last executing test programs:

3m22.375521866s ago: executing program 1 (id=3013):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
unshare(0x22020600)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0xfffe, 0x3, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
sendto$inet6(r2, &(0x7f0000000200)="826bb66f47d47554c1eacd985a1403aba32253ff6423059d", 0x18, 0x4044, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000300), &(0x7f0000000340)=r1, 0x1000000}, 0x20)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
unshare(0x64060400)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009"], 0xfdef)

3m20.708437896s ago: executing program 1 (id=3024):
unshare(0x20040600)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r0, 0x0, 0x0, 0x20000000)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}]}}]}, 0x48}}, 0x0)

3m19.179634189s ago: executing program 1 (id=3029):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf256800000008000300", @ANYRES32=r1, @ANYBLOB="160000000485fd070a0736000701bfb10bdeb7ea09060000"], 0x34}, 0x1, 0x0, 0x0, 0x2000010}, 0x8000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e0040"], 0x44}}, 0x0)

3m18.65322974s ago: executing program 1 (id=3034):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x84, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x17a0000}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x82}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008840}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x3c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}, @FRA_DST={0x8, 0x1, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x7c}}, 0x0)

3m18.511484906s ago: executing program 1 (id=3036):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005800)=ANY=[@ANYBLOB="280000002d000100000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="1fe54ec5b819f49f00"], 0x28}], 0x1}, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000004c0)={0x7665, <r2=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@fallback=r0, r0, 0x3, 0x22, 0x0, @void, @void, @void, @value=r2}, 0x20)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000500)='syz_tun\x00', 0x10)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0x2, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_pie={{}, {0x0, 0x2, [@TCA_PIE_LIMIT={0x0, 0x2, 0x8000}, @TCA_PIE_ALPHA={0x0, 0x4, 0x1e}, @TCA_PIE_TARGET={0x0, 0x1, 0x2}]}}]}, 0x34}}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x4, 0xa, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xbd}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc015}, 0x884)
r7 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x1d, &(0x7f0000000000), 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000fddcffff0000000000000000000000b36b4bb9db44d6201e911db9ed251345448fd668db89211da019184971b8e7d9b5e42d26fd8362a468fdc6c52cac67f394e290ab92dbcd00"/87, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="38000000f4ff1eff00000000fd19000401000000", @ANYRES32=0x0, @ANYBLOB="21080000000000001800128008000100677470000c00028008000200", @ANYRES32=r9, @ANYBLOB], 0x38}}, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r8, &(0x7f0000000180), 0x0}, 0x20)
getsockopt$inet_mreqn(r5, 0x0, 0x6c, &(0x7f0000000280)={@empty, @multicast1}, &(0x7f00000003c0)=0xc)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0xffffffff, @private2, 0x2}, 0x1c)
r11 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r12, &(0x7f0000000440), &(0x7f0000000480)=@udp=r11}, 0x20)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r12}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000800)={r13, 0x0, 0xf, 0x0, &(0x7f0000000900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000dd0a080001400000000108000340000000000900010073797a30"], 0xc8}}, 0x0)

3m17.815818707s ago: executing program 1 (id=3041):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x17, 0x4, &(0x7f0000000300)=ANY=[@ANYRES8=r3], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x3a, 0x0, 0x41000}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r4, r5, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0xbc1, 0x1}}, 0xfffffffffffffed2)
syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@canfd={0xd, {{0x1}, 0x24, 0x1, 0x0, 0x0, "2c63ecefc9e14a1ab3afcf882bcd49561375f47fd8dfda46652820f554caf364339a7057404d6a439711a0dbfe6b3a5835d94a5ec6d4fe10f0dcfa083202de47"}}}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000044}, 0x40)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40000)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e000000}]}]}, 0x3c}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r9, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)="144751ce153e0546f3902b33ea8420b16d802cd3aa5b0edb7482e5ccdcfdaf3109fc5353695c1f8808e31f5abdbb4cec0fd8830a2fbdf60c6a1184a4382e79edecb0b2227b211d3d7be257d154825d4d4afd00d248da817fbb92bf843e6a36543366002ba15aa941f0f1231a106c1e0e0a3962efa4f6f495e41fabde382e3fe2baf3141a76b8e931f73c057b3805d501902f9b8e3a655c0b67102561b9956b72623bcaceeea77b0a81219cd54a8fcac7b0fb2b962122061b3d03eaba2bd3", 0xbe}, {&(0x7f0000000400)='8', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000680)="a62caebb8a9661074860032c88d15be8b7167ae8949390bb403659e79f4ce0b3ec31e1e5f7d12ae234af08e5d1054c5a8e845371c02ed4104d49166984459a895089d4428319da8a67a4b391d3c9e317ffdd0b4e1db2e367f6c5c26183ae5aabc092826901c292f1dd3a93a0228e6635b853b2d2cfc99a55ae167081c56fc9a586", 0x81}, {&(0x7f0000000440)="aad526bc169e3c63eaa06c1d6826883eafa13474e4539f57773c48eedf1eb93015fb4b68d1ee9854da212ae7c326d6ac3d189b0b1eefc2d384dc30da733505157db02dfaeff59ce6c2392db62bd63480b2db089b0389929df4f7625427c91730d4c08f96f9d98500c2e978dfabb20caa68734688afc96c5a595d86397eaa2230006f7371aae8487f318c98630520fdf3a5a7ec08b1131bc64f2267784bd820a2ae12cdc1dd4c186ce6df9112830704a9ea8622844aa8dfc630b6005aef893949f033657929ca0c31e7409e5e781cd6a440bb8c", 0xd3}], 0x2}}], 0x2, 0x20)
sendto$inet6(r9, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x300, 0x1, 0x0}, &(0x7f0000000000)=0x40)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r11, 0x0, 0x17, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x38, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c001}, 0x800)

3m2.791571496s ago: executing program 32 (id=3041):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x17, 0x4, &(0x7f0000000300)=ANY=[@ANYRES8=r3], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x3a, 0x0, 0x41000}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r4, r5, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0xbc1, 0x1}}, 0xfffffffffffffed2)
syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@canfd={0xd, {{0x1}, 0x24, 0x1, 0x0, 0x0, "2c63ecefc9e14a1ab3afcf882bcd49561375f47fd8dfda46652820f554caf364339a7057404d6a439711a0dbfe6b3a5835d94a5ec6d4fe10f0dcfa083202de47"}}}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000044}, 0x40)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40000)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e000000}]}]}, 0x3c}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r9, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)="144751ce153e0546f3902b33ea8420b16d802cd3aa5b0edb7482e5ccdcfdaf3109fc5353695c1f8808e31f5abdbb4cec0fd8830a2fbdf60c6a1184a4382e79edecb0b2227b211d3d7be257d154825d4d4afd00d248da817fbb92bf843e6a36543366002ba15aa941f0f1231a106c1e0e0a3962efa4f6f495e41fabde382e3fe2baf3141a76b8e931f73c057b3805d501902f9b8e3a655c0b67102561b9956b72623bcaceeea77b0a81219cd54a8fcac7b0fb2b962122061b3d03eaba2bd3", 0xbe}, {&(0x7f0000000400)='8', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000680)="a62caebb8a9661074860032c88d15be8b7167ae8949390bb403659e79f4ce0b3ec31e1e5f7d12ae234af08e5d1054c5a8e845371c02ed4104d49166984459a895089d4428319da8a67a4b391d3c9e317ffdd0b4e1db2e367f6c5c26183ae5aabc092826901c292f1dd3a93a0228e6635b853b2d2cfc99a55ae167081c56fc9a586", 0x81}, {&(0x7f0000000440)="aad526bc169e3c63eaa06c1d6826883eafa13474e4539f57773c48eedf1eb93015fb4b68d1ee9854da212ae7c326d6ac3d189b0b1eefc2d384dc30da733505157db02dfaeff59ce6c2392db62bd63480b2db089b0389929df4f7625427c91730d4c08f96f9d98500c2e978dfabb20caa68734688afc96c5a595d86397eaa2230006f7371aae8487f318c98630520fdf3a5a7ec08b1131bc64f2267784bd820a2ae12cdc1dd4c186ce6df9112830704a9ea8622844aa8dfc630b6005aef893949f033657929ca0c31e7409e5e781cd6a440bb8c", 0xd3}], 0x2}}], 0x2, 0x20)
sendto$inet6(r9, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x300, 0x1, 0x0}, &(0x7f0000000000)=0x40)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r11, 0x0, 0x17, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x38, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c001}, 0x800)

2m34.592226182s ago: executing program 5 (id=3486):
r0 = socket(0xa, 0x3, 0x4)
ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00')
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000240))
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
listen(r2, 0x0)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)="16", 0x1}], 0x1}}], 0x1, 0x24008094)
close(0x3)
close(0x4)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x30, 0x11, 0x0, {0xc, @tcp_ip4_spec={@remote, @empty, 0x4e21, 0x4e22, 0x4}, {0x0, @empty, 0x3, 0x0, [0x40, 0x56c]}, @udp_ip6_spec={@mcast1, @private2, 0x4e20, 0x4e23, 0x4}, {0x0, @local, 0x0, 0x5, [0x1c00]}, 0x6, 0x7}}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x40)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x19, 0x4)

2m34.478026374s ago: executing program 5 (id=3489):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0xb, 0x2, 0xfffffffc)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r3, 0x25, 0x4, @void}, 0x10)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x884)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0xfca5) (async)
setsockopt$inet_sctp_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f0000000240)={0x80, 0x3, 0x3, 0x3}, 0x8) (async)
bind$inet(r10, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) (async)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) (async)
setsockopt$inet_tcp_int(r12, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x240, 0xffffffff, 0x1a0, 0x0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0)
sendto$inet(r10, &(0x7f00000000c0)='}', 0xff41, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)

2m33.4787532s ago: executing program 5 (id=3501):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d61637674617000", @ANYRES32, @ANYBLOB="0a0001"], 0x48}}, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'})
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt(r3, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFC_CMD_SE_IO(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1110000}, 0xc, &(0x7f0000000380)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8080}, 0x40000000)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'})
gettid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff0000", @ANYRES32=r5, @ANYBLOB="f91a63dafba1c5b9d751267e25066bd6b1e168c350dcba13ab2b51adaa9c92aa6c6782ac46ebd199db7f887366db2e5d294329663492df2f85875aef4e60a472443a4cbe421d412dd8216417ad4fa6119f09cb91543d887e97409f949ff732d3dc8ab30e38bac32064183ce7d9d82b3d528f51eee8feadb028ef52f6499e62759f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
r6 = socket(0x1d, 0x2, 0x6)
setsockopt$llc_int(r6, 0x6a, 0x5, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
gettid()
getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000500)={{{@in=@remote, @in=@initdev}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000600)=0xe8)
getgid()
sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)}], 0x1, &(0x7f0000000640), 0x0, 0x40000}, 0x4800)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)

2m33.058239347s ago: executing program 5 (id=3508):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r2, 0x952de000)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, &(0x7f0000000180)="e4e15a2f50e3fb2510a72e7996003ea51983bbcac50fd61058b6d6530df1a3837f1c504afa06ffba3811bc48f8cff18b8627369415798eed838c8a2ce2c8b831b2d8d444b53bed94def6730831b769cba4965d39d5e78a07d3cfc98e669637a32c9056fd435aca2250c2c531ef09f041fadffa5379efe865fa3ffafe57842f7f6d4e4bdf5d0f8c0da65fd96681cf9cb0810934d5a05def672414a9f341f53a1d3ce901b143677669f39404ba693eda35bf7ad9970d23917a6d079bb5dc9530c9ee1538987e7a96772add6a26bfe122012e5e914702812bcfb12d4c9e45750f98a1371dd7bf", &(0x7f0000000280)=""/81}, 0x20)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x801, 0x10042}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_1\x00'}]}, 0x40}}, 0x4000006)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x10, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)

2m32.847877745s ago: executing program 5 (id=3509):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="620e0000", @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf254c00000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020028bd7000fbdbdf254a00000008000300", @ANYRES32=r5, @ANYBLOB="1400758004000700040009000410070010007580040008000400020004000300"], 0x40}, 0x1, 0x0, 0x0, 0x4c800}, 0x20000000)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c382, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x7}, {0x7, 0xffff}, {0x1}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x4}}, @TCA_RATE={0x6, 0x5, {0xff, 0xfe}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)

2m32.587977767s ago: executing program 5 (id=3512):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp6(0xa, 0x3, 0x2) (async)
r2 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r2, 0x29, 0x3, 0x0, &(0x7f0000000040)=0xfdf4)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)

2m17.480816933s ago: executing program 33 (id=3512):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp6(0xa, 0x3, 0x2) (async)
r2 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r2, 0x29, 0x3, 0x0, &(0x7f0000000040)=0xfdf4)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)

2m14.360770313s ago: executing program 2 (id=3727):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)={0x2c, 0x41, 0x1, 0x5fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str='{\x00'}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)

2m14.208090854s ago: executing program 2 (id=3728):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x18, 0x8, 0xfffc, 0xffff, 0x4, 0x401, 0x6, {0x0, @in6={{0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x6}}, 0x100, 0x6, 0x5, 0x9, 0xfffffffd}}, &(0x7f0000000440)=0xb0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0)
close(r0)

2m14.185126583s ago: executing program 2 (id=3730):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x6c}}, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
connect$rds(r1, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aa2b77aaaa44aaaaaaaaaabb08004621002800680000e1de3c2121e486e3ac1414aa000000004e20"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pimreg1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000140), 0x4)
bind$rds(r6, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10)
r7 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000140), 0x4)
bind$rds(r7, &(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10)
connect$rds(r6, &(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000000200)={&(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)=""/4, 0x4}], 0x1}, 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0)
close(r6)
close(r7)
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090)
socket$nl_route(0x10, 0x3, 0x0)

2m13.19665007s ago: executing program 2 (id=3734):
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0)
accept$inet6(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) (async)
accept$inet6(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)

2m13.191372822s ago: executing program 2 (id=3736):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x40000000015, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
socket$kcm(0x23, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0)
socket$kcm(0x2, 0x3, 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100))
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0)
r2 = accept4(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x80, 0x80000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xedee}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7667}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040084}, 0x20008800)

2m13.186702409s ago: executing program 2 (id=3739):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x3, 0x33)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000140001800d00010075cba93a73"], 0x28}}, 0x0)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x302010}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="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"], 0x288}, 0x1, 0x0, 0x0, 0x4854}, 0x800)
bind$x25(r0, &(0x7f0000000080), 0x12)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={<r6=>r1})
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000000140), &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
socketpair(0x1d, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc0000002d0000040000000000000000830100000f0000001400010000000000000000000000000000000000376d56f4f6dbf320a647ebbd9a910a71c12a99d402272297140b44dc89bfd96d1034ebf5abf7253b79b867bfebb6498f9ea289b793525433182f731913b91e00aab7621f000000359ca44828b94afd197cc9c4867b6970800c9ac11d9d77312c6c2b9ff8a6dc1cad39f6b78e07cc2fa08546bba336b0e0cef688bc486db3a892f6d81c80c24a6c5e3a529be335a0b0d6de1ced03217bffedff550126ab1b957c7e41d01b6465d89505750aa3dd18efbf6c5f96cb059205b099833a02fd5107bcbf03c075334d472d8f463e13"], 0xfc}}, 0x0)

2m10.686051s ago: executing program 3 (id=3762):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000040)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r5], 0x60}, 0x1, 0x400000000000000}, 0x40010)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r6=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@loopback, @private, <r7=>0x0}, &(0x7f0000000100)=0xc)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote, <r8=>0x0}, &(0x7f0000000180)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6gre0\x00', <r9=>0x0, 0x2f, 0x8, 0x9, 0x7, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x10, 0x40, 0x5, 0xffff}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'gretap0\x00', <r10=>0x0, 0x8, 0x700, 0x4, 0x7ff, {{0xa, 0x4, 0x0, 0x2b, 0x28, 0x66, 0x0, 0x1, 0x2f, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x14, 0x72, 0x0, 0x2, [0x3, 0x4, 0x16ec, 0x1]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r11=>0x0})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r13=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r13}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_FLAGS={0x8, 0x8, 0x314}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', <r14=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r15=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={<r16=>0x0, @loopback, @multicast2}, &(0x7f0000000500)=0xc)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', <r17=>0x0, 0x2f, 0x4a, 0x8, 0x816c, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40, 0x700, 0x57, 0x7}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r18=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl2\x00', <r19=>0x0, 0x2f, 0x2, 0x3, 0x2, 0x20, @dev={0xfe, 0x80, '\x00', 0x1b}, @mcast1, 0x8, 0x7800, 0x9, 0x2}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'erspan0\x00', &(0x7f0000000780)={'gre0\x00', <r20=>0x0, 0x20, 0x700, 0x3, 0x3, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @rand_addr=0x64010102, {[@noop, @rr={0x7, 0xf, 0xab, [@dev={0xac, 0x14, 0x14, 0x2c}, @loopback, @remote]}, @end]}}}}})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000840)={0x4d4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4000000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r18}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x54}, 0x40)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000))
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x3, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

2m10.543397445s ago: executing program 3 (id=3764):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp(0x2, 0x3, 0x2) (async)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x4, "d30f388c52fde77c68b0fa000000000000000000000000000000002000", 0x0, 0x5, 0x4000000, 0x5}, 0x3c) (async)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x4, "d30f388c52fde77c68b0fa000000000000000000000000000000002000", 0x0, 0x5, 0x4000000, 0x5}, 0x3c)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791000000000000007000000500000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x6, '\x00', 0x0, @fallback=0x1e}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08fab3bd7000ffdbdf255c0000000c0099006adb0000050000001e006b005a00000008006b00b400000008006b00e001000008006b000a0000001a621bd19740e433a038b5c004f51c837bc7ccf2e236b501a6230024c4cc8d3515f82d124834fbf72ede8e88f38f73f42b59b22763ff096542837669d0e617bfec48ecea2830b604554e7d024b937d377bb4b9582f739a2e98fad8676d748b47"], 0x40}, 0x1, 0x0, 0x0, 0x20048004}, 0x4000800)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b0000008a"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x7f, r7}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x7f, r7}, 0x38)
setsockopt$inet6_int(r6, 0x29, 0x48, &(0x7f0000000000)=0xfffffffc, 0x4) (async)
setsockopt$inet6_int(r6, 0x29, 0x48, &(0x7f0000000000)=0xfffffffc, 0x4)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
listen(0xffffffffffffffff, 0x3)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) (async)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r8) (async)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r8)
sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="01a07a8f4b55020000000000fbf3250526fe4513c2373f0000"], 0x14}, 0x8, 0x3000000000002}, 0x0)

2m10.46242785s ago: executing program 3 (id=3766):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', <r1=>0x0, 0x2f, 0x79, 0x1, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x1, 0x8, 0x5}})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipv6_deladdrlabel={0x50, 0x49, 0x100, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, r1, 0xbf09}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0xe, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000180)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendmmsg$unix(r4, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x8001}}], 0x2, 0x80)
r7 = socket$kcm(0x10, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000640)={<r8=>0x0, @in6={{0xa, 0x4e24, 0x7ff, @mcast1, 0x10}}, [0x4f6, 0x4, 0x80, 0x7f, 0xf218, 0x22, 0x29b4, 0x4, 0x7ff, 0x1, 0x4f, 0x3, 0x674b, 0x1, 0xf]}, &(0x7f0000000740)=0x100)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f00000008c0)={&(0x7f0000000240), 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x50}, 0x840)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000780)=@assoc_value={r8, 0x9}, 0x8)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x20008000)

2m10.34301753s ago: executing program 3 (id=3768):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x5, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], <r1=>0x0, 0xf0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000180)={<r4=>0x0, @loopback, @multicast1}, &(0x7f0000000080)=0xc)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x22, &(0x7f00000000c0)=0x7b, 0x4)
setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @empty}, r4}, 0x14)
socket$netlink(0x10, 0x3, 0xe)

2m10.204935839s ago: executing program 3 (id=3770):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="9bbbbbbbbbbbaaaaaaaa92aa0800000000000000000000000000000000000000000000001000000000"], 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003000200000008001b000008"], 0x3c}}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x11, 0x2000000000000072, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, r0}, 0x94)
socket$inet_sctp(0x2, 0x1, 0x84)

2m10.091418566s ago: executing program 3 (id=3771):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x5c, r5, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0xfffffffffffffd0d, 0x1, @priority={{{}, {}, {0x0, 0x4, 0x1}}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x200400c4)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x3d}}}, 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b0002"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r7, 0x215eb000)
socket$kcm(0x10, 0x400000002, 0x0)
r9 = socket(0x2a, 0x2, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r9, 0x891a, 0x0)

1m58.4484047s ago: executing program 34 (id=3739):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x3, 0x33)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000140001800d00010075cba93a73"], 0x28}}, 0x0)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x302010}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="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"], 0x288}, 0x1, 0x0, 0x0, 0x4854}, 0x800)
bind$x25(r0, &(0x7f0000000080), 0x12)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={<r6=>r1})
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000000140), &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
socketpair(0x1d, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc0000002d0000040000000000000000830100000f0000001400010000000000000000000000000000000000376d56f4f6dbf320a647ebbd9a910a71c12a99d402272297140b44dc89bfd96d1034ebf5abf7253b79b867bfebb6498f9ea289b793525433182f731913b91e00aab7621f000000359ca44828b94afd197cc9c4867b6970800c9ac11d9d77312c6c2b9ff8a6dc1cad39f6b78e07cc2fa08546bba336b0e0cef688bc486db3a892f6d81c80c24a6c5e3a529be335a0b0d6de1ced03217bffedff550126ab1b957c7e41d01b6465d89505750aa3dd18efbf6c5f96cb059205b099833a02fd5107bcbf03c075334d472d8f463e13"], 0xfc}}, 0x0)

1m54.644355094s ago: executing program 35 (id=3771):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x5c, r5, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0xfffffffffffffd0d, 0x1, @priority={{{}, {}, {0x0, 0x4, 0x1}}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x200400c4)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x3d}}}, 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b0002"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r7, 0x215eb000)
socket$kcm(0x10, 0x400000002, 0x0)
r9 = socket(0x2a, 0x2, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r9, 0x891a, 0x0)

1.852532915s ago: executing program 4 (id=4480):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
pipe(&(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={<r5=>0x0, 0x8, 0x10001, 0x5a}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000400)={r5, 0x98, &(0x7f0000000340)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e20, 0x8, @private2, 0x9}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @private=0xa010102}]}, &(0x7f0000000440)=0x10)
bind$packet(r3, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0xbe}, 0x14)
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f052", 0xf1}], 0x1, 0x1)
close(r2)
splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000036c0)=0x8001, 0x4)
sendmsg$inet(r0, &(0x7f0000004380)={&(0x7f0000004040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000004180)=[{&(0x7f0000004080)="61eeb715ac", 0x5}], 0x1}, 0x8000)

1.795993263s ago: executing program 7 (id=4482):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000700)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) (async, rerun: 32)
listen(r0, 0x8) (async, rerun: 32)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf1, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f0000000340), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (rerun: 32)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000800)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa0000000000000000000000004e240005000000000a00000000000000", @ANYRES32=r6, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800000000ba2b6e0000000000000000007e5b6d6e8c330e19fbaa3a0f706405aa53ff4745a2e622d641857be0774a8385a2fa5864652c8d7145adbd1ab5bc90618cfa890940c5e4828f74f9219f6d346f1497b7a69e0839b127a25bef7ed20fdf68a263a1e07b8831"], 0xb8}}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async)
sendto$inet(r5, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8)
sendmmsg$inet6(r5, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) (async)
close(r5)

1.591666429s ago: executing program 6 (id=4484):
r0 = epoll_create1(0x0)
close(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000600)=ANY=[], 0x342) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', 0x0}) (async)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (rerun: 32)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async, rerun: 64)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0)=0x4) (rerun: 64)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@dev, <r4=>0x0}, &(0x7f0000000140)=0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

1.527934567s ago: executing program 8 (id=4485):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r2, @ANYBLOB="08000500010000001400040074", @ANYBLOB="d53d37262adfe1527c48f9f0895ad6cfbcf391631bc4c0681df97bfe4e709c29466d343eecc66ee61173171ee0dbcff36b06e87c5f"], 0x54}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="170000001e000100000000000000000007"], 0x28}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x0, 0xfffffffd}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r2, @ANYBLOB="08000500010000001400040074", @ANYBLOB="d53d37262adfe1527c48f9f0895ad6cfbcf391631bc4c0681df97bfe4e709c29466d343eecc66ee61173171ee0dbcff36b06e87c5f"], 0x54}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="170000001e000100000000000000000007"], 0x28}}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x0, 0xfffffffd}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x20) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)

1.373322753s ago: executing program 0 (id=4486):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) (async, rerun: 64)
ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000000)={0xc, 0x7, 0x3, 0x14}) (rerun: 64)

1.303889879s ago: executing program 6 (id=4487):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000070a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003803100010076657468305f746f5f687372000000005c000000200a0101000b000000000000010000000900020073797a30000084000900010073797a30"], 0xe8}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x700, 0x20, 0x3, 0x3, {{0x5, 0x4, 0x1, 0x7, 0x14, 0x67, 0x0, 0x0, 0x4, 0x0, @loopback, @empty}}}})
ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000100))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8840)
socket(0x1e, 0x4, 0x0)

1.303269031s ago: executing program 8 (id=4488):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400010000000000000000000000000000000001"], 0x38}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000064000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00010074"], 0xec}}, 0x0)

1.14844411s ago: executing program 8 (id=4489):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4d, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES16=r2], 0x3c}}, 0x40000)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x1d, 0x2, 0x6) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4d, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES16=r2], 0x3c}}, 0x40000) (async)

1.141010167s ago: executing program 0 (id=4490):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="110000001000010000000000000000000000000a14000000f4000100f4a80000000000000000000a"], 0x28}}, 0x0)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f00000006c0)="8c3fe11ab92621892c08002ce7ae", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r6 = socket$inet(0x2, 0x3, 0x5)
setsockopt$inet_int(r6, 0x0, 0x19, &(0x7f0000000080)=0x3, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r7, &(0x7f0000000000)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8840000, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000200000000000000000000008500000087000000850000000500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a01030000000000000000020000001c00048018000180080001006c6f67000c0002800800054000007fff08000b40fbffff030900020073797a3200000000140000001100010000000000000000000000000a"], 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$kcm(0x2, 0x3, 0x106)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8800)
sendmsg$inet(r11, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff})
getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8c30}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x7ffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x50}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000280)="5767c331e895cd135c5b7feeffd9", 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004997300080000000100000080000000", @ANYRES32=r1, @ANYBLOB="0100008000"/20, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="01000000020000000200"/28], 0x50)

980.407219ms ago: executing program 6 (id=4491):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40500000000000079108100000000000500000000000000950004000000000060a633a45c6314764f8f0d80197bcfaae5c754979187bfd9a21bb0d7209bb7a0807413d4926746aa34"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004288cac97d2d74417de11c8", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000008c000000b700000000000100950000000000000030c811c19f5e8ec7c9cac27c9a8e514313092062f04b4f565be0a05b98824598a7c91e2cdd3406c59a871fc172d1943d9431bd01502b26e01a89654f09a2abcb15ef53f97a018e1a6be2faa4bcd8e1c125db6381f0f13e33212a4c304df68fd3af35a714d1101882b8e7fc43d37611e4aee38d64ffcd2d354a9af4c6da5be0f3b0738b1574bc56ff1812defaf716bc1e7c2d7013ed7f46c9c52f591a3b11d886ed1e618c44aeead65c8a0df8909de324c9c946766b484f405f314948c02f21297acb3dfb956dd4a138b5d908dd49306a88"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400880, 0x0)
write$tun(r2, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRES16=0x0, @ANYBLOB="45159666d73cb1eac4b74b56cb93db8d75ba612e86693a1f59d2d1a7bc"], 0x101)

924.491383ms ago: executing program 8 (id=4492):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020000084c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000000802034000000014080002400000000208000740000000000900010073797a30000000000900020073797a3200"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)

882.962525ms ago: executing program 4 (id=4493):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000e80)=0x57bb, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10)
close(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r1, &(0x7f00000002c0), 0x6, 0x0)

826.388566ms ago: executing program 0 (id=4494):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5, r3}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f00000000c0)="31ce6528e02df9a9ac864f5d84a86385b1d4e55360aa0b271e7d8841adf62bf16b143776d3ae140712cbd540e1fda44c1fd15d77faf3cc611e4887180e4e195a9a07568813bbcd3b736061755ff6013b890f1680f5b051abe023bb42e7f0b6995c01acf4aada071ee7ab945244df25daba82d2386c583101a961c20f690b29a3381f01442097f9f888d50a18c7e36781a04ebebad10e3494f3ef36daf704a05dd10ccf8f9a1edf7ebeaaec2936dcdcecd8a3a6e87437"}, 0x20)
listen(r0, 0x20)

825.623516ms ago: executing program 6 (id=4495):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xec}, 0x1, 0x0, 0x0, 0x480c0}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
r6 = socket(0x1d, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000001840)=ANY=[], 0xb)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket(0x15, 0x5, 0x0)
getsockopt(r8, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r9, &(0x7f0000004dc0)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x3, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000540)="a69c7e", 0x3}], 0x1}}], 0x2, 0x4000090)
setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x8}})

699.865033ms ago: executing program 7 (id=4496):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x200008c0)

689.585486ms ago: executing program 8 (id=4497):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, 0x0, &(0x7f0000000040))
write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0xa010100, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0xd, 0x0, @void}}}}}}}}, 0x32)

685.927837ms ago: executing program 4 (id=4498):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x28044042)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000001680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xc}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x51}, 0x800)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001600)={&(0x7f0000000280)={0x1374, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf77}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x49}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3bb7360d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x41}]}]}, @TIPC_NLA_NODE={0x1110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xbb, 0x3, "7d5388c622944017332a8ffb984df6828116870e0eab143a47a8abca8bc69051ecaf80cead5400e6f55b1966b272a883766d53c073260eefb0a61c7328b02cc6445f5a01c7d97d4d5faad2a4461cfe60ae94951fa62c70bb74c2da73a450516e74ee4a8e0ccc301d6915c8c5e36e418c14ca3830bf9608fa7c82c248dba8781fd44c70d9236a2e7f22573d694e32ead21e74fba76a0f2250955161e74e2a720536b28fe5353bcd2346e3209684d71f2034a2d024f6dc7f"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x20000000}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "cdfda9fd02aa655b4bb27c35df23620332c6da3b"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x936}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2de1107ccdf882385e5d69f9fb7f89df3bd18922d21e9ba8c1e5"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "e2e624107411815fba11a5cfa59b5a37964a0d498836"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5fd7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff000000}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}]}, 0x1374}, 0x1, 0x0, 0x0, 0x2600c045}, 0x24000001)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xff07, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004)
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x404100}, 0xc, &(0x7f0000001780)={&(0x7f0000001800)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000428bd7000fbdbdf25140000006800048014000780080001000600000008000400090000002400078008000400080000000800030002000000080003000000000008000300ff7f00000900010073797a31000000000900010073797a31000000001300010062726f6164636173742d6c696e6b00002570454d3f1972b2136e4df023bbedabe88d38612a627b025de80080000000000000ffe08d3f7e6e577164f77cb0e6831ca5412d0cd11aaab241eafd95153ed9cbb4dbfdb30200000000000000b4176ab105e3cd"], 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x10)

586.022003ms ago: executing program 7 (id=4499):
socket$kcm(0x10, 0xd, 0x0) (async)
r0 = socket$kcm(0x10, 0xd, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d08023f000000040000a118000200ff020000091d00000000000000000001a80016ea1f00084003eb4bd04554bf2a31cf1f2e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e885913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b34113", 0xd9}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04)

515.636397ms ago: executing program 0 (id=4500):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18)
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000040)=r3, 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$sock_inet_tcp_SIOCINQ(r4, 0xff02, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xb)
close(r5)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000015c0)={'syztnl1\x00', &(0x7f0000001580)={'gretap0\x00', <r6=>0x0, 0x10, 0x40, 0x2, 0x3, {{0x7, 0x4, 0x0, 0x8, 0x1c, 0x65, 0x0, 0x8, 0x29, 0x0, @remote, @multicast1, {[@generic={0x82, 0x3, "18"}, @generic={0x83, 0x4, "a4be"}]}}}}})
sendmsg$inet6(r4, &(0x7f0000001b80)={&(0x7f00000001c0)={0xa, 0x4e21, 0x3, @private0, 0x5b3d}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000000340)="0d6bfd433a3ed34702dfe8fe6f0124612fba43a290b616a759f8bc956fa665d8626b6e0006b08c660cc299034d5bf67e403f7756b973f244382224edebd47a8e719076522c0df5470e0fcb8210a66d374788a1afdbb23c49ad69d0d85f4ba46896425bd1ce31d97d10935f39ec23", 0x6e}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="4cbb066ccf18a748155417d8bc7d4d5607450f856c5c494cf088dc0852305366dd13f7f5926cb289ed96ab7479a1569a97aa353a0cad71f9a66a7b42b5e6803a5d361c3d6e9f65306d81996dc1d75f28b52e4873d921e3c569a153482c72247ce40c79f32de09bc2b7e69d8e1ef96bfcc84b1b56a21931be717d6436415112516eb3aa349f58", 0x86}, {&(0x7f0000001500)="853d897083052edbabd05bf0b99309db61922b3c788e38ddcb5272c58c6ed468f578d1891bce23a89ea0d92eb82133abb9b8e5f9d43ed9", 0x37}], 0x4, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"/640, @ANYRES32=r6, @ANYBLOB="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"], 0x548}, 0x8000)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000005200000127bd7000fbdbdf250a000001009fa309e08db44fd70e9af9ce0b9e31f046731d051be000ab68391a516ca5de3aae751ab07c3a5d52202564e7bb7c6ece640a65904f5fb9c6e93e09c450749fe220424ba43be236903a502622cc92cf", @ANYRES32=0x0, @ANYBLOB="0000050001800000000006000000000000000100", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00'], 0x40}}, 0x0)

439.057664ms ago: executing program 7 (id=4501):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc1c1480b61318"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0)

412.191422ms ago: executing program 4 (id=4502):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x2a, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x77}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0xc9, &(0x7f0000000380)=""/201, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x0, 0xd, 0x0, 0x800}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000500)=[{0x4, 0x5, 0xf, 0x5}, {0x4, 0x5, 0x9, 0x1}, {0x2, 0x1, 0x3, 0x1}, {0x5, 0x3, 0x9, 0xc}], 0x10, 0x8001}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
syz_emit_ethernet(0x82, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local, [@hopopts={0x11}], "fafb17c133d11e59bb99c35bdfcf89f5"}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0x15, 0x0, &(0x7f00000006c0)="5c71f91b05c413550230b4c817a62875483efe176d", 0x0, 0x8, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x80, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
pipe(&(0x7f0000000040))

332.415633ms ago: executing program 6 (id=4503):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000040)) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)

331.949843ms ago: executing program 0 (id=4504):
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x40, 0x8000, 0xffffffff, 0xc, {{0x16, 0x4, 0x0, 0x10, 0x58, 0x68, 0x0, 0xe, 0x29, 0x0, @broadcast, @rand_addr=0x64010101, {[@ssrr={0x89, 0x13, 0x3f, [@rand_addr=0x64010101, @rand_addr=0x64010101, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x37}]}, @timestamp_prespec={0x44, 0x1c, 0xde, 0x3, 0x3, [{@private=0xa010100, 0x3ff}, {@private=0xa010102, 0x1}, {@private=0xa010101, 0x2}]}, @timestamp={0x44, 0x14, 0x3, 0x0, 0x7, [0x1, 0x1, 0x3, 0x401]}]}}}}})
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r2, &(0x7f0000000840), 0x2, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0)
close(r3)

280.627353ms ago: executing program 4 (id=4505):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x21}, 0xe79}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="01000000c00800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000400d3238e"], 0x80}, 0x1, 0x0, 0x0, 0x44084}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000003200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001f40)=""/4089, 0x30, 0xff9, 0x8}, 0x28)

267.484222ms ago: executing program 7 (id=4506):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r3, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x26}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000000)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRESDEC=r0, @ANYBLOB="0800000000000000200012f9cc0001007674694014000280080003000200000008ac141437bb78c62152252e"], 0x40}, 0x1, 0x2000000000000000}, 0x0)

183.608676ms ago: executing program 8 (id=4507):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000040)={0x8001, 0x0, 0x0, 0x7, 0x6}) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0)

181.681085ms ago: executing program 6 (id=4508):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000005400018006000100020000492c00020006000000140003007f000001000000000000000000000000060004005000000007000600291c4997b4727200000c00070000000000040000000800080064000000080009"], 0x68}}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5001}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x60}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0xf0, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0xd294}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x94c0}, 0x44)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5003}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5005}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000005400018006000100020000492c00020006000000140003007f000001000000000000000000000000060004005000000007000600291c4997b4727200000c00070000000000040000000800080064000000080009"], 0x68}}, 0x0) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5001}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x60}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) (async)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0xf0, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0xd294}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x94c0}, 0x44) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5003}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5005}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) (async)

122.829532ms ago: executing program 0 (id=4509):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010429bd7000fddbdf2505000000200001800d0001007564701e735c6d8d99"], 0x34}, 0x1, 0x0, 0x0, 0x4c444}, 0x4000140)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) (async)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) (async)
shutdown(r0, 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ac", 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x1000, 0x0, 0xa}}}}}}}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x7, 0x100, {0x15, 0x4, 0x0, 0x4, 0x11d, 0x64, 0x8, 0xf3, 0x89, 0x1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3b}, {[@ssrr={0x89, 0x3, 0xdc}, @lsrr={0x83, 0xf, 0xed, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast]}, @cipso={0x86, 0x24, 0x2, [{0x1, 0x12, "75955c05cc97d4e384fadd5647c17bcc"}, {0x5, 0xc, "f55913fec5e4340af196"}]}, @end, @noop, @generic={0x83, 0x5, "0b70e9"}]}}}}}}}, 0x0)

52.055897ms ago: executing program 4 (id=4510):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={0x0, 0x0, 0x18}, 0x18)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES8=r3, @ANYRESDEC=0x0, @ANYBLOB="8aa40a0a9791bdc3936ba0d7f85d612e639796d5f044a401b68fe9ed4e1493f8c695c1a62d0aaa611c7f823df8041e4b7417527f827081b03cc0f5c570f145c127f783240cad83bf986c0d63f168d897c3e322e296fdf00b5d484b44ce7fa384269333cab880b6d602ad68e7a1911372d21dec37b7283fe3a64b1fc96aad81bcde701b6f011cfb027d55237dad5837f218a67c5fe11eab6148320635fa1c7dffba19e1bceea6746591a458b896074a12f864e5911ffe1a1ba44b821aafd1320b86f02c19c46278310049a87a289f52ae74919c3493f3cad02663fefc50e482f8c447ef579a5ec9c4", @ANYRES16=r2], 0x64}, 0x1, 0x0, 0x0, 0x20040e00}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000)

0s ago: executing program 7 (id=4511):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x8e}, 0x28) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$packet(0x11, 0x3, 0x300) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@remote, @multicast2, <r2=>0x0}, &(0x7f0000000140)=0xc)
sendto$packet(r1, &(0x7f0000000000)="8310849cf9ffff831aa1e5e5e9b3a47b7dc2de458810b7cd1bd94101de34e12c45c7d6461f01f7ba065be1ca765d28300c41dd63cff101f8da97bb1d5f7b49b7a4d6abc74a490b341792e61f52b633fa43718aba70334cbdfeb772206e21bb9abb8cb74d6b9a87bbb5b9c13a138cef97e8de07a84560a983b3edd793d2401c785a6e8d43ea85c91165d8325d72aa9e6c84efe29da311105c2805dd272f2775ef51e6ebb801471c6fc800c1d849445beeae5e1e69f6516ed67ca78e82637506b46fc83fe6", 0xc4, 0x11, &(0x7f0000000180)={0x11, 0xf5, r2, 0x1, 0x6, 0x6, @multicast}, 0x14)

kernel console output (not intermixed with test programs):

cess `syz.4.2990'.
[  336.210155][ T8463] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  336.210192][ T8463] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.228457][T17605] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2988'.
[  336.489701][ T5619] Bluetooth: hci0: command tx timeout
[  336.623032][T17638] netlink: 'syz.4.2997': attribute type 11 has an invalid length.
[  337.476823][ T8463] bridge_slave_1: left allmulticast mode
[  337.476870][ T8463] bridge_slave_1: left promiscuous mode
[  337.491052][ T8463] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.783368][ T8463] vcan0: left allmulticast mode
[  337.783601][ T8463] bond5: left allmulticast mode
[  337.790955][ T8463] batman_adv: batadv0: Interface deactivated: gretap2
[  337.791332][ T8463] tipc: Resetting bearer <eth:syzkaller0>
[  338.070925][ T8463] bond8 (unregistering): (slave ip6gre1): Releasing backup interface
[  338.071005][ T8463] ip6gre1 (unregistering): left promiscuous mode
[  338.217522][ T8463] batman_adv: batadv0: Removing interface: gretap1
[  338.236027][ T8463] batman_adv: batadv0: Removing interface: gretap2
[  338.273891][ T8463] 
 (unregistering): (slave geneve2): Releasing active interface
[  338.311903][ T8463] tipc: Disabling bearer <eth:syzkaller0>
[  338.360992][  T156] smbdirect: ib_dev[syz2] removed
[  338.465253][ T8463] bond7 (unregistering): (slave bridge4): Releasing backup interface
[  338.465281][ T8463] bridge4 (unregistering): left promiscuous mode
[  338.502650][ T8463] bond10 (unregistering): (slave bridge7): Releasing active interface
[  338.536971][ T8463] bond1 (unregistering): Released all slaves
[  338.551129][ T8463] 
 (unregistering): Released all slaves
[  338.562534][ T8463] bond2 (unregistering): Released all slaves
[  338.576155][ T8463] bond3 (unregistering): Released all slaves
[  338.578575][ T5619] Bluetooth: hci0: command tx timeout
[  338.587722][ T8463] bond4 (unregistering): Released all slaves
[  338.604787][ T8463] bond5 (unregistering): Released all slaves
[  338.621055][ T8463] bond6 (unregistering): Released all slaves
[  338.633494][ T8463] bond7 (unregistering): Released all slaves
[  338.644387][ T8463] bond8 (unregistering): Released all slaves
[  338.667993][ T8463] bond9 (unregistering): Released all slaves
[  338.686868][ T8463] bond10 (unregistering): Released all slaves
[  338.700026][T17521] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.700140][T17521] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.700268][T17521] bridge_slave_0: entered allmulticast mode
[  338.701291][T17521] bridge_slave_0: entered promiscuous mode
[  338.721839][T17521] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.721935][T17521] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.722087][T17521] bridge_slave_1: entered allmulticast mode
[  338.727013][T17521] bridge_slave_1: entered promiscuous mode
[  338.835757][T11271] infiniband syz2: ib_query_port failed (-19)
[  338.875026][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1
[  338.938453][ T8463] : left promiscuous mode
[  339.114954][T17721] netlink: 'syz.4.3007': attribute type 4 has an invalid length.
[  339.117417][T17721] .`: renamed from bond0
[  339.135772][T17716] xt_CT: No such helper "netbios-ns"
[  339.151390][T17521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  339.156351][T17521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.191606][ T8463] tipc: Left network mode
[  339.213755][T17521] team0: Port device team_slave_0 added
[  339.216516][T17521] team0: Port device team_slave_1 added
[  339.260712][T17521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.260753][T17521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  339.260777][T17521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.262593][T17521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.262608][T17521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  339.262631][T17521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  339.429836][T17521] hsr_slave_0: entered promiscuous mode
[  339.444335][T17521] hsr_slave_1: entered promiscuous mode
[  339.445082][T17521] debugfs: 'hsr0' already exists in 'hsr'
[  339.445099][T17521] Cannot create hsr debugfs directory
[  340.128700][T17741] netlink: 'syz.0.3014': attribute type 14 has an invalid length.
[  340.648502][ T5619] Bluetooth: hci0: command tx timeout
[  340.754188][ T8464] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.834200][T17776] __nla_validate_parse: 6 callbacks suppressed
[  340.834220][T17776] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3017'.
[  340.970584][T17778] netlink: 'syz.0.3019': attribute type 4 has an invalid length.
[  340.970606][T17778] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3019'.
[  341.011908][T17786] netlink: 'syz.3.3021': attribute type 1 has an invalid length.
[  341.011931][T17786] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3021'.
[  341.013452][T17782] netlink: 'syz.0.3019': attribute type 2 has an invalid length.
[  341.041394][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2
[  341.093802][T17778] .`: renamed from bond0 (while UP)
[  341.254348][T17788] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058)
[  341.532347][T17795] netlink: 'syz.3.3023': attribute type 1 has an invalid length.
[  341.532370][T17795] netlink: 'syz.3.3023': attribute type 2 has an invalid length.
[  341.532382][T17795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3023'.
[  341.533457][ T8463] hsr_slave_0: left promiscuous mode
[  341.537348][ T8463] hsr_slave_1: left promiscuous mode
[  341.546438][ T8463] batman_adv: batadv0: Removing interface: batadv_slave_1
[  341.679283][ T8463] vlan0: left allmulticast mode
[  341.679307][ T8463] veth0_vlan: left allmulticast mode
[  341.680079][ T8463] vlan0: left promiscuous mode
[  341.680774][ T8463] veth0_macvtap: left promiscuous mode
[  341.681790][ T8463] veth1_vlan: left promiscuous mode
[  341.681864][ T8463] veth0_vlan: left promiscuous mode
[  341.848925][ T5675] page_pool_release_retry() stalled pool shutdown: id 80, 1 inflight 60 sec
[  342.619249][ T8463] team0 (unregistering): Port device team_slave_1 removed
[  342.642703][ T8463] team0 (unregistering): Port device team_slave_0 removed
[  342.739143][ T5619] Bluetooth: hci0: command tx timeout
[  342.999821][T17816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3029'.
[  343.154148][T17825] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3031'.
[  343.160975][T17816] bond7: option xmit_hash_policy: invalid value (64)
[  343.165541][T17824] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3030'.
[  343.205976][T17816] bond7 (unregistering): Released all slaves
[  343.380987][T17831] netlink: 'syz.0.3032': attribute type 1 has an invalid length.
[  343.545346][T17842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3034'.
[  343.686005][T17849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3036'.
[  343.746570][ T8463] IPVS: stop unused estimator thread 0...
[  343.925350][T17849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3036'.
[  343.960532][T17521] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  343.967796][T17521] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  343.993805][T17521] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  344.017103][T17521] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  344.024042][T17521] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  344.069276][T17521] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  344.139478][T17521] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  344.210141][T17521] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  344.246787][T17861] ip6gre1: entered allmulticast mode
[  344.533539][T17521] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.635247][T17521] 8021q: adding VLAN 0 to HW filter on device team0
[  344.677100][ T8456] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.677188][ T8456] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.709097][T17895] openvswitch: netlink: Missing key (keys=c0, expected=480)
[  344.759379][ T8464] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.759536][ T8464] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.986165][T17906] netlink: 'syz.3.3044': attribute type 1 has an invalid length.
[  345.435616][T17926] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  345.647274][T17936] netlink: 'syz.3.3049': attribute type 16 has an invalid length.
[  345.903832][T17935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  345.910840][T17935] __nla_validate_parse: 3 callbacks suppressed
[  345.910860][T17935] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.3048'.
[  346.213496][T17521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  346.308643][T17521] veth0_vlan: entered promiscuous mode
[  346.313663][T17971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3055'.
[  346.316659][T17521] veth1_vlan: entered promiscuous mode
[  346.375606][T17521] veth0_macvtap: entered promiscuous mode
[  346.387812][T17521] veth1_macvtap: entered promiscuous mode
[  346.412488][T17521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  346.428922][T17521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  346.479927][ T7337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.479970][ T7337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  346.480000][ T7337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  346.480028][ T7337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  346.546190][T17977] netlink: 'syz.0.3056': attribute type 7 has an invalid length.
[  346.744487][T17985] Bluetooth: MGMT ver 1.23
[  346.766672][ T8464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.766691][ T8464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.783158][T17986] openvswitch: netlink: Flow key attr not present in new flow.
[  346.891843][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.891859][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.331326][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  347.347142][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  347.355121][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  347.357380][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  347.357998][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  347.487865][T18005] bridge0: port 1(bridge_slave_0) entered listening state
[  347.500719][T18013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'.
[  347.501287][T18012] openvswitch: netlink: Missing key (keys=c0, expected=500)
[  348.127311][T18045] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3073'.
[  349.454591][ T5627] Bluetooth: hci4: command tx timeout
[  349.506739][T18070] netlink: 'syz.3.3078': attribute type 64 has an invalid length.
[  349.506764][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3078'.
[  349.625596][T18072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3078'.
[  350.887508][T18071] veth0: entered promiscuous mode
[  350.887710][T18071] veth0: left promiscuous mode
[  350.971059][T18077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3080'.
[  350.980886][T18078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3080'.
[  351.126014][T18086] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3081'.
[  351.349340][T18100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3084'.
[  351.349366][T18100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3084'.
[  351.530232][ T5627] Bluetooth: hci4: command tx timeout
[  351.816666][T18008] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.817468][T18008] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.817926][T18008] bridge_slave_0: entered allmulticast mode
[  351.846158][T18008] bridge_slave_0: entered promiscuous mode
[  351.867549][T18008] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.867687][T18008] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.869159][T18008] bridge_slave_1: entered allmulticast mode
[  351.873046][T18008] bridge_slave_1: entered promiscuous mode
[  351.920925][T18008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.924015][T18008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.063527][T18008] team0: Port device team_slave_0 added
[  352.090919][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3092'.
[  352.112552][T18008] team0: Port device team_slave_1 added
[  352.192659][T18008] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.192675][T18008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.192698][T18008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.306288][T18008] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.306329][T18008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.306356][T18008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.365464][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3094'.
[  352.478780][T18008] hsr_slave_0: entered promiscuous mode
[  352.481944][T18008] hsr_slave_1: entered promiscuous mode
[  352.484019][T18008] debugfs: 'hsr0' already exists in 'hsr'
[  352.484040][T18008] Cannot create hsr debugfs directory
[  352.881926][T18175] netlink: 380 bytes leftover after parsing attributes in process `syz.2.3100'.
[  352.882008][T18175] netlink: 159 bytes leftover after parsing attributes in process `syz.2.3100'.
[  352.997539][T18008] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.041551][T18178] Bluetooth: MGMT ver 1.23
[  353.147551][T18008] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.185833][T18184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3104'.
[  353.225206][T18008] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.287992][T18008] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode
[  353.335354][T18008] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.608475][ T5627] Bluetooth: hci4: command tx timeout
[  353.626665][T18206] netlink: 'syz.3.3109': attribute type 1 has an invalid length.
[  353.626685][T18206] netlink: 'syz.3.3109': attribute type 2 has an invalid length.
[  353.685191][T18008] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  353.696998][T18008] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  353.698040][T18008] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  353.722942][T18008] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  353.727529][T18008] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  353.743448][T18008] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  353.744950][T18008] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  353.752108][T18008] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  353.775667][T18215] netlink: 'syz.0.3110': attribute type 30 has an invalid length.
[  353.809476][T18215] bond0: option arp_missed_max: invalid value (0)
[  353.809492][T18215] bond0: option arp_missed_max: allowed values 1 - 255
[  353.812194][T18215] bond0 (unregistering): Released all slaves
[  353.936131][T18008] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.967003][T18008] 8021q: adding VLAN 0 to HW filter on device team0
[  354.012352][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.012456][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.014569][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.014667][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.055319][T18222] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  354.076731][T18222] xt_hashlimit: size too large, truncated to 1048576
[  354.269290][T18229] pim6reg527: entered allmulticast mode
[  354.454948][T18239] veth0: entered promiscuous mode
[  354.593425][T18248] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  354.595531][T18238] veth0: left promiscuous mode
[  354.837183][T18008] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.480989][T18279] IPVS: mh: UDP 127.0.0.1:20000 - no destination available
[  355.575152][T18008] veth0_vlan: entered promiscuous mode
[  355.596372][T18008] veth1_vlan: entered promiscuous mode
[  355.665425][T18008] veth0_macvtap: entered promiscuous mode
[  355.680944][T18008] veth1_macvtap: entered promiscuous mode
[  355.698591][ T5627] Bluetooth: hci4: command tx timeout
[  355.700590][T18008] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.707074][T18008] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.738055][T18293] veth0_to_bridge: entered promiscuous mode
[  355.768742][ T8459] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.771304][ T8463] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.771634][ T8463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.792913][ T8461] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.896013][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.896037][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.948069][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.948091][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.025926][T18298] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[  356.434249][T18317] ªªªªª»: renamed from dummy0 (while UP)
[  356.507054][T18291] veth0_to_bridge: left promiscuous mode
[  356.525559][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  356.527315][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  356.546796][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  356.564149][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  356.577382][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  356.795482][T18331] openvswitch: netlink: EtherType 300 is less than min 600
[  356.797488][T18332] netlink: 'syz.2.3140': attribute type 10 has an invalid length.
[  356.820228][T18332] syz_tun: entered promiscuous mode
[  356.834620][T18337] openvswitch: netlink: EtherType 300 is less than min 600
[  356.855936][T18332] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  356.864473][T18336] __nla_validate_parse: 11 callbacks suppressed
[  356.864495][T18336] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3139'.
[  357.305968][T18354] netlink: 'syz.2.3145': attribute type 10 has an invalid length.
[  357.519384][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3148'.
[  357.931712][T18319] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.933196][T18319] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.934264][T18319] bridge_slave_0: entered allmulticast mode
[  357.944038][T18319] bridge_slave_0: entered promiscuous mode
[  357.958210][T18319] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.959328][T18319] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.959522][T18319] bridge_slave_1: entered allmulticast mode
[  357.966807][T18319] bridge_slave_1: entered promiscuous mode
[  358.053272][T18381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3153'.
[  358.054768][T18381] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3153'.
[  358.064672][T18319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  358.078127][T18319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.109263][T18383] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  358.193155][T18319] team0: Port device team_slave_0 added
[  358.194367][T18385] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3154'.
[  358.206428][T18319] team0: Port device team_slave_1 added
[  358.282646][T18319] batman_adv: batadv0: Adding interface: batadv_slave_0
[  358.282664][T18319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  358.282690][T18319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  358.288540][T18319] batman_adv: batadv0: Adding interface: batadv_slave_1
[  358.288558][T18319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  358.288583][T18319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  358.463354][T18319] hsr_slave_0: entered promiscuous mode
[  358.466084][T18319] hsr_slave_1: entered promiscuous mode
[  358.469190][T18319] debugfs: 'hsr0' already exists in 'hsr'
[  358.469210][T18319] Cannot create hsr debugfs directory
[  358.649070][ T5627] Bluetooth: hci3: command tx timeout
[  359.077255][T18319] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.281719][T18319] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.423471][T18319] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.542069][T18424] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.584568][T18319] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.673223][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  359.680199][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  359.681337][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  359.682215][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  359.682770][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  359.898190][T18444] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  359.947567][T18441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3167'.
[  360.021940][T18319] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  360.051577][T18319] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  360.052786][T18319] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  360.061194][T18319] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  360.063156][T18319] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  360.087595][T18319] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  360.093830][T18319] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  360.106704][T18319] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  360.290683][T18319] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.323525][T18319] 8021q: adding VLAN 0 to HW filter on device team0
[  360.343056][ T8461] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.343156][ T8461] bridge0: port 1(bridge_slave_0) entered forwarding state
[  360.381294][ T8461] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.381394][ T8461] bridge0: port 2(bridge_slave_1) entered forwarding state
[  360.730757][ T5627] Bluetooth: hci3: command tx timeout
[  360.770399][T18476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3173'.
[  360.775488][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3173'.
[  360.967334][T18485] netlink: 'syz.2.3175': attribute type 9 has an invalid length.
[  360.967354][T18485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3175'.
[  361.486392][T18436] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.486584][T18436] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.486742][T18436] bridge_slave_0: entered allmulticast mode
[  361.511178][T18436] bridge_slave_0: entered promiscuous mode
[  361.524456][T18436] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.524577][T18436] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.524743][T18436] bridge_slave_1: entered allmulticast mode
[  361.526909][T18436] bridge_slave_1: entered promiscuous mode
[  361.704692][T18319] 8021q: adding VLAN 0 to HW filter on device batadv0
[  361.745666][T18436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  361.746697][T18523] netlink: 'syz.4.3181': attribute type 4 has an invalid length.
[  361.769264][ T5627] Bluetooth: hci1: command tx timeout
[  361.789121][T18523] netlink: 'syz.4.3181': attribute type 4 has an invalid length.
[  361.791246][T18436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  361.847858][T18522] syzkaller0: entered promiscuous mode
[  361.847882][T18522] syzkaller0: entered allmulticast mode
[  361.861920][T18436] team0: Port device team_slave_0 added
[  361.879715][T18436] team0: Port device team_slave_1 added
[  361.913539][T18526] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3183'.
[  361.984663][T18527] syzkaller1: entered promiscuous mode
[  361.984679][T18527] syzkaller1: entered allmulticast mode
[  361.988530][T18436] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.988546][T18436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  361.988571][T18436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.994768][T18436] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.994784][T18436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  361.994809][T18436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  362.006472][T18526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3183'.
[  362.189950][T18319] veth0_vlan: entered promiscuous mode
[  362.303839][T18319] veth1_vlan: entered promiscuous mode
[  362.367570][T18436] hsr_slave_0: entered promiscuous mode
[  362.375551][T18436] hsr_slave_1: entered promiscuous mode
[  362.381548][T18436] debugfs: 'hsr0' already exists in 'hsr'
[  362.381571][T18436] Cannot create hsr debugfs directory
[  362.404916][T18535] ipt_ah: unknown flags FF
[  362.424411][T18535] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3186'.
[  362.808540][ T5627] Bluetooth: hci3: command tx timeout
[  362.832347][T18319] veth0_macvtap: entered promiscuous mode
[  362.862765][T18319] veth1_macvtap: entered promiscuous mode
[  362.932987][T18575] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component
[  362.981349][T18319] batman_adv: batadv0: Interface activated: batadv_slave_0
[  363.006404][T18319] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.023119][T18571] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3196'.
[  363.279117][ T8463] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.281230][ T8463] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.281270][ T8463] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.281325][ T8463] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.474942][T18588] netlink: 'syz.2.3201': attribute type 21 has an invalid length.
[  363.502350][T18588] netlink: 'syz.2.3201': attribute type 1 has an invalid length.
[  363.581623][ T8463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.581645][ T8463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.720601][T18436] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  363.774573][T18436] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  363.776650][ T7336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.776670][ T7336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.792609][T18436] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  363.817985][T18436] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  363.826983][T18436] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  363.847828][T18436] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  363.849191][ T5627] Bluetooth: hci1: command tx timeout
[  363.867576][T18436] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  363.889567][T18436] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  363.916004][T18606] syzkaller1: entered promiscuous mode
[  363.916027][T18606] syzkaller1: entered allmulticast mode
[  364.042099][T18436] 8021q: adding VLAN 0 to HW filter on device bond0
[  364.070659][T18436] 8021q: adding VLAN 0 to HW filter on device team0
[  364.089768][ T8461] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.089868][ T8461] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.101574][ T8456] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.101712][ T8456] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.301040][T18622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3206'.
[  364.337947][T18622] macsec1: entered promiscuous mode
[  364.337966][T18622] bridge0: entered promiscuous mode
[  364.338088][T18622] macsec1: entered allmulticast mode
[  364.338095][T18622] bridge0: entered allmulticast mode
[  364.349862][T18622] bridge0: port 3(macsec1) entered blocking state
[  364.350034][T18622] bridge0: port 3(macsec1) entered disabled state
[  364.381748][T18622] bridge0: left allmulticast mode
[  364.426689][ T5725] bridge0: left promiscuous mode
[  364.644775][T18641] xt_ecn: cannot match TCP bits for non-tcp packets
[  364.644887][T18641] xt_ecn: cannot match TCP bits for non-tcp packets
[  364.644974][T18641] xt_ecn: cannot match TCP bits for non-tcp packets
[  364.645063][T18641] xt_ecn: cannot match TCP bits for non-tcp packets
[  364.645143][T18641] xt_ecn: cannot match TCP bits for non-tcp packets
[  364.645222][T18641] xt_ecn: cannot match TCP bits for non-tcp packets
[  364.645298][T18641] xt_ecn: cannot match TCP bits for non-tcp packets
[  364.645393][T18641] xt_ecn: cannot match TCP bits for non-tcp packets
[  364.645481][T18641] xt_ecn: cannot match TCP bits for non-tcp packets
[  364.645563][T18641] xt_ecn: cannot match TCP bits for non-tcp packets
[  364.651203][T18643] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3209'.
[  364.686557][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3210'.
[  364.686579][T18645] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3210'.
[  364.752579][T18646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3210'.
[  364.752603][T18646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3210'.
[  364.890910][ T5627] Bluetooth: hci3: command tx timeout
[  365.303580][T18436] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.415576][T18671] mac80211_hwsim hwsim38 ÿ
: renamed from wlan1 (while UP)
[  365.931152][ T5627] Bluetooth: hci1: command tx timeout
[  365.956064][T18436] veth0_vlan: entered promiscuous mode
[  365.983319][T18436] veth1_vlan: entered promiscuous mode
[  366.039032][T18436] veth0_macvtap: entered promiscuous mode
[  366.043949][T18436] veth1_macvtap: entered promiscuous mode
[  366.113294][T18436] batman_adv: batadv0: Interface activated: batadv_slave_0
[  366.141911][T18436] batman_adv: batadv0: Interface activated: batadv_slave_1
[  366.151769][ T8463] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.151877][ T8463] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.151957][ T8463] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.203526][ T1141] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.406683][ T8463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.406706][ T8463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.520695][ T8456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.520717][ T8456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.076082][T18736] netlink: 'syz.5.3233': attribute type 83 has an invalid length.
[  367.360025][T18744] __nla_validate_parse: 39 callbacks suppressed
[  367.360046][T18744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3235'.
[  367.644550][T18765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3239'.
[  367.644574][T18765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3239'.
[  367.644815][T18765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3239'.
[  367.644830][T18765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3239'.
[  367.750380][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3241'.
[  367.767620][T18770] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3241'.
[  367.912670][T18772] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3242'.
[  368.011740][ T5627] Bluetooth: hci1: command tx timeout
[  368.066476][T18775] can: request_module (can-proto-0) failed.
[  368.328000][T18786] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  368.975560][T18810] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  369.274804][T18819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3255'.
[  369.297463][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3254'.
[  369.297498][T18821] netlink: 'syz.5.3254': attribute type 14 has an invalid length.
[  369.297512][T18821] netlink: 'syz.5.3254': attribute type 13 has an invalid length.
[  369.827289][T18831] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  369.991434][T18842] bridge_slave_1: left allmulticast mode
[  369.991462][T18842] bridge_slave_1: left promiscuous mode
[  369.991679][T18842] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.992831][T18843] openvswitch: netlink: EtherType 300 is less than min 600
[  370.039181][T18842] bridge_slave_0: left allmulticast mode
[  370.039207][T18842] bridge_slave_0: left promiscuous mode
[  370.039440][T18842] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.563649][T18646] Set syz1 is full, maxelem 65536 reached
[  370.809266][T18873] netlink: 'syz.2.3270': attribute type 4 has an invalid length.
[  370.809425][T18873] netlink: 'syz.2.3270': attribute type 4 has an invalid length.
[  370.809567][T18873] netlink: 'syz.2.3270': attribute type 4 has an invalid length.
[  370.809700][T18873] netlink: 'syz.2.3270': attribute type 4 has an invalid length.
[  370.809855][T18873] netlink: 'syz.2.3270': attribute type 4 has an invalid length.
[  370.809997][T18873] netlink: 'syz.2.3270': attribute type 4 has an invalid length.
[  370.810137][T18873] netlink: 'syz.2.3270': attribute type 4 has an invalid length.
[  370.831644][T18876] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  370.831857][T18876] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  370.832043][T18876] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  370.832228][T18876] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  370.832441][T18876] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  370.832626][T18876] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  372.397709][T18950] __nla_validate_parse: 50 callbacks suppressed
[  372.397731][T18950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3288'.
[  372.397990][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3288'.
[  372.398251][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3288'.
[  372.412942][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3288'.
[  372.413125][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3288'.
[  372.413359][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3288'.
[  372.413529][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3288'.
[  372.426755][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3288'.
[  372.447900][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3288'.
[  372.448081][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3288'.
[  373.438121][T19002] validate_nla: 65 callbacks suppressed
[  373.438143][T19002] netlink: 'syz.5.3300': attribute type 1 has an invalid length.
[  373.494798][T19004] sctp: [Deprecated]: syz.0.3301 (pid 19004) Use of int in max_burst socket option deprecated.
[  373.494798][T19004] Use struct sctp_assoc_value instead
[  373.844620][T19027] macsec1: entered promiscuous mode
[  373.844644][T19027] bridge0: entered promiscuous mode
[  373.844800][T19027] macsec1: entered allmulticast mode
[  373.844808][T19027] bridge0: entered allmulticast mode
[  373.847503][T19027] bridge0: port 3(macsec1) entered blocking state
[  373.859388][T19027] bridge0: port 3(macsec1) entered disabled state
[  373.881011][T19027] bridge0: left allmulticast mode
[  373.906768][ T5620] bridge0: left promiscuous mode
[  374.195423][T19048] netlink: 'syz.5.3308': attribute type 11 has an invalid length.
[  374.239084][T19048] net_ratelimit: 27 callbacks suppressed
[  374.239104][T19048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  374.447595][T19054] netlink: Failed to add ¦â—k\  helper -22
[  374.447646][T19054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  375.443833][T19112] 8021q: adding VLAN 0 to HW filter on device macsec1
[  375.445071][ T5620] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  375.816300][T19131] netlink: 'syz.3.3331': attribute type 10 has an invalid length.
[  376.011063][T19142] netlink: 'syz.4.3334': attribute type 10 has an invalid length.
[  376.253760][T19159] team0 (unregistering): Port device team_slave_0 removed
[  376.274164][T19159] team0 (unregistering): Port device team_slave_1 removed
[  376.578260][T19174] syzkaller0: entered promiscuous mode
[  376.578286][T19174] syzkaller0: entered allmulticast mode
[  376.592676][T19174] netlink: 'syz.4.3344': attribute type 13 has an invalid length.
[  377.240958][T19205] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  377.619411][T19228] veth0: entered promiscuous mode
[  377.676318][T19226] veth0: left promiscuous mode
[  377.935182][T19257] netlink: 'syz.4.3363': attribute type 30 has an invalid length.
[  377.974026][T19257] bond1: option arp_missed_max: invalid value (0)
[  377.974065][T19257] bond1: option arp_missed_max: allowed values 1 - 255
[  377.977989][T19257] bond1 (unregistering): Released all slaves
[  378.099000][T19261] __nla_validate_parse: 59 callbacks suppressed
[  378.099020][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3365'.
[  378.105701][T19261] tipc: Started in network mode
[  378.105748][T19261] tipc: Node identity ac14140f, cluster identity 4711
[  378.106062][T19261] tipc: New replicast peer: 255.255.255.255
[  378.107058][T19261] tipc: Enabled bearer <udp:syz2>, priority 10
[  378.155838][T19262] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3364'.
[  378.155863][T19262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3364'.
[  378.188807][T19262] netlink: 'syz.5.3364': attribute type 4 has an invalid length.
[  378.188828][T19262] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3364'.
[  378.191736][T19262] .`: renamed from bond0
[  378.446636][T19281] sctp: [Deprecated]: syz.4.3369 (pid 19281) Use of struct sctp_assoc_value in delayed_ack socket option.
[  378.446636][T19281] Use struct sctp_sack_info instead
[  378.767348][T19297] netlink: 236 bytes leftover after parsing attributes in process `syz.5.3374'.
[  378.767376][T19297] netlink: 236 bytes leftover after parsing attributes in process `syz.5.3374'.
[  379.108437][T11275] tipc: Node number set to 2886997007
[  379.217662][T19326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3377'.
[  379.217688][T19326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3377'.
[  379.314466][T19327] x_tables: unsorted entry at hook 2
[  379.481175][T19333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3380'.
[  379.625664][T19340] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  380.033926][T19339] team0 (unregistering): Port device team_slave_0 removed
[  380.140674][T19354] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3386'.
[  380.140702][T19354] netlink: 'syz.5.3386': attribute type 9 has an invalid length.
[  380.155615][T19339] team0 (unregistering): Port device team_slave_1 removed
[  380.359909][T19359] tipc: Started in network mode
[  380.359938][T19359] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  380.360099][T19359] tipc: Enabled bearer <eth:ipvlan1>, priority 10
[  381.369214][ T5725] tipc: Node number set to 10136234
[  381.522760][T19418] tunl0: entered promiscuous mode
[  381.541186][T19418] netlink: 'syz.3.3405': attribute type 3 has an invalid length.
[  381.593615][T19439] netlink: 'syz.5.3407': attribute type 4 has an invalid length.
[  382.261324][T19481] openvswitch: netlink: Flow key attr not present in new flow.
[  382.501130][ T8456] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  382.501178][ T8456] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  382.501212][ T8456] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  382.501244][ T8456] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  382.534225][T19489] netlink: 'syz.0.3418': attribute type 1 has an invalid length.
[  382.622969][T19486] hsr_slave_1 (unregistering): left promiscuous mode
[  382.711372][T19489] bond1: entered promiscuous mode
[  382.711713][T19489] 8021q: adding VLAN 0 to HW filter on device bond1
[  382.794615][T19500] 8021q: adding VLAN 0 to HW filter on device bond1
[  382.798718][T19500] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  382.798742][T19500] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  382.828936][T19500] bond1: (slave ip6gre2): making interface the new active one
[  382.828960][T19500] ip6gre2: entered promiscuous mode
[  382.836638][T19500] bond1: (slave ip6gre2): Enslaving as an active interface with an up link
[  383.194043][T19520] netlink: 'syz.4.3424': attribute type 2 has an invalid length.
[  383.194067][T19520] netlink: 'syz.4.3424': attribute type 2 has an invalid length.
[  383.223647][T19519] __nla_validate_parse: 15 callbacks suppressed
[  383.223668][T19519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3423'.
[  383.228050][T19520] netlink: 'syz.4.3424': attribute type 1 has an invalid length.
[  383.279126][T19519] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3423'.
[  383.714011][T19544] IPv6: addrconf: prefix option has invalid lifetime
[  384.243095][T19573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3438'.
[  384.246573][T19573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3438'.
[  384.252809][T19580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3441'.
[  384.371480][T19579] netlink: 'syz.2.3440': attribute type 1 has an invalid length.
[  384.431620][T19585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3442'.
[  384.432852][T19582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3440'.
[  384.490308][T19586] bond1: option min_links: invalid value (18446744073709551614)
[  384.490334][T19586] bond1: option min_links: allowed values 0 - 2147483647
[  384.493927][T19586] bond1 (unregistering): Released all slaves
[  384.595119][T19592] netlink: 'syz.3.3446': attribute type 1 has an invalid length.
[  384.642966][T19595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3445'.
[  384.661199][T19596] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3446'.
[  384.763588][T19592] 8021q: adding VLAN 0 to HW filter on device bond1
[  384.833897][T19589] bond0: entered promiscuous mode
[  384.833925][T19589] bond0: entered allmulticast mode
[  384.834371][T19589] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.865552][T19599] 8021q: adding VLAN 0 to HW filter on device batadv1
[  384.883820][T19599] bond1: (slave batadv1): making interface the new active one
[  384.889515][T19599] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  385.027842][T19592] netlink: 'syz.3.3446': attribute type 1 has an invalid length.
[  385.094184][T19601] bond2: option fail_over_mac: invalid value (16)
[  385.117944][T19601] bond2 (unregistering): Released all slaves
[  385.341687][   T31] audit: type=1800 audit(1789560544.456:12): pid=19624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3452" name=680B20 dev="tmpfs" ino=516 res=0 errno=0
[  385.737632][T19635] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  385.739229][T19645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3459'.
[  386.037737][T19667] x_tables: duplicate underflow at hook 3
[  386.047360][T19661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.160675][T19657] syzkaller1: entered promiscuous mode
[  386.160700][T19657] syzkaller1: entered allmulticast mode
[  386.317358][T19679] netlink: Setting conntrack mark requires 'commit' flag.
[  386.317392][T19679] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.631764][T19697] netlink: 'syz.0.3473': attribute type 5 has an invalid length.
[  386.673286][T19697] netlink: 'syz.0.3473': attribute type 11 has an invalid length.
[  386.673309][T19697] netlink: 'syz.0.3473': attribute type 4 has an invalid length.
[  387.219802][T19740] xt_hashlimit: invalid interval
[  387.808028][T19764] netlink: 'syz.5.3489': attribute type 1 has an invalid length.
[  387.842948][T19764] netlink: 'syz.5.3489': attribute type 1 has an invalid length.
[  388.326705][T19791] __nla_validate_parse: 4 callbacks suppressed
[  388.326726][T19791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3494'.
[  388.326765][T19791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3494'.
[  388.326976][T19791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3494'.
[  388.326991][T19791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3494'.
[  388.383163][T19794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3495'.
[  388.383199][T19794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3495'.
[  388.672247][T19807] netlink: 'syz.4.3498': attribute type 5 has an invalid length.
[  388.672272][T19807] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3498'.
[  388.775563][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3501'.
[  388.775586][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3501'.
[  388.950721][T19830] vlan2: entered allmulticast mode
[  388.950768][T19830] veth1_virt_wifi: entered allmulticast mode
[  389.186312][T19837] veth0: mtu less than device minimum
[  389.194251][   T31] audit: type=1800 audit(1789560548.306:13): pid=19842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3508" name="memory.events" dev="tmpfs" ino=309 res=0 errno=0
[  389.261810][T19840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3507'.
[  389.425718][T19845] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  389.843881][T19863] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.846091][T19863] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.851396][T19866] netlink: 'syz.2.3516': attribute type 16 has an invalid length.
[  389.851418][T19866] netlink: 'syz.2.3516': attribute type 17 has an invalid length.
[  390.040043][T19866] syz_tun: left promiscuous mode
[  390.066061][T19866] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.066194][T19866] bridge0: port 1(bridge_slave_0) entered forwarding state
[  390.092759][T19866] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.092887][T19866] bridge0: port 2(bridge_slave_1) entered forwarding state
[  390.173582][T19866] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  390.202177][T19866] 8021q: adding VLAN 0 to HW filter on device bond1
[  390.338191][T19890] netlink: zone id is out of range
[  390.338208][T19890] netlink: zone id is out of range
[  390.338215][T19890] netlink: zone id is out of range
[  390.338222][T19890] netlink: zone id is out of range
[  390.338229][T19890] netlink: zone id is out of range
[  390.338236][T19890] netlink: zone id is out of range
[  390.373174][T19890] netlink: zone id is out of range
[  390.373189][T19890] netlink: zone id is out of range
[  390.447698][T19893] bridge2: entered promiscuous mode
[  390.447723][T19893] bridge2: entered allmulticast mode
[  390.955204][T19934] netlink: 'syz.0.3531': attribute type 12 has an invalid length.
[  391.631345][T19966] netlink: 'syz.2.3539': attribute type 1 has an invalid length.
[  391.711375][T19966] 8021q: adding VLAN 0 to HW filter on device bond2
[  391.730499][T19958] RDS: rds_bind could not find a transport for 26bd:7000:ffdb:df25:800:0:800:300, load rds_tcp or rds_rdma?
[  391.776253][T19966] bond2: (slave ip6erspan0): making interface the new active one
[  391.788210][T19966] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  391.794379][T19966] netlink: 'syz.2.3539': attribute type 11 has an invalid length.
[  391.886955][T19975] x_tables: duplicate underflow at hook 3
[  391.963811][T19977] atomic_op ffff888076e479e0 conn xmit_atomic 0000000000000000
[  392.648767][T20022] xt_REDIRECT: bad rangesize 26624.
[  393.231495][T20060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  393.383481][T20064] __nla_validate_parse: 21 callbacks suppressed
[  393.383504][T20064] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3559'.
[  393.510600][T20074] netlink: 'syz.4.3562': attribute type 1 has an invalid length.
[  393.564597][T20077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3563'.
[  393.587847][T20074] 8021q: adding VLAN 0 to HW filter on device bond2
[  393.640209][T20078] bond2: (slave veth3): Enslaving as a backup interface with a down link
[  393.663264][T20074] bond2: (slave dummy0): Enslaving as a backup interface with an up link
[  393.690439][ T5627] Bluetooth: hci1: command tx timeout
[  394.194606][T20107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3571'.
[  394.194631][T20107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3571'.
[  394.194882][T20107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3571'.
[  394.194897][T20107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3571'.
[  394.582809][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'.
[  394.805828][T20136] net_ratelimit: 11 callbacks suppressed
[  394.805850][T20136] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes
[  394.809855][T20134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3579'.
[  394.843324][T20136] netlink: 'syz.0.3580': attribute type 1 has an invalid length.
[  394.917546][T20136] bond2: entered promiscuous mode
[  394.917660][T20136] bond2: entered allmulticast mode
[  394.918006][T20136] 8021q: adding VLAN 0 to HW filter on device bond2
[  395.002622][T20140] erspan1: entered allmulticast mode
[  395.009697][T20148] sctp: [Deprecated]: syz.2.3582 (pid 20148) Use of struct sctp_assoc_value in delayed_ack socket option.
[  395.009697][T20148] Use struct sctp_sack_info instead
[  395.024065][T20147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3583'.
[  395.024087][T20147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3583'.
[  395.039386][T20140] bond2: (slave erspan1): making interface the new active one
[  395.039412][T20140] erspan1: entered promiscuous mode
[  395.061431][T20140] bond2: (slave erspan1): Enslaving as an active interface with an up link
[  395.184845][T20159] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 0
[  395.590708][   T31] audit: type=1800 audit(1789560554.706:14): pid=20180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3590" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=520 res=0 errno=0
[  395.724471][T20186] netlink: 'syz.0.3592': attribute type 3 has an invalid length.
[  395.787094][T20192] netlink: 'syz.4.3593': attribute type 11 has an invalid length.
[  396.225385][T20220] IPVS: length: 8 != 1152
[  396.225415][T20220] IPVS: length: 8 != 1152
[  396.225435][T20220] IPVS: length: 8 != 1152
[  396.225455][T20220] IPVS: length: 8 != 1152
[  396.225473][T20220] IPVS: length: 8 != 1152
[  396.225492][T20220] IPVS: length: 8 != 1152
[  396.225510][T20220] IPVS: length: 8 != 1152
[  396.225529][T20220] IPVS: length: 8 != 1152
[  396.225548][T20220] IPVS: length: 8 != 1152
[  396.225567][T20220] IPVS: length: 8 != 1152
[  396.225585][T20220] IPVS: length: 8 != 1152
[  396.225612][T20220] IPVS: length: 8 != 1152
[  396.225631][T20220] IPVS: length: 8 != 1152
[  396.225650][T20220] IPVS: length: 8 != 1152
[  396.225668][T20220] IPVS: length: 8 != 1152
[  396.225687][T20220] IPVS: length: 8 != 1152
[  396.225705][T20220] IPVS: length: 8 != 1152
[  396.225724][T20220] IPVS: length: 8 != 1152
[  396.225764][T20220] IPVS: length: 8 != 1152
[  396.225784][T20220] IPVS: length: 8 != 1152
[  396.225802][T20220] IPVS: length: 8 != 1152
[  396.225821][T20220] IPVS: length: 8 != 1152
[  396.225840][T20220] IPVS: length: 8 != 1152
[  396.225859][T20220] IPVS: length: 8 != 1152
[  396.225877][T20220] IPVS: length: 8 != 1152
[  396.225896][T20220] IPVS: length: 8 != 1152
[  396.225915][T20220] IPVS: length: 8 != 1152
[  396.225932][T20220] IPVS: length: 8 != 1152
[  396.225950][T20220] IPVS: length: 8 != 1152
[  396.225969][T20220] IPVS: length: 8 != 1152
[  396.225988][T20220] IPVS: length: 8 != 1152
[  396.226006][T20220] IPVS: length: 8 != 1152
[  396.226025][T20220] IPVS: length: 8 != 1152
[  396.226044][T20220] IPVS: length: 8 != 1152
[  396.226063][T20220] IPVS: length: 8 != 1152
[  396.226081][T20220] IPVS: length: 8 != 1152
[  396.226100][T20220] IPVS: length: 8 != 1152
[  396.226119][T20220] IPVS: length: 8 != 1152
[  396.226138][T20220] IPVS: length: 8 != 1152
[  396.226156][T20220] IPVS: length: 8 != 1152
[  396.226779][T20220] IPVS: length: 8 != 1152
[  396.226805][T20220] IPVS: length: 8 != 1152
[  396.226824][T20220] IPVS: length: 8 != 1152
[  396.226843][T20220] IPVS: length: 8 != 1152
[  396.226862][T20220] IPVS: length: 8 != 1152
[  396.226880][T20220] IPVS: length: 8 != 1152
[  396.226899][T20220] IPVS: length: 8 != 1152
[  396.226917][T20220] IPVS: length: 8 != 1152
[  396.226936][T20220] IPVS: length: 8 != 1152
[  396.226954][T20220] IPVS: length: 8 != 1152
[  396.226973][T20220] IPVS: length: 8 != 1152
[  396.226991][T20220] IPVS: length: 8 != 1152
[  396.227010][T20220] IPVS: length: 8 != 1152
[  396.227028][T20220] IPVS: length: 8 != 1152
[  396.227047][T20220] IPVS: length: 8 != 1152
[  396.227065][T20220] IPVS: length: 8 != 1152
[  396.227084][T20220] IPVS: length: 8 != 1152
[  396.227103][T20220] IPVS: length: 8 != 1152
[  396.227122][T20220] IPVS: length: 8 != 1152
[  396.227141][T20220] IPVS: length: 8 != 1152
[  396.227159][T20220] IPVS: length: 8 != 1152
[  396.227178][T20220] IPVS: length: 8 != 1152
[  396.227196][T20220] IPVS: length: 8 != 1152
[  396.227215][T20220] IPVS: length: 8 != 1152
[  396.227233][T20220] IPVS: length: 8 != 1152
[  396.540232][T20220] netlink: 'syz.4.3598': attribute type 1 has an invalid length.
[  396.656996][T20207] syzkaller1: entered promiscuous mode
[  396.657018][T20207] syzkaller1: entered allmulticast mode
[  397.358135][T20260] netlink: 'syz.3.3604': attribute type 4 has an invalid length.
[  397.386083][T20260] netlink: 'syz.3.3604': attribute type 4 has an invalid length.
[  397.386215][T20260] netlink: 'syz.3.3604': attribute type 4 has an invalid length.
[  397.386329][T20260] netlink: 'syz.3.3604': attribute type 4 has an invalid length.
[  397.386500][T20260] netlink: 'syz.3.3604': attribute type 4 has an invalid length.
[  397.386615][T20260] netlink: 'syz.3.3604': attribute type 4 has an invalid length.
[  397.876871][T20281] bond3: entered promiscuous mode
[  397.876915][T20281] bond3: entered allmulticast mode
[  397.877332][T20281] 8021q: adding VLAN 0 to HW filter on device bond3
[  397.895426][T20283] erspan1: entered allmulticast mode
[  397.916281][T20283] bond3: (slave erspan1): making interface the new active one
[  397.916329][T20283] erspan1: entered promiscuous mode
[  397.921770][T20283] bond3: (slave erspan1): Enslaving as an active interface with an up link
[  398.765155][T20327] __nla_validate_parse: 15 callbacks suppressed
[  398.765174][T20327] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3626'.
[  398.765435][T20327] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3626'.
[  398.765446][T20327] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3626'.
[  399.012449][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3629'.
[  399.074441][T20338] validate_nla: 61 callbacks suppressed
[  399.074462][T20338] netlink: 'syz.2.3629': attribute type 9 has an invalid length.
[  399.074475][T20338] netlink: 'syz.2.3629': attribute type 4 has an invalid length.
[  399.080402][T20345] gre0: entered promiscuous mode
[  399.080422][T20345] gre0: entered allmulticast mode
[  399.818552][T20376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3637'.
[  399.866957][T20376] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3637'.
[  400.055610][T20384] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3638'.
[  400.071361][T20384] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3638'.
[  400.074395][ T5627] Bluetooth: hci5: SCO packet for unknown connection handle 0
[  400.293441][T20395] netlink: 'syz.4.3643': attribute type 83 has an invalid length.
[  400.397218][T20397] v: renamed from veth0_vlan
[  400.521709][T20408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3647'.
[  400.584955][T20408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3647'.
[  400.920683][T20429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  401.361595][ T5278] v: left promiscuous mode
[  401.401754][   T25] v: entered promiscuous mode
[  401.468427][T20458] netlink: 'syz.4.3655': attribute type 10 has an invalid length.
[  401.726959][T20466] netlink: 'syz.2.3657': attribute type 83 has an invalid length.
[  401.750765][T20466] netlink: 'syz.2.3657': attribute type 2 has an invalid length.
[  402.127449][T20490] bond4: option xmit_hash_policy: invalid value (64)
[  402.137500][T20490] bond4 (unregistering): Released all slaves
[  402.183501][T20495] netlink: 'syz.3.3663': attribute type 3 has an invalid length.
[  402.888258][T20534] syzkaller0: entered promiscuous mode
[  402.888282][T20534] syzkaller0: entered allmulticast mode
[  403.087731][T20547] netlink: 'syz.2.3674': attribute type 53 has an invalid length.
[  403.429588][T20565] netlink: 'syz.2.3680': attribute type 21 has an invalid length.
[  403.429679][T20565] netlink: 'syz.2.3680': attribute type 4 has an invalid length.
[  403.795227][T20586] __nla_validate_parse: 9 callbacks suppressed
[  403.795249][T20586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3683'.
[  403.878056][T20589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3685'.
[  405.023181][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  405.026933][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  405.047262][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  405.070254][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  405.073330][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  405.627527][T20637] bond3: invalid ARP target 0.0.0.0 specified for addition
[  405.627566][T20637] bond3: option arp_ip_target: invalid value (0)
[  405.644794][T20637] bond3 (unregistering): Released all slaves
[  405.740181][T20648] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3699'.
[  405.812369][T20648] syzkaller0: entered promiscuous mode
[  405.812392][T20648] syzkaller0: entered allmulticast mode
[  405.847939][T20648] 0: reclassify loop, rule prio 0, protocol 800
[  405.978070][T20655] validate_nla: 7 callbacks suppressed
[  405.978090][T20655] netlink: 'syz.0.3701': attribute type 1 has an invalid length.
[  406.104293][T20661] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3702'.
[  406.109382][T20655] 8021q: adding VLAN 0 to HW filter on device bond3
[  406.382998][T20672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3707'.
[  406.506441][T20678] netlink: 'syz.4.3709': attribute type 21 has an invalid length.
[  406.525610][T20678] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3709'.
[  406.737164][T20691] netlink: 'syz.3.3712': attribute type 1 has an invalid length.
[  406.855532][T20691] 8021q: adding VLAN 0 to HW filter on device bond4
[  406.905619][T20703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3716'.
[  407.068133][T20710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3717'.
[  407.130601][ T5627] Bluetooth: hci6: command tx timeout
[  407.174485][T20605] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.174652][T20605] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.174805][T20605] bridge_slave_0: entered allmulticast mode
[  407.176638][T20605] bridge_slave_0: entered promiscuous mode
[  407.206101][T20712] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3718'.
[  407.206526][T20605] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.206688][T20605] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.206845][T20605] bridge_slave_1: entered allmulticast mode
[  407.239394][T20605] bridge_slave_1: entered promiscuous mode
[  407.384809][T20605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  407.400436][T20605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  407.484271][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3719'.
[  407.484458][T20717] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  407.507257][T20730] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.560578][T20717] batman_adv: batadv0: Removing interface: batadv_slave_1
[  407.601802][T20605] team0: Port device team_slave_0 added
[  407.607208][T20605] team0: Port device team_slave_1 added
[  407.653416][T20605] batman_adv: batadv0: Adding interface: batadv_slave_0
[  407.653434][T20605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  407.653459][T20605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  407.672833][T20605] batman_adv: batadv0: Adding interface: batadv_slave_1
[  407.672850][T20605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  407.672875][T20605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  407.829074][T20741] openvswitch: netlink: Flow key attr not present in new flow.
[  407.831333][T20737] netlink: zone id is out of range
[  407.831348][T20737] netlink: zone id is out of range
[  407.831363][T20737] netlink: zone id is out of range
[  407.973249][T20605] hsr_slave_0: entered promiscuous mode
[  407.987273][T20605] hsr_slave_1: entered promiscuous mode
[  407.988712][T20605] debugfs: 'hsr0' already exists in 'hsr'
[  407.988732][T20605] Cannot create hsr debugfs directory
[  408.531235][T20773] veth1_to_bond: entered allmulticast mode
[  408.557456][T20771] veth1_to_bond: left allmulticast mode
[  408.601770][T20605] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  408.620006][T20605] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  408.621319][T20605] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  408.654160][T20605] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  408.654700][T20605] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  408.674296][T20605] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  408.691800][T20605] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  408.711654][T20605] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  408.793534][T20786] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  408.829066][T20605] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.863119][T20605] 8021q: adding VLAN 0 to HW filter on device team0
[  408.885260][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.885355][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  408.919753][ T8462] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.919829][ T8462] bridge0: port 2(bridge_slave_1) entered forwarding state
[  408.924418][T20788] can: request_module (can-proto-0) failed.
[  409.209010][ T5627] Bluetooth: hci6: command tx timeout
[  409.269868][T20805] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  409.269958][T20805] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  409.554827][T20822] netlink: 'syz.3.3747': attribute type 21 has an invalid length.
[  409.554852][T20822] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3747'.
[  409.554923][T20822] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3747'.
[  409.594374][T20823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3748'.
[  409.638849][T20605] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.713722][   T31] audit: type=1107 audit(1789560568.816:15): pid=20825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  410.016979][T20844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3751'.
[  410.115239][T20605] veth0_vlan: entered promiscuous mode
[  410.151204][T20605] veth1_vlan: entered promiscuous mode
[  410.201055][T20605] veth0_macvtap: entered promiscuous mode
[  410.207021][T20605] veth1_macvtap: entered promiscuous mode
[  410.237219][T20605] batman_adv: batadv0: Interface activated: batadv_slave_0
[  410.289203][T20605] batman_adv: batadv0: Interface activated: batadv_slave_1
[  410.322389][ T7336] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.322575][ T7336] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.322717][ T7336] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.368968][T20846] tunl0: entered promiscuous mode
[  410.371964][T20846] netlink: 'syz.0.3752': attribute type 3 has an invalid length.
[  410.371985][T20846] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3752'.
[  410.399336][ T8463] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.524382][T20854] sctp: [Deprecated]: syz.4.3754 (pid 20854) Use of int in maxseg socket option.
[  410.524382][T20854] Use struct sctp_assoc_value instead
[  410.547724][ T8463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.547766][ T8463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.621514][ T7336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.621537][ T7336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.846201][T20869] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  410.862592][T20869] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  410.951013][ T5627] Bluetooth: hci1: link tx timeout
[  410.951176][ T5627] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  410.952606][ T5627] Bluetooth: hci1: link tx timeout
[  410.952621][ T5627] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  411.289583][ T5627] Bluetooth: hci6: command tx timeout
[  411.495356][T20899] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3762'.
[  411.542067][T20901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3763'.
[  411.542096][T20901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3763'.
[  411.682322][T20905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3763'.
[  411.733236][T20910] netlink: 'syz.3.3766': attribute type 10 has an invalid length.
[  411.742811][T20910] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  412.040344][T20923] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3771'.
[  412.236247][T20935] xt_hashlimit: size too large, truncated to 1048576
[  412.263760][T20936] bond2: (slave dummy0): Removing an active aggregator
[  412.268065][T20936] bond2: (slave dummy0): Releasing backup interface
[  412.604877][T20948] netlink: 'syz.0.3776': attribute type 8 has an invalid length.
[  412.605174][T20948] sch_fq: defrate 0 ignored.
[  412.783636][T20956] bond1: option lp_interval: invalid value (0)
[  412.783659][T20956] bond1: option lp_interval: allowed values 1 - 2147483647
[  412.792210][T20956] bond1 (unregistering): Released all slaves
[  412.840602][T20963] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  412.864023][T20961] bond1: option lp_interval: invalid value (0)
[  412.864111][T20961] bond1: option lp_interval: allowed values 1 - 2147483647
[  412.869718][T20961] bond1 (unregistering): Released all slaves
[  412.969445][ T5627] Bluetooth: hci1: command 0x0406 tx timeout
[  413.371093][ T5627] Bluetooth: hci6: command tx timeout
[  413.695044][T21002] netlink: 'syz.0.3790': attribute type 4 has an invalid length.
[  413.754099][T21006] ip6t_rt: too many addresses specified
[  413.970805][T21017] IPVS: set_ctl: invalid protocol: 60 172.20.20.34:20001
[  415.131008][ T5627] Bluetooth: hci1: command 0x0406 tx timeout
[  415.551605][T21086] __nla_validate_parse: 6 callbacks suppressed
[  415.551632][T21086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3801'.
[  415.571022][T21086] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  415.571045][T21086] batman_adv: batadv0: Removing interface: batadv_slave_0
[  415.954055][T21123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3809'.
[  415.962338][T21123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3809'.
[  416.047832][T21123] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3809'.
[  416.105498][T21128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3812'.
[  416.235784][T21131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3813'.
[  416.235821][T21131] netlink: 'syz.4.3813': attribute type 7 has an invalid length.
[  416.235833][T21131] netlink: 'syz.4.3813': attribute type 8 has an invalid length.
[  416.235846][T21131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3813'.
[  416.288228][T21135] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3814'.
[  416.564414][T21151] netlink: 'syz.0.3817': attribute type 2 has an invalid length.
[  416.880222][T21167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3825'.
[  417.578088][T21204] netlink: 'syz.4.3833': attribute type 10 has an invalid length.
[  417.755880][T21215] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5
[  417.996649][T21226] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3835'.
[  418.112796][T21232] tun0: tun_chr_ioctl cmd 1074025675
[  418.112820][T21232] tun0: persist enabled
[  418.116789][T21232] tun0: tun_chr_ioctl cmd 2148558363
[  418.302409][T21244] IPVS: length: 86 != 24
[  418.308645][T21248] netlink: 'syz.4.3842': attribute type 5 has an invalid length.
[  418.444011][T21253] netlink: 'syz.6.3843': attribute type 2 has an invalid length.
[  418.977098][T21280] xt_hashlimit: size too large, truncated to 1048576
[  419.021278][T21284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  419.213841][T21290] tap0: tun_chr_ioctl cmd 2148553947
[  419.396074][T21300] ip_tables: iptables: counters copy to user failed while replacing table
[  419.413031][T21300] veth0: entered promiscuous mode
[  419.432310][T21299] veth0: left promiscuous mode
[  420.557494][T21360] ip_tables: iptables: counters copy to user failed while replacing table
[  420.684781][T21366] xt_CT: You must specify a L4 protocol and not use inversions on it
[  420.874198][T21378] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  421.076968][T21383] __nla_validate_parse: 11 callbacks suppressed
[  421.076983][T21383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3884'.
[  421.100046][T21383] ip_tables: iptables: counters copy to user failed while replacing table
[  421.303957][T21392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3886'.
[  421.306662][T21392] netlink: 'syz.0.3886': attribute type 10 has an invalid length.
[  421.306694][T21392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  421.376549][T21395] netlink: 'syz.6.3888': attribute type 83 has an invalid length.
[  421.524367][T21403] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3890'.
[  421.666633][T21410] xt_hashlimit: size too large, truncated to 1048576
[  421.830367][T21416] 8021q: adding VLAN 0 to HW filter on device bond1
[  421.879275][T21417] netlink: 288 bytes leftover after parsing attributes in process `syz.6.3892'.
[  421.898905][T21410] xt_hashlimit: size too large, truncated to 1048576
[  422.173466][T21410] xt_hashlimit: size too large, truncated to 1048576
[  422.345472][T21410] xt_hashlimit: size too large, truncated to 1048576
[  422.764769][T21451] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode
[  422.923907][T21461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3904'.
[  422.923931][T21461] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3904'.
[  423.008042][T21468] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  423.011052][T21468] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3905'.
[  423.191954][T21478] sctp: [Deprecated]: syz.0.3910 (pid 21478) Use of struct sctp_assoc_value in delayed_ack socket option.
[  423.191954][T21478] Use struct sctp_sack_info instead
[  423.564897][T21495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3916'.
[  423.564930][T21495] block nbd0: Unsupported socket: should be TCP or UNIX.
[  423.731544][T21502] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3918'.
[  423.802696][T21497] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.839726][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  423.848196][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  423.870116][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  423.872224][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  423.872919][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  424.344274][T21539] Bluetooth: hci0: invalid len left 17, exp >= 23
[  424.801058][T21558] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3934'.
[  424.807981][T21559] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  425.068455][T21506] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.068604][T21506] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.068743][T21506] bridge_slave_0: entered allmulticast mode
[  425.070385][T21506] bridge_slave_0: entered promiscuous mode
[  425.074637][T21506] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.074782][T21506] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.074912][T21506] bridge_slave_1: entered allmulticast mode
[  425.076640][T21506] bridge_slave_1: entered promiscuous mode
[  425.169869][T21506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.235814][T21506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  425.296119][T21506] team0: Port device team_slave_0 added
[  425.315034][T21506] team0: Port device team_slave_1 added
[  425.379194][T21570] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  425.379235][T21570] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  425.379252][T21570] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  426.016428][ T5619] Bluetooth: hci7: command tx timeout
[  427.733834][ T5627] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  427.755942][ T5627] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  427.775278][ T5627] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  427.776388][ T5627] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  427.776929][ T5627] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  428.099619][ T5619] Bluetooth: hci7: command tx timeout
[  429.198604][T21506] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.198622][T21506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.198646][T21506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.268846][T21506] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.268863][T21506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.268886][T21506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  429.417589][T21506] hsr_slave_0: entered promiscuous mode
[  429.425370][T21506] hsr_slave_1: entered promiscuous mode
[  429.426113][T21506] debugfs: 'hsr0' already exists in 'hsr'
[  429.426133][T21506] Cannot create hsr debugfs directory
[  429.441737][T21605] __nla_validate_parse: 2 callbacks suppressed
[  429.441775][T21605] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3943'.
[  429.441804][T21605] block nbd0: not configured, cannot reconfigure
[  429.687713][T21617] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3946'.
[  429.848584][ T5619] Bluetooth: hci8: command tx timeout
[  429.982252][T21626] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  430.005171][T21624] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3948'.
[  430.136049][T21631] lo: entered promiscuous mode
[  430.141896][T21631] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3949'.
[  430.145382][T21631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3949'.
[  430.153904][T21630] lo: left promiscuous mode
[  430.158109][T21633] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3951'.
[  430.170857][ T5619] Bluetooth: hci7: command tx timeout
[  430.251210][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.364949][T21645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3953'.
[  430.381913][T21640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3953'.
[  430.507575][T21656] atomic_op ffff88804c9dd9e0 conn xmit_atomic 0000000000000000
[  430.522756][T21506] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  430.527570][T21506] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  430.532964][T21506] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  430.541485][T21506] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  430.542369][T21506] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  430.554489][T21506] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  430.563818][T21506] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  430.598117][T21506] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  430.609397][T21658] batman_adv: batadv0: Adding interface: syzkaller0
[  430.609415][T21658] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.609446][T21658] batman_adv: batadv0: Interface activated: syzkaller0
[  430.714930][T21656] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3957'.
[  430.718942][T21656] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.743122][T21667] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3958'.
[  430.758116][T21655] batman_adv: batadv0: Interface deactivated: syzkaller0
[  430.782424][T21655] batman_adv: batadv0: Removing interface: syzkaller0
[  430.969439][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.191021][T21598] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.191697][T21598] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.192259][T21598] bridge_slave_0: entered allmulticast mode
[  431.194487][T21598] bridge_slave_0: entered promiscuous mode
[  431.200074][T21598] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.200220][T21598] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.200358][T21598] bridge_slave_1: entered allmulticast mode
[  431.202873][T21598] bridge_slave_1: entered promiscuous mode
[  431.266873][T21598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  431.281523][T21598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  431.300123][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.365701][T21506] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.395711][T21598] team0: Port device team_slave_0 added
[  431.404934][T21598] team0: Port device team_slave_1 added
[  431.540054][T21506] 8021q: adding VLAN 0 to HW filter on device team0
[  431.557292][T21598] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.557310][T21598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.557334][T21598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.563291][T21704] netlink: 'syz.6.3968': attribute type 1 has an invalid length.
[  431.617986][T21598] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.618004][T21598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.618030][T21598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.645522][ T8462] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.645639][ T8462] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.688347][ T8462] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.688448][ T8462] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.744432][T21704] block nbd296: server does not support multiple connections per device.
[  431.759093][T21598] hsr_slave_0: entered promiscuous mode
[  431.760137][T21598] hsr_slave_1: entered promiscuous mode
[  431.760933][T21598] debugfs: 'hsr0' already exists in 'hsr'
[  431.760951][T21598] Cannot create hsr debugfs directory
[  431.774091][T21704] block nbd296: shutting down sockets
[  431.965633][ T8461] IPVS: starting estimator thread 0...
[  431.969694][T21711] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  432.058901][T21715] IPVS: using max 33 ests per chain, 79200 per kthread
[  432.097424][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.107640][T21506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  432.251534][ T5619] Bluetooth: hci7: command tx timeout
[  432.317591][T21598] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  432.329047][T21598] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  432.329890][T21598] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  432.331200][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.363425][T21598] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  432.364533][T21598] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  432.392113][T21598] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  432.393798][T21598] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  432.421327][T21598] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  432.667210][T21598] 8021q: adding VLAN 0 to HW filter on device bond0
[  432.709814][T21598] 8021q: adding VLAN 0 to HW filter on device team0
[  432.725367][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.725465][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  432.741965][T11276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.772626][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.772727][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  432.892810][T21744] netlink: 'syz.0.3977': attribute type 33 has an invalid length.
[  432.892942][T21745] netlink: 'syz.0.3977': attribute type 33 has an invalid length.
[  432.922323][T21744] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  432.926299][T21744] bond6 (unregistering): Released all slaves
[  433.071867][T21745] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  433.074024][T21745] bond6 (unregistering): Released all slaves
[  433.368840][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.371714][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.424083][T21506] 8021q: adding VLAN 0 to HW filter on device batadv0
[  433.471343][T21774] netlink: 'syz.6.3981': attribute type 1 has an invalid length.
[  434.039489][T21804] netlink: 'syz.0.3986': attribute type 10 has an invalid length.
[  434.096655][T21804] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  434.109131][T21804] .`: (slave netdevsim1): Enslaving as an active interface with an up link
[  434.283752][T21506] veth0_vlan: entered promiscuous mode
[  434.331107][T21506] veth1_vlan: entered promiscuous mode
[  434.347575][T21823] Cannot find map_set index 2 as target
[  434.439108][T21506] veth0_macvtap: entered promiscuous mode
[  434.456371][T21506] veth1_macvtap: entered promiscuous mode
[  434.486545][T21828] __nla_validate_parse: 13 callbacks suppressed
[  434.486566][T21828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3992'.
[  434.491773][T21598] 8021q: adding VLAN 0 to HW filter on device batadv0
[  434.548044][T21836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3993'.
[  434.560697][T21506] batman_adv: batadv0: Interface activated: batadv_slave_0
[  434.593509][T21506] batman_adv: batadv0: Interface activated: batadv_slave_1
[  434.621129][ T7336] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.621444][T21836] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3993'.
[  434.660280][   T34] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.660595][ T8459] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.660658][ T8459] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.937283][T21847] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) !
[  434.985149][ T8462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.985171][ T8462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.017117][T21857] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3997'.
[  435.102918][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.102940][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.130653][T11275] net_ratelimit: 3 callbacks suppressed
[  435.130671][T11275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.439965][T21598] veth0_vlan: entered promiscuous mode
[  435.451549][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.483972][T21598] veth1_vlan: entered promiscuous mode
[  435.613891][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.613914][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.624208][T21598] veth0_macvtap: entered promiscuous mode
[  435.662965][T21598] veth1_macvtap: entered promiscuous mode
[  435.734784][T21598] batman_adv: batadv0: Interface activated: batadv_slave_0
[  435.751011][T21598] batman_adv: batadv0: Interface activated: batadv_slave_1
[  435.776629][ T8462] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.789575][ T8463] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.790459][ T8462] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.790495][ T8462] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.135773][T21899] netlink: 'syz.6.4006': attribute type 83 has an invalid length.
[  436.207562][T21891] syzkaller0: entered promiscuous mode
[  436.207587][T21891] syzkaller0: entered allmulticast mode
[  436.247612][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.247634][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.404708][T21910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4008'.
[  436.495156][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.222771][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.540842][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.500849][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.573704][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.560094][T21904] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4007'.
[  439.561052][T21906] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4007'.
[  439.610643][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.671726][ T8456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.671769][ T8456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.771021][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.256893][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.379843][T21961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4018'.
[  440.435021][T21961] netlink: 'syz.4.4018': attribute type 1 has an invalid length.
[  440.564133][T21966] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  440.632230][T21970] xt_NETMAP: bad MAP_IPS.
[  440.651721][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.651981][T21970] xt_NETMAP: bad MAP_IPS.
[  440.892571][T21984] netlink: 'syz.0.4027': attribute type 24 has an invalid length.
[  440.893391][T21984] netlink: 'syz.0.4027': attribute type 24 has an invalid length.
[  440.899677][T21984] netlink: 'syz.0.4027': attribute type 24 has an invalid length.
[  440.902271][T21984] netlink: 'syz.0.4027': attribute type 24 has an invalid length.
[  440.904728][T21984] netlink: 'syz.0.4027': attribute type 24 has an invalid length.
[  440.907210][T21984] netlink: 'syz.0.4027': attribute type 24 has an invalid length.
[  440.907810][T21984] netlink: 'syz.0.4027': attribute type 24 has an invalid length.
[  440.910491][T21984] netlink: 'syz.0.4027': attribute type 24 has an invalid length.
[  440.912924][T21984] netlink: 'syz.0.4027': attribute type 24 has an invalid length.
[  441.124448][T21998] ip6t_rpfilter: unknown options
[  441.126179][T21999] ip6t_rpfilter: unknown options
[  441.139377][T21998] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4028'.
[  441.226190][T21988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4026'.
[  441.433958][T22003] bond1: option primary_reselect: invalid value (255)
[  441.435771][T22003] bond1 (unregistering): Released all slaves
[  441.603900][T22006] bond1: option lp_interval: invalid value (0)
[  441.603923][T22006] bond1: option lp_interval: allowed values 1 - 2147483647
[  441.635477][T22006] bond1 (unregistering): Released all slaves
[  441.690523][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.733803][T22025] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4035'.
[  441.733824][T22025] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4035'.
[  441.936332][T22025] veth7: entered promiscuous mode
[  442.222024][T22036] tipc: Started in network mode
[  442.222055][T22036] tipc: Node identity 86304b08812c, cluster identity 4711
[  442.222230][T22036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  442.273882][T22050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4045'.
[  442.273911][T22050] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4045'.
[  442.331638][ T5619] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  442.332469][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout
[  442.425229][T22029] tipc: Disabling bearer <eth:syzkaller0>
[  442.437353][T22058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4047'.
[  442.448178][T22056] syzkaller1: entered promiscuous mode
[  442.448198][T22056] syzkaller1: entered allmulticast mode
[  442.679623][T22065] Cannot find add_set index 0 as target
[  442.807224][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.210498][   T34] wlan1: Trigger new scan to find an IBSS to join
[  443.292397][T11275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.332949][T22086] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.849132][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.889677][T22124] lo: entered promiscuous mode
[  443.899296][T22124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  444.721289][T22170] __nla_validate_parse: 14 callbacks suppressed
[  444.721344][T22170] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4084'.
[  444.721362][T22170] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4084'.
[  444.772806][T22170] batman_adv: batadv0: Adding interface: veth0
[  444.772824][T22170] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  444.772853][T22170] batman_adv: batadv0: Interface activated: veth0
[  444.819946][T22170] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4084'.
[  444.855506][T22170] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  444.855534][T22170] batman_adv: batadv0: Removing interface: batadv_slave_0
[  444.885627][T22170] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  444.885651][T22170] batman_adv: batadv0: Removing interface: batadv_slave_1
[  444.921728][T22170] batman_adv: batadv0: Interface deactivated: veth0
[  444.921752][T22170] batman_adv: batadv0: Removing interface: veth0
[  445.105420][T22194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4090'.
[  445.182338][T22191] IPVS: length: 66 != 24
[  445.221893][T22198] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4090'.
[  445.221919][T22198] nbd: nbd64 already in use
[  445.237015][T22205] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4090'.
[  445.237040][T22205] nbd: device at index 64 is going down
[  445.247975][T22208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4090'.
[  445.248000][T22208] nbd: device at index 64 is going down
[  445.465265][T22213] validate_nla: 61 callbacks suppressed
[  445.465287][T22213] netlink: 'syz.0.4093': attribute type 15 has an invalid length.
[  445.541499][T22219] netlink: 'syz.8.4097': attribute type 1 has an invalid length.
[  445.675792][T22219] macvlan2: entered promiscuous mode
[  445.675817][T22219] macvlan2: entered allmulticast mode
[  446.017126][ T7337] IPVS: starting estimator thread 0...
[  446.034905][T22240] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  446.076610][T22242] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4102'.
[  446.109097][T22236] IPVS: using max 33 ests per chain, 79200 per kthread
[  446.232978][T22248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4105'.
[  446.233003][T22248] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4105'.
[  446.249135][ T7337] wlan1: Trigger new scan to find an IBSS to join
[  446.289337][T22247] netlink: 'syz.4.4103': attribute type 1 has an invalid length.
[  446.347257][T22242] macvtap1: entered promiscuous mode
[  446.347274][T22242] vlan0: entered promiscuous mode
[  446.347584][T22242] macvtap1: entered allmulticast mode
[  446.347593][T22242] vlan0: entered allmulticast mode
[  446.347600][T22242] veth0_vlan: entered allmulticast mode
[  446.416847][T22247] 8021q: adding VLAN 0 to HW filter on device bond4
[  446.476540][T22254] bond4: (slave geneve2): making interface the new active one
[  446.487769][T22254] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  446.628019][T22262] netlink: 'syz.8.4107': attribute type 1 has an invalid length.
[  446.743551][T22262] 8021q: adding VLAN 0 to HW filter on device bond1
[  446.853280][T22264] xt_TCPMSS: Only works on TCP SYN packets
[  447.004019][T22283] Cannot find add_set index 2 as target
[  447.093380][T22262] syzkaller0: entered promiscuous mode
[  447.093405][T22262] syzkaller0: entered allmulticast mode
[  447.112999][T22270] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  447.136561][T22294] syzkaller1: entered allmulticast mode
[  447.539377][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.579168][ T7337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.630837][ T5619] Bluetooth: hci5: command 0x0406 tx timeout
[  447.935368][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.579949][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.709184][ T7336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.292887][ T7337] wlan1: Trigger new scan to find an IBSS to join
[  449.611157][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.862345][ T7336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.267450][ T8456] wlan1: Creating new IBSS network, BSSID a2:11:10:cd:de:d9
[  450.562764][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.563141][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.773199][T22318] netlink: 'syz.8.4119': attribute type 1 has an invalid length.
[  451.074968][ T7336] dvmrp2: left allmulticast mode
[  451.096618][ T7336] batman_adv: batadv0: Interface deactivated: gretap4
[  451.296236][ T5803] net_ratelimit: 4 callbacks suppressed
[  451.296257][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.342623][ T7336] bond10 (unregistering): (slave ip6erspan0): Releasing active interface
[  451.432955][ T7336] bond5 (unregistering): (slave xfrm1): Releasing backup interface
[  451.432974][ T7336] xfrm1 (unregistering): left promiscuous mode
[  451.527244][ T7336] bond1 (unregistering): (slave gretap1): Releasing active interface
[  451.541116][ T7336] batman_adv: batadv0: Removing interface: gretap2
[  451.586425][ T7336] batman_adv: batadv0: Removing interface: gretap4
[  451.706800][ T7336] bond12 (unregistering): (slave bridge9): Releasing backup interface
[  451.706828][ T7336] bridge9 (unregistering): left promiscuous mode
[  451.755034][ T7336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  451.756993][ T7336] bond0 (unregistering): Released all slaves
[  451.765161][ T7336] bond1 (unregistering): Released all slaves
[  451.779098][T11275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.779561][ T7336] bond2 (unregistering): Released all slaves
[  451.793392][ T7336] bond3 (unregistering): Released all slaves
[  451.816043][ T7336] bond4 (unregistering): Released all slaves
[  451.834097][ T7336] bond5 (unregistering): Released all slaves
[  451.847338][ T7336] bond6 (unregistering): Released all slaves
[  451.864400][ T7336] bond7 (unregistering): Released all slaves
[  451.875674][ T7336] bond8 (unregistering): Released all slaves
[  451.892931][ T7336] bond9 (unregistering): Released all slaves
[  451.919436][ T7336] bond10 (unregistering): Released all slaves
[  451.937622][ T7336] bond11 (unregistering): Released all slaves
[  451.954430][ T7336] bond12 (unregistering): Released all slaves
[  451.966356][T22318] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  451.972883][T22320] bond1: (slave veth0_to_bond): Releasing backup interface
[  452.182111][ T8459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.229132][ T7336] : left promiscuous mode
[  452.376077][ T7336] tipc: Left network mode
[  452.387267][T22355] lo: entered allmulticast mode
[  452.452830][T22360] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  452.454878][T22360] netlink: 'syz.8.4132': attribute type 5 has an invalid length.
[  452.454898][T22360] netlink: 'syz.8.4132': attribute type 9 has an invalid length.
[  452.454911][T22360] __nla_validate_parse: 5 callbacks suppressed
[  452.454922][T22360] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4132'.
[  452.457056][T22355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  452.458021][T22360] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  452.967842][   T34] IPVS: starting estimator thread 0...
[  453.071579][T22383] IPVS: using max 39 ests per chain, 93600 per kthread
[  453.131745][T22388] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b
[  453.176355][T22391] netlink: 'syz.8.4139': attribute type 1 has an invalid length.
[  453.176440][T22391] netlink: 'syz.8.4139': attribute type 1 has an invalid length.
[  453.550656][T22404] veth1_macvtap: left promiscuous mode
[  453.837496][ T7336] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  453.837520][ T7336] batman_adv: batadv0: Removing interface: batadv_slave_1
[  453.865035][T22429] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4146'.
[  453.882535][ T7336] veth1_macvtap: left promiscuous mode
[  453.882576][ T7336] veth0_macvtap: left promiscuous mode
[  453.882672][ T7336] veth1_vlan: left promiscuous mode
[  453.883685][ T7336] veth0_vlan: left promiscuous mode
[  454.380224][ T7336] team0 (unregistering): Port device team_slave_1 removed
[  454.400899][ T7336] team0 (unregistering): Port device team_slave_0 removed
[  454.562938][ T7336] team0 (unregistering): Port device dummy0 removed
[  455.106590][ T7336] IPVS: stop unused estimator thread 0...
[  455.146152][T22461] netlink: 'syz.0.4158': attribute type 1 has an invalid length.
[  455.253465][T22470] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4161'.
[  455.423574][T22479] netlink: 'syz.4.4162': attribute type 1 has an invalid length.
[  455.563891][T22479] bond5: entered promiscuous mode
[  455.564608][T22479] 8021q: adding VLAN 0 to HW filter on device bond5
[  455.635199][T22486] netlink: 'syz.7.4163': attribute type 2 has an invalid length.
[  455.635221][T22486] netlink: 'syz.7.4163': attribute type 1 has an invalid length.
[  456.036117][T22507] netlink: 'syz.6.4168': attribute type 9 has an invalid length.
[  456.036140][T22507] netlink: 'syz.6.4168': attribute type 4 has an invalid length.
[  456.175085][T22514] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  456.180330][T22514] bond3: (slave lo): Enslaving as an active interface with an up link
[  456.182891][T22514] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  456.284939][T22522] netlink: 'syz.8.4172': attribute type 16 has an invalid length.
[  456.451208][T22526] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4173'.
[  456.476830][T22526] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4173'.
[  456.500815][T22530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.501261][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.503884][T22530] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  456.507180][T22530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.507519][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.559498][T22530] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  456.599186][T22537] netlink: 'syz.8.4175': attribute type 6 has an invalid length.
[  457.026976][T22559] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  457.731832][T22595] dvmrp1: entered allmulticast mode
[  457.817785][T22601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.818016][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.852387][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout
[  458.247457][T22606] bond2: option fail_over_mac: invalid value (16)
[  458.269720][T22606] bond2 (unregistering): Released all slaves
[  458.639941][T22632] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4206'.
[  458.882300][T22655] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4212'.
[  459.273387][T22667] bond4: option resend_igmp: invalid value (32767)
[  459.273403][T22667] bond4: option resend_igmp: allowed values 0 - 255
[  459.296667][T22667] bond4 (unregistering): Released all slaves
[  459.332625][T22685] Cannot find set identified by id 0 to match
[  459.352736][T22686] Bluetooth: ISO socket layer initialized
[  459.377489][T22677] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4220'.
[  459.411807][T22671] netlink: 'syz.0.4218': attribute type 10 has an invalid length.
[  459.432155][T22671] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  459.737638][T22705] xt_bpf: check failed: parse error
[  460.021360][T22715] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4229'.
[  460.096423][T22720] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4230'.
[  460.113729][T22720] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4230'.
[  460.146498][T22720] wg0 speed is unknown, defaulting to 1000
[  460.146562][T22720] wg0 speed is unknown, defaulting to 1000
[  460.147463][T22720] wg0 speed is unknown, defaulting to 1000
[  460.154784][T22720] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  460.154822][T22720] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  460.154860][T22720] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  460.219478][T22720] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  460.293465][T22720] wg0 speed is unknown, defaulting to 1000
[  460.297603][T22720] wg0 speed is unknown, defaulting to 1000
[  460.310006][T22720] wg0 speed is unknown, defaulting to 1000
[  460.312475][T22720] wg0 speed is unknown, defaulting to 1000
[  460.314167][T22720] wg0 speed is unknown, defaulting to 1000
[  460.315867][T22720] wg0 speed is unknown, defaulting to 1000
[  460.317493][T22720] wg0 speed is unknown, defaulting to 1000
[  460.336434][T22720] wg0 speed is unknown, defaulting to 1000
[  460.344748][T22720] wg0 speed is unknown, defaulting to 1000
[  460.366845][T22720] wg0 speed is unknown, defaulting to 1000
[  460.373206][T22720] wg0 speed is unknown, defaulting to 1000
[  460.674682][T22741] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4239'.
[  460.674697][T22735] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4237'.
[  460.711854][T22740] netlink: 5160 bytes leftover after parsing attributes in process `syz.6.4239'.
[  461.176477][T22758] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4246'.
[  461.233670][T22768] netlink: 'syz.0.4247': attribute type 2 has an invalid length.
[  461.234001][T22768] netlink: 'syz.0.4247': attribute type 2 has an invalid length.
[  461.234202][T22768] netlink: 'syz.0.4247': attribute type 2 has an invalid length.
[  461.234419][T22768] netlink: 'syz.0.4247': attribute type 2 has an invalid length.
[  461.234606][T22768] netlink: 'syz.0.4247': attribute type 2 has an invalid length.
[  461.234794][T22768] netlink: 'syz.0.4247': attribute type 2 has an invalid length.
[  461.234996][T22768] netlink: 'syz.0.4247': attribute type 2 has an invalid length.
[  461.283430][T22768] netlink: 'syz.0.4247': attribute type 2 has an invalid length.
[  461.283629][T22768] netlink: 'syz.0.4247': attribute type 2 has an invalid length.
[  461.283807][T22768] netlink: 'syz.0.4247': attribute type 2 has an invalid length.
[  461.323384][T22774] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  461.440194][T22782] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa
[  461.546046][T22765] syzkaller1: entered promiscuous mode
[  461.546072][T22765] syzkaller1: entered allmulticast mode
[  461.834980][T22790] team0 (unregistering): Port device team_slave_0 removed
[  461.887206][T22790] team0 (unregistering): Port device team_slave_1 removed
[  461.968811][T22785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  462.314462][T22820] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  462.410935][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.411184][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.411363][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.411560][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.411721][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.411899][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.412062][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.412230][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.412391][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.808461][T22848] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  464.231322][T22912] bond0: Error: Cannot enslave bond to itself.
[  464.291607][T22912] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  464.549407][T22924] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  464.777888][T22935] __nla_validate_parse: 33 callbacks suppressed
[  464.777910][T22935] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4294'.
[  464.823038][T22935] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4294'.
[  464.862503][T22930] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4294'.
[  465.443489][T22962] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4289'.
[  465.443512][T22962] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4289'.
[  465.443806][T22962] vlan0: entered promiscuous mode
[  465.607009][T22964] netlink: 6 bytes leftover after parsing attributes in process `syz.6.4299'.
[  465.675993][T22976] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4300'.
[  465.743054][T22977] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  465.981226][T22991] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4305'.
[  466.065471][T22993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4307'.
[  466.065495][T22993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4307'.
[  466.190361][T22999] syzkaller0: entered promiscuous mode
[  466.190391][T22999] syzkaller0: entered allmulticast mode
[  466.743417][T23024] sctp: [Deprecated]: syz.4.4320 (pid 23024) Use of struct sctp_assoc_value in delayed_ack socket option.
[  466.743417][T23024] Use struct sctp_sack_info instead
[  466.929288][T23036] 8021q: adding VLAN 0 to HW filter on device bond6
[  466.954061][T23036] vlan3: entered promiscuous mode
[  466.954084][T23036] bond6: entered promiscuous mode
[  466.954263][T23036] vlan3: entered allmulticast mode
[  466.954276][T23036] bond6: entered allmulticast mode
[  466.990540][T23036] bond6: (slave gtp2): refused to change device type
[  478.329288][ T5627] Bluetooth: hci4: command 0x0406 tx timeout
[  480.273938][   T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  483.448950][ T5619] Bluetooth: hci3: command 0x0406 tx timeout
[  511.199373][ T7337] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  528.362917][T23060] __nla_validate_parse: 6 callbacks suppressed
[  528.362938][T23060] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4325'.
[  528.392735][T23056] net_ratelimit: 39 callbacks suppressed
[  528.392832][T23056] syz_tun: mtu less than device minimum
[  528.547207][T23061] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4324'.
[  528.932392][T23098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4336'.
[  529.027356][T23105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4337'.
[  529.027399][T23105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4337'.
[  529.342786][T23120] validate_nla: 17 callbacks suppressed
[  529.342807][T23120] netlink: 'syz.0.4344': attribute type 16 has an invalid length.
[  529.342821][T23120] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4344'.
[  529.342854][T23120] veth0_macvtap: entered allmulticast mode
[  529.517834][T23125] netlink: 'syz.7.4345': attribute type 2 has an invalid length.
[  529.575645][T23125] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4345'.
[  529.811779][T23135] netlink: 'syz.8.4350': attribute type 32 has an invalid length.
[  529.811804][T23135] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4350'.
[  529.883034][T23135] bond2: Setting coupled_control to off (0)
[  529.888174][T23141] netlink: 'syz.6.4352': attribute type 4 has an invalid length.
[  529.910687][T23144] x_tables: duplicate underflow at hook 2
[  529.940624][T23135] syzkaller1: entered promiscuous mode
[  529.940647][T23135] syzkaller1: entered allmulticast mode
[  530.241698][T23171] netlink: zone id is out of range
[  530.241714][T23171] netlink: zone id is out of range
[  530.241723][T23171] netlink: zone id is out of range
[  530.241730][T23171] netlink: zone id is out of range
[  530.241771][T23171] netlink: zone id is out of range
[  530.241780][T23171] netlink: zone id is out of range
[  530.241792][T23171] netlink: zone id is out of range
[  530.241800][T23171] netlink: zone id is out of range
[  530.241808][T23171] netlink: zone id is out of range
[  531.613436][T23232] netlink: 'syz.6.4376': attribute type 1 has an invalid length.
[  531.696205][T23232] bond4: entered promiscuous mode
[  531.696654][T23232] 8021q: adding VLAN 0 to HW filter on device bond4
[  531.849736][T23246] ip6gre1: entered allmulticast mode
[  532.104502][T23261] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4382'.
[  532.233920][T23270] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4384'.
[  532.637545][T23290] netlink: 'syz.7.4389': attribute type 143 has an invalid length.
[  532.807686][T23301] netlink: 'syz.6.4393': attribute type 1 has an invalid length.
[  533.802215][T23359] netlink: 'syz.0.4406': attribute type 8 has an invalid length.
[  534.178039][T23373] __nla_validate_parse: 3 callbacks suppressed
[  534.178062][T23373] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4409'.
[  534.178090][T23373] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4409'.
[  534.211698][T23373] geneve2: entered promiscuous mode
[  534.413191][T23381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4411'.
[  534.531945][T23381] bond6: entered promiscuous mode
[  534.532528][T23381] 8021q: adding VLAN 0 to HW filter on device bond6
[  534.556389][T23383] 8021q: adding VLAN 0 to HW filter on device bond6
[  534.556779][T23383] bond6: (slave sit3): The slave device specified does not support setting the MAC address
[  534.557800][T23383] bond6: (slave sit3): Error -95 calling set_mac_address
[  534.617365][T23388] xt_hashlimit: size too large, truncated to 1048576
[  534.784895][T23395] IPVS: set_ctl: invalid protocol: 33 172.20.20.56:2582
[  534.785343][T23395] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4415'.
[  536.588059][T23352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  536.823862][T23408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4419'.
[  536.857297][T23410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4420'.
[  536.881138][T23417] net_ratelimit: 499 callbacks suppressed
[  536.881157][T23417] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  536.942415][T23419] netlink: 'syz.8.4421': attribute type 1 has an invalid length.
[  537.015513][T23421] erspan1: entered allmulticast mode
[  537.101201][T23426] ipvlan3: entered allmulticast mode
[  537.101227][T23426] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode
[  537.117992][T23431] netlink: 'syz.0.4422': attribute type 83 has an invalid length.
[  537.160285][T23437] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  537.191868][T23421] erspan1: entered allmulticast mode
[  537.264424][T23442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4427'.
[  537.302584][T23421] erspan1: entered allmulticast mode
[  537.373713][T23450] netlink: 84 bytes leftover after parsing attributes in process `syz.7.4430'.
[  537.404165][T23421] erspan1: entered allmulticast mode
[  537.435305][T23453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4429'.
[  537.435331][T23453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4429'.
[  537.497709][T23421] erspan1: entered allmulticast mode
[  537.600045][T23421] erspan1: entered allmulticast mode
[  537.649294][T23421] erspan1: entered allmulticast mode
[  538.117643][T23493] x_tables: unsorted underflow at hook 2
[  538.270960][T23499] dvmrp8: entered allmulticast mode
[  538.395276][T23509] netlink: 'syz.8.4445': attribute type 2 has an invalid length.
[  538.434408][T23509] : entered promiscuous mode
[  538.662524][T23524] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  538.703723][T23521] IPv6: addrconf: prefix option has invalid lifetime
[  538.804442][T23528] sctp: [Deprecated]: syz.6.4452 (pid 23528) Use of struct sctp_assoc_value in delayed_ack socket option.
[  538.804442][T23528] Use struct sctp_sack_info instead
[  539.646652][T23585] netlink: 'syz.0.4469': attribute type 1 has an invalid length.
[  539.662910][T23580] __nla_validate_parse: 8 callbacks suppressed
[  539.662929][T23580] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4466'.
[  539.662956][T23580] netlink: 'syz.7.4466': attribute type 7 has an invalid length.
[  539.662968][T23580] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4466'.
[  539.685491][T23585] 8021q: adding VLAN 0 to HW filter on device bond7
[  539.706089][T23585] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  539.753843][T23585] bond7: entered allmulticast mode
[  539.828026][T23585] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link
[  539.896568][T23592] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4470'.
[  539.896596][T23592] block nbd0: Unsupported socket: should be TCP or UNIX.
[  540.074971][T23604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4474'.
[  540.105692][T23604] veth0_to_bond: entered allmulticast mode
[  540.125031][T23606] netlink: 'syz.6.4476': attribute type 1 has an invalid length.
[  540.903550][T23663] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4488'.
[  540.903573][T23663] netlink: 'syz.8.4488': attribute type 1 has an invalid length.
[  540.944185][T23665] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4487'.
[  541.343104][T23682] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4492'.
[  541.344062][T23682] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4492'.
[  541.623486][T23687] can: request_module (can-proto-0) failed.
[  541.785886][T23706] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  541.962131][T23716] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4506'.
[  542.016542][T23720] netlink: 'syz.8.4507': attribute type 12 has an invalid length.
[  542.023484][T23721] netlink: 'syz.6.4508': attribute type 2 has an invalid length.
[  542.023505][T23721] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4508'.
[  542.047463][ T8466] IPVS: starting estimator thread 0...
[  542.123606][ T8466] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  542.128697][T23722] IPVS: using max 37 ests per chain, 88800 per kthread
[  542.144766][T23720] bond3: option primary_reselect: invalid value (255)
[  542.151283][T23720] bond3 (unregistering): Released all slaves
[  542.171706][   T32] INFO: task syz.5.3512:19854 blocked for more than 143 seconds.
[  542.171732][   T32]       Not tainted syzkaller #0
[  542.171763][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  542.171771][   T32] task:syz.5.3512      state:D stack:27200 pid:19854 tgid:19851 ppid:18436  task_flags:0x400140 flags:0x00080002
[  542.171847][   T32] Call Trace:
[  542.171857][   T32]  <TASK>
[  542.171872][   T32]  __schedule+0x17db/0x58f0
[  542.172058][   T32]  ? __pfx___schedule+0x10/0x10
[  542.172132][   T32]  ? schedule+0x90/0x2b0
[  542.172156][   T32]  schedule+0x164/0x2b0
[  542.172177][   T32]  schedule_preempt_disabled+0x13/0x30
[  542.172195][   T32]  __mutex_lock+0x7c1/0x1550
[  542.172220][   T32]  ? __mutex_lock+0x5d4/0x1550
[  542.172245][   T32]  ? nfsd_nl_version_set_doit+0xcd/0x7a0
[  542.172363][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  542.172399][   T32]  ? rcu_is_watching+0x16/0xb0
[  542.172450][   T32]  nfsd_nl_version_set_doit+0xcd/0x7a0
[  542.172475][   T32]  ? __kmalloc_noprof+0x38c/0x720
[  542.172521][   T32]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  542.172549][   T32]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  542.173835][   T32]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  542.173939][   T32]  genl_family_rcv_msg_doit+0x233/0x340
[  542.173970][   T32]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  542.174004][   T32]  ? bpf_lsm_capable+0x9/0x20
[  542.174115][   T32]  ? security_capable+0x7e/0x2c0
[  542.174244][   T32]  genl_rcv_msg+0x614/0x7a0
[  542.174271][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  542.174292][   T32]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  542.174328][   T32]  netlink_rcv_skb+0x226/0x4a0
[  542.174384][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  542.174403][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  542.174436][   T32]  ? down_read+0x2be/0x330
[  542.174488][   T32]  genl_rcv+0x28/0x40
[  542.174503][   T32]  netlink_unicast+0x7bd/0x940
[  542.174531][   T32]  netlink_sendmsg+0x813/0xb40
[  542.174559][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  542.174596][   T32]  ? apparmor_socket_sendmsg+0x98/0x360
[  542.174641][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  542.174661][   T32]  sock_sendmsg_nosec+0x13a/0x180
[  542.175734][   T32]  ____sys_sendmsg+0x54e/0x850
[  542.175788][   T32]  ? __pfx_____sys_sendmsg+0x10/0x10
[  542.175819][   T32]  ? import_iovec+0x73/0xa0
[  542.175941][   T32]  ___sys_sendmsg+0x2a5/0x360
[  542.175961][   T32]  ? __lock_acquire+0x747/0x2de0
[  542.176057][   T32]  ? __pfx____sys_sendmsg+0x10/0x10
[  542.176142][   T32]  ? futex_wait+0x2a2/0x390
[  542.176378][   T32]  ? __fget_files+0x2a/0x420
[  542.176424][   T32]  ? __fget_files+0x3a2/0x420
[  542.176461][   T32]  __x64_sys_sendmsg+0x1b1/0x290
[  542.176489][   T32]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  542.176535][   T32]  do_syscall_64+0x166/0x520
[  542.176557][   T32]  ? trace_irq_disable+0x3b/0x140
[  542.176595][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.176638][   T32]  ? clear_bhb_loop+0x70/0xc0
[  542.176663][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.176683][   T32] RIP: 0033:0x7f2c2d79e159
[  542.176702][   T32] RSP: 002b:00007f2c2b9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  542.176724][   T32] RAX: ffffffffffffffda RBX: 00007f2c2da25fa0 RCX: 00007f2c2d79e159
[  542.176763][   T32] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000004
[  542.176777][   T32] RBP: 00007f2c2d83506b R08: 0000000000000000 R09: 0000000000000000
[  542.176789][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  542.176801][   T32] R13: 00007f2c2da26038 R14: 00007f2c2da25fa0 R15: 00007ffd4f5a3088
[  542.176833][   T32]  </TASK>
[  542.176843][   T32] INFO: task syz.5.3512:19855 blocked for more than 143 seconds.
[  542.176859][   T32]       Not tainted syzkaller #0
[  542.176869][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  542.176878][   T32] task:syz.5.3512      state:D stack:27200 pid:19855 tgid:19851 ppid:18436  task_flags:0x400140 flags:0x00080002
[  542.178191][   T32] Call Trace:
[  542.178201][   T32]  <TASK>
[  542.178214][   T32]  __schedule+0x17db/0x58f0
[  542.180353][   T32]  ? stack_trace_save+0xa9/0x100
[  542.180424][   T32]  ? __pfx___schedule+0x10/0x10
[  542.180464][   T32]  ? schedule+0x90/0x2b0
[  542.180489][   T32]  schedule+0x164/0x2b0
[  542.180510][   T32]  schedule_preempt_disabled+0x13/0x30
[  542.180528][   T32]  __mutex_lock+0x7c1/0x1550
[  542.180555][   T32]  ? __mutex_lock+0x5d4/0x1550
[  542.180587][   T32]  ? nfsd_nl_version_set_doit+0xcd/0x7a0
[  542.180613][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  542.180647][   T32]  ? rcu_is_watching+0x16/0xb0
[  542.180674][   T32]  nfsd_nl_version_set_doit+0xcd/0x7a0
[  542.182428][   T32]  ? __kmalloc_noprof+0x38c/0x720
[  542.182459][   T32]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  542.182487][   T32]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  542.182511][   T32]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  542.182541][   T32]  genl_family_rcv_msg_doit+0x233/0x340
[  542.182578][   T32]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  542.182613][   T32]  ? bpf_lsm_capable+0x9/0x20
[  542.182629][   T32]  ? security_capable+0x7e/0x2c0
[  542.182669][   T32]  genl_rcv_msg+0x614/0x7a0
[  542.182698][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  542.182719][   T32]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  542.182776][   T32]  netlink_rcv_skb+0x226/0x4a0
[  542.182806][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  542.182828][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  542.182870][   T32]  ? down_read+0x2be/0x330
[  542.182897][   T32]  genl_rcv+0x28/0x40
[  542.182916][   T32]  netlink_unicast+0x7bd/0x940
[  542.184443][   T32]  netlink_sendmsg+0x813/0xb40
[  542.184487][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  542.184729][   T32]  ? apparmor_socket_sendmsg+0x98/0x360
[  542.184775][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  542.184803][   T32]  sock_sendmsg_nosec+0x13a/0x180
[  542.184835][   T32]  ____sys_sendmsg+0x54e/0x850
[  542.184865][   T32]  ? __pfx_____sys_sendmsg+0x10/0x10
[  542.185511][   T32]  ? import_iovec+0x73/0xa0
[  542.185542][   T32]  ___sys_sendmsg+0x2a5/0x360
[  542.185573][   T32]  ? __lock_acquire+0x747/0x2de0
[  542.185598][   T32]  ? __pfx____sys_sendmsg+0x10/0x10
[  542.186061][   T32]  ? futex_wait+0x2a2/0x390
[  542.186119][   T32]  ? __fget_files+0x2a/0x420
[  542.186145][   T32]  ? __fget_files+0x3a2/0x420
[  542.186180][   T32]  __x64_sys_sendmsg+0x1b1/0x290
[  542.186208][   T32]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  542.186254][   T32]  do_syscall_64+0x166/0x520
[  542.186274][   T32]  ? trace_irq_disable+0x3b/0x140
[  542.187445][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.187469][   T32]  ? clear_bhb_loop+0x70/0xc0
[  542.187492][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.187512][   T32] RIP: 0033:0x7f2c2d79e159
[  542.187529][   T32] RSP: 002b:00007f2c2b9d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  542.187550][   T32] RAX: ffffffffffffffda RBX: 00007f2c2da26090 RCX: 00007f2c2d79e159
[  542.187571][   T32] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000004
[  542.187583][   T32] RBP: 00007f2c2d83506b R08: 0000000000000000 R09: 0000000000000000
[  542.187595][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  542.187607][   T32] R13: 00007f2c2da26128 R14: 00007f2c2da26090 R15: 00007ffd4f5a3088
[  542.187639][   T32]  </TASK>
[  542.187709][   T32] 
[  542.187709][   T32] Showing all locks held in the system:
[  542.187718][   T32] locks held by pr/ttyS0/16: 2, last CPU#1:
[  542.187732][   T32]  #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  542.187805][   T32]  #1: ffffffff9ad39098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0
[  542.189644][   T32] locks held by khungtaskd/32: 1, last CPU#0:
[  542.189661][   T32]  #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  542.189794][   T32] locks held by getty/5367: 2, on CPU#1:
[  542.189808][   T32]  #0: ffff88802a5f60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  542.189930][   T32]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  542.189988][   T32] locks held by kworker/u8:11/7337: 3, on CPU#0:
[  542.190001][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  542.190064][   T32]  #1: ffffc90006357c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  542.190114][   T32]  #2: ffffffff90252700 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  542.192693][   T32] locks held by kworker/u8:23/8456: 3, on CPU#1:
[  542.192710][   T32]  #0: ffff88802bbe6940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  542.192788][   T32]  #1: ffffc90003abfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  542.192839][   T32]  #2: ffffffff90252700 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0
[  542.193578][   T32] locks held by syz.1.3041/17888: 2, on CPU#0:
[  542.193594][   T32]  #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  542.193642][   T32]  #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0
[  542.193699][   T32] locks held by syz.5.3512/19854: 2, on CPU#0:
[  542.193714][   T32]  #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  542.194247][   T32]  #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0
[  542.194298][   T32] locks held by syz.5.3512/19855: 2, on CPU#0:
[  542.194311][   T32]  #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  542.194354][   T32]  #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0
[  542.194406][   T32] locks held by syz.2.3739/20786: 2, on CPU#1:
[  542.194419][   T32]  #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  542.194463][   T32]  #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_filesystem_doit+0x2af/0x410
[  542.194514][   T32] locks held by syz.3.3771/20923: 2, on CPU#1:
[  542.194527][   T32]  #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  542.194579][   T32]  #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0
[  542.196129][   T32] locks held by syz.8.4507/23720: 4, last CPU#1:
[  542.196144][   T32]  #0: ffffffff907a6a40 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  542.196203][   T32]  #1: ffffffff90252700 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30
[  542.196250][   T32]  #2: ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[  542.197498][   T32]  #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140
[  542.197556][   T32] locks held by syz.6.4508/23727: 2, on CPU#1:
[  542.197577][   T32]  #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  542.197622][   T32]  #1: ffffffff902c3460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  542.197669][   T32] locks held by syz.6.4508/23728: 2, on CPU#1:
[  542.201962][   T32]  #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  542.202015][   T32]  #1: ffffffff902c3460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  542.202099][   T32] locks held by syz.0.4509/23725: 3, on CPU#1:
[  542.202114][   T32]  #0: ffffffff902c3628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  542.202159][   T32]  #1: ffffffff902c3460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  542.202204][   T32]  #2: ffffffff90252700 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_bearer_set+0x17/0x40
[  542.202358][   T32] locks held by syz.4.4510/23740: 2, on CPU#0:
[  542.202373][   T32]  #0: ffffffff907bb1f8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  542.202428][   T32]  #1: ffffffff90252700 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30
[  542.202475][   T32] locks held by syz.7.4511/23732: 2, last CPU#0:
[  542.202489][   T32]  #0: ffff888035ee5cf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  542.202540][   T32]  #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  542.202599][   T32] 
[  542.202604][   T32] =============================================
[  542.202604][   T32] 
[  542.202618][   T32] NMI backtrace for cpu 0
[  542.202635][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  542.202655][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  542.202667][   T32] Call Trace:
[  542.202674][   T32]  <TASK>
[  542.202682][   T32]  dump_stack_lvl+0xe8/0x150
[  542.202716][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  542.202779][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  542.202820][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  542.202849][   T32]  sys_info+0x135/0x170
[  542.202899][   T32]  watchdog+0xfd7/0x1030
[  542.202924][   T32]  ? watchdog+0x1c7/0x1030
[  542.202949][   T32]  kthread+0x38b/0x480
[  542.202974][   T32]  ? __pfx_watchdog+0x10/0x10
[  542.203005][   T32]  ? __pfx_kthread+0x10/0x10
[  542.203024][   T32]  ret_from_fork+0x514/0xb70
[  542.203054][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  542.203082][   T32]  ? __switch_to+0xc89/0x1420
[  542.203110][   T32]  ? __pfx_kthread+0x10/0x10
[  542.203129][   T32]  ret_from_fork_asm+0x1a/0x30
[  542.203170][   T32]  </TASK>
[  542.203215][   T32] Sending NMI from CPU 0 to CPUs 1:
[  542.203273][    C1] NMI backtrace for cpu 1
[  542.203286][    C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
[  542.203304][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  542.203314][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[  542.203368][    C1] Code: e8 fe 24 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef 24 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07
[  542.203382][    C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002
[  542.203397][    C1] RAX: 1ffffffff35a7200 RBX: 00000000000003fd RCX: 0000000000000000
[  542.203409][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  542.203420][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  542.203430][    C1] R10: dffffc0000000000 R11: ffffffff8572a560 R12: dffffc0000000000
[  542.203443][    C1] R13: 0000000000000000 R14: ffffffff9ad390c0 R15: 0000000000000000
[  542.203454][    C1] FS:  0000000000000000(0000) GS:ffff888124dd2000(0000) knlGS:0000000000000000
[  542.203468][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  542.203479][    C1] CR2: 000020000000001c CR3: 0000000073d7e000 CR4: 00000000003526f0
[  542.203494][    C1] Call Trace:
[  542.203500][    C1]  <TASK>
[  542.203509][    C1]  wait_for_lsr+0x184/0x2f0
[  542.203529][    C1]  __serial8250_console_fifo_write+0xcd/0x3e0
[  542.203557][    C1]  serial8250_console_write+0xaa1/0x1200
[  542.203580][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  542.203597][    C1]  ? __schedule+0x17f1/0x58f0
[  542.203620][    C1]  nbcon_emit_next_record+0xef5/0x1a90
[  542.203647][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  542.203668][    C1]  ? nbcon_context_try_acquire+0x819/0xbd0
[  542.203694][    C1]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  542.203720][    C1]  nbcon_kthread_func+0x679/0x880
[  542.203741][    C1]  ? nbcon_kthread_func+0x163/0x880
[  542.203759][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  542.203780][    C1]  ? __kthread_parkme+0x71/0x1f0
[  542.203803][    C1]  ? __kthread_parkme+0x199/0x1f0
[  542.203829][    C1]  kthread+0x38b/0x480
[  542.203844][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  542.203860][    C1]  ? __pfx_kthread+0x10/0x10
[  542.203876][    C1]  ret_from_fork+0x514/0xb70
[  542.203893][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  542.203917][    C1]  ? __switch_to+0xc89/0x1420
[  542.203941][    C1]  ? __pfx_kthread+0x10/0x10
[  542.203957][    C1]  ret_from_fork_asm+0x1a/0x30
[  542.203990][    C1]  </TASK>
[  542.216059][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  543.686388][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  543.695485][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  543.707004][   T32] Call Trace:
[  543.710276][   T32]  <TASK>
[  543.713746][   T32]  vpanic+0x56d/0xa60
[  543.717829][   T32]  ? __pfx___schedule+0x10/0x10
[  543.722681][   T32]  ? __pfx_vpanic+0x10/0x10
[  543.727190][   T32]  panic+0xc5/0xd0
[  543.730914][   T32]  ? __pfx_panic+0x10/0x10
[  543.735325][   T32]  ? preempt_schedule_common+0x7f/0xd0
[  543.740774][   T32]  ? preempt_schedule_thunk+0x16/0x40
[  543.746138][   T32]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  543.752287][   T32]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  543.758440][   T32]  watchdog+0x1030/0x1030
[  543.762775][   T32]  ? watchdog+0x1c7/0x1030
[  543.767197][   T32]  kthread+0x38b/0x480
[  543.771261][   T32]  ? __pfx_watchdog+0x10/0x10
[  543.775928][   T32]  ? __pfx_kthread+0x10/0x10
[  543.780505][   T32]  ret_from_fork+0x514/0xb70
[  543.785086][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  543.790193][   T32]  ? __switch_to+0xc89/0x1420
[  543.794865][   T32]  ? __pfx_kthread+0x10/0x10
[  543.799445][   T32]  ret_from_fork_asm+0x1a/0x30
[  543.804216][   T32]  </TASK>
[  543.807508][   T32] Kernel Offset: disabled
[  543.811822][   T32] Rebooting in 86400 seconds..