team0: Port device team_slave_0 added
[   55.441472][ T5832] team0: Port device team_slave_1 added
[   55.512200][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.515190][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.526462][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.539467][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.542426][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.553029][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.627741][ T5832] hsr_slave_0: entered promiscuous mode
[   55.630976][ T5832] hsr_slave_1: entered promiscuous mode
[   55.633817][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.638508][ T5832] Cannot create hsr debugfs directory
[   55.715940][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.746922][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.760161][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.776760][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.822073][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.833721][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.847526][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.851684][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.883183][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.889755][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.902073][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.907165][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.967907][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.982609][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.991537][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   56.002073][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.004528][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.021834][  T156] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.024691][  T156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.030792][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.039063][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   56.066322][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.069051][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.079566][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   56.084753][  T156] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.087104][  T156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.099573][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.102070][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.122896][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.125875][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.250815][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.291707][ T5823] veth0_vlan: entered promiscuous mode
[   56.306131][ T5823] veth1_vlan: entered promiscuous mode
[   56.336165][ T5823] veth0_macvtap: entered promiscuous mode
[   56.340648][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.347564][ T5823] veth1_macvtap: entered promiscuous mode
[   56.367909][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.378917][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.390422][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.393218][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.397428][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.400087][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.412051][ T5827] veth0_vlan: entered promiscuous mode
[   56.418140][ T5827] veth1_vlan: entered promiscuous mode
[   56.429293][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.471139][ T5827] veth0_macvtap: entered promiscuous mode
[   56.495578][ T5827] veth1_macvtap: entered promiscuous mode
[   56.502821][ T3621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.507755][ T3621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.516009][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.535641][ T5826] Bluetooth: hci1: command tx timeout
[   56.535662][ T5830] Bluetooth: hci0: command tx timeout
[   56.548457][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.551882][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.559195][ T5832] veth0_vlan: entered promiscuous mode
[   56.559272][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.567275][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.570180][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.573035][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.577207][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.588814][ T5832] veth1_vlan: entered promiscuous mode
[   56.605176][ T5826] Bluetooth: hci2: command tx timeout
[   56.654880][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.680555][ T5832] veth0_macvtap: entered promiscuous mode
[   56.688319][ T5832] veth1_macvtap: entered promiscuous mode
[   56.701819][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.709025][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.711116][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.723718][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.740170][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.742867][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.746586][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.749483][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.775181][ T3621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.778275][ T3621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.930170][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.933464][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.965728][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.973159][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.067600][ T5889] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.650217][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'.
[   57.662487][ T5941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'.
[   57.701506][ T5947] netlink: 248 bytes leftover after parsing attributes in process `syz.0.9'.
[   57.841135][ T5949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'.
[   58.177769][ T5972] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   58.182054][ T5972] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   58.188089][ T5972] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   58.231815][ T5972] warning: `syz.0.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.605428][ T5826] Bluetooth: hci0: command tx timeout
[   58.607873][ T5830] Bluetooth: hci1: command tx timeout
[   58.684515][ T5826] Bluetooth: hci2: command tx timeout
[   58.732677][ T5980] netlink: 248 bytes leftover after parsing attributes in process `syz.0.13'.
[   59.452728][ T6035] netlink: 80 bytes leftover after parsing attributes in process `syz.2.20'.
[   59.596447][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'.
[   60.015853][ T6040] netlink: 248 bytes leftover after parsing attributes in process `syz.1.21'.
[   60.104649][ T6063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24'.
[   60.684548][ T5826] Bluetooth: hci1: command tx timeout
[   60.684645][ T5830] Bluetooth: hci0: command tx timeout
[   60.764274][ T5830] Bluetooth: hci2: command tx timeout
[   61.099423][ T6117] can: request_module (can-proto-0) failed.
[   61.099837][ T6124] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.336070][ T6132] netlink: 'syz.2.30': attribute type 21 has an invalid length.
[   61.450520][ T6134] Zero length message leads to an empty skb
[   61.881318][ T6158] netlink: 'syz.1.33': attribute type 12 has an invalid length.
[   61.889561][ T6158] netlink: 'syz.1.33': attribute type 29 has an invalid length.
[   62.667577][    C1] vcan0: j1939_tp_rxtimer: 0xffff888028b94400: rx timeout, send abort
[   62.671085][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888028b94400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   62.775578][ T5830] Bluetooth: hci0: command tx timeout
[   62.775611][ T5826] Bluetooth: hci1: command tx timeout
[   62.845712][ T5826] Bluetooth: hci2: command tx timeout
[   62.867993][ T6186] netlink: 'syz.2.36': attribute type 1 has an invalid length.
[   62.879041][ T6186] __nla_validate_parse: 5 callbacks suppressed
[   62.879049][ T6186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.36'.
[   63.134571][ T6196] netlink: 248 bytes leftover after parsing attributes in process `syz.2.37'.
[   63.239374][ T6199] netlink: 100 bytes leftover after parsing attributes in process `syz.2.37'.
[   63.512462][ T6223] syz.2.40 uses obsolete (PF_INET,SOCK_PACKET)
[   64.033549][ T6245] netlink: 40 bytes leftover after parsing attributes in process `syz.1.44'.
[   64.218927][ T6256] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   64.223014][ T6256] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   64.230029][ T6256] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   64.404545][ T5740] IPVS: starting estimator thread 0...
[   64.494433][ T6268] IPVS: using max 79 ests per chain, 189600 per kthread
[   64.747146][ T6289] Cannot find set identified by id 0 to match
[   64.809219][   T10] IPVS: starting estimator thread 0...
[   64.894050][ T6291] IPVS: using max 80 ests per chain, 192000 per kthread
[   65.110902][ T6305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.53'.
[   65.415810][ T5826] Bluetooth: hci2: command tx timeout
[   65.890977][ T6344] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.61'.
[   65.907179][ T6344] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   65.910190][ T6344] openvswitch: netlink: Duplicate key (type 0).
[   65.921444][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'.
[   65.943834][ T6328] netlink: 248 bytes leftover after parsing attributes in process `syz.2.58'.
[   66.033114][ T6335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.58'.
[   66.551921][ T6370] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   66.558870][ T6370] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   66.563649][ T6370] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   67.118123][ T6412] netlink: 564 bytes leftover after parsing attributes in process `syz.0.69'.
[   67.428349][ T6432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.436609][ T6432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.597788][ T6442] ip6t_srh: unknown srh match flags  5294
[   67.771499][ T6450] syzkaller1: entered promiscuous mode
[   67.773475][ T6450] syzkaller1: entered allmulticast mode
[   67.888924][ T6450] __nla_validate_parse: 6 callbacks suppressed
[   67.888933][ T6450] netlink: 740 bytes leftover after parsing attributes in process `syz.0.78'.
[   67.933165][ T6455] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   67.938780][ T6455] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   67.942176][ T6455] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   68.076778][ T6460] netlink: 248 bytes leftover after parsing attributes in process `syz.0.80'.
[   69.078605][ T6515] netlink: 40 bytes leftover after parsing attributes in process `syz.2.90'.
[   69.157159][ T6504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.89'.
[   69.717242][ T6542] netlink: 40 bytes leftover after parsing attributes in process `syz.0.94'.
[   70.496181][ T6567] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   70.511956][ T6567] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.101'.
[   70.537880][ T6567] netlink: 10 bytes leftover after parsing attributes in process `syz.2.101'.
[   70.771461][ T6565] netlink: 248 bytes leftover after parsing attributes in process `syz.1.99'.
[   71.089525][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.636506][ T6612] netlink: 248 bytes leftover after parsing attributes in process `syz.1.105'.
[   72.005318][ T6639] bridge_slave_0: left allmulticast mode
[   72.007236][ T6639] bridge_slave_0: left promiscuous mode
[   72.009956][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.024585][ T6639] bridge_slave_1: left allmulticast mode
[   72.026458][ T6639] bridge_slave_1: left promiscuous mode
[   72.032631][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.056269][ T6639] bond0: (slave bond_slave_0): Releasing backup interface
[   72.076032][ T6639] bond0: (slave bond_slave_1): Releasing backup interface
[   72.106930][ T6639] team0: Port device team_slave_0 removed
[   72.116841][ T6639] team0: Port device team_slave_1 removed
[   72.119551][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.122656][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.128484][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.131636][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.523735][ T6662] netlink: 248 bytes leftover after parsing attributes in process `syz.2.113'.
[   72.721610][ T6677] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   72.875298][ T6693] bridge_slave_0: left allmulticast mode
[   72.877700][ T6693] bridge_slave_0: left promiscuous mode
[   72.880018][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.899284][ T6693] bridge_slave_1: left allmulticast mode
[   72.901193][ T6693] bridge_slave_1: left promiscuous mode
[   72.903456][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.969666][ T6693] bond0: (slave bond_slave_0): Releasing backup interface
[   72.977840][ T6693] bond0: (slave bond_slave_1): Releasing backup interface
[   72.995615][ T6693] team0: Port device team_slave_0 removed
[   73.005218][ T6693] team0: Port device team_slave_1 removed
[   73.008399][ T6693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.011237][ T6693] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.016098][ T6693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.019219][ T6693] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.750734][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'.
[   73.776282][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'.
[   74.162285][ T6762] netlink: 248 bytes leftover after parsing attributes in process `syz.0.132'.
[   74.173806][ T6768] netlink: 'syz.1.134': attribute type 1 has an invalid length.
[   74.196388][ T6768] netlink: 224 bytes leftover after parsing attributes in process `syz.1.134'.
[   74.328412][ T6777] netlink: 27 bytes leftover after parsing attributes in process `syz.1.135'.
[   74.371714][ T6761] netlink: 248 bytes leftover after parsing attributes in process `syz.2.133'.
[   74.818936][ T6805] netlink: 'syz.0.139': attribute type 13 has an invalid length.
[   74.821587][ T6805] netlink: 'syz.0.139': attribute type 17 has an invalid length.
[   74.825494][ T6805] netlink: 'syz.0.139': attribute type 5 has an invalid length.
[   75.496547][ T6852] netlink: 40 bytes leftover after parsing attributes in process `syz.2.146'.
[   75.514363][ T6851] netlink: 40 bytes leftover after parsing attributes in process `syz.2.146'.
[   75.712782][ T6869] netlink: 40 bytes leftover after parsing attributes in process `syz.0.149'.
[   75.716100][ T6870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.149'.
[   78.648076][ T7066] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   78.709791][ T7071] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.940882][ T7068] __nla_validate_parse: 12 callbacks suppressed
[   78.940892][ T7068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.181'.
[   79.208508][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'.
[   79.350473][ T7092] netlink: 248 bytes leftover after parsing attributes in process `syz.2.187'.
[   79.839505][ T7121] netlink: 248 bytes leftover after parsing attributes in process `syz.1.193'.
[   80.299910][ T7143] bridge_slave_0: left allmulticast mode
[   80.301762][ T7143] bridge_slave_0: left promiscuous mode
[   80.303660][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.311357][ T7143] bridge_slave_1: left allmulticast mode
[   80.313311][ T7143] bridge_slave_1: left promiscuous mode
[   80.315564][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.322003][ T7143] bond0: (slave bond_slave_0): Releasing backup interface
[   80.330068][ T7143] bond0: (slave bond_slave_1): Releasing backup interface
[   80.354891][ T7143] team0: Port device team_slave_0 removed
[   80.367529][ T7143] team0: Port device team_slave_1 removed
[   80.369958][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.372632][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.387489][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.390128][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.763520][ T7173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.203'.
[   80.779208][ T7171] netlink: 40 bytes leftover after parsing attributes in process `syz.0.204'.
[   81.331911][  T792] cfg80211: failed to load regulatory.db
[   81.354637][ T7192] netlink: 248 bytes leftover after parsing attributes in process `syz.2.209'.
[   81.763803][ T7202] syzkaller0: entered promiscuous mode
[   81.771716][ T7202] syzkaller0: entered allmulticast mode
[   82.356600][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'.
[   82.359512][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'.
[   83.310825][ T7234] netlink: 596 bytes leftover after parsing attributes in process `syz.0.218'.
[   83.744705][ T7252] ip6t_srh: unknown srh invflags 4449
[   83.747323][ T7254] ip6t_srh: unknown srh invflags 4449
[   83.762292][ T7252] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   83.767272][ T7252] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   83.778644][ T7252] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   84.186274][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'.
[   84.211593][ T7283] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   84.219015][ T7283] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[   84.231814][ T7283] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[   84.378248][ T7293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.232'.
[   84.497517][ T7281] netlink: 248 bytes leftover after parsing attributes in process `syz.2.229'.
[   84.540587][ T7290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.231'.
[   84.835555][ T7305] netlink: 724 bytes leftover after parsing attributes in process `syz.2.234'.
[   85.120174][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'.
[   85.124004][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'.
[   85.127907][ T7330] netlink: 'syz.1.239': attribute type 1 has an invalid length.
[   85.131526][ T7330] netlink: 10 bytes leftover after parsing attributes in process `syz.1.239'.
[   85.135794][ T7330] block nbd0: Unsupported socket: shutdown callout must be supported.
[   85.163403][ T7324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.238'.
[   85.461264][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'.
[   85.647302][ T7365] netlink: 'syz.2.249': attribute type 1 has an invalid length.
[   85.650469][ T7365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.260561][ T7432] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000
[   87.464351][ T7450] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   87.467951][ T7450] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.474060][ T7450] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   87.485643][ T7450] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.490043][ T7450] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   87.495988][ T7450] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.499692][ T7450] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   87.502748][ T7450] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.507996][ T7450] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   89.328365][ T7508] __nla_validate_parse: 23 callbacks suppressed
[   89.328378][ T7508] netlink: 248 bytes leftover after parsing attributes in process `syz.0.277'.
[   89.588980][ T7516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.278'.
[   89.701000][ T7521] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   89.705468][ T7521] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   89.710131][ T7521] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   89.793804][ T7526] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   89.800445][ T7526] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   89.806187][ T7526] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   89.979510][ T7531] netlink: 40 bytes leftover after parsing attributes in process `syz.0.281'.
[   90.196747][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'.
[   90.369774][ T7561] netlink: 200 bytes leftover after parsing attributes in process `syz.2.288'.
[   90.375025][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'.
[   90.899093][ T7578] netlink: 248 bytes leftover after parsing attributes in process `syz.2.291'.
[   90.954133][ T7588] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.293'.
[   91.307389][ T7619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.301'.
[   91.441932][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803bca6000: rx timeout, send abort
[   91.445650][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803bca6000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   91.517252][ T7624] netlink: 'syz.2.302': attribute type 32 has an invalid length.
[   91.520080][ T7624] netlink: 132 bytes leftover after parsing attributes in process `syz.2.302'.
[   92.271711][ T7665] netlink: 'syz.0.312': attribute type 83 has an invalid length.
[   94.428054][ T7723] __nla_validate_parse: 4 callbacks suppressed
[   94.428067][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.0.324'.
[   94.707083][ T7716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.322'.
[   94.780545][ T7716] xt_ecn: cannot match TCP bits for non-tcp packets
[   95.000026][ T7744] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   95.006645][ T7744] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[   95.011141][ T7744] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[   95.096456][ T7756] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   95.101275][ T7756] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   95.108854][ T7756] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   95.486924][ T7780] tipc: Started in network mode
[   95.488655][ T7780] tipc: Node identity dadf47c8c977, cluster identity 4711
[   95.491483][ T7780] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.535059][ T7779] tipc: Disabling bearer <eth:syzkaller0>
[   95.812955][ T7790] netlink: 40 bytes leftover after parsing attributes in process `syz.2.336'.
[   95.874463][ T7808] xt_TPROXY: Can be used only with -p tcp or -p udp
[   96.185370][ T7822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.343'.
[   97.795911][ T7864] xt_hashlimit: max too large, truncated to 1048576
[   97.885590][ T7875] Bluetooth: MGMT ver 1.23
[   97.918331][ T7874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.353'.
[   98.438564][ T7888] netlink: 248 bytes leftover after parsing attributes in process `syz.0.357'.
[   98.552012][ T7886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.356'.
[   98.757649][ T7900] netlink: 'syz.0.358': attribute type 1 has an invalid length.
[   98.761487][ T7900] netlink: 15 bytes leftover after parsing attributes in process `syz.0.358'.
[   98.913419][ T7918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.364'.
[   98.937140][ T7924] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   98.941332][ T7924] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[   98.947806][ T7924] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[   99.379035][ T7934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.367'.
[   99.501875][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'.
[   99.819445][ T7958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.373'.
[   99.899192][ T7961] x_tables: duplicate underflow at hook 1
[  100.520021][ T7966] syzkaller1: entered promiscuous mode
[  100.522416][ T7966] syzkaller1: entered allmulticast mode
[  101.033546][ T7976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.377'.
[  101.117816][ T7976] xt_TPROXY: Can be used only with -p tcp or -p udp
[  101.306604][ T8007] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  101.354683][ T8009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.385'.
[  101.926209][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.389'.
[  101.951107][ T8031] vlan0: entered promiscuous mode
[  102.418890][ T8037] netlink: 248 bytes leftover after parsing attributes in process `syz.2.391'.
[  102.923822][ T8057] netlink: 40 bytes leftover after parsing attributes in process `syz.1.395'.
[  103.193140][ T8061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.396'.
[  103.859346][ T8076] netlink: 'syz.0.398': attribute type 1 has an invalid length.
[  103.876829][ T8076] netlink: 'syz.0.398': attribute type 58 has an invalid length.
[  103.880267][ T8076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.398'.
[  104.527784][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'.
[  104.596534][  T791] IPVS: starting estimator thread 0...
[  104.694128][ T8104] IPVS: using max 50 ests per chain, 120000 per kthread
[  104.756636][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'.
[  105.436453][ T8147] netlink: 40 bytes leftover after parsing attributes in process `syz.2.415'.
[  106.021287][ T8165] netlink: 40 bytes leftover after parsing attributes in process `syz.0.420'.
[  106.044423][ T8166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.420'.
[  106.166838][ T8161] netlink: 248 bytes leftover after parsing attributes in process `syz.1.419'.
[  106.914885][ T8174] netlink: 248 bytes leftover after parsing attributes in process `syz.1.421'.
[  107.317440][ T8181] netlink: 'syz.1.422': attribute type 1 has an invalid length.
[  108.010488][ T8183] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.024451][ T8183] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.028435][ T8183] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.031552][ T8183] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.126444][ T8183] syz.1.423 (8183) used greatest stack depth: 20480 bytes left
[  108.396313][ T8198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.426'.
[  108.744892][ T8208] netlink: 40 bytes leftover after parsing attributes in process `syz.2.429'.
[  108.847923][ T8200] netlink: 20 bytes leftover after parsing attributes in process `syz.0.427'.
[  108.944534][ T8219] tipc: Started in network mode
[  108.950483][ T8219] tipc: Node identity ac14140f, cluster identity 4711
[  108.958918][ T8219] tipc: New replicast peer: 255.255.255.255
[  108.965655][ T8219] tipc: Enabled bearer <udp:syz2>, priority 10
[  108.975505][ T8200] net_ratelimit: 21 callbacks suppressed
[  108.975517][ T8200] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.767244][ T8222] netlink: 'syz.0.432': attribute type 39 has an invalid length.
[  109.795878][ T8233] macvlan0: entered allmulticast mode
[  109.798398][ T8233] netlink: 'syz.1.433': attribute type 1 has an invalid length.
[  109.801253][ T8233] netlink: 'syz.1.433': attribute type 2 has an invalid length.
[  109.987871][ T8250] __nla_validate_parse: 2 callbacks suppressed
[  109.987880][ T8250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.437'.
[  110.094181][  T792] tipc: Node number set to 2886997007
[  110.124394][ T8248] netlink: 248 bytes leftover after parsing attributes in process `syz.2.436'.
[  110.403336][ T8283] wg1: entered promiscuous mode
[  110.410267][ T8283] wg1: entered allmulticast mode
[  110.476861][ T8290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.447'.
[  110.552922][ T8299] netlink: 40 bytes leftover after parsing attributes in process `syz.1.448'.
[  110.960879][ T8328] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  111.164754][ T8338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.455'.
[  111.441286][ T8349] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  111.462648][ T8346] syzkaller1: entered promiscuous mode
[  111.464700][ T8346] syzkaller1: entered allmulticast mode
[  111.468857][ T8346] x_tables: duplicate underflow at hook 1
[  111.798900][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'.
[  112.163308][ T8391] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  112.184031][ T8391] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  112.196003][ T8391] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  112.357764][ T8387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.470'.
[  112.601444][ T8413] ipvlan3: entered promiscuous mode
[  112.605363][ T8413] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  112.610412][ T8413] syzkaller0: entered promiscuous mode
[  112.612689][ T8413] syzkaller0: entered allmulticast mode
[  112.616339][ T8413] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  112.775348][ T8421] xt_CT: No such helper "syz0"
[  112.797293][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'.
[  113.099373][ T8437] netlink: 60 bytes leftover after parsing attributes in process `syz.1.480'.
[  113.448895][ T8445] netlink: 'syz.2.481': attribute type 1 has an invalid length.
[  113.452169][ T8445] netlink: 208 bytes leftover after parsing attributes in process `syz.2.481'.
[  114.099420][ T8514] tipc: Enabled bearer <eth:gre0>, priority 10
[  114.150930][ T8518] netlink: 'syz.1.488': attribute type 5 has an invalid length.
[  114.439914][ T8526] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20004
[  114.657922][ T8528] x_tables: duplicate underflow at hook 1
[  114.941708][ T8537] netlink: 'syz.2.492': attribute type 1 has an invalid length.
[  115.214211][  T792] tipc: Node number set to 329795528
[  115.386755][ T8553] __nla_validate_parse: 3 callbacks suppressed
[  115.386768][ T8553] netlink: 40 bytes leftover after parsing attributes in process `syz.0.496'.
[  116.068468][ T8564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.499'.
[  116.115368][ T8562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.498'.
[  116.121796][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'.
[  116.979183][ T8582] netlink: 248 bytes leftover after parsing attributes in process `syz.1.503'.
[  117.330644][ T8608] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  117.339429][ T8608] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  117.344566][ T8608] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  117.638960][ T8610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.507'.
[  117.819611][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'.
[  118.521407][ T8661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.518'.
[  118.779269][ T8672] netlink: 'syz.0.521': attribute type 3 has an invalid length.
[  118.792435][ T8672] netlink: 'syz.0.521': attribute type 1 has an invalid length.
[  118.806631][ T8672] netlink: 224 bytes leftover after parsing attributes in process `syz.0.521'.
[  118.842179][ T8670] netlink: 128 bytes leftover after parsing attributes in process `syz.2.520'.
[  118.846565][ T8670] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  118.886265][ T8674] xt_CT: No such helper "snmp"
[  118.972270][ T8680] netlink: 'syz.2.522': attribute type 1 has an invalid length.
[  120.270933][ T8739] netlink: 'syz.1.536': attribute type 11 has an invalid length.
[  120.281326][ T8739] netlink: 'syz.1.536': attribute type 4 has an invalid length.
[  120.638395][ T8752] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  120.646503][ T8752] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  120.651518][ T8752] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  120.903234][ T8748] __nla_validate_parse: 5 callbacks suppressed
[  120.903246][ T8748] netlink: 248 bytes leftover after parsing attributes in process `syz.1.537'.
[  121.356796][ T8770] netlink: 40 bytes leftover after parsing attributes in process `syz.2.542'.
[  121.692701][ T8785] netlink: 248 bytes leftover after parsing attributes in process `syz.0.545'.
[  123.348556][ T8807] netlink: 'syz.0.550': attribute type 29 has an invalid length.
[  123.656508][ T8829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.554'.
[  123.779557][ T8831] netlink: 40 bytes leftover after parsing attributes in process `syz.1.555'.
[  124.178182][ T8838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.556'.
[  125.381526][ T8886] bridge1: entered promiscuous mode
[  125.387512][ T8886] bridge1: entered allmulticast mode
[  125.402932][ T8886] team0: Port device bridge1 added
[  125.760129][ T8888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.567'.
[  125.831595][ T8886] infiniband syz1: set active
[  125.833416][ T8886] infiniband syz1: added macvlan1
[  125.859523][ T8886] RDS/IB: syz1: added
[  125.861453][ T8886] smc: adding ib device syz1 with port count 1
[  125.865482][ T8886] smc:    ib device syz1 port 1 has pnetid 
[  126.282352][ T8907] netlink: 248 bytes leftover after parsing attributes in process `syz.0.570'.
[  127.067734][ T8916] x_tables: duplicate underflow at hook 3
[  127.123997][ T8918] openvswitch: netlink: IP tunnel dst address not specified
[  127.552324][ T8925] netlink: 248 bytes leftover after parsing attributes in process `syz.0.574'.
[  127.627793][ T8926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.575'.
[  127.898654][ T8926] smc: removing ib device syz1
[  129.130781][ T8945] netlink: 248 bytes leftover after parsing attributes in process `syz.2.578'.
[  129.309730][ T8945] netlink: 56 bytes leftover after parsing attributes in process `syz.2.578'.
[  129.396563][ T8959] tap0: tun_chr_ioctl cmd 1074025677
[  129.398732][ T8959] tap0: linktype set to 0
[  129.601972][ T8962] netlink: 248 bytes leftover after parsing attributes in process `syz.0.583'.
[  130.045947][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'.
[  130.049618][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'.
[  130.094384][ T8980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.587'.
[  130.381308][ T9006] : entered promiscuous mode
[  130.428171][ T8999] trusted_key: syz.1.591 sent an empty control message without MSG_MORE.
[  130.481348][ T9012] netlink: 40 bytes leftover after parsing attributes in process `syz.2.594'.
[  131.337979][ T9026] __nla_validate_parse: 1 callbacks suppressed
[  131.337994][ T9026] netlink: 248 bytes leftover after parsing attributes in process `syz.1.599'.
[  131.364821][ T9037] netlink: 'syz.2.601': attribute type 58 has an invalid length.
[  131.460977][ T9031] netlink: 248 bytes leftover after parsing attributes in process `syz.0.600'.
[  131.811725][ T9052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.603'.
[  131.842740][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'.
[  131.921469][ T9059] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  131.927432][ T9059] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  131.933085][ T9059] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  132.004221][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'.
[  132.060461][ T9063] netlink: 40 bytes leftover after parsing attributes in process `syz.1.607'.
[  132.078575][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'.
[  132.120367][ T9066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.608'.
[  132.498465][ T9071] netlink: 248 bytes leftover after parsing attributes in process `syz.2.609'.
[  132.587585][ T9071] netlink: 100 bytes leftover after parsing attributes in process `syz.2.609'.
[  134.878393][ T9112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.682227][ T9132] netlink: 'syz.2.621': attribute type 1 has an invalid length.
[  135.708068][ T9132] bond1: entered promiscuous mode
[  135.710711][ T9132] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.732144][ T9132] bond1: (slave bridge2): making interface the new active one
[  135.736746][ T9132] bridge2: entered promiscuous mode
[  135.738926][ T9132] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  136.670755][ T9168] __nla_validate_parse: 8 callbacks suppressed
[  136.670766][ T9168] netlink: 40 bytes leftover after parsing attributes in process `syz.2.630'.
[  138.352578][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.639'.
[  138.418367][ T9216] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  138.423553][ T9216] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  138.431603][ T9216] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  138.861856][ T9208] syz.0.638 (9208) used greatest stack depth: 20472 bytes left
[  138.899073][ T9237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.645'.
[  139.065760][ T9251] netlink: 'syz.2.648': attribute type 21 has an invalid length.
[  139.069188][ T9251] netlink: 128 bytes leftover after parsing attributes in process `syz.2.648'.
[  139.072905][ T9251] netlink: 'syz.2.648': attribute type 4 has an invalid length.
[  139.077090][ T9251] netlink: 'syz.2.648': attribute type 5 has an invalid length.
[  139.080429][ T9251] netlink: 3 bytes leftover after parsing attributes in process `syz.2.648'.
[  139.163299][ T9258] netlink: 7 bytes leftover after parsing attributes in process `syz.2.648'.
[  139.540418][ T9283] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  139.545679][ T9283] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  139.551425][ T9283] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  139.910767][ T9304] netlink: 40 bytes leftover after parsing attributes in process `syz.0.660'.
[  139.934682][ T9289] netlink: 248 bytes leftover after parsing attributes in process `syz.1.656'.
[  140.658763][ T9334] netlink: 56 bytes leftover after parsing attributes in process `syz.1.665'.
[  141.018019][ T9338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.664'.
[  141.085861][ T9332] netlink: 'syz.2.664': attribute type 49 has an invalid length.
[  142.029286][ T9396] __nla_validate_parse: 3 callbacks suppressed
[  142.029304][ T9396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.678'.
[  142.080382][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'.
[  142.145721][ T9397] netlink: 3 bytes leftover after parsing attributes in process `syz.2.678'.
[  142.162368][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'.
[  142.165949][ T9397] netlink: 3 bytes leftover after parsing attributes in process `syz.2.678'.
[  142.168753][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'.
[  142.171574][ T9397] netlink: 3 bytes leftover after parsing attributes in process `syz.2.678'.
[  142.458570][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.682'.
[  142.458570][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.682'.
[  142.471528][ T9414] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  142.491846][ T9414] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  142.508815][ T9414] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  142.520728][ T9413] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  142.525482][ T9413] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  142.529642][ T9413] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  142.665424][ T9426] netlink: 'syz.2.685': attribute type 1 has an invalid length.
[  142.668136][ T9426] netlink: 224 bytes leftover after parsing attributes in process `syz.2.685'.
[  142.757248][ T9430] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  142.762146][ T9430] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  142.789941][ T9430] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  143.489911][ T9469] tipc: Started in network mode
[  143.491593][ T9469] tipc: Node identity , cluster identity 4711
[  144.407764][ T9508] team0: Port device bridge1 removed
[  144.410631][ T9508] bond1: (slave bridge2): Releasing backup interface
[  144.412874][ T9508] bridge2: left promiscuous mode
[  145.142567][ T9542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.477075][ T9553] netlink: 'syz.1.712': attribute type 1 has an invalid length.
[  147.377320][ T9632] __nla_validate_parse: 10 callbacks suppressed
[  147.377330][ T9632] netlink: 248 bytes leftover after parsing attributes in process `syz.1.730'.
[  147.669369][ T9671] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  147.950199][ T9696] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  148.207054][ T9700] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  148.212826][ T9700] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  148.220711][ T9700] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  148.452291][ T9705] netlink: 248 bytes leftover after parsing attributes in process `syz.0.746'.
[  148.660271][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.747'.
[  149.108544][ T9731] x_tables: duplicate underflow at hook 3
[  149.110528][ T9731] x_tables: duplicate underflow at hook 3
[  149.112328][ T9720] netlink: 248 bytes leftover after parsing attributes in process `syz.1.749'.
[  149.122457][ T9731] x_tables: duplicate underflow at hook 3
[  149.132099][ T9731] x_tables: duplicate underflow at hook 3
[  149.151752][ T9723] netlink: 248 bytes leftover after parsing attributes in process `syz.2.750'.
[  149.588128][ T9748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.754'.
[  149.830666][ T9772] macvlan0: entered allmulticast mode
[  149.836513][ T9772] netlink: 'syz.2.760': attribute type 1 has an invalid length.
[  149.839103][ T9772] netlink: 'syz.2.760': attribute type 2 has an invalid length.
[  149.967219][ T9781] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  150.036614][ T9781] tipc: Resetting bearer <eth:gre0>
[  150.303776][ T9781] vlan0: left promiscuous mode
[  150.306746][ T9781] macvlan0: left allmulticast mode
[  150.336702][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.765'.
[  150.347707][ T9781] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.350981][ T9781] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.354522][ T9781] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.357419][ T9781] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.400082][ T9781] ipvlan3: left promiscuous mode
[  150.402926][ T9781] bridge1: left promiscuous mode
[  150.407946][ T9781] bridge1: left allmulticast mode
[  150.410004][ T9781] bond1: left promiscuous mode
[  151.424715][ T9841] netlink: 'syz.1.774': attribute type 2 has an invalid length.
[  151.569028][ T9850] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  151.634285][ T9852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.776'.
[  152.355589][ T9876] netlink: 56 bytes leftover after parsing attributes in process `syz.1.780'.
[  152.839181][ T9917] netlink: 'syz.0.788': attribute type 1 has an invalid length.
[  152.880786][ T9917] 8021q: adding VLAN 0 to HW filter on device bond1
[  152.901644][ T9917] 8021q: adding VLAN 0 to HW filter on device bond1
[  152.905075][ T9917] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  152.910962][ T9917] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  152.956660][ T9920] veth3: entered promiscuous mode
[  152.962166][ T9920] bond1: (slave veth3): Enslaving as an active interface with a down link
[  152.969494][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.973770][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.169059][ T9988] netlink: 'syz.1.806': attribute type 2 has an invalid length.
[  154.179696][ T9988] : entered promiscuous mode
[  154.216754][ T9991] netlink: 76 bytes leftover after parsing attributes in process `syz.2.804'.
[  154.359175][ T9997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.808'.
[  154.521565][ T9986] netlink: 248 bytes leftover after parsing attributes in process `syz.0.805'.
[  154.808100][T10001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.809'.
[  154.809214][T10000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.809'.
[  155.067299][T10031] netlink: 'syz.2.815': attribute type 1 has an invalid length.
[  155.070917][T10031] netlink: 224 bytes leftover after parsing attributes in process `syz.2.815'.
[  155.079496][T10031] netlink: 'syz.2.815': attribute type 29 has an invalid length.
[  155.185490][T10040] bond1: (slave veth3): Releasing active interface
[  155.598285][T10066] netlink: 'syz.0.823': attribute type 1 has an invalid length.
[  155.601683][T10066] netlink: 'syz.0.823': attribute type 1 has an invalid length.
[  155.649134][T10062] netlink: 248 bytes leftover after parsing attributes in process `syz.1.822'.
[  155.679483][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.822'.
[  155.689093][T10062] pim6reg: entered allmulticast mode
[  155.721306][T10062] pim6reg: left allmulticast mode
[  155.886231][T10065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.822'.
[  155.895414][T10065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.822'.
[  156.129130][T10092] bond0: (slave ipvlan6): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  156.135928][T10092] bond0: (slave ipvlan6): The slave device specified does not support setting the MAC address
[  156.143434][T10092] bond0: (slave ipvlan6): Error -95 calling set_mac_address
[  156.175667][T10095] sctp: [Deprecated]: syz.0.827 (pid 10095) Use of int in max_burst socket option.
[  156.175667][T10095] Use struct sctp_assoc_value instead
[  156.185331][T10091] bond0: (slave ipvlan6): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  156.189258][T10091] bond0: (slave ipvlan6): The slave device specified does not support setting the MAC address
[  156.193774][T10091] bond0: (slave ipvlan6): Error -95 calling set_mac_address
[  157.078751][T10129] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  157.084811][T10129] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  157.090303][T10129] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  157.288615][T10136] batman_adv: batadv0: Adding interface: dummy0
[  157.291283][T10136] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.305358][T10136] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  158.428006][T10180] netlink: 'syz.0.847': attribute type 21 has an invalid length.
[  158.431537][T10180] netlink: 'syz.0.847': attribute type 6 has an invalid length.
[  159.460747][T10208] __nla_validate_parse: 14 callbacks suppressed
[  159.460759][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.853'.
[  159.466310][T10208] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  159.675319][T10211] netlink: 248 bytes leftover after parsing attributes in process `syz.1.854'.
[  159.818416][T10211] veth0: entered promiscuous mode
[  159.937746][T10210] veth0: left promiscuous mode
[  160.267160][T10229] netlink: 248 bytes leftover after parsing attributes in process `syz.0.858'.
[  160.318575][T10237] netlink: 248 bytes leftover after parsing attributes in process `syz.2.860'.
[  160.555439][T10253] netlink: 52 bytes leftover after parsing attributes in process `syz.0.863'.
[  160.698687][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'.
[  160.760511][T10269] IPVS: set_ctl: invalid protocol: 1 172.30.0.3:20004
[  160.773066][T10270] netlink: 84 bytes leftover after parsing attributes in process `syz.0.867'.
[  160.777827][T10270] netlink: 84 bytes leftover after parsing attributes in process `syz.0.867'.
[  161.531695][T10309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.875'.
[  161.660548][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.877'.
[  161.665773][T10317] netlink: 'syz.0.877': attribute type 6 has an invalid length.
[  162.551253][T10350] geneve0: entered promiscuous mode
[  162.553528][T10350] geneve0: entered allmulticast mode
[  163.702940][T10410] macvlan0: left allmulticast mode
[  163.708981][T10410] netlink: 'syz.1.895': attribute type 1 has an invalid length.
[  163.713380][T10410] netlink: 'syz.1.895': attribute type 2 has an invalid length.
[  164.126548][T10433] bridge_slave_0: entered promiscuous mode
[  164.692885][T10454] __nla_validate_parse: 6 callbacks suppressed
[  164.692897][T10454] netlink: 248 bytes leftover after parsing attributes in process `syz.2.903'.
[  164.776966][T10455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.905'.
[  164.780134][T10452] netlink: 248 bytes leftover after parsing attributes in process `syz.0.904'.
[  164.935280][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'.
[  164.938230][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.906'.
[  165.064892][T10475] netlink: 'syz.0.908': attribute type 2 has an invalid length.
[  165.067604][T10469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.906'.
[  165.120411][T10480] lo speed is unknown, defaulting to 1000
[  165.123358][T10480] lo speed is unknown, defaulting to 1000
[  165.126959][T10480] lo speed is unknown, defaulting to 1000
[  165.132547][T10480] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  165.140504][T10480] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  165.177036][T10480] lo speed is unknown, defaulting to 1000
[  165.188868][T10480] lo speed is unknown, defaulting to 1000
[  165.192795][T10480] lo speed is unknown, defaulting to 1000
[  165.217281][T10480] lo speed is unknown, defaulting to 1000
[  165.220728][T10480] lo speed is unknown, defaulting to 1000
[  165.247148][T10480] Driver unsupported XDP return value 0 on prog  (id 462) dev N/A, expect packet loss!
[  165.405748][T10495] lo speed is unknown, defaulting to 1000
[  165.700388][T10495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.913'.
[  165.704632][T10495] netlink: 60 bytes leftover after parsing attributes in process `syz.0.913'.
[  165.707640][T10495] unsupported nlmsg_type 40
[  165.736048][T10517] lo speed is unknown, defaulting to 1000
[  165.923794][T10521] openvswitch: netlink: Missing key (keys=40, expected=80)
[  166.000228][T10521] lo speed is unknown, defaulting to 1000
[  166.004646][T10517] netlink: 248 bytes leftover after parsing attributes in process `syz.2.917'.
[  166.325876][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.922'.
[  166.459878][T10555] lo speed is unknown, defaulting to 1000
[  166.886803][T10573] lo speed is unknown, defaulting to 1000
[  166.943083][T10574] lo speed is unknown, defaulting to 1000
[  167.142521][T10581] lo speed is unknown, defaulting to 1000
[  167.322313][T10593] lo speed is unknown, defaulting to 1000
[  167.658459][T10601] lo speed is unknown, defaulting to 1000
[  167.737295][T10603] lo speed is unknown, defaulting to 1000
[  167.912041][T10614] netlink: 'syz.0.940': attribute type 29 has an invalid length.
[  167.923015][T10617] netlink: 'syz.0.940': attribute type 29 has an invalid length.
[  167.948923][T10616] lo speed is unknown, defaulting to 1000
[  168.060231][T10620] lo speed is unknown, defaulting to 1000
[  168.085548][T10625] lo speed is unknown, defaulting to 1000
[  168.153662][T10632] IPVS: set_ctl: invalid protocol: 59 172.30.1.3:19999
[  168.323401][T10634] lo speed is unknown, defaulting to 1000
[  168.790651][T10643] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  168.887597][T10646] netlink: 'syz.0.945': attribute type 13 has an invalid length.
[  168.890296][T10646] netlink: 'syz.0.945': attribute type 17 has an invalid length.
[  168.900630][T10646] gretap0: refused to change device tx_queue_len
[  168.903400][T10646] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  168.913277][   T24] lo speed is unknown, defaulting to 1000
[  183.282405][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  183.285460][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  183.288099][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  183.290783][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  183.293577][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  184.613038][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  184.616854][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  184.621152][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  184.624688][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  184.628099][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  184.631781][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  184.635293][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  184.638130][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  184.641074][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  184.643449][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  185.325055][ T5220] Bluetooth: hci3: command tx timeout
[  186.684141][   T54] Bluetooth: hci5: command tx timeout
[  186.687076][ T5220] Bluetooth: hci4: command tx timeout
[  187.404033][ T5220] Bluetooth: hci3: command tx timeout
[  188.764147][   T54] Bluetooth: hci5: command tx timeout
[  188.766622][ T5220] Bluetooth: hci4: command tx timeout
[  189.484117][ T5220] Bluetooth: hci3: command tx timeout
[  190.844048][   T54] Bluetooth: hci5: command tx timeout
[  190.846537][ T5220] Bluetooth: hci4: command tx timeout
[  191.564085][ T5220] Bluetooth: hci3: command tx timeout
[  192.924169][   T54] Bluetooth: hci5: command tx timeout
[  192.926518][ T5220] Bluetooth: hci4: command tx timeout
[  243.581875][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  243.585692][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  243.588935][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  243.592621][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  243.596312][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  244.756293][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  244.759387][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  244.762393][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  244.765883][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  244.768431][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  244.784483][   T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  244.787638][   T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  244.790628][   T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  244.793366][   T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  244.796571][   T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  245.644136][   T54] Bluetooth: hci6: command tx timeout
[  246.844157][ T5220] Bluetooth: hci7: command tx timeout
[  246.847148][   T54] Bluetooth: hci8: command tx timeout
[  247.724078][ T5220] Bluetooth: hci6: command tx timeout
[  248.924105][ T5220] Bluetooth: hci7: command tx timeout
[  248.926443][   T54] Bluetooth: hci8: command tx timeout
[  249.804133][   T54] Bluetooth: hci6: command tx timeout
[  251.004100][   T54] Bluetooth: hci8: command tx timeout
[  251.006345][   T54] Bluetooth: hci7: command tx timeout
[  251.884094][ T5220] Bluetooth: hci6: command tx timeout
[  253.084092][ T5220] Bluetooth: hci7: command tx timeout
[  253.086426][ T5220] Bluetooth: hci8: command tx timeout
[  273.973891][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  273.976323][    C1] rcu: 	1-...!: (10501 ticks this GP) idle=dbbc/1/0x4000000000000000 softirq=55303/55303 fqs=0
[  273.982558][    C1] rcu: 	(t=10501 jiffies g=31873 q=1396 ncpus=2)
[  273.985164][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g31873 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  273.989763][    C1] rcu: 	Possible timer handling issue on cpu=1 timer-softirq=9129
[  273.992732][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g31873 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
[  273.996815][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  273.999887][    C1] rcu: RCU grace-period kthread stack dump:
[  274.002098][    C1] task:rcu_preempt     state:I stack:27128 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  274.005900][    C1] Call Trace:
[  274.006980][    C1]  <TASK>
[  274.007934][    C1]  __schedule+0x16f5/0x4d00
[  274.009562][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  274.011573][    C1]  ? schedule+0x165/0x360
[  274.013208][    C1]  ? __lock_acquire+0xab9/0xd20
[  274.014895][    C1]  ? __pfx___schedule+0x10/0x10
[  274.016463][    C1]  ? schedule+0x91/0x360
[  274.017885][    C1]  schedule+0x165/0x360
[  274.019459][    C1]  schedule_timeout+0x12b/0x270
[  274.021253][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  274.023126][    C1]  ? __pfx_process_timeout+0x10/0x10
[  274.025101][    C1]  ? prepare_to_swait_event+0x341/0x380
[  274.027181][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[  274.029048][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  274.030917][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.032939][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  274.034689][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  274.036820][    C1]  ? finish_swait+0xcd/0x1f0
[  274.038458][    C1]  rcu_gp_kthread+0x99/0x390
[  274.040066][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  274.041939][    C1]  ? __kthread_parkme+0x7b/0x200
[  274.043762][    C1]  ? __kthread_parkme+0x1a1/0x200
[  274.045635][    C1]  kthread+0x711/0x8a0
[  274.047010][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  274.048815][    C1]  ? __pfx_kthread+0x10/0x10
[  274.050396][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  274.052150][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.053899][    C1]  ? __pfx_kthread+0x10/0x10
[  274.055555][    C1]  ret_from_fork+0x3fc/0x770
[  274.057431][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  274.059195][    C1]  ? __switch_to_asm+0x39/0x70
[  274.060815][    C1]  ? __switch_to_asm+0x33/0x70
[  274.062578][    C1]  ? __pfx_kthread+0x10/0x10
[  274.064033][    C1]  ret_from_fork_asm+0x1a/0x30
[  274.065564][    C1]  </TASK>
[  274.066577][    C1] CPU: 1 UID: 0 PID: 10650 Comm: syz.0.946 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  274.066587][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.066592][    C1] RIP: 0010:qdisc_lookup_rcu+0xdd/0x6d0
[  274.066606][    C1] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 ab 29 ab f8 4d 8b 2c 24 4d 85 ed 0f 84 83 00 00 00 4d 8d 66 10 4c 89 e0 48 c1 e8 03 <48> b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 2b 05 00 00
[  274.066612][    C1] RSP: 0018:ffffc90007546f90 EFLAGS: 00000a02
[  274.066620][    C1] RAX: 1ffff11007a65d02 RBX: 00000000ffff0000 RCX: ffff8880284db980
[  274.066625][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  274.066629][    C1] RBP: 0000000000000001 R08: ffff8880284db980 R09: 0000000000000002
[  274.066633][    C1] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff88803d32e810
[  274.066637][    C1] R13: ffff888109828000 R14: ffff88803d32e800 R15: ffff888109828000
[  274.066642][    C1] FS:  00007f0bb47f66c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  274.066647][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  274.066651][    C1] CR2: 0000200000001480 CR3: 0000000108e62000 CR4: 00000000000006f0
[  274.066677][    C1] Call Trace:
[  274.066682][    C1]  <TASK>
[  274.066686][    C1]  qdisc_tree_reduce_backlog+0x1b2/0x480
[  274.066698][    C1]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  274.066708][    C1]  codel_change+0x859/0xae0
[  274.066720][    C1]  ? is_dynamic_key+0xd6/0x1c0
[  274.066726][    C1]  ? qdisc_alloc+0x789/0xaa0
[  274.066733][    C1]  ? qdisc_create+0x12c/0xea0
[  274.066738][    C1]  ? rtnetlink_rcv_msg+0x77c/0xb70
[  274.066745][    C1]  ? netlink_rcv_skb+0x208/0x470
[  274.066753][    C1]  ? netlink_unicast+0x75c/0x8e0
[  274.066758][    C1]  ? netlink_sendmsg+0x805/0xb30
[  274.066765][    C1]  ? __sock_sendmsg+0x21c/0x270
[  274.066771][    C1]  ? ____sys_sendmsg+0x52d/0x830
[  274.066778][    C1]  ? ___sys_sendmsg+0x21f/0x2a0
[  274.066785][    C1]  ? __sys_sendmmsg+0x227/0x430
[  274.066793][    C1]  ? __pfx_codel_change+0x10/0x10
[  274.066806][    C1]  codel_init+0x1f7/0x3e0
[  274.066814][    C1]  ? __pfx_codel_init+0x10/0x10
[  274.066821][    C1]  qdisc_create+0x7ac/0xea0
[  274.066830][    C1]  tc_modify_qdisc+0x1538/0x20e0
[  274.066842][    C1]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  274.066857][    C1]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  274.066863][    C1]  rtnetlink_rcv_msg+0x77c/0xb70
[  274.066871][    C1]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  274.066878][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  274.066884][    C1]  ? ref_tracker_free+0x63a/0x7d0
[  274.066895][    C1]  ? __copy_skb_header+0xa7/0x550
[  274.066905][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  274.066917][    C1]  netlink_rcv_skb+0x208/0x470
[  274.066926][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  274.066933][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  274.066944][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  274.066952][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  274.066961][    C1]  netlink_unicast+0x75c/0x8e0
[  274.066972][    C1]  netlink_sendmsg+0x805/0xb30
[  274.066983][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.066991][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  274.067003][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  274.067013][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.067021][    C1]  __sock_sendmsg+0x21c/0x270
[  274.067028][    C1]  ____sys_sendmsg+0x52d/0x830
[  274.067039][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  274.067050][    C1]  ? import_iovec+0x74/0xa0
[  274.067059][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  274.067069][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  274.067088][    C1]  ? __fget_files+0x2a/0x420
[  274.067097][    C1]  ? __fget_files+0x3a0/0x420
[  274.067108][    C1]  __sys_sendmmsg+0x227/0x430
[  274.067119][    C1]  ? __pfx___sys_sendmmsg+0x10/0x10
[  274.067126][    C1]  ? do_futex+0x333/0x420
[  274.067139][    C1]  ? fput+0xa0/0xd0
[  274.067155][    C1]  ? rcu_is_watching+0x15/0xb0
[  274.067166][    C1]  __x64_sys_sendmmsg+0xa0/0xc0
[  274.067175][    C1]  do_syscall_64+0xfa/0x3b0
[  274.067183][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.067189][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.067195][    C1]  ? exc_page_fault+0x9f/0xf0
[  274.067205][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.067211][    C1] RIP: 0033:0x7f0bb698e929
[  274.067220][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  274.067225][    C1] RSP: 002b:00007f0bb47f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  274.067232][    C1] RAX: ffffffffffffffda RBX: 00007f0bb6bb6080 RCX: 00007f0bb698e929
[  274.067236][    C1] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000b
[  274.067240][    C1] RBP: 00007f0bb6a10b39 R08: 0000000000000000 R09: 0000000000000000
[  274.067243][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.067247][    C1] R13: 0000000000000000 R14: 00007f0bb6bb6080 R15: 00007fff2ef1f398
[  274.067257][    C1]  </TASK>

VM DIAGNOSIS:
14:37:05  Registers:
info registers vcpu 0

CPU#0
RAX=5112295a11830900 RBX=ffffffff81976c78 RCX=5112295a11830900 RDX=0000000000000001
RSI=ffffffff8d998f5e RDI=ffffffff8be29dc0 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f6f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f44d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=fffffffffffffffa CR3=000000010fcb8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fe2a2d85d00
XMM02=020016b000000025 16a8030200000000 XMM03=16b80300020016b4 0300020016b20300
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000001df8a
XMM06=0e800408a0030008 0008900300000027 XMM07=800303d000000000 0446080052080001
XMM08=00000608060a016c 9c00080000000026 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000069 RBX=0000000000000069 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03f0
R8 =ffff888020938237 R9 =1ffff11004127046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98bc R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0bb47f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001480 CR3=0000000108e62000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffff00ffffff00 ff00000000000000 XMM01=ffffffffffffffff ffffffffffffff00
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f0bb76ed100 00007f0bb6b85440 XMM05=00007f0bb6b85458 00007f0bb6b854a0
XMM06=00007f0bb6b85498 00007f0bb6b85490 XMM07=00007f0bb6b85488 00007f0bb6b85480
XMM08=0a3020646165725f 6b72616d20302073 XMM09=0000000000000000 00007f0bb6a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
