last executing test programs:

7m48.705495043s ago: executing program 3 (id=1063):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
syz_emit_ethernet(0x2e, &(0x7f0000000800)={@random="956214a36d68", @empty, @val={@val={0x88a8, 0x4, 0x1}, {0x8100, 0x7, 0x0, 0xff}}, {@generic={0x4305, "551c6ece8e547c458594962751e139c8e3d13a39256c8741"}}}, 0x0)
r2 = socket(0x10, 0x5, 0xda3)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312}, [@IFLA_ADDRESS={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312}, [@IFLA_ADDRESS={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)

7m48.415321723s ago: executing program 3 (id=1068):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000"], 0x18}], 0x1, 0x0) (async)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000280)={0x7, 0x7, 0x2}, &(0x7f00000002c0)=0x28)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x9, 0xfa, 0x0, 0x4, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0xff}, @sadb_x_nat_t_type={0x1, 0x14, 0x57}]}, 0x20}}, 0x24000800) (async)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000340)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6f3, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x4c, &(0x7f0000000440)=""/76, 0x40f00, 0x74, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x3, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000600)=[{0x5, 0x1, 0x1, 0xa}, {0x3, 0x5, 0x6, 0x1}, {0x4, 0x4, 0x10, 0x4}, {0x0, 0x3, 0x10}, {0x0, 0x4, 0xb}], 0x10, 0x3}, 0x94) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xd, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r5, r6}, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) (async)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)

7m48.180776321s ago: executing program 3 (id=1070):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={<r1=>0x0, 0x10}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x9}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000002020300000000000000000002000000240002801400018008000100ac1e000108000200e00000020c000280040001"], 0x38}, 0x1, 0x0, 0x0, 0x4004880}, 0x4010)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xff1f, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10}, &(0x7f0000000080)=0x8) (async)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x9}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000002020300000000000000000002000000240002801400018008000100ac1e000108000200e00000020c000280040001"], 0x38}, 0x1, 0x0, 0x0, 0x4004880}, 0x4010) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xff1f, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)

7m47.967923101s ago: executing program 3 (id=1073):
close(0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

7m47.84745522s ago: executing program 3 (id=1074):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2007}, [@printk={@i, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00}, 0x94)
sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x90)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002b80)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10c}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x64}}, 0xc0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x14)
socket$key(0xf, 0x3, 0x2)

7m47.744693837s ago: executing program 3 (id=1077):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x760, 0x410, 0x250, 0x340, 0x340, 0x598, 0x690, 0x690, 0x690, 0x690, 0x690, 0x6, &(0x7f0000000180), {[{{@uncond, 0x0, 0x210, 0x250, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@dst={{0x48}, {0x3ff, 0x2, 0x1, [0x7, 0xfff9, 0xcd1, 0x9, 0xc0, 0x7, 0xfffe, 0x3, 0x4, 0x6, 0x800, 0x1, 0x8, 0x3, 0x80, 0x200], 0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x9, @ipv4=@private=0xa010100, 0x4e22}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010102, @ipv6=@private1, 0x37}}}, {{@ipv6={@rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0x0, 0xff], 'dvmrp1\x00', 'veth0\x00', {}, {0xff}, 0xff, 0x1, 0x3, 0x1}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x7f, 0xc}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@srh1={{0x90}, {0x73, 0x1, 0x3, 0x10, 0x101, @local, @dev={0xfe, 0x80, '\x00', 0x22}, @loopback, [0xffffffff, 0xff000000], [0xff000000, 0x0, 0xff, 0x7fffff00], [0x0, 0xffffff00, 0xffffffff, 0xffffffff], 0x90, 0x7910c076821907fa}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x80}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x80e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c0) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2d}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) (async, rerun: 32)
sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async, rerun: 32)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) (async)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x2e, @local, 0x4e20, 0x3, 'nq\x00', 0x20, 0x1, 0x4a}, 0x2c)

7m32.437243033s ago: executing program 32 (id=1077):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x760, 0x410, 0x250, 0x340, 0x340, 0x598, 0x690, 0x690, 0x690, 0x690, 0x690, 0x6, &(0x7f0000000180), {[{{@uncond, 0x0, 0x210, 0x250, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@dst={{0x48}, {0x3ff, 0x2, 0x1, [0x7, 0xfff9, 0xcd1, 0x9, 0xc0, 0x7, 0xfffe, 0x3, 0x4, 0x6, 0x800, 0x1, 0x8, 0x3, 0x80, 0x200], 0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x9, @ipv4=@private=0xa010100, 0x4e22}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010102, @ipv6=@private1, 0x37}}}, {{@ipv6={@rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0x0, 0xff], 'dvmrp1\x00', 'veth0\x00', {}, {0xff}, 0xff, 0x1, 0x3, 0x1}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x7f, 0xc}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@srh1={{0x90}, {0x73, 0x1, 0x3, 0x10, 0x101, @local, @dev={0xfe, 0x80, '\x00', 0x22}, @loopback, [0xffffffff, 0xff000000], [0xff000000, 0x0, 0xff, 0x7fffff00], [0x0, 0xffffff00, 0xffffffff, 0xffffffff], 0x90, 0x7910c076821907fa}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x80}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x80e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c0) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2d}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) (async, rerun: 32)
sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async, rerun: 32)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) (async)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x2e, @local, 0x4e20, 0x3, 'nq\x00', 0x20, 0x1, 0x4a}, 0x2c)

2.740109507s ago: executing program 2 (id=5017):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) (async)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000240)=0xee000, 0x4) (async)
r4 = accept4$alg(r2, 0x0, 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r5, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x30, 0x68, 0x0, 0x60, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "21f3305280f125e6e11a9314b296b53b5d25867c0a8c27b647898152"}}, 0x3e) (async)
read$alg(r4, &(0x7f00000012c0)=""/4109, 0x100d) (async)
sendmmsg$alg(r4, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="4a895703cd17bcedc1666306831c5c58", 0x10}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) (async)
bind$tipc(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

1.871560125s ago: executing program 2 (id=5025):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
syz_emit_ethernet(0x8e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd604dd31800580600fc010000000000000000000000000002fe8000000000000000000000000000aa08004001", @ANYBLOB="a59cfa42d6f255b7e844aa0bcc6984d007d9e8684a339b563a851e67135d"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601030000000080000000000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c0007800800134000000000670005000a00000f0500010006000000431e509cfbd5bd444fda"], 0x58}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d00000000060000000100000000000000000000000000000000800000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000400)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7218cc84, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]})
ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
r8 = socket(0x22, 0x2, 0x3)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

1.750020942s ago: executing program 0 (id=5027):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYRESDEC=r1, @ANYRESDEC], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000180)={0x1d, r6, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@RTM_NEWMDB={0x78, 0x54, 0x400, 0x70bd2a, 0x25dfdbfd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x1, {@in6_addr=@private2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x0, 0x3, {@in6_addr=@local, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x0, 0x1, {@ip4=@remote, 0x86dd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
socket(0x10, 0x803, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYRESDEC=r1, @ANYRESDEC], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async)
bind$can_j1939(r5, &(0x7f0000000180)={0x1d, r6, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@RTM_NEWMDB={0x78, 0x54, 0x400, 0x70bd2a, 0x25dfdbfd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x1, {@in6_addr=@private2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x0, 0x3, {@in6_addr=@local, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x0, 0x1, {@ip4=@remote, 0x86dd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async)

1.552646623s ago: executing program 2 (id=5030):
r0 = socket$igmp(0x2, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="0000000000000000000000e1ffffffffffffff000000000000000000"], 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01050008000a00", @ANYRES32, @ANYBLOB, @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x400c010)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='rdma.current\x00', 0x0, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4)
pipe(&(0x7f00000007c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90", 0x2}], 0x1, 0x1)
ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f0000000100)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, @default, @bpq0, 0x4, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]})
close(r5)
socket(0x2000000000000021, 0x2, 0x10000000000002)
splice(r4, 0x0, r5, 0x0, 0xfffd, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4002010}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_mpls={0x78, 0x1, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffffb, 0x10001, 0x20000000, 0x8, 0x2}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ff00"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000140), &(0x7f0000000280)=r2}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @local, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x8}, 0x3c)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

1.346269346s ago: executing program 4 (id=5032):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r0], 0xb8}}, 0xc0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x600008c0)
r1 = socket(0xf, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x8967cc7efbc82a77}, 0x2) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="aac6aa0048060001aac17872708602f6ee11dc3793080006000001ffffffffffffffeec78f7047cf52dafd2277db4d21bd871af158200e0d52aa48c42f50faa7bc9664061f61480a81f4af772c2257d36d6cc2a11610e474a4b8cfc5ccce0dcd752264112c152b2117db19185e595a557e7b1acf6ba14adca29f92094a66f001e2ed454ccc54b0336f0c65ea8479d82dff061fdd497c5b22714b45bddf5e7a896e8c872abfea4151529639"], 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004900010028bd700000dcf4250a", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) (async)
recvmmsg$unix(r3, &(0x7f0000003300)=[{{&(0x7f0000000ec0), 0x6e, &(0x7f0000002700)=[{&(0x7f00000001c0)=""/57, 0x39}], 0x1}}], 0x1, 0x400000a0, 0x0) (async)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061108b000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (async)
close(0x3)

1.20989975s ago: executing program 5 (id=5033):
r0 = socket(0x1e, 0x5, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async)
recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/23, 0x17}], 0x1, 0x0, 0xffffffffffffff4d}, 0x2}], 0x1, 0x2003, 0x0) (async)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)="1b35", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f00000009c0)="a4", 0x1}], 0x1}}], 0x2, 0x40480dc)
syz_extract_tcp_res$synack(&(0x7f0000000440), 0x1, 0x0) (async)
r1 = socket(0x8000000010, 0x2, 0x0) (async)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
recvfrom(r2, &(0x7f00000001c0)=""/42, 0x2a, 0x0, &(0x7f0000000240)=@l2={0x1f, 0x7ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xb, 0x1}, 0x80) (async)
write(r1, &(0x7f00000002c0)="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", 0xfc) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000344000480400001800e00010062790f9638d274656f726465720000002c00028008000140000000100800024000000000080004400000001f080003400000000108000540000000040900010073797a30000000000900020073797a320000000014000000110001000000000000000000"], 0x98}}, 0x0) (async)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000040)={0x11, @broadcast, 0x4e20, 0x1, 'lblcr\x00', 0x3, 0x8e2e, 0x35}, 0x2c) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), r6) (async)
sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7dc9}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe84}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb78}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}]}, 0x84}, 0x1, 0x0, 0x0, 0x805}, 0x0)

1.151536684s ago: executing program 0 (id=5034):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000004c0)=0x4)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x6}]})
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0x800)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000007c0)={0x1, &(0x7f0000000000)=[{0x6, 0x60}]})

1.15049995s ago: executing program 4 (id=5035):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x23, 0x8, 0x0, 0x400, 0x0, 0x7e, 0xfb, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x2, 0x8, 0x0, 0x82000045, [0x1, 0x89ff]}})

1.090160191s ago: executing program 4 (id=5036):
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x100000000000003)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/20, @ANYBLOB='\a\x00'/19, @ANYRES32=0x0], 0x50)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x11, 0x0, 0x0, 0xd9, 0x6, 0x0, @loopback, @private=0xa010101, {[@generic={0x7, 0x7, "04039fff61"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x100, 0x7, [@fwd={0x6}, @struct={0xa, 0x4, 0x0, 0x4, 0x0, 0x2, [{0x6, 0x3, 0x6}, {0x7, 0x4, 0x7fff}, {0x9, 0x3, 0xfffffff7}, {0x10, 0x5, 0x3}]}, @func={0xc, 0x0, 0x0, 0xc, 0x5}, @typedef={0xc, 0x0, 0x0, 0x8, 0x5}, @datasec={0xd, 0x4, 0x0, 0xf, 0x3, [{0x5, 0x1, 0x1}, {0x2, 0x1ff, 0xfffffffd}, {0x5, 0x178f, 0x8000}, {0x2, 0x6, 0x4}], "f78ebf"}, @typedef={0x9, 0x0, 0x0, 0x8, 0x1}, @datasec={0xa, 0x5, 0x0, 0xf, 0x1, [{0x4, 0x2, 0x2}, {0x2, 0x4, 0x2}, {0x2, 0x5, 0xffff87a1}, {0x5, 0x101, 0xfffffffa}, {0x4, 0x9, 0x8}], 'o'}, @restrict={0xe, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x0, 0x0, 0x61, 0x2e, 0x30]}}, &(0x7f0000000400)=""/19, 0x11f, 0x13, 0x0, 0x1}, 0x28)
socket$alg(0x26, 0x5, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x6c47}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, r2, 0x8, &(0x7f0000000480)={0x7, 0x80000000}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xb, 0x7, 0x1}, 0x10, 0xffffffffffffffff, r0, 0x4, 0x0, &(0x7f00000005c0)=[{0x3, 0x1, 0x8, 0xa}, {0x2, 0x2, 0x9, 0x1}, {0x1, 0x4, 0xb, 0xb}, {0x1, 0x4, 0x7, 0x6}], 0x10, 0x1}, 0x94)

999.204655ms ago: executing program 5 (id=5037):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
sendmsg$can_raw(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x200848c0}, 0x40010)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=<r4=>0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0x2, r3, r4}, {0x82c, 0x3, 0x8000000000000000, 0x8, 0xf43, 0x6, 0x7fffffffffffffff, 0x8001}, {0x3, 0x7, 0x4}, 0x8a, 0x0, 0x2, 0x0, 0x2, 0x1}, {{@in6=@mcast1, 0x4d3, 0x32}, 0xa, @in6=@mcast1, 0x34ff, 0x0, 0x1, 0x1, 0x2, 0x84, 0x8}}, 0xe8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x140}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x98, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x160}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9, 0x48, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x7, 0x1, 0x1c}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0xc}}, @func_proto]}}, 0x0, 0x62, 0x27, 0x1}, 0x28)

997.057352ms ago: executing program 2 (id=5038):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0xc)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x64, r3, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x448c9}, 0x4004810)

923.486739ms ago: executing program 1 (id=5039):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, 0xffffffffffffffff, 0x32, 0x0, @val=@tracing={0x0, 0x1}}, 0x20)

900.031507ms ago: executing program 0 (id=5040):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = socket(0xa, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80000000, 0x0, 0x20, 0x80, 0xffffffff}, 0x0, 0x0, 0x4, 0x6, 0x2e, 0x14, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3, 0x4000008, 0x0, 0x3}}}}]}, 0x78}}, 0x0)
socket(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0)
recvmmsg$unix(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000002480)=""/4100, 0x1004}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f0000000680)=""/193, 0xc1}], 0x5}}], 0x1, 0x40010122, 0x0) (async)
recvmmsg$unix(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000002480)=""/4100, 0x1004}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f0000000680)=""/193, 0xc1}], 0x5}}], 0x1, 0x40010122, 0x0)
write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000) (async)
unshare(0x6a040000)
socket(0x22, 0xa, 0x2) (async)
r4 = socket(0x22, 0xa, 0x2)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x64, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9000}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8100}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88b5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4)
getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000040)={<r6=>0x0, 0x5}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000000c0)={r6, 0x3c, "288e4aafbf158c62e824ae3041191115943ddf18006f5800cf06389a2233538e80bb865aebab664e1e7243d4b2d6b0a415a8874c3c15a60c0cc9ccaf"}, &(0x7f0000000140)=0x44)
recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0)

890.457688ms ago: executing program 4 (id=5041):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x6a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1, {[@timestamp={0x44, 0x4, 0x3, 0x0, 0x5}]}}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bind$netrom(r0, &(0x7f0000000180)={{0x3, @null, 0x5}, [@null, @bcast, @null, @null, @default, @bcast, @null, @bcast]}, 0x48)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00'}, 0x80)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000002c0)={<r5=>0xffffffffffffffff})
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000940)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000440)={0x4c0, r6, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf5c}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x27a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_BEARER={0x120, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ab}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xeb}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5e10a516}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xf3af, @private1, 0x6b}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @private0}}}}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @local, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6ba}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd8c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x8894}, 0x20044001)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a48000000060a010400000000000000000a0000010900010073797a31000000001c0004801800018008000100647570000c00028008000140002000020900020073797a32"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0feffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)

751.573517ms ago: executing program 5 (id=5042):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0)
r2 = socket$inet6(0x10, 0x4, 0xc89)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40, 0x55, 0x7, 0xfff00000}, {0x16, 0x0, 0x0, 0x40000000}]}, 0x10) (async)
sendto$inet6(r2, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x408d6, 0x0, 0x0)

750.767881ms ago: executing program 1 (id=5043):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20)
close(0x3)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x2, 0x1}, 0x20)
close(r0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r3, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)={0x3, 'veth1_to_hsr\x00', {0x57e}, 0xf662})
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x1a, "6c9c388e7b37a8c403bbf089b9ed4ae07897b25312e9b9d736de"}, &(0x7f00000002c0)=0x22)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0)

713.101929ms ago: executing program 2 (id=5044):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x1)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xb, 0x0, 0x8, 0xfffffffe}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x44, 0x5a, 0x1, 0x0, 0x25dfdbfb, {0x2}, [{0x30, 0x1, [@m_nat={0x2c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x810)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5c42906bda7ae59e}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r2, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004054}, 0x20000004) (async)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5c42906bda7ae59e}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r2, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004054}, 0x20000004)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x10}, {0x0, 0x6, 0x0, 0x4, 0x6, 0x0, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24041090}, 0x20000000) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x10}, {0x0, 0x6, 0x0, 0x4, 0x6, 0x0, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24041090}, 0x20000000)
pipe(0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r9, 0x12}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)="59e0cfe9", 0x4}], 0x1}, 0x8014)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000240), &(0x7f0000000280)=0x8) (async)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000240), &(0x7f0000000280)=0x8)
syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0) (async)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x158, r10, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x158}, 0x1, 0x0, 0x0, 0x801}, 0x4048004)

633.22985ms ago: executing program 4 (id=5045):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x8, 0x0, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000003c0)=ANY=[], 0x18)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r5, 0x6, 0x18, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x42050, &(0x7f00000002c0)={0xa, 0x4e24, 0x5, @local, 0x3b67}, 0x1c)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES32=r6, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r9, 0x0, 0x0)
sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3)
ioctl$int_in(r8, 0x5421, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010428bd70000300000000000000", @ANYRES32=r6, @ANYBLOB="00000000051c00002c0012800e00010069703665727370616e000000180002800400120008000100856af5a9db80f3be44e5cccc2f2acc958c2f4291a3", @ANYBLOB], 0x4c}}, 0x12)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x44000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_batadv\x00'})
r10 = socket(0x10, 0x3, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x70, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000)
sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0)
pipe(&(0x7f0000000040))

579.535381ms ago: executing program 1 (id=5046):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0xc, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff705"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

577.55934ms ago: executing program 5 (id=5047):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x3, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = socket(0x10, 0x3, 0x0) (async)
socket$inet6(0xa, 0x1, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newtfilter={0x0, 0x2c, 0x10, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x1, 0x14}, {0x2, 0xfff3}, {0x4, 0xfff3}}, [@TCA_CHAIN={0x0, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048881}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
close(0x4) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async)
sendmmsg$inet(r8, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)='@', 0x1}], 0x1}}], 0x1, 0x4000000) (async)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0xfe, &(0x7f0000000a40)=[@timestamping={{0x14, 0xfe, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r2], 0x20}}, 0x0) (async)
r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f00000000c0)={'veth0_to_bond\x00', @random="0131013000"}) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r9, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=0x1, @ANYRES32=r0, @ANYBLOB='/\x00\x00\x00 \x00\x00\x00', @ANYRES32, @ANYBLOB="777a5ebba10afa94070f62b2a4d1f05315472825d3a85c9834a8cee9ef60f82025b25614919205da3b6d1a75a2ec661da9d6641023eb881a38d6bbf99e96e440fe989f1b02f56766a6853a5f7526f8962810b13cb4a8a3d3351a010d38c968582fa0fbb459ec33b9a978941b255be31ec960490c2b3bb4809ae12a38ea6cb817ccf80922aa8a3d8293886e84fca6434a55c17677e9cd5350bfe14eff0eb44a9744a2bdf3713293cc2c4a10", @ANYRES32=0x0, @ANYRES64=0x0], 0x20)

567.327241ms ago: executing program 0 (id=5048):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1a3e, 0x0, 0x0, 0x0, 0xfffffffd}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xfffffffffffffff4, 0x8}], {0x95, 0x0, 0x700}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xc}, 0x94)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'ip6gre0\x00', 0x400})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r2, <r3=>0xffffffffffffffff}, 0x4)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, 0x0}, 0x20)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="150200000000100014003500776c616e30000000000000000000000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0xba01, 0x0, 0xc040}, 0x0)

417.587688ms ago: executing program 1 (id=5049):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x6, 0x202, 0x1, 0x9, <r1=>0x0}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={r1, 0x59, "1579ae4e5d97533d12da86d1e0bb0289bfad4a801596209570c919834fd316516083a7cff33f0eb7317462f767a4edf2dcd33f7c8c64a864425e6f4e73098072fa20f1af99405ea0b15228cccc55b6a86106044630f933141c"}, &(0x7f0000000180)=0x61)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty, {[@lsrr={0x83, 0x3, 0xec}]}}}}})

371.477278ms ago: executing program 5 (id=5050):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x6)
close(0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4)
ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$netlink(0x10, 0x3, 0x15)

368.633607ms ago: executing program 0 (id=5051):
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x100000000000003)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/20, @ANYBLOB='\a\x00'/19, @ANYRES32=0x0], 0x50)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x11, 0x0, 0x0, 0xd9, 0x6, 0x0, @loopback, @private=0xa010101, {[@generic={0x7, 0x7, "04039fff61"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x100, 0x7, [@fwd={0x6}, @struct={0xa, 0x4, 0x0, 0x4, 0x0, 0x2, [{0x6, 0x3, 0x6}, {0x7, 0x4, 0x7fff}, {0x9, 0x3, 0xfffffff7}, {0x10, 0x5, 0x3}]}, @func={0xc, 0x0, 0x0, 0xc, 0x5}, @typedef={0xc, 0x0, 0x0, 0x8, 0x5}, @datasec={0xd, 0x4, 0x0, 0xf, 0x3, [{0x5, 0x1, 0x1}, {0x2, 0x1ff, 0xfffffffd}, {0x5, 0x178f, 0x8000}, {0x2, 0x6, 0x4}], "f78ebf"}, @typedef={0x9, 0x0, 0x0, 0x8, 0x1}, @datasec={0xa, 0x5, 0x0, 0xf, 0x1, [{0x4, 0x2, 0x2}, {0x2, 0x4, 0x2}, {0x2, 0x5, 0xffff87a1}, {0x5, 0x101, 0xfffffffa}, {0x4, 0x9, 0x8}], 'o'}, @restrict={0xe, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x0, 0x0, 0x61, 0x2e, 0x30]}}, &(0x7f0000000400)=""/19, 0x11f, 0x13, 0x0, 0x1}, 0x28)
socket$alg(0x26, 0x5, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x6c47}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, r2, 0x8, &(0x7f0000000480)={0x7, 0x80000000}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xb, 0x7, 0x1}, 0x10, 0xffffffffffffffff, r0, 0x4, 0x0, &(0x7f00000005c0)=[{0x3, 0x1, 0x8, 0xa}, {0x2, 0x2, 0x9, 0x1}, {0x1, 0x4, 0xb, 0xb}, {0x1, 0x4, 0x7, 0x6}], 0x10, 0x1}, 0x94)

260.693677ms ago: executing program 0 (id=5052):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="86dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
unshare(0x22020600)
r4 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x20000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x2004c051)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000000)=0x7c, 0x4)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0x9, &(0x7f0000000080)=0x9, 0x4)
r8 = socket$netlink(0x10, 0x3, 0x4)
write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x3, 0x81, 0x31da, 0x0, 0xfffffffd, 0xfffff800, 0x4, 0xa}}}}]}, 0x58}}, 0x0)
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x2e]}}, &(0x7f0000000580)=""/68, 0x1b, 0x44, 0x0, 0x8, 0x10000, @value=r1}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7, '\x00', r11, r13, 0x4, 0x5, 0x2}, 0x50)
r14 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r15, {0xffff, 0xe}, {0x3, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004850)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x1, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000040)='GPL\x00'}, 0x94)

211.814278ms ago: executing program 1 (id=5053):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000c00)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94)
r2 = socket$inet(0x2, 0x1, 0x0)
getsockopt(r2, 0x0, 0x15, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})

155.000767ms ago: executing program 5 (id=5054):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x0, 0xeb, 0x0, 0x1, 0x7}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001800dd52c2bb7d000200000002000004fe00000600141e00f8ffffff080022563e5a000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'dummy0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10)

154.434353ms ago: executing program 2 (id=5055):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, 0x0, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x7ea11167df8711ce)
r0 = socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0x5, 0x0)
socket(0x10, 0x3, 0x0)
listen(r1, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$nl_xfrm(0x10, 0x3, 0x6)
close(0x3) (async)
close(0x3)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) (async)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async)
sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0xfffffffffffffe45}], 0x1, 0x0, 0x2}, 0x40000300)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
connect$vsock_stream(r0, 0x0, 0x0) (async)
connect$vsock_stream(r0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190001002cbd71000000f9ff1c"], 0x1c}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r3, @ANYBLOB="010426bd7000f8dbdf2502000000080001", @ANYRES32=r6], 0x1c}}, 0x4008054)
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000000)=0x9aec, 0x4)
write$nci(r5, &(0x7f0000000240)=ANY=[], 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000100000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000100000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$nci(r5, 0x0, 0x14) (async)
write$nci(r5, 0x0, 0x14)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

115.207289ms ago: executing program 4 (id=5056):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000004000000000000000200000604000000020000000000000000000000000000000085d4005f00"], &(0x7f0000000f40)=""/4089, 0x38, 0xff9, 0x8}, 0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r1 = socket(0x8, 0x0, 0x8000)
ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0)
r2 = socket(0x1e, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r5=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000600)={r5, 0x6a4}, &(0x7f0000000640)=0x8)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000fc000000000000000000000000000001000020004e230000000020a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000001010000000033000000fe80000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff000000000000000096070000000000000000000000000002be0000000000000000000000ffffffff"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r7 = epoll_create1(0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x4, 0x7, 0x6, 0x0, 0x5, 0xc87, 0x9, 0x2}, &(0x7f0000000100)={0x9, 0x6, 0x3, 0x2, 0x3, 0x5, 0x4, 0x9}, &(0x7f0000000280)={0x3, 0xed, 0xffffffff, 0xc46d, 0xffffffffffff478e, 0x1, 0x81, 0x2}, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000480)={&(0x7f0000000440)={[0x2]}, 0x8})
close(r8)
socket(0x1d, 0x2, 0x6)
setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2400000007000000070000000010000000200000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000002c0)={0xa002a014})
socket(0x22, 0x6, 0x3)

0s ago: executing program 1 (id=5057):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x8}, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000200)="00f8ea8814bd", 0x6}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x19}, 0x5}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000580)="d1", 0x1}], 0x1}}], 0x2, 0x40)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000180)=0x8) (async)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)) (async)
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) (async, rerun: 64)
write$ppp(r2, &(0x7f0000000300)="4daf", 0x2) (rerun: 64)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x400}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r6, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) (async, rerun: 64)
r9 = socket$unix(0x1, 0x2, 0x0) (rerun: 64)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0}) (rerun: 32)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000e6de4cb212af27ed0137d0fb530a3d667b7d6a1551842adf742258c63a1b1a87e0c1ec05f22b2c1b3fca94b3040149c5a22159351bd76a515c84098d6fc72b9a6371a6df7d32e165bbcc864633bea87d661450eba81678dcd1e58ab39c010d01d2ec77ff6ba9f064b8b5aca8980d081d48a9fea33b1c1c5163bc8be74b638d8ca6d499d4e682fb2e017b0918faefdcd25a210b0507cb282beab3898c33efe05d32b0", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0)

kernel console output (not intermixed with test programs):

496.741006][T19505] lo speed is unknown, defaulting to 1000
[  497.302811][T19505] lo speed is unknown, defaulting to 1000
[  497.639920][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.728236][T19559] __nla_validate_parse: 7 callbacks suppressed
[  497.728256][T19559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3292'.
[  497.746746][T19559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3292'.
[  497.762602][T19559] netlink: 'syz.0.3292': attribute type 18 has an invalid length.
[  497.787890][T19560] xt_CONNSECMARK: invalid mode: 0
[  498.038816][T19564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3294'.
[  498.056629][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3295'.
[  498.077400][T19569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3296'.
[  498.087952][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3295'.
[  498.763344][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.998321][T19604] Bluetooth: MGMT ver 1.23
[  499.818871][T19620] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3302'.
[  499.909414][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.159930][T19618] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.167817][T19618] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.378847][T19651] netlink: 'syz.4.3310': attribute type 1 has an invalid length.
[  500.415120][T19618] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  500.427547][T19618] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  500.477265][T19618] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  500.520975][T19618] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  500.617879][T19651] bond1: entered promiscuous mode
[  500.624229][T19651] 8021q: adding VLAN 0 to HW filter on device bond1
[  500.639970][  T172] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.653785][  T172] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.663382][T19654] tipc: Started in network mode
[  500.669817][T19654] tipc: Node identity baed7e6d7c55, cluster identity 4711
[  500.677722][T19654] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  500.704173][T19651] syzkaller0: entered promiscuous mode
[  500.713112][T19651] syzkaller0: entered allmulticast mode
[  500.728433][  T172] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.741794][  T172] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.852376][T19661] netlink: 514 bytes leftover after parsing attributes in process `syz.0.3312'.
[  501.039291][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.191590][T19650] tipc: Resetting bearer <eth:syzkaller0>
[  501.223353][T19650] tipc: Disabling bearer <eth:syzkaller0>
[  501.561804][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[  501.588400][T19693] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  501.624179][T19699] veth1_to_bond: entered allmulticast mode
[  501.665101][T19699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3321'.
[  501.733155][T19710] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  501.815752][T19693] bond2: option arp_interval: invalid value (18446744073709551615)
[  501.880641][T19693] bond2: option arp_interval: allowed values 0 - 2147483647
[  501.945589][T19693] bond2 (unregistering): Released all slaves
[  502.080692][T19699] veth1_to_bond (unregistering): left allmulticast mode
[  502.107926][T19699] bond0: (slave bond_slave_1): Releasing backup interface
[  502.159716][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.326563][T19724] lo speed is unknown, defaulting to 1000
[  502.327400][T19729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3329'.
[  502.346192][T19724] lo speed is unknown, defaulting to 1000
[  502.687628][T19739] 8021q: adding VLAN 0 to HW filter on device bond13
[  502.755048][T19741] macvlan0: entered allmulticast mode
[  502.780649][T19741] veth0_to_bond: entered allmulticast mode
[  502.791315][T19741] bond13: (slave macvlan0): Enslaving as an active interface with an up link
[  503.280555][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.390302][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.499376][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.670460][T19748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  505.928420][T19791] __nla_validate_parse: 1 callbacks suppressed
[  505.928440][T19791] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3344'.
[  506.122943][T19807] ip6_tunnel: non-ECT from fc04:0000:0000:0000:0000:0000:0000:0000 with DS=0xf
[  506.156553][T19807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3347'.
[  506.375763][T19823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3351'.
[  506.385369][T19823] unsupported nla_type 216
[  506.609470][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.670960][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.892377][T19843] syzkaller0: entered promiscuous mode
[  506.898350][T19843] syzkaller0: entered allmulticast mode
[  506.930686][T19843] TC_ACT_REPEAT abuse ?
[  506.989206][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms
[  506.997420][    C0] lec:lec_tx_timeout: lec0
[  507.081996][T19850] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3359'.
[  507.236483][T19853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3360'.
[  507.384785][T19836] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3354'.
[  507.412303][T19861] netlink: 'syz.2.3362': attribute type 30 has an invalid length.
[  507.502415][T19854] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.510259][T19854] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.655427][T19867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3363'.
[  507.678882][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3363'.
[  507.685146][T19854] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  507.741617][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.747277][T19854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  507.788464][ T7064] lec:lec_start_xmit: lec0:No lecd attached
[  507.923097][T19877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3366'.
[  508.141588][T10524] lo speed is unknown, defaulting to 1000
[  508.161299][T10524] sqz0: Port: 1 Link DOWN
[  508.236431][T19862] gretap1: entered promiscuous mode
[  508.242074][T19862] gretap1: entered allmulticast mode
[  508.303590][ T9003] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.334806][T19896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  508.356335][ T9003] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.382314][T19896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  508.408390][T10524] lo speed is unknown, defaulting to 1000
[  508.602299][ T9003] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.616939][ T9003] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.626298][T19913] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3375'.
[  508.657548][T19912] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  508.847189][T19914] netlink: 'syz.0.3373': attribute type 10 has an invalid length.
[  508.872216][T19922] xt_CT: You must specify a L4 protocol and not use inversions on it
[  508.886470][T19920] xt_CT: You must specify a L4 protocol and not use inversions on it
[  508.896713][T19914] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  508.907399][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.932042][T19920] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  509.283053][T19945] netlink: 'syz.2.3384': attribute type 11 has an invalid length.
[  509.291364][T19945] netlink: 'syz.2.3384': attribute type 4 has an invalid length.
[  509.551760][T19953] lo speed is unknown, defaulting to 1000
[  509.587883][T19953] lo speed is unknown, defaulting to 1000
[  509.866981][T19961] lo speed is unknown, defaulting to 1000
[  510.046467][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.202122][T19961] lo speed is unknown, defaulting to 1000
[  510.320598][T19975] can: request_module (can-proto-0) failed.
[  510.503087][T19983] netlink: 'syz.1.3397': attribute type 1 has an invalid length.
[  510.573691][T19986] netlink: 'syz.0.3398': attribute type 1 has an invalid length.
[  510.663677][T19983] bond1: entered promiscuous mode
[  510.671200][T19983] 8021q: adding VLAN 0 to HW filter on device bond1
[  510.748110][T19986] bond4: entered promiscuous mode
[  510.754129][T19986] 8021q: adding VLAN 0 to HW filter on device bond4
[  510.784615][T19980] bond1: (slave bridge1): making interface the new active one
[  510.795244][T19980] bridge1: entered promiscuous mode
[  510.819184][T19980] bridge1: left promiscuous mode
[  510.958247][T19986] bond4: (slave bridge4): making interface the new active one
[  510.969271][T19986] bridge4: entered promiscuous mode
[  510.986467][T19986] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  511.172022][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.558177][T20006] syzkaller1: entered promiscuous mode
[  511.576158][T20006] syzkaller1: entered allmulticast mode
[  511.789448][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  512.085483][T20029] xt_hashlimit: size too large, truncated to 1048576
[  512.214220][T20042] __nla_validate_parse: 9 callbacks suppressed
[  512.214335][T20042] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3408'.
[  512.279388][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.311039][T20025] bond5: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  512.332341][T20025] bond5 (unregistering): Released all slaves
[  512.365963][T20044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3404'.
[  512.418514][T20044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3404'.
[  512.608389][T20047] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  512.797724][T20050] syzkaller0: entered promiscuous mode
[  512.816155][T20050] syzkaller0: entered allmulticast mode
[  512.840575][T20050] tipc: Resetting bearer <eth:syzkaller0>
[  512.876276][T20035] tipc: Resetting bearer <eth:syzkaller0>
[  512.989109][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5200 ms
[  512.997229][    C0] lec:lec_tx_timeout: lec0
[  513.131071][T20071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3414'.
[  513.461741][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.589283][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.723005][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.984496][T20035] tipc: Disabling bearer <eth:syzkaller0>
[  516.212411][T20076] netlink: 'syz.0.3417': attribute type 1 has an invalid length.
[  516.328451][T20076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3417'.
[  516.366948][T20086] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3419'.
[  516.413865][T20087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3417'.
[  516.424003][T20086] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3419'.
[  516.435185][T20082] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  516.456784][T20082] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  516.634303][T20080] bond2: option arp_interval: invalid value (18446744073709551615)
[  516.649615][T20080] bond2: option arp_interval: allowed values 0 - 2147483647
[  516.677669][T20080] bond2 (unregistering): Released all slaves
[  516.696385][T20101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  516.783013][T20076] bond5: (slave bridge5): Enslaving as an active interface with a down link
[  516.793993][T20087] 8021q: adding VLAN 0 to HW filter on device bond5
[  516.833921][T20085] veth0_macvtap: entered allmulticast mode
[  516.841848][T20085] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  516.870708][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.283545][T20129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3430'.
[  517.475365][T20138] netlink: 604 bytes leftover after parsing attributes in process `syz.5.3429'.
[  517.621658][ T7304] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  517.652176][ T7304] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  517.690911][T20131] netlink: 'syz.5.3429': attribute type 29 has an invalid length.
[  517.725574][ T7304] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  517.754110][ T7304] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  517.772281][T20136] netlink: 'syz.5.3429': attribute type 29 has an invalid length.
[  517.787216][T20147] dummy0: mtu less than device minimum
[  517.930240][T20153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  517.987711][T20153] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  518.030790][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.310468][T20168] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3438'.
[  518.470076][T20177] Bluetooth: MGMT ver 1.23
[  518.900075][T20189] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3442'.
[  518.953110][T20191] netlink: 'syz.1.3443': attribute type 1 has an invalid length.
[  518.974607][T20191] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3443'.
[  518.976594][T20189] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3442'.
[  519.008082][T20191] netlink: 'syz.1.3443': attribute type 1 has an invalid length.
[  519.124840][T20191] 8021q: adding VLAN 0 to HW filter on device bond2
[  519.144981][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.176117][T20194] vlan2: entered allmulticast mode
[  519.181645][T20194] bond2: entered allmulticast mode
[  519.636096][T20213] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3450'.
[  519.648768][T20213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3450'.
[  519.727823][T20223] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  519.803914][T20218] bond2: entered allmulticast mode
[  519.892294][T20222] macvlan2: entered promiscuous mode
[  519.908405][T20222] macvlan2: entered allmulticast mode
[  519.920071][T20222] bond2: entered promiscuous mode
[  519.935621][T20222] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  519.970939][T20222] bond2: left promiscuous mode
[  520.015527][T20230] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3455'.
[  520.285049][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.448665][T20257] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3461'.
[  520.513606][T20259] netlink: 'syz.5.3462': attribute type 1 has an invalid length.
[  520.542568][T20259] netlink: 'syz.5.3462': attribute type 1 has an invalid length.
[  520.840776][T20278] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  521.128195][T20294] netlink: 'syz.1.3470': attribute type 3 has an invalid length.
[  521.172946][T20294] netlink: 'syz.1.3470': attribute type 309 has an invalid length.
[  521.336562][T20307] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  521.409851][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.588163][T20322] netlink: 'syz.0.3477': attribute type 1 has an invalid length.
[  521.670619][T20322] 8021q: adding VLAN 0 to HW filter on device bond6
[  521.715176][T20324] bond6: entered allmulticast mode
[  521.762893][T20327] hsr0: entered promiscuous mode
[  521.768671][T20333] hsr_slave_0: left promiscuous mode
[  521.776105][T20333] hsr_slave_1: left promiscuous mode
[  521.786706][T20333] hsr0 (unregistering): left promiscuous mode
[  521.816761][T20310] netlink: 'syz.4.3476': attribute type 15 has an invalid length.
[  521.832827][ T7304] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  521.832987][T20310] netlink: 'syz.4.3476': attribute type 15 has an invalid length.
[  521.844117][ T7304] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  521.860243][ T7304] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  521.872421][ T7304] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  521.920627][T20334] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  522.549970][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.669442][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.493766][T20315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  524.753965][T20343] 8021q: VLANs not supported on xfrm0
[  524.779276][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.084451][T20359] __nla_validate_parse: 7 callbacks suppressed
[  525.084470][T20359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3488'.
[  525.106690][T20366] netlink: 'syz.1.3491': attribute type 15 has an invalid length.
[  525.137112][T20359] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  525.413704][T20370] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  525.448825][T20372] lo speed is unknown, defaulting to 1000
[  525.512992][T20372] lo speed is unknown, defaulting to 1000
[  525.586999][T20387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3494'.
[  525.666462][T20389] bridge0: port 3(team0) entered blocking state
[  525.682024][T20387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3494'.
[  525.705528][T20389] bridge0: port 3(team0) entered disabled state
[  525.759644][T20389] team0: entered allmulticast mode
[  525.784439][T20389] team_slave_0: entered allmulticast mode
[  525.807217][T20389] team_slave_1: entered allmulticast mode
[  525.832988][T20389] team0: entered promiscuous mode
[  525.855162][T20389] team_slave_0: entered promiscuous mode
[  525.879743][T20389] team_slave_1: entered promiscuous mode
[  525.894506][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3495'.
[  525.915501][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.734420][T20419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3500'.
[  526.796218][    T9] IPVS: starting estimator thread 0...
[  526.811401][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3502'.
[  526.831713][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3502'.
[  526.899084][T20421] IPVS: using max 28 ests per chain, 67200 per kthread
[  526.939700][T20420] sit1: entered promiscuous mode
[  527.052729][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.150992][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.414666][T20435] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3508'.
[  527.422508][T20432] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.3506'.
[  527.460266][T20432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3506'.
[  527.490449][T20432] veth1_macvtap: left promiscuous mode
[  527.976524][T20467] netlink: 'syz.5.3516': attribute type 1 has an invalid length.
[  527.995130][T20469] netlink: 'syz.5.3516': attribute type 1 has an invalid length.
[  528.004530][T20467] netlink: 'syz.5.3516': attribute type 2 has an invalid length.
[  528.013375][T20469] netlink: 'syz.5.3516': attribute type 2 has an invalid length.
[  528.024225][T20467] netlink: 'syz.5.3516': attribute type 3 has an invalid length.
[  528.033464][T20468] tap0: tun_chr_ioctl cmd 1074025680
[  528.040954][T20465] TCP: TCP_TX_DELAY enabled
[  528.050533][T20469] netlink: 'syz.5.3516': attribute type 3 has an invalid length.
[  528.211008][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.365188][T20480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  529.069286][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.330563][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.080661][T20554] bridge_slave_0: left allmulticast mode
[  530.096683][T20554] bridge_slave_0: left promiscuous mode
[  530.110878][T20554] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.166014][T20554] bridge_slave_1: left allmulticast mode
[  530.199695][T20554] bridge_slave_1: left promiscuous mode
[  530.219805][T20554] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.287366][T20554] bond0: (slave bond_slave_0): Releasing backup interface
[  530.334708][T20554] bond0: (slave bond_slave_1): Releasing backup interface
[  530.389373][T20554] team0: Port device team_slave_0 removed
[  530.409088][T20554] team0: Port device team_slave_1 removed
[  530.416497][T20554] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  530.425263][T20554] batman_adv: batadv0: Removing interface: batadv_slave_0
[  530.441865][T20554] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  530.449736][T20554] batman_adv: batadv0: Removing interface: batadv_slave_1
[  530.459427][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.470208][T20554] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  530.524442][T20555] team0: Mode changed to "loadbalance"
[  530.555872][T20558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  530.569609][T20560] scsi_nl_rcv_msg: discarding partial skb
[  530.754805][T20570] __nla_validate_parse: 68 callbacks suppressed
[  530.754828][T20570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3546'.
[  530.779574][T20570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3546'.
[  531.163973][T20596] netlink: 'syz.2.3555': attribute type 1 has an invalid length.
[  531.315386][T20596] 8021q: adding VLAN 0 to HW filter on device bond3
[  531.354246][T20609] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  531.422878][T20601] bond3: (slave veth7): Enslaving as an active interface with a down link
[  531.456261][T20611] vlan3: entered promiscuous mode
[  531.505282][   T29] audit: type=1804 audit(1776661794.648:8): pid=20612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3560" name="/newroot/96/cgroup.controllers" dev="tmpfs" ino=515 res=1 errno=0
[  531.569565][   T29] audit: type=1800 audit(1776661794.648:9): pid=20612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3560" name="cgroup.controllers" dev="tmpfs" ino=515 res=0 errno=0
[  531.592333][ T7284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.177017][T20629] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.183819][T20644] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3568'.
[  532.184763][T20629] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.554130][T20629] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  532.620090][T20629] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  532.645708][T20650] netlink: 'syz.4.3569': attribute type 11 has an invalid length.
[  532.719248][ T7284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.116379][ T7302] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  533.139319][ T7302] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  533.159575][ T7302] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  533.168729][ T7302] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  533.261751][ T7302] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  533.295658][ T7302] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  533.323742][ T7302] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  533.374523][ T7302] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  533.836566][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.478860][T20726] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3584'.
[  534.940570][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.958470][T20745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'.
[  534.992365][T20745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'.
[  535.015897][T20745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'.
[  535.028394][T20745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'.
[  535.073902][T20745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'.
[  535.110911][T20745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'.
[  535.767569][T20745] __nla_validate_parse: 56 callbacks suppressed
[  535.767591][T20745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'.
[  535.789702][T20745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'.
[  535.803206][T20745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'.
[  535.812979][T20745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'.
[  535.827756][T20745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'.
[  535.839291][T20745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'.
[  535.848408][T20745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'.
[  535.857714][T20745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'.
[  535.875278][T20745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'.
[  535.894447][T20745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'.
[  536.069492][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.305507][ T7295] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0
[  536.322976][ T7295] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.346659][ T7295] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0
[  536.365881][ T7295] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.474200][ T7295] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0
[  536.484838][ T7295] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.497165][ T7295] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0
[  536.507240][ T7295] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.776042][T20794] IPv6: sit1: Disabled Multicast RS
[  536.934563][T20799] syzkaller0: entered promiscuous mode
[  536.948163][T20799] syzkaller0: entered allmulticast mode
[  537.183344][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.701753][ T7302] bond0: (slave bond_slave_0): interface is now down
[  537.716543][T20815] 8021q: adding VLAN 0 to HW filter on device bond0
[  537.733343][ T7302] bond0: (slave dummy0): interface is now down
[  537.890985][ T7302] bond0: (slave bond_slave_0): interface is now down
[  537.918282][ T7302] bond0: (slave dummy0): interface is now down
[  538.069060][ T7302] bond0: (slave bond_slave_0): interface is now down
[  538.095980][ T7302] bond0: (slave dummy0): interface is now down
[  538.225582][ T7302] bond0: now running without any active interface!
[  538.330810][ T7284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.642991][T20842] nbd: couldn't find device at index 0
[  538.885549][T20869] bond7 (unregistering): Released all slaves
[  539.471446][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.102128][T20943] netlink: 'syz.0.3645': attribute type 10 has an invalid length.
[  540.124778][T20947] 8021q: VLANs not supported on ip6_vti0
[  540.143282][T20943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  540.181878][T20943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  540.217905][T20943] hsr0: entered promiscuous mode
[  540.238801][T20943] bridge0: port 3(hsr0) entered blocking state
[  540.258532][T20943] bridge0: port 3(hsr0) entered disabled state
[  540.267647][T20943] hsr0: entered allmulticast mode
[  540.273851][T20943] hsr_slave_0: entered allmulticast mode
[  540.279974][T20943] hsr_slave_1: entered allmulticast mode
[  540.382050][T20949] lo speed is unknown, defaulting to 1000
[  540.396132][T20949] lo speed is unknown, defaulting to 1000
[  540.590537][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.139738][T20988] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  541.156771][T20988] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  541.302369][T20994] __nla_validate_parse: 79 callbacks suppressed
[  541.302403][T20994] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3660'.
[  541.349327][T20988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3658'.
[  541.407269][T20988] erspan1: entered promiscuous mode
[  541.426530][T20988] erspan1: entered allmulticast mode
[  541.444907][T20992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3658'.
[  541.497366][T20998] netlink: 'syz.0.3661': attribute type 13 has an invalid length.
[  541.759478][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.018145][T21013] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3665'.
[  542.282826][T21025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3668'.
[  542.314806][T21025] nbd: must specify an index to disconnect
[  542.514888][T21035] erspan0: entered promiscuous mode
[  542.539461][T21035] erspan0: entered allmulticast mode
[  542.640775][T21040] xt_hashlimit: size too large, truncated to 1048576
[  542.790060][T21048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3675'.
[  542.838499][T21048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3675'.
[  542.859193][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.950644][T21051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  543.003285][T21051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  543.067391][T21051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3676'.
[  543.221334][T21064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3679'.
[  543.356538][T21068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3680'.
[  543.386437][T21068] bridge_slave_0: left allmulticast mode
[  543.399521][T21068] bridge_slave_0: left promiscuous mode
[  543.413394][T21068] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.437910][T21068] bridge_slave_1: left allmulticast mode
[  543.455104][T21068] bridge_slave_1: left promiscuous mode
[  543.468112][T21068] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.470744][T21075] openvswitch: netlink: Flow actions attr not present in new flow.
[  543.492347][T21068] bond0: (slave bond_slave_0): Releasing backup interface
[  543.504357][T21068] bond0: (slave bond_slave_1): Releasing backup interface
[  543.520731][T21068] team0: Port device team_slave_0 removed
[  543.541468][T21068] team0: Port device team_slave_1 removed
[  543.555804][T21078] netlink: 'syz.5.3683': attribute type 13 has an invalid length.
[  543.559472][T21068] batman_adv: batadv0: Removing interface: batadv_slave_0
[  543.586360][T21078] netlink: 'syz.5.3683': attribute type 17 has an invalid length.
[  543.597316][T21068] batman_adv: batadv0: Removing interface: batadv_slave_1
[  543.623164][T21068] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  543.978440][T21075] veth0_to_bond: left allmulticast mode
[  543.985004][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.030793][T21078] ip6tnl0: left promiscuous mode
[  544.044231][T21078] 8021q: adding VLAN 0 to HW filter on device team0
[  544.055446][T21078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  544.182214][T21099] netlink: 'syz.2.3687': attribute type 21 has an invalid length.
[  544.202665][T21099] netlink: 'syz.2.3687': attribute type 1 has an invalid length.
[  544.441470][T21109] 5nè‹Ò: entered promiscuous mode
[  544.502697][T21113] syzkaller1: entered promiscuous mode
[  544.508476][T21113] syzkaller1: entered allmulticast mode
[  545.109364][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.546291][T21128] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  545.553853][T21128] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  545.561507][T21128] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  545.898895][T21133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  546.210269][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.332178][T21164] netlink: 'syz.4.3708': attribute type 12 has an invalid length.
[  546.351333][T21164] __nla_validate_parse: 4 callbacks suppressed
[  546.351355][T21164] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3708'.
[  546.400377][T21164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  546.575572][T21184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3712'.
[  546.831013][T21195] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3716'.
[  546.850908][T21195] netlink: Conntrack attr has 4 unknown bytes
[  546.982730][T21200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3718'.
[  546.998693][T21201] gre1: entered promiscuous mode
[  547.071365][T21200] 8021q: adding VLAN 0 to HW filter on device bond14
[  547.202244][T21210] bond15: option tlb_dynamic_lb: invalid value (5)
[  547.226603][T21210] bond15 (unregistering): Released all slaves
[  547.236092][T21218] netlink: 'syz.2.3723': attribute type 1 has an invalid length.
[  547.246134][T21218] netlink: 'syz.2.3723': attribute type 2 has an invalid length.
[  547.254592][T21218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'.
[  547.349274][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.388292][T21222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3725'.
[  547.415112][T21222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3725'.
[  547.564094][T21226] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3726'.
[  547.684926][T21235] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  547.912345][ T9003] bond2: left allmulticast mode
[  547.949771][ T9003] bridge0: port 4(bond2) entered disabled state
[  547.998991][ T9003] vlan2: left allmulticast mode
[  548.008563][ T9003] geneve0: left allmulticast mode
[  548.027725][ T9003] vlan2: left promiscuous mode
[  548.042941][ T9003] geneve0: left promiscuous mode
[  548.050194][ T9003] bridge0: port 3(vlan2) entered disabled state
[  548.062795][ T9003] bridge_slave_1: left allmulticast mode
[  548.073927][ T9003] bridge_slave_1: left promiscuous mode
[  548.086361][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.126153][ T9003] bridge_slave_0: left allmulticast mode
[  548.134496][ T9003] bridge_slave_0: left promiscuous mode
[  548.153461][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.228275][ T9003] bond6: left allmulticast mode
[  548.238026][ T9003] bond6: left promiscuous mode
[  548.243262][ T9003] bridge5: port 1(bond6) entered disabled state
[  548.500113][ T7284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.607937][ T9003] bond4 (unregistering): (slave ip6gre1): Releasing backup interface
[  548.618528][ T9003] ip6gre1 (unregistering): left promiscuous mode
[  549.106498][ T9003] bridge0 (unregistering): left promiscuous mode
[  549.485898][ T9003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  549.496262][ T9003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  549.508092][ T9003] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  549.517997][ T9003] bond0 (unregistering): Released all slaves
[  549.529442][ T9003] bond1 (unregistering): Released all slaves
[  549.544325][ T9003] bond2 (unregistering): Released all slaves
[  549.559605][ T9003] bond3 (unregistering): Released all slaves
[  549.583651][ T9003] bond4 (unregistering): Released all slaves
[  549.599500][ T9003] bond5 (unregistering): Released all slaves
[  549.614014][ T9003] bond6 (unregistering): Released all slaves
[  549.628851][ T9003] bond7 (unregistering): Released all slaves
[  549.640959][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.655715][ T9003] bond8 (unregistering): Released all slaves
[  549.671812][ T9003] bond9 (unregistering): (slave veth11): Releasing active interface
[  549.681973][ T9003] bond9 (unregistering): Released all slaves
[  549.696198][T21249] syz_tun: entered allmulticast mode
[  549.704139][T21249] syz_tun: left allmulticast mode
[  549.726886][T21259] syz_tun: entered allmulticast mode
[  550.020712][T21299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3734'.
[  550.044376][T21301] xt_hashlimit: size too large, truncated to 1048576
[  550.064365][T21307] netlink: 364 bytes leftover after parsing attributes in process `syz.5.3736'.
[  550.318462][ T9003] : left promiscuous mode
[  550.759203][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.792418][ T9003] tipc: Left network mode
[  551.528027][T21365] __nla_validate_parse: 3 callbacks suppressed
[  551.528048][T21365] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3746'.
[  551.622483][T21365] 8021q: adding VLAN 0 to HW filter on device batadv0
[  551.911078][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.443673][ T9003] hsr_slave_0: left promiscuous mode
[  552.454990][ T9003] hsr_slave_1: left promiscuous mode
[  552.472831][ T9003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  552.547860][ T9003] pim6reg99999991 (unregistering): left allmulticast mode
[  552.909666][ T9003] team0 (unregistering): Port device team_slave_1 removed
[  552.933890][T21310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  552.946825][ T9003] team0 (unregistering): Port device team_slave_0 removed
[  553.036688][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.510054][ T5821] lo speed is unknown, defaulting to 1000
[  553.537926][ T5821] syz2: Port: 1 Link DOWN
[  553.700352][T21434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3754'.
[  553.739622][T21434] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3754'.
[  553.823474][T21441] netlink: 'syz.2.3754': attribute type 20 has an invalid length.
[  553.830894][T21434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3754'.
[  553.860251][T21434] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3754'.
[  553.902843][T21443] tipc: Started in network mode
[  553.923457][T21443] tipc: Node identity , cluster identity 4711
[  553.931631][T21443] tipc: Failed to obtain node identity
[  553.937279][T21443] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  553.964306][T21448] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3759'.
[  554.188786][T21449] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  554.196931][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.266776][ T9003] IPVS: stop unused estimator thread 0...
[  555.301238][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.667265][T21487] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3771'.
[  556.429748][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.854707][T21522] lo speed is unknown, defaulting to 1000
[  556.872024][T21522] lo speed is unknown, defaulting to 1000
[  556.885889][T21522] lo speed is unknown, defaulting to 1000
[  556.953621][T21525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3783'.
[  556.962839][T21522] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  557.027695][T21528] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3784'.
[  557.051259][T21522] lo speed is unknown, defaulting to 1000
[  557.060322][T21528] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3784'.
[  557.073942][T21522] lo speed is unknown, defaulting to 1000
[  557.090176][T21522] lo speed is unknown, defaulting to 1000
[  557.110142][T21522] lo speed is unknown, defaulting to 1000
[  557.122271][T21528] xt_hashlimit: size too large, truncated to 1048576
[  557.133270][T21522] lo speed is unknown, defaulting to 1000
[  557.180136][T21522] lo speed is unknown, defaulting to 1000
[  557.210524][T21522] lo speed is unknown, defaulting to 1000
[  557.241527][T21522] lo speed is unknown, defaulting to 1000
[  557.569673][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.605746][T21540] netlink: 'syz.4.3788': attribute type 83 has an invalid length.
[  558.012712][T21555] netlink: 'syz.5.3792': attribute type 33 has an invalid length.
[  558.061205][T21555] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3792'.
[  558.092505][T21555] `: renamed from team0 (while UP)
[  558.699641][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.758517][T21591] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3799'.
[  558.801872][T21598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3802'.
[  559.107173][T21615] netlink: 'syz.4.3805': attribute type 89 has an invalid length.
[  559.369916][T21626] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  559.698219][T21640] netlink: 'syz.4.3814': attribute type 1 has an invalid length.
[  559.712515][T21640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  559.819267][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.899070][T21647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  559.928763][T10519] lo speed is unknown, defaulting to 1000
[  559.936291][T10519] syz2: Port: 1 Link ACTIVE
[  559.978394][T21652] batman_adv: batadv0: Interface activated: batadv_slave_0
[  560.039197][T21652] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  560.202853][T21658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3821'.
[  560.633733][T21688] openvswitch: netlink: Flow key attr not present in new flow.
[  560.734448][T21683] veth0: entered allmulticast mode
[  560.939354][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.953037][T21697] xt_recent: hitcount (4294967292) is larger than allowed maximum (65535)
[  561.064504][T21700] bond7: entered allmulticast mode
[  561.136373][T21708] geneve2: entered promiscuous mode
[  561.189939][T21708] geneve2: entered allmulticast mode
[  561.214118][T21708] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  561.235678][ T7302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  561.274107][ T9003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  561.283442][ T9003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  561.300534][ T9003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  561.412003][T21727] x_tables: duplicate underflow at hook 1
[  561.430271][T21727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3835'.
[  561.468323][T21729] tipc: Started in network mode
[  561.473787][T21729] tipc: Node identity fff, cluster identity 10
[  561.480330][T21729] tipc: Node number set to 4095
[  561.485975][T21729] tipc: Cannot configure node identity twice
[  561.857733][T21738] lo speed is unknown, defaulting to 1000
[  561.893794][T21744] tipc: Started in network mode
[  561.910736][T21744] tipc: Node identity 6eb0541d9f3c, cluster identity 4711
[  561.933646][T21744] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  561.967263][T21749] syzkaller0: entered promiscuous mode
[  561.981154][T21749] syzkaller0: entered allmulticast mode
[  562.042053][T21753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3842'.
[  562.091154][T21751] 
: option downdelay: invalid value (18446744073709547007)
[  562.102836][T21751] 
: option downdelay: allowed values 0 - 2147483647
[  562.129525][T21751] 
 (unregistering): Released all slaves
[  562.180958][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.351565][T21743] tipc: Resetting bearer <eth:syzkaller0>
[  562.406427][T21743] tipc: Disabling bearer <eth:syzkaller0>
[  562.438710][T21759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3845'.
[  562.455515][T21764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3846'.
[  562.459110][T21759] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3845'.
[  562.524316][T21738] lo speed is unknown, defaulting to 1000
[  562.604762][T21774] netlink: 'syz.4.3848': attribute type 1 has an invalid length.
[  562.726531][   T29] audit: type=1804 audit(1776661825.868:10): pid=21783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3852" name="/newroot/183/cgroup.controllers" dev="tmpfs" ino=958 res=1 errno=0
[  562.751095][   T29] audit: type=1800 audit(1776661825.868:11): pid=21783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3852" name="cgroup.controllers" dev="tmpfs" ino=958 res=0 errno=0
[  562.781684][   T29] audit: type=1800 audit(1776661825.868:12): pid=21783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3852" name="cgroup.controllers" dev="tmpfs" ino=958 res=0 errno=0
[  562.829553][T21780] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  562.840755][T21780] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  562.876728][T21787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3848'.
[  562.894650][T21774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3848'.
[  562.936373][T21774] 8021q: adding VLAN 0 to HW filter on device bond3
[  562.976760][T21793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3853'.
[  563.004366][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[  563.299505][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.834712][T21826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3861'.
[  563.890853][T21826] 8021q: adding VLAN 0 to HW filter on device bond0
[  563.998868][T21823] lo speed is unknown, defaulting to 1000
[  564.449362][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.582910][T21863] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  564.976145][T21823] lo speed is unknown, defaulting to 1000
[  565.074057][ T5833] Bluetooth: hci4: command 0x0406 tx timeout
[  565.529526][T21873] lo speed is unknown, defaulting to 1000
[  565.592619][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.956003][T21898] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3878'.
[  566.003263][T21873] lo speed is unknown, defaulting to 1000
[  566.065116][T21881] lo speed is unknown, defaulting to 1000
[  566.800094][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.028312][T21906] lo speed is unknown, defaulting to 1000
[  567.188522][T21914] netlink: 'syz.5.3881': attribute type 14 has an invalid length.
[  567.485151][T21881] lo speed is unknown, defaulting to 1000
[  567.549418][T21906] lo speed is unknown, defaulting to 1000
[  567.959724][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.058030][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms
[  568.066128][    C0] lec:lec_tx_timeout: lec0
[  568.109267][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.333088][T21917] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  568.918481][T21929] block nbd5: Unsupported socket: should be TCP or UNIX.
[  568.965525][T21929] block nbd5: Unsupported socket: should be TCP or UNIX.
[  569.153401][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.287381][T21946] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3889'.
[  569.527971][T21863] Set syz1 is full, maxelem 65536 reached
[  569.549084][   T50] Bluetooth: hci0: command 0x0c1a tx timeout
[  569.769575][T21959] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3894'.
[  569.780836][T21959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3894'.
[  569.863844][T21967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3893'.
[  569.880722][T21963] dvmrp6: entered allmulticast mode
[  569.893583][T21967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3893'.
[  569.929262][T21967] netlink: 'syz.2.3893': attribute type 18 has an invalid length.
[  570.279544][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.633793][T21994] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:21
[  570.803865][T21999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3904'.
[  570.919559][T22003] veth1_: renamed from macsec0
[  571.021603][T22008] netlink: 'syz.0.3907': attribute type 1 has an invalid length.
[  571.101785][T22018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3909'.
[  571.197150][T22021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  571.251564][T22021] syzkaller0: entered promiscuous mode
[  571.284044][T22021] syzkaller0: entered allmulticast mode
[  571.400141][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.416504][T22021] tipc: Resetting bearer <eth:syzkaller0>
[  571.476273][T22019] tipc: Resetting bearer <eth:syzkaller0>
[  571.546608][T22019] tipc: Disabling bearer <eth:syzkaller0>
[  571.777282][ T5928] IPVS: starting estimator thread 0...
[  571.825235][T22047] netlink: 'syz.2.3913': attribute type 7 has an invalid length.
[  571.842707][T22047] netlink: 'syz.2.3913': attribute type 8 has an invalid length.
[  571.879373][T22061] IPVS: using max 28 ests per chain, 67200 per kthread
[  572.170555][T22057] lo speed is unknown, defaulting to 1000
[  572.210278][ T7064] lec:lec_start_xmit: lec0:No lecd attached
[  572.494356][T22094] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3921'.
[  572.507811][T22094] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  572.525726][T22094] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3921'.
[  572.535378][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.975953][T22113] netlink: 'syz.1.3926': attribute type 1 has an invalid length.
[  572.998714][T22057] lo speed is unknown, defaulting to 1000
[  573.524900][T22138] xt_hashlimit: size too large, truncated to 1048576
[  573.649718][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.643502][T22176] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  574.657674][T22176] bond3 (unregistering): Released all slaves
[  574.776216][T22187] ip6tnl0: Caught tx_queue_len zero misconfig
[  574.807364][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.092050][T22198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3945'.
[  575.190131][T22211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3948'.
[  575.824693][T22247] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3956'.
[  575.843775][T22249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3957'.
[  575.866201][T22249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3957'.
[  575.915384][T22249] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3957'.
[  575.937610][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.939082][T22249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3957'.
[  576.315047][T22269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3963'.
[  576.364973][T22272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3962'.
[  576.763897][T22286] netlink: 'syz.5.3968': attribute type 21 has an invalid length.
[  576.791023][T22286] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3968'.
[  577.049360][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.168467][T22298] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  577.175785][T22298] IPv6: NLM_F_CREATE should be set when creating new route
[  577.183151][T22298] IPv6: NLM_F_CREATE should be set when creating new route
[  577.293179][T22296] delete_channel: no stack
[  577.949276][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms
[  577.951158][T22351] netlink: 'syz.5.3984': attribute type 309 has an invalid length.
[  577.957390][    C0] lec:lec_tx_timeout: lec0
[  578.202643][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.484510][T22375] x_tables: duplicate underflow at hook 2
[  579.022282][T22399] netlink: 'syz.1.3994': attribute type 1 has an invalid length.
[  579.339213][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.534122][T22417] dummy0: entered promiscuous mode
[  579.546179][T22417] dummy0: entered allmulticast mode
[  579.989330][T22434] IPVS: set_ctl: invalid protocol: 92 172.20.20.48:20001
[  580.429527][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  580.469936][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.584055][T22450] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  580.600761][T22450] bond8 (unregistering): Released all slaves
[  580.609700][T22459] netlink: 'syz.4.4010': attribute type 13 has an invalid length.
[  580.628722][T22459] netlink: 'syz.4.4010': attribute type 17 has an invalid length.
[  580.651889][T22456] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  580.697688][T22465] netlink: 'syz.2.4006': attribute type 58 has an invalid length.
[  580.739511][T22465] __nla_validate_parse: 7 callbacks suppressed
[  580.739534][T22465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4006'.
[  581.176391][T22482] tap0: tun_chr_ioctl cmd 21731
[  581.213836][T22477] IPVS: Scheduler module ip_vs_ not found
[  581.495327][T22483] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  581.543729][T22483] syzkaller0: entered promiscuous mode
[  581.550200][T22483] syzkaller0: entered allmulticast mode
[  581.621357][T22498] netlink: 'syz.1.4018': attribute type 1 has an invalid length.
[  581.649383][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.898690][T22498] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  582.127183][T22512] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.156665][T22518] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4023'.
[  582.256853][T22503] lo speed is unknown, defaulting to 1000
[  582.382341][T22512] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.507857][T22512] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.739576][T22512] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.779455][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.828319][T22503] lo speed is unknown, defaulting to 1000
[  583.140536][T22540] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4028'.
[  583.379749][ T9003] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  583.479238][ T9003] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  583.482473][T22550] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4030'.
[  583.535394][ T7304] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  583.606373][ T7304] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  583.896459][T22561] lo speed is unknown, defaulting to 1000
[  583.929786][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.033505][T22568] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  584.049970][T22568] syzkaller0: entered promiscuous mode
[  584.067908][T22568] syzkaller0: entered allmulticast mode
[  584.108238][T22568] tipc: Resetting bearer <eth:syzkaller0>
[  584.132904][T22568] sctp: [Deprecated]: syz.2.4034 (pid 22568) Use of int in max_burst socket option deprecated.
[  584.132904][T22568] Use struct sctp_assoc_value instead
[  584.183742][T22567] tipc: Resetting bearer <eth:syzkaller0>
[  584.245842][T22567] tipc: Disabling bearer <eth:syzkaller0>
[  584.569778][T22561] lo speed is unknown, defaulting to 1000
[  584.844033][T22597] netlink: 'syz.1.4043': attribute type 1 has an invalid length.
[  585.049466][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.339348][T22601] block nbd5: server does not support multiple connections per device.
[  585.441096][T22601] block nbd5: shutting down sockets
[  585.496914][T22606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4046'.
[  585.769563][T22612] netlink: 'syz.1.4047': attribute type 5 has an invalid length.
[  586.080825][T22629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  586.219772][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.244890][T22633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4054'.
[  586.348642][T22459] Set syz1 is full, maxelem 65536 reached
[  586.407165][T22646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4058'.
[  586.533362][T22649] nbd: couldn't find a device at index 0
[  586.652661][T22662] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4063'.
[  586.662636][T22662] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4063'.
[  586.675177][T22662] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  586.728668][T22662] syzkaller0: entered promiscuous mode
[  586.735493][T22662] syzkaller0: entered allmulticast mode
[  586.743863][T22662] tipc: Resetting bearer <eth:syzkaller0>
[  586.917481][  T172] tipc: Resetting bearer <eth:syzkaller0>
[  586.927577][T22665] tipc: Resetting bearer <eth:syzkaller0>
[  587.013971][T22669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4064'.
[  587.030509][T22669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4064'.
[  587.369529][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.564287][T22681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4068'.
[  588.493069][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.589401][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.486149][T22665] tipc: Disabling bearer <eth:syzkaller0>
[  590.517870][ T5928] tipc: Node number set to 3333979757
[  590.671328][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout
[  590.699836][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.874546][T22712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4076'.
[  590.984263][T22710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4075'.
[  591.273417][T22728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4081'.
[  591.337850][T22731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4082'.
[  591.779875][T22749] IPVS: Error connecting to the multicast addr
[  591.819927][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.860415][T22754] syzkaller0: entered promiscuous mode
[  591.871372][T22754] syzkaller0: entered allmulticast mode
[  592.102705][T22758] lo speed is unknown, defaulting to 1000
[  592.163681][T22766] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  592.295527][T22773] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4090'.
[  592.625026][T22758] lo speed is unknown, defaulting to 1000
[  592.647974][T22785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4094'.
[  592.720461][T22787] netlink: 'syz.2.4095': attribute type 1 has an invalid length.
[  592.843832][T22799] netlink: 'syz.0.4098': attribute type 1 has an invalid length.
[  592.846003][T22787] 8021q: adding VLAN 0 to HW filter on device bond5
[  592.857640][T22799] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  592.940724][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.020793][T22807] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4096'.
[  593.034558][T22807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4096'.
[  593.050321][ T7295] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  593.061415][T22802] netlink: 'syz.4.4099': attribute type 1 has an invalid length.
[  593.071122][ T7295] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  593.082138][T22808] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4100'.
[  593.092470][T22808] netlink: Unknown conntrack attr (0)
[  593.148393][T22802] 8021q: adding VLAN 0 to HW filter on device bond4
[  593.157819][ T7295] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  593.166841][ T7295] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  593.177581][T22790] lo speed is unknown, defaulting to 1000
[  593.194080][T22804] bond4: (slave geneve2): making interface the new active one
[  593.204867][T22804] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  593.214360][ T7295] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  593.251073][ T7295] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  593.283968][ T7295] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  593.695869][T22790] lo speed is unknown, defaulting to 1000
[  594.079338][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.733667][T22855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4112'.
[  594.950875][T22862] netlink: 352 bytes leftover after parsing attributes in process `syz.4.4114'.
[  594.967089][T22862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4114'.
[  595.088286][T22871] tipc: Enabled bearer <eth:caif0>, priority 14
[  595.106214][T22871] 0ªX¹¦À: renamed from caif0
[  595.133910][T22871] tipc: Disabling bearer <eth:caif0>
[  595.166457][T22871] 0ªX¹¦À: entered allmulticast mode
[  595.179112][T22871] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  595.183780][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.211443][T22876] netlink: 'syz.5.4117': attribute type 1 has an invalid length.
[  595.240216][T22876] netlink: 'syz.5.4117': attribute type 2 has an invalid length.
[  595.257956][T22876] netlink: 'syz.5.4117': attribute type 1 has an invalid length.
[  595.280456][T22876] netlink: 'syz.5.4117': attribute type 3 has an invalid length.
[  595.344014][T22883] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8
[  595.475491][T22888] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  595.579338][T22896] x_tables: duplicate underflow at hook 1
[  595.706562][T22897] lo speed is unknown, defaulting to 1000
[  596.331406][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.343028][T22897] lo speed is unknown, defaulting to 1000
[  596.377134][T22918] xt_l2tp: unknown flags: 51
[  596.402124][T22918] Cannot find del_set index 3 as target
[  596.853279][T22936] tunl0: Caught tx_queue_len zero misconfig
[  596.907811][T22950] SET target dimension over the limit!
[  597.096256][T22958] __nla_validate_parse: 4 callbacks suppressed
[  597.096276][T22958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4144'.
[  597.244196][T22962] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4146'.
[  597.461481][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.107810][T23013] C: renamed from team_slave_0
[  598.108006][T23009] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4160'.
[  598.150935][T23013] netlink: 'syz.5.4158': attribute type 4 has an invalid length.
[  598.189495][T23013] netlink: 116 bytes leftover after parsing attributes in process `syz.5.4158'.
[  598.229069][T23013] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  598.365844][T23019] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4162'.
[  598.405036][T23018] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4163'.
[  598.494973][T23027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4165'.
[  598.532888][T23027] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  598.580497][T23034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4168'.
[  598.602826][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.704293][T23039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4170'.
[  598.706205][T23034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4168'.
[  598.829271][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.080872][T23052] netlink: 'syz.4.4173': attribute type 29 has an invalid length.
[  599.106895][T23058] netlink: 'syz.4.4173': attribute type 29 has an invalid length.
[  599.122953][T23048] syzkaller0: entered promiscuous mode
[  599.140369][T23048] syzkaller0: entered allmulticast mode
[  599.700503][T23095] bond0: entered promiscuous mode
[  599.719104][T23095] bond_slave_0: entered promiscuous mode
[  599.720069][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.734029][T23095] bond_slave_1: entered promiscuous mode
[  599.759758][T23095] bond0: left promiscuous mode
[  599.789136][T23095] bond_slave_0: left promiscuous mode
[  599.807554][T23095] bond_slave_1: left promiscuous mode
[  599.929438][T23082] lo speed is unknown, defaulting to 1000
[  599.992630][T23106] lo: Caught tx_queue_len zero misconfig
[  600.254769][T23125] netlink: 'syz.1.4192': attribute type 5 has an invalid length.
[  600.301064][T23125] syzkaller1: entered promiscuous mode
[  600.311521][T23125] syzkaller1: entered allmulticast mode
[  600.423882][T23127] netlink: 'syz.0.4193': attribute type 1 has an invalid length.
[  600.563096][T23130] bond8: (slave geneve3): making interface the new active one
[  600.582621][T23130] bond8: (slave geneve3): Enslaving as an active interface with an up link
[  600.598794][T23127] 8021q: adding VLAN 0 to HW filter on device bond8
[  600.608825][ T7295] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  600.622511][ T7295] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  600.631187][T23082] lo speed is unknown, defaulting to 1000
[  600.647316][ T7295] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  600.677128][ T7295] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  600.801967][T23142] netlink: 'syz.1.4196': attribute type 4 has an invalid length.
[  600.849678][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.473365][T23164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  601.790116][T23172] vlan0: entered promiscuous mode
[  601.798589][T23172] 1ªî{X¹¦: entered promiscuous mode
[  601.843177][T23172] netlink: 'syz.5.4204': attribute type 1 has an invalid length.
[  601.865663][T23172] netlink: 'syz.5.4204': attribute type 1 has an invalid length.
[  601.979216][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.188341][T23195] __nla_validate_parse: 12 callbacks suppressed
[  602.188362][T23195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4208'.
[  602.676184][T23219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4217'.
[  603.115826][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.360440][T23235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.390764][T23256] sctp: [Deprecated]: syz.2.4225 (pid 23256) Use of int in max_burst socket option.
[  603.390764][T23256] Use struct sctp_assoc_value instead
[  603.629368][T23264] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4228'.
[  603.632051][T23235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.969704][T23279] ip6tnl1: left allmulticast mode
[  603.977272][T23279] bond6: left allmulticast mode
[  603.984401][T23279] bond7: left allmulticast mode
[  603.991181][T23279] geneve2: left allmulticast mode
[  604.201548][T23235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.249297][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.412877][T23296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4238'.
[  604.793693][T23314] ip6t_srh: unknown srh invflags BA61
[  605.379896][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.499307][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.639394][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.387670][ T7304] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  608.499714][  T172] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  608.582813][ T9003] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  608.648637][ T9003] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  608.756578][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.802071][T23348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4250'.
[  609.013803][T23358] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  609.291613][T23376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4260'.
[  609.328881][T23368] bond9 (unregistering): Released all slaves
[  609.450135][T23378] netlink: 262 bytes leftover after parsing attributes in process `syz.1.4261'.
[  609.631984][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4267'.
[  609.919301][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.065754][T23406] bond0: (slave bond_slave_1): Releasing backup interface
[  610.306247][T23436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4275'.
[  611.039553][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.149492][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.021105][T23411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  613.249877][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.273334][T23448] netlink: 'syz.0.4281': attribute type 6 has an invalid length.
[  613.827565][T23475] 5Ò: entered promiscuous mode
[  613.844163][T23478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4291'.
[  614.031184][T23486] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  614.317330][T23507] syzkaller0: entered promiscuous mode
[  614.339119][T23507] syzkaller0: entered allmulticast mode
[  614.354032][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.674574][T23521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4303'.
[  614.813470][T23528] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  615.013567][T23530] syzkaller0: entered promiscuous mode
[  615.039118][T23530] syzkaller0: entered allmulticast mode
[  615.102758][T23538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  615.255055][T23542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4308'.
[  615.289063][T23542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4308'.
[  615.310837][T23542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4308'.
[  615.426444][T23551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4309'.
[  615.426638][T23546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4309'.
[  615.479416][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.570597][T23546] 8021q: adding VLAN 0 to HW filter on device bond5
[  615.590768][T23559] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4312'.
[  615.609199][T23559] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4312'.
[  615.633420][T23561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4313'.
[  616.287410][T23591] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  616.629155][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.776626][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.919247][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.103319][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  619.119725][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  619.129814][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  619.141094][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  619.149642][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  619.291216][T23696] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  619.329284][T23696] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  619.342364][T23702] __nla_validate_parse: 7 callbacks suppressed
[  619.342384][T23702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4351'.
[  619.361267][T23702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4351'.
[  619.371079][T23702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4351'.
[  619.434266][T23704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4351'.
[  619.554905][T23702] team1: entered promiscuous mode
[  619.561655][T23702] team1: entered allmulticast mode
[  619.567419][T23702] 8021q: adding VLAN 0 to HW filter on device team1
[  619.576161][T23704] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  619.622593][T23704] team2: entered promiscuous mode
[  619.627695][T23704] team2: entered allmulticast mode
[  619.634920][T23704] 8021q: adding VLAN 0 to HW filter on device team2
[  619.648310][T23687] lo speed is unknown, defaulting to 1000
[  619.673003][T23706] netlink: 'syz.4.4352': attribute type 21 has an invalid length.
[  619.689005][T23706] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4352'.
[  619.789577][T23706] netlink: 'syz.4.4352': attribute type 5 has an invalid length.
[  619.800363][T23706] netlink: 'syz.4.4352': attribute type 6 has an invalid length.
[  619.813448][T23706] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4352'.
[  620.108016][T23687] lo speed is unknown, defaulting to 1000
[  620.109403][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.225557][T23723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4355'.
[  620.463730][T23687] chnl_net:caif_netlink_parms(): no params data found
[  620.802175][T23687] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.835367][T23687] bridge0: port 1(bridge_slave_0) entered disabled state
[  620.861128][T23687] bridge_slave_0: entered allmulticast mode
[  620.895679][T23687] bridge_slave_0: entered promiscuous mode
[  620.940492][T23687] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.961071][T23687] bridge0: port 2(bridge_slave_1) entered disabled state
[  620.976257][T23687] bridge_slave_1: entered allmulticast mode
[  620.997126][T23687] bridge_slave_1: entered promiscuous mode
[  621.161025][T23687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  621.205841][T23687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  621.238569][ T5833] Bluetooth: hci3: command tx timeout
[  621.249906][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.344001][T23687] team0: Port device team_slave_0 added
[  621.354766][T23687] team0: Port device team_slave_1 added
[  621.427453][T23687] batman_adv: batadv0: Adding interface: batadv_slave_0
[  621.443800][T23687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  621.494993][T23687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  621.518607][T23687] batman_adv: batadv0: Adding interface: batadv_slave_1
[  621.536372][T23687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  621.596805][T23687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  621.757158][T23687] hsr_slave_0: entered promiscuous mode
[  621.780738][T23687] hsr_slave_1: entered promiscuous mode
[  621.796775][T23687] debugfs: 'hsr0' already exists in 'hsr'
[  621.812272][T23687] Cannot create hsr debugfs directory
[  622.085949][T23774] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  622.152014][T23774] syzkaller0: entered promiscuous mode
[  622.158641][T23774] syzkaller0: entered allmulticast mode
[  622.182012][T23777] syzkaller0: entered promiscuous mode
[  622.191457][T23777] syzkaller0: entered allmulticast mode
[  622.246933][T23773] tipc: Resetting bearer <eth:syzkaller0>
[  622.318836][T23773] tipc: Disabling bearer <eth:syzkaller0>
[  622.399415][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  622.508123][T23782] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4370'.
[  622.599919][T23786] netlink: 'syz.2.4372': attribute type 1 has an invalid length.
[  622.792650][T23790] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9
[  622.815289][T23798] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4374'.
[  623.094321][T23805] sctp: [Deprecated]: syz.1.4376 (pid 23805) Use of int in max_burst socket option.
[  623.094321][T23805] Use struct sctp_assoc_value instead
[  623.233286][T23810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4378'.
[  623.309246][ T5833] Bluetooth: hci3: command tx timeout
[  623.536082][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  623.581198][T23825] syzkaller1: entered promiscuous mode
[  623.605534][T23825] syzkaller1: entered allmulticast mode
[  623.906790][T23833] tc_dump_action: action bad kind
[  624.145018][T23687] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  624.156998][T23851] netlink: 'syz.1.4388': attribute type 1 has an invalid length.
[  624.165526][T23851] netlink: 'syz.1.4388': attribute type 1 has an invalid length.
[  624.182163][T23851] netlink: 'syz.1.4388': attribute type 2 has an invalid length.
[  624.190245][T23851] netlink: 'syz.1.4388': attribute type 2 has an invalid length.
[  624.198242][T23851] netlink: 'syz.1.4388': attribute type 1 has an invalid length.
[  624.292340][T23687] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  624.360852][T23858] __nla_validate_parse: 3 callbacks suppressed
[  624.360906][T23858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4390'.
[  624.381107][T23687] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  624.425963][T23687] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  624.448310][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.457420][T23687] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  624.459964][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[  624.494262][T23687] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  624.524149][T23687] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  624.534013][T23862] netlink: 'syz.4.4391': attribute type 4 has an invalid length.
[  624.558421][T23687] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  624.567676][T23865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4393'.
[  624.692890][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.884986][T23887] netlink: 'syz.1.4397': attribute type 1 has an invalid length.
[  624.900724][T23886] netlink: 'syz.1.4397': attribute type 1 has an invalid length.
[  624.916234][T23687] 8021q: adding VLAN 0 to HW filter on device bond0
[  625.001491][T23887] bond4: entered promiscuous mode
[  625.027812][T23887] 8021q: adding VLAN 0 to HW filter on device bond4
[  625.085474][T23687] 8021q: adding VLAN 0 to HW filter on device team0
[  625.133610][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.140873][ T7305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  625.227055][ T7304] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.234296][ T7304] bridge0: port 2(bridge_slave_1) entered forwarding state
[  625.313124][T23903] lo speed is unknown, defaulting to 1000
[  625.390068][ T5833] Bluetooth: hci3: command tx timeout
[  625.405999][T23911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4401'.
[  625.534440][T23916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4403'.
[  625.562553][T23916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4403'.
[  625.839932][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.912248][T23687] 8021q: adding VLAN 0 to HW filter on device batadv0
[  625.932561][T23903] lo speed is unknown, defaulting to 1000
[  626.014658][T23931] netlink: 'syz.4.4407': attribute type 1 has an invalid length.
[  626.035890][T23931] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4407'.
[  626.218136][T23937] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4409'.
[  626.716212][T23687] veth0_vlan: entered promiscuous mode
[  626.793583][T23687] veth1_vlan: entered promiscuous mode
[  626.866671][T23687] veth0_macvtap: entered promiscuous mode
[  626.885541][T23687] veth1_macvtap: entered promiscuous mode
[  626.951705][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.962888][T23687] batman_adv: batadv0: Interface activated: batadv_slave_0
[  627.013818][T23974] x_tables: duplicate underflow at hook 2
[  627.045256][T23964] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  627.126656][T23687] batman_adv: batadv0: Interface activated: batadv_slave_1
[  627.211172][ T9003] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  627.228659][ T9003] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  627.289686][ T9003] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  627.321919][ T9003] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  627.377525][T23991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4422'.
[  627.393818][T23994] netlink: 'syz.4.4421': attribute type 1 has an invalid length.
[  627.469571][ T5833] Bluetooth: hci3: command tx timeout
[  627.680946][T23998] gretap1: entered allmulticast mode
[  627.701044][T23998] bond6: (slave gretap1): making interface the new active one
[  627.717875][T23998] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  627.812528][T24008] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4424'.
[  627.855796][T24008] bond0 (unregistering): Released all slaves
[  627.926126][T24012] No such timeout policy "syz1"
[  627.957197][T24000] lo speed is unknown, defaulting to 1000
[  627.985477][ T9003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  628.016612][ T9003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  628.080486][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.160848][ T9003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  628.173384][ T9003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  628.570427][T24034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4429'.
[  628.708361][T24000] lo speed is unknown, defaulting to 1000
[  628.715159][T23992] lo speed is unknown, defaulting to 1000
[  629.192241][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.429683][T24066] __nla_validate_parse: 2 callbacks suppressed
[  629.429716][T24066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4435'.
[  629.447783][T24065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4437'.
[  629.449828][T23992] lo speed is unknown, defaulting to 1000
[  629.501726][T24065] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4437'.
[  629.549286][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.797897][T24078] netlink: 'syz.2.4441': attribute type 10 has an invalid length.
[  629.812272][T24077] netlink: 'syz.5.4440': attribute type 2 has an invalid length.
[  629.848807][T24077] netlink: 'syz.5.4440': attribute type 1 has an invalid length.
[  629.891350][T24077] netlink: 'syz.5.4440': attribute type 2 has an invalid length.
[  629.948013][T24083] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4440'.
[  629.957177][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5480 ms
[  629.957212][    C0] lec:lec_tx_timeout: lec0
[  630.051404][T24078] syz_tun: entered promiscuous mode
[  630.076778][T24077] úÄì,°¤™u: entered promiscuous mode
[  630.310613][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.208469][T24131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4451'.
[  631.249553][T24131] netlink: 'syz.0.4451': attribute type 1 has an invalid length.
[  631.353837][T24142] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4452'.
[  631.431264][T24140] bond9: (slave geneve4): making interface the new active one
[  631.442414][ T7300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.467728][T24140] bond9: (slave geneve4): Enslaving as an active interface with an up link
[  631.488578][ T9003] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  631.533379][ T9003] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  631.567789][ T9003] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  631.604910][ T9003] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  631.811481][T24162] ±ÿ: renamed from lo
[  632.102465][T24170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4457'.
[  632.579142][T24195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.609837][T24201] lo speed is unknown, defaulting to 1000
[  632.615165][T24210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4463'.
[  632.658692][T24210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4463'.
[  632.811997][T24218] tipc: Started in network mode
[  632.827185][T24218] tipc: Node identity ac14140f, cluster identity 4711
[  632.861447][T24218] tipc: Enabled bearer <udp:syz2>, priority 10
[  633.382246][T24201] lo speed is unknown, defaulting to 1000
[  633.576551][T24253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4476'.
[  633.739465][T24195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.969047][   T24] tipc: Node number set to 2886997007
[  634.634845][T24306] __nla_validate_parse: 1 callbacks suppressed
[  634.634865][T24306] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4487'.
[  634.699464][T24310] netlink: 'syz.5.4487': attribute type 10 has an invalid length.
[  634.766583][T24310] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  634.854547][T24316] netlink: 'syz.1.4494': attribute type 1 has an invalid length.
[  634.874205][T24316] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4494'.
[  634.880546][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.920163][T24316] netlink: 'syz.1.4494': attribute type 1 has an invalid length.
[  634.962100][T24316] netlink: 634 bytes leftover after parsing attributes in process `syz.1.4494'.
[  634.974146][T24326] IPv6: Can't replace route, no match found
[  634.978752][T24316] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4494'.
[  635.028105][T24330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  635.107156][T24333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4498'.
[  636.011441][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.385752][T24390] netlink: 'syz.1.4515': attribute type 2 has an invalid length.
[  636.402060][T24390] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.4515'.
[  636.426459][T24390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4515'.
[  636.793687][ T7064] lec:lec_start_xmit: lec0:No lecd attached
[  636.796121][T24407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4520'.
[  637.139262][T24038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.787072][T24426] openvswitch: netlink: IP tunnel dst address not specified
[  637.864064][T24430] syzkaller0: entered promiscuous mode
[  637.889724][T24430] syzkaller0: entered allmulticast mode
[  638.104172][T24439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4529'.
[  638.138104][T24437] nbd: must specify at least one socket
[  638.269773][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.121963][T24476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4538'.
[  639.399752][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.439171][T24493] syzkaller1: entered promiscuous mode
[  639.454959][T24493] syzkaller1: entered allmulticast mode
[  639.552329][T24492] sctp: [Deprecated]: syz.4.4544 (pid 24492) Use of struct sctp_assoc_value in delayed_ack socket option.
[  639.552329][T24492] Use struct sctp_sack_info instead
[  639.738529][T24503] netlink: 'syz.1.4547': attribute type 7 has an invalid length.
[  639.789599][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  639.995604][T24508] __nla_validate_parse: 3 callbacks suppressed
[  639.995627][T24508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4548'.
[  640.019959][T24508] 8021q: VLANs not supported on vxcan1
[  640.143647][T24511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4550'.
[  640.192881][T24511] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4550'.
[  640.529711][T24038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.914548][T24530] bond10: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  641.649279][T24038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.786916][T24530] bond10 (unregistering): Released all slaves
[  641.948948][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5150 ms
[  641.957044][    C0] lec:lec_tx_timeout: lec0
[  642.015096][T24549] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4561'.
[  642.156475][T24557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4564'.
[  642.206966][T24555] netlink: 'syz.0.4562': attribute type 2 has an invalid length.
[  642.311828][T24563] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  642.640926][T24581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4572'.
[  642.673477][T24576] veth0_macvtap: left allmulticast mode
[  642.704545][T24576] bond1: left promiscuous mode
[  642.749612][T24576] vlan2: left allmulticast mode
[  642.759457][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.776786][T24576] bond2: left allmulticast mode
[  642.823380][T24586] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4575'.
[  642.851032][T24576] bond4: left promiscuous mode
[  642.864194][ T5928] lo speed is unknown, defaulting to 1000
[  642.881638][ T5928] syz2: Port: 1 Link DOWN
[  643.030708][T24572] lo speed is unknown, defaulting to 1000
[  643.104523][T24598] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4577'.
[  643.123219][T24595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4578'.
[  643.282779][T24591] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  643.880131][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  644.307089][T24591] bond1 (unregistering): Released all slaves
[  644.357167][T24595] bridge7: entered allmulticast mode
[  644.374700][T24604] netlink: 'syz.1.4578': attribute type 2 has an invalid length.
[  644.382869][T24605] ÿÿÿÿÿÿ: renamed from vlan0
[  644.423521][T24572] lo speed is unknown, defaulting to 1000
[  644.618173][T24635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4584'.
[  645.010361][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.448640][T24661] __nla_validate_parse: 1 callbacks suppressed
[  645.448664][T24661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4591'.
[  645.511901][T24661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4591'.
[  645.825530][T24673] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  645.852788][T24674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4595'.
[  646.119206][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.162983][T24681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4597'.
[  646.185518][T24689] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4599'.
[  646.196124][T24681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4597'.
[  646.205786][T24683] 8021q: adding VLAN 0 to HW filter on device bond10
[  646.220723][T24683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4598'.
[  646.231510][T24683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4598'.
[  646.311620][T24690] netlink: 'syz.2.4597': attribute type 1 has an invalid length.
[  646.333807][T24690] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4597'.
[  646.894525][T24699] netlink: 'syz.4.4602': attribute type 1 has an invalid length.
[  646.952811][T24702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4603'.
[  647.227778][   T29] audit: type=1800 audit(1776661910.368:13): pid=24712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4606" name="r" dev="tmpfs" ino=1525 res=0 errno=0
[  647.279702][T24195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.298369][   T29] audit: type=1800 audit(1776661910.418:14): pid=24712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4606" name="r" dev="tmpfs" ino=1525 res=0 errno=0
[  648.402443][T24741] netlink: 'syz.0.4615': attribute type 12 has an invalid length.
[  648.419611][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.439516][T24741] netlink: 'syz.0.4615': attribute type 29 has an invalid length.
[  648.491320][T24741] netlink: 'syz.0.4615': attribute type 1 has an invalid length.
[  648.619563][T24777] lo speed is unknown, defaulting to 1000
[  648.646419][T24769] 
€Â0ÿÿÿÿÿÿÿÿÿ: renamed from batadv_slave_1
[  649.551283][T24195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.903913][T24777] lo speed is unknown, defaulting to 1000
[  649.911365][T24797] lo speed is unknown, defaulting to 1000
[  650.083901][T24813] xt_CT: No such helper "syz1"
[  650.094555][T24824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  650.558492][T24831] __nla_validate_parse: 13 callbacks suppressed
[  650.558513][T24831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4636'.
[  650.690272][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  650.744595][T24831] erspan1: entered promiscuous mode
[  650.765919][T24831] erspan1: entered allmulticast mode
[  650.845359][T24797] lo speed is unknown, defaulting to 1000
[  650.845403][T24816] lo speed is unknown, defaulting to 1000
[  651.100527][T24838] bond7: option ad_user_port_key: invalid value (65535)
[  651.107739][T24838] bond7: option ad_user_port_key: allowed values 0 - 1023
[  651.124077][T24838] bond7 (unregistering): Released all slaves
[  651.467202][T24816] lo speed is unknown, defaulting to 1000
[  651.624851][T24858] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4641'.
[  651.661839][T24858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4641'.
[  651.829871][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.938541][T24868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4642'.
[  652.042596][T24860] bond5: entered promiscuous mode
[  652.042907][T24867] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4642'.
[  652.056774][T24860] bond5: entered allmulticast mode
[  652.757365][T24896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  652.950833][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.190866][T24915] netlink: 'syz.4.4655': attribute type 1 has an invalid length.
[  653.426650][T24923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4657'.
[  653.675313][T24936] syzkaller0: entered promiscuous mode
[  653.689753][T24936] syzkaller0: entered allmulticast mode
[  653.721297][T24940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4663'.
[  653.744267][T24940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4663'.
[  653.801119][T24940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4663'.
[  653.821790][T24940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4663'.
[  653.884731][   T41] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  653.900249][   T41] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  653.921682][   T41] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  653.939202][   T41] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  654.099809][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.182597][T10519] IPVS: starting estimator thread 0...
[  654.294417][T24956] IPVS: using max 28 ests per chain, 67200 per kthread
[  654.335956][T24951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  654.492077][T24964] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 !
[  654.527952][T24971] netlink: 'syz.0.4674': attribute type 6 has an invalid length.
[  654.665970][T24964] syzkaller0: entered promiscuous mode
[  654.683917][T24964] syzkaller0: entered allmulticast mode
[  654.741091][T24964] delete_channel: no stack
[  655.219508][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.379241][T24195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.497520][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.669453][T24195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.563641][T25009] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  659.602298][T25009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  659.628496][T25013] __nla_validate_parse: 2 callbacks suppressed
[  659.628519][T25013] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4686'.
[  659.662236][T25011] vlan2: entered promiscuous mode
[  659.674147][T25011] bridge0: entered promiscuous mode
[  659.799330][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.864456][T25018] bond0: Removing last ns target with arp_interval on
[  659.961858][T25035] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4692'.
[  660.096872][T25043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4697'.
[  660.163001][T25048] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4694'.
[  660.280928][T25054] netlink: 'syz.0.4700': attribute type 12 has an invalid length.
[  660.293079][T25049] lo speed is unknown, defaulting to 1000
[  660.886057][T25049] lo speed is unknown, defaulting to 1000
[  660.919231][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.069496][T25081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4709'.
[  661.118240][T25081] netlink: 'syz.0.4709': attribute type 1 has an invalid length.
[  661.324407][T25093] smc: net device wg2 erased user defined pnetid SYZ0
[  661.494501][T25096] netlink: 71 bytes leftover after parsing attributes in process `syz.2.4712'.
[  661.876337][T25105] lo speed is unknown, defaulting to 1000
[  662.070653][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.209751][T25121] netlink: 'syz.2.4719': attribute type 1 has an invalid length.
[  662.226951][T25121] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  662.254238][T25121] netlink: 'syz.2.4719': attribute type 1 has an invalid length.
[  662.273087][T25121] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  662.664280][T25140] x_tables: duplicate underflow at hook 1
[  662.706729][T25141] x_tables: duplicate underflow at hook 1
[  662.818073][T25123] lo speed is unknown, defaulting to 1000
[  662.832252][T25105] lo speed is unknown, defaulting to 1000
[  662.843163][T25145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4725'.
[  663.209208][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.586129][T25123] lo speed is unknown, defaulting to 1000
[  664.330682][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.505345][T25179] netlink: 'syz.0.4734': attribute type 9 has an invalid length.
[  664.744346][T25191] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  665.410497][T25213] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4744'.
[  665.420403][T25203] lo speed is unknown, defaulting to 1000
[  665.461076][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.579333][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.660186][T25203] lo speed is unknown, defaulting to 1000
[  666.666388][T25238] lo speed is unknown, defaulting to 1000
[  666.760248][ T5833] Bluetooth: hci1: command 0x0401 tx timeout
[  666.804685][T25202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4742'.
[  667.270254][T25238] lo speed is unknown, defaulting to 1000
[  667.710648][T24195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.725465][T25294] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4763'.
[  667.806481][T25294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  667.916172][T25296] xt_hashlimit: size too large, truncated to 1048576
[  668.058850][T25300] lo speed is unknown, defaulting to 1000
[  668.770879][T25322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4770'.
[  668.789459][T25323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4770'.
[  668.809358][T25322] veth1: entered promiscuous mode
[  668.817156][T25322] veth1: entered allmulticast mode
[  668.831963][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.845088][T25300] lo speed is unknown, defaulting to 1000
[  668.905874][T25330] pim6reg: entered allmulticast mode
[  669.281546][T25344] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4776'.
[  669.359258][T25346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  669.590589][T25348] netlink: 'syz.4.4778': attribute type 11 has an invalid length.
[  669.644645][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4778'.
[  669.934860][T25354] bridge0: port 1(bridge_slave_0) entered forwarding state
[  669.979213][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.054747][T25366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4783'.
[  670.140428][T25372] netlink: 'syz.2.4785': attribute type 11 has an invalid length.
[  670.194248][T25373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4784'.
[  670.206717][T25374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  671.119310][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.122108][T25383] xt_time: invalid argument - start or stop time greater than 23:59:59
[  671.163473][T25395] lo speed is unknown, defaulting to 1000
[  671.341442][T25399] macsec1: entered promiscuous mode
[  671.375823][T25399] bridge0: entered promiscuous mode
[  671.482622][T25405] macsec0: entered allmulticast mode
[  671.637215][T25412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4795'.
[  671.689770][T25412] vlan2: entered allmulticast mode
[  671.702117][T25412] macvtap0: entered allmulticast mode
[  671.729966][T25415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4796'.
[  671.760298][T25415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4796'.
[  671.783551][T25415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4796'.
[  671.807451][T25415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4796'.
[  671.818160][T25415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4796'.
[  671.833631][T25415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4796'.
[  671.844679][T25415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4796'.
[  671.855376][T25415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4796'.
[  671.867258][T25415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4796'.
[  671.899808][T25415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  671.973116][T25395] lo speed is unknown, defaulting to 1000
[  672.223955][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  672.370522][T25442] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20002
[  672.448775][T25441] lo speed is unknown, defaulting to 1000
[  673.033983][T25441] lo speed is unknown, defaulting to 1000
[  673.206183][T25459] netlink: 'syz.5.4809': attribute type 1 has an invalid length.
[  673.380007][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.017737][T25485] "syz.0.4815" (25485) uses obsolete ecb(arc4) skcipher
[  674.054442][T25492] netlink: 'syz.2.4818': attribute type 10 has an invalid length.
[  674.248576][T25492] team0: Port device dummy0 added
[  674.512021][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.715495][T25515] netlink: 'syz.2.4824': attribute type 1 has an invalid length.
[  674.862569][T25515] bond6: entered promiscuous mode
[  674.872466][T25525] netlink: 'syz.4.4825': attribute type 1 has an invalid length.
[  674.885070][T25515] 8021q: adding VLAN 0 to HW filter on device bond6
[  674.936132][T25524] bond6: entered promiscuous mode
[  674.949596][T25524] 8021q: adding VLAN 0 to HW filter on device bond6
[  674.968352][T25524] bridge0: port 4(bond6) entered blocking state
[  674.987814][T25524] bridge0: port 4(bond6) entered disabled state
[  674.994819][T25524] bond6: entered allmulticast mode
[  675.034439][T25525] 8021q: adding VLAN 0 to HW filter on device bond7
[  675.124269][T25519] bond7: entered allmulticast mode
[  675.436576][T25540] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32)
[  675.445636][T25552] netlink: 'syz.1.4834': attribute type 1 has an invalid length.
[  675.505450][T25547] lo speed is unknown, defaulting to 1000
[  675.659230][   T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.995590][T25547] lo speed is unknown, defaulting to 1000
[  676.004174][T25556] lo speed is unknown, defaulting to 1000
[  676.111416][T25577] netlink: 'syz.1.4843': attribute type 21 has an invalid length.
[  676.274579][T25583] syzkaller1: entered promiscuous mode
[  676.295728][T25583] syzkaller1: entered allmulticast mode
[  676.628775][T25556] lo speed is unknown, defaulting to 1000
[  676.730936][T25599] syzkaller0: entered promiscuous mode
[  676.743196][T25599] syzkaller0: entered allmulticast mode
[  676.789671][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  677.423339][T25624] netlink: 'syz.2.4856': attribute type 13 has an invalid length.
[  677.444176][T25624] netlink: 'syz.2.4856': attribute type 17 has an invalid length.
[  677.529886][T25624] erspan0: left allmulticast mode
[  677.624402][T25624] syz_tun: left promiscuous mode
[  677.652001][T25624] 8021q: adding VLAN 0 to HW filter on device team0
[  677.679877][T25624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  677.713541][T24195] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  677.903463][T24195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.070941][T25650] lo speed is unknown, defaulting to 1000
[  678.082439][T25655] __nla_validate_parse: 25 callbacks suppressed
[  678.082461][T25655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4863'.
[  678.198315][T25658] xt_hashlimit: size too large, truncated to 1048576
[  678.565164][T25657] netlink: 'syz.2.4862': attribute type 2 has an invalid length.
[  678.597925][T25671] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4866'.
[  678.635986][T25671] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4866'.
[  678.800259][T25678] ip6tnl0: entered allmulticast mode
[  678.859502][T25679] ip6tnl0: entered promiscuous mode
[  678.875527][T25677] ip6tnl0: left promiscuous mode
[  678.891290][T25650] lo speed is unknown, defaulting to 1000
[  678.904491][T25677] ip6tnl0: left allmulticast mode
[  679.062721][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.132968][T25682] lo speed is unknown, defaulting to 1000
[  679.178347][T25697] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4873'.
[  679.188210][T25697] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4873'.
[  679.979948][T25682] lo speed is unknown, defaulting to 1000
[  680.189704][T24195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.662410][T25719] lo speed is unknown, defaulting to 1000
[  681.032197][T25745] erspan0: entered promiscuous mode
[  681.122758][T25752] netlink: 'syz.4.4885': attribute type 1 has an invalid length.
[  681.241902][T25745] 8021q: adding VLAN 0 to HW filter on device bond0
[  681.288203][T25745] 8021q: adding VLAN 0 to HW filter on device team0
[  681.322295][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.349548][T25745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  681.518715][T25719] lo speed is unknown, defaulting to 1000
[  681.634959][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  681.731865][T25771] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4889'.
[  681.939502][T25780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4891'.
[  682.390448][T25792] ip6erspan0: entered allmulticast mode
[  682.439470][T24038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.723535][T25813] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  682.960794][T25819] lo speed is unknown, defaulting to 1000
[  683.559445][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  683.587527][T25850] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  683.708816][T25855] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4912'.
[  683.739394][T25855] tc_dump_action: action bad kind
[  683.864516][T25858] netlink: 'syz.4.4913': attribute type 1 has an invalid length.
[  683.953527][T25861] netlink: 'syz.5.4914': attribute type 1 has an invalid length.
[  683.986054][T25863] netlink: 'syz.1.4915': attribute type 21 has an invalid length.
[  684.035907][T25863] netlink: 'syz.1.4915': attribute type 20 has an invalid length.
[  684.091128][T25869] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4914'.
[  684.260552][T25865] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  684.290915][T25865] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  684.376387][T25876] macvlan2: entered promiscuous mode
[  684.382651][T25876] macvlan2: entered allmulticast mode
[  684.388822][T25876] bond1: entered promiscuous mode
[  684.394974][T25876] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  684.405413][T25876] bond1: left promiscuous mode
[  684.425851][T25891] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4919'.
[  684.457854][T25869] bond1: (slave bridge2): Enslaving as an active interface with a down link
[  684.475015][T25819] lo speed is unknown, defaulting to 1000
[  684.691083][T24195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.866260][T25910] netlink: 'syz.1.4925': attribute type 21 has an invalid length.
[  684.908381][T25910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  684.915726][T25910] IPv6: NLM_F_CREATE should be set when creating new route
[  684.923088][T25910] IPv6: NLM_F_CREATE should be set when creating new route
[  684.930402][T25910] IPv6: NLM_F_CREATE should be set when creating new route
[  684.942039][T25910] netlink: 'syz.1.4925': attribute type 21 has an invalid length.
[  684.984987][T25910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  685.058594][T25910] sctp: [Deprecated]: syz.1.4925 (pid 25910) Use of int in max_burst socket option deprecated.
[  685.058594][T25910] Use struct sctp_assoc_value instead
[  685.273423][T25926] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  685.353922][T25932] syzkaller1: entered promiscuous mode
[  685.393360][T25932] syzkaller1: entered allmulticast mode
[  685.861793][T24195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.881430][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[  686.010429][T25949] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4936'.
[  686.173867][T25955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4938'.
[  686.215314][T25955] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  686.236777][T25955] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  686.465852][T25965] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4943'.
[  686.486668][T25969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4945'.
[  686.499346][T25965] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4943'.
[  686.539850][T25969] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  686.701079][T25979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4948'.
[  686.753997][T25987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4950'.
[  687.010733][T24195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.061030][T26039] netlink: 'syz.1.4962': attribute type 10 has an invalid length.
[  688.087139][T26039] syz_tun: entered promiscuous mode
[  688.120328][T26039] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  688.130060][T26042] netlink: 'syz.4.4963': attribute type 21 has an invalid length.
[  688.149472][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.271987][T26047] macsec1: entered promiscuous mode
[  688.277346][T26047] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  688.287795][T26047] 8021q: adding VLAN 0 to HW filter on device macsec1
[  688.351817][T26044] lo speed is unknown, defaulting to 1000
[  688.766091][T26033] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  688.779728][T26033] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  688.881554][T26064] netlink: 'syz.1.4968': attribute type 1 has an invalid length.
[  688.910929][T26064] __nla_validate_parse: 2 callbacks suppressed
[  688.910951][T26064] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4968'.
[  689.043129][T26044] lo speed is unknown, defaulting to 1000
[  689.225303][T26033] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  689.245782][T26033] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  689.265118][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  689.364632][T26033] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  689.377933][T26033] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  689.481716][T26033] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  689.492806][T26033] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  689.568084][T26033] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  689.601610][T26033] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  689.709115][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  689.853879][T26090] veth1_to_batadv: Caught tx_queue_len zero misconfig
[  690.293468][T26108] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4984'.
[  690.383425][T26112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  690.402367][T24195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.444867][T26105] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  690.480627][T26105] bond8 (unregistering): Released all slaves
[  690.536550][T26100] macsec1: entered promiscuous mode
[  690.543639][T26100] vlan1: entered promiscuous mode
[  690.548786][T26100] batadv0: entered promiscuous mode
[  690.569376][T26118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4987'.
[  690.579777][T26100] vlan1: left promiscuous mode
[  690.585054][T26100] batadv0: left promiscuous mode
[  690.636341][T26101] macsec1: entered promiscuous mode
[  690.652771][T26101] vlan1: entered promiscuous mode
[  690.663719][T26101] batadv0: entered promiscuous mode
[  690.673879][T26122] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4988'.
[  690.683815][T26101] vlan1: left promiscuous mode
[  690.689486][T26101] batadv0: left promiscuous mode
[  690.695591][T26122] set match dimension is over the limit!
[  690.722202][T26108] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4984'.
[  690.991899][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms
[  691.000134][    C0] lec:lec_tx_timeout: lec0
[  691.173237][T26148] netlink: 'syz.4.4998': attribute type 4 has an invalid length.
[  691.192190][T26149] Bluetooth: MGMT ver 1.23
[  691.215093][T26149] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4997'.
[  691.229498][T26150] netlink: 'syz.5.4996': attribute type 4 has an invalid length.
[  691.254957][T26150] netlink: 'syz.5.4996': attribute type 4 has an invalid length.
[  691.273290][T26153] netlink: 'syz.2.5000': attribute type 29 has an invalid length.
[  691.311717][T26149] wg1: entered allmulticast mode
[  691.322241][T26153] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5000'.
[  691.331065][T26154] netlink: 'syz.0.4999': attribute type 3 has an invalid length.
[  691.370054][T26154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4999'.
[  691.519955][T24038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.542731][T26168] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5005'.
[  691.636549][T26174] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5004'.
[  691.944110][T26189] tun0: tun_chr_ioctl cmd 1078483067
[  691.972941][T26192] netlink: 'syz.0.5009': attribute type 3 has an invalid length.
[  692.323033][T26207] netlink: 'syz.5.5013': attribute type 11 has an invalid length.
[  692.629121][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  692.694765][T26221] syzkaller1: entered promiscuous mode
[  692.716105][T26221] syzkaller1: entered allmulticast mode
[  693.217854][T26247] netlink: 'syz.5.5019': attribute type 7 has an invalid length.
[  693.392935][T26239] syzkaller0: entered promiscuous mode
[  693.406674][T26239] syzkaller0: entered allmulticast mode
[  693.760268][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  693.838505][T26278] netlink: 'syz.5.5029': attribute type 10 has an invalid length.
[  693.910349][T26278] hsr0: entered promiscuous mode
[  693.936633][T26278] bridge0: port 3(hsr0) entered blocking state
[  693.961264][T26278] bridge0: port 3(hsr0) entered disabled state
[  693.977977][T26278] hsr0: entered allmulticast mode
[  694.003003][T26278] hsr_slave_0: entered allmulticast mode
[  694.011181][T26278] hsr_slave_1: entered allmulticast mode
[  694.021654][T26278] bridge0: port 3(hsr0) entered blocking state
[  694.028045][T26278] bridge0: port 3(hsr0) entered forwarding state
[  694.036565][T26284] __nla_validate_parse: 8 callbacks suppressed
[  694.036585][T26284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5030'.
[  694.070145][T26292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5032'.
[  694.412535][T26311] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5039'.
[  694.734927][T26332] netlink: 'syz.2.5044': attribute type 1 has an invalid length.
[  694.828309][T26332] syzkaller0: entered promiscuous mode
[  694.843557][T26332] syzkaller0: entered allmulticast mode
[  694.900024][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  695.221862][T26362] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5054'.
[  695.271670][T26362] bpq0: entered promiscuous mode
[  695.280548][T26362] bpq0: entered allmulticast mode
[  695.303631][T26362] dummy0: entered promiscuous mode
[  695.317369][T26362] bridge0: entered promiscuous mode
[  695.336351][T26362] hsr1: entered allmulticast mode
[  695.343715][T26362] dummy0: entered allmulticast mode
[  695.360130][T26362] bridge0: entered allmulticast mode
[  695.439787][T20654] 
[  695.442180][T20654] ============================================
[  695.448343][T20654] WARNING: possible recursive locking detected
[  695.454532][T20654] syzkaller #0 Not tainted
[  695.458957][T20654] --------------------------------------------
[  695.465113][T20654] kworker/0:6/20654 is trying to acquire lock:
[  695.471267][T20654] ffff8880566ccfb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[  695.480337][T20654] 
[  695.480337][T20654] but task is already holding lock:
[  695.487703][T20654] ffff888059f10fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[  695.496771][T20654] 
[  695.496771][T20654] other info that might help us debug this:
[  695.504922][T20654]  Possible unsafe locking scenario:
[  695.504922][T20654] 
[  695.512411][T20654]        CPU0
[  695.515681][T20654]        ----
[  695.519043][T20654]   lock(&hsr->seqnr_lock);
[  695.523546][T20654]   lock(&hsr->seqnr_lock);
[  695.528062][T20654] 
[  695.528062][T20654]  *** DEADLOCK ***
[  695.528062][T20654] 
[  695.536196][T20654]  May be due to missing lock nesting notation
[  695.536196][T20654] 
[  695.544507][T20654] 13 locks held by kworker/0:6/20654:
[  695.549873][T20654]  #0: ffff888032c02540 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  695.560686][T20654]  #1: ffffc900057dfc40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  695.573834][T20654]  #2: ffff888035828530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70
[  695.583065][T20654]  #3: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40
[  695.592298][T20654]  #4: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550
[  695.601370][T20654]  #5: ffffffff8e95d080 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950
[  695.611287][T20654]  #6: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360
[  695.620440][T20654]  #7: ffff888059f10fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[  695.629923][T20654]  #8: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xbb/0x2a80
[  695.639425][T20654]  #9: ffffffff8e95d080 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950
[  695.649378][T20654]  #10: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1990
[  695.658754][T20654]  #11: ffffffff8e95d080 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950
[  695.668834][T20654]  #12: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360
[  695.678129][T20654] 
[  695.678129][T20654] stack backtrace:
[  695.684026][T20654] CPU: 0 UID: 0 PID: 20654 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) 
[  695.684047][T20654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  695.684057][T20654] Workqueue: mld mld_ifc_work
[  695.684079][T20654] Call Trace:
[  695.684087][T20654]  <TASK>
[  695.684094][T20654]  dump_stack_lvl+0xe8/0x150
[  695.684113][T20654]  print_deadlock_bug+0x279/0x290
[  695.684132][T20654]  __lock_acquire+0x253f/0x2cf0
[  695.684150][T20654]  ? __lock_acquire+0x6b5/0x2cf0
[  695.684166][T20654]  ? skb_network_protocol+0x23d/0x400
[  695.684187][T20654]  ? hsr_dev_xmit+0x237/0x360
[  695.684203][T20654]  lock_acquire+0x106/0x350
[  695.684218][T20654]  ? hsr_dev_xmit+0x237/0x360
[  695.684236][T20654]  ? __pfx_netif_skb_features+0x10/0x10
[  695.684246][T20654]  ? lock_acquire+0x106/0x350
[  695.684261][T20654]  ? hsr_dev_xmit+0x237/0x360
[  695.684278][T20654]  _raw_spin_lock_bh+0x36/0x50
[  695.684290][T20654]  ? hsr_dev_xmit+0x237/0x360
[  695.684306][T20654]  hsr_dev_xmit+0x237/0x360
[  695.684323][T20654]  ? hsr_dev_xmit+0x2d/0x360
[  695.684339][T20654]  dev_hard_start_xmit+0x2cd/0x830
[  695.684354][T20654]  __dev_queue_xmit+0x14d9/0x3950
[  695.684368][T20654]  ? __dev_queue_xmit+0x2b6/0x3950
[  695.684380][T20654]  ? ebt_do_table+0x2665/0x2830
[  695.684393][T20654]  ? ebt_do_table+0x2665/0x2830
[  695.684406][T20654]  ? __pfx___dev_queue_xmit+0x10/0x10
[  695.684423][T20654]  ? br_nf_post_routing+0x219/0xfe0
[  695.684440][T20654]  ? lock_acquire+0x106/0x350
[  695.684457][T20654]  br_dev_queue_push_xmit+0x370/0x4b0
[  695.684476][T20654]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  695.684492][T20654]  NF_HOOK+0x360/0x3f0
[  695.684509][T20654]  ? NF_HOOK+0xa2/0x3f0
[  695.684525][T20654]  ? __pfx_NF_HOOK+0x10/0x10
[  695.684541][T20654]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  695.684557][T20654]  ? lock_acquire+0x106/0x350
[  695.684574][T20654]  br_forward_finish+0xd3/0x130
[  695.684590][T20654]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  695.684606][T20654]  ? __pfx_br_forward_finish+0x10/0x10
[  695.684623][T20654]  NF_HOOK+0x360/0x3f0
[  695.684639][T20654]  ? NF_HOOK+0xa2/0x3f0
[  695.684657][T20654]  ? __pfx_NF_HOOK+0x10/0x10
[  695.684673][T20654]  ? __pfx_br_forward_finish+0x10/0x10
[  695.684690][T20654]  ? __skb_clone+0x483/0x7a0
[  695.684707][T20654]  ? br_handle_vlan+0x61/0x530
[  695.684723][T20654]  __br_forward+0x397/0x540
[  695.684738][T20654]  ? __pfx_br_forward_finish+0x10/0x10
[  695.684759][T20654]  br_flood+0x6ee/0xb80
[  695.684778][T20654]  ? br_dev_xmit+0x193/0x1990
[  695.684790][T20654]  br_dev_xmit+0x12bd/0x1990
[  695.684803][T20654]  ? br_dev_xmit+0x193/0x1990
[  695.684816][T20654]  ? __pfx_br_dev_xmit+0x10/0x10
[  695.684831][T20654]  ? is_skb_forwardable+0xb0/0x200
[  695.684850][T20654]  dev_hard_start_xmit+0x2cd/0x830
[  695.684864][T20654]  __dev_queue_xmit+0x14d9/0x3950
[  695.684878][T20654]  ? __dev_queue_xmit+0x2b6/0x3950
[  695.684890][T20654]  ? trace_kmem_cache_alloc+0x29/0xe0
[  695.684914][T20654]  ? kmem_cache_alloc_node_noprof+0x3ce/0x690
[  695.684932][T20654]  ? __pfx___dev_queue_xmit+0x10/0x10
[  695.684944][T20654]  ? __asan_memcpy+0x40/0x70
[  695.684960][T20654]  ? __pskb_copy_fclone+0x9c8/0xff0
[  695.684972][T20654]  ? __asan_memcpy+0x40/0x70
[  695.684987][T20654]  ? __pskb_copy_fclone+0x9c8/0xff0
[  695.685001][T20654]  ? hsr_create_tagged_frame+0x8cd/0xe10
[  695.685013][T20654]  ? hsr_addr_subst_dest+0x30d/0xa90
[  695.685031][T20654]  hsr_forward_skb+0x167e/0x2a80
[  695.685044][T20654]  ? ret_from_fork_asm+0x1a/0x30
[  695.685064][T20654]  ? hsr_forward_skb+0xbb/0x2a80
[  695.685076][T20654]  ? __pfx_hsr_forward_skb+0x10/0x10
[  695.685088][T20654]  ? do_raw_spin_lock+0x12b/0x2f0
[  695.685101][T20654]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  695.685113][T20654]  ? __pfx_netif_skb_features+0x10/0x10
[  695.685124][T20654]  ? hsr_dev_xmit+0x237/0x360
[  695.685141][T20654]  hsr_dev_xmit+0x242/0x360
[  695.685157][T20654]  ? hsr_dev_xmit+0x2d/0x360
[  695.685174][T20654]  dev_hard_start_xmit+0x2cd/0x830
[  695.685188][T20654]  __dev_queue_xmit+0x14d9/0x3950
[  695.685202][T20654]  ? __dev_queue_xmit+0x2b6/0x3950
[  695.685217][T20654]  ? __pfx___dev_queue_xmit+0x10/0x10
[  695.685228][T20654]  ? neigh_connected_output+0x1ea/0x460
[  695.685244][T20654]  ? eth_header+0x11b/0x200
[  695.685256][T20654]  ? __asan_memcpy+0x40/0x70
[  695.685276][T20654]  ? ip6_output+0x126/0x550
[  695.685292][T20654]  ip6_output+0x340/0x550
[  695.685307][T20654]  ? __pfx_ip6_output+0x10/0x10
[  695.685321][T20654]  NF_HOOK+0x177/0x4f0
[  695.685337][T20654]  ? __pfx_NF_HOOK+0x10/0x10
[  695.685352][T20654]  ? __pfx_dst_output+0x10/0x10
[  695.685365][T20654]  ? lockdep_hardirqs_on+0x7a/0x110
[  695.685380][T20654]  ? __local_bh_enable_ip+0xd0/0x130
[  695.685395][T20654]  ? icmp6_dst_alloc+0x3a6/0x440
[  695.685412][T20654]  mld_sendpack+0x8b4/0xe40
[  695.685431][T20654]  ? mld_sendpack+0x213/0xe40
[  695.685445][T20654]  ? __pfx_mld_sendpack+0x10/0x10
[  695.685465][T20654]  mld_ifc_work+0x835/0xe70
[  695.685481][T20654]  ? process_scheduled_works+0xa70/0x1860
[  695.685498][T20654]  process_scheduled_works+0xb5d/0x1860
[  695.685521][T20654]  ? __pfx_process_scheduled_works+0x10/0x10
[  695.685537][T20654]  ? assign_work+0x3d5/0x5e0
[  695.685553][T20654]  worker_thread+0xa53/0xfc0
[  695.685576][T20654]  kthread+0x388/0x470
[  695.685588][T20654]  ? __pfx_worker_thread+0x10/0x10
[  695.685604][T20654]  ? __pfx_kthread+0x10/0x10
[  695.685615][T20654]  ret_from_fork+0x514/0xb70
[  695.685647][T20654]  ? __pfx_ret_from_fork+0x10/0x10
[  695.685665][T20654]  ? __switch_to+0xc79/0x1410
[  695.685679][T20654]  ? __pfx_kthread+0x10/0x10
[  695.685691][T20654]  ret_from_fork_asm+0x1a/0x30
[  695.685712][T20654]  </TASK>
[  696.231706][T26367] lec:lec_vcc_attach: copy from user failed for 28 bytes
[  696.274847][T26373] lo speed is unknown, defaulting to 1000
[  696.336742][T26373] lo speed is unknown, defaulting to 1000
[  696.790183][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.889175][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.019421][ T9003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.030574][ T7064] lec:lec_start_xmit: lec0:No lecd attached
[  700.129476][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.249113][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.359324][  T172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  703.470374][T24195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  704.589356][T24195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  705.038917][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  705.046971][    C0] lec:lec_tx_timeout: lec0