last executing test programs:

2m44.516555164s ago: executing program 3 (id=2211):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
socketpair(0xf, 0x5, 0x8, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r4, 0x5, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000000)
socket$inet_udp(0x2, 0x2, 0x0)
recvmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f0000000140)=""/24, 0x18}, {&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f00000003c0)=""/20, 0x14}, {&(0x7f0000000400)=""/92, 0x5c}], 0x5, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x40012121)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000200)={@val={0x0, 0x809b}, @void, @eth={@empty, @broadcast, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@can={0xc, {{0x4, 0x1, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "2176df7282765d7a"}}}}}, 0x26)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r7, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0)

2m44.101034905s ago: executing program 3 (id=2217):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x7d4165c9)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x7d4165c9)
listen(r3, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc}, 0x1c)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r10 = accept4(r9, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r10, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0)
listen(r8, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1)

2m43.635198035s ago: executing program 2 (id=2223):
r0 = socket(0x2a, 0x803, 0x6)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0xe)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c00408dbe72f60445ef0280080001400000000428000180080001006e6174001c0002800800014000000000080005400000001708000240000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
close(0x4)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x18, 0x0, 0x2)
getpeername$netrom(r6, 0x0, &(0x7f0000000080)=0xffffffffffffff77)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000948a1c3f9ad483bd1581668ca96453a7b7923eb8b8dcf0d8db3e70bb4343799027f209bd7fdb9d7aac", @ANYRES16=r7, @ANYBLOB="04002dbd7000fddbdf251900000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x80)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x325, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x24030000, 0x0, 0x4050000}, 0x4008040)
ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0)

2m43.55488028s ago: executing program 3 (id=2224):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', 0x0})
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0xffffffe1}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/159, 0x9f}, {&(0x7f0000001500)=""/155, 0x9b}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xab}], 0x6, 0x2000, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', 0x0}) (async)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async)
recvmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0xffffffe1}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/159, 0x9f}, {&(0x7f0000001500)=""/155, 0x9b}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xab}], 0x6, 0x2000, 0x0) (async)

2m43.35928234s ago: executing program 2 (id=2227):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0xfffffffd}}, @TCA_CT_ACTION={0x6, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x4008010)
r2 = socket(0x2b, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000240)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0xa, 0x3}, 0x20)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8003}, 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYRES16=r2], 0x0, 0x45, 0x0, 0x0, 0x41000, 0x40}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'tunl0\x00', 0x800})

2m42.937376247s ago: executing program 2 (id=2230):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="600216f89be3499ebafcff0faa50e246e310009078000003238000"], 0x0)

2m42.709615873s ago: executing program 2 (id=2231):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000140)=0x8, 0xfffffffffffffd32)

2m42.573136077s ago: executing program 3 (id=2232):
r0 = socket$inet(0x10, 0x3, 0x0)
unshare(0x0)
syz_emit_ethernet(0xfffffe9b, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0011fe0a3ccfd56f0e829bc74f9b7181685c406996e6f5124ace5855d8c4e1a269a2d7892f77273a572ad6c078b7a1d6b96ca8d14574533cf67da1f119c52b1125c16fef5e134a17b7c137d375a5ccae81d5d83320a39b6c584908a06930c69f654d4e4344a4418d78220929284e32db1f06a60460f8f3578254e0c3aa46f4eafa429a2788c8b0d178d1d4968626f535d205ecf8f4d3c898df267c499e63876c194081da7077bfec4d063094bf9f01bdeb15c0828852ea54"], 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="4c0000001200ff095cab150099a283ff04b8008000f0ffff000000060040150024001d001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab14e39ba9bf6c4387ea1b", 0x4c}], 0x1}, 0x0)
r1 = socket(0x1a, 0xa, 0x1)
socket(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xcc84}, 0x20000000)
r4 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00'})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r7, 0xfef94000)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x8004f, 0x10000})
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="141a0000120a2dbd7000000000000a0000000000"], 0x14}}, 0x0)
recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0)

2m42.500072234s ago: executing program 2 (id=2233):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getnetconf={0x14, 0x52, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_gfeatures={0x19}})

2m42.240916173s ago: executing program 2 (id=2235):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd2d, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet(0xa, 0x801, 0x84)
getsockopt$IPT_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'raw\x00', 0x0, [0x20000008, 0x0, 0x7, 0x4]}, &(0x7f0000000200)=0x54)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @broadcast}}}, 0x88)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="592879aa35ca0a38a5a4f0616b78378303a5d8a1a4ef2ad930d7e4d74d71fdd29495e0bd5ea617f9", @ANYRESDEC=r1, @ANYRESHEX=r6, @ANYRESDEC=r4, @ANYRESHEX=r5, @ANYRES64=r1], 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r5, 0x20, &(0x7f0000000240)={&(0x7f0000000000)=""/95, 0x5f, <r8=>0x0, &(0x7f00000001c0)=""/60, 0x3c}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x40, '\x00', 0x0, @sk_msg, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

2m42.024497128s ago: executing program 3 (id=2236):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x38, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_NH_ID={0x8, 0xd, 0x81}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008081c000a"], 0x70}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m41.658795099s ago: executing program 3 (id=2239):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x2, 0x4)
r2 = socket$isdn(0x22, 0x2, 0x22)
close(r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x44}}, 0x28000000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000500)={0x4, 0x0, 0x1, 0x0, 0x6, 0x0, [{0x5, 0x4, 0x5, '\x00', 0x80}, {0x7479, 0x5, 0x7, '\x00', 0x1007}, {0x9a, 0x1, 0x7, '\x00', 0x2008}, {0xfffffffffffffc01, 0x8, 0x8, '\x00', 0x400}, {0xffffffffffffffff, 0xfffffffffffffffb, 0x61f, '\x00', 0x200}, {0x2, 0x3, 0x5, '\x00', 0x2}]})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r7, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb87e78a945}, 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0})
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x0)
getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x312)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r10 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1400000016000b63d2b947468b041c031193e473", 0x14}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x5, 0x5}, {0xfff1, 0xffe0}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)

2m26.590720425s ago: executing program 32 (id=2235):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd2d, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet(0xa, 0x801, 0x84)
getsockopt$IPT_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'raw\x00', 0x0, [0x20000008, 0x0, 0x7, 0x4]}, &(0x7f0000000200)=0x54)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @broadcast}}}, 0x88)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="592879aa35ca0a38a5a4f0616b78378303a5d8a1a4ef2ad930d7e4d74d71fdd29495e0bd5ea617f9", @ANYRESDEC=r1, @ANYRESHEX=r6, @ANYRESDEC=r4, @ANYRESHEX=r5, @ANYRES64=r1], 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r5, 0x20, &(0x7f0000000240)={&(0x7f0000000000)=""/95, 0x5f, <r8=>0x0, &(0x7f00000001c0)=""/60, 0x3c}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x40, '\x00', 0x0, @sk_msg, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

2m26.179732066s ago: executing program 33 (id=2239):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x2, 0x4)
r2 = socket$isdn(0x22, 0x2, 0x22)
close(r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x44}}, 0x28000000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000500)={0x4, 0x0, 0x1, 0x0, 0x6, 0x0, [{0x5, 0x4, 0x5, '\x00', 0x80}, {0x7479, 0x5, 0x7, '\x00', 0x1007}, {0x9a, 0x1, 0x7, '\x00', 0x2008}, {0xfffffffffffffc01, 0x8, 0x8, '\x00', 0x400}, {0xffffffffffffffff, 0xfffffffffffffffb, 0x61f, '\x00', 0x200}, {0x2, 0x3, 0x5, '\x00', 0x2}]})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r7, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb87e78a945}, 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0})
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x0)
getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x312)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r10 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1400000016000b63d2b947468b041c031193e473", 0x14}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x5, 0x5}, {0xfff1, 0xffe0}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)

21.55613801s ago: executing program 4 (id=3032):
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r5, 0x6, 0xd, 0x0, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111830000000000851000000200000085000000d100000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

21.540469903s ago: executing program 6 (id=3033):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdc00, {0x2, 0x20, 0x8, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000500)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0)

20.531657718s ago: executing program 6 (id=3035):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$unix(0x1, 0x5, 0x0)
close(0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)={<r2=>0x0, 0x49, "0abcdfbbed9bd1547b78c50d7854144b794c80d4fbf0693945b35709267c3ce810f9ef569c02a3d2bf61a38bdfb9b6ddded3b20aa52ccff414d0604f528f2ad835ef33c6590ba59c2c"}, &(0x7f0000000080)=0x51)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f00000004c0)=0x27)
setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r5, 0x8, 0xfffff652, 0x2}, 0x10)
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000380)={r2, 0x5, 0xffffb3db, 0x3, 0x1, 0xff00, 0x6, 0x4, {r5, @in6={{0xa, 0x4e20, 0x3, @private0, 0x7}}, 0x6, 0x9, 0xfff, 0x9, 0x2000000}}, &(0x7f0000000100)=0xb0)
socket(0x10, 0x803, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1fb, 0x4, 0x0, 0x5, 0x8001, 0x8}}}}]}, 0x4c}}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r8, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a)
sendfile(r8, r9, 0x0, 0xffffffff000)
ioctl$int_in(r8, 0x5421, &(0x7f00000001c0)=0xb)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r11, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r7], 0x44}, 0x1, 0x0, 0x0, 0x240448e0}, 0x0)

20.036226608s ago: executing program 0 (id=3036):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xe, 0x2}, {0x0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x20040054)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x56}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r10 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4)

18.757603313s ago: executing program 4 (id=3037):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0x6, [@fwd={0x5}, @var={0x8, 0x0, 0x0, 0xe, 0x5, 0x2}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xa, 0x4}, {0x0, 0x2}, {0xb, 0x1}, {0x2, 0x1}]}, @union={0xb, 0x6, 0x0, 0x5, 0x1, 0xfffffc01, [{0x3, 0x3, 0x7}, {0x7, 0x1, 0xa}, {0xb, 0x4, 0x3}, {0x3, 0x4, 0x8}, {0x2, 0x4, 0x2}, {0xe, 0x5, 0xe5}]}, @restrict={0x6, 0x0, 0x0, 0xb, 0x2}, @restrict={0x6}, @func={0x8, 0x0, 0x0, 0xc, 0x3}, @union={0x0, 0x4, 0x0, 0x5, 0x1, 0x6, [{0x2, 0x4, 0x9dc}, {0x1, 0x3, 0xb}, {0x7, 0x5, 0xd}, {0x1, 0x1, 0x2}]}]}, {0x0, [0x61, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000140)=""/37, 0x11a, 0x25, 0x1, 0x6, 0x10000, @value=r0}, 0x28)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000200)={<r4=>0x0, 0x1}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000280)={r4, @in={{0x2, 0x4e21, @empty}}, 0x81, 0xfff, 0x8001, 0x1, 0x4}, &(0x7f0000000340)=0x98)
r5 = accept$ax25(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @netrom}, [@bcast, @rose, @remote, @rose, @rose, @default, @bcast, @rose]}, &(0x7f0000000400)=0x48)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r6=>0x0})
r7 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000480)=0x1, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x4c8, 0x2d8, 0x2d8, 0xffffffff, 0x1e8, 0x2d8, 0x3f8, 0x3f8, 0xffffffff, 0x3f8, 0x3f8, 0x5, &(0x7f00000004c0), {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @empty}, [0xff, 0xffffff00, 0x0, 0xffffff00], [0xff, 0xff, 0xff000000], 'syzkaller1\x00', 'macvlan1\x00', {}, {0xff}, 0x33, 0x6, 0x6, 0x10}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"e433", 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7c9e, 0x24, 0x1}}}, {{@ipv6={@mcast1, @empty, [0x0, 0x0, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xff], 'macvtap0\x00', 'ip6gretap0\x00', {}, {}, 0x4, 0x0, 0x7, 0x5}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@rand_addr=0x64010101, @gre_key=0x3, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4=@empty, @ipv4=@broadcast, @icmp_id=0x65, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0xa9, 0x10, 0x4, 0x43, 0x0, 0x402, 0x40}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3f}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfada, 0x52}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4004)
connect$inet6(r3, &(0x7f0000000b80)={0xa, 0x4e23, 0x32, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000c00))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x60, r9, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0x4}}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x101}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x72c}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xd6}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x28f}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r10 = socket(0x3, 0x6, 0x0)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_buf(r11, 0x6, 0x1a, &(0x7f0000000dc0)="20337349f23b26067d058cdad2f1ac2fa77003d2d778f497debd8ae1837bff3db01dc9f7d57561778f2e0c4405177125a0d4b217b4822732d3672a483f7cf96b1b26578a884d7daa8a878338cc0a0ff18869232e4d408d37f97412c3b2625bbf713ee78d271bb799edafa81f8f0fb06caa1139cd6dd13ecdc4d4634228a5d391d3f49982d2c400c5be51340e3f151df38c896c220e884f5df773ebe2c9ad902bb77a9f4844cb32d300791d2e6313a3210eb004e71ea00184b1bab68daaaa30b834fee2dfeb8905f16385d56748f25a2ec1f834b84bc623e76450058cd66dea8be3d0595c517600297a", 0xe9)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000ec0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff], [0xffffff00, 0xff000000, 0x0, 0xffffffff], 'ip6erspan0\x00', 'pim6reg\x00', {}, {0xff}, 0x3a, 0x1, 0x2, 0x49}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0xff], 0x5, 0x20, 0x2}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xa9, 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x345, 0x8, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x7ff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001440)={&(0x7f00000012c0)={0x150, r9, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x505}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1a50}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5a6}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4a1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6a3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x40, 0x6, 0x4, 0xfffffffc]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2a}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffff8}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x51c}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xc8f, 0x27a, 0x0]}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x50}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xf131}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffffb}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x1, 0x6, 0x0, 0x1, 0x9, 0x1000, 0x3]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xd69]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xe}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x80000}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000014c0)={'vxcan0\x00', <r12=>0x0})
bind$can_raw(r10, &(0x7f0000001500)={0x1d, r12}, 0x10)
setsockopt$sock_int(r11, 0x1, 0x2, &(0x7f0000001540)=0x3, 0x4)
sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000001740)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001700)={&(0x7f00000015c0)={0x140, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x16}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_DATA={0xe6, 0xc5, "abbc97da20fa850526beb66598062120d6f07596e22dfef078f6a2e8b087604e15e793b5073424790b21636df760cb512799f7c780d803c8757b09630fc1547c15109f8475a1f42302896ad0a620e8e12803e93dfe9b11cc396924774e33235ba3e395d90975028680fd9c67b48af217776c0707fd3778a0ed0a5f6dce02936c638ebec8d242fd9f1db1fac1a7e05b300b95dcc9edb2c3197e5a1492b49cad78aad1413963255d370d5392c2a88ec1e084f25cda740189d53a0caff9edd3da83b622886854aa1a9267fea84dad7c85e03279004435ba9a0f8c7a531848f88bed737d"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7fff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffffff}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000004}, 0x20008040)
setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000001780)={{0x5c, @dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x2, 'ovf\x00', 0x20, 0x4, 0x40}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x4e22, 0x0, 0x8001, 0x1, 0x5}}, 0x44)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001800)={'wlan1\x00'})

17.990804842s ago: executing program 6 (id=3040):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000000)="dbe104b35716e67da422221d892f", 0xe, 0x20008894, &(0x7f0000000100)={0x11, 0x7, r1, 0x1, 0x5, 0x6, @local}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x1a8544c652e73fcf, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r1, @ANYBLOB="aaf4836ae4ab314f8c3f82ee66e5003b93cfbc85d58b5b517d0e301a5d75917b86d80faad416477fa6d59eeb3bf092506607cefe9c2a6feb12cd0f46099e86410810eb006bfc9aa8f025251e1418245787a97d79f3950bce6fbf693a34c0dad897ebf0eb99dae7d6e8085661b8f5e8d804aed97614b1699082c643a3274c5e6553bced19eb0ca062f1eefd586c1d4f8e40fac3f37f278ff77be9582aadbe4120abc5dcc27cc9d545d46957313dc921c69dd3276a2e3112310ef3e1253d70ccff97cfabb427de02595a18a4ba87912b", @ANYRESDEC=0x0], 0x0, 0xe5f, 0x0, 0x0, 0x41100}, 0x94)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000640)={0x41, 0x1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
bind$tipc(r3, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4)
r5 = socket$kcm(0x10, 0x2, 0x10)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/62, 0x33e000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r8=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f00000001c0)=0x10000, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r7, &(0x7f0000000040)={0x2c, 0x0, r8, 0x20}, 0x10)
bind$xdp(r6, &(0x7f0000000240)={0x2c, 0x1, r8, 0x0, r7}, 0x10)
listen(0xffffffffffffffff, 0x800)

17.599149219s ago: executing program 4 (id=3041):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x1, 0xfffffffffffffffa, 0x4})
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={<r1=>0x0, 0xfffffffe}, &(0x7f0000000080)=0x8)
getpeername$netrom(r0, &(0x7f00000000c0)={{0x3, @default}, [@rose, @rose, @bcast, @default, @remote, @remote, @remote, @rose]}, &(0x7f0000000140)=0x48)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={<r2=>r1, 0x0, &(0x7f0000000180)}, &(0x7f0000000200)=0x10)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1b8, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_MASTER={0x74, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}}}}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x36}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x6, 0x9, 0xc]}, @CTA_TUPLE_REPLY={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0xd1}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20040051}, 0x80)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x4000)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000680)={0x100, 0x6, 0x8}, 0xc)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000006c0)={r1, 0x80, 0x5}, &(0x7f0000000700)=0x8)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r0)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x28}}, 0x20000801)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r4, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x90)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000980)={'team0\x00'})
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a00), r3)
sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xac, r8, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:tzdata_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bond\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004080)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c40)={'gre0\x00', &(0x7f0000000bc0)={'tunl0\x00', <r9=>0x0, 0x8000, 0x7800, 0x8, 0x8, {{0x14, 0x4, 0x1, 0x14, 0x50, 0x64, 0x0, 0x8, 0x16, 0x0, @broadcast, @local, {[@lsrr={0x83, 0x17, 0x10, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @noop, @ssrr={0x89, 0xb, 0xf, [@rand_addr=0x64010101, @empty]}, @timestamp={0x44, 0xc, 0x9e, 0x0, 0x3, [0x10000, 0x4c44]}, @generic={0x86, 0xa, "1de1303682443c1c"}]}}}}})
sendmsg$nl_route_sched(r0, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=@newqdisc={0x3c, 0x24, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x3, 0x1}, {0xc, 0xfff1}, {0x6, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8000}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x845}, 0x40000800)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000d40), r7)
syz_genetlink_get_family_id$team(&(0x7f0000000d80), r0)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), r3)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r7, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, r10, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x28}}, 0x20020001)
r11 = openat$cgroup_ro(r0, &(0x7f0000000f00)='memory.numa_stat\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000fc0)={<r12=>r2, 0x78, &(0x7f0000000f40)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e24, 0x10, @mcast1, 0x7fff}, @in6={0xa, 0x4e20, 0x7fffffff, @remote, 0x9}, @in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f0000001000)=0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r11, 0x84, 0x5, &(0x7f0000001040)={r12, @in6={{0xa, 0x4e23, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x101}}}, 0x84)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000011c0)={'gretap0\x00', &(0x7f0000001100)={'syztnl2\x00', r9, 0x10, 0x20, 0x3, 0x401, {{0x1c, 0x4, 0x1, 0x9, 0x70, 0x64, 0x0, 0x2, 0x0, 0x0, @rand_addr=0x64010101, @local, {[@ssrr={0x89, 0x27, 0x41, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x26}, @private=0xa010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010101, @multicast1]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0x91, [@rand_addr=0x64010101, @local, @private=0xa010102, @local]}, @lsrr={0x83, 0x1b, 0xbf, [@multicast1, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0xa}, @empty, @dev={0xac, 0x14, 0x14, 0x40}, @loopback]}]}}}}})
r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001200), 0x4)
ioctl$int_out(r13, 0x2, &(0x7f0000001240))

16.799534389s ago: executing program 4 (id=3042):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a600000000b0a010100000000000000000000000508000a400000000008000c4000008080080001006669620027000d400a210bb45fb4878dff99e10188a0d2ef4b2b1ac0aea6ed4362d97e80f275a644003aac00080005400000003c140000001100010000000000000000000a00000a0000000042cefb94fcb0d499881e5ae45662db6cac99d39f465aa167972d801ca9c8c3ebe1b6be7806e528300420"], 0x88}}, 0x24000004)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50)
r1 = socket(0x11, 0x3, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x61, '\x00', r2, @fallback=0x2f}, 0x94)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="750114346d4158"], 0xdd12}], 0x1, 0x0, 0x0, 0x8887}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000380), &(0x7f00000000c0)=r4}, 0x20)
close(0x3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
recvmmsg(r5, &(0x7f0000008bc0)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/59, 0x3b}], 0x1}, 0x7fffffff}], 0x1, 0x10062, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000080)=0x9, 0x12)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r6, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendto$inet(r7, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0)

15.801547204s ago: executing program 4 (id=3043):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080005"], 0x20}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0xb, 0x8, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r3, 0x0) (async)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r3, 0x0)
mmap(&(0x7f0000494000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x1000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000480), 0x8, 0x13, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000480), 0x8, 0x13, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b400000000000000f90911a0d71b7d879625bc16e5e19cf7041f075e738aefc3292e64b6f9f354c32961b5ce117fb08bf234745b8dd624de67637b18677163a90a915d9b8a6401f7535eb10d1a27aaac1bb82a6b6b73ed7ff20b683c397002961c231a6b984ca237b9ddc5a56f2e876555fc6952f446b544f4323d5877ce0ae92feb59eb2de736c2c77c79d7c0d2cd955c0513decd4f8211816cf57d1f8f35225ff62febf53717bad7f2c7e65b9d8524e6e38e07bb3166ba4d5ba63bbaed63bad5f1ca1d459e649de67cbae164965ed6d92acf702d8cfa68b6ccb7ab1bec965d5c01ef98"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @sk_msg}, 0x94)
close(r5) (async)
close(r5)
listen(0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$kcm(0x2, 0xa, 0x2) (async)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x800]}, 0xff, 0x3}}})

15.771920224s ago: executing program 0 (id=3044):
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdfff}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10)
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6_vti0\x00', <r3=>0x0, 0x2f, 0x0, 0x7a, 0x4, 0x15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x8000, 0x80, 0x66, 0xfffffffd}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000300)={'syztnl1\x00', <r4=>0x0, 0x7800, 0x20, 0x1, 0xffffffff, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010102, @local, {[@timestamp={0x44, 0xc, 0xe5, 0x0, 0x5, [0xffffffff, 0xfffffffa]}, @noop]}}}}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth1\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000)
r8 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@loopback={0xfec0ffffffffffff, 0x3fc}, 0x0, r9})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x124, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4004}, 0x8801)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r12, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0)

13.568376215s ago: executing program 4 (id=3045):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
unshare(0x2c020400)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000300)={0x7ff, 0xfffffff9, 0x22, 0x7ff}, 0xfd07)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2)
write(r1, &(0x7f0000000240)="4a7d73c74141c9c55578154a15100cf6c2b9aa03e6213221d6b596608864d8bd47c46e59af85ce9313e417d8b72928ad71347fb39ec61ea60b38252b83d87163f05147dc65cfdfe3a9d1079b8e89ff37a582517830558af062dcbbd1b99f2691184a6204290cdd910e804c5e3111dd09f98cd532ceaa97965be34646", 0x7c)
sendmsg$nl_route(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e008d2a"], 0x24}, 0x1, 0x0, 0x0, 0x10008000}, 0x14048010)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', <r5=>0x0})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r5, 0x1000000}, 0x10)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000600)=0x800000, 0x4)

13.533962954s ago: executing program 0 (id=3046):
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r5, 0x6, 0xd, 0x0, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111830000000000851000000200000085000000d100000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

10.258671799s ago: executing program 1 (id=3054):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f0000000000))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)

8.964241415s ago: executing program 0 (id=3058):
r0 = socket(0x400000000010, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x6)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r3=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r3, 0x8, 0x7800, 0x2, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cf90103", @ANYRES16=0x0, @ANYBLOB="c89045b2a6c0b186f6eb1f00000008003617"], 0x1c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x6, 0x2, {0x42}}}]}, 0x38}}, 0x0)

8.725673214s ago: executing program 6 (id=3060):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @empty}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1822000007000000004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x0, 0x10, 0x0, &(0x7f0000000000)="38b05643343d3157a90ff4a8964b9eff", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

8.332447837s ago: executing program 6 (id=3062):
socket$xdp(0x2c, 0x3, 0x0) (async)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000640)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="af694008a73f28", 0x7}], 0x1}, 0x4)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x33, 0x1, [{0x301}]}})
setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f00000000c0)=0x9, 0x4)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) (async)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) (async)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x19}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xfe}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1c, 0xa9, @random="c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x7, "04030e5c61"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x7, "04030e5c61"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0)

7.039067128s ago: executing program 5 (id=3064):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt(r0, 0xff, 0x9, 0x0, 0x0)
socket(0x2, 0xa, 0x300) (async)
r1 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff030}, {0x6, 0x1, 0x6, 0x400006}]}, 0x10)

6.572346517s ago: executing program 5 (id=3065):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x0) (async)
close(0x3)

6.395170097s ago: executing program 1 (id=3066):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0xf3a, 0x2)

6.217096489s ago: executing program 5 (id=3067):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1a0000006d0001"], 0x20}, 0x1, 0x0, 0x0, 0x4000005}, 0x40000)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@flushpolicy={0x18, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@proto={0x5, 0x28, 0xff}]}, 0x18}, 0x13, 0x0, 0x0, 0x4000880}, 0xc4844)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1a0000006d0001"], 0x20}, 0x1, 0x0, 0x0, 0x4000005}, 0x40000) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@flushpolicy={0x18, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@proto={0x5, 0x28, 0xff}]}, 0x18}, 0x13, 0x0, 0x0, 0x4000880}, 0xc4844) (async)

5.770589977s ago: executing program 5 (id=3068):
r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000))
unshare(0x2c060000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x26, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180)=[{{0x2, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x2, 0x1}, {0x2, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x18)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0xb, 0x7, 0xc008, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r2, 0x0, 0xa0028000}, 0x86)
unshare(0x28000600)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0)

5.763419537s ago: executing program 1 (id=3069):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x7fefb, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r1, 0x0, &(0x7f0000000200)=""/76, 0x2000000}, 0x20)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r3 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000140)={'dvmrp0\x00', {0x2, 0x0, @private}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800, 0x0, 0x3}, 0x20)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r8=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r8, 0xe00}, 0x10)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @empty, 0x3, 0x3, 0x4, 0x580, 0x80000000, 0x200, r8})

4.620119352s ago: executing program 5 (id=3070):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/165}, {&(0x7f0000000140)=""/67}], 0x25}, 0xfffe}], 0x1, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 64)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async, rerun: 64)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async)
epoll_create1(0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async, rerun: 32)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffff0b, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) (rerun: 32)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
close(0x3)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket(0x21, 0x2, 0x10000000000002) (async, rerun: 32)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 32)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001f"], 0x4c}}, 0x0) (async)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x704) (async)
splice(r1, 0x0, r0, 0x0, 0x3, 0x9) (async)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

4.529697522s ago: executing program 1 (id=3071):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ea1935a0fecdc9de523ab7e163a9f2fd7b598f1a0780e2ffe8d880cd68105d", 0x1f)
socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x0) (async)
accept4$alg(r1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff00000000db040000f10000003f000000000000005504000001ed0a002500000017ffffff46040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48)

4.020295247s ago: executing program 0 (id=3072):
socket$kcm(0x29, 0x5, 0x0) (async)
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, r3, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffffc, 0x59}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x34}}, 0x0)
sendmmsg$inet(r1, &(0x7f0000000180), 0x0, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x80}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x80}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
getsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, &(0x7f0000000180), &(0x7f0000000200)=0x4) (async)
getsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, &(0x7f0000000180), &(0x7f0000000200)=0x4)
write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a)
close(r0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendfile(r0, r6, 0x0, 0xffffffff000)

3.93722079s ago: executing program 5 (id=3073):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r1, 0x100000000)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000003c0)={'filter\x00', 0x7a, "ba85b939aae139ad756ea8d23ce24467a2e8b7661fecb21a2bffd708381deb026c4b4014ad8b30fa48d646c049aae0bf6af8756d2713aab320b86a67df529c87533bcdc0232d67f08f01869f7512153f7581c1640e68915701375811c095e92cb3b3da2c58c2dedc44b9ca70e9820024b5b8c3e175e4b83d9ee2"}, &(0x7f0000000080)=0x9e)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
writev(r4, 0x0, 0x0)
epoll_create1(0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0xe0b, 0x70bd25, 0x4000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1fb, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x6, 0xd99d}}]}]}}}]}, 0x68}}, 0x40000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendto$packet(r5, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14)
sendmsg$nl_route(r3, 0x0, 0x4000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_vlan\x00', 0x4000})
r9 = socket$inet6(0xa, 0x80803, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4)
connect$inet6(r9, &(0x7f00000000c0), 0x1c)

3.843253408s ago: executing program 1 (id=3074):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a600000000b0a010100000000000000000000000508000a400000000008000c4000008080080001006669620027000d400a210bb45fb4878dff99e10188a0d2ef4b2b1ac0aea6ed4362d97e80f275a644003aac00080005400000003c140000001100010000000000000000000a00000a0000000042cefb94fcb0d499881e5ae45662db6cac99d39f465aa167972d801ca9c8c3ebe1b6be7806e528300420"], 0x88}}, 0x24000004)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50)
r1 = socket(0x11, 0x3, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x61, '\x00', r2, @fallback=0x2f}, 0x94)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="750114346d4158"], 0xdd12}], 0x1, 0x0, 0x0, 0x8887}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000380), &(0x7f00000000c0)=r4}, 0x20)
close(0x3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
recvmmsg(r5, &(0x7f0000008bc0)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/59, 0x3b}], 0x1}, 0x7fffffff}], 0x1, 0x10062, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x12)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, 0xffffffffffffffff, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000006c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
setsockopt$inet_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendto$inet(r6, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0)

3.301633631s ago: executing program 1 (id=3075):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r2, &(0x7f0000000240)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) (fail_nth: 23)

2.781062379s ago: executing program 0 (id=3076):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000001440)=ANY=[@ANYBLOB="18000000006b0000009500"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'\x00', @random='@\x00'})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f0000000480)=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}, 0x1}}, 0x10) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES64], 0x32600) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)="98276851a384425c41875e92134715f2501a41228bc9ce6f2f36d32c6258b78ba4bff8658bd702355a1513b4e722365f1baa0c692e550ec865b3be40041c9236dd4e60dc48febcfcdba96736696d6b66bae37862470da41098513b71af1abb9f303acc9658c066e110874cd7a639f99f88ff49b62ba91997ed826526d75047c052d0f565135a", &(0x7f0000000100), 0x3f, r2}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000340), &(0x7f0000000300)=""/177}, 0x20) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x14)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24000000)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYBLOB="8896d0d6dee9897785e25c031c1c3816219625cddfcc2a00f6a90c5dc7e4098b8479f2d777d7aac079f6a8fd97a40fe97db4103f04d54d7c0c91aca19cc769124c557683a80eb46ec6ca0fa90b1b72b84dfa1013a81e91e2991ea89dd1ced7c5e6c295cc221d3d947e4b5bd5bd28dd88e09553f5f8d113a9eb765c5ab9eb0e1089831f6d2f7596f21693cab761bfd18e190adf51aa33", @ANYBLOB="000001000000000028001280090001d8eb2eb1fea9c94fa6d2a663f74d4fd66d33", @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESOCT], 0x48}}, 0x20040880) (async)
sendmmsg$inet(r5, &(0x7f0000005200)=[{}], 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_udp(0x2, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures}) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[], 0x3261e) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0})
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00'})

0s ago: executing program 6 (id=3077):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xffffff59, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0)
sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r3, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000010)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000280)=@ethtool_eeprom={0xb, 0x5, 0x102000, 0x7, "f731c837e92948"}})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000300)={&(0x7f00000004c0)=[{0xfffffffffffffff7, 0x3, 0x5, 0xab7, 0x210651f3}, {0xfffffffffffffffa, 0xfffffffffffffffb, 0xffffffffffff6f21, 0x5, 0xfffffffc}, {0x51c, 0x2, 0xd5, 0x8000}, {0x1, 0x8, 0x7, 0x7, 0x1992cce1}, {0x1, 0x0, 0x4, 0xa, 0x8}, {0xf, 0xdf63, 0xfffffffffffffff9, 0x3, 0xd}], 0x6, 0x28, 0x60, 0x2})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r11 = accept4(r10, 0x0, 0x0, 0x800)
recvmmsg$unix(r11, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r13=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000ecd025330a7ed7ea0ce396adb88baa876c8fbe2355a7994ee73ec1ec873f2f0b07000000db730821b3820dab7fd722582d98e11d29e0f3d77c00781c30aa2aded2a8c80ec7c3a150f08fdf1e6d80a3855a3ca83517a4419a068ffb4b2563322883c96154921912c6ab24c8b4ca55fdea17d508d3cbc48747e3a88a3658126e922c350816aafcd47c88485be25e10bc2643ddf18450a5301e2a3ce5c4", @ANYRES32=0x0, @ANYBLOB="4606090020000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)

kernel console output (not intermixed with test programs):


[  324.261878][T13240]  ? __fget_files+0x3a0/0x420
[  324.261909][T13240]  __x64_sys_sendmsg+0x1bd/0x2a0
[  324.261932][T13240]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  324.261959][T13240]  ? __pfx_ksys_write+0x10/0x10
[  324.261985][T13240]  do_syscall_64+0x14d/0xf80
[  324.262003][T13240]  ? trace_irq_disable+0x3b/0x150
[  324.262027][T13240]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.262043][T13240]  ? clear_bhb_loop+0x40/0x90
[  324.262062][T13240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.262078][T13240] RIP: 0033:0x7f8b0fb9c799
[  324.262094][T13240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  324.262109][T13240] RSP: 002b:00007f8b10a57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  324.262125][T13240] RAX: ffffffffffffffda RBX: 00007f8b0fe16090 RCX: 00007f8b0fb9c799
[  324.262137][T13240] RDX: 000000000000c000 RSI: 0000200000000140 RDI: 0000000000000008
[  324.262147][T13240] RBP: 00007f8b10a57090 R08: 0000000000000000 R09: 0000000000000000
[  324.262156][T13240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.262165][T13240] R13: 00007f8b0fe16128 R14: 00007f8b0fe16090 R15: 00007ffc716582f8
[  324.262189][T13240]  </TASK>
[  324.622703][T13259] x_tables: unsorted entry at hook 2
[  324.815245][T13271] netlink: 'syz.3.1764': attribute type 31 has an invalid length.
[  324.833356][T13268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  324.876403][T13268] syzkaller0: entered promiscuous mode
[  324.882887][T13268] syzkaller0: entered allmulticast mode
[  324.933538][T13268] Cannot find del_set index 1 as target
[  324.947361][T13268] tipc: Resetting bearer <eth:syzkaller0>
[  324.959257][T13268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1767'.
[  325.009465][T13268] bond0: entered promiscuous mode
[  325.015330][T13268] 8021q: adding VLAN 0 to HW filter on device bond0
[  325.029068][T13268] bond0 (unregistering): Released all slaves
[  325.064090][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms
[  325.072451][    C0] lec:lec_tx_timeout: lec0
[  325.077767][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  325.140970][T13267] tipc: Resetting bearer <eth:syzkaller0>
[  325.160526][T13267] tipc: Disabling bearer <eth:syzkaller0>
[  325.237954][T13289] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  325.319004][   T29] audit: type=1804 audit(1774383414.838:7): pid=13296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1773" name="/newroot/338/memory.events" dev="tmpfs" ino=1741 res=1 errno=0
[  325.357398][T13294] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1772'.
[  325.382441][   T29] audit: type=1800 audit(1774383414.858:8): pid=13296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1773" name="memory.events" dev="tmpfs" ino=1741 res=0 errno=0
[  325.413601][T13294] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  325.428101][   T29] audit: type=1804 audit(1774383414.868:9): pid=13296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1773" name="/newroot/338/memory.events" dev="tmpfs" ino=1741 res=1 errno=0
[  325.511929][T13304] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1775'.
[  325.555032][T13298] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  325.567171][T13298] bond0: (slave sit0): Error -95 calling set_mac_address
[  325.597283][T13304] net_ratelimit: 148 callbacks suppressed
[  325.597303][T13304] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  325.793458][T13320] veth1: entered allmulticast mode
[  325.989314][T13327] macvtap1: entered promiscuous mode
[  326.024541][T13327] syz_tun: entered promiscuous mode
[  326.030008][T13327] macvtap1: entered allmulticast mode
[  326.039041][T13327] syz_tun: entered allmulticast mode
[  326.328369][T13349] netlink: 'syz.4.1787': attribute type 2 has an invalid length.
[  326.730730][T13368] SET target dimension over the limit!
[  326.766158][T13372] netlink: 'syz.0.1795': attribute type 10 has an invalid length.
[  326.774283][T13369] macsec0: entered promiscuous mode
[  326.779757][T13372] __nla_validate_parse: 1 callbacks suppressed
[  326.779773][T13372] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1795'.
[  326.805750][T13369] macsec0: left promiscuous mode
[  327.122173][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'.
[  327.357941][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1798'.
[  327.950091][T13376] ipvlan3: entered promiscuous mode
[  328.021542][T13417] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.086017][T13421] syzkaller0: entered promiscuous mode
[  328.124809][T13421] syzkaller0: entered allmulticast mode
[  328.167681][T13413] tipc: Resetting bearer <eth:syzkaller0>
[  328.368144][T13410] tipc: Resetting bearer <eth:syzkaller0>
[  328.379028][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1806'.
[  328.412937][T13451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1806'.
[  328.430496][T13410] tipc: Disabling bearer <eth:syzkaller0>
[  328.505798][T13450] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  328.509026][T13451] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  328.573438][T13459] netlink: 'syz.3.1808': attribute type 4 has an invalid length.
[  328.645923][T13458] netlink: 'syz.3.1808': attribute type 4 has an invalid length.
[  328.822691][T13466] veth1: left allmulticast mode
[  328.846819][T13466] bond5: left promiscuous mode
[  328.853244][T13466] bond6: left promiscuous mode
[  328.863180][T13466] ipvlan3: left promiscuous mode
[  328.947890][T13471] syzkaller0: entered promiscuous mode
[  328.960178][T13471] syzkaller0: entered allmulticast mode
[  329.007911][T13479] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1815'.
[  329.238871][T13488] syzkaller0: entered promiscuous mode
[  329.246650][T13488] syzkaller0: entered allmulticast mode
[  329.302042][T13495] netlink: 'syz.1.1821': attribute type 10 has an invalid length.
[  329.353253][T13498] netlink: 'syz.1.1821': attribute type 10 has an invalid length.
[  329.595005][T13505] netlink: 'syz.2.1825': attribute type 13 has an invalid length.
[  329.846142][T13522] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1829'.
[  329.955713][T13536] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4
[  330.037125][T13541] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1835'.
[  330.094126][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  330.102330][    C0] lec:lec_tx_timeout: lec0
[  330.107485][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  330.759472][T13560] syzkaller0: entered promiscuous mode
[  330.779739][T13560] syzkaller0: entered allmulticast mode
[  330.980045][T13583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1841'.
[  331.152529][T13592] netlink: 'syz.4.1847': attribute type 10 has an invalid length.
[  331.177853][T13592] veth1_macvtap: left promiscuous mode
[  331.188596][T13592] team0: Device veth1_macvtap failed to register rx_handler
[  331.433681][T13604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1845'.
[  331.443034][T13604] netlink: 'syz.2.1845': attribute type 4 has an invalid length.
[  331.539756][T13613] macsec1: entered allmulticast mode
[  331.545242][T13613] macsec0: entered allmulticast mode
[  331.571616][T13613] macsec0: left allmulticast mode
[  331.743934][T13629] syzkaller0: entered promiscuous mode
[  331.749831][T13629] syzkaller0: entered allmulticast mode
[  331.762047][T13629] FAULT_INJECTION: forcing a failure.
[  331.762047][T13629] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  331.775905][T13629] CPU: 0 UID: 0 PID: 13629 Comm: syz.3.1857 Not tainted syzkaller #0 PREEMPT(full) 
[  331.775932][T13629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  331.775945][T13629] Call Trace:
[  331.775953][T13629]  <TASK>
[  331.775962][T13629]  dump_stack_lvl+0xe8/0x150
[  331.775998][T13629]  should_fail_ex+0x412/0x560
[  331.776035][T13629]  _copy_from_user+0x2d/0xb0
[  331.776062][T13629]  ___sys_sendmsg+0x1c6/0x360
[  331.776096][T13629]  ? __pfx____sys_sendmsg+0x10/0x10
[  331.776161][T13629]  ? __fget_files+0x2a/0x420
[  331.776192][T13629]  ? __fget_files+0x3a0/0x420
[  331.776234][T13629]  __x64_sys_sendmsg+0x1bd/0x2a0
[  331.776275][T13629]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  331.776313][T13629]  ? rcu_is_watching+0x15/0xb0
[  331.776358][T13629]  do_syscall_64+0x14d/0xf80
[  331.776383][T13629]  ? trace_irq_disable+0x3b/0x150
[  331.776413][T13629]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.776436][T13629]  ? clear_bhb_loop+0x40/0x90
[  331.776463][T13629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.776484][T13629] RIP: 0033:0x7f6ddd39c799
[  331.776504][T13629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  331.776522][T13629] RSP: 002b:00007f6dde23a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  331.776544][T13629] RAX: ffffffffffffffda RBX: 00007f6ddd615fa0 RCX: 00007f6ddd39c799
[  331.776560][T13629] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008
[  331.776573][T13629] RBP: 00007f6dde23a090 R08: 0000000000000000 R09: 0000000000000000
[  331.776586][T13629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  331.776598][T13629] R13: 00007f6ddd616038 R14: 00007f6ddd615fa0 R15: 00007ffc5b2e1c48
[  331.776632][T13629]  </TASK>
[  331.786104][T13630] netlink: 'syz.1.1856': attribute type 10 has an invalid length.
[  332.097515][T13640] netlink: 'syz.0.1859': attribute type 7 has an invalid length.
[  332.106245][T13640] netlink: 'syz.0.1859': attribute type 8 has an invalid length.
[  332.450010][T13657] __nla_validate_parse: 4 callbacks suppressed
[  332.450030][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1865'.
[  332.859417][T13683] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1875'.
[  332.877943][T13675] 8021q: adding VLAN 0 to HW filter on device bond0
[  332.901169][T13689] netlink: 'syz.4.1871': attribute type 1 has an invalid length.
[  332.938639][T13675] 8021q: adding VLAN 0 to HW filter on device team0
[  333.030991][T13675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  333.203818][T13689] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.387611][T13693] bond0: (slave veth9): Enslaving as an active interface with a down link
[  333.415650][T13711] netlink: 'syz.1.1877': attribute type 1 has an invalid length.
[  333.620160][T13728] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1880'.
[  333.959499][T13746] syzkaller0: entered promiscuous mode
[  333.966617][T13746] syzkaller0: entered allmulticast mode
[  333.980452][T13746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  334.000809][T13745] tipc: Resetting bearer <eth:syzkaller0>
[  334.045688][T13745] tipc: Disabling bearer <eth:syzkaller0>
[  334.145538][T13754] syzkaller0: entered promiscuous mode
[  334.157548][T13754] syzkaller0: entered allmulticast mode
[  334.210329][T13754] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  334.252945][T13753] tipc: Resetting bearer <eth:syzkaller0>
[  334.309968][T13753] tipc: Disabling bearer <eth:syzkaller0>
[  334.483714][T13773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1898'.
[  334.496931][T13773] openvswitch: netlink: Missing valid actions attribute.
[  334.517187][T13773] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.587144][T13779] netlink: 'syz.4.1901': attribute type 1 has an invalid length.
[  334.654380][T13779] 8021q: adding VLAN 0 to HW filter on device bond10
[  334.917828][T13794] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1904'.
[  335.114108][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  335.122680][    C0] lec:lec_tx_timeout: lec0
[  335.127456][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  335.413867][T13782] bond10: entered allmulticast mode
[  335.440652][T13779] bond10: (slave ip6gretap1): making interface the new active one
[  335.465271][T13779] ip6gretap1: entered allmulticast mode
[  335.508430][T13779] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link
[  335.557462][T13805] syzkaller0: entered promiscuous mode
[  335.562994][T13805] syzkaller0: entered allmulticast mode
[  335.582174][T13808] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.590958][T13816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1905'.
[  335.601444][T13793] tipc: Resetting bearer <eth:syzkaller0>
[  335.653194][T13817] netlink: 'syz.1.1905': attribute type 2 has an invalid length.
[  335.697292][T13820] netlink: 'syz.4.1907': attribute type 178 has an invalid length.
[  335.706599][T13793] tipc: Disabling bearer <eth:syzkaller0>
[  335.744886][T13822] netlink: 'syz.1.1905': attribute type 2 has an invalid length.
[  335.813589][T13816] 8021q: adding VLAN 0 to HW filter on device bond14
[  335.941579][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1911'.
[  335.953811][T13831] gretap2: entered promiscuous mode
[  335.991422][T13833] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1911'.
[  336.328699][T13857] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1920'.
[  336.341047][T13858] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1920'.
[  336.372231][T13861] gretap2: left promiscuous mode
[  336.445936][T13865] syzkaller0: entered promiscuous mode
[  336.451589][T13865] syzkaller0: entered allmulticast mode
[  336.490691][T13865] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  336.519157][T13864] tipc: Resetting bearer <eth:syzkaller0>
[  336.591892][T13864] tipc: Disabling bearer <eth:syzkaller0>
[  336.956759][T13891] validate_nla: 3 callbacks suppressed
[  336.956779][T13891] netlink: 'syz.3.1928': attribute type 1 has an invalid length.
[  337.558911][T13916] xt_CT: No such helper "snmp_trap"
[  337.662674][ T5143] block nbd2: Receive control failed (result -32)
[  337.756330][T13928] syzkaller0: entered promiscuous mode
[  337.761958][T13928] syzkaller0: entered allmulticast mode
[  337.776275][T13930] __nla_validate_parse: 2 callbacks suppressed
[  337.776291][T13930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1938'.
[  337.803590][T13935] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1940'.
[  338.136427][T13950] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  338.335434][T13959] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1947'.
[  338.417185][T13966] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1948'.
[  338.603027][T13970] netlink: 'syz.0.1951': attribute type 12 has an invalid length.
[  338.804570][T13987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.816768][T13987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.825867][T13987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.887939][T13992] syzkaller0: entered promiscuous mode
[  338.893796][T13992] syzkaller0: entered allmulticast mode
[  338.941038][T13995] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1955'.
[  338.980101][T14000] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1955'.
[  338.989370][T14001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1958'.
[  339.060802][T13990] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1955'.
[  339.229316][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.249012][T13986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.260724][T14010] syzkaller0: entered promiscuous mode
[  339.267387][T14012] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1960'.
[  339.287661][T14010] syzkaller0: entered allmulticast mode
[  339.309845][T14010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.324006][T14007] tipc: Resetting bearer <eth:syzkaller0>
[  339.351642][T14007] tipc: Disabling bearer <eth:syzkaller0>
[  339.616057][T14029] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1967'.
[  339.629452][T14029] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  339.726833][T14039] syzkaller0: entered promiscuous mode
[  339.732644][T14039] syzkaller0: entered allmulticast mode
[  339.747816][T14039] FAULT_INJECTION: forcing a failure.
[  339.747816][T14039] name failslab, interval 1, probability 0, space 0, times 0
[  339.769605][T14039] CPU: 1 UID: 0 PID: 14039 Comm: syz.1.1970 Not tainted syzkaller #0 PREEMPT(full) 
[  339.769634][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  339.769647][T14039] Call Trace:
[  339.769655][T14039]  <TASK>
[  339.769664][T14039]  dump_stack_lvl+0xe8/0x150
[  339.769701][T14039]  should_fail_ex+0x412/0x560
[  339.769739][T14039]  should_failslab+0xa8/0x100
[  339.769768][T14039]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  339.769794][T14039]  ? __alloc_skb+0x1d0/0x7d0
[  339.769821][T14039]  ? __local_bh_enable_ip+0xd0/0x130
[  339.769847][T14039]  __alloc_skb+0x1d0/0x7d0
[  339.769863][T14039]  ? ____sys_sendmsg+0x972/0x9f0
[  339.769900][T14039]  ? ___sys_sendmsg+0x2a5/0x360
[  339.769930][T14039]  tipc_nl_compat_doit+0x18a/0x650
[  339.769971][T14039]  ? __pfx_tipc_nl_compat_doit+0x10/0x10
[  339.770010][T14039]  ? apparmor_capable+0x126/0x170
[  339.770030][T14039]  ? bpf_lsm_capable+0x9/0x20
[  339.770051][T14039]  ? security_capable+0x7e/0x2c0
[  339.770079][T14039]  tipc_nl_compat_recv+0x8d3/0xcf0
[  339.770102][T14039]  ? kasan_quarantine_put+0xbb/0x1f0
[  339.770120][T14039]  ? __pfx_tipc_nl_compat_recv+0x10/0x10
[  339.770142][T14039]  ? __mutex_trylock_common+0x158/0x260
[  339.770170][T14039]  ? __pfx___mutex_trylock_common+0x10/0x10
[  339.770194][T14039]  ? __pfx___tipc_nl_bearer_enable+0x10/0x10
[  339.770212][T14039]  ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10
[  339.770243][T14039]  ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0
[  339.770272][T14039]  genl_family_rcv_msg_doit+0x22a/0x330
[  339.770299][T14039]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  339.770338][T14039]  ? __dev_queue_xmit+0x28b/0x3870
[  339.770366][T14039]  genl_rcv_msg+0x61c/0x7a0
[  339.770391][T14039]  ? __pfx_genl_rcv_msg+0x10/0x10
[  339.770411][T14039]  ? __pfx_tipc_nl_compat_recv+0x10/0x10
[  339.770435][T14039]  ? __lock_acquire+0x6b5/0x2cf0
[  339.770464][T14039]  netlink_rcv_skb+0x232/0x4b0
[  339.770482][T14039]  ? __pfx_genl_rcv_msg+0x10/0x10
[  339.770504][T14039]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  339.770533][T14039]  ? down_read+0x272/0x2e0
[  339.770554][T14039]  ? genl_rcv+0xd/0x40
[  339.770576][T14039]  genl_rcv+0x28/0x40
[  339.770595][T14039]  netlink_unicast+0x80f/0x9b0
[  339.770626][T14039]  ? __pfx_netlink_unicast+0x10/0x10
[  339.770652][T14039]  ? netlink_sendmsg+0x650/0xb40
[  339.770667][T14039]  ? skb_put+0x11b/0x210
[  339.770687][T14039]  netlink_sendmsg+0x813/0xb40
[  339.770711][T14039]  ? __pfx_netlink_sendmsg+0x10/0x10
[  339.770731][T14039]  ? aa_sock_msg_perm+0xf1/0x1b0
[  339.770756][T14039]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  339.770776][T14039]  ____sys_sendmsg+0x972/0x9f0
[  339.770803][T14039]  ? __pfx_____sys_sendmsg+0x10/0x10
[  339.770829][T14039]  ? import_iovec+0x73/0xa0
[  339.770850][T14039]  ___sys_sendmsg+0x2a5/0x360
[  339.770874][T14039]  ? __pfx____sys_sendmsg+0x10/0x10
[  339.770921][T14039]  ? __fget_files+0x2a/0x420
[  339.770961][T14039]  ? __fget_files+0x3a0/0x420
[  339.771005][T14039]  __x64_sys_sendmsg+0x1bd/0x2a0
[  339.771037][T14039]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  339.771076][T14039]  ? __pfx_ksys_write+0x10/0x10
[  339.771115][T14039]  do_syscall_64+0x14d/0xf80
[  339.771141][T14039]  ? trace_irq_disable+0x3b/0x150
[  339.771172][T14039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.771194][T14039]  ? clear_bhb_loop+0x40/0x90
[  339.771220][T14039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.771239][T14039] RIP: 0033:0x7f8b0fb9c799
[  339.771257][T14039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  339.771273][T14039] RSP: 002b:00007f8b10a78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  339.771294][T14039] RAX: ffffffffffffffda RBX: 00007f8b0fe15fa0 RCX: 00007f8b0fb9c799
[  339.771316][T14039] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008
[  339.771329][T14039] RBP: 00007f8b10a78090 R08: 0000000000000000 R09: 0000000000000000
[  339.771342][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  339.771353][T14039] R13: 00007f8b0fe16038 R14: 00007f8b0fe15fa0 R15: 00007ffc716582f8
[  339.771388][T14039]  </TASK>
[  340.174351][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5050 ms
[  340.184131][    C0] lec:lec_tx_timeout: lec0
[  340.190545][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  341.781290][T14058] syzkaller0: entered promiscuous mode
[  341.787243][T14058] syzkaller0: entered allmulticast mode
[  342.181959][T14099] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.275953][T14099] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.313425][T14104] syzkaller0: entered promiscuous mode
[  342.326622][T14104] syzkaller0: entered allmulticast mode
[  342.428341][T14099] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.583911][T14099] bond0: (slave netdevsim0): Releasing backup interface
[  342.615105][T14099] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode
[  342.636544][T14099] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.731393][T14119] syzkaller0: entered promiscuous mode
[  342.751411][T14116] "syz.1.1992" (14116) uses obsolete ecb(arc4) skcipher
[  342.766127][T14119] syzkaller0: entered allmulticast mode
[  342.797612][T14119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.808327][T14117] tipc: Resetting bearer <eth:syzkaller0>
[  342.858640][T14117] tipc: Disabling bearer <eth:syzkaller0>
[  342.910189][   T35] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  343.042261][   T35] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  343.063233][T14126] __nla_validate_parse: 6 callbacks suppressed
[  343.063261][T14126] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1995'.
[  343.208497][   T35] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  343.290451][T14099] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.418265][T14099] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.513517][T14154] sctp: [Deprecated]: syz.4.2004 (pid 14154) Use of int in maxseg socket option.
[  343.513517][T14154] Use struct sctp_assoc_value instead
[  343.547004][T14151] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  343.577413][T14099] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.676245][T14158] netlink: 296 bytes leftover after parsing attributes in process `syz.4.2005'.
[  343.693966][T14158] openvswitch: netlink: Flow key attr not present in new flow.
[  343.733713][T14161] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2006'.
[  344.080190][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2014'.
[  344.130418][T14184] netlink: 'syz.4.2015': attribute type 3 has an invalid length.
[  344.292886][T14190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2018'.
[  344.373951][T14193] netlink: 'syz.0.2019': attribute type 21 has an invalid length.
[  344.429308][T14193] netlink: 'syz.0.2019': attribute type 1 has an invalid length.
[  344.439619][T14193] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2019'.
[  344.709023][T14209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2025'.
[  344.766203][T14209] nbd: socks must be embedded in a SOCK_ITEM attr
[  344.805286][T14214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2025'.
[  344.821538][T14214] nbd: nbd64 already in use
[  344.927211][T13171] udevd[13171]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  345.080628][T14230] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2028'.
[  345.204075][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  345.212178][    C0] lec:lec_tx_timeout: lec0
[  345.216887][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  345.259213][T14233] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2030'.
[  345.346259][T14239] netlink: 'syz.4.2031': attribute type 10 has an invalid length.
[  345.369060][T14239] xt_policy: too many policy elements
[  345.536407][T14246] syzkaller0: entered promiscuous mode
[  345.542034][T14246] syzkaller0: entered allmulticast mode
[  345.553588][T14246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.562597][T14245] tipc: Resetting bearer <eth:syzkaller0>
[  345.609321][T14245] tipc: Disabling bearer <eth:syzkaller0>
[  345.791404][T14262] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  346.148866][T14281] netlink: 'syz.3.2045': attribute type 3 has an invalid length.
[  346.390464][T14301] ip6gre1: entered promiscuous mode
[  346.396354][T14301] ip6gre1: entered allmulticast mode
[  346.404962][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  346.423272][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  346.434296][T12969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  346.796188][T14311] 8021q: adding VLAN 0 to HW filter on device bond9
[  346.815433][T12969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  346.903377][T14311] netlink: 'syz.3.2053': attribute type 2 has an invalid length.
[  347.007614][T14311] netlink: 'syz.3.2053': attribute type 2 has an invalid length.
[  347.171471][T14327] netlink: 'syz.3.2057': attribute type 2 has an invalid length.
[  347.197071][T14327] !©�9: entered promiscuous mode
[  347.225264][T12969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  347.323113][T14344] netlink: 'syz.0.2058': attribute type 1 has an invalid length.
[  347.790727][T14390] syzkaller0: entered promiscuous mode
[  347.804838][T14390] syzkaller0: entered allmulticast mode
[  347.933331][T14399] nbd: socks must be embedded in a SOCK_ITEM attr
[  347.995855][T14400] netlink: 'syz.3.2074': attribute type 1 has an invalid length.
[  348.097687][T13171] udevd[13171]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory
[  348.170730][T14408] can: request_module (can-proto-3) failed.
[  348.641749][T14413] syzkaller0: entered promiscuous mode
[  348.656814][T14413] syzkaller0: entered allmulticast mode
[  348.924336][T14443] __nla_validate_parse: 8 callbacks suppressed
[  348.924358][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2078'.
[  349.132515][T12967] IPVS: starting estimator thread 0...
[  349.234920][T14455] IPVS: using max 38 ests per chain, 91200 per kthread
[  350.224107][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  350.232645][    C0] lec:lec_tx_timeout: lec0
[  350.237273][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  350.584762][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  350.673202][T14483] netlink: 'syz.4.2092': attribute type 4 has an invalid length.
[  350.749798][T14486] netlink: 'syz.3.2093': attribute type 3 has an invalid length.
[  350.760495][T14480] Cannot find add_set index 3 as target
[  350.919245][T14496] syzkaller0: entered promiscuous mode
[  350.925095][T14496] syzkaller0: entered allmulticast mode
[  350.992734][T14496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  351.027912][T14490] tipc: Resetting bearer <eth:syzkaller0>
[  351.052380][T14490] tipc: Disabling bearer <eth:syzkaller0>
[  351.243003][T14508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.251955][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.275200][T14508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.284835][T14333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.314344][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.323799][T14508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.332687][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.509565][T14533] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.602186][T14527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2105'.
[  351.684801][T14537] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2108'.
[  351.909522][T14544] syzkaller0: entered promiscuous mode
[  351.921544][T14544] syzkaller0: entered allmulticast mode
[  351.959133][T14544] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  351.972080][T14543] tipc: Resetting bearer <eth:syzkaller0>
[  352.032669][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2112'.
[  352.050480][T14543] tipc: Disabling bearer <eth:syzkaller0>
[  352.064713][T14555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2112'.
[  352.081309][T14555] netlink: 'syz.4.2112': attribute type 18 has an invalid length.
[  352.106722][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2112'.
[  352.613347][T14584] vlan5: entered allmulticast mode
[  352.709191][T14600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2125'.
[  352.802097][T14603] SET target dimension over the limit!
[  352.899357][T14607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2126'.
[  352.962523][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2126'.
[  352.977147][T14331] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  352.995783][T14331] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  353.005198][T14331] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  353.014589][T14331] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  353.027438][T14610] syzkaller0: entered promiscuous mode
[  353.032952][T14610] syzkaller0: entered allmulticast mode
[  353.077007][T14610] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.116501][T14609] tipc: Resetting bearer <eth:syzkaller0>
[  353.157611][T14621] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2130'.
[  353.204427][T14627] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001
[  353.211482][T14626] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001
[  353.341944][T14609] tipc: Disabling bearer <eth:syzkaller0>
[  353.388261][T14633] syzkaller0: entered promiscuous mode
[  353.393992][T14633] syzkaller0: entered allmulticast mode
[  353.407513][T14633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.416391][T14632] tipc: Resetting bearer <eth:syzkaller0>
[  353.456580][T14632] tipc: Disabling bearer <eth:syzkaller0>
[  353.490107][T14631] bridge0: port 3(dummy0) entered disabled state
[  353.511706][T14631] dummy0 (unregistering): left allmulticast mode
[  353.524391][T14631] dummy0 (unregistering): left promiscuous mode
[  353.532409][T14631] bridge0: port 3(dummy0) entered disabled state
[  354.447571][T14669] syzkaller0: entered promiscuous mode
[  354.453311][T14669] syzkaller0: entered allmulticast mode
[  354.655455][T14671] __nla_validate_parse: 3 callbacks suppressed
[  354.655475][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2147'.
[  354.735405][T14671] netlink: 616 bytes leftover after parsing attributes in process `syz.2.2147'.
[  354.767578][T14673] syzkaller0: entered promiscuous mode
[  354.775385][T14673] syzkaller0: entered allmulticast mode
[  354.795756][T14673] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  354.832544][T14672] tipc: Resetting bearer <eth:syzkaller0>
[  354.936438][T14672] tipc: Disabling bearer <eth:syzkaller0>
[  354.996009][T14692] erspan0: entered promiscuous mode
[  355.031500][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2152'.
[  355.148208][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2154'.
[  355.289993][T14712] netlink: 'syz.0.2157': attribute type 6 has an invalid length.
[  355.380650][T14715] IPVS: length: 156 != 8
[  355.485030][T14726] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.2162'.
[  355.495779][T14726] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  355.664207][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2163'.
[  355.689172][T14733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2163'.
[  355.778964][T14739] netlink: 'syz.0.2165': attribute type 1 has an invalid length.
[  355.819976][T14739] 8021q: adding VLAN 0 to HW filter on device bond8
[  356.024106][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms
[  356.032254][    C0] lec:lec_tx_timeout: lec0
[  356.037157][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  356.249200][T14767] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2173'.
[  356.354852][T14771] syzkaller0: entered promiscuous mode
[  356.376281][T14771] syzkaller0: entered allmulticast mode
[  356.447677][T14773] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  356.694312][T14791] IPVS: ip_vs_edit_dest(): server weight less than zero
[  357.025453][T14808] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.2183'.
[  357.236024][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2187'.
[  357.278806][T14819] Cannot find map_set index 2 as target
[  357.301122][T14822] syzkaller0: entered promiscuous mode
[  357.316726][T14822] syzkaller0: entered allmulticast mode
[  357.550755][T14839] lo: entered promiscuous mode
[  357.572287][T14839] lo: entered allmulticast mode
[  357.578103][T14841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.591833][T14843] netlink: 'syz.1.2194': attribute type 8 has an invalid length.
[  358.424959][T14857] hsr0: entered promiscuous mode
[  358.450903][T14860] hsr_slave_0: left promiscuous mode
[  358.470121][T14867] openvswitch: netlink: IP tunnel dst address not specified
[  358.508614][T14860] hsr0 (unregistering): left promiscuous mode
[  358.853433][T14885] netlink: 'syz.4.2204': attribute type 11 has an invalid length.
[  359.258433][T14905] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  359.519690][T14917] netlink: 'syz.4.2216': attribute type 1 has an invalid length.
[  359.529958][T14917] netlink: 'syz.4.2216': attribute type 1 has an invalid length.
[  359.544271][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  359.588361][T14913] bond9: option ad_actor_sys_prio: invalid value (0)
[  359.611394][T14913] bond9: option ad_actor_sys_prio: allowed values 1 - 65535
[  359.628029][T14913] bond9 (unregistering): Released all slaves
[  359.674151][T14915] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  359.876513][T14937] __nla_validate_parse: 7 callbacks suppressed
[  359.876537][T14937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2222'.
[  359.901813][T14937] netlink: 'syz.0.2222': attribute type 1 has an invalid length.
[  359.910016][T14937] netlink: 'syz.0.2222': attribute type 2 has an invalid length.
[  359.951940][T14933] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2221'.
[  360.124569][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'.
[  360.149308][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'.
[  360.197499][T14945] bond9: option ad_user_port_key: invalid value (65535)
[  360.204770][T14945] bond9: option ad_user_port_key: allowed values 0 - 1023
[  360.218060][T14945] bond9 (unregistering): Released all slaves
[  360.480427][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2229'.
[  361.065215][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[  361.073506][    C0] lec:lec_tx_timeout: lec0
[  361.094088][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  361.118529][T14966] netlink: 'syz.3.2232': attribute type 29 has an invalid length.
[  361.148294][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2232'.
[  361.228663][T14966] netlink: 'syz.3.2232': attribute type 29 has an invalid length.
[  361.257813][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2232'.
[  361.306340][T14966] netlink: 'syz.3.2232': attribute type 29 has an invalid length.
[  361.346055][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2232'.
[  361.395986][T14966] netlink: 'syz.3.2232': attribute type 29 has an invalid length.
[  361.424209][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2232'.
[  361.455624][T14971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2234'.
[  361.618566][T14973] bond9: entered promiscuous mode
[  361.636433][T14973] 8021q: adding VLAN 0 to HW filter on device bond9
[  362.076532][T14988] delete_channel: no stack
[  362.421286][T14990] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  362.773426][T15000] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  362.829466][T15003] netlink: 'syz.1.2242': attribute type 1 has an invalid length.
[  362.837694][T15000] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  362.955696][T15002] syzkaller0: entered promiscuous mode
[  362.971673][T15002] syzkaller0: entered allmulticast mode
[  363.093393][T15006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  363.381139][T14998] tipc: Resetting bearer <eth:syzkaller0>
[  363.463144][T14998] tipc: Disabling bearer <eth:syzkaller0>
[  363.643343][T15012] netlink: 'syz.1.2243': attribute type 3 has an invalid length.
[  363.651955][T15012] netlink: 'syz.1.2243': attribute type 3 has an invalid length.
[  364.819207][T15032] netlink: 'syz.4.2249': attribute type 4 has an invalid length.
[  364.831528][T15032] netlink: 'syz.4.2249': attribute type 4 has an invalid length.
[  364.924683][T15036] netlink: 'syz.4.2250': attribute type 10 has an invalid length.
[  365.696613][T15048] __nla_validate_parse: 15 callbacks suppressed
[  365.696634][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2254'.
[  365.712607][T15048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2254'.
[  365.726733][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2254'.
[  365.736357][T15048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2254'.
[  366.115471][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  366.123768][    C0] lec:lec_tx_timeout: lec0
[  366.144565][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  366.773205][T15078] bond10: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  366.789797][T15078] bond10 (unregistering): Released all slaves
[  370.033387][T15100] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2269'.
[  370.103082][T15107] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2268'.
[  371.155137][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  371.163210][    C0] lec:lec_tx_timeout: lec0
[  371.179988][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  371.989030][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2273'.
[  372.041371][T15126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2273'.
[  374.030697][T15138] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  374.054812][T12967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.216999][T12967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.158670][T15161] block nbd4: server does not support multiple connections per device.
[  375.170531][T15161] block nbd4: shutting down sockets
[  375.505951][T15169] lo speed is unknown, defaulting to 1000
[  375.531432][T15169] lo speed is unknown, defaulting to 1000
[  375.546047][T15169] lo speed is unknown, defaulting to 1000
[  375.583358][T15169] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  375.619860][T15169] lo speed is unknown, defaulting to 1000
[  375.639512][T15169] lo speed is unknown, defaulting to 1000
[  375.651189][T15169] lo speed is unknown, defaulting to 1000
[  375.661110][T15169] lo speed is unknown, defaulting to 1000
[  375.669230][T15169] lo speed is unknown, defaulting to 1000
[  376.049789][T15180] netlink: 'syz.0.2285': attribute type 1 has an invalid length.
[  376.109072][T15180] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[  376.120593][T15180] bond10: (slave vxcan3): Error -95 calling set_mac_address
[  376.192772][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  376.200517][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  376.208697][    C0] lec:lec_tx_timeout: lec0
[  376.214592][T15182] bond10: (slave gretap1): making interface the new active one
[  376.229571][T15182] bond10: (slave gretap1): Enslaving as an active interface with an up link
[  376.244181][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  376.250671][T15184] macvlan4: entered promiscuous mode
[  376.257235][T15184] macvlan4: entered allmulticast mode
[  376.263713][T15184] bond10: entered promiscuous mode
[  376.270554][T15184] gretap1: entered promiscuous mode
[  376.277938][T15184] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  376.307278][T15184] bond10: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  376.352062][T15184] bond10: left promiscuous mode
[  376.357371][T15184] gretap1: left promiscuous mode
[  377.360051][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  377.394367][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  377.402769][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  377.411288][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  377.419648][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  377.526634][ T5143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  377.534955][ T5143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  377.542926][ T5143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  377.555523][ T5143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  377.566926][ T5143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  377.637787][T15187] lo speed is unknown, defaulting to 1000
[  378.091394][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2289'.
[  378.846296][T15215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2291'.
[  378.915309][T15216] netlink: 'syz.1.2291': attribute type 2 has an invalid length.
[  378.928783][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  378.980833][T15217] netlink: 'syz.1.2291': attribute type 2 has an invalid length.
[  379.112182][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  379.122231][T15215] 8021q: adding VLAN 0 to HW filter on device bond15
[  379.130495][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  379.142505][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  379.157362][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  379.167912][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  379.311213][T15219] lo speed is unknown, defaulting to 1000
[  379.628657][   T51] Bluetooth: hci5: command tx timeout
[  379.715808][T15187] chnl_net:caif_netlink_parms(): no params data found
[  380.407236][T15252] netlink: 'syz.1.2296': attribute type 1 has an invalid length.
[  380.451639][T15187] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.496310][T15248] netlink: 185872 bytes leftover after parsing attributes in process `syz.4.2298'.
[  380.506886][T15187] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.541140][T15187] bridge_slave_0: entered allmulticast mode
[  380.601660][T15187] bridge_slave_0: entered promiscuous mode
[  381.003963][T15252] bond16: entered promiscuous mode
[  381.026423][T15252] bond16: entered allmulticast mode
[  381.050132][T15252] 8021q: adding VLAN 0 to HW filter on device bond16
[  381.121168][T15255] macvlan2: entered promiscuous mode
[  381.143692][T15255] macvlan2: entered allmulticast mode
[  381.166254][T15255] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  381.224602][   T51] Bluetooth: hci4: command tx timeout
[  381.279770][T15187] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.294394][T15187] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.319659][T15187] bridge_slave_1: entered allmulticast mode
[  381.337306][T15187] bridge_slave_1: entered promiscuous mode
[  381.346054][T15219] chnl_net:caif_netlink_parms(): no params data found
[  381.704662][   T51] Bluetooth: hci5: command tx timeout
[  382.016329][T15187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.040453][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms
[  382.048810][    C0] lec:lec_tx_timeout: lec0
[  382.068287][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  382.130317][T15187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.205075][T15187] team0: Port device team_slave_0 added
[  383.305946][   T51] Bluetooth: hci4: command tx timeout
[  383.687682][T15219] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.724214][T15219] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.733605][T15219] bridge_slave_0: entered allmulticast mode
[  383.755986][T15219] bridge_slave_0: entered promiscuous mode
[  383.777929][T15187] team0: Port device team_slave_1 added
[  383.784876][   T51] Bluetooth: hci5: command tx timeout
[  383.790581][T15219] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.805378][T15219] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.823180][T15219] bridge_slave_1: entered allmulticast mode
[  383.845040][T15219] bridge_slave_1: entered promiscuous mode
[  383.993816][T15187] batman_adv: batadv0: Adding interface: batadv_slave_0
[  384.011568][T15187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  384.074223][T15187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  384.101883][T15219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  384.132861][T15187] batman_adv: batadv0: Adding interface: batadv_slave_1
[  384.144176][T15187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  384.211362][T15187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  384.287366][T15219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  384.609502][T15289] netlink: 'syz.0.2306': attribute type 27 has an invalid length.
[  384.878609][T15289] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  384.975487][T15289] bond7: left allmulticast mode
[  385.366951][T15289] bond9: left promiscuous mode
[  385.386584][   T51] Bluetooth: hci4: command tx timeout
[  385.493768][T15291] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.503788][T15291] 8021q: adding VLAN 0 to HW filter on device `
[  385.513884][T15291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  385.536070][T12963] lo speed is unknown, defaulting to 1000
[  385.545430][T15219] team0: Port device team_slave_0 added
[  385.579339][T12967] lo speed is unknown, defaulting to 1000
[  385.592605][T15187] hsr_slave_0: entered promiscuous mode
[  385.610305][T15187] hsr_slave_1: entered promiscuous mode
[  385.625221][T15187] debugfs: 'hsr0' already exists in 'hsr'
[  385.637853][T15187] Cannot create hsr debugfs directory
[  385.656432][T15219] team0: Port device team_slave_1 added
[  385.719486][T15295] syzkaller0: entered promiscuous mode
[  385.736462][T15295] syzkaller0: entered allmulticast mode
[  385.872971][   T51] Bluetooth: hci5: command tx timeout
[  385.902337][T15303] netlink: 'syz.0.2309': attribute type 11 has an invalid length.
[  386.522642][T15307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2310'.
[  387.094082][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  387.102226][    C0] lec:lec_tx_timeout: lec0
[  387.106936][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  387.235949][T15219] batman_adv: batadv0: Adding interface: batadv_slave_0
[  387.243282][T15219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  387.270228][T15219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.286345][T15219] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.293338][T15219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  387.322934][T15219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  387.345092][T15304] netlink: 'syz.0.2309': attribute type 309 has an invalid length.
[  387.354461][T15306] netdevsim netdevsim1: Direct firmware load for . failed with error -2
[  387.372232][T15306] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  387.465821][   T51] Bluetooth: hci4: command tx timeout
[  387.475777][T15219] hsr_slave_0: entered promiscuous mode
[  387.482875][T15219] hsr_slave_1: entered promiscuous mode
[  387.492200][T15219] debugfs: 'hsr0' already exists in 'hsr'
[  387.498071][T15219] Cannot create hsr debugfs directory
[  387.788967][T15313] lo speed is unknown, defaulting to 1000
[  387.910290][T15318] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.2313'.
[  388.003060][T15319] syzkaller1: entered promiscuous mode
[  388.047845][T15319] syzkaller1: entered allmulticast mode
[  388.131502][T15337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2317'.
[  388.190131][T15339] netlink: 'syz.4.2317': attribute type 2 has an invalid length.
[  388.223354][T15337] 8021q: adding VLAN 0 to HW filter on device bond11
[  388.266407][T15337] netlink: 'syz.4.2317': attribute type 2 has an invalid length.
[  388.318825][T15342] netlink: 'syz.0.2318': attribute type 10 has an invalid length.
[  388.365804][T15187] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  388.389614][T15187] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  388.419759][T15187] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  388.466297][T15187] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  388.546915][T15351] can: request_module (can-proto-0) failed.
[  388.623637][T15367] openvswitch: netlink: Flow actions attr not present in new flow.
[  388.835628][T15219] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  388.900416][T15219] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  388.939073][T15219] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  388.966756][T15219] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  388.979594][T15384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2327'.
[  389.069393][T15384] 8021q: adding VLAN 0 to HW filter on device bond17
[  389.105342][T15390] bond17: (slave macvlan2): Enslaving as an active interface with an up link
[  389.121861][T15389] syzkaller0: entered promiscuous mode
[  389.134167][T15389] syzkaller0: entered allmulticast mode
[  389.164636][T15389] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  389.173650][T15386] syzkaller0: entered promiscuous mode
[  389.181503][T15386] syzkaller0: entered allmulticast mode
[  389.191095][T15388] tipc: Resetting bearer <eth:syzkaller0>
[  389.222685][T15388] tipc: Disabling bearer <eth:syzkaller0>
[  389.242828][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2330'.
[  389.260373][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2330'.
[  389.333226][T15401] sctp: [Deprecated]: syz.0.2331 (pid 15401) Use of struct sctp_assoc_value in delayed_ack socket option.
[  389.333226][T15401] Use struct sctp_sack_info instead
[  389.472727][T15187] 8021q: adding VLAN 0 to HW filter on device bond0
[  389.536611][T15187] 8021q: adding VLAN 0 to HW filter on device team0
[  389.553533][T15405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2332'.
[  389.591488][T14331] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.598831][T14331] bridge0: port 1(bridge_slave_0) entered forwarding state
[  389.648926][T11894] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.656143][T11894] bridge0: port 2(bridge_slave_1) entered forwarding state
[  389.763382][T15409] lo speed is unknown, defaulting to 1000
[  389.882938][T15219] 8021q: adding VLAN 0 to HW filter on device bond0
[  389.964009][T15219] 8021q: adding VLAN 0 to HW filter on device team0
[  390.016026][T14330] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.023305][T14330] bridge0: port 1(bridge_slave_0) entered forwarding state
[  390.112531][T14330] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.119882][T14330] bridge0: port 2(bridge_slave_1) entered forwarding state
[  390.227158][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2335'.
[  390.560649][T15435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2338'.
[  390.651695][T15187] 8021q: adding VLAN 0 to HW filter on device batadv0
[  390.789625][T15440] syzkaller0: entered promiscuous mode
[  390.806110][T15440] syzkaller0: entered allmulticast mode
[  390.859208][T15219] 8021q: adding VLAN 0 to HW filter on device batadv0
[  390.885470][T15440] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  390.898364][T15439] tipc: Resetting bearer <eth:syzkaller0>
[  390.989381][T15439] tipc: Disabling bearer <eth:syzkaller0>
[  391.036401][T15449] syzkaller0: entered promiscuous mode
[  391.042306][T15449] syzkaller0: entered allmulticast mode
[  391.676996][T15187] veth0_vlan: entered promiscuous mode
[  391.721081][T15219] veth0_vlan: entered promiscuous mode
[  391.744722][T15187] veth1_vlan: entered promiscuous mode
[  391.762042][T15219] veth1_vlan: entered promiscuous mode
[  391.845196][T15219] veth0_macvtap: entered promiscuous mode
[  391.856038][T15187] veth0_macvtap: entered promiscuous mode
[  391.868704][T15219] veth1_macvtap: entered promiscuous mode
[  391.889254][T15187] veth1_macvtap: entered promiscuous mode
[  391.923142][T15219] batman_adv: batadv0: Interface activated: batadv_slave_0
[  391.970856][T15187] batman_adv: batadv0: Interface activated: batadv_slave_0
[  391.996033][T15219] batman_adv: batadv0: Interface activated: batadv_slave_1
[  392.020196][T11884] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  392.053492][T15187] batman_adv: batadv0: Interface activated: batadv_slave_1
[  392.103876][T11884] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  392.114134][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  392.114167][    C0] lec:lec_tx_timeout: lec0
[  392.128361][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  392.167248][T11884] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  392.201803][T11884] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  392.225234][T11884] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  392.249212][T15485] syzkaller0: entered promiscuous mode
[  392.256351][T15485] syzkaller0: entered allmulticast mode
[  392.273255][T15485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  392.294231][T11884] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  392.313558][T11884] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  392.324943][T15484] tipc: Resetting bearer <eth:syzkaller0>
[  392.346950][   T51] Bluetooth: hci4: command tx timeout
[  392.359338][T15484] tipc: Disabling bearer <eth:syzkaller0>
[  392.379990][T11884] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  392.446214][T11884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  392.465437][T11884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  392.534257][T15489] syzkaller0: entered promiscuous mode
[  392.546019][T15489] syzkaller0: entered allmulticast mode
[  392.843942][T15503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.854547][T15503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.865979][T15503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.880190][T15501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.889182][T15501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.977760][T14337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.031032][T14337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.079335][T15512] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2359'.
[  393.125232][T14333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.154818][T14333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.166375][T15516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2360'.
[  393.279199][T14333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.298158][T14333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.387834][T15519] vcan1: entered promiscuous mode
[  393.392948][T15519] vcan1: entered allmulticast mode
[  393.432887][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2361'.
[  393.512121][T15524] netlink: 'syz.1.2361': attribute type 2 has an invalid length.
[  393.583246][T15521] 8021q: adding VLAN 0 to HW filter on device bond18
[  393.618567][T15521] netlink: 'syz.1.2361': attribute type 2 has an invalid length.
[  393.738498][T15504] bond12: option resend_igmp: invalid value (2878)
[  393.745973][T15504] bond12: option resend_igmp: allowed values 0 - 255
[  393.784995][T15504] bond12 (unregistering): Released all slaves
[  393.947316][T15546] x_tables: duplicate underflow at hook 2
[  393.999873][T12966] IPVS: starting estimator thread 0...
[  394.098656][T15549] IPVS: using max 24 ests per chain, 57600 per kthread
[  394.161577][T15550] lo speed is unknown, defaulting to 1000
[  394.288483][T15556] syzkaller0: entered promiscuous mode
[  394.294677][T15556] syzkaller0: entered allmulticast mode
[  394.931626][T15577] lo speed is unknown, defaulting to 1000
[  394.977277][T15586] netlink: 'syz.4.2372': attribute type 1 has an invalid length.
[  395.018990][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2372'.
[  395.118461][T15591] erspan0: entered promiscuous mode
[  395.249778][T15591] tipc: Started in network mode
[  395.262825][T15591] tipc: Node identity 26c8ac648792, cluster identity 4711
[  395.277948][T15599] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2379'.
[  395.287737][T15591] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  395.434174][   T29] audit: type=1804 audit(1774383484.948:10): pid=15599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2379" name="/newroot/492/memory.events" dev="tmpfs" ino=2517 res=1 errno=0
[  395.462115][T15594] syzkaller0: entered promiscuous mode
[  395.472371][T15594] syzkaller0: entered allmulticast mode
[  395.479071][T15594] tipc: Resetting bearer <eth:syzkaller0>
[  395.639068][T15590] tipc: Resetting bearer <eth:syzkaller0>
[  397.137309][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  397.145505][    C0] lec:lec_tx_timeout: lec0
[  397.151546][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  397.434966][T15590] tipc: Disabling bearer <eth:syzkaller0>
[  397.603444][T12965] tipc: Node number set to 2707074148
[  397.784521][T11894] tipc: Subscription rejected, illegal request
[  397.797760][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2387'.
[  397.934842][T15666] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2387'.
[  398.472807][T15672] veth1_to_batadv: entered promiscuous mode
[  398.524897][T15672] veth1_to_batadv: entered allmulticast mode
[  398.685837][T15678] netlink: 'syz.4.2390': attribute type 1 has an invalid length.
[  398.758684][T15686] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2390'.
[  398.777080][T15678] 8021q: adding VLAN 0 to HW filter on device bond12
[  398.848189][T15678] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2390'.
[  398.868208][T15688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.886774][T15688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.905148][T15690] netlink: 'syz.0.2394': attribute type 3 has an invalid length.
[  398.939414][T15688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.015046][T15690] nbd: nbd0 already in use
[  399.030663][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2393'.
[  399.086003][T15694] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2395'.
[  399.097381][T15695] block nbd0: NBD_DISCONNECT
[  399.102603][T15695] block nbd0: Send disconnect failed -32
[  399.120032][T15695] block nbd0: shutting down sockets
[  399.130294][T15696] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2395'.
[  399.216967][T15687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.244284][T15687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.267969][T15695] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  399.521710][T11888] bridge_slave_1: left allmulticast mode
[  399.548357][T11888] bridge_slave_1: left promiscuous mode
[  399.558079][T11888] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.677483][T11888] bridge_slave_0: left allmulticast mode
[  399.709950][T11888] bridge_slave_0: left promiscuous mode
[  399.737447][T11888] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.899945][T15726] openvswitch: netlink: Flow actions attr not present in new flow.
[  399.982100][T15738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'.
[  400.061541][T15743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'.
[  401.812295][T11888] gretap0 (unregistering): left promiscuous mode
[  401.838219][T11888] bond7 (unregistering): (slave gretap2): Releasing active interface
[  401.913861][T11888] bridge0 (unregistering): left promiscuous mode
[  402.164068][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  402.172293][    C0] lec:lec_tx_timeout: lec0
[  402.177119][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  402.261685][T11888] bond0 (unregistering): left promiscuous mode
[  402.282093][T11888] bond_slave_0: left promiscuous mode
[  402.289538][T15760] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2404'.
[  402.292095][T11888] bond_slave_1: left promiscuous mode
[  402.311907][T11888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  402.322403][T11888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  402.332045][T11888] bond0 (unregistering): Released all slaves
[  402.342808][T11888] bond1 (unregistering): Released all slaves
[  402.366164][T11888] bond2 (unregistering): Released all slaves
[  402.382231][T11888] bond3 (unregistering): Released all slaves
[  402.400956][T11888] bond4 (unregistering): Released all slaves
[  402.415268][T11888] bond5 (unregistering): Released all slaves
[  402.432902][T15762] atomic_op ffff88803e838198 conn xmit_atomic 0000000000000000
[  402.447743][T11888] bond6 (unregistering): Released all slaves
[  402.469020][T11888] bond7 (unregistering): Released all slaves
[  402.483814][T11888] bond8 (unregistering): Released all slaves
[  402.500877][T11888] bond9 (unregistering): Released all slaves
[  402.519715][T11888] bond10 (unregistering): Released all slaves
[  402.557864][T15729] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  402.589166][T15758] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  402.593675][T15760] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2404'.
[  402.719102][T11888] !: left promiscuous mode
[  402.927944][T11888] !©�9: left promiscuous mode
[  403.168414][T15781] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2409'.
[  403.287019][T15793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.296230][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.491087][T15800] netlink: 'syz.1.2413': attribute type 1 has an invalid length.
[  403.984440][T15800] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR
[  404.164717][T11888] tipc: Left network mode
[  404.422940][T15832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.433872][T15832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.444851][T15832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.453462][T15831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.463796][T15831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.472102][T15831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.482288][T15831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.531897][T15831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.555348][T15831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.563835][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.109150][T15867] netlink: 'syz.1.2423': attribute type 83 has an invalid length.
[  405.459280][T15882] netlink: 'syz.4.2427': attribute type 2 has an invalid length.
[  405.674728][T15890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2431'.
[  405.863672][T15898] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2433'.
[  405.892156][T15896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2434'.
[  406.281666][T11888] batman_adv: batadv0: Removing interface: batadv_slave_0
[  406.315482][T11888] batman_adv: batadv0: Removing interface: batadv_slave_1
[  406.458747][T15923] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  407.184057][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  407.192108][    C0] lec:lec_tx_timeout: lec0
[  407.204372][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  407.248363][T15953] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2445'.
[  407.501719][T15957] macvtap1: entered promiscuous mode
[  407.515274][T15957] macvtap1: entered allmulticast mode
[  407.520815][T15957] veth1_vlan: entered allmulticast mode
[  407.569737][T15967] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  407.740772][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2451'.
[  407.820388][T15979] netlink: 'syz.0.2451': attribute type 2 has an invalid length.
[  407.875876][T15985] netlink: 'syz.0.2451': attribute type 2 has an invalid length.
[  407.912644][T15972] 8021q: adding VLAN 0 to HW filter on device bond11
[  408.023991][T11888] IPVS: stop unused estimator thread 0...
[  408.283832][T16004] netlink: 'syz.0.2459': attribute type 6 has an invalid length.
[  408.457800][T16009] netlink: 'syz.6.2455': attribute type 3 has an invalid length.
[  408.741896][T16024] hsr0: entered promiscuous mode
[  408.774515][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2463'.
[  409.072697][T16040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2469'.
[  409.116165][T16040] netlink: 'syz.5.2469': attribute type 2 has an invalid length.
[  409.132757][T16040] !: entered promiscuous mode
[  409.142661][T16040] netlink: 'syz.5.2469': attribute type 2 has an invalid length.
[  409.394494][T16056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2472'.
[  409.752062][T16074] lo speed is unknown, defaulting to 1000
[  409.920968][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2483'.
[  409.935265][T16090] netlink: 'syz.6.2483': attribute type 2 has an invalid length.
[  409.950576][T16090] !: entered promiscuous mode
[  409.964612][T16090] netlink: 'syz.6.2483': attribute type 2 has an invalid length.
[  410.104262][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  410.113902][T16082] lo speed is unknown, defaulting to 1000
[  410.179736][T16100] IPVS: ip_vs_edit_dest(): server weight less than zero
[  410.240709][T16076] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.264845][T16076] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.284389][T16076] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.302774][T16076] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.331963][T16097] netlink: 'syz.0.2485': attribute type 1 has an invalid length.
[  410.474252][T16106] netlink: 'syz.6.2487': attribute type 10 has an invalid length.
[  410.502301][T16106] team0: Device vxcan1 is of different type
[  410.670788][T16113] netlink: 'syz.0.2488': attribute type 30 has an invalid length.
[  411.087768][T16134] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2493'.
[  411.124604][T16134] nbd: must specify at least one socket
[  411.570142][T16155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2498'.
[  411.592192][T16155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2498'.
[  411.974685][T16171] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2504'.
[  411.992149][T16171] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2504'.
[  412.006363][T16167] syzkaller0: entered promiscuous mode
[  412.013282][T16167] syzkaller0: entered allmulticast mode
[  412.217099][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  412.225210][    C0] lec:lec_tx_timeout: lec0
[  412.230222][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  412.429235][T16184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2506'.
[  412.465100][T16178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  413.778455][T16204] net_ratelimit: 20 callbacks suppressed
[  413.778476][T16204] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.054682][T16213] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2514'.
[  414.097423][T16213] bond0: entered promiscuous mode
[  414.102711][T16213] bond_slave_0: entered promiscuous mode
[  414.113017][T16213] bond_slave_1: entered promiscuous mode
[  414.129825][T16213] gretap0: entered promiscuous mode
[  414.138944][T16213] debugfs: 'hsr0' already exists in 'hsr'
[  414.145698][T16213] Cannot create hsr debugfs directory
[  414.151367][T16213] hsr0: entered promiscuous mode
[  414.291169][T16233] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2518'.
[  414.422389][T16242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.620804][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2522'.
[  414.867245][T16248] lo speed is unknown, defaulting to 1000
[  415.159556][T16277] netlink: 'syz.6.2531': attribute type 2 has an invalid length.
[  415.179752][T16276] netlink: 'syz.6.2531': attribute type 2 has an invalid length.
[  415.875670][T16291] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2533'.
[  416.357697][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2537'.
[  416.368727][T16305] syzkaller0: entered promiscuous mode
[  416.374512][T16305] syzkaller0: entered allmulticast mode
[  416.527474][T16310] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2538'.
[  416.544838][T16310] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2538'.
[  417.086799][T16341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2546'.
[  417.205448][T16343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2547'.
[  417.376323][T16351] lo speed is unknown, defaulting to 1000
[  417.590415][T16358] vti0: entered promiscuous mode
[  417.596341][T16358] vti0: entered allmulticast mode
[  417.602906][T16360] syzkaller0: entered promiscuous mode
[  417.612876][T16360] syzkaller0: entered allmulticast mode
[  417.687637][T16363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.696569][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.724268][T16364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.732907][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.024084][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms
[  418.032304][    C0] lec:lec_tx_timeout: lec0
[  418.037597][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  418.199540][T16390] netlink: 'syz.1.2561': attribute type 10 has an invalid length.
[  418.207750][T16390] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2561'.
[  418.218471][T16390] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  418.314612][T16386] syzkaller0: entered promiscuous mode
[  418.325923][T16386] syzkaller0: entered allmulticast mode
[  418.588880][T16405] sctp: [Deprecated]: syz.4.2565 (pid 16405) Use of int in maxseg socket option.
[  418.588880][T16405] Use struct sctp_assoc_value instead
[  418.698624][T16415] syzkaller0: entered promiscuous mode
[  418.707032][T16415] syzkaller0: entered allmulticast mode
[  418.950000][T16418] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2568'.
[  419.231931][T16441] netlink: 'syz.1.2572': attribute type 5 has an invalid length.
[  419.380526][T16448] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  419.436237][T16446] syzkaller0: entered promiscuous mode
[  419.441781][T16446] syzkaller0: entered allmulticast mode
[  419.486821][T16453] xt_bpf: check failed: parse error
[  419.931957][T16469] lo speed is unknown, defaulting to 1000
[  420.184972][T16485] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2581'.
[  420.216892][T16485] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2581'.
[  420.302517][T16482] syzkaller1: entered promiscuous mode
[  420.319204][T16482] syzkaller1: entered allmulticast mode
[  420.448121][T16485] lo speed is unknown, defaulting to 1000
[  421.239493][T16519] netlink: 'syz.0.2589': attribute type 1 has an invalid length.
[  421.282113][T16521] netlink: 'syz.6.2591': attribute type 10 has an invalid length.
[  421.402894][T16519] bond13: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  421.426538][T16519] bond13 (unregistering): Released all slaves
[  421.578547][T16521] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  421.768669][T16547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2594'.
[  421.790865][T16547] netlink: 'syz.1.2594': attribute type 3 has an invalid length.
[  421.942856][T16551] syzkaller0: entered promiscuous mode
[  421.956895][T16551] syzkaller0: entered allmulticast mode
[  422.030621][T16560] syzkaller1: entered promiscuous mode
[  422.036394][T16560] syzkaller1: entered allmulticast mode
[  422.191432][T16575] nbd: couldn't find a device at index 1
[  422.490819][T16591] netlink: 'syz.1.2604': attribute type 1 has an invalid length.
[  422.753248][T16603] bond19: (slave bridge4): making interface the new active one
[  422.787909][T16603] bond19: (slave bridge4): Enslaving as an active interface with an up link
[  422.860524][T16615] syzkaller0: entered promiscuous mode
[  422.867022][T16615] syzkaller0: entered allmulticast mode
[  422.935920][T16602] lo speed is unknown, defaulting to 1000
[  423.064145][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[  423.072240][    C0] lec:lec_tx_timeout: lec0
[  423.077012][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  423.116333][T16620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2611'.
[  423.296488][T16629] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2612'.
[  423.308705][T16629] rdma_rxe: rxe_newlink: failed to add gre0
[  423.446767][T16629] 8021q: adding VLAN 0 to HW filter on device bond0
[  423.486143][T16629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  423.512383][T16630] : entered promiscuous mode
[  423.711780][T16639] lo speed is unknown, defaulting to 1000
[  424.123345][T16671] xt_hashlimit: size too large, truncated to 1048576
[  424.152526][T16671] xt_hashlimit: max too large, truncated to 1048576
[  424.181692][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2618'.
[  424.326472][T16665] lo speed is unknown, defaulting to 1000
[  424.405384][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2620'.
[  424.461125][T16680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  424.558409][T16684] syzkaller0: entered promiscuous mode
[  424.564499][T16684] syzkaller0: entered allmulticast mode
[  424.728931][T16694] netlink: 'syz.4.2625': attribute type 21 has an invalid length.
[  424.753485][T16694] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2625'.
[  424.779633][T16692] lo speed is unknown, defaulting to 1000
[  424.795281][T16694] netlink: 'syz.4.2625': attribute type 4 has an invalid length.
[  424.803070][T16694] netlink: 'syz.4.2625': attribute type 5 has an invalid length.
[  424.843999][T16694] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2625'.
[  425.105725][T16705] netlink: 'syz.1.2629': attribute type 1 has an invalid length.
[  425.309618][T16705] 8021q: adding VLAN 0 to HW filter on device bond20
[  425.391883][T16707] bond20: (slave veth5): Enslaving as an active interface with a down link
[  425.460087][T16709] bond20: (slave gretap3): making interface the new active one
[  425.473124][T16709] gretap3: entered promiscuous mode
[  425.479141][T16709] bond20: (slave gretap3): Enslaving as an active interface with an up link
[  425.675429][T16723] netlink: 'syz.4.2633': attribute type 1 has an invalid length.
[  425.729568][T16723] 8021q: adding VLAN 0 to HW filter on device bond13
[  425.795221][T16733] netlink: 'syz.1.2636': attribute type 1 has an invalid length.
[  425.904785][T16734] bond21: (slave vxcan1): The slave device specified does not support setting the MAC address
[  425.917671][T16734] bond21: (slave vxcan1): Error -95 calling set_mac_address
[  425.949889][T16738] syzkaller0: entered promiscuous mode
[  425.958052][T16738] syzkaller0: entered allmulticast mode
[  426.045664][T16743] netlink: 'syz.1.2638': attribute type 1 has an invalid length.
[  426.083992][T16743] bond22: entered promiscuous mode
[  426.089383][T16743] bond22: entered allmulticast mode
[  426.096635][T16743] 8021q: adding VLAN 0 to HW filter on device bond22
[  426.289762][T16756] netlink: 'syz.0.2640': attribute type 3 has an invalid length.
[  426.301098][T16756] netlink: 'syz.0.2640': attribute type 3 has an invalid length.
[  426.309616][T16756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2640'.
[  426.421609][T16764] netlink: 'syz.6.2645': attribute type 1 has an invalid length.
[  426.447265][T16766] xt_TCPMSS: Only works on TCP SYN packets
[  426.929801][T16777] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  427.102866][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2650'.
[  427.125268][T16796] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2650'.
[  427.138689][T16784] syzkaller0: entered promiscuous mode
[  427.154750][T16784] syzkaller0: entered allmulticast mode
[  427.374840][T16776] tipc: Resetting bearer <eth:syzkaller0>
[  427.439517][T16776] tipc: Disabling bearer <eth:syzkaller0>
[  427.503236][T16800] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2653'.
[  427.707505][T16817] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2658'.
[  427.834650][T16822] x_tables: duplicate underflow at hook 1
[  427.870027][T16817] 8021q: adding VLAN 0 to HW filter on device bond3
[  428.007241][T16830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2662'.
[  428.084068][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  428.092262][    C0] lec:lec_tx_timeout: lec0
[  428.097487][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  428.237725][T16841] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2665'.
[  428.414229][T16850] netlink: 592 bytes leftover after parsing attributes in process `syz.4.2668'.
[  428.436971][T16850] team_slave_1: Caught tx_queue_len zero misconfig
[  428.460471][T16848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  428.585575][T16848] syzkaller0: entered promiscuous mode
[  428.605030][T16848] syzkaller0: entered allmulticast mode
[  428.622306][T16848] tipc: Resetting bearer <eth:syzkaller0>
[  428.871580][T11894] tipc: Resetting bearer <eth:syzkaller0>
[  429.176916][T16847] tipc: Resetting bearer <eth:syzkaller0>
[  430.809798][T16847] tipc: Disabling bearer <eth:syzkaller0>
[  430.931175][T16881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2673'.
[  430.989656][T16884] validate_nla: 2 callbacks suppressed
[  430.989677][T16884] netlink: 'syz.5.2674': attribute type 1 has an invalid length.
[  431.025433][T16885] netlink: 'syz.0.2673': attribute type 2 has an invalid length.
[  431.061383][T16881] 8021q: adding VLAN 0 to HW filter on device bond13
[  431.109931][T16884] bond4: entered promiscuous mode
[  431.156534][T16884] 8021q: adding VLAN 0 to HW filter on device bond4
[  431.214446][T16896] netlink: 'syz.6.2678': attribute type 32 has an invalid length.
[  431.274708][T16903] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2678'.
[  431.341831][T16887] ipvlan2: entered allmulticast mode
[  431.381507][T16887] bond4: entered allmulticast mode
[  431.444528][T16884] bond4: (slave bridge1): making interface the new active one
[  431.474572][T16884] bridge1: entered promiscuous mode
[  431.488091][T16884] bridge1: entered allmulticast mode
[  431.512279][T16884] bond4: (slave bridge1): Enslaving as an active interface with an up link
[  431.734862][T16922] netlink: 'syz.4.2685': attribute type 10 has an invalid length.
[  431.859708][T16933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2689'.
[  432.127212][T16950] netlink: 'syz.0.2693': attribute type 10 has an invalid length.
[  433.114083][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  433.122221][    C0] lec:lec_tx_timeout: lec0
[  433.127517][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  433.519032][T16937] syzkaller1: entered promiscuous mode
[  433.524839][T16937] syzkaller1: entered allmulticast mode
[  434.785599][T16977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2697'.
[  435.026553][T16944] lo speed is unknown, defaulting to 1000
[  435.315954][T16991] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2700'.
[  435.369265][T16991] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2700'.
[  435.370086][T16994] syzkaller0: entered promiscuous mode
[  435.388411][T16994] syzkaller0: entered allmulticast mode
[  435.713319][T17002] Cannot find set identified by id 65534 to match
[  435.796011][T17010] sctp: [Deprecated]: syz.4.2705 (pid 17010) Use of int in maxseg socket option.
[  435.796011][T17010] Use struct sctp_assoc_value instead
[  435.831509][T17016] sctp: [Deprecated]: syz.4.2705 (pid 17016) Use of int in maxseg socket option.
[  435.831509][T17016] Use struct sctp_assoc_value instead
[  436.290058][T17013] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.298149][T17013] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.134074][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  438.142484][    C0] lec:lec_tx_timeout: lec0
[  438.147149][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  438.409611][T14330] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.464767][T11894] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.473724][T11894] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.635054][T11894] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  438.704436][T11894] gretap3: left promiscuous mode
[  438.795017][T17060] tap0: tun_chr_ioctl cmd 1074025677
[  438.809614][T17060] tap0: linktype set to 6
[  438.842014][T17065] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2716'.
[  438.852733][T17063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2715'.
[  438.875975][T17062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2715'.
[  438.903091][T17063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2715'.
[  438.944140][T17062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2715'.
[  439.083933][T17074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2719'.
[  439.109483][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2717'.
[  439.148436][T17077] netlink: 'syz.6.2717': attribute type 30 has an invalid length.
[  439.152305][T17074] 8021q: adding VLAN 0 to HW filter on device bond14
[  439.215924][   T49] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  439.228833][T17074] netlink: 'syz.0.2719': attribute type 2 has an invalid length.
[  439.257317][T17082] tc_dump_action: action bad kind
[  439.263390][   T49] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  439.274384][   T49] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  439.283734][   T49] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  439.496904][T17092] lo speed is unknown, defaulting to 1000
[  439.553759][T17094] batman_adv: batadv0: Removing interface: batadv_slave_0
[  439.582248][T17094] batman_adv: batadv0: Removing interface: batadv_slave_1
[  439.612882][T17094] batadv0 (unregistering): left promiscuous mode
[  440.075783][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2732'.
[  440.142641][T17116] openvswitch: netlink: Flow actions attr not present in new flow.
[  440.189615][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  440.230625][T17125] batadv_slave_1: entered allmulticast mode
[  440.311393][T17125] batadv_slave_1: left allmulticast mode
[  440.400059][T17133] netlink: 'syz.1.2736': attribute type 1 has an invalid length.
[  440.646247][T17151] pim6reg1: entered promiscuous mode
[  440.691672][T17151] pim6reg1: entered allmulticast mode
[  441.187121][T17177] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2747'.
[  441.214325][T17177] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2747'.
[  441.256602][T17179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2748'.
[  441.586936][T17200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2754'.
[  441.967331][T17222] netlink: 'syz.6.2757': attribute type 1 has an invalid length.
[  441.976180][T17223] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2757'.
[  442.023351][T17222] 8021q: adding VLAN 0 to HW filter on device bond1
[  442.379065][T17244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2762'.
[  442.466545][T17249] netlink: 'syz.4.2765': attribute type 1 has an invalid length.
[  442.573198][T17250] veth13: entered promiscuous mode
[  442.627465][T17249] 8021q: adding VLAN 0 to HW filter on device bond14
[  442.644355][T17259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2768'.
[  443.143861][T17282] ip6tnl0: Caught tx_queue_len zero misconfig
[  443.154141][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  443.162338][    C0] lec:lec_tx_timeout: lec0
[  443.167448][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  443.273309][T17293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  443.375953][T17297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2778'.
[  443.395748][T17254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  443.445981][T17297] netlink: 'syz.4.2778': attribute type 3 has an invalid length.
[  443.592801][T17303] netlink: 'syz.5.2781': attribute type 89 has an invalid length.
[  443.616897][T17307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.628636][T17307] xt_TCPMSS: Only works on TCP SYN packets
[  444.728431][T17382] netlink: 'syz.0.2801': attribute type 2 has an invalid length.
[  444.855078][T17385] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2802'.
[  444.933614][T17385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  445.272247][T17399] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  445.337083][T17406] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2808'.
[  445.393415][T17403] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2808'.
[  445.569115][T17416] openvswitch: netlink: Flow actions attr not present in new flow.
[  445.643500][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2811'.
[  445.663574][T17415] netlink: 'syz.5.2810': attribute type 11 has an invalid length.
[  445.875905][T17424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2812'.
[  445.926002][T17424] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2812'.
[  446.045226][T17441] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2817'.
[  446.063923][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2817'.
[  446.237141][T17455] syzkaller0: entered promiscuous mode
[  446.242951][T17455] syzkaller0: entered allmulticast mode
[  446.260595][T17457] sctp: [Deprecated]: syz.6.2816 (pid 17457) Use of int in maxseg socket option.
[  446.260595][T17457] Use struct sctp_assoc_value instead
[  446.282043][T17455] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  446.310179][T17452] tipc: Resetting bearer <eth:syzkaller0>
[  446.333252][T17452] tipc: Disabling bearer <eth:syzkaller0>
[  446.364387][T17453] lo speed is unknown, defaulting to 1000
[  446.386312][T17459] xt_hashlimit: size too large, truncated to 1048576
[  446.621426][T17470] syzkaller0: entered promiscuous mode
[  446.627725][T17470] syzkaller0: entered allmulticast mode
[  446.978811][T17482] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2828'.
[  447.095928][T17482] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2828'.
[  447.243746][T14330] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  447.288233][T17495] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2833'.
[  447.299454][T17494] syzkaller0: entered promiscuous mode
[  447.305762][T17494] syzkaller0: entered allmulticast mode
[  447.313094][T14330] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  447.425227][T17495] bond2: entered promiscuous mode
[  447.466450][T17495] 8021q: adding VLAN 0 to HW filter on device bond2
[  447.493047][T14330] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  447.513703][T17499] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  447.544804][T17492] tipc: Resetting bearer <eth:syzkaller0>
[  447.605756][T17492] tipc: Disabling bearer <eth:syzkaller0>
[  447.624568][T14330] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  447.645288][T17495] 8021q: adding VLAN 0 to HW filter on device bond2
[  447.652587][T17495] bond2: (slave sit1): The slave device specified does not support setting the MAC address
[  447.668000][T17495] bond2: (slave sit1): Error -95 calling set_mac_address
[  447.961923][T17518] netlink: 'syz.4.2836': attribute type 2 has an invalid length.
[  447.991702][T17514] 8021q: adding VLAN 0 to HW filter on device bond15
[  448.036569][T17520] netlink: 'syz.4.2836': attribute type 2 has an invalid length.
[  448.174112][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  448.182448][    C0] lec:lec_tx_timeout: lec0
[  448.187296][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  448.581533][T17545] netlink: 'syz.5.2843': attribute type 1 has an invalid length.
[  448.670790][T17548] bond5: entered allmulticast mode
[  449.008167][T17561] xt_nat: multiple ranges no longer supported
[  449.052212][T17559] netlink: 'syz.0.2844': attribute type 2 has an invalid length.
[  449.061170][T17554] 8021q: adding VLAN 0 to HW filter on device bond15
[  449.249992][T17566] syzkaller0: entered promiscuous mode
[  449.282241][T17566] syzkaller0: entered allmulticast mode
[  449.331899][T17566] tipc: Started in network mode
[  449.339197][T17566] tipc: Node identity c63e76b79bb7, cluster identity 4711
[  449.362325][T17566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  449.389952][T17565] tipc: Resetting bearer <eth:syzkaller0>
[  449.505503][T17565] tipc: Disabling bearer <eth:syzkaller0>
[  449.595928][T17577] veth0_to_bridge: Caught tx_queue_len zero misconfig
[  449.615852][T17568] lo speed is unknown, defaulting to 1000
[  449.854576][T17584] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993
[  450.416008][T17618] __nla_validate_parse: 12 callbacks suppressed
[  450.416035][T17618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2859'.
[  450.566751][T17627] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2848'.
[  450.604495][T17629] netlink: 'syz.4.2861': attribute type 3 has an invalid length.
[  450.624284][T17629] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2861'.
[  450.974403][T17635] syzkaller0: entered promiscuous mode
[  450.980168][T17635] syzkaller0: entered allmulticast mode
[  450.993233][T17635] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  451.219168][T17634] tipc: Resetting bearer <eth:syzkaller0>
[  451.299284][T17634] tipc: Disabling bearer <eth:syzkaller0>
[  451.325783][T17652] "syz.5.2866" (17652) uses obsolete ecb(arc4) skcipher
[  451.339009][T17649] macvtap1: entered promiscuous mode
[  451.378386][T17649] macvtap1: entered allmulticast mode
[  451.392786][T17649] veth1_vlan: entered allmulticast mode
[  451.469793][T17650] macvtap2: entered promiscuous mode
[  451.495759][T17650] macvtap2: entered allmulticast mode
[  451.897141][T17669] lo speed is unknown, defaulting to 1000
[  451.965233][T17678] RDS: rds_bind could not find a transport for ::1400:0:20:0, load rds_tcp or rds_rdma?
[  452.524609][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  452.533625][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  452.542661][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  452.555887][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  452.563675][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  452.741695][T17690] lo speed is unknown, defaulting to 1000
[  453.068013][T17710] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2882'.
[  453.133092][T17669] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  453.186170][T14330] bond0: (slave wlan1): link status definitely down, disabling slave
[  453.194593][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  453.194628][    C0] lec:lec_tx_timeout: lec0
[  453.207291][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  453.252795][T17690] chnl_net:caif_netlink_parms(): no params data found
[  453.744720][T17689] tipc: Resetting bearer <eth:veth1_to_batadv>
[  453.751504][T17689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  453.784107][T17689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.804259][T17689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  453.814262][T17689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.854426][T17689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  453.874156][T17689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  454.049864][T17723] bridge5: entered promiscuous mode
[  454.102419][T17723] bridge5: entered allmulticast mode
[  454.123721][T17723] team0: Port device bridge5 added
[  454.414825][T17690] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.422011][T17690] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.456384][T17690] bridge_slave_0: entered allmulticast mode
[  454.486886][T17690] bridge_slave_0: entered promiscuous mode
[  454.507504][T17690] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.544650][T17690] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.552125][T17690] bridge_slave_1: entered allmulticast mode
[  454.560543][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2890'.
[  454.572717][T17690] bridge_slave_1: entered promiscuous mode
[  454.665686][   T51] Bluetooth: hci2: command tx timeout
[  454.673831][T17747] vlan2: entered promiscuous mode
[  454.708000][T17747] geneve1: entered promiscuous mode
[  454.715687][T17749] netlink: 'syz.6.2894': attribute type 2 has an invalid length.
[  454.744539][T17747] vlan2: entered allmulticast mode
[  454.764757][T17747] geneve1: entered allmulticast mode
[  454.901138][T17690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.972541][T17690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.195420][T17690] team0: Port device team_slave_0 added
[  455.211732][T17690] team0: Port device team_slave_1 added
[  455.353498][T17690] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.381800][T17690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.476154][T17690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.501229][T17690] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.534193][T17690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.624712][T17690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  456.171692][T17793] lo: Caught tx_queue_len zero misconfig
[  456.178972][T17793] sch_tbf: burst 240 is lower than device lo mtu (1550) !
[  456.273039][T17690] hsr_slave_0: entered promiscuous mode
[  456.295354][T17690] hsr_slave_1: entered promiscuous mode
[  456.315986][T17690] debugfs: 'hsr0' already exists in 'hsr'
[  456.321855][T17690] Cannot create hsr debugfs directory
[  456.372180][T17809] netlink: 'syz.4.2908': attribute type 4 has an invalid length.
[  456.385041][T17809] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2908'.
[  456.604323][ T1308] tipc: Resetting bearer <eth:syzkaller0>
[  456.744841][   T51] Bluetooth: hci2: command tx timeout
[  456.941168][T17828] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  457.072957][ T1308] bond10 (unregistering): (slave gretap1): Releasing active interface
[  457.143871][ T1308] bond2 (unregistering): (slave geneve2): Releasing active interface
[  457.247322][ T1308] tipc: Disabling bearer <eth:syzkaller0>
[  457.302157][ T1308] bond0 (unregistering): left promiscuous mode
[  457.312299][ T1308] bond_slave_0: left promiscuous mode
[  457.318707][ T1308] bond_slave_1: left promiscuous mode
[  457.339150][ T1308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  457.356495][ T1308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  457.368808][ T1308] bond0 (unregistering): Released all slaves
[  457.380097][ T1308] bond1 (unregistering): Released all slaves
[  457.396768][ T1308] bond2 (unregistering): Released all slaves
[  457.413278][ T1308] bond3 (unregistering): Released all slaves
[  457.437447][ T1308] bond4 (unregistering): Released all slaves
[  457.452879][ T1308] bond5 (unregistering): Released all slaves
[  457.472344][ T1308] bond6 (unregistering): Released all slaves
[  457.489745][ T1308] bond7 (unregistering): Released all slaves
[  457.504551][ T1308] bond8 (unregistering): Released all slaves
[  457.521443][ T1308] bond9 (unregistering): Released all slaves
[  457.545986][ T1308] bond10 (unregistering): Released all slaves
[  457.560951][ T1308] bond11 (unregistering): Released all slaves
[  457.581187][ T1308] bond12 (unregistering): Released all slaves
[  457.597395][ T1308] bond13 (unregistering): Released all slaves
[  457.612386][ T1308] bond14 (unregistering): Released all slaves
[  457.627520][ T1308] bond15 (unregistering): Released all slaves
[  457.682619][T17839] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2913'.
[  457.692601][T17839] tipc: Invalid UDP bearer configuration
[  457.692654][T17839] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  457.711219][T17832] syzkaller0: entered promiscuous mode
[  457.746471][T17832] syzkaller0: entered allmulticast mode
[  457.951892][ T1308] !: left promiscuous mode
[  458.069658][T17866] netlink: 'syz.6.2917': attribute type 13 has an invalid length.
[  458.088221][T17866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2917'.
[  458.120948][ T1308] tipc: Disabling bearer <eth:vlan1>
[  458.136235][ T1308] tipc: Left network mode
[  458.224190][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  458.232640][    C0] lec:lec_tx_timeout: lec0
[  458.244127][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  458.440703][T17881] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  458.518917][T17876] syzkaller0: entered allmulticast mode
[  458.669579][T17874] tipc: Resetting bearer <eth:syzkaller0>
[  458.795664][T17874] lo speed is unknown, defaulting to 1000
[  458.824550][ T5143] Bluetooth: hci2: command tx timeout
[  459.167755][T17873] tipc: Resetting bearer <eth:syzkaller0>
[  459.271588][T17910] netlink: 'syz.1.2927': attribute type 1 has an invalid length.
[  459.320454][T17873] tipc: Disabling bearer <eth:syzkaller0>
[  459.341550][T17916] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2928'.
[  459.392591][T17918] erspan1: entered allmulticast mode
[  459.400489][T17919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2928'.
[  459.498331][T17923] xt_addrtype: ipv6 does not support BROADCAST matching
[  459.507850][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2929'.
[  459.547239][T17910] bond24: entered promiscuous mode
[  459.552525][T17910] bond24: entered allmulticast mode
[  459.558560][T17910] 8021q: adding VLAN 0 to HW filter on device bond24
[  459.938806][T17690] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  459.991712][T17690] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  460.019165][T17690] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  460.058736][T17690] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  460.656601][T17964] bridge0: entered allmulticast mode
[  460.792681][T17972] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2939'.
[  460.820021][ T1308] hsr_slave_0: left promiscuous mode
[  460.827952][ T1308] hsr_slave_1: left promiscuous mode
[  460.845913][ T1308] veth1_vlan: left allmulticast mode
[  460.914230][ T5143] Bluetooth: hci2: command 0x0419 tx timeout
[  461.377954][T17993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.076617][ T1308] ` (unregistering): Port device team_slave_1 removed
[  462.095598][ T1308] ` (unregistering): Port device team_slave_0 removed
[  462.317113][T17968] netlink: 'syz.6.2938': attribute type 5 has an invalid length.
[  462.326879][T17971] bridge_slave_1: left allmulticast mode
[  462.332559][T17971] bridge_slave_1: left promiscuous mode
[  462.340688][T17971] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.352595][T17971] bridge_slave_0: left allmulticast mode
[  462.358884][T17971] bridge_slave_0: left promiscuous mode
[  462.366546][T17971] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.432618][T12963] lo speed is unknown, defaulting to 1000
[  462.446320][T12963] infiniband syz2: ib_query_port failed (-19)
[  462.490910][T17690] 8021q: adding VLAN 0 to HW filter on device bond0
[  462.602183][T17690] 8021q: adding VLAN 0 to HW filter on device team0
[  462.678107][T14348] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.685381][T14348] bridge0: port 1(bridge_slave_0) entered forwarding state
[  462.938035][T14348] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.945941][T14348] bridge0: port 2(bridge_slave_1) entered forwarding state
[  462.985159][   T51] Bluetooth: hci2: command 0x0419 tx timeout
[  463.036464][T18019] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2943'.
[  463.150730][T18027] bond3 (unregistering): Released all slaves
[  463.232782][T18043] tc_dump_action: action bad kind
[  463.365395][T18044] syzkaller0: entered promiscuous mode
[  463.371459][T18044] syzkaller0: entered allmulticast mode
[  463.420575][T18050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2947'.
[  463.439214][T17690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  463.474313][T17690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  463.515265][ T1308] IPVS: stop unused estimator thread 0...
[  463.532577][T18050] netlink: 'syz.4.2947': attribute type 2 has an invalid length.
[  463.749576][T18061] sctp: [Deprecated]: syz.6.2950 (pid 18061) Use of struct sctp_assoc_value in delayed_ack socket option.
[  463.749576][T18061] Use struct sctp_sack_info instead
[  464.034043][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms
[  464.042406][    C0] lec:lec_tx_timeout: lec0
[  464.048446][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  467.458044][T17690] 8021q: adding VLAN 0 to HW filter on device batadv0
[  467.746045][T18138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2960'.
[  467.772497][T17690] veth0_vlan: entered promiscuous mode
[  467.930467][T17690] veth1_vlan: entered promiscuous mode
[  468.207598][T18152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2960'.
[  468.460973][T18160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2963'.
[  469.068697][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  469.076804][    C0] lec:lec_tx_timeout: lec0
[  469.099869][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  470.140271][T17690] veth0_macvtap: entered promiscuous mode
[  470.235867][T17690] veth1_macvtap: entered promiscuous mode
[  470.342027][T17690] batman_adv: batadv0: Interface activated: batadv_slave_0
[  470.441799][T17690] batman_adv: batadv0: Interface activated: batadv_slave_1
[  470.535876][T18186] block nbd4: not configured, cannot reconfigure
[  470.546436][T14337] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  470.611782][T14337] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  470.795293][T14337] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  470.841172][T14337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.557360][T18201] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2969'.
[  471.588514][T14337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.639318][T14337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.896165][T14337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.946397][T14337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.088841][T18218] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2971'.
[  474.130712][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  474.139269][    C0] lec:lec_tx_timeout: lec0
[  474.161975][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  476.042049][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  476.052315][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  476.063213][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  476.086008][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  476.105946][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  477.036851][T18285] x_tables: duplicate underflow at hook 3
[  477.475537][T18272] chnl_net:caif_netlink_parms(): no params data found
[  477.738261][T18295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2983'.
[  478.188250][ T5143] Bluetooth: hci1: command tx timeout
[  478.245908][T18272] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.296829][T18272] bridge0: port 1(bridge_slave_0) entered disabled state
[  478.321728][T18272] bridge_slave_0: entered allmulticast mode
[  478.354341][T18272] bridge_slave_0: entered promiscuous mode
[  478.385376][T18272] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.413168][T18272] bridge0: port 2(bridge_slave_1) entered disabled state
[  478.441761][T18272] bridge_slave_1: entered allmulticast mode
[  478.471435][T18272] bridge_slave_1: entered promiscuous mode
[  478.726123][T18272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  478.787085][T18272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  479.017542][T18272] team0: Port device team_slave_0 added
[  479.097754][T18272] team0: Port device team_slave_1 added
[  479.188379][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  479.196521][    C0] lec:lec_tx_timeout: lec0
[  479.223093][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  479.363541][T18272] batman_adv: batadv0: Adding interface: batadv_slave_0
[  479.410603][T18272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  479.542541][T18272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  479.711548][T18272] batman_adv: batadv0: Adding interface: batadv_slave_1
[  479.775427][T18272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  479.896892][T18272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  479.932381][T18336] netlink: 'syz.4.2990': attribute type 1 has an invalid length.
[  480.058578][T18336] bond16: entered promiscuous mode
[  480.106850][T18336] 8021q: adding VLAN 0 to HW filter on device bond16
[  480.264414][ T5143] Bluetooth: hci1: command tx timeout
[  480.290693][T18339] bond16: (slave bridge7): making interface the new active one
[  480.345565][T18339] bridge7: entered promiscuous mode
[  480.387520][T18339] bond16: (slave bridge7): Enslaving as an active interface with an up link
[  480.676875][T18272] hsr_slave_0: entered promiscuous mode
[  480.737581][T18272] hsr_slave_1: entered promiscuous mode
[  480.792064][    C0] sched: DL replenish lagged too much
[  480.990420][T18353] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2996'.
[  481.063591][T18353] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2996'.
[  481.151324][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  482.072509][T18372] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3000'.
[  482.110420][T18362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2998'.
[  482.160844][T18362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2998'.
[  482.295685][T18373] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3000'.
[  482.345396][ T5143] Bluetooth: hci1: command tx timeout
[  482.927529][T18272] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  482.945238][T18385] xt_hashlimit: size too large, truncated to 1048576
[  483.633874][T18394] openvswitch: netlink: Key 6 has unexpected len 122 expected 2
[  484.091524][T18398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3005'.
[  484.244382][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  484.252456][    C0] lec:lec_tx_timeout: lec0
[  484.424355][ T5143] Bluetooth: hci1: command tx timeout
[  484.455483][T18406] netlink: 'syz.4.3008': attribute type 10 has an invalid length.
[  484.498692][T18406] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3008'.
[  485.148394][T18417] geneve3: entered promiscuous mode
[  485.177399][T14332] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  485.206899][T14332] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  485.251409][T14332] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  485.280727][T14332] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  485.594627][T18422] tc action pedit offset must be on 32 bit boundaries
[  486.991260][T18272] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  489.297756][T18425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3016'.
[  489.978082][T18442] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3019'.
[  489.997527][T18442] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  490.347444][T18444] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3019'.
[  490.364292][T18443] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3019'.
[  490.705506][T18448] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3021'.
[  491.502067][T18272] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  494.187469][T18462] xt_hashlimit: size too large, truncated to 1048576
[  494.220658][T18462] xt_hashlimit: max too large, truncated to 1048576
[  495.500343][T18453] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  495.525619][T18453] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  495.568590][T18453] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  495.816182][T18466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3024'.
[  496.428637][T18474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3026'.
[  496.447268][T18474] openvswitch: netlink: Message has 2 unknown bytes.
[  496.949976][T18478] block nbd4: NBD_DISCONNECT
[  497.160188][T18272] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode
[  497.182965][T18272] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode
[  497.226698][T18272] team0: Port device netdevsim0 removed
[  497.241244][T18272] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  497.293081][T18474] netlink: 'syz.4.3026': attribute type 3 has an invalid length.
[  498.704711][T18481] syzkaller0: entered promiscuous mode
[  498.720422][T18481] syzkaller0: entered allmulticast mode
[  501.400937][T18272] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  501.512136][T18272] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  501.944578][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  501.953493][ T1298] lec:lec_start_xmit: lec0:No lecd attached
[  502.079355][T18272] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  502.210066][T18272] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  502.302796][T18502] netlink: 'syz.6.3033': attribute type 1 has an invalid length.
[  502.504208][T18502] bond4: entered promiscuous mode
[  502.517170][T18502] 8021q: adding VLAN 0 to HW filter on device bond4
[  502.783272][T18514] 8021q: adding VLAN 0 to HW filter on device bond4
[  502.803606][T18514] bond4: (slave vti0): The slave device specified does not support setting the MAC address
[  502.824898][T18514] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  502.859909][T18514] bond4: (slave vti0): making interface the new active one
[  502.876385][T18514] vti0: entered promiscuous mode
[  502.898176][T18514] bond4: (slave vti0): Enslaving as an active interface with an up link
[  503.260007][T18272] 8021q: adding VLAN 0 to HW filter on device bond0
[  503.755834][T18521] netlink: 'syz.6.3035': attribute type 14 has an invalid length.
[  503.767981][T18272] 8021q: adding VLAN 0 to HW filter on device team0
[  503.839268][T11894] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.847248][T11894] bridge0: port 1(bridge_slave_0) entered forwarding state
[  503.878946][T18521] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3035'.
[  503.960189][T11894] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.967890][T11894] bridge0: port 2(bridge_slave_1) entered forwarding state
[  504.028513][ T5143] Bluetooth: hci5: command 0x0406 tx timeout
[  505.012893][T18535] x_tables: duplicate underflow at hook 1
[  505.152786][T18540] x_tables: duplicate underflow at hook 3
[  505.485756][T18546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3039'.
[  505.899162][T18272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  506.199436][T18545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3039'.
[  506.865897][T18563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3042'.
[  507.078478][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5120 ms
[  507.086723][    C0] lec:lec_tx_timeout: lec0
[  507.106212][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  510.346406][T18272] 8021q: adding VLAN 0 to HW filter on device batadv0
[  510.665767][T18272] veth0_vlan: entered promiscuous mode
[  510.691914][T18272] veth1_vlan: entered promiscuous mode
[  510.781376][T18272] veth0_macvtap: entered promiscuous mode
[  510.806720][T18272] veth1_macvtap: entered promiscuous mode
[  511.190969][T18272] batman_adv: batadv0: Interface activated: batadv_slave_0
[  511.222072][T18272] batman_adv: batadv0: Interface activated: batadv_slave_1
[  511.277900][T14332] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  511.300287][T14332] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  511.322598][T14332] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  511.376500][T14332] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  511.548738][T14333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.588695][T14333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.665330][  T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.677006][  T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.119795][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  512.127987][    C0] lec:lec_tx_timeout: lec0
[  512.511729][T18600] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3050'.
[  513.944542][T18623] netlink: 'syz.5.3056': attribute type 27 has an invalid length.
[  513.956834][T18598] Bluetooth: hci4: command 0x0406 tx timeout
[  514.063728][T18623] veth1_to_batadv: left promiscuous mode
[  514.080887][T18623] veth1_to_batadv: left allmulticast mode
[  514.099000][T18623] hsr0: left promiscuous mode
[  514.124081][T18623] bond4: left promiscuous mode
[  514.128931][T18623] bridge1: left promiscuous mode
[  514.145352][T18621] netlink: 'syz.5.3056': attribute type 27 has an invalid length.
[  514.162595][T18623] ipvlan2: left allmulticast mode
[  514.175194][T18623] bond4: left allmulticast mode
[  514.190441][T18623] bridge1: left allmulticast mode
[  514.246944][T18623] bond5: left allmulticast mode
[  514.255466][T14330] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  514.276067][T14330] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  514.310593][T14330] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  514.342405][T14330] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  514.427396][   T51] Bluetooth: hci1: command 0x0405 tx timeout
[  515.114624][T18635] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  515.523074][T18637] netdevsim netdevsim6: Direct firmware load for 
 failed with error -2
[  515.604803][T18637] netdevsim netdevsim6: Falling back to sysfs fallback for: 

[  515.820915][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  516.112149][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  516.148128][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  516.227672][ T5836] syz_tun (unregistering): left allmulticast mode
[  516.253272][ T5836] syz_tun (unregistering): left promiscuous mode
[  516.303762][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  516.379100][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  517.609907][T18657] netlink: 'syz.5.3067': attribute type 40 has an invalid length.
[  518.056183][T18643] chnl_net:caif_netlink_parms(): no params data found
[  518.514451][ T5143] Bluetooth: hci0: command tx timeout
[  518.979125][T18643] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.045242][T18643] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.052847][T18643] bridge_slave_0: entered allmulticast mode
[  519.202465][T18643] bridge_slave_0: entered promiscuous mode
[  519.277863][T18643] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.333598][T18643] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.443873][T18643] bridge_slave_1: entered allmulticast mode
[  519.485857][T18643] bridge_slave_1: entered promiscuous mode
[  519.827063][T18643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.920944][T18643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  519.990878][T18689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3074'.
[  520.206406][T18643] team0: Port device team_slave_0 added
[  520.217890][T18694] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3073'.
[  520.262363][T18643] team0: Port device team_slave_1 added
[  520.584457][ T5143] Bluetooth: hci0: command tx timeout
[  520.731858][T18643] batman_adv: batadv0: Adding interface: batadv_slave_0
[  520.788202][T18643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  520.966997][T18643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  521.092588][T18643] batman_adv: batadv0: Adding interface: batadv_slave_1
[  521.137629][T18643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  521.297790][T18643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  521.318576][T18706] netlink: 'syz.0.3076': attribute type 11 has an invalid length.
[  521.359187][T18706] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3076'.
[  522.664388][ T5143] Bluetooth: hci0: command tx timeout
[  523.715804][T18713] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3077'.
[  523.739492][T18713] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3077'.
[  523.771894][ T1308] ------------[ cut here ]------------
[  523.777883][ T1308] conntrack cleanup blocked for 60s
[  523.777912][ T1308] WARNING: net/netfilter/nf_conntrack_core.c:2512 at nf_conntrack_cleanup_net_list+0x234/0x340, CPU#1: kworker/u8:8/1308
[  523.796328][ T1308] Modules linked in:
[  523.800570][ T1308] CPU: 1 UID: 0 PID: 1308 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  523.811244][ T1308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  523.822064][ T1308] Workqueue: netns cleanup_net
[  523.827046][ T1308] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340
[  523.836444][ T1308] Code: 08 48 89 df e8 9d ed 64 f8 4c 8b 3b 49 39 df 74 69 e8 60 ab fa f7 45 31 e4 e9 8e fe ff ff e8 53 ab fa f7 48 8d 3d bc 82 55 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff
[  523.856891][ T1308] RSP: 0018:ffffc900042d78b0 EFLAGS: 00010293
[  523.863095][ T1308] RAX: ffffffff89caf5ad RBX: ffffc900042d7a50 RCX: ffff888028e81e80
[  523.872038][ T1308] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff90207870
[  523.880299][ T1308] RBP: 0000000000000001 R08: ffff888031bc2803 R09: 1ffff11006378500
[  523.888668][ T1308] R10: dffffc0000000000 R11: ffffed1006378501 R12: 0000000000000001
[  523.897597][ T1308] R13: dffffc0000000000 R14: 00000001000056a5 R15: 00000001000056a6
[  523.905978][ T1308] FS:  0000000000000000(0000) GS:ffff888125561000(0000) knlGS:0000000000000000
[  523.915843][ T1308] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  523.922736][ T1308] CR2: 0000001b3271dff8 CR3: 000000005a42e000 CR4: 00000000003526f0
[  523.931699][ T1308] Call Trace:
[  523.935110][ T1308]  <TASK>
[  523.938082][ T1308]  ? __pfx_nf_conntrack_pernet_exit+0x10/0x10
[  523.944784][ T1308]  ops_undo_list+0x52b/0x940
[  523.949608][ T1308]  ? __pfx_ops_undo_list+0x10/0x10
[  523.955151][ T1308]  ? idr_destroy+0x227/0x290
[  523.959893][ T1308]  cleanup_net+0x56b/0x800
[  523.964416][ T1308]  ? __pfx_cleanup_net+0x10/0x10
[  523.969805][ T1308]  ? process_scheduled_works+0xa8d/0x18c0
[  523.975650][ T1308]  ? process_scheduled_works+0xa8d/0x18c0
[  523.981447][ T1308]  process_scheduled_works+0xb6e/0x18c0
[  523.987492][ T1308]  ? __pfx_process_scheduled_works+0x10/0x10
[  523.993650][ T1308]  ? assign_work+0x3d5/0x5e0
[  523.998364][ T1308]  worker_thread+0xa53/0xfc0
[  524.003041][ T1308]  kthread+0x388/0x470
[  524.007302][ T1308]  ? __pfx_worker_thread+0x10/0x10
[  524.012852][ T1308]  ? __pfx_kthread+0x10/0x10
[  524.018644][ T1308]  ret_from_fork+0x51e/0xb90
[  524.023309][ T1308]  ? __pfx_ret_from_fork+0x10/0x10
[  524.031083][ T1308]  ? __switch_to+0xc7d/0x1450
[  524.036324][ T1308]  ? __pfx_kthread+0x10/0x10
[  524.040969][ T1308]  ret_from_fork_asm+0x1a/0x30
[  524.046180][ T1308]  </TASK>
[  524.049248][ T1308] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  524.056646][ T1308] CPU: 1 UID: 0 PID: 1308 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  524.066503][ T1308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  524.077083][ T1308] Workqueue: netns cleanup_net
[  524.081901][ T1308] Call Trace:
[  524.085225][ T1308]  <TASK>
[  524.088277][ T1308]  vpanic+0x56c/0xa60
[  524.092305][ T1308]  ? __pfx__printk+0x10/0x10
[  524.097285][ T1308]  ? __pfx_vpanic+0x10/0x10
[  524.101835][ T1308]  ? is_bpf_text_address+0x292/0x2b0
[  524.107171][ T1308]  ? is_bpf_text_address+0x26/0x2b0
[  524.112539][ T1308]  panic+0xc5/0xd0
[  524.116308][ T1308]  ? __pfx_panic+0x10/0x10
[  524.120790][ T1308]  ? ret_from_fork_asm+0x1a/0x30
[  524.125778][ T1308]  __warn+0x315/0x4f0
[  524.129800][ T1308]  ? nf_conntrack_cleanup_net_list+0x234/0x340
[  524.136020][ T1308]  ? nf_conntrack_cleanup_net_list+0x234/0x340
[  524.142229][ T1308]  __report_bug+0x29a/0x540
[  524.146959][ T1308]  ? __lock_acquire+0x6b5/0x2cf0
[  524.151987][ T1308]  ? nf_conntrack_cleanup_net_list+0x234/0x340
[  524.158375][ T1308]  ? __pfx___report_bug+0x10/0x10
[  524.163561][ T1308]  ? nf_conntrack_cleanup_net_list+0x13e/0x340
[  524.169868][ T1308]  report_bug_entry+0x19a/0x290
[  524.174765][ T1308]  ? nf_conntrack_cleanup_net_list+0x234/0x340
[  524.180967][ T1308]  ? nf_conntrack_cleanup_net_list+0x239/0x340
[  524.187350][ T1308]  handle_bug+0xce/0x200
[  524.191649][ T1308]  exc_invalid_op+0x1a/0x50
[  524.196202][ T1308]  asm_exc_invalid_op+0x1a/0x20
[  524.201187][ T1308] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340
[  524.207996][ T1308] Code: 08 48 89 df e8 9d ed 64 f8 4c 8b 3b 49 39 df 74 69 e8 60 ab fa f7 45 31 e4 e9 8e fe ff ff e8 53 ab fa f7 48 8d 3d bc 82 55 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff
[  524.227990][ T1308] RSP: 0018:ffffc900042d78b0 EFLAGS: 00010293
[  524.234126][ T1308] RAX: ffffffff89caf5ad RBX: ffffc900042d7a50 RCX: ffff888028e81e80
[  524.242239][ T1308] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff90207870
[  524.250242][ T1308] RBP: 0000000000000001 R08: ffff888031bc2803 R09: 1ffff11006378500
[  524.258338][ T1308] R10: dffffc0000000000 R11: ffffed1006378501 R12: 0000000000000001
[  524.266433][ T1308] R13: dffffc0000000000 R14: 00000001000056a5 R15: 00000001000056a6
[  524.274578][ T1308]  ? nf_conntrack_cleanup_net_list+0x22d/0x340
[  524.280803][ T1308]  ? __pfx_nf_conntrack_pernet_exit+0x10/0x10
[  524.286930][ T1308]  ops_undo_list+0x52b/0x940
[  524.291570][ T1308]  ? __pfx_ops_undo_list+0x10/0x10
[  524.296908][ T1308]  ? idr_destroy+0x227/0x290
[  524.301730][ T1308]  cleanup_net+0x56b/0x800
[  524.306467][ T1308]  ? __pfx_cleanup_net+0x10/0x10
[  524.311726][ T1308]  ? process_scheduled_works+0xa8d/0x18c0
[  524.317757][ T1308]  ? process_scheduled_works+0xa8d/0x18c0
[  524.323528][ T1308]  process_scheduled_works+0xb6e/0x18c0
[  524.329414][ T1308]  ? __pfx_process_scheduled_works+0x10/0x10
[  524.335635][ T1308]  ? assign_work+0x3d5/0x5e0
[  524.340292][ T1308]  worker_thread+0xa53/0xfc0
[  524.345061][ T1308]  kthread+0x388/0x470
[  524.349173][ T1308]  ? __pfx_worker_thread+0x10/0x10
[  524.354587][ T1308]  ? __pfx_kthread+0x10/0x10
[  524.359394][ T1308]  ret_from_fork+0x51e/0xb90
[  524.364464][ T1308]  ? __pfx_ret_from_fork+0x10/0x10
[  524.369618][ T1308]  ? __switch_to+0xc7d/0x1450
[  524.374342][ T1308]  ? __pfx_kthread+0x10/0x10
[  524.378975][ T1308]  ret_from_fork_asm+0x1a/0x30
[  524.383803][ T1308]  </TASK>
[  524.387462][ T1308] Kernel Offset: disabled
[  524.391801][ T1308] Rebooting in 86400 seconds..