last executing test programs:

1m1.694468035s ago: executing program 4 (id=3708):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000002700)={0x0, 0xa})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$inet(0x2b, 0x801, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='io_uring_register\x00', r0, 0x0, 0x3}, 0x18)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000950000ebffffff00"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x5, 0x7, 0x0, 0x0, 0x5, 0x7fffffff}, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
socket(0x10, 0x803, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r5)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000200)={'virt_wifi0\x00', @multicast})
ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x8}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180), 0x8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$sock_buf(r6, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1m0.634012159s ago: executing program 4 (id=3716):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x30, 0x20, 0x2d2c6d60ea1da725, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040090}, 0x80)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x7, 0xfff, 0x40, @empty, @loopback, 0x8, 0x8, 0x3, 0x1}})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61126300000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x29)

1m0.520710081s ago: executing program 4 (id=3719):
r0 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x2a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="f013473dbd05b8efd1", 0x9}, {0x0}], 0x2}}], 0x2, 0x2004000)

1m0.241504696s ago: executing program 4 (id=3724):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001500010328bd0800fbdbdf250c0000000c00040000000000000040"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4)

1m0.072968546s ago: executing program 4 (id=3726):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10)

59.619449102s ago: executing program 4 (id=3729):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'virt_wifi0\x00', &(0x7f0000000240)=@ethtool_gfeatures})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ff000016000000000300000000000000000000000000000d0000001a000000000000000a"], 0x0, 0x4a, 0x0, 0x1, 0x800}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r5}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r7 = epoll_create(0x3ff)
r8 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000280)={0x2000000})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r9, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

44.544568891s ago: executing program 32 (id=3729):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'virt_wifi0\x00', &(0x7f0000000240)=@ethtool_gfeatures})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ff000016000000000300000000000000000000000000000d0000001a000000000000000a"], 0x0, 0x4a, 0x0, 0x1, 0x800}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r5}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r7 = epoll_create(0x3ff)
r8 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000280)={0x2000000})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r9, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

35.224715052s ago: executing program 2 (id=3889):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x181}, 0x14}}, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)='@[', 0x2}], 0x1, 0x0, 0x0, 0x4008800}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)="e5", 0x1}, {0x0, 0xf00}], 0x2, 0x0, 0x0, 0x20000000}}], 0x2, 0x8010)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a310000000009000163eab8e6b9bb420073797a300000000008e1054000000021680000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000003c0003803800008008000340000000022c000b80280001800a0001006c696d6974000000180002800c0300000000000000000003080004400000000114000000100001000000000000"], 0xec}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', <r7=>0x0})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x38, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x24040000)

35.205230058s ago: executing program 3 (id=3890):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001800)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x101, 0x9, 0x5, 0xd494}, {0x3, 0x1, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x8, 0x9, 0x8, 0x5, 0x4, 0x2, 0x8, 0x80000000, 0x2, 0x4, 0x2, 0x8001, 0x7, 0xbe800000, 0x80, 0x2, 0x9, 0xffffffff, 0xe5, 0x6, 0x85, 0xe8d, 0x2, 0xfffffff9, 0x5, 0x8, 0xd, 0xffff, 0x8, 0x7, 0x1ff, 0x80000001, 0x9, 0x4, 0x8, 0x99, 0x81, 0x8, 0x351, 0xf27c, 0x0, 0x2, 0xff, 0x8, 0x5, 0x9, 0x400, 0x8, 0x3, 0x10, 0x788, 0x8, 0x4, 0x7, 0x800, 0x4e, 0x80000000, 0xc, 0xe0, 0x10, 0x7fffffff, 0x5ee3db3e, 0x7, 0xb, 0xc9, 0x9ca, 0x95, 0x7, 0xfffffffd, 0x9, 0x8, 0x56a7, 0x1, 0x9, 0xfffffff9, 0xffffffff, 0x4, 0xfffffffc, 0x3, 0x8, 0x7, 0xf5e, 0xcd, 0x7ff, 0x7, 0xc21, 0x1, 0x1, 0xbc6, 0x1, 0x0, 0x4, 0xf, 0xfffffff7, 0xffff, 0xb, 0xfffffffe, 0x5, 0x0, 0x7ff, 0x9, 0xf, 0x7, 0x4, 0x0, 0x9, 0x6, 0x6, 0x6, 0xfff, 0x4, 0x2, 0x1ff, 0x7, 0x9, 0x1, 0xffff, 0x0, 0x6d87, 0x76, 0x1f, 0x7, 0x100, 0x0, 0x101, 0x71b, 0x7ff, 0x10001, 0x7, 0x2, 0x7, 0x81, 0x2, 0x3, 0x0, 0x5ef, 0xd, 0x6e7000, 0xc05, 0x4, 0x8, 0x0, 0xb, 0x10, 0x80000000, 0xd, 0x3, 0xd0e, 0x2, 0x3, 0x35, 0x9, 0x3, 0x8d55, 0x9, 0x164, 0xc9b, 0x5, 0xffffff87, 0x2, 0x81, 0x1ff, 0xfff, 0x7, 0x2, 0x7, 0x4, 0x7, 0x5, 0x3, 0x2, 0xa, 0xfffff800, 0xffffffff, 0x80, 0xc34e, 0x33f60b9f, 0x58d0, 0xbbf, 0x80, 0x2, 0x9, 0x9, 0xfffffffa, 0x9, 0x7, 0x4, 0xdc16d9f5, 0x5dc0, 0x33, 0x5, 0x3f, 0x4, 0x3d, 0x800, 0x5, 0xfffffffe, 0x8, 0x7fff, 0x36078901, 0xf, 0x2, 0x8, 0xa9, 0x10001, 0x7dcc, 0x4, 0xffff, 0x3, 0x8, 0x3, 0x9, 0x347, 0x200, 0x2, 0x400, 0x0, 0x9, 0xca, 0x6, 0x7, 0x7, 0x0, 0x7, 0x7, 0x3, 0x0, 0x0, 0x0, 0x54, 0x2, 0x1, 0x0, 0xffffffff, 0x3, 0x5, 0x9, 0x6, 0xee1, 0x7, 0x1, 0x10001, 0x4, 0xffffffcb, 0x1, 0x7a, 0x0, 0x6, 0x5, 0x1, 0xff80, 0x1, 0x0, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x2080}, 0x8f1f02e714f7a698)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async, rerun: 32)
ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f0000000140)="4f5071e4201dbd94ad24c966a72bbbf30d7bc76d5700ae1e914ba9b73bd884de39e6fa3e6e70cacd42482b339740e5b8695d2a5455b6a3aff205aaf368fce90fbe03a3bfd87b263544") (rerun: 32)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'batadv0\x00', 0x20})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x20, 0x12}}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000280)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000000)="0163cb46d9331126c10ea17c7967cb12091705cd3d9c7b16b11e72a4d6799ab9207b3e6f9d2986bd6d1646e1c946a28061436c14b8867a20e77c34b2ac", 0x3d}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x8, @local, 0x3}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="2849de7792c3", 0x6}], 0x1}}], 0x2, 0x24000045)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={<r4=>0x0, @multicast2, @multicast2}, &(0x7f0000000440)=0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=@delqdisc={0x6c, 0x25, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0x8}, {0xf, 0xfff1}, {0xc, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x18, 0x80}}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xdda}}, @qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7, 0x4}}}, @TCA_RATE={0x6, 0x5, {0x10, 0x5}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xb6e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x72c2}, 0x8)

34.813274242s ago: executing program 3 (id=3892):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
connect$ax25(r1, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f00000004c0)="b9ff030768441a8cb89e14f00800e075702b1c1dac4091b76a4bcbe4dc62b42e52a7", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000940)=@x25, 0x80, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/210, 0xd2}, {&(0x7f0000000ac0)=""/41, 0x29}, {&(0x7f0000000b00)=""/26, 0x1a}], 0x3, 0xfffffffffffffffe}, 0x680}], 0x1, 0x40002110, &(0x7f0000000bc0)={0x77359400})
sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000310001072abd70000000000003"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), r3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x130, 0x3, 0xa, 0x2a240e74a46d00cf, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0xd0, 0xc, "f0cee652e18baabbbabbcae07805b79a95a275c922d930051ad65df6cd22b834f253f7f5b07a87f14b417f8cf1bfd1e3dd19573a027a53a162b95f06cb95f2dd0ca27e0db139520d1755548f0331757c8b02fcfccc998d9c14218c18d2d6293c33eeca08219d07b6ae4c54567e929b9cd3966fccd3384d316164b2d54bd17559f456537894db47c6199b31cbecbe17baddea2eabb4480e399d12e7c2de1aa61bbdf2f02de30f296de79b2fbcbd36c45f412907e2825985d975d4b7a94c9f65dea108860eec361e932f70bab3"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}], {0x14}}, 0x18c}, 0x1, 0x0, 0x0, 0x4050}, 0x88d1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000002060102000000000000000000000000140007800500140080ff000008001240120500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0)
sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e8720000", @ANYRES16=0x0, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x40805}, 0x40)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'macvlan1\x00', <r5=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18085100000000090000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00d0ff0000000000660000000000000018000000f8ffffff00000000000000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222}, 0x94)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b15, &(0x7f0000000000)={'wlan0\x00'})
connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
bind$llc(r6, 0x0, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000e40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x184, 0x39, 0x8, 0x70bd28, 0x25dfdbff, {0x18}, [@typed={0x5, 0xd6, 0x0, 0x0, @str='\x00'}, @nested={0x109, 0xfe, 0x0, 0x1, [@typed={0xc, 0xe0, 0x0, 0x0, @u64=0x80}, @generic="148af6c0dc76e3d4913a7e316bebf9210fdccc77fb4d385a00ffa391b96595345b9e2554aacea1ff1cb3c80e4c878001faa9d061f072d8536fd70940c1d16b8f911cc4fab01b76931d9e80b55b9366a564cc553bc62ac7923300354f55f42fa8710f1d699a5b70f0eeaebe9ee552c6de2a12ce544be357b8f4647ce4d15c7f1977aa043f63eefd1640d5851ce9f4354254ac757975f390634abd552c2fa8fa0653f45eb4e50a2479b6f2c5d69dbdcbe754b054575713764cc453271be5b4c240873e2f101ea9684ac8efdc122adcb9a31a6fb4fce842e21e5097f26152f042b9b2e478651150bae299be97e2575dd9d687ebcbea4e8680feb3"]}, @generic="50af5a0252f5a87525f70879d604a870919cbefbfc768f68dc327a49244692fe9848d82477399d65f79d664bc09fb67aaab284319f693f46ae965cb10dabe2418ce26e9a720064", @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x184}, 0x1, 0x0, 0x0, 0x48000}, 0x4004)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="350b000083810000240012800b0001006d616373656300001400028005000d000300000005000b000200000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="6e0435df29a76448fcd50ed044e786d9b6dc25f61d5081fded75e52f5e14ec53ace5bd86633cde0f1d76f622d396a9fa5b5468fb1fd95305"], 0x54}}, 0x40000d0)

34.734867061s ago: executing program 0 (id=3894):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async)
r1 = socket(0x10, 0x803, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00\x00\x00', 0x3}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32)
recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1}, 0x40000000) (rerun: 32)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x5050)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000700))

34.64644708s ago: executing program 0 (id=3895):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a0000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69700000616300000005000400000000000900020073797a3000000000240007800400028008000640000000020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0)

34.51338738s ago: executing program 0 (id=3896):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f0000000000)=0x9, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r4=>0x0})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0)

34.282301583s ago: executing program 0 (id=3898):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x5}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

34.114695363s ago: executing program 1 (id=3899):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x7c}}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f0000000280)=0xd, 0x12)
write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5)
readv(r4, &(0x7f0000000700)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1)

34.013229026s ago: executing program 2 (id=3900):
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001cc0))
bpf$TOKEN_CREATE(0x24, &(0x7f0000001c00), 0x8)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)=[@txtime={{0x18, 0x1, 0x3d, 0x100000001}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xa2}}, @mark={{0x14, 0x1, 0x24, 0xaec3}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x10001}}], 0x90}}, {{&(0x7f00000001c0)=@x25, 0x80, &(0x7f0000000580)=[{&(0x7f0000000040)="23bd68cbe83f9c58b8a996b0851233b1ce7b37083280e70f45b2eca540e03037a31a0363cc2f", 0x26}, {&(0x7f0000000240)="80b5591f96dc061f5d4a559734723d712f177db7c9fcc577088bc2eb159e5680b4c5e1a20cf74e7c96c47067683c85832e0dc360fe0f4458b43832e16ebc7b6d85499df77ecc5631cfe46c2dd8312f9add374735791ae77c77e6492a4ec5c0c6bbbb8880b3dafa92d5f80e522d1cd0964b689e3387529710a88a", 0x7a}, {&(0x7f00000002c0)="650a8ff18022010c6cd2d7ca69e6a5de236893cb774f38d35cfd459d82d248b7f6582fcaebedb1c56556fb66d18299c4e6b8ce18379ec6fe1b49e75e42bce131cc8e2661c6b421a0ca922bad6d78eb7fe25b7cab260a86ac2753a8b425", 0x5d}, {&(0x7f0000000340)="13cabab1b725865e8ddc223532e9ced6843a2dabfe22c57c22531fb5affbe957832345214f77a26ccbc758f1296011e15e33ebb61e83bccc52f2df5ae7e96324f61560f40ae8edc1cb866a6bf13e50d6675d84ee28a3e287a85fceafcbf5cb27e0fce24e5dca6cf7675931d9d81e55d5d7a6116952bf0ec8d11f72d4e5f1b96e07170a90cf7b19a1f633f83ac18d2f956cf003687615d71d2212ad732dc0ace1d74f76f6545ca50326e8f7ee0421cb4e32ed3b1bf71a55a65918764d86d9a2e6a45bdbc0d7fc9ae1d92c41f5f7c9f3c905fb22c2b9fd024f2c7fedd51c365058b2b23d9e8d7f70acb8359a1e35adeffdeebbcbcea3b13c2cee", 0xf9}, {&(0x7f0000000440)="e0afb457a2152b5421d5e7b5ca7eff70f47c651f59c7d07cfb6550f024eb8b33855de4c7127c9d81afc0", 0x2a}, {&(0x7f0000000480)='#', 0x1}, {&(0x7f00000004c0)="88fbc28a833f96ee2a1fda93464554df43262154c0be4908bb4a71004cfe81a5b9e9285a0582a5e2fd62bde7ef44d236da7ded2e1f061a9fadb5163876da06b8fd76b23625afcef39eab9c2e0b73353da54efc545126c7c27156eacef07cbd2a7c262bac7846220e864415666d3c84fcaca2ceeceda5c9491921ce6c9fa872e39528e9665b7d83bab55ab4487f9d2f20e58f87c9a07285b9", 0x98}], 0x7, &(0x7f0000000600)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}}, {{&(0x7f0000000640)=@hci, 0x80, &(0x7f0000001740)=[{&(0x7f00000006c0)="2218b88accb7dd4a3ab1dd4abe55e5e36e646c2849fda53cc107c243c9dd25ac650b55087ead4cf1a5bea9ffc695c510868ed8bf35e1a2a359a844b3101b", 0x3e}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="e839de", 0x3}], 0x3, &(0x7f0000001780)=[@mark={{0x14, 0x1, 0x24, 0x1d3}}, @mark={{0x14, 0x1, 0x24, 0x9f}}, @timestamping={{0x14, 0x1, 0x25, 0xfd3}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001800)="f159de2a0933dcdbd48aed7327bd3f0b0f12421bcc0a08779334fe84a8ca674645f973a2d7cb953dad1a1f496b90b2bce158d4102357b965bf45f91158c139b96cb8dccdd9bb3efc78793faafe7d9f7266095da30fa76342f52779ab5da27347c539dc8921eeeeea90fd252f07072bc21ad8d006c184a7a340d94db5a0665e51", 0x80}, {&(0x7f0000001880)="88c27a0b143a1c10", 0x8}, {&(0x7f00000018c0)="29e8a95a648cd4a9b3bc564c348124853cd329f92e66da69b7515ec53c9454799a9ddfe8977003fd784e37216067bc4aae4c1baa49d51d6e9cb23c6df3a54314b77a282c2f327487a5db93d2f156d54cf5256e7118b4cb1fe99e60a74d81f05953d5582c6c6bb1be3c7a03dc938cc88038b43d5fbabad46611f6dbd5c6bafde1da8a7a80412aab7bbcded66f4073e8963b02fac09c29dfe8", 0x98}, {&(0x7f0000001980)="453bd6a8636f45853a0dff3856929afefc698dda02376756e445eba1ef4ba69ad3c74c51aff0a909d5469ca663009ca4ec5075ff92e410d81626a53a516ed79d9126c3e9a83aaa14abc25ffba6e3c794f9c4ebda10e9728e51433c66a5ab651071065b05aa872f54351e1d5da0c43c1c9c8204bc35d608154daa380ef87c9d6934bafce69f0d05770388229d718824b2570e6b2fd86ad407da0469ced9756814496e142b2f", 0xa5}, {&(0x7f0000001a40)="90de85a5658b1171b7b1306f3cc939c70a21377829d77b0cd423510c7b196dff8c801326c10fc1d7c9b59db8e88d0fbfce0fc361064d97f29a9f63f68775e02066df3a627e14f87b5c8509b3d8461678860f138c2d25edf3b37544194e3335f9fda8d6089e1f03ca64dbd7bd879c3e05115c64f2e1d470b0264c0f5f540230542110d9051e12d50e675b91bc362fe103e7004fcf833fd52792607833", 0x9c}, {&(0x7f0000001b00)="231a32f2b043c9010b9b15cf8d51ee7fa4884e992b90e490e1b442307b8dcdcaca626266931f0a6aaa09835f1d3f64f3e73102f8d99c9c3db55b4681825ba83d1173f1b9df713b72c5e3df179f5ae7d23e548ca9108c5b1921d78716725b9a84add7e0c6ed767cb54161ff0f7a8981e6f6a519a100b079c62e81d080c8982472932c96f5e12be52ec7415548d6484e43672ef25b7cde126e86145d0a1752856df7563e13c1da5585b852025cada4d3908a693cfca9ff3151666f01c91d6a536f42a7b8839a3108b8c0e50a4a900f73a2a712b174f5f23c80aa18e5cc31115cf56b727d0e232e5bd74c43b3149097093f900fdbe5", 0xf4}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)="21597396c1a9624411abcb8b6115446706480e6e4298b4c04411db65b76f474671be32fc9674bab18886f0bd2be38c4b421d32b3f424af104e0355dec5a53d7256d40e0de96dc92dcea95bd938412906d04613676b805438182c0b4d49d803eba6c8c0d904fb7e01b48850f353f012e6c361275ccd29d6f013466b98db8d2747bd05ba01b9d61b15c37641c4ec9562b1868cb69fa13ac03e64a4ee5ec94f62813d3ce7e44dc646f05090cc0402c5c5957f8ce281278c48fcbf0dec364269cf27662d8c6e9d702169eee1613511a208179f7006e7a3", 0xd5}, {&(0x7f0000001d40)="df31ac72ad158ce43616c5aa7d732f2725d83505b3144960b59eb5bf201cc37a36de1471c64e72eca6a99b067729a66f493e63540f914930ded532b9ac393071589dd9f07955c9b9ab209641a33c965d964caffb6882d3231e2f45cf3b9c8517167a68", 0x63}], 0x9}}, {{&(0x7f0000001e80)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x93}, 0x80, &(0x7f0000003440)=[{&(0x7f0000001f00)="0b3defec55c97c9e2c9bae5fd48a7e0486b1", 0x12}, {&(0x7f0000001f40)="862ac86fd54f547319ba3319ae59a884cd9bdf19358435a554163eeef426988c3857a76676038696aba7da451ef5a0071e0d9c12dd01a2f1a93209e75edcb3adb1f8441629d18e324299dd96ceb68c1ad39a601c281d249d4cabf2e87d06d56428c2ad8469ec83cbcf36e1b70d5594153a0aef91dbfb3f24d89868092b5937470f59c05c92a07557e22c0d5e13ede4a22283a2b648733a28a76bcc", 0x9b}, {&(0x7f0000002000)="1873028df7b869f67ea17449544e6f960292e26cf23e94a675004af9fc3f8528eee1e9f5f3cfe1a8393ad304", 0x2c}, {&(0x7f0000002040)="e44a4e47d18c3eec7b13", 0xa}, {&(0x7f0000002080)="4f41a2c4a70f032539a9c49b7b1ebdecec387a74745722a52a6a37545ea92ef276a8cce651316775472a8eb1f3c7dad28c72c84a0f4fe097062e2744979be5d8ed30b022135a0c538b9d44181180e77149f2e218d6a8da3bac862b1b41f8ed7fb5e82e8cbeced6c769764b1f2ba8c2f0467053df31ebc5dd03925f01d57ad80a59b69bca358dce5bea546f182f0b60aed24eb5a6dcc6786f2e465ff614cb89d4f0e270e370a9d8b14bb37e715ef1ab644e07aa651975abb4471f26e103f7951e14f1acda34d5f2b24fa6b90e39cfa8334d4d18c77414330f7a2efad3c6a507a2d5c2ebdfb86b81c3ce274f37ae8d9fbb", 0xf0}, {&(0x7f0000002180)="a0a252c01aa2657cf7351e71e9c9e6ac7d137274200792f100c5735057a50f62bf882145e139aa6f120e68c56688f2b0a41ae4a160087e7ac89e8e87032430550517c389044e38a3e37aad73fa68ce1605e06de62c470197a917bbb9141dbd6c4da82b7086bc4fcc1f22e9db89e37ed52b5e96922e5e143aff28dbfcff8bf2d71be1884b74f40424abf3b527c676f8cbe27bb7168e4dd8e2b475ee350c240810444e0228ae7520d8a4bd84219f9cc7754d33141d1fd5a44ae68dbf7264190ed811eb8fb775c429b520620823b44cade45e12cb6ef0cb71f0b413459072b5e3a838f408", 0xe3}, {&(0x7f0000002280)="78c4deab867b9a1bcb53ed2b9dd7e094e31b7e9e95dce959e2177ff4f2757054a9238f5c862508c42b3d1be7b1ab81763406f14e184a7f48ddd4912035f516d64f062b296cde1c48e03b7a328baf3d9aa3a1eeb482b219b4f788b337fc50939e9d24f0c8e8888343aa5944e600b87cd430e0dd1e4db1af2973b36153283e726b347caa44d1ab0955c082135cab50aa3080eb473edfd6c7c15ef24a82813bbc99956998a857ce73a857d9294d48fd939f82b51873cd88b4393f42db325b4f1cbd741d794f5ac6233cd42a249e5a56", 0xce}, {&(0x7f0000002380)="38e925a5f66b917fe04bf60d50caa601c08bde7a3f284c489b96e0c15720eb0f48e1c925f86a25a08c1549d8a971832a72c52fec50ea2850aedec6c3635aa83d91f4e90c344ee9d17230b4a30d0527f3da2f4a276acccbcac68829cda3c124d21a828008eb740f6f9057919366f3a19c1509e8e3365f70f4b7086613e745bc905d3ffbd1a02c6a60a7b08f659b2a6b95766794bc2587dba0d6401eb8bf1ebbeed5d37d68a48867274afb96a71a5be2502716fb8f377a95d6f1", 0xb9}, {&(0x7f0000002440)="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", 0x1000}], 0x9, &(0x7f0000003500)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}], 0x30}}, {{&(0x7f0000003540)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000003740)=[{&(0x7f00000035c0)="c9467bae85e075dc320430c1abfbfc17d2cc4f57ee67516f107755368d409d08e4ee2c618849f7f127f486667bba1fb42cd138e13531f2b0f4bad7545c140b2d97ee010764a8f94eaeb7e8cd4531dfceed4b8e8e4feb90c4fbd0061d26720b61fa20", 0x62}, {&(0x7f0000003640)="934ba169403fde07280fd1604eef3f48d2a1c3dbf922284840148b0be37f6abdd10308141cd6642c7aa91e8f3d28febe66d48870619271e61096da249a4f5318ffba48bfe79d5a84cfc4632f200254534113bb7b079f26721ceac46fa988b5645a5ac906ec4507583bc12341a11ae2dc142061d807af911113f2b187b8a72eb9cc245941f18c1e0e6d9b9b5bbb78783124ffc90b5f82a5d5b3809ed6a3e22c5a86e20d46432b040172300327ba691e39016edc32cc1e1ee0890ea14e5844cfe2563d861ed2815574b31ceb17b13cceb153374528c224169f", 0xd8}], 0x2, &(0x7f0000003780)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xe}}], 0x30}}, {{&(0x7f00000037c0)=@pppoe={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 'veth0_to_bond\x00'}}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003840)="3bdffd1a2a6a4cfb2d8314e93f7e4dcc79ecb7b914c4c42e1d8caafbb94ba4b198690db33821e11d22ff24e8b2521bbf4d31785d2dbe35180482a62350efbb8d2de7f26511fb5e32d55d9c6fc31636136788dbd23477af5ae11fc4fd0f8b5ad25f60a3a023d96ae6e9d0aac3388806b4b340f84143ddeb", 0x77}, {&(0x7f00000038c0)="a0e25e23a157f9324f59e9870a0de024ad8ab441b11564823de4a9b80d2405ed55721c6f07aff8ee05ab7fcd26a9abcc0e68931b482b8b1bd4f71b153d464567006623be40b9a46376397218f3920029cdcca27fb7ba7cfe3f743636bf5701b0123da0273923df9ca3d4d2bc8b1841a6d5af0ed4bb2355b5c31418f8865ea0f02614d70e09ee82b53465a69d9300066cb14f14a72eb9", 0x96}, {&(0x7f0000003980)="34a86b0754df1cb0767288753ff46e721e34cfe4785aefc48b31ea3e54a5524161104c2d0fb411012c4d5b4c696e041a46a35f9d04", 0x35}], 0x3, &(0x7f0000003a00)=[@mark={{0x14, 0x1, 0x24, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7b6e}}], 0x60}}], 0x7, 0x20000000)

33.892554684s ago: executing program 3 (id=3901):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000840000000000000072"], 0x18}, 0x41)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000080)={'bridge_slave_0\x00', 0xbfff})
socket$kcm(0x29, 0x0, 0x0)

33.885214148s ago: executing program 2 (id=3902):
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r1, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

33.809655688s ago: executing program 1 (id=3903):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc)
writev(r0, &(0x7f0000001300)=[{0x0}, {&(0x7f00000010c0)="985485c5", 0xfdef}], 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x28da}]}, 0x3c}}, 0x800)

33.737337923s ago: executing program 3 (id=3904):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$unix(r1, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701"], 0x28, 0x2000c000}}], 0x2, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
unshare(0x6a040000)
r2 = socket(0x8, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r3)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
connect$l2tp6(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0xffffffe1, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x20000800)
ioctl$sock_netrom_SIOCADDRT(r2, 0x61f0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtaction={0x18, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x4}]}, 0x18}}, 0x800)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@deltclass={0x24, 0x29, 0xf0a, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xd}, {0xd, 0x6}, {0x4, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x880)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x4)
r6 = socket$inet6(0xa, 0x3, 0x2)
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x11, 0x3, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x4)
write(r7, &(0x7f00000000c0)="270000001400070f030e0000120f0a001100b1128a151f75080039000500"/39, 0x27)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback={0x0, 0xffff888101827518}, 0x0, 0x0, 0x0, 0x40000}})

33.620075356s ago: executing program 1 (id=3905):
r0 = socket(0x10, 0x5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', <r1=>0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x3}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000800)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2)
sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002900fddbdfa501000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040054)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x11}, 0x4000000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x29, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, @private1, 0x0, 0x20, 0x0, 0x7}})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = accept4$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c, 0x80000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r10, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000050)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r10, 0x10, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20008045)
r11 = openat$cgroup_devices(r8, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r11, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trmr'], 0xa)
sendmmsg$inet6(r7, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045)
shutdown(r6, 0x1)

33.497011756s ago: executing program 2 (id=3906):
r0 = socket(0x11, 0x3, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x2000000009) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 64)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64)
r5 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)
bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32)
r7 = accept4(r5, 0x0, 0x0, 0x80800)
recvmmsg$unix(r7, 0x0, 0x0, 0x12040, 0x0) (async, rerun: 32)
r8 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32)
ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0)
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a000000000000008902907800000000fc000000000000000000000000000000fe8000000000000000000200000000bb"], 0x66) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
getsockname$netrom(r0, &(0x7f00000000c0)={{0x3, @rose}, [@bcast, @netrom, @remote, @null, @bcast, @netrom, @default, @netrom]}, &(0x7f0000000140)=0x48)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async)
pipe(&(0x7f0000000080)={<r10=>0xffffffffffffffff})
sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000040000fedbdf25030000005400018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000010c0001006574683a77673100"], 0x68}}, 0x0)

33.412222109s ago: executing program 1 (id=3907):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$inet6(0xa, 0x2, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x0, 0x26, 0x0, 0x1, 0x3}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000"], 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x50, r1, 0xfffff000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x6000000, [{0x4040d, 0x40000002}, {0x8003, 0x3}, {0xb, 0x1}]}]}}, &(0x7f0000000f40)=""/4096, 0x3e, 0x1000, 0x1, 0xffff}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x2, 0x9}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @empty}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

33.343659856s ago: executing program 2 (id=3908):
socket(0x23, 0x80805, 0x0) (async)
r0 = socket(0x23, 0x80805, 0x0)
listen(r0, 0x0) (async)
listen(r0, 0x0)
poll(&(0x7f0000000000)=[{r0, 0x9081}], 0x1, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x14, &(0x7f0000000f00)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x29}}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000040)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_audit(0x10, 0x3, 0x9) (async)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, @void}, 0x10)
r5 = socket$isdn_base(0x22, 0x3, 0x0)
poll(&(0x7f00000000c0)=[{r0, 0x2002}, {r0, 0xb084}, {r5, 0x8482}, {r0, 0x929d}, {r4, 0x1280}, {r0, 0x4009}, {r0, 0x100}, {r0, 0x1000}, {r0, 0x8001}], 0x9, 0x1) (async)
poll(&(0x7f00000000c0)=[{r0, 0x2002}, {r0, 0xb084}, {r5, 0x8482}, {r0, 0x929d}, {r4, 0x1280}, {r0, 0x4009}, {r0, 0x100}, {r0, 0x1000}, {r0, 0x8001}], 0x9, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040)
socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80), 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r9, 0xc040ff0b, 0x110c2300fe)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x69) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x69)
sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x10011}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x19, 0x4, 0x8, 0x8, 0x10000, 0x1, 0x3, '\x00', 0x0, r7, 0x5, 0x0, 0x0, 0x0, @void, @value, @value=r9}, 0x50)
socket$key(0xf, 0x3, 0x2) (async)
r11 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000ac0)={'syztnl2\x00', <r12=>0x0, 0x40, 0x7800, 0x1, 0x9, {{0x3b, 0x4, 0x0, 0x14, 0xec, 0x67, 0x0, 0x40, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x2c, 0xa4, 0x1, 0x7, [{@private=0xa010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4}, {@local}, {@empty, 0x7}, {@loopback, 0x7}]}, @ssrr={0x89, 0x1f, 0xdf, [@broadcast, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101, @empty]}, @timestamp_prespec={0x44, 0x2c, 0xee, 0x3, 0x5, [{@broadcast, 0x5}, {@multicast1, 0x101}, {@broadcast, 0xac35}, {@loopback, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @noop, @timestamp_addr={0x44, 0x4c, 0x14, 0x1, 0x6, [{@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e}, {@loopback, 0x4}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x2ed1}, {@rand_addr=0x64010100, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xc}]}, @generic={0x44, 0x3, 'r'}, @rr={0x7, 0xb, 0xc0, [@empty, @remote]}, @end, @generic={0x88, 0x5, "9d4475"}]}}}}})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000c40)={0x0, 0x1, 0xc5, r12, 0x7f}, 0xc)
sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x2, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x1, 0x10001, @mcast1}}]}, 0x70}, 0x1, 0x7}, 0x0) (async)
sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x2, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x1, 0x10001, @mcast1}}]}, 0x70}, 0x1, 0x7}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x2, 0x3, {0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000200)="105f909b2f36a9314f32d0db8ce8ef73d1555cbe4db4d5f553ab0c0b", 0x1c}, {&(0x7f0000000340)="433c1984cd3a52c285a8d35f76dc90835b82c0937eb87869985b1dc2e1438b6f73dc2f4f35ecd81e82d6a202def96f111d957774dbae6884b96279e936b27b43f5225c667e355d07aab6ce499abadbb72056a7bf262a14f8dd66d81a42b8909ceb6721a1fabd6092586a53ea34f600c08baef60f5e35cab4eb2d7f9da0135ded8e5bce03508aaef398e3c529de30706615fe9795420bdfa209f45c500a290c02fd6081fa61a2f929b7cd056a23da29e50a9aa056268512530e3f953073890336cfb79fb50c89f264c61b6e9b356128aea37444cdd6fdaa51ab9e6685e3b696c92e187c3d0bd071ab6605233f8e8eedc3b60f8b40ba154fce365caa44e70e", 0xfe}, {&(0x7f0000000540)="1359d7c891e8edd1968a02d56c2a1eede35bd69310a2b83571a42ffcd1fd22ec77704e6d36463a3d33d620fc10464249cab9996a8003efcbf94491bfa2345ac2c88cbfae6dda8eedf3bccbedf21c96785dd97164577e35d1b82fd8a506509462e5ca267cb638b8c476c44166ce69352b121df6bef3ef1ff69b8bb0c0163432039fe3e89dc46da9669a8de1dbfb0ad63201302251569bc343329109e42e23abd74b5d1784681941a77f964ed7d69f5051956d16c30f1ed2abb56038c2fda17509277bb3c3d7412915b3551cf0d1b3716c48e3cb09681387265b92fed4d6fab2b670aed313b7a6357bc99b5710a508612a", 0xf0}, {&(0x7f0000000640)="39c9047d53f06991b3ec0b1198464cdf0e6b7c4f6ae4a2dd05de9eb73a4ccd1f409340c8af9cbb52dc9c3db2c27fd88abc9462db0ff109a55ba70f794469158f92005953c3406e9ec512766352a95b54c8a12a353ffdca1f1ea791a72c17254b0c6243cfe199ff", 0x67}, {&(0x7f00000006c0)="f15fd392e1a6acb71a03dea418a5b5368aab16227848def51fd114e238a684f13ddc125b6253e3971271f5999e69aa2f2752c77a13be970649260be084c393563f00f98f67ae58af5e4679127b2bc3c0e644027e0b84419961f7a88099d80667738bb7723668d324a2", 0x69}, {&(0x7f0000000740)="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", 0xfe}, {&(0x7f0000000840)="00a76f9d9e9ed569f45cc3439812c7af61ab62f5c2cc07e7d49e5537f2c7e4752df13924f143fd5e9d8bf17b9fdefbf56aa052f0145b0e658b59f833012fbf26f17c206df99a2fc2d13928059f72ab901d8b0c52db3d27ec6049a64ad43ee41c05e71a7a82b652a50a42bdba1e62751c0cc6adb70152d4da5f672e9c61d715cd889264549a525a28e0ea6580feb0c37833e938c56f72c0bcf881e668da4534c74890cd4d2ace89a530811dbdffb121be77717244495e1cb92509192a7e407d282f", 0xc1}], 0x7, &(0x7f00000009c0)=[{0xb0, 0x3a, 0x0, "7388c9482d2e86310320bd6efe1dc5dc365a49059d86b6023f9f46256f4076d0199112daa710c04a3e79ad8320d9c3d4174ea157bcbf6b6ca215837c594b6609a61345f1e54caff900284c8c6f353931b0315a91d3b5bd3ce0c67fdbe87c43d34ba80984313a1e80abacb74cea38f5b25927b92a8796f3926692a724baefdb81c9982c59efab256bd09896f5db9f429e1240bee04a3a76db7501d4eed6"}, {0x18, 0x116, 0xff, "87fb"}], 0xc8}, 0x4)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

33.270074386s ago: executing program 0 (id=3909):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000014c0)=ANY=[@ANYBLOB="050000000000000069115a00000000008510000002000000850000000b00000095000000000000009500c4050000000077d8f3b423cdac8d80000000000000102be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d756751dfb265a0e3ccae669e173a649c1cfd6587d452d6453559c3421eed73d5661cfe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff050011bbecc2f4e6779af2551ce935b0f327cb3f011a7d0660d1a13ed38ae89d24e1cebfba2f87925bfacba83109751fe6c0541cd027edd68149ee99eebc677d6dd4aed4af7500d7900a63278f4e92895614cd50cbe43a1ed2526814bcf11887d8dc91dd6f469f9740bf3a73b100000000000009d27d753a3066a096e9e086cea20e0000b6670c3df2660900000000000000447c106a08893ed20fa7a050fbbef9e326e827e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada127414d0b2877ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000000000000000000000000000000000000000000000000000000000000000000005233226ee7b4de17ff24000c52f4ebf1c893bb97734a83584898eccb26f3b789cfc4cd985fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4e48f35530a0af4aac9d07713f05de969c38331973d55a17690b6f7f9ccbe44b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cfde6c25a3836978d2efa286a87f7a32417f1b825a16857aa54a859989d893ad4bf9180ca85ed3ee19843e13f642af0c90f8fca010812ccb3758ec9afe9f8db501b4061f60f06e8410c96edd9701a64657d5b3983c4ac41b154eebfe64d2c2ef1816cb11565679eb6640b32a49fd991811dfb258713624a757a6cc4fff48a27dab16ebbd8405a1abd85e0e946b9fe8e1dfa80eddb3ed496aa46b5eea7c7119f09e2d9d48a1d7367611d7c68cd1cd02074d6e38074230417d2d4424de5897bd110e6294bcfe98000bfa6e9919b956fa369d5e652e6cbe58d52990e65c6b7aac9553ca7d273d7a43e536be2f212f8788c2d1b3929f466c1ef408b2a8e71029a65f2a2f21f710acfd1b9f9ce56114a69e6f9e2861a8a56d9d604a56e2dbcd2fbe9cb4db180a145785f94b27a380dffa612eee33056cd0824374f1bf2f89de1bb4fa70d6c8000000001342faa8040807c0276b5ac9647e7491c1e21cd5bfdce4ddcc1b7f50a4a51d87fb0000000000000000000000000050b5d4375adcef4b0365e0a910a1d3ff536f18efaa6d163fbeb8c92072153d8d10f30884b8b15bf441a42935eaaef2d9a277a83fb74c00a041d97fb2f23223cc784be3f11f9992225ab0edbe92b25c5c41905583108a4b68984338a916d3ea05ecca45f99beecf56341075ed4387159b563501166f7a8abcbcd38c5852ef7f624ca8a2f91a17304a92919f66bc72534c0e197679796a667d987abea7a09d263988539b0d89bef76cac0f3d3ea4a139e108a4bdc148695a7518e425dba2b8acaa1ef7c736c88cea7c93bbc366ec3d8a5897a5e40442772784ffe1808e6335edb6fe1125c548698fcd02c74945ab7dffa618ff39fb89b633b74b5572d41dbac30051f5b263ed9a5a590d45c6eb37a059f9117a9923b4f8e78bba39b6801d2a57bea49bfe546c765d8a52a6bec46a26c022f7508ddd6c7e6161ba51408ba085fb506fd53173d1bf33d3a633568888bfc657f524a156dd54bcb16355c9a4200a7afcadff35f7e97ce8f63aa4f5686dbfab1d13128cde60a40a5721b281ee2d8f4e81c2673e159dd4d8cc11211865a9063b85dab4dc66898ff30b1116aed68403133e79abfbb29cdda78328755c282ff47ce9cbbae753da77a38a5b931cee09c8ebf7974862266f6ee2c3e19833869ba4ef05a99d851aa52d721ee9166e11e50da5ca162823d0c8f89cadac1b1d8bf9134408383104f4a20279fc249b1bfdab79878013773945056304a93179d0d3d6425eede4762b417c1ee8029af2d0b81f6aa2df229dcdaca1e97b184e267690ddd5b90999ef19b5b41d72afdd704c926d9c4a72f2886f73a9e71e5df7403ef6d965e60c938b856edfab81af093f650341de767e3b53fd000000002f764fd240d9fb6eaf864db2b58069eded19fcc4a229c72ee14d424f3d388e3c9d5af2e49f374f7915ee31a3e6c5a0ecfc4e8468d0f2955726d30eedaafc0a251335961796c1e9c2d674509c9eb1062cbe6f68a0323330edbd5224ad7b003e91d8b89e2552cb35c39d2b81addf19be15f455d592dc67f8eb0c631ca7b24d972f5fbb462367738832b7b19663f8cc2ca56e49bad4bd791a8277dfe2261265679b383ab4455fcd02d4686c4fa30d05a53b8e3a228947a16e9329bc9ce25659ad305b1f849128a573aa6fc639de8245067893278df9e1e60a5acdfea4d60415a1beafc4476bd5eaf3d55f05279b63fff168419ad0415bcc3c94f36a9ad19c8bad110eae5dac5bbd9ff33a2e0fb32b9ed37f6193fccb131d45e244479cb123140e0a3ddc39b5546f1e9534133894d95b5de60dbbbcd2936a56a8d42c275385319d11ad49ffd786d187c63a1b2f32d216655ab774d07092044fa526bbd9e7d810421d186e985edcdcd39ec406fb21f94abe57fbdd63d223778a0fd81c17ac2249eb17f1b6e81688e205b657140a77519bcc5f5e7934b724b6f80d065eaa55d017f5b4900c038cd9adbf0ed8e2b05ee372be51147728438c9f980f38293cbb470f722a2b303f9f5ca59ec778733b77a07c97f700000000200000007649cc4b6ab82e9d1cd2e0834b05b51679d5081504038ca0ef0ff01dc554548f86cd1e3eeaee4564f9345d1112ae364ed7ad4511a82fb82b0e9569ca901337058c534f891bcdc81f8756306f9223f5560000000000000000000000000000dae4f25530803f1d21b41f57b89084010334a66351d546380d71fc788a732aec27bbb888f1aee49ab7d418489d5caff0560ef4398cc005c49642366d7004a10093bf46c4d953ae9f13508e42df39e3082511f336a49423a6dfe3861cb476f7c6e0bf65b853ee2a913462ffc50fde069ae009663be77de752f2e5de736d101811d0e876d4de9485b91fd2e3950357c71766a2d663c4869ebd7c60c5aa92f44aae89cf5e4b2da7d372cb9fc486271379207f4a70d41b64d304b71fbf56a0007e2bb2807b2dcd36ad55c115d5e551dd7782f2ae7b7eebd975ce65504ea4897292fd44ae7b1262404276a5c689a8baec8148e39677719309ac73dee5679b9c49286919381caec61bed27b428cb4c861980c15637d667010b88b7fc0cd945f3d9f871e87c0d92da12e46ee2456b42fedfd4f0a4000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfdef)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r2 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000b40)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x34}}}, @hopopts={{0x18, 0x29, 0x36, {0x87}}}], 0x30}}], 0x1, 0x4c0c0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r4, 0x4, 0x0, @val=@netfilter={0x7, 0x1, 0x5, 0x1}}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x0, 0x9, 0x1, 0x8081, r0, 0x0, '\x00', 0x0, r1, 0x1, 0x2}, 0x50)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000100000085000000b600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)={0x98, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x44}, [@nested={0x84, 0xe, 0x0, 0x1, [@nested={0x80, 0x151, 0x0, 0x1, [@nested={0x60, 0x143, 0x0, 0x1, [@nested={0x4, 0x13c}, @typed={0x5, 0x1c, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0x95, 0x0, 0x1, [@nested={0x4, 0x3c}]}, @typed={0x8, 0x149, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x11, 0x100, 0x0, 0x1, [@generic='<', @typed={0xc, 0xd4, 0x0, 0x0, @str='ipvlan0\x00'}]}, @nested={0x2c, 0xfc, 0x0, 0x1, [@typed={0x8, 0x5d, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x107, 0x0, 0x0, @u32=0xe}, @typed={0xc, 0xa0, 0x0, 0x0, @u64=0x7fffffff}, @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x84}]}]}, @typed={0x8, 0xde, 0x0, 0x0, @pid}, @generic="d5938376f408f47c06aa365b797aafe2660b18ee"]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r6}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xb, &(0x7f0000000600)=@framed={{0x18, 0x2, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x2000}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94)

33.181312083s ago: executing program 3 (id=3910):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
r1 = socket$inet6(0xa, 0x80002, 0x0)
listen(r1, 0xc98e)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x6}, 0x3)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
recvmmsg(r4, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1, 0x0)
listen(0xffffffffffffffff, 0xfffffffc)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c)
listen(r5, 0xb)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001300)={{r6}, "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"})
write$tun(r6, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780001cf1935efa4155c9dd9c855941907000000b454f34b38a986846ff97921492261f348398e2b670258ed3f8c99860a6baaa00c81b9a684"], 0x36)
socket$inet6_udp(0xa, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_sctp(0x2, 0x1, 0x84)

33.134320334s ago: executing program 0 (id=3911):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r0, &(0x7f0000000140), 0x0, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000f0000000500000007000000c1000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000b9e2"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x1)
unshare(0x6a060480)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x5c, &(0x7f0000000180)={&(0x7f0000000380)=@getneightbl={0x0, 0x42, 0x400, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r7 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @random="ca0152ce1ec9"}, 0x4a, {0x2, 0x0, @private=0xa010100}, 'batadv0\x00'})
r8 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000200)={0x2, 0x2000}, 0x4)

33.125021148s ago: executing program 1 (id=3912):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0xf, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)

32.323931861s ago: executing program 1 (id=3913):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64)
unshare(0x62040200) (rerun: 64)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='syzkaller0\x00'}) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettfilter={0x44, 0x2e, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x6, 0x8}, {0xc, 0xfff1}, {0x5, 0x4}}, [{0x8, 0xb, 0x968f}, {0x8, 0xb, 0xc81}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x10000}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) (async)
sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010004) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)

31.882668694s ago: executing program 3 (id=3914):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000004c0)=""/4093, 0x0, 0x1}, 0x94)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x30, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0)

21.681943793s ago: executing program 2 (id=3915):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
close(0xffffffffffffffff) (async, rerun: 64)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async)
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffff7)

13.589018787s ago: executing program 33 (id=3911):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r0, &(0x7f0000000140), 0x0, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000f0000000500000007000000c1000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000b9e2"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x1)
unshare(0x6a060480)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x5c, &(0x7f0000000180)={&(0x7f0000000380)=@getneightbl={0x0, 0x42, 0x400, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r7 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @random="ca0152ce1ec9"}, 0x4a, {0x2, 0x0, @private=0xa010100}, 'batadv0\x00'})
r8 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000200)={0x2, 0x2000}, 0x4)

9.680374548s ago: executing program 34 (id=3913):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64)
unshare(0x62040200) (rerun: 64)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='syzkaller0\x00'}) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@gettfilter={0x44, 0x2e, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x6, 0x8}, {0xc, 0xfff1}, {0x5, 0x4}}, [{0x8, 0xb, 0x968f}, {0x8, 0xb, 0xc81}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x10000}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) (async)
sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010004) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)

4.229184343s ago: executing program 35 (id=3914):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000004c0)=""/4093, 0x0, 0x1}, 0x94)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x30, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0)

0s ago: executing program 36 (id=3915):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
close(0xffffffffffffffff) (async, rerun: 64)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async)
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffff7)

kernel console output (not intermixed with test programs):

`syz.0.2789'.
[  387.660463][T16896] 8021q: adding VLAN 0 to HW filter on device batadv1
[  387.681549][T16896] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  388.162209][T16911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2794'.
[  388.230710][T16911] netlink: 63 bytes leftover after parsing attributes in process `syz.1.2794'.
[  388.309081][T16917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2796'.
[  388.462693][ T5846] Bluetooth: hci4: command 0x0405 tx timeout
[  388.609180][T16929] netlink: 'syz.1.2797': attribute type 10 has an invalid length.
[  388.627318][T16929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2797'.
[  388.703724][T16929] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  388.766081][T16929] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  388.936260][T16943] bridge_slave_1: left allmulticast mode
[  388.970062][T16943] bridge_slave_1: left promiscuous mode
[  388.980850][T16943] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.013242][T16943] bond0: (slave bond_slave_0): Releasing backup interface
[  389.029113][T16943] bond_slave_0: left allmulticast mode
[  389.040442][T16943] bond0: (slave bond_slave_1): Releasing backup interface
[  389.051084][T16943] bond_slave_1: left allmulticast mode
[  389.086502][T16943] team0: Port device team_slave_0 removed
[  389.096631][T16943] team0: Port device team_slave_1 removed
[  389.133147][T16943] batman_adv: batadv0: Removing interface: batadv_slave_0
[  389.156999][T16943] batman_adv: batadv0: Removing interface: batadv_slave_1
[  389.221512][T16943] team0: Port device geneve0 removed
[  389.238462][T16943] tipc: Resetting bearer <eth:syzkaller0>
[  389.246985][T16943] bond4: (slave gretap1): Releasing active interface
[  389.259816][T16943] bond6: left allmulticast mode
[  389.267241][T16943] bond6: left promiscuous mode
[  389.282442][T16943] bridge0: port 1(bond6) entered disabled state
[  389.303220][T16943] bond8: (slave veth5): Releasing active interface
[  389.393091][T16921] syzkaller0 speed is unknown, defaulting to 1000
[  389.393123][T16952] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  389.422832][ T3017] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.442246][ T3017] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.469414][ T7790] syzkaller0 speed is unknown, defaulting to 1000
[  389.654332][ T3017] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.669294][ T3017] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.991484][T16923] syzkaller0 speed is unknown, defaulting to 1000
[  390.122318][T16988] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  390.132182][T16988] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  390.466234][T17007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2816'.
[  390.576010][T17007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2816'.
[  390.595098][T17010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2816'.
[  390.791629][T16972] syzkaller0 speed is unknown, defaulting to 1000
[  392.088942][T17033] __nla_validate_parse: 1 callbacks suppressed
[  392.088965][T17033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2821'.
[  392.289517][T17033] 8021q: adding VLAN 0 to HW filter on device bond0
[  392.679721][T17039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2822'.
[  392.848818][T17055] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2828'.
[  392.862346][T17055] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2828'.
[  392.923776][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2829'.
[  392.949667][T17064] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  392.997142][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2829'.
[  393.039231][T17072] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  393.095279][T17072] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.237831][T17079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2826'.
[  393.266598][T17077] dvmrp1: left allmulticast mode
[  393.319962][T17064] syzkaller0 speed is unknown, defaulting to 1000
[  393.375934][T17072] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  393.394233][T17072] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.503648][T17072] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  393.529801][T17072] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.787654][T17072] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  393.814508][T17072] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.044835][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  394.064094][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  394.205918][   T63] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  394.233701][T17105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2839'.
[  394.242649][   T63] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  394.296298][   T63] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  394.306096][   T63] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  394.362785][T17105] vxcan3: entered allmulticast mode
[  394.424484][   T63] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  394.436808][   T63] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  394.648488][T17110] netlink: 'syz.4.2841': attribute type 1 has an invalid length.
[  394.668043][T17110] netlink: 'syz.4.2841': attribute type 1 has an invalid length.
[  394.900958][T17101] syzkaller0 speed is unknown, defaulting to 1000
[  395.536871][T17114] syzkaller0 speed is unknown, defaulting to 1000
[  395.811322][T17148] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2850'.
[  395.861487][T17154] vcan0: entered promiscuous mode
[  395.990186][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2850'.
[  396.128636][T17164] netlink: 'syz.2.2853': attribute type 11 has an invalid length.
[  396.980471][T17208] netlink: 'syz.2.2867': attribute type 11 has an invalid length.
[  396.999588][T17208] netlink: 'syz.2.2867': attribute type 5 has an invalid length.
[  397.037995][T17210] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  397.154822][T17215] __nla_validate_parse: 7 callbacks suppressed
[  397.154844][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2869'.
[  397.370127][T17220] netlink: 'syz.4.2871': attribute type 16 has an invalid length.
[  397.401267][T17220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2871'.
[  397.430669][T17228] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2874'.
[  397.506516][T17224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'.
[  398.093125][T17251] vxcan6: entered promiscuous mode
[  398.216172][ T5841] syz_tun (unregistering): left allmulticast mode
[  398.234870][ T5841] bond0: (slave syz_tun): Releasing backup interface
[  398.340519][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  398.355158][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  398.364223][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  398.418316][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  398.431042][T17258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2881'.
[  398.443469][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  398.584703][T17255] syzkaller0 speed is unknown, defaulting to 1000
[  398.650325][T17261] netlink: 'syz.0.2882': attribute type 1 has an invalid length.
[  398.675799][T17261] netlink: 'syz.0.2882': attribute type 1 has an invalid length.
[  399.185185][T17270] syzkaller0 speed is unknown, defaulting to 1000
[  399.791392][T17286] syzkaller0 speed is unknown, defaulting to 1000
[  400.377366][T17300] netlink: 'syz.3.2891': attribute type 5 has an invalid length.
[  400.474496][T17255] chnl_net:caif_netlink_parms(): no params data found
[  400.543310][ T5157] Bluetooth: hci2: command tx timeout
[  400.650632][T17320] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2895'.
[  400.754126][T17311] syzkaller0 speed is unknown, defaulting to 1000
[  400.940063][T17255] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.962554][T17255] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.969908][T17255] bridge_slave_0: entered allmulticast mode
[  401.011539][T17255] bridge_slave_0: entered promiscuous mode
[  401.268158][T17255] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.289180][T17255] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.298613][T17255] bridge_slave_1: entered allmulticast mode
[  401.321210][T17255] bridge_slave_1: entered promiscuous mode
[  401.410451][T17338] syz_tun: entered allmulticast mode
[  401.446473][T17341] dvmrp8: entered allmulticast mode
[  401.494541][T17339] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2898'.
[  401.575464][T17255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  401.606151][T17336] netlink: 'syz.0.2897': attribute type 23 has an invalid length.
[  401.626402][T17255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  401.642968][T17338] syzkaller0 speed is unknown, defaulting to 1000
[  401.679260][T17345] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2899'.
[  401.779928][T17255] team0: Port device team_slave_0 added
[  401.790001][T17255] team0: Port device team_slave_1 added
[  401.931457][T17255] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.950122][T17255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  401.977618][T17255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  402.034782][T17255] batman_adv: batadv0: Adding interface: batadv_slave_1
[  402.041885][T17255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  402.069195][T17255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.093849][T17333] syz_tun: left allmulticast mode
[  402.099044][T17333] dvmrp8: left allmulticast mode
[  402.187089][T17362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2903'.
[  402.211202][T17362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2903'.
[  402.326486][T17371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2903'.
[  402.379942][T17362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2903'.
[  402.408617][T17362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2903'.
[  402.485124][T17377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2907'.
[  402.537509][T17255] hsr_slave_0: entered promiscuous mode
[  402.552919][T17255] hsr_slave_1: entered promiscuous mode
[  402.618107][T17377] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2907'.
[  402.628668][ T5157] Bluetooth: hci2: command tx timeout
[  402.639143][T17380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2908'.
[  402.651683][T17380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2908'.
[  402.701772][T17362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2903'.
[  402.890756][T17386] pimreg: entered allmulticast mode
[  402.897344][T17386] pimreg: left allmulticast mode
[  403.008595][T17397] syzkaller0 speed is unknown, defaulting to 1000
[  403.398690][T17255] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  403.423838][T17255] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.511735][T17425] netlink: 'syz.1.2917': attribute type 11 has an invalid length.
[  403.547271][T17429] netlink: 'syz.0.2919': attribute type 4 has an invalid length.
[  403.568580][T17255] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  403.583540][T17255] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.708316][T17255] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  403.741204][T17255] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.850917][T17255] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  403.893090][T17255] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.009091][T17445] 8021q: adding VLAN 0 to HW filter on device bond7
[  404.388278][T17255] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  404.439738][T17255] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  404.507824][T17255] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  404.539808][T17255] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  404.704549][ T5157] Bluetooth: hci2: command tx timeout
[  404.841870][T17255] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.910403][T17255] 8021q: adding VLAN 0 to HW filter on device team0
[  404.964372][ T4779] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.971609][ T4779] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.993728][T17521] netlink: 'syz.0.2938': attribute type 1 has an invalid length.
[  405.002077][ T4779] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.009319][ T4779] bridge0: port 2(bridge_slave_1) entered forwarding state
[  405.102278][T17523] wg1 speed is unknown, defaulting to 1000
[  405.127200][T17523] wg1 speed is unknown, defaulting to 1000
[  405.140015][T17523] wg1 speed is unknown, defaulting to 1000
[  405.250049][T17523] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  405.250114][T17527] syzkaller0 speed is unknown, defaulting to 1000
[  405.286050][T17523] wg1 speed is unknown, defaulting to 1000
[  405.295007][T17523] wg1 speed is unknown, defaulting to 1000
[  405.303926][T17523] wg1 speed is unknown, defaulting to 1000
[  405.313906][T17523] wg1 speed is unknown, defaulting to 1000
[  405.324280][T17523] wg1 speed is unknown, defaulting to 1000
[  405.343586][T17523] wg1 speed is unknown, defaulting to 1000
[  405.351489][T17523] wg1 speed is unknown, defaulting to 1000
[  405.455562][T17533] syzkaller0 speed is unknown, defaulting to 1000
[  405.527404][T17533] wg1 speed is unknown, defaulting to 1000
[  406.042470][T17255] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.205668][T17255] veth0_vlan: entered promiscuous mode
[  406.342911][T17255] veth1_vlan: entered promiscuous mode
[  406.464252][T17255] veth0_macvtap: entered promiscuous mode
[  406.481464][T17255] veth1_macvtap: entered promiscuous mode
[  406.535522][T17255] batman_adv: batadv0: Interface activated: batadv_slave_0
[  406.605273][T17255] batman_adv: batadv0: Interface activated: batadv_slave_1
[  406.647625][ T3017] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.686694][ T3017] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.711441][ T3017] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.730665][ T3017] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.783019][ T5157] Bluetooth: hci2: command tx timeout
[  406.928637][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.949067][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  406.997805][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.007056][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.024233][T10000] IPVS: ip_vs_send_async error -101
[  407.336497][T17599] syzkaller0 speed is unknown, defaulting to 1000
[  407.345744][T17602] __nla_validate_parse: 9 callbacks suppressed
[  407.345763][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2959'.
[  407.364173][T17599] wg1 speed is unknown, defaulting to 1000
[  407.394933][T17600] macsec1: entered promiscuous mode
[  407.400228][T17600] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  407.422269][T17600] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  408.004516][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  408.015667][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  408.038326][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  408.052288][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  408.067839][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  408.249793][T17620] syzkaller0 speed is unknown, defaulting to 1000
[  408.288451][T17633] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2969'.
[  408.299941][T17633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2969'.
[  408.309677][T17635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2970'.
[  408.354381][T17620] wg1 speed is unknown, defaulting to 1000
[  408.527651][T17638] team_slave_0: entered promiscuous mode
[  408.533854][T17638] team_slave_1: entered promiscuous mode
[  408.554626][T17638] macsec1: entered promiscuous mode
[  408.559929][T17638] team0: entered promiscuous mode
[  408.568980][T17638] team0: Device macsec1 is already an upper device of the team interface
[  408.584045][T17638] team0: left promiscuous mode
[  408.587567][T17645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2973'.
[  408.599929][T17638] team_slave_0: left promiscuous mode
[  408.605512][T17638] team_slave_1: left promiscuous mode
[  408.969664][ T1146] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  409.006609][ T1146] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.074858][T17657] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2976'.
[  409.135219][ T1146] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  409.149748][T17662] netlink: 'syz.4.2977': attribute type 1 has an invalid length.
[  409.158529][ T1146] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.262099][T17662] 8021q: adding VLAN 0 to HW filter on device bond9
[  409.278053][ T1146] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  409.290740][ T1146] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.374819][T17665] 8021q: adding VLAN 0 to HW filter on device bond9
[  409.382168][T17665] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address
[  409.414677][T17665] bond9: (slave vxcan1): Error -95 calling set_mac_address
[  409.529106][T17662] veth7: entered promiscuous mode
[  409.548342][T17662] bond9: (slave veth7): Enslaving as an active interface with a down link
[  409.611167][ T1146] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  409.630290][ T1146] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.673384][T17620] chnl_net:caif_netlink_parms(): no params data found
[  409.720680][T17660] syzkaller0 speed is unknown, defaulting to 1000
[  409.808884][T17660] wg1 speed is unknown, defaulting to 1000
[  410.035062][T17691] netlink: 'syz.0.2983': attribute type 4 has an invalid length.
[  410.053921][T17691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2983'.
[  410.138506][T17620] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.149545][T17620] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.153870][ T5157] Bluetooth: hci5: command tx timeout
[  410.158002][T17620] bridge_slave_0: entered allmulticast mode
[  410.170727][T17620] bridge_slave_0: entered promiscuous mode
[  410.230176][T17620] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.241518][T17620] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.250431][T17620] bridge_slave_1: entered allmulticast mode
[  410.262961][T17620] bridge_slave_1: entered promiscuous mode
[  410.301254][ T1146] batman_adv: batadv0: Interface deactivated: vxlan0
[  410.646758][ T1146] dvmrp1 (unregistering): left allmulticast mode
[  410.680962][ T1146] bond5 (unregistering): (slave geneve2): Releasing active interface
[  410.748192][ T1146] batman_adv: batadv0: Removing interface: vxlan0
[  411.200108][ T1146] bond0 (unregistering): Released all slaves
[  411.216173][ T1146] bond1 (unregistering): Released all slaves
[  411.380700][ T1146] bond2 (unregistering): Released all slaves
[  411.541750][ T1146] bond3 (unregistering): Released all slaves
[  411.693534][ T1146] bond4 (unregistering): (slave vcan1): Releasing backup interface
[  411.702863][ T1146] bond4 (unregistering): Released all slaves
[  411.850904][ T1146] bond5 (unregistering): Released all slaves
[  411.998562][ T1146] bond6 (unregistering): (slave veth5): Releasing active interface
[  412.009072][ T1146] bond6 (unregistering): Released all slaves
[  412.025559][ T1146] bond7 (unregistering): Released all slaves
[  412.197412][ T1146] bond8 (unregistering): Released all slaves
[  412.233510][ T5157] Bluetooth: hci5: command tx timeout
[  412.348573][ T1146] bond9 (unregistering): (slave wireguard0): Releasing backup interface
[  412.357581][ T1146] wireguard0: left promiscuous mode
[  412.365011][ T1146] bond9 (unregistering): Released all slaves
[  412.424144][T17698] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2985'.
[  412.434996][T17698] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2985'.
[  412.521593][T17620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.580589][ T1146] tipc: Disabling bearer <udp:syz2>
[  412.589269][ T1146] tipc: Disabling bearer <udp:syz0>
[  412.608351][ T1146] tipc: Left network mode
[  412.619675][T17620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  412.771048][ T1146] IPVS: stopping master sync thread 10000 ...
[  413.064766][T17620] team0: Port device team_slave_0 added
[  413.087091][T17620] team0: Port device team_slave_1 added
[  413.252006][T17620] batman_adv: batadv0: Adding interface: batadv_slave_0
[  413.260203][T17620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  413.298399][T17620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  413.362938][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2993'.
[  413.454489][T17620] batman_adv: batadv0: Adding interface: batadv_slave_1
[  413.462214][T17620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  413.492139][T17620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  413.503785][T17735] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  413.564425][ T1146] hsr_slave_0: left promiscuous mode
[  413.573266][ T1146] hsr_slave_1: left promiscuous mode
[  413.579882][ T1146] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  413.588193][ T1146] batman_adv: batadv0: Removing interface: virt_wifi0
[  413.690557][ T1146] hsr0: left allmulticast mode
[  413.774636][T17745] netlink: 'syz.0.2997': attribute type 1 has an invalid length.
[  413.797944][T17745] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2997'.
[  413.815989][ T1146] pim6reg (unregistering): left allmulticast mode
[  413.866268][T17747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2996'.
[  414.322623][ T5157] Bluetooth: hci5: command tx timeout
[  415.096338][T17760] IPv6: Can't replace route, no match found
[  415.116461][T17620] hsr_slave_0: entered promiscuous mode
[  415.126838][T17620] hsr_slave_1: entered promiscuous mode
[  415.134291][T17620] debugfs: 'hsr0' already exists in 'hsr'
[  415.151213][T17620] Cannot create hsr debugfs directory
[  415.344531][T17770] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3003'.
[  415.403934][T17766] tipc: Resetting bearer <eth:syzkaller0>
[  415.456291][T17770] erspan0: entered promiscuous mode
[  415.951132][T17790] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7
[  416.024641][ T1146] IPVS: stop unused estimator thread 0...
[  416.383071][ T5157] Bluetooth: hci5: command tx timeout
[  416.487037][T17797] syzkaller0 speed is unknown, defaulting to 1000
[  416.510225][T17797] wg1 speed is unknown, defaulting to 1000
[  416.660857][T17811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3014'.
[  416.686197][T17812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3013'.
[  416.746112][T17814] netlink: 'syz.1.3014': attribute type 17 has an invalid length.
[  416.785336][T17811] netlink: 'syz.1.3014': attribute type 17 has an invalid length.
[  416.798340][T17620] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  416.807988][T17814] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3014'.
[  416.820965][T17811] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3014'.
[  416.875427][T17620] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  417.018453][T17620] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  417.047741][T17828] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  417.078344][T17620] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  417.558361][T17620] 8021q: adding VLAN 0 to HW filter on device bond0
[  417.633654][T17620] 8021q: adding VLAN 0 to HW filter on device team0
[  417.713647][ T4779] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.720838][ T4779] bridge0: port 1(bridge_slave_0) entered forwarding state
[  417.740141][T17864] __nla_validate_parse: 5 callbacks suppressed
[  417.740162][T17864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3021'.
[  417.776360][ T4779] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.783730][ T4779] bridge0: port 2(bridge_slave_1) entered forwarding state
[  417.908133][T17872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3025'.
[  417.947768][   T30] audit: type=1800 audit(1759538509.192:12): pid=17854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3021" name="memory.events" dev="tmpfs" ino=2994 res=0 errno=0
[  417.995230][T17620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  418.056919][T17877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3026'.
[  418.446030][T17897] netlink: 'syz.2.3031': attribute type 4 has an invalid length.
[  418.498162][T17889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3030'.
[  418.586116][T17904] netlink: 'syz.4.3033': attribute type 5 has an invalid length.
[  418.614392][T17620] 8021q: adding VLAN 0 to HW filter on device batadv0
[  418.654878][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3033'.
[  418.737668][T17620] veth0_vlan: entered promiscuous mode
[  418.760109][T17620] veth1_vlan: entered promiscuous mode
[  418.842392][T17620] veth0_macvtap: entered promiscuous mode
[  418.875806][T17620] veth1_macvtap: entered promiscuous mode
[  418.928913][T17620] batman_adv: batadv0: Interface activated: batadv_slave_0
[  418.956152][T17620] batman_adv: batadv0: Interface activated: batadv_slave_1
[  418.978041][ T1146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.994540][ T1146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.004979][ T1146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.018303][T17915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3037'.
[  419.034282][ T1146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  419.044220][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3037'.
[  419.059085][T17915] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3037'.
[  419.097788][T17915] netlink: 'syz.0.3037': attribute type 3 has an invalid length.
[  419.107574][T17915] netlink: 'syz.0.3037': attribute type 2 has an invalid length.
[  419.169668][T17915] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3037'.
[  419.200000][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.209175][T17915] netlink: 'syz.0.3037': attribute type 2 has an invalid length.
[  419.238207][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.304764][T17918] netlink: 'syz.2.3038': attribute type 21 has an invalid length.
[  419.325794][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.326651][T17918] netlink: 'syz.2.3038': attribute type 1 has an invalid length.
[  419.355878][T17918] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3038'.
[  419.365026][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.527731][T17926] netlink: 'syz.2.3042': attribute type 1 has an invalid length.
[  419.795927][T17934] syzkaller0 speed is unknown, defaulting to 1000
[  419.822647][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  419.875339][T17934] wg1 speed is unknown, defaulting to 1000
[  419.883694][T17935] syzkaller0 speed is unknown, defaulting to 1000
[  419.917496][T17935] wg1 speed is unknown, defaulting to 1000
[  420.324824][T17947] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.358994][T17947] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  420.391113][T17947] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  420.448514][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  420.472897][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  420.481941][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  420.491580][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  420.500941][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  420.661964][T17947] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.672793][T17947] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  420.687809][T17947] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  420.785185][T17947] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.812183][T17947] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  420.823176][T17947] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  420.849917][T17951] syzkaller0 speed is unknown, defaulting to 1000
[  420.869091][T17951] wg1 speed is unknown, defaulting to 1000
[  420.891346][T17947] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.903918][T17947] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  420.914472][T17947] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  421.089375][ T1146] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  421.110824][ T1146] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  421.121211][ T1146] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  421.138860][ T4779] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  421.147780][ T4779] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  421.156924][ T4779] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  421.245853][ T4779] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  421.254813][ T4779] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  421.267262][ T4779] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  421.337866][ T4779] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  421.358647][ T4779] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  421.370914][ T4779] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  421.496541][T17951] chnl_net:caif_netlink_parms(): no params data found
[  421.654695][T17980] tipc: Started in network mode
[  421.660025][T17980] tipc: Node identity aead4001632e, cluster identity 4711
[  421.684508][T17980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  421.717158][T17990] syzkaller0: entered promiscuous mode
[  421.725603][T17990] syzkaller0: entered allmulticast mode
[  421.846292][T17980] tipc: Resetting bearer <eth:syzkaller0>
[  421.887724][T17979] tipc: Resetting bearer <eth:syzkaller0>
[  422.014242][T17979] tipc: Disabling bearer <eth:syzkaller0>
[  422.039473][T17951] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.062979][T17951] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.081013][T17951] bridge_slave_0: entered allmulticast mode
[  422.095051][T17951] bridge_slave_0: entered promiscuous mode
[  422.116454][T17951] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.138159][T17951] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.163832][T17951] bridge_slave_1: entered allmulticast mode
[  422.182628][T17951] bridge_slave_1: entered promiscuous mode
[  422.282069][T17951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  422.321308][T17951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.458757][T17951] team0: Port device team_slave_0 added
[  422.483536][T17951] team0: Port device team_slave_1 added
[  422.543869][ T5846] Bluetooth: hci0: command tx timeout
[  422.604472][T18029] validate_nla: 67 callbacks suppressed
[  422.604493][T18029] netlink: 'syz.2.3066': attribute type 1 has an invalid length.
[  422.637697][T17951] batman_adv: batadv0: Adding interface: batadv_slave_0
[  422.645633][T17951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  422.681993][T17951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  422.697017][T18022] netlink: 'syz.2.3066': attribute type 1 has an invalid length.
[  422.723385][T17951] batman_adv: batadv0: Adding interface: batadv_slave_1
[  422.730621][T17951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  422.761433][T17951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  422.925805][T17951] hsr_slave_0: entered promiscuous mode
[  422.937010][T17951] hsr_slave_1: entered promiscuous mode
[  422.945766][T17951] debugfs: 'hsr0' already exists in 'hsr'
[  422.951559][T17951] Cannot create hsr debugfs directory
[  423.021261][T18040] __nla_validate_parse: 7 callbacks suppressed
[  423.021284][T18040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3070'.
[  423.053932][T18042] netlink: 'syz.3.3072': attribute type 2 has an invalid length.
[  423.092189][T18044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3071'.
[  423.166329][T18040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3070'.
[  423.434443][T18054] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  423.640456][T18068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3078'.
[  423.693231][T18068] 8021q: adding VLAN 0 to HW filter on device bond10
[  423.749256][T18075] 8021q: adding VLAN 0 to HW filter on device bond10
[  423.763786][T18075] bond10: (slave sit4): The slave device specified does not support setting the MAC address
[  423.776490][T18075] bond10: (slave sit4): Error -95 calling set_mac_address
[  424.295887][T17951] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  424.326379][T18107] netlink: 'syz.2.3087': attribute type 1 has an invalid length.
[  424.330761][T17951] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  424.350119][T17951] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  424.384601][T18107] 8021q: adding VLAN 0 to HW filter on device bond1
[  424.395267][T18110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3088'.
[  424.446474][T18107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3087'.
[  424.463964][T17951] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  424.492853][T18109] bond1: (slave geneve2): making interface the new active one
[  424.504076][T18109] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  424.520316][T18104] syzkaller0 speed is unknown, defaulting to 1000
[  424.540801][T18104] wg1 speed is unknown, defaulting to 1000
[  424.623122][ T5846] Bluetooth: hci0: command tx timeout
[  424.781422][T18128] netlink: 'syz.4.3092': attribute type 1 has an invalid length.
[  424.841713][T18128] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3092'.
[  425.128104][T17951] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.197877][T17951] 8021q: adding VLAN 0 to HW filter on device team0
[  425.257998][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.265350][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state
[  425.327883][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.335183][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state
[  425.930477][T18162] syzkaller0 speed is unknown, defaulting to 1000
[  425.996753][T18162] wg1 speed is unknown, defaulting to 1000
[  426.081955][T18173] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3099'.
[  426.157120][T18173] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3099'.
[  426.165539][T18175] bridge6: entered promiscuous mode
[  426.171726][T18175] bridge6: entered allmulticast mode
[  426.211239][T18173] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3099'.
[  426.285058][T18175] bridge7: entered promiscuous mode
[  426.291207][T18175] bridge7: entered allmulticast mode
[  426.344350][T18178] netlink: 'syz.1.3100': attribute type 3 has an invalid length.
[  426.434758][T18175] bridge8: entered promiscuous mode
[  426.444651][T18175] bridge8: entered allmulticast mode
[  426.484126][T18175] bridge9: entered promiscuous mode
[  426.489529][T18175] bridge9: entered allmulticast mode
[  426.524850][T18175] bridge10: entered promiscuous mode
[  426.530327][T18175] bridge10: entered allmulticast mode
[  426.630407][T18175] bridge11: entered promiscuous mode
[  426.639534][T18175] bridge11: entered allmulticast mode
[  426.680856][T18175] bridge12: entered promiscuous mode
[  426.699971][T18175] bridge12: entered allmulticast mode
[  426.707632][ T5846] Bluetooth: hci0: command tx timeout
[  426.800259][T18175] bridge13: entered promiscuous mode
[  426.808456][T18175] bridge13: entered allmulticast mode
[  426.874967][T18175] bridge14: entered promiscuous mode
[  426.884318][T18193] openvswitch: netlink: Flow actions attr not present in new flow.
[  426.895377][T18175] bridge14: entered allmulticast mode
[  426.910809][T17951] 8021q: adding VLAN 0 to HW filter on device batadv0
[  427.019162][T18191] netlink: 'syz.2.3103': attribute type 4 has an invalid length.
[  427.070878][T18197] veth9: entered promiscuous mode
[  427.098196][T18199] netlink: 'syz.1.3106': attribute type 21 has an invalid length.
[  427.121306][T18199] netlink: 'syz.1.3106': attribute type 5 has an invalid length.
[  427.208134][T17951] veth0_vlan: entered promiscuous mode
[  427.262128][T17951] veth1_vlan: entered promiscuous mode
[  427.513966][T18213] sctp: [Deprecated]: syz.2.3110 (pid 18213) Use of int in max_burst socket option.
[  427.513966][T18213] Use struct sctp_assoc_value instead
[  427.523756][T17951] veth0_macvtap: entered promiscuous mode
[  427.550738][T18214] wg1: entered promiscuous mode
[  427.556073][T18214] wg1: entered allmulticast mode
[  427.574972][T17951] veth1_macvtap: entered promiscuous mode
[  427.779456][T17951] batman_adv: batadv0: Interface activated: batadv_slave_0
[  427.847118][T17951] batman_adv: batadv0: Interface activated: batadv_slave_1
[  427.949470][   T63] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.981520][   T63] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  428.049428][   T63] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  428.081369][   T63] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  428.333745][T18225] syzkaller0 speed is unknown, defaulting to 1000
[  428.427048][T18225] wg1 speed is unknown, defaulting to 1000
[  428.555027][T18235] __nla_validate_parse: 42 callbacks suppressed
[  428.555047][T18235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3116'.
[  428.784005][ T5846] Bluetooth: hci0: command tx timeout
[  428.841621][T18238] syzkaller0 speed is unknown, defaulting to 1000
[  428.849891][ T4779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.858692][ T4779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.932603][T18238] wg1 speed is unknown, defaulting to 1000
[  429.041649][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.060761][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.130766][T18248] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3117'.
[  429.310738][T18254] tipc: MTU too low for tipc bearer
[  429.370315][T18254] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  429.420125][T18254] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  429.691471][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3121'.
[  429.865816][T18268] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  430.188223][T18280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3125'.
[  430.476055][ T5157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  430.497184][ T5157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  430.506474][ T5157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  430.519540][ T5157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  430.530403][ T5157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  430.792219][T18289] syzkaller0 speed is unknown, defaulting to 1000
[  430.815035][T18289] wg1 speed is unknown, defaulting to 1000
[  431.099721][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3132'.
[  431.109602][T18303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3132'.
[  431.119308][T18303] netlink: 'syz.2.3132': attribute type 18 has an invalid length.
[  431.128078][T18303] netlink: 'syz.2.3132': attribute type 18 has an invalid length.
[  431.431817][T18289] chnl_net:caif_netlink_parms(): no params data found
[  431.610561][T18321] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  431.651034][T18322] netlink: 'syz.3.3138': attribute type 1 has an invalid length.
[  431.661880][T18322] netlink: 'syz.3.3138': attribute type 1 has an invalid length.
[  431.691217][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3141'.
[  431.719782][T18334] bridge1: entered allmulticast mode
[  431.785657][T18334] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3141'.
[  431.811199][T18326] syzkaller0 speed is unknown, defaulting to 1000
[  431.826627][T18289] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.844906][T18289] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.856815][T18289] bridge_slave_0: entered allmulticast mode
[  431.874853][T18289] bridge_slave_0: entered promiscuous mode
[  431.895066][T18326] wg1 speed is unknown, defaulting to 1000
[  431.897581][T18289] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.924050][T18289] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.932149][T18289] bridge_slave_1: entered allmulticast mode
[  431.945420][T18289] bridge_slave_1: entered promiscuous mode
[  432.250964][T18289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  432.290395][T18289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  432.445944][T18364] netlink: 'syz.2.3149': attribute type 21 has an invalid length.
[  432.454787][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3149'.
[  432.467753][T18289] team0: Port device team_slave_0 added
[  432.481752][T18289] team0: Port device team_slave_1 added
[  432.567639][T18289] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.570463][T18369] atomic_op ffff88802f993998 conn xmit_atomic 0000000000000000
[  432.583208][T18289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.583247][T18289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  432.587694][T18289] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.634470][ T5846] Bluetooth: hci1: command tx timeout
[  432.641931][T18289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.669704][T18289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  432.705101][T18369] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3151'.
[  432.801724][T18289] hsr_slave_0: entered promiscuous mode
[  432.823747][T18289] hsr_slave_1: entered promiscuous mode
[  432.832190][T18289] debugfs: 'hsr0' already exists in 'hsr'
[  432.842051][T18289] Cannot create hsr debugfs directory
[  433.356683][T18398] openvswitch: netlink: Message has 4 unknown bytes.
[  433.381218][T18399] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  433.417938][T18289] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  433.433988][T18289] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  433.444786][T18289] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  433.609880][T18289] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  433.623550][T18289] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  433.653290][T18289] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  433.765148][T18417] __nla_validate_parse: 5 callbacks suppressed
[  433.765167][T18417] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3165'.
[  433.815712][T18289] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  433.852470][T18289] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  433.883334][T18289] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  434.048064][T18424] syzkaller0 speed is unknown, defaulting to 1000
[  434.067276][T18289] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  434.083400][T18289] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  434.101706][T18433] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  434.112995][T18289] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  434.271509][T18424] wg1 speed is unknown, defaulting to 1000
[  434.703306][ T5846] Bluetooth: hci1: command tx timeout
[  434.841949][T18289] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  434.888302][T18289] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  434.915800][T18289] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  434.952274][T18289] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  435.227403][T18289] 8021q: adding VLAN 0 to HW filter on device bond0
[  435.258209][T18289] 8021q: adding VLAN 0 to HW filter on device team0
[  435.359454][ T4779] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.366742][ T4779] bridge0: port 1(bridge_slave_0) entered forwarding state
[  435.422251][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.429572][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.536896][T18496] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3183'.
[  435.891595][T18496] syzkaller1: entered promiscuous mode
[  435.911933][T18496] syzkaller1: entered allmulticast mode
[  435.930226][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3183'.
[  435.941352][T18504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3185'.
[  435.955040][T18504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3185'.
[  436.420335][T18533] hsr0: entered promiscuous mode
[  436.453373][T18533] macsec1: entered allmulticast mode
[  436.476883][T18533] hsr0: entered allmulticast mode
[  436.512449][T18533] hsr_slave_0: entered allmulticast mode
[  436.528546][T18533] hsr_slave_1: entered allmulticast mode
[  436.564189][T18536] can: request_module (can-proto-0) failed.
[  436.576944][T18534] syzkaller0 speed is unknown, defaulting to 1000
[  436.594124][T18534] wg1 speed is unknown, defaulting to 1000
[  436.786379][ T5846] Bluetooth: hci1: command tx timeout
[  436.924219][T18289] 8021q: adding VLAN 0 to HW filter on device batadv0
[  436.961147][T18552] netlink: 'syz.4.3197': attribute type 1 has an invalid length.
[  437.151704][T18289] veth0_vlan: entered promiscuous mode
[  437.186817][T18561] syzkaller0 speed is unknown, defaulting to 1000
[  437.199040][T18289] veth1_vlan: entered promiscuous mode
[  437.220938][T18561] wg1 speed is unknown, defaulting to 1000
[  437.437616][T18575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3205'.
[  437.517365][T18289] veth0_macvtap: entered promiscuous mode
[  437.552293][T18289] veth1_macvtap: entered promiscuous mode
[  437.590368][T18579] netlink: zone id is out of range
[  437.596462][T18579] netlink: del zone limit has 8 unknown bytes
[  437.670621][T18586] netlink: 'syz.2.3206': attribute type 3 has an invalid length.
[  437.689414][T18586] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3206'.
[  437.700485][T18586] nbd: couldn't find a device at index 0
[  437.771509][T18289] batman_adv: batadv0: Interface activated: batadv_slave_0
[  437.808938][T18289] batman_adv: batadv0: Interface activated: batadv_slave_1
[  437.888103][ T2993] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  437.915659][ T2993] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  437.946626][ T2993] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  437.977601][ T2993] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.173522][T18601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3211'.
[  438.419427][T18592] syzkaller0 speed is unknown, defaulting to 1000
[  438.465551][T18601] bridge_slave_1: left allmulticast mode
[  438.541903][T18601] bridge_slave_1: left promiscuous mode
[  438.573469][T18601] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.591067][T18601] bridge_slave_0: left allmulticast mode
[  438.597328][T18601] bridge_slave_0: left promiscuous mode
[  438.613351][T18601] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.865525][ T5846] Bluetooth: hci1: command tx timeout
[  438.957176][T18592] wg1 speed is unknown, defaulting to 1000
[  438.964285][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.972134][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.074892][T18593] syzkaller0 speed is unknown, defaulting to 1000
[  439.076069][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.107927][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.176612][T18593] wg1 speed is unknown, defaulting to 1000
[  440.482320][T18647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3224'.
[  440.680512][T18658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3227'.
[  440.814182][T18658] 8021q: adding VLAN 0 to HW filter on device bond1
[  440.894551][T18658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3227'.
[  440.957564][ T5157] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  440.969180][ T5157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  440.978702][ T5157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  440.989002][ T5157] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  441.004032][ T5157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  441.007024][T18658] macsec2: entered promiscuous mode
[  441.040369][T18658] bond1: entered promiscuous mode
[  441.050287][T18658] macsec2: entered allmulticast mode
[  441.056943][T18658] bond1: entered allmulticast mode
[  441.065956][T18658] bond1: left allmulticast mode
[  441.071097][T18658] bond1: left promiscuous mode
[  441.135208][T18673] syzkaller0 speed is unknown, defaulting to 1000
[  441.147037][T18673] wg1 speed is unknown, defaulting to 1000
[  441.243859][T18681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3232'.
[  441.490811][T18688] syzkaller0 speed is unknown, defaulting to 1000
[  441.500378][T18688] wg1 speed is unknown, defaulting to 1000
[  441.587946][T18693] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3233'.
[  441.748437][T18673] chnl_net:caif_netlink_parms(): no params data found
[  441.868357][T18703] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3237'.
[  441.938201][T18673] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.947595][T18673] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.955458][T18673] bridge_slave_0: entered allmulticast mode
[  441.967169][T18673] bridge_slave_0: entered promiscuous mode
[  441.976770][T18705] syzkaller0 speed is unknown, defaulting to 1000
[  441.993537][T18705] wg1 speed is unknown, defaulting to 1000
[  442.000774][T18673] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.008317][T18673] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.017250][T18673] bridge_slave_1: entered allmulticast mode
[  442.027357][T18673] bridge_slave_1: entered promiscuous mode
[  442.114995][T18710] netlink: 'syz.2.3239': attribute type 16 has an invalid length.
[  442.134035][T18673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  442.195257][T18673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  442.301699][T18673] team0: Port device team_slave_0 added
[  442.361722][T18714] tipc: Started in network mode
[  442.369410][T18714] tipc: Node identity ce8a7bf287ac, cluster identity 4711
[  442.378335][T18714] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  442.386333][T18711] netlink: 'syz.0.3238': attribute type 1 has an invalid length.
[  442.465537][T18673] team0: Port device team_slave_1 added
[  442.539871][T18673] batman_adv: batadv0: Adding interface: batadv_slave_0
[  442.562310][T18673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  442.600733][T18673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  442.670168][T18673] batman_adv: batadv0: Adding interface: batadv_slave_1
[  442.679373][T18673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  442.752420][T18673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  442.890876][T18733] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  443.010797][T18673] hsr_slave_0: entered promiscuous mode
[  443.018831][T18673] hsr_slave_1: entered promiscuous mode
[  443.034633][T18673] debugfs: 'hsr0' already exists in 'hsr'
[  443.040434][T18673] Cannot create hsr debugfs directory
[  443.086223][T18715] tipc: Disabling bearer <eth:syzkaller0>
[  443.104637][ T5157] Bluetooth: hci3: command tx timeout
[  443.178389][T18741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3245'.
[  443.192281][T18741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3245'.
[  443.309400][T18738] vlan2: entered promiscuous mode
[  443.324719][T18738] geneve1: entered promiscuous mode
[  443.330227][T18738] vlan2: entered allmulticast mode
[  443.336238][T18738] geneve1: entered allmulticast mode
[  443.386352][T18743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  443.417899][T18744] netlink: 'syz.2.3246': attribute type 6 has an invalid length.
[  443.840921][T18758] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3249'.
[  443.858563][T18756] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.943458][T18761] ip6gretap0: entered promiscuous mode
[  443.986301][T18761] ip6gretap0: left promiscuous mode
[  444.016528][T18771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3254'.
[  444.158918][T18768] 8021q: adding VLAN 0 to HW filter on device bond2
[  444.181786][T18772] macvlan2: entered promiscuous mode
[  444.189309][T18772] macvlan2: entered allmulticast mode
[  444.200379][T18772] bond2: (slave macvlan2): Opening slave failed
[  444.294908][T18770] veth0_to_team: entered promiscuous mode
[  444.300723][T18770] veth0_to_team: entered allmulticast mode
[  444.589403][T18789] geneve3: entered promiscuous mode
[  444.987089][T18806] bridge_slave_0: left allmulticast mode
[  444.994448][T18806] bridge_slave_0: left promiscuous mode
[  445.000533][T18806] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.039114][T18818] sctp: [Deprecated]: syz.2.3265 (pid 18818) Use of int in max_burst socket option.
[  445.039114][T18818] Use struct sctp_assoc_value instead
[  445.058914][T18806] bridge_slave_1: left allmulticast mode
[  445.068023][T18819] sctp: [Deprecated]: syz.2.3265 (pid 18819) Use of int in max_burst socket option.
[  445.068023][T18819] Use struct sctp_assoc_value instead
[  445.096436][T18806] bridge_slave_1: left promiscuous mode
[  445.109653][T18806] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.165605][T18806] bond0: (slave bond_slave_0): Releasing backup interface
[  445.203549][ T5157] Bluetooth: hci3: command tx timeout
[  445.222223][T18806] bond0: (slave bond_slave_1): Releasing backup interface
[  445.277767][T18806] team0: Port device team_slave_0 removed
[  445.333767][T18806] team0: Port device team_slave_1 removed
[  445.365557][T18806] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  445.399246][T18806] batman_adv: batadv0: Removing interface: batadv_slave_0
[  445.431169][ T1296] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  445.449640][T18806] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  445.471039][T18806] batman_adv: batadv0: Removing interface: batadv_slave_1
[  445.510788][T18806] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  445.642175][T18673] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  445.770444][T18673] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  445.801104][T18841] netlink: 'syz.2.3270': attribute type 1 has an invalid length.
[  445.922076][T18841] 8021q: adding VLAN 0 to HW filter on device bond2
[  445.940386][T18673] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  445.977603][T18673] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  446.362082][T18673] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.430401][T18673] 8021q: adding VLAN 0 to HW filter on device team0
[  446.469920][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.477170][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  446.515046][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.522295][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  446.565430][T18897] __nla_validate_parse: 4 callbacks suppressed
[  446.565452][T18897] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3280'.
[  446.645418][T18897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3280'.
[  446.656658][T18897] netlink: 34 bytes leftover after parsing attributes in process `syz.3.3280'.
[  446.736662][T18673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  447.064034][T18921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3285'.
[  447.084577][T18917] syzkaller1: entered promiscuous mode
[  447.106806][T18917] syzkaller1: entered allmulticast mode
[  447.263303][ T5157] Bluetooth: hci3: command tx timeout
[  447.307185][T18926] 8021q: adding VLAN 0 to HW filter on device bond3
[  447.375296][T18930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3287'.
[  447.403407][T18930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3287'.
[  447.416557][T18930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3287'.
[  447.432928][T18930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3287'.
[  447.443261][T18930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3287'.
[  447.457656][T18930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3287'.
[  447.479586][T18673] 8021q: adding VLAN 0 to HW filter on device batadv0
[  447.826415][T18954] netlink: 'syz.3.3293': attribute type 1 has an invalid length.
[  447.952914][T18960] netlink: 'syz.2.3295': attribute type 4 has an invalid length.
[  448.375454][T18673] veth0_vlan: entered promiscuous mode
[  448.401126][T18673] veth1_vlan: entered promiscuous mode
[  448.486807][T18673] veth0_macvtap: entered promiscuous mode
[  448.511838][T18673] veth1_macvtap: entered promiscuous mode
[  448.565509][T18673] batman_adv: batadv0: Interface activated: batadv_slave_0
[  448.616725][T18673] batman_adv: batadv0: Interface activated: batadv_slave_1
[  448.667609][ T2993] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  448.690357][ T2993] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  448.737244][ T2993] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  448.766959][ T2993] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  448.945846][T19001] !
: renamed from dummy0 (while UP)
[  449.007809][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.030478][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.126277][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.149153][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.150480][T19009] syzkaller0 speed is unknown, defaulting to 1000
[  449.236976][T19009] wg1 speed is unknown, defaulting to 1000
[  449.304610][T19013] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  449.343589][ T5157] Bluetooth: hci3: command tx timeout
[  449.476894][T19016] netlink: 'syz.0.3311': attribute type 1 has an invalid length.
[  449.501566][T19016] netlink: 'syz.0.3311': attribute type 1 has an invalid length.
[  449.929176][T19036] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  450.001066][T19036] batman_adv: batadv0: Adding interface: gretap1
[  450.057582][T19036] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  450.118749][T19036] batman_adv: batadv0: Interface activated: gretap1
[  450.257488][T19044] syzkaller0 speed is unknown, defaulting to 1000
[  450.318001][T19047] syzkaller0 speed is unknown, defaulting to 1000
[  450.330545][T19044] wg1 speed is unknown, defaulting to 1000
[  450.401661][T19065] netlink: 'syz.2.3318': attribute type 10 has an invalid length.
[  450.445864][T19047] wg1 speed is unknown, defaulting to 1000
[  450.475923][T19065] team0: Port device netdevsim0 added
[  451.585776][T19089] __nla_validate_parse: 36 callbacks suppressed
[  451.585800][T19089] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3323'.
[  451.599839][T19092] tipc: Started in network mode
[  451.608365][T19092] tipc: Node identity ac14140f, cluster identity 4711
[  451.621215][T19092] tipc: New replicast peer: 255.255.255.255
[  451.629495][T19092] tipc: Enabled bearer <udp:syz2>, priority 10
[  451.669005][T19095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3325'.
[  452.310997][T19138] geneve2: entered promiscuous mode
[  452.333168][T19138] geneve2: entered allmulticast mode
[  452.395575][T19129] syzkaller0 speed is unknown, defaulting to 1000
[  452.453445][T19146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3334'.
[  452.510430][T19150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3334'.
[  452.553079][T19129] wg1 speed is unknown, defaulting to 1000
[  452.560513][T19146] bridge_slave_1: left allmulticast mode
[  452.591108][T19146] bridge_slave_1: left promiscuous mode
[  452.621967][T19146] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.647614][T19146] bridge_slave_0: left allmulticast mode
[  452.654499][T19146] bridge_slave_0: left promiscuous mode
[  452.660598][T19146] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.750979][ T7778] tipc: Node number set to 2886997007
[  453.109794][T19170] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3342'.
[  453.145586][T19170] 8021q: VLANs not supported on ip_vti0
[  453.197949][T19172] bond1: entered promiscuous mode
[  453.204788][T19172] bond1: entered allmulticast mode
[  453.210562][T19172] 8021q: adding VLAN 0 to HW filter on device bond1
[  453.425443][T19172] bond1 (unregistering): Released all slaves
[  453.660138][T19184] netlink: 5636 bytes leftover after parsing attributes in process `syz.4.3343'.
[  453.687118][T19187] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3344'.
[  454.196274][T19187] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  454.218785][T19187] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  454.487516][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  454.498648][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  454.529052][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  454.581617][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  454.927794][T19221] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3355'.
[  455.699019][T19244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3361'.
[  455.769515][T19244] vlan2: entered allmulticast mode
[  455.791669][T19244] bridge_slave_0: entered allmulticast mode
[  455.877094][T19247] syzkaller0 speed is unknown, defaulting to 1000
[  455.896590][T19247] wg1 speed is unknown, defaulting to 1000
[  455.909272][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'.
[  455.927606][T19250] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  456.206270][T19257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  456.215607][T19257] syzkaller0: entered promiscuous mode
[  456.221143][T19257] syzkaller0: entered allmulticast mode
[  456.416300][T19257] tipc: Resetting bearer <eth:syzkaller0>
[  456.439321][T19273] xt_socket: unknown flags 0x50
[  456.457031][T19273] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  456.469172][T19273] gretap1: entered promiscuous mode
[  456.474795][T19247] netlink: 'syz.4.3362': attribute type 17 has an invalid length.
[  456.477777][T19273] gretap1: entered allmulticast mode
[  456.489745][T19275] netlink: 'syz.2.3369': attribute type 13 has an invalid length.
[  456.497835][T19275] netlink: 'syz.2.3369': attribute type 17 has an invalid length.
[  456.507790][T19255] tipc: Resetting bearer <eth:syzkaller0>
[  456.530949][T19255] tipc: Disabling bearer <eth:syzkaller0>
[  456.624993][T19275] 8021q: adding VLAN 0 to HW filter on device bond0
[  456.637819][T19275] 8021q: adding VLAN 0 to HW filter on device team0
[  456.656088][T19275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  456.697201][T19278] __nla_validate_parse: 4 callbacks suppressed
[  456.697226][T19278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3371'.
[  456.746621][T19247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  457.336988][T19296] 8021q: adding VLAN 0 to HW filter on device bond1
[  457.394602][T19303] syzkaller0 speed is unknown, defaulting to 1000
[  457.411854][T19303] wg1 speed is unknown, defaulting to 1000
[  457.464945][T19299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3377'.
[  457.480656][T19300] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  457.531170][T19308] veth5: entered promiscuous mode
[  457.537469][   T63] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  457.683372][ T1327] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  457.843010][T19322] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3384'.
[  457.843458][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3381'.
[  457.903117][T19319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3381'.
[  457.934827][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3381'.
[  458.002801][T19319] netlink: 'syz.3.3381': attribute type 5 has an invalid length.
[  458.219297][T19337] netlink: 'syz.4.3387': attribute type 1 has an invalid length.
[  458.517627][T19355] syz.3.3392 (19355) used obsolete PPPIOCDETACH ioctl
[  458.560205][T19355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3392'.
[  458.590620][T19355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3392'.
[  458.803411][T19373] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3395'.
[  458.813555][T19373] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3395'.
[  459.255227][T19385] syzkaller0 speed is unknown, defaulting to 1000
[  459.299094][T19385] wg1 speed is unknown, defaulting to 1000
[  459.649226][T19407] netlink: 'syz.0.3405': attribute type 1 has an invalid length.
[  459.874875][T19407] bond1: entered promiscuous mode
[  459.916673][T19407] 8021q: adding VLAN 0 to HW filter on device bond1
[  459.977034][T19417] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0
[  460.066296][T19403] 8021q: adding VLAN 0 to HW filter on device bond2
[  460.075986][T19403] bond1: (slave bond2): making interface the new active one
[  460.084059][T19403] bond2: entered promiscuous mode
[  460.090790][T19403] bond1: (slave bond2): Enslaving as an active interface with an up link
[  461.112213][T19454] syzkaller0 speed is unknown, defaulting to 1000
[  461.199461][T19454] wg1 speed is unknown, defaulting to 1000
[  461.321082][T19466] syzkaller0 speed is unknown, defaulting to 1000
[  461.364191][T19466] wg1 speed is unknown, defaulting to 1000
[  461.496518][T19472] syzkaller0 speed is unknown, defaulting to 1000
[  461.551093][T19472] wg1 speed is unknown, defaulting to 1000
[  462.298348][T19515] __nla_validate_parse: 5 callbacks suppressed
[  462.298371][T19515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3431'.
[  462.345481][T19520] netlink: 'syz.2.3432': attribute type 1 has an invalid length.
[  462.369016][T19520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3432'.
[  462.642207][T19537] netlink: 'syz.3.3437': attribute type 13 has an invalid length.
[  462.660092][T19537] netlink: 'syz.3.3437': attribute type 17 has an invalid length.
[  462.764420][T19548] netlink: 'syz.2.3440': attribute type 11 has an invalid length.
[  462.780134][T19551] openvswitch: netlink: Duplicate or invalid key (type 0).
[  462.788695][T19551] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  462.803804][T19551] netlink: 'syz.3.3437': attribute type 3 has an invalid length.
[  462.812315][T19551] netlink: 'syz.3.3437': attribute type 1 has an invalid length.
[  462.820372][T19551] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3437'.
[  462.830309][T19537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  462.894814][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3438'.
[  463.054098][T19563] netlink: 'syz.2.3444': attribute type 10 has an invalid length.
[  463.069152][T19563] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3444'.
[  463.079568][T19563] dummy0: entered promiscuous mode
[  463.107124][T19563] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  463.226374][T19571] syzkaller0: entered promiscuous mode
[  463.242245][T19571] syzkaller0: entered allmulticast mode
[  464.173586][T19622] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3456'.
[  464.236337][T19624] sctp: [Deprecated]: syz.1.3458 (pid 19624) Use of int in max_burst socket option.
[  464.236337][T19624] Use struct sctp_assoc_value instead
[  464.332237][T19626] batman_adv: batadv0: Adding interface: macsec1
[  464.340300][T19626] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.370059][T19626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  464.385406][T19626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.395690][T19626] batman_adv: batadv0: Interface activated: macsec1
[  464.539022][T19641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3464'.
[  464.561230][T19641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3464'.
[  464.854036][T19659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3468'.
[  464.870091][T19654] syzkaller1: entered allmulticast mode
[  465.014277][T19659] 8021q: adding VLAN 0 to HW filter on device bond3
[  465.090979][T19673] sctp: [Deprecated]: syz.1.3471 (pid 19673) Use of struct sctp_assoc_value in delayed_ack socket option.
[  465.090979][T19673] Use struct sctp_sack_info instead
[  465.114365][T19674] sctp: [Deprecated]: syz.1.3471 (pid 19674) Use of struct sctp_assoc_value in delayed_ack socket option.
[  465.114365][T19674] Use struct sctp_sack_info instead
[  465.259589][T19665] bond3: (slave macsec2): Error -34 calling dev_set_mtu
[  465.503359][ T5846] Bluetooth: hci3: command 0x0405 tx timeout
[  465.730332][T19702] Bluetooth: MGMT ver 1.23
[  465.734657][T19698] bridge0: port 1(netdevsim2) entered blocking state
[  465.783246][T19698] bridge0: port 1(netdevsim2) entered disabled state
[  465.813499][T19698] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  465.845670][T19698] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[  465.877621][T19698] bridge0: port 1(netdevsim2) entered blocking state
[  465.884641][T19698] bridge0: port 1(netdevsim2) entered forwarding state
[  466.010927][T19710] netlink: 'syz.0.3481': attribute type 4 has an invalid length.
[  466.091448][T19716] 8021q: adding VLAN 0 to HW filter on device bond4
[  466.100219][T19716] bridge0: port 1(bond4) entered blocking state
[  466.107828][T19716] bridge0: port 1(bond4) entered disabled state
[  466.115495][T19716] bond4: entered allmulticast mode
[  466.123945][T19716] bond4: entered promiscuous mode
[  466.130771][T19716] bridge0: port 1(bond4) entered blocking state
[  466.137644][T19716] bridge0: port 1(bond4) entered forwarding state
[  466.197244][ T4779] bridge0: port 1(bond4) entered disabled state
[  466.248103][T19728] dummy0: entered allmulticast mode
[  466.254247][T19721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  466.261229][T19726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3485'.
[  466.279556][T19721] syzkaller0: entered promiscuous mode
[  466.285943][T19721] syzkaller0: entered allmulticast mode
[  466.526280][T19741] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  466.867280][T19740] team0: Port device netdevsim0 removed
[  467.372535][ T7783] tipc: Node number set to 1227258866
[  467.583014][ T5846] Bluetooth: hci3: command 0x0405 tx timeout
[  467.741814][T19791] __nla_validate_parse: 8 callbacks suppressed
[  467.741836][T19791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3504'.
[  467.972443][T19804] netlink: 'syz.3.3510': attribute type 1 has an invalid length.
[  468.028232][T19804] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3510'.
[  468.215340][T19815] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3513'.
[  468.275565][T19810] can: request_module (can-proto-4) failed.
[  468.554459][T19835] netlink: 'syz.4.3516': attribute type 1 has an invalid length.
[  468.565192][T19828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3517'.
[  468.569884][T19834] syzkaller0 speed is unknown, defaulting to 1000
[  468.586460][T19834] wg1 speed is unknown, defaulting to 1000
[  468.604956][T19835] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3516'.
[  468.616951][T19839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3517'.
[  468.660746][T19828] bond1: entered promiscuous mode
[  468.696052][T19842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3519'.
[  468.704964][T19828] 8021q: adding VLAN 0 to HW filter on device bond1
[  468.954493][T19854] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3522'.
[  469.159123][T19858] siw: device registration error -23
[  469.180209][T19861] openvswitch: netlink: Actions may not be safe on all matching packets
[  469.478504][T19876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3529'.
[  469.490669][T19876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3529'.
[  469.512618][ T7781] IPVS: starting estimator thread 0...
[  469.604002][T19879] IPVS: using max 23 ests per chain, 55200 per kthread
[  469.663494][ T5846] Bluetooth: hci3: command 0x0405 tx timeout
[  470.536738][T19919] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  470.560062][T19930] netlink: 'syz.4.3543': attribute type 4 has an invalid length.
[  471.897108][T19988] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  471.935474][T19989] netlink: 'syz.1.3560': attribute type 1 has an invalid length.
[  471.954168][T19989] netlink: 'syz.1.3560': attribute type 1 has an invalid length.
[  472.141838][T19993] syzkaller0 speed is unknown, defaulting to 1000
[  472.168551][T19991] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  472.200157][T19993] wg1 speed is unknown, defaulting to 1000
[  472.774381][T20022] __nla_validate_parse: 12 callbacks suppressed
[  472.774405][T20022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3568'.
[  472.799342][T20005] pimreg: entered allmulticast mode
[  472.830779][T20020] pimreg: left allmulticast mode
[  472.858895][T20022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3568'.
[  472.992156][T20010] syzkaller0 speed is unknown, defaulting to 1000
[  473.023021][ T5846] Bluetooth: hci0: command tx timeout
[  473.039665][T20031] bond0: Unable to set down delay as MII monitoring is disabled
[  473.068679][T20010] wg1 speed is unknown, defaulting to 1000
[  473.290145][T20035] netlink: 'syz.3.3572': attribute type 1 has an invalid length.
[  473.300126][T20035] netlink: 'syz.3.3572': attribute type 1 has an invalid length.
[  473.511752][T20044] netlink: 'syz.4.3573': attribute type 1 has an invalid length.
[  473.530833][T20044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3573'.
[  473.752859][T20048] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3576'.
[  473.808521][T20048] syzkaller0 speed is unknown, defaulting to 1000
[  473.836238][T20048] wg1 speed is unknown, defaulting to 1000
[  473.848363][T20049] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3576'.
[  474.377352][T20059] ip_vti0: entered promiscuous mode
[  474.398724][T20059] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3580'.
[  474.653694][T20064] netlink: 'syz.3.3581': attribute type 11 has an invalid length.
[  474.672098][T20064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3581'.
[  474.727586][T20064] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3581'.
[  474.755335][   T10] IPVS: starting estimator thread 0...
[  474.853169][T20066] IPVS: using max 24 ests per chain, 57600 per kthread
[  474.955292][T20073] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3583'.
[  475.375061][T20090] syzkaller0 speed is unknown, defaulting to 1000
[  475.394847][T20090] wg1 speed is unknown, defaulting to 1000
[  475.458495][T20104] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3590'.
[  475.595344][T20105] macsec1: entered promiscuous mode
[  475.601610][T20105] macsec1: entered allmulticast mode
[  475.616741][T20104] 8021q: VLANs not supported on ipvlan1
[  475.631498][T20114] geneve3: entered promiscuous mode
[  476.698041][T20166] syzkaller1: entered promiscuous mode
[  476.729956][T20166] syzkaller1: entered allmulticast mode
[  476.875839][T20184] syzkaller0 speed is unknown, defaulting to 1000
[  476.895105][T20184] wg1 speed is unknown, defaulting to 1000
[  477.216302][T20188] netlink: 'syz.2.3610': attribute type 1 has an invalid length.
[  477.326163][T20194] netlink: 'syz.2.3610': attribute type 1 has an invalid length.
[  477.724402][T20259] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  478.048398][T20278] __nla_validate_parse: 3 callbacks suppressed
[  478.048424][T20278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3625'.
[  478.139068][T20283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3626'.
[  478.284811][T20294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3629'.
[  478.319789][T20298] netlink: 'syz.2.3630': attribute type 1 has an invalid length.
[  478.339359][T20298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3630'.
[  478.616338][T20313] pim6reg1: entered promiscuous mode
[  478.621830][T20313] pim6reg1: entered allmulticast mode
[  478.756153][T20319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3635'.
[  478.763171][T20312] netlink: 'syz.1.3634': attribute type 13 has an invalid length.
[  478.769423][T20319] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3635'.
[  478.777890][T20321] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  478.792248][T20312] netlink: 'syz.1.3634': attribute type 17 has an invalid length.
[  478.807851][T20321] sctp: [Deprecated]: syz.2.3636 (pid 20321) Use of struct sctp_assoc_value in delayed_ack socket option.
[  478.807851][T20321] Use struct sctp_sack_info instead
[  479.003243][T20312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  479.105929][T20336] tipc: Started in network mode
[  479.111079][T20336] tipc: Node identity a000003, cluster identity 4711
[  479.118975][T20336] tipc: Node number set to 167772163
[  479.336067][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3639'.
[  479.379228][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3639'.
[  479.417701][T20346] bond0: entered promiscuous mode
[  479.444641][T20346] bond_slave_0: entered promiscuous mode
[  479.459567][T20346] bond_slave_1: entered promiscuous mode
[  479.468030][T20346] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  479.665635][T20351] netlink: 'syz.4.3641': attribute type 1 has an invalid length.
[  479.685517][T20351] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3641'.
[  479.768504][T20355] 8021q: adding VLAN 0 to HW filter on device bond4
[  479.793931][T20355] bond0: (slave bond_slave_0): Releasing backup interface
[  479.819307][T20355] bond_slave_0: left promiscuous mode
[  479.866753][T20355] bond0: (slave bond_slave_1): Releasing backup interface
[  479.914952][T20355] bond_slave_1: left promiscuous mode
[  479.950873][T20355] team0: Port device team_slave_0 removed
[  479.971070][T20355] team0: Port device team_slave_1 removed
[  479.996831][T20355] batman_adv: batadv0: Removing interface: batadv_slave_0
[  480.024352][T20355] batman_adv: batadv0: Removing interface: batadv_slave_1
[  480.033773][T20355] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  480.153979][T20373] syzkaller0 speed is unknown, defaulting to 1000
[  480.174896][T20373] wg1 speed is unknown, defaulting to 1000
[  480.259480][T20386] FAULT_INJECTION: forcing a failure.
[  480.259480][T20386] name failslab, interval 1, probability 0, space 0, times 1
[  480.289970][T20386] CPU: 0 UID: 0 PID: 20386 Comm: syz.4.3651 Not tainted syzkaller #0 PREEMPT(full) 
[  480.290003][T20386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  480.290025][T20386] Call Trace:
[  480.290033][T20386]  <TASK>
[  480.290050][T20386]  dump_stack_lvl+0x189/0x250
[  480.290084][T20386]  ? __pfx____ratelimit+0x10/0x10
[  480.290119][T20386]  ? __pfx_dump_stack_lvl+0x10/0x10
[  480.290144][T20386]  ? __pfx__printk+0x10/0x10
[  480.290179][T20386]  ? __pfx___might_resched+0x10/0x10
[  480.290203][T20386]  ? fs_reclaim_acquire+0x7d/0x100
[  480.290239][T20386]  should_fail_ex+0x414/0x560
[  480.290275][T20386]  should_failslab+0xa8/0x100
[  480.290306][T20386]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  480.290334][T20386]  ? __alloc_skb+0x112/0x2d0
[  480.290361][T20386]  __alloc_skb+0x112/0x2d0
[  480.290387][T20386]  alloc_skb_with_frags+0xca/0x890
[  480.290429][T20386]  sock_alloc_send_pskb+0x84d/0x980
[  480.290481][T20386]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  480.290514][T20386]  ? rcu_is_watching+0x15/0xb0
[  480.290545][T20386]  ? __lock_acquire+0xab9/0xd20
[  480.290568][T20386]  __ip_append_data+0x2ce8/0x40c0
[  480.290607][T20386]  ? rt_is_expired+0x1c/0x2d0
[  480.290649][T20386]  ? __pfx_ping_getfrag+0x10/0x10
[  480.290691][T20386]  ? ipv4_mtu+0x23/0x650
[  480.290718][T20386]  ? __pfx___ip_append_data+0x10/0x10
[  480.290748][T20386]  ? ipv4_mtu+0x53b/0x650
[  480.290771][T20386]  ? ipv4_mtu+0x23/0x650
[  480.290798][T20386]  ? __pfx_ipv4_mtu+0x10/0x10
[  480.290824][T20386]  ? ip_setup_cork+0x577/0x9a0
[  480.290851][T20386]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.290888][T20386]  ip_append_data+0x10e/0x190
[  480.290923][T20386]  ? __pfx_ping_getfrag+0x10/0x10
[  480.290946][T20386]  ping_v4_sendmsg+0x12a6/0x1750
[  480.290990][T20386]  ? __pfx_ping_v4_sendmsg+0x10/0x10
[  480.291018][T20386]  ? __lock_acquire+0xab9/0xd20
[  480.291065][T20386]  ? aa_sk_perm+0x81e/0x950
[  480.291098][T20386]  ? __lock_acquire+0xab9/0xd20
[  480.291127][T20386]  ? sock_rps_record_flow+0x19/0x410
[  480.291165][T20386]  ? inet_sendmsg+0x2f4/0x370
[  480.291198][T20386]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  480.291235][T20386]  __sock_sendmsg+0x19c/0x270
[  480.291272][T20386]  ____sys_sendmsg+0x52d/0x830
[  480.291305][T20386]  ? __pfx_____sys_sendmsg+0x10/0x10
[  480.291343][T20386]  ? import_iovec+0x74/0xa0
[  480.291374][T20386]  ___sys_sendmsg+0x21f/0x2a0
[  480.291404][T20386]  ? __pfx____sys_sendmsg+0x10/0x10
[  480.291477][T20386]  ? __fget_files+0x2a/0x420
[  480.291505][T20386]  ? __fget_files+0x3a0/0x420
[  480.291548][T20386]  __sys_sendmmsg+0x227/0x430
[  480.291582][T20386]  ? __pfx___sys_sendmmsg+0x10/0x10
[  480.291606][T20386]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  480.291662][T20386]  ? ksys_write+0x22a/0x250
[  480.291692][T20386]  ? __pfx_ksys_write+0x10/0x10
[  480.291715][T20386]  ? rcu_is_watching+0x15/0xb0
[  480.291747][T20386]  __x64_sys_sendmmsg+0xa0/0xc0
[  480.291776][T20386]  do_syscall_64+0xfa/0x3b0
[  480.291796][T20386]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.291830][T20386]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.291850][T20386]  ? clear_bhb_loop+0x60/0xb0
[  480.291877][T20386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.291897][T20386] RIP: 0033:0x7f368618eec9
[  480.291918][T20386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  480.291937][T20386] RSP: 002b:00007f3686fab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  480.291969][T20386] RAX: ffffffffffffffda RBX: 00007f36863e5fa0 RCX: 00007f368618eec9
[  480.291985][T20386] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003
[  480.291999][T20386] RBP: 00007f3686fab090 R08: 0000000000000000 R09: 0000000000000000
[  480.292012][T20386] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000001
[  480.292026][T20386] R13: 00007f36863e6038 R14: 00007f36863e5fa0 R15: 00007ffe47c22b68
[  480.292070][T20386]  </TASK>
[  480.859868][T20392] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3652'.
[  481.155655][   T10] IPVS: starting estimator thread 0...
[  481.188281][T20404] batadv1: entered promiscuous mode
[  481.239394][T20404] batadv1: entered allmulticast mode
[  481.260720][T20409] IPVS: using max 25 ests per chain, 60000 per kthread
[  481.437350][T20422] netlink: 'syz.4.3661': attribute type 7 has an invalid length.
[  481.471218][T20422] netlink: 'syz.4.3661': attribute type 8 has an invalid length.
[  481.778840][T20431] netlink: 'syz.4.3663': attribute type 13 has an invalid length.
[  481.810769][T20431] netlink: 'syz.4.3663': attribute type 17 has an invalid length.
[  482.125820][T20431] ip_vti0: left promiscuous mode
[  482.450151][T20431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  482.714305][T20441] syzkaller0 speed is unknown, defaulting to 1000
[  482.741986][T20441] wg1 speed is unknown, defaulting to 1000
[  482.881209][T20462] batadv1: entered allmulticast mode
[  482.888695][T20462] 8021q: adding VLAN 0 to HW filter on device batadv1
[  482.984992][T20473] 8021q: adding VLAN 0 to HW filter on device bond5
[  483.050847][T20473] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  483.136614][T20485] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  483.452005][T20494] __nla_validate_parse: 3 callbacks suppressed
[  483.452025][T20494] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3678'.
[  483.506025][T20497] veth0: entered promiscuous mode
[  483.538301][T20496] syzkaller0 speed is unknown, defaulting to 1000
[  483.547588][T20496] wg1 speed is unknown, defaulting to 1000
[  484.010589][T20497] netlink: 'syz.3.3679': attribute type 16 has an invalid length.
[  484.019667][T20497] netlink: 'syz.3.3679': attribute type 17 has an invalid length.
[  484.065309][T20515] bond2: entered promiscuous mode
[  484.070740][T20515] bond2: entered allmulticast mode
[  484.076663][T20515] 8021q: adding VLAN 0 to HW filter on device bond2
[  484.232278][T20497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  484.294408][T20497] veth0: left promiscuous mode
[  484.382063][T20525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3686'.
[  484.414542][T20525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3686'.
[  484.605294][T20538] syz_tun: entered allmulticast mode
[  484.689283][T20530] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  484.699660][T20530] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  484.710737][T20530] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  484.786103][T20547] syzkaller0: entered promiscuous mode
[  484.791707][T20547] syzkaller0: entered allmulticast mode
[  484.800290][T20545] netlink: 'syz.3.3691': attribute type 1 has an invalid length.
[  484.808264][T20545] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.3691'.
[  485.414214][T20534] syz_tun: left allmulticast mode
[  485.730353][T20571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3700'.
[  485.740819][T20570] FAULT_INJECTION: forcing a failure.
[  485.740819][T20570] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  485.757072][T20570] CPU: 1 UID: 0 PID: 20570 Comm: syz.3.3698 Not tainted syzkaller #0 PREEMPT(full) 
[  485.757104][T20570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  485.757117][T20570] Call Trace:
[  485.757125][T20570]  <TASK>
[  485.757133][T20570]  dump_stack_lvl+0x189/0x250
[  485.757165][T20570]  ? __pfx____ratelimit+0x10/0x10
[  485.757198][T20570]  ? __pfx_dump_stack_lvl+0x10/0x10
[  485.757223][T20570]  ? __pfx__printk+0x10/0x10
[  485.757256][T20570]  ? __might_fault+0xb0/0x130
[  485.757298][T20570]  should_fail_ex+0x414/0x560
[  485.757334][T20570]  _copy_from_user+0x2d/0xb0
[  485.757362][T20570]  ___sys_sendmsg+0x158/0x2a0
[  485.757392][T20570]  ? __pfx____sys_sendmsg+0x10/0x10
[  485.757471][T20570]  ? __might_fault+0xb0/0x130
[  485.757502][T20570]  __sys_sendmmsg+0x227/0x430
[  485.757536][T20570]  ? __pfx___sys_sendmmsg+0x10/0x10
[  485.757560][T20570]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  485.757615][T20570]  ? ksys_write+0x22a/0x250
[  485.757643][T20570]  ? __pfx_ksys_write+0x10/0x10
[  485.757675][T20570]  ? rcu_is_watching+0x15/0xb0
[  485.757709][T20570]  __x64_sys_sendmmsg+0xa0/0xc0
[  485.757738][T20570]  do_syscall_64+0xfa/0x3b0
[  485.757759][T20570]  ? lockdep_hardirqs_on+0x9c/0x150
[  485.757793][T20570]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.757815][T20570]  ? clear_bhb_loop+0x60/0xb0
[  485.757843][T20570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.757864][T20570] RIP: 0033:0x7faa14f8eec9
[  485.757884][T20570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  485.757904][T20570] RSP: 002b:00007faa15d4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  485.757932][T20570] RAX: ffffffffffffffda RBX: 00007faa151e5fa0 RCX: 00007faa14f8eec9
[  485.757949][T20570] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003
[  485.757963][T20570] RBP: 00007faa15d4b090 R08: 0000000000000000 R09: 0000000000000000
[  485.757976][T20570] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000001
[  485.757989][T20570] R13: 00007faa151e6038 R14: 00007faa151e5fa0 R15: 00007ffee10a99b8
[  485.758026][T20570]  </TASK>
[  486.068391][T20581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3702'.
[  486.114855][T20583] IPv6: addrconf: prefix option has invalid lifetime
[  486.123194][T20583] netlink: 'syz.2.3703': attribute type 10 has an invalid length.
[  486.131283][T20584] netlink: 'syz.2.3703': attribute type 10 has an invalid length.
[  486.210919][T20584] 8021q: adding VLAN 0 to HW filter on device team0
[  486.230137][T20590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3706'.
[  486.269132][T20584] team0: entered promiscuous mode
[  486.277047][T20584] bond0: (slave team0): Enslaving as an active interface with an up link
[  486.333700][T20597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3706'.
[  486.445774][T20590] syzkaller0 speed is unknown, defaulting to 1000
[  486.496814][T20590] wg1 speed is unknown, defaulting to 1000
[  486.518678][T20602] geneve4: entered promiscuous mode
[  486.610775][T20609] syzkaller0 speed is unknown, defaulting to 1000
[  486.641657][T20609] wg1 speed is unknown, defaulting to 1000
[  486.726672][T20613] IPv6: addrconf: prefix option has invalid lifetime
[  486.761008][T20613] netlink: 'syz.2.3713': attribute type 2 has an invalid length.
[  486.775179][T20613] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3713'.
[  486.909159][T20618] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3714'.
[  487.438978][T20636] bridge: RTM_NEWNEIGH with invalid ether address
[  487.716288][T20651] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  487.741036][T20655] syzkaller0: entered promiscuous mode
[  487.763068][T20655] syzkaller0: entered allmulticast mode
[  487.791742][T20659] IPVS: set_ctl: invalid protocol: 137 10.1.1.0:20004
[  487.822107][T20657] dummy0: left allmulticast mode
[  487.877892][T20644] tipc: Resetting bearer <eth:syzkaller0>
[  487.991173][T20644] tipc: Disabling bearer <eth:syzkaller0>
[  488.048784][T20668] veth1_to_team: entered promiscuous mode
[  488.069805][T20668] bond0: entered promiscuous mode
[  488.122460][T20668] bond_slave_0: entered promiscuous mode
[  488.150898][T20668] bond_slave_1: entered promiscuous mode
[  488.176299][T20668] hsr1: entered allmulticast mode
[  488.206162][T20668] veth1_to_team: entered allmulticast mode
[  488.221093][T20668] bond0: entered allmulticast mode
[  488.226590][T20668] bond_slave_0: entered allmulticast mode
[  488.247014][T20668] bond_slave_1: entered allmulticast mode
[  488.418360][T20687] netlink: 'syz.2.3730': attribute type 2 has an invalid length.
[  488.426752][T20687] netlink: 'syz.2.3730': attribute type 1 has an invalid length.
[  489.318471][T20696] __nla_validate_parse: 4 callbacks suppressed
[  489.318494][T20696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3731'.
[  489.540107][T20704] syzkaller0 speed is unknown, defaulting to 1000
[  489.575097][T20704] wg1 speed is unknown, defaulting to 1000
[  489.687682][T20719] Unsupported ieee802154 address type: 0
[  489.709660][T20720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3739'.
[  489.833629][T20725] Bluetooth: MGMT ver 1.23
[  490.065556][T20719] syzkaller0 speed is unknown, defaulting to 1000
[  490.087773][T20719] wg1 speed is unknown, defaulting to 1000
[  490.128265][T20734] syzkaller0 speed is unknown, defaulting to 1000
[  490.149172][T20704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3735'.
[  490.178793][T20734] wg1 speed is unknown, defaulting to 1000
[  490.750674][T20757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3747'.
[  490.819706][T20760] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3749'.
[  490.869504][T20760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3749'.
[  491.250412][T20776] syzkaller0 speed is unknown, defaulting to 1000
[  491.284972][T20781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3756'.
[  491.293248][T20776] wg1 speed is unknown, defaulting to 1000
[  491.313217][T20781] chnl_net:caif_netlink_parms(): no params data found
[  491.974199][T20776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3755'.
[  492.399702][T20811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3764'.
[  492.824306][T20823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3769'.
[  492.938499][T20827] vlan2: entered promiscuous mode
[  492.955047][T20827] bond0: entered promiscuous mode
[  493.177776][T20835] syzkaller0 speed is unknown, defaulting to 1000
[  493.244659][T20835] wg1 speed is unknown, defaulting to 1000
[  493.433944][T20840] syzkaller0 speed is unknown, defaulting to 1000
[  493.459430][T20862] netlink: 'syz.0.3774': attribute type 11 has an invalid length.
[  493.474066][T20840] wg1 speed is unknown, defaulting to 1000
[  494.065351][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  494.068446][ T5157] Bluetooth: hci0: command 0x0c1a tx timeout
[  494.258662][T20897] syzkaller0 speed is unknown, defaulting to 1000
[  494.267690][T20897] wg1 speed is unknown, defaulting to 1000
[  494.492673][T20928] netlink: 'syz.1.3789': attribute type 4 has an invalid length.
[  494.565207][T20930] __nla_validate_parse: 3 callbacks suppressed
[  494.565229][T20930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3788'.
[  494.616201][T20931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3789'.
[  494.652293][T20934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3788'.
[  494.699007][T20936] netlink: 'syz.2.3791': attribute type 1 has an invalid length.
[  494.819584][T20936] syzkaller0 speed is unknown, defaulting to 1000
[  494.830602][T20936] wg1 speed is unknown, defaulting to 1000
[  494.831839][T20934] syzkaller0 speed is unknown, defaulting to 1000
[  494.908019][T20934] wg1 speed is unknown, defaulting to 1000
[  495.438429][T20969] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3794'.
[  495.479870][T20964] tunl0: entered promiscuous mode
[  495.500870][T20970] netlink: 'syz.2.3795': attribute type 12 has an invalid length.
[  495.677059][T20977] bridge0: port 3(vlan3) entered blocking state
[  495.708545][T20977] bridge0: port 3(vlan3) entered disabled state
[  495.719964][T20977] vlan3: entered allmulticast mode
[  495.725288][T20977] bridge0: entered allmulticast mode
[  495.737559][T20977] vlan3: left allmulticast mode
[  495.744483][T20977] bridge0: left allmulticast mode
[  495.798002][T20985] openvswitch: netlink: ufid size 19 bytes exceeds the range (1, 16)
[  495.808653][T20985] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  495.820293][T20985] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3800'.
[  495.851098][T20978] bridge0: port 3(vlan3) entered blocking state
[  495.859573][T20978] bridge0: port 3(vlan3) entered disabled state
[  495.867316][T20978] vlan3: entered allmulticast mode
[  495.874148][T20978] bridge0: entered allmulticast mode
[  495.881460][T20978] vlan3: left allmulticast mode
[  495.888081][T20978] bridge0: left allmulticast mode
[  496.007562][T20993] netlink: 'syz.1.3803': attribute type 1 has an invalid length.
[  496.027138][T20993] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3803'.
[  496.038262][T20989] can: request_module (can-proto-0) failed.
[  496.046602][T20988] netlink: 'syz.2.3802': attribute type 1 has an invalid length.
[  496.057352][T20988] netlink: 'syz.2.3802': attribute type 1 has an invalid length.
[  496.307663][T21003] netlink: 'syz.1.3806': attribute type 1 has an invalid length.
[  496.319065][T21003] netlink: 'syz.1.3806': attribute type 1 has an invalid length.
[  496.458742][T21018] netlink: 'syz.2.3810': attribute type 39 has an invalid length.
[  496.469379][T21017] netlink: 'syz.2.3810': attribute type 39 has an invalid length.
[  496.744855][T20238] vlan3: left allmulticast mode
[  496.749798][T20238] bridge0: left allmulticast mode
[  496.785446][T20238] vlan3: left promiscuous mode
[  496.790289][T20238] bridge0: left promiscuous mode
[  496.831164][T20238] bridge1: port 1(vlan3) entered disabled state
[  497.414613][T20238] bond7 (unregistering): (slave gretap2): Releasing active interface
[  497.543728][T20238] bond2 (unregistering): (slave geneve0): Releasing active interface
[  497.766762][T20238] bond3 (unregistering): (slave bridge4): Releasing backup interface
[  498.228337][T20238] bond1 (unregistering): Released all slaves
[  498.245869][T20238] bond2 (unregistering): Released all slaves
[  498.261790][T20238] bond3 (unregistering): Released all slaves
[  498.276788][T20238] bond4 (unregistering): Released all slaves
[  498.450844][T20238] bond5 (unregistering): Released all slaves
[  498.468171][T20238] bond6 (unregistering): Released all slaves
[  498.630642][T20238] bond0 (unregistering): Released all slaves
[  498.790566][T20238] bond7 (unregistering): Released all slaves
[  498.833872][ T7781] wg1 speed is unknown, defaulting to 1000
[  498.839796][ T7781] syz0: Port: 1 Link DOWN
[  498.997742][T20238] tipc: Left network mode
[  499.024881][T21057] syzkaller0: entered promiscuous mode
[  499.030653][T21057] syzkaller0: entered allmulticast mode
[  499.070751][T21056] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  499.086447][T21053] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3817'.
[  500.087260][T20238] hsr_slave_0: left promiscuous mode
[  500.116760][T20238] hsr_slave_1: left promiscuous mode
[  500.191570][T20238] veth0_macvtap: left promiscuous mode
[  500.221452][T20238] veth1_vlan: left promiscuous mode
[  502.010720][T21091] syzkaller0 speed is unknown, defaulting to 1000
[  502.388533][T21113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3835'.
[  502.674867][T20238] IPVS: stop unused estimator thread 0...
[  502.734282][T21125] validate_nla: 2 callbacks suppressed
[  502.734306][T21125] netlink: 'syz.0.3837': attribute type 29 has an invalid length.
[  502.757578][T21125] netlink: 'syz.0.3837': attribute type 29 has an invalid length.
[  502.779433][T21125] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3837'.
[  502.790093][T21125] unsupported nla_type 58
[  502.929279][T21132] netlink: 'syz.0.3839': attribute type 1 has an invalid length.
[  502.961176][T21132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3839'.
[  503.318515][T21139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3843'.
[  503.605595][T21154] syzkaller0 speed is unknown, defaulting to 1000
[  503.789188][T21157] veth0: entered promiscuous mode
[  503.956466][T21161] netlink: 'syz.1.3847': attribute type 16 has an invalid length.
[  504.025877][T21161] netlink: 'syz.1.3847': attribute type 17 has an invalid length.
[  504.171949][T21168] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR
[  504.210340][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  504.227338][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  504.238827][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  504.248685][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  504.257606][T21161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  504.275763][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  504.418672][T21157] veth0: left promiscuous mode
[  504.465443][T21194] syzkaller0 speed is unknown, defaulting to 1000
[  504.628642][T21201] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3854'.
[  504.664386][T21185] syzkaller0 speed is unknown, defaulting to 1000
[  505.291136][T21224] netlink: 'syz.1.3860': attribute type 1 has an invalid length.
[  505.415777][T21222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3860'.
[  505.798839][T21227] syzkaller0 speed is unknown, defaulting to 1000
[  506.018047][T21185] chnl_net:caif_netlink_parms(): no params data found
[  506.337194][T21240] batman_adv: batadv0: Adding interface: macvtap1
[  506.383997][ T5157] Bluetooth: hci4: command tx timeout
[  506.390355][T21240] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  506.417609][T21240] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  506.625874][T21260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3867'.
[  506.670346][T21260] bridge2: entered allmulticast mode
[  506.683622][T21262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3867'.
[  506.769793][T21185] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.778973][T21185] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.787651][T21185] bridge_slave_0: entered allmulticast mode
[  506.794993][T21248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3865'.
[  506.797539][T21185] bridge_slave_0: entered promiscuous mode
[  506.824576][T21185] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.841989][T21185] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.863642][T21185] bridge_slave_1: entered allmulticast mode
[  506.873236][ T1296] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  506.895810][T21265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3867'.
[  506.915852][T21185] bridge_slave_1: entered promiscuous mode
[  506.995492][T21260] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  507.091037][T21248] bond6: entered promiscuous mode
[  507.099093][T21248] 8021q: adding VLAN 0 to HW filter on device bond6
[  507.167506][T21257] 8021q: adding VLAN 0 to HW filter on device bond6
[  507.195675][T21257] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address
[  507.210817][T21257] bond6: (slave wireguard0): Error -95 calling set_mac_address
[  507.422067][T21185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  507.580521][T21293] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  507.589218][T21261] syzkaller0 speed is unknown, defaulting to 1000
[  507.591546][T21185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  507.727984][T21291] tipc: Resetting bearer <eth:syzkaller0>
[  507.781267][T21275] syzkaller0 speed is unknown, defaulting to 1000
[  507.803727][T21289] tipc: Resetting bearer <eth:syzkaller0>
[  508.464103][ T5157] Bluetooth: hci4: command tx timeout
[  510.558269][ T5157] Bluetooth: hci4: command tx timeout
[  511.098898][T21289] tipc: Disabling bearer <eth:syzkaller0>
[  511.186570][T21185] team0: Port device team_slave_0 added
[  511.218124][T21185] team0: Port device team_slave_1 added
[  511.330077][T21185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  511.338149][T21185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  511.387664][T21185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  511.411998][T21185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  511.419873][T21185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  511.448360][T21185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  511.656076][T21185] hsr_slave_0: entered promiscuous mode
[  511.664537][T21185] hsr_slave_1: entered promiscuous mode
[  511.671141][T21185] debugfs: 'hsr0' already exists in 'hsr'
[  511.683601][T21185] Cannot create hsr debugfs directory
[  511.718113][T21334] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  512.244099][T21350] __nla_validate_parse: 2 callbacks suppressed
[  512.244122][T21350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3883'.
[  512.348785][T21350] netlink: 'syz.2.3883': attribute type 4 has an invalid length.
[  512.413984][T21356] netlink: 'syz.2.3883': attribute type 4 has an invalid length.
[  512.447486][T21360] team0: Port device team_slave_0 removed
[  512.634811][ T5157] Bluetooth: hci4: command tx timeout
[  512.804132][T21374] nbd: must specify a device to reconfigure
[  512.820748][T21185] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  512.821667][T21374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3889'.
[  512.858200][T21185] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  512.897662][T21185] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  512.967430][T21185] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  513.314645][T21405] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.3893'.
[  513.351452][T21397] 8021q: adding VLAN 0 to HW filter on device bond3
[  513.409589][T21185] 8021q: adding VLAN 0 to HW filter on device bond0
[  513.451723][T21185] 8021q: adding VLAN 0 to HW filter on device team0
[  513.485805][T20865] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.493114][T20865] bridge0: port 1(bridge_slave_0) entered forwarding state
[  513.513740][T20860] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.521078][T20860] bridge0: port 2(bridge_slave_1) entered forwarding state
[  514.030757][T21185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  514.105053][T21428] netlink: 'syz.2.3902': attribute type 12 has an invalid length.
[  514.119572][T21428] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3902'.
[  514.381220][T21435] syzkaller0 speed is unknown, defaulting to 1000
[  514.940120][T21185] veth0_vlan: entered promiscuous mode
[  515.084707][T21185] veth1_vlan: entered promiscuous mode
[  515.329283][T21471] syzkaller1: entered promiscuous mode
[  515.336790][T21471] syzkaller1: entered allmulticast mode
[  515.367653][T21185] veth0_macvtap: entered promiscuous mode
[  515.420988][T21474] syzkaller0 speed is unknown, defaulting to 1000
[  515.601489][T21185] veth1_macvtap: entered promiscuous mode
[  515.711038][T21185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  515.731865][T21185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  515.752187][T20865] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  517.051916][T20866] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  517.570545][T20863] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  524.331314][ T5157] Bluetooth: hci2: command 0x0406 tx timeout
[  531.481419][T20858] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  544.811017][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout
[  546.950439][T21482] syzkaller0 speed is unknown, defaulting to 1000
[  560.160652][ T5846] Bluetooth: hci1: command 0x0406 tx timeout
[  568.379218][ T1296] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  589.061484][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  589.391411][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  589.671637][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  590.600705][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  591.322032][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  593.821015][T21500] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  595.032136][T21500] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  596.560505][ T5157] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  597.000167][T21503] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  597.339960][T21503] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  597.650414][T21503] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  597.991673][T21503] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  598.451589][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  598.581503][ T5836] Bluetooth: hci6: command tx timeout
[  598.771642][T21503] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  599.547821][ T5846] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  600.650426][T21503] Bluetooth: hci6: command tx timeout
[  602.100945][T21503] Bluetooth: hci7: command tx timeout
[  602.681644][T21503] Bluetooth: hci8: command tx timeout
[  602.711835][T21500] Bluetooth: hci6: command tx timeout
[  604.191787][T21500] Bluetooth: hci7: command tx timeout
[  604.821159][T21500] Bluetooth: hci8: command tx timeout
[  604.880957][T21500] Bluetooth: hci6: command tx timeout
[  606.250741][T21500] Bluetooth: hci7: command tx timeout
[  606.950733][T21503] Bluetooth: hci8: command tx timeout
[  607.350832][T21503] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  607.630390][T21503] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  608.019627][T21503] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  608.329143][T21503] Bluetooth: hci7: command tx timeout
[  608.721162][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  609.041877][ T5846] Bluetooth: hci8: command tx timeout
[  609.161404][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  614.010698][ T5846] Bluetooth: hci2: command tx timeout
[  616.101920][ T5846] Bluetooth: hci2: command tx timeout
[  618.160634][ T5846] Bluetooth: hci2: command tx timeout
[  620.090824][T21497] syzkaller0 speed is unknown, defaulting to 1000
[  620.240943][T21500] Bluetooth: hci2: command tx timeout
[  621.598633][T21500] Bluetooth: hci3: command 0x0405 tx timeout
[  624.780903][T21503] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  624.862046][T21503] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  625.790287][T21503] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  626.240959][T21503] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  626.881724][T21503] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  629.810549][ T1296] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  633.859603][T21500] Bluetooth: hci5: command tx timeout
[  635.928925][T21500] Bluetooth: hci5: command tx timeout
[  637.999321][T21500] Bluetooth: hci5: command tx timeout
[  640.090491][T21500] Bluetooth: hci5: command tx timeout
[  658.412050][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  658.641698][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  659.350921][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  660.230157][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  660.859467][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  661.651311][T21503] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  662.200920][T21503] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  662.562207][T21503] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  663.821740][T21500] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  664.450059][T21503] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  666.090057][T21503] Bluetooth: hci0: command tx timeout
[  668.021494][T21503] Bluetooth: hci4: command tx timeout
[  668.190053][T21503] Bluetooth: hci0: command tx timeout
[  669.381058][T21503] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  669.631731][T21503] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  669.942098][T21503] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  670.070042][T21503] Bluetooth: hci4: command tx timeout
[  670.241230][T21503] Bluetooth: hci0: command tx timeout
[  671.190574][T21503] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  672.161468][T21503] Bluetooth: hci4: command tx timeout
[  672.261449][T21503] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  672.310843][T21503] Bluetooth: hci0: command tx timeout
[  674.239600][ T5846] Bluetooth: hci4: command tx timeout
[  677.197613][T21500] Bluetooth: hci8: command tx timeout
[  679.301361][T21500] Bluetooth: hci8: command tx timeout
[  681.352053][T21500] Bluetooth: hci8: command tx timeout
[  683.451866][T21500] Bluetooth: hci8: command tx timeout
[  690.041648][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  690.260926][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  690.390992][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  691.246906][ T1296] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  691.540343][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  691.890847][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  694.878950][ T5846] Bluetooth: hci1: command tx timeout
[  696.950612][ T5846] Bluetooth: hci1: command tx timeout
[  699.032142][ T5846] Bluetooth: hci1: command tx timeout
[  701.121093][ T5846] Bluetooth: hci1: command tx timeout
[  712.920679][T21500] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  713.071348][T21500] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  713.420313][T21500] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  714.049809][T21500] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  714.521725][T21503] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  714.689821][T21503] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  714.731809][T21503] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  715.116625][T21503] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  715.631924][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  716.199688][T21503] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  717.841988][ T5846] Bluetooth: hci2: command tx timeout
[  718.881558][ T5846] Bluetooth: hci6: command 0x0406 tx timeout
[  719.970962][ T5846] Bluetooth: hci2: command tx timeout
[  720.070074][ T5846] Bluetooth: hci5: command tx timeout
[  722.107606][T21500] Bluetooth: hci2: command tx timeout
[  722.171676][T21500] Bluetooth: hci5: command tx timeout
[  724.152093][T21500] Bluetooth: hci2: command tx timeout
[  724.239836][T21500] Bluetooth: hci5: command tx timeout
[  725.770242][ T5846] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  726.270278][ T5846] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  726.329713][T21503] Bluetooth: hci5: command tx timeout
[  726.480473][T21503] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  727.381711][T21503] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  727.630216][T21503] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  730.639944][T21503] Bluetooth: hci7: command tx timeout
[  732.721373][T21503] Bluetooth: hci7: command tx timeout
[  734.790060][T21503] Bluetooth: hci7: command tx timeout
[  736.871560][T21503] Bluetooth: hci7: command tx timeout
[  748.731459][T21500] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  748.911757][T21500] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  749.021785][T21500] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  749.571135][T21500] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  749.961334][T21500] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  752.641896][ T1296] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  753.680466][ T5846] Bluetooth: hci9: command tx timeout
[  754.877858][T21503] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  755.110525][T21503] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  755.270575][T21503] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  755.761527][T21503] Bluetooth: hci9: command tx timeout
[  755.960648][T21500] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  756.521801][T21500] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  757.850854][T21500] Bluetooth: hci9: command tx timeout
[  759.280806][T21500] Bluetooth: hci10: command tx timeout
[  759.920155][T21500] Bluetooth: hci9: command tx timeout
[  761.370632][T21500] Bluetooth: hci10: command tx timeout
[  763.430883][T21500] Bluetooth: hci10: command tx timeout
[  765.530913][T21500] Bluetooth: hci10: command tx timeout
[  782.139975][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  782.312051][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  782.418982][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  783.230543][T21503] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  783.700957][T21503] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  784.102012][T21500] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  784.451901][   T31] INFO: task kworker/u8:59:20861 blocked for more than 144 seconds.
[  784.591556][T21500] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  784.780919][T21500] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  785.341486][   T31]       Not tainted syzkaller #0
[  785.620949][T21500] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  785.731204][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  786.230550][   T31] task:kworker/u8:59   state:D stack:23584 pid:20861 tgid:20861 ppid:2      task_flags:0x4208160 flags:0x00080000
[  786.561376][   T31] Workqueue: events_unbound linkwatch_event
[  786.640381][T21500] Bluetooth: hci3: command tx timeout
[  786.720308][   T31] Call Trace:
[  786.751073][   T31]  <TASK>
[  786.770088][   T31]  __schedule+0x1798/0x4cc0
[  786.777451][   T31]  ? __lock_acquire+0xab9/0xd20
[  786.901438][   T31]  ? __lock_acquire+0xab9/0xd20
[  787.009898][   T31]  ? __pfx___schedule+0x10/0x10
[  787.031779][T21500] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  787.120224][   T31]  ? schedule+0x91/0x360
[  787.192051][   T31]  schedule+0x165/0x360
[  787.421871][   T31]  schedule_preempt_disabled+0x13/0x30
[  787.880104][   T31]  __mutex_lock+0x7e6/0x1350
[  788.240876][   T31]  ? look_up_lock_class+0x74/0x170
[  788.491344][T21500] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  788.630650][   T31]  ? __mutex_lock+0x5bb/0x1350
[  788.710889][ T5836] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  788.741494][ T5836] Bluetooth: hci3: command tx timeout
[  788.862081][ T5836] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  789.100996][   T31]  ? linkwatch_event+0xe/0x60
[  789.410075][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  789.630133][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  789.930511][T21559] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  790.001962][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  790.371990][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  790.631249][T21559] Bluetooth: hci4: command 0x0406 tx timeout
[  790.732094][T21559] Bluetooth: hci0: command 0x0406 tx timeout
[  790.790896][T21559] Bluetooth: hci3: command tx timeout
[  790.951017][T21559] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  790.959825][   T31]  linkwatch_event+0xe/0x60
[  790.959871][   T31]  process_scheduled_works+0xade/0x17b0
[  790.959937][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  790.959985][   T31]  worker_thread+0x8a0/0xda0
[  790.960045][   T31]  kthread+0x711/0x8a0
[  790.960081][   T31]  ? __pfx_worker_thread+0x10/0x10
[  790.960108][   T31]  ? __pfx_kthread+0x10/0x10
[  790.960142][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  790.960178][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  790.960213][   T31]  ? __pfx_kthread+0x10/0x10
[  790.960247][   T31]  ret_from_fork+0x436/0x7d0
[  790.960277][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  790.960311][   T31]  ? __switch_to_asm+0x39/0x70
[  790.960342][   T31]  ? __switch_to_asm+0x33/0x70
[  790.960373][   T31]  ? __pfx_kthread+0x10/0x10
[  790.960407][   T31]  ret_from_fork_asm+0x1a/0x30
[  790.960460][   T31]  </TASK>
[  790.960502][   T31] INFO: task syz-executor:21185 blocked for more than 151 seconds.
[  790.960521][   T31]       Not tainted syzkaller #0
[  790.960534][   T31]       Blocked by coredump.
[  790.960542][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  790.960554][   T31] task:syz-executor    state:D stack:21000 pid:21185 tgid:21185 ppid:1      task_flags:0x40054c flags:0x00080003
[  790.960622][   T31] Call Trace:
[  790.960631][   T31]  <TASK>
[  790.960653][   T31]  __schedule+0x1798/0x4cc0
[  790.960695][   T31]  ? stack_trace_save+0x9c/0xe0
[  790.960733][   T31]  ? __lock_acquire+0xab9/0xd20
[  790.960766][   T31]  ? __lock_acquire+0xab9/0xd20
[  790.960791][   T31]  ? __pfx___schedule+0x10/0x10
[  790.960846][   T31]  ? schedule+0x91/0x360
[  790.960886][   T31]  schedule+0x165/0x360
[  790.960924][   T31]  schedule_preempt_disabled+0x13/0x30
[  790.960959][   T31]  __mutex_lock+0x7e6/0x1350
[  790.960990][   T31]  ? __mutex_lock+0x5bb/0x1350
[  790.961021][   T31]  ? tun_chr_close+0x3e/0x1c0
[  790.961058][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  790.961106][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  790.961139][   T31]  tun_chr_close+0x3e/0x1c0
[  790.961173][   T31]  __fput+0x44c/0xa70
[  790.961212][   T31]  task_work_run+0x1d1/0x260
[  790.961250][   T31]  ? __pfx_task_work_run+0x10/0x10
[  790.961288][   T31]  ? kmem_cache_free+0x18f/0x400
[  790.961324][   T31]  do_exit+0x6b5/0x2300
[  790.961366][   T31]  ? do_raw_spin_lock+0x121/0x290
[  790.961402][   T31]  ? __pfx_do_exit+0x10/0x10
[  790.961431][   T31]  ? cgroup_freezing+0x20/0x350
[  791.190627][T21559] Bluetooth: hci11: command tx timeout
[  791.548020][   T31]  do_group_exit+0x21c/0x2d0
[  791.556417][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  791.561678][   T31]  get_signal+0x1285/0x1340
[  791.569644][   T31]  arch_do_signal_or_restart+0xa0/0x790
[  791.579459][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  791.661222][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  791.690437][   T31]  exit_to_user_mode_loop+0x72/0x110
[  791.698502][   T31]  do_syscall_64+0x2bd/0x3b0
[  791.707083][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.718101][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  791.930672][   T31]  ? clear_bhb_loop+0x60/0xb0
[  792.389756][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  792.530935][   T31] RIP: 0033:0x7fb305d90d5c
[  792.740138][   T31] RSP: 002b:00007ffd5d9a4240 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  792.880238][T21559] Bluetooth: hci3: command tx timeout
[  792.931261][   T31] RAX: 0000000000000024 RBX: 00007fb306b14620 RCX: 00007fb305d90d5c
[  793.031396][   T31] RDX: 0000000000000024 RSI: 00007fb306b14670 RDI: 0000000000000003
[  793.141392][   T31] RBP: 0000000000000000 R08: 00007ffd5d9a4294 R09: 000000000000000c
[  793.461143][T21559] Bluetooth: hci11: command tx timeout
[  793.509371][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  793.799491][   T31] R13: 0000000000000000 R14: 00007fb306b14670 R15: 0000000000000000
[  793.990339][   T31]  </TASK>
[  794.131890][   T31] INFO: task syz-executor:21497 blocked for more than 154 seconds.