last executing test programs:

7m16.063655506s ago: executing program 3 (id=11154):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xfcde, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x3, 0x2}, {}, {0xb, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88f5}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000810}, 0x200800d4)

7m15.747750621s ago: executing program 3 (id=11159):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000100039040000000000000000000003e4", @ANYRES32=r2, @ANYBLOB="000000000000000020001280080001007369740014000280080014000f00000008000100d4"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x90)

7m15.586598852s ago: executing program 3 (id=11162):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000400)=0x7b, 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440), 0x10)
listen(r3, 0x709)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
close(0x4)
ppoll(&(0x7f0000000440)=[{r2, 0x2700}], 0x1, 0x0, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0xe, 0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r10}, 0xc)
listen(r1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

7m15.498286342s ago: executing program 3 (id=11164):
socket$kcm(0xa, 0x922000000003, 0x11)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @empty}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r3=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={r3, 0x5}, 0x8)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f0000000180)={0x56, "f1df3604d109caf02cdf2392d6f16bc4bdc70034d4abe0b41da39826ecc088d0b2db6d1b4b1088785c80afee5fa34c78d933fb14e8408709b8c7a7ceb68c645dda74fba7f1d786db6afb55c0ebd9d9fae322ae07af0c5970827ff2b8e128e629745d3f5aa3690e12f9cdcd141ad1f4d7331a5cece1325a11a0e8ffd9a789b66e"})
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)=0x2e200000, 0x4)

7m15.2991091s ago: executing program 3 (id=11168):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32, @ANYBLOB="00000000000000080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00@\x00', @ANYRES16, @ANYBLOB="01002abd7000fedbdf250900000008000500be0000001400038005000800ff000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x59917c46496d4d40)
bind$x25(0xffffffffffffffff, &(0x7f0000000000), 0x12)
r0 = socket(0xa, 0x3, 0x1)
setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x7, 0xc, 0x3, 0xfff, 0x25, 0x2, 0x3}, 0x1c)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet(0xa, 0x869eeee30f21d2c0, 0x85)
connect$inet(r4, &(0x7f00000004c0)={0x2, 0x1, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
write(r5, &(0x7f0000000000)="ea", 0x1)
sendmmsg$alg(r5, 0x0, 0x0, 0x8000)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8)
close(r5)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003f00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fddbdf252800000008000300", @ANYRES32=r7, @ANYBLOB="04002a10"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4048090)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)
r9 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e1f, 0x0, 0x4e24, 0x13, 0x2}, {0x0, 0x200000024, 0x40000000007, 0x6811220d, 0x100000000, 0x4, 0x200000004, 0x9}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@rand_addr=0x64010101, 0x0, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3502, 0x3, 0x0, 0x0, 0x9}}, 0xe8)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd70000000000067db000008000334", @ANYRES32=0x0, @ANYBLOB='\f'], 0x34}}, 0x8080)

7m15.100559721s ago: executing program 3 (id=11172):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$kcm(0x29, 0x7, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0xd8, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x49, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440100000103010100000000000000000300000280000b800800164000000003400004803c0003800800024000000009080003400000000905000100080000000800024000000eb30500010000000000080003400000800108000240000001e12c001980080001000000000008000200010000020000000000000000080001000000000008000200010800000800154000000001b0000f800c000a8008000140000000000800084000000001900003802c000180140003"], 0x144}, 0x1, 0x0, 0x0, 0x841}, 0x40050)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a1f0400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000a915abd8bb2be189b91ca22bbcf964b378690a4d81ffbc6aaa3dc7289a3150c5206cac7ea522cf30ce6fd2074a02ce9e404f44f400ce47ea8ff2b1d88955baa5f997cf82149a93097033e31061d0339b932834aafed82eec9080e19846878b8adcf1f2f0fee02b89e1e0d4ab98a1f06f466ad5384c3ebd4e463308388fb46fa36681f33cd272b6f6f0618b0c37c06ae0f04aa59842812564b907118ba84a4f59320c43fd85bf06293434ce72f045d15877369f5ac5b974dcba45bf9d69f16208a0555015ffb146a575a8ce8fc5ac8345207ff5fb5ed85f4acc8cdee31744a13b2cfe7f35695d0767869783ce0f816e1e8f11697f1cc05226b5c3f5ab02a43f81f58eb74407fb55c79f522c8cc390cce0db8"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x3, 0x2, 0xf, 0x6, 0x7, 0x7, 0x8, 0x4, 0x12, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0xffff, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x4, 0x3, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r14, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r14, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r1})
ioctl$sock_bt_hci(r1, 0x400448c9, 0x0)

7m1.336183483s ago: executing program 1 (id=11354):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, 0x0}}], 0x1, 0x8000)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000540)={r1, @in6={{0xa, 0x4e24, 0xd4c3, @empty, 0x7}}, 0x4, 0x555e, 0x80000003, 0x3, 0xec9742544c25a26, 0x6, 0x7}, 0x9c)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0xcc)
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x22020600)
epoll_create(0x2040)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0x32600)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000001c0)=0x7, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r8, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x6, 0x112}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', <r11=>0x0, 0x8, 0x7800, 0x3, 0x2, {{0x13, 0x4, 0x2, 0x3, 0x4c, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0x13, 0x85, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @loopback]}, @timestamp_prespec={0x44, 0xc, 0xb2, 0x3, 0x3, [{@remote, 0x8000}]}, @rr={0x7, 0x17, 0x79, [@loopback, @local, @private=0xa010100, @multicast2, @rand_addr=0x64010100]}]}}}}})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'rose0\x00', <r12=>0x0})
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, r10, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

7m1.01434451s ago: executing program 1 (id=11359):
r0 = socket$inet6(0x10, 0x3, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x12000, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect$nfc_raw(r1, &(0x7f0000001980)={0x27, 0x0, 0x1, 0x2}, 0x10)
recvfrom$inet6(r0, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0xffffffffffffffc3)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r2 = socket$inet6(0x10, 0x3, 0x0)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x2, 0x4, 0x9, 0xb, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}, @sadb_address={0x3, 0x7, 0xff, 0xa0, 0x0, @in={0x2, 0x4e21, @empty}}, @sadb_ident={0x2, 0xa, 0x9}, @sadb_ident={0x2, 0xa, 0x8, 0x0, 0x7}]}, 0x58}}, 0x40004)
sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
socket$inet6(0x10, 0x3, 0x0) (async)
recvfrom$inet6(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) (async)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async)
connect$nfc_raw(r1, &(0x7f0000001980)={0x27, 0x0, 0x1, 0x2}, 0x10) (async)
recvfrom$inet6(r0, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0xffffffffffffffc3) (async)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) (async)
socket$inet6(0x10, 0x3, 0x0) (async)
pipe(&(0x7f0000000040)) (async)
sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x2, 0x4, 0x9, 0xb, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}, @sadb_address={0x3, 0x7, 0xff, 0xa0, 0x0, @in={0x2, 0x4e21, @empty}}, @sadb_ident={0x2, 0xa, 0x9}, @sadb_ident={0x2, 0xa, 0x8, 0x0, 0x7}]}, 0x58}}, 0x40004) (async)
sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async)

7m0.872239929s ago: executing program 1 (id=11361):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)="45050c1b181c0f9e828a81920760c0c4fbed0842677be0", 0x17}, {&(0x7f0000000180)="2c0259783fca22093fbf165fbd802ceb9106c91806bf9422c6fb9f11ef035e7d9627db1c91b1df54131a1765da30e1f6a595a40617ab128149ea36ebdf6cdf1ae552fc688415efe6637c215293fb", 0x4e}, {&(0x7f0000000200)="4c9b60ae7eb14a06ef99cd79e86a618f9c77205f803be9f3cea865e147b5e36f97b4f40e4185f63372289e33dbf0bada25ac79894803615cf51c565cc6abf40c5c1da9c99b4ac71a58f75dcd8bb04623326c8e128260156e9b8f620d5c9b4a05", 0x60}, {&(0x7f0000000280)="16e582fb873ce339a429fe6060e0ebef5949d0acd6bb063738149b62136128abd2567182382e5abc7fef5e643f4e04894658535cff325b9f1528d19b3285d8bdcb0b69356147bc2c27d25ba6886b0774d3ee0f56", 0x54}], 0x4, &(0x7f0000000340)=[{0x50, 0x84, 0x3, "58df9a029c1be8e762708ecc145d54e91adbb34d4ad477f308f202df205a8e71ebb6e9fe6a724435250daeeb1007d89297785a5f0f54ddc3b6ec4eb01d02"}, {0xb0, 0xf3, 0xffffffff, "9b65d22fe10c2c3442fcc2a7120fc6133a1b15ba82ef641a4432e7cb9f7dc1df24f7bf28684340b1309c05e1f41d82a7f6ced76870fd7df4d50d8b2fee57f75b59fca15360ae121a98eb881b1a7ab0fbc22b7f870a4ae57da276a6e00d5bc173ebb098d0baf6676dcc88664bcbd7c740149f1e4680e032843c9fd1e8b7cc377ad10587c7dd195fdc1ef2caa01f5d7d77c6b8bef591078e717825"}], 0x100}, 0x20000004)

7m0.783792004s ago: executing program 1 (id=11364):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r3, 0xff01, 0x110c2300fe)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000021000000000000000200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000db5a00fea0000000bfa2001b0015930007180000f8ffffffb703000008000000b70400000000000085000000150000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r6 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r7, &(0x7f00000008c0)='devices.allow\x00', 0x2, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0xf4e)
socket$inet(0x2, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
writev(r8, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)
unshare(0x400)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_audit(0x10, 0x3, 0x9)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x800000200000000, 0x4ff8a366, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4000, 0x4000, 0x9, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r6, @ANYBLOB="8b04040000000000300012800b00010065727370616e0000200002800400120006001800000040000500160002000000050017"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x40000)
socket$inet6(0xa, 0x3, 0x3ff)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="91100900000000009560"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

6m59.972884974s ago: executing program 32 (id=11172):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$kcm(0x29, 0x7, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0xd8, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x49, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440100000103010100000000000000000300000280000b800800164000000003400004803c0003800800024000000009080003400000000905000100080000000800024000000eb30500010000000000080003400000800108000240000001e12c001980080001000000000008000200010000020000000000000000080001000000000008000200010800000800154000000001b0000f800c000a8008000140000000000800084000000001900003802c000180140003"], 0x144}, 0x1, 0x0, 0x0, 0x841}, 0x40050)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x3, 0x2, 0xf, 0x6, 0x7, 0x7, 0x8, 0x4, 0x12, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0xffff, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x4, 0x3, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r14, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r14, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r1})
ioctl$sock_bt_hci(r1, 0x400448c9, 0x0)

6m59.830522295s ago: executing program 1 (id=11379):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000080003000000000014"], 0x38}}, 0x0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"/353], 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x4040)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={<r4=>0x0, @multicast1, @private}, &(0x7f0000000300)=0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0xb0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x84, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x8, 0x2, {0x3, 0x80000001}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xf}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffb, 0x7fffffff}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x80000001}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0xfff}}]}}]}, 0xb0}}, 0x20000000)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xc0, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000)

6m59.576111858s ago: executing program 1 (id=11382):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000"], 0x104}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="01422006020607f6", @ANYRESHEX=r2, @ANYRESOCT=r2, @ANYBLOB="96a116664ad74559c53a5c37bf77920a8e24e3f87917904747209a1e7a7bbd4a06345f71398baf73fc4e2138ce24f0e88c777e4ca8b1fa1a97a591f1b018cf14de7f48a08e12d8b4e2d3f376b583963b", @ANYRES8=0x0], 0xa)
bind$bt_hci(r2, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r4], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f00"], 0x48}}, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r4)
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r7, 0x10, 0x70bd29, 0x8, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x4, 0x0, 0x1, 0x46]}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x6)
sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000880)={0x2, 0x4e1d, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2800000000000000000000000700000083070400000000070f09"], 0x28}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300627269", @ANYBLOB="bc3b76e675"], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0)
setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000180)=0x1, 0x4)

6m44.521106358s ago: executing program 33 (id=11382):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000"], 0x104}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="01422006020607f6", @ANYRESHEX=r2, @ANYRESOCT=r2, @ANYBLOB="96a116664ad74559c53a5c37bf77920a8e24e3f87917904747209a1e7a7bbd4a06345f71398baf73fc4e2138ce24f0e88c777e4ca8b1fa1a97a591f1b018cf14de7f48a08e12d8b4e2d3f376b583963b", @ANYRES8=0x0], 0xa)
bind$bt_hci(r2, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r4], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f00"], 0x48}}, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r4)
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r7, 0x10, 0x70bd29, 0x8, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x4, 0x0, 0x1, 0x46]}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x6)
sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000880)={0x2, 0x4e1d, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2800000000000000000000000700000083070400000000070f09"], 0x28}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300627269", @ANYBLOB="bc3b76e675"], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0)
setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000180)=0x1, 0x4)

5.034534363s ago: executing program 2 (id=14674):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000080)=""/111, &(0x7f0000000000)=0x6f)
syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x8807, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e1406", 0x1b}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
unshare(0x2c060000)
unshare(0x22020600)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$SIOCSIFHWADDR(r1, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"})
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000000001010400000009000000000200000014001080080002400000017006000000000100012400018014000180050001"], 0x4c}, 0x1, 0x0, 0x0, 0xc4}, 0x4000810)

4.930551857s ago: executing program 2 (id=14677):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000100))
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x80000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}, 0x10)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4)

2.750630004s ago: executing program 2 (id=14687):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0xfffffffd)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
r2 = socket$inet(0xa, 0x801, 0x85)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
listen(r2, 0x8)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r7}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r7}, 0x38)
listen(r4, 0x7)
r8 = socket$netlink(0x10, 0x3, 0x4)
writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

2.581964595s ago: executing program 5 (id=14690):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x1000})
r1 = socket$l2tp(0x2, 0x2, 0x73)
recvfrom$l2tp(r1, 0x0, 0x0, 0x40000142, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$vsock_stream(0x28, 0x1, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x96)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket$vsock_stream(0x28, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private, @loopback}}}], 0xffcd}, 0x0)
recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
r7 = socket$kcm(0xf, 0x3, 0x2)
write$cgroup_devices(r7, 0x0, 0xfefb)

2.574956915s ago: executing program 4 (id=14691):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={<r3=>0xffffffffffffffff})
sendmsg$NFT_BATCH(r3, &(0x7f0000004500)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0xbc, 0x18, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x64, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0xbc, 0x8, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0xa8, 0x7, 0x1, 0x0, "49bf47592249c252d12dfc4c246dd60407a735ffe3bebe3f763a04058b6f6d52a41d6a6bab2ebe62a2c5aa5e65d43f20bd25efd4d52e8832dfc8d17f6b5e0e297513ce3940f3fbcb9ab119378690e0b6b700f2298b62fbc6209a7d62dae83733c9363dca36016e77f3f522f270aa3a576dd9fdf6b2bd0a9a344cb50692e1b70836892f3ea8102aaa16b140776f67a4d6bb4dd2961bfbdf2f37b8fc05ea33ace08c5f7196"}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1c8}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
recvmsg$can_j1939(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/76, 0x4c}], 0x1}, 0x12002)
socket$inet_icmp(0x2, 0x2, 0x1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000640))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
close(0x4)
socket(0x1, 0x5, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)={0x24, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
sendmsg$NBD_CMD_STATUS(r4, 0x0, 0x4000800)

2.445982193s ago: executing program 2 (id=14694):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0xf21, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wpan1\x00', <r5=>0x0}) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wpan3\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x20, r7, 0x1, 0x70bd25, 0x25dfdbfa, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40880) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'wpan3\x00', <r10=>0x0})
sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000e40)={&(0x7f0000000c40), 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x74, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x74}, 0x1, 0x0, 0x0, 0x40041}, 0x20008000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f29f057acc54d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x3, 0x0) (async)
r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_gfeatures={0x19}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r12, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x9, 0x585e, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x67, 0x0, 0x4, 0x17, 0x0, @rand_addr=0x64010101, @private=0xa010101}}}}) (async)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)={0x6c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x40) (async, rerun: 32)
r14 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000c80)={'lo\x00', <r15=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0xc8, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80000001}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xffc}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x3}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x80000001}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0xfff}}]}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x7, 0x1b, 0xffff, 0x400, 0x2, 0x5, 0x9}}, {0x0, 0x2, [0x7ff, 0x2, 0xfff]}}, {{0x0, 0x1, {0x8, 0x5, 0xb, 0xffffffff, 0x0, 0x7, 0xa}}, {0x0, 0x2, [0x200, 0x3]}}, {{0x0, 0x1, {0x40, 0x40, 0x4, 0x101, 0x0, 0x14d60000, 0x511d}}, {0x0, 0x2, [0x40, 0x200, 0x8001, 0x3, 0x0, 0x4, 0x9, 0x1, 0x8]}}, {{0x0, 0x1, {0x3, 0x0, 0x90, 0xffff, 0x2, 0x10000, 0x2}}, {0x0, 0x2, [0x4, 0xe4ce, 0x8001, 0x8, 0x7, 0x6, 0x6, 0x35]}}, {{0x0, 0x1, {0xdb, 0x2, 0x3, 0x1, 0x1, 0x8000, 0xfffffc01}}, {0x0, 0x2, [0x6, 0x4]}}, {{0x0, 0x1, {0x5, 0x7, 0x400, 0x1, 0x0, 0x2, 0xe5}}, {0x0, 0x2, [0xccf3, 0x4, 0x3, 0x1, 0x1, 0x6, 0x6, 0x10, 0xe]}}, {{0x0, 0x1, {0xf, 0x2, 0x3, 0xb, 0x0, 0x9, 0x7}}, {0x0, 0x2, [0x1da1, 0x2, 0x82e]}}, {{0x0, 0x1, {0x3, 0x0, 0x100, 0x4, 0x2, 0x4}}, {0x0, 0x2, [0x101, 0x7, 0x1000, 0x6, 0x80, 0xad]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0xea}}]}, 0xc8}}, 0x20000000)

2.326857711s ago: executing program 2 (id=14696):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914)
r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @remote, 0x0, [@default, @bcast, @netrom, @bcast, @default]}, &(0x7f0000000040)=0x40, 0x400)
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f0000000300)=""/134, 0x86}], 0x2, 0x2, 0x3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xff8, 0xffffffffffffffff, 0x0)
close(r1)
r2 = socket$l2tp(0x2, 0x2, 0x73)
recvfrom$l2tp(r2, &(0x7f0000000100)=""/19, 0x13, 0x20, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10)

1.622387539s ago: executing program 5 (id=14707):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e24, @multicast2}, 0x4, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)='geneve1\x00', 0xd, 0x1, 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f00000001c0), 0x4)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)

1.621356081s ago: executing program 4 (id=14708):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000240012800b0001006d6163736563000014000280050009000100000005000a000000000008000500", @ANYRES32=r1, @ANYBLOB="25c6066f699f1e643486090174e756e33668322d1c3b37193c63cef9b141459505ac971534dd09560513ee85d4b69175c9dfbbd3112eff7b5d5b05c202d6e59b100d47a135c1a6e5bbeea21084da58900f31827b155f3a9a06b544b6d96bdeb372"], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)

1.498374825s ago: executing program 5 (id=14709):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x1, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x4}]}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r3, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup, 0xffffffffffffffff, 0x1e, 0x200c}, 0x20)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r1, &(0x7f0000000480)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}, {&(0x7f00000004c0)="b70000000180", 0x6}, {&(0x7f00000003c0)="06000000750d08c4daf10a7742e39e31ceefb1fcd2e5bc3fc84150da0d1787cc10d211447da94cb715e462e27318612235a604082c42", 0x36}], 0x3)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @multicast1, @link_local, @empty}}}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@dellinkprop={0x38, 0x6d, 0x2ec9b2c728e3c67, 0x70bd2b, 0x25dfdaff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x84, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x849bca22339dd75d}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040051}, 0x4)

1.439933473s ago: executing program 4 (id=14710):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (async)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x4}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x4d14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c)
getpeername$packet(r3, &(0x7f0000000340), &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x29, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f0, 0x0, 0x0, 0x160, 0x458, 0x2a8, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, &(0x7f0000000440), {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bond0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x2, 0x38}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0x0, @multicast2, 0x4e20}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x7}}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xe, 0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x2, 0x5, 0x0, 0x7, 0x6], 0x5, 0x3}, {0xffffffffffffffff, [0x1, 0x6, 0x2, 0x2, 0x1, 0x7], 0x1, 0x3}}}}, {{@ip={@private=0xa010101, @remote, 0x0, 0xffffff00, 'geneve0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x84, 0x1, 0x2}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "ca7c", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xbb}}}, {{@ip={@local, @local, 0xff000000, 0xff, 'bond0\x00', 'rose0\x00', {}, {0xff}, 0x62, 0x2, 0x64}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xa, 0x6, @rand_addr=0x64010102, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550)
close(0x3)
r6 = accept$unix(r1, &(0x7f0000000240), &(0x7f00000000c0)=0x6e)
getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000000180)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000300)=0x2c)
socket$netlink(0x10, 0x3, 0x10) (async)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000)

1.41729076s ago: executing program 2 (id=14711):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00')
unshare(0x6a040000) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2000007}]}}]}, 0x40}}, 0x4000010)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, 0x0, 0x0)
listen(r4, 0xa1) (async)
socket$inet_udp(0x2, 0x2, 0x0)
accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) (async)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000080), 0x4) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1}, {0x4, 0xffff}, {0xe, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x9, 0x0, 0x0, 0x200, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000050)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000005153b9c13041c6338611928bf94984ed44f93fc72b314be42d99b44eeff12db39c10e8567d1b1761faff540db6a8ab93e1c76ade2e2a4b8010056ccf369d272858bb779c17d34d95d6633f1e8390b987851aaa422e6baa2ac337b2e04e33e4d8559b7af9974a6fdb60bc36ac38f0eb71000000000000000000006bc170ae6698d54a6c3d5614752acc69f1f5a36ae38e1c8e4ee64dbfdc7bbe204e444e5b8ea3d56f8991acb6d26145f12687450eda823e7e341d4239a529445c8c0b50036938f1117188609ba74022aa20a5dd2bd5aa98713705006117f0e9f1982bbfe20737a90ed89f3a56363c220aae1d2b23aba02828a6d8d95595aef2290f51dd2806d540a0ba591fd21607fd7a3c546892f8ee7d18fefab866a6ba", @ANYRES16=r5, @ANYBLOB="0100000000000000000067000000080001004000000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800c300741300000800c40000000000"], 0x40}}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) (async)
r8 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0xfe33)

1.350254017s ago: executing program 0 (id=14712):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000080), 0x10) (async)
connect$can_bcm(r1, &(0x7f0000000080), 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x108, 0xa, 0x148, 0x108, 0x10, 0x360, 0x2a8, 0x2a8, 0x360, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @remote, 0x0, 0x0, 'geneve0\x00', 'rose0\x00', {}, {}, 0x84}, 0x0, 0xe8, 0x108, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@multiport={{0x50}, {0x0, 0xb, [0x4e20, 0x4e24, 0x4e23, 0x4e23, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e20, 0x4e24, 0x4e21, 0x4e21, 0x4e21, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, 'erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0xff, 0x0, 0x400000, 0x0, 0x7fff, 0x3ff}}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x8000, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x458) (async)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x108, 0xa, 0x148, 0x108, 0x10, 0x360, 0x2a8, 0x2a8, 0x360, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @remote, 0x0, 0x0, 'geneve0\x00', 'rose0\x00', {}, {}, 0x84}, 0x0, 0xe8, 0x108, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@multiport={{0x50}, {0x0, 0xb, [0x4e20, 0x4e24, 0x4e23, 0x4e23, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e20, 0x4e24, 0x4e21, 0x4e21, 0x4e21, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, 'erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0xff, 0x0, 0x400000, 0x0, 0x7fff, 0x3ff}}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x8000, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x458)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000080)=0x71ca, 0x3) (async)
setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000080)=0x71ca, 0x3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0xc, 0x20, &(0x7f0000001580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc23}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0500"/16, @ANYRESDEC=r0, @ANYRES64=r5, @ANYRESOCT=r1, @ANYRES64=r2, @ANYBLOB="0000000001000000000000faffff"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async)
sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0500"/16, @ANYRESDEC=r0, @ANYRES64=r5, @ANYRESOCT=r1, @ANYRES64=r2, @ANYBLOB="0000000001000000000000faffff"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\a'], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000fbffbfff000000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b6020000000000008500000086000000850000001100000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000840)={'tunl0\x00', &(0x7f0000000780)={'tunl0\x00', <r8=>0x0, 0x20, 0x40, 0xffffffff, 0x6, {{0x28, 0x4, 0x3, 0x1, 0xa0, 0x65, 0x0, 0x5, 0x29, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0x3e, 0x3, 0xe, [{@private=0xa010102, 0x401}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x349}, {@rand_addr=0x64010100, 0x7}]}, @lsrr={0x83, 0x1f, 0x8f, [@rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast, @private=0xa010101, @private=0xa010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x24, 0x4d, 0x1, 0x8, [{@private=0xa010102, 0x1}, {@loopback}, {@private=0xa010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xfffffffb}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0xda, 0x0, 0x8, [0xfffffffa, 0x4, 0x8, 0x1f9000, 0x0, 0x8]}, @noop, @timestamp_prespec={0x44, 0xc, 0xa9, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffa}]}]}}}}})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xd, 0x8, 0x4, 0x1, 0x0, r9}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r11, &(0x7f00000000c0), 0x0}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r11, &(0x7f00000000c0), 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x2, &(0x7f00000005c0)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000680)='GPL\x00', 0xe, 0x99, &(0x7f00000006c0)=""/153, 0x41100, 0x4, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x1, 0x4, 0x7a6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000900)=[r6, r0, r6, r11, r6, r6], &(0x7f0000000940)=[{0x2, 0x4, 0x9, 0x8}, {0x0, 0x1, 0xa, 0x8}, {0x0, 0x4, 0xc, 0x7}, {0x0, 0x3, 0xe, 0x2}, {0x3, 0x1, 0x9, 0x8}, {0x2, 0x3, 0x3, 0x4}, {0x4, 0x3, 0xc, 0xc}], 0x10, 0x4}, 0x94)

1.264681331s ago: executing program 6 (id=14713):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="a6", 0x1}, {0x0}], 0x62}}], 0x1, 0x20000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) (async)
sendmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="a6", 0x1}, {0x0}], 0x62}}], 0x1, 0x20000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async)

1.194600956s ago: executing program 5 (id=14714):
r0 = socket(0x18, 0x6, 0x9)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@newlinkprop={0x14c, 0x6c, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x40140, 0x200}, [@IFLA_PORT_SELF={0x20, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "fa415967aeec4feea9b9cea505bfef74"}, @IFLA_PORT_VF={0x8, 0x1, 0x8a5c}]}, @IFLA_VFINFO_LIST={0xf8, 0x16, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7ff, 0x1}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x81, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xa, 0x40}}]}, {0xa0, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8, 0x80000000}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0x8c0, 0x7, 0x8100}}, {0x14, 0x1, {0x9, 0x81f, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0x9, 0x200, 0x6, 0x88a8}}, {0x14, 0x1, {0xfb47, 0x22, 0x6, 0x88a8}}, {0x14, 0x1, {0x9, 0x84c, 0x3, 0x88a8}}, {0x14, 0x1, {0x4994, 0xe0f, 0x7, 0x8100}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0x4}}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_virt_wifi\x00'}]}, 0x14c}, 0x1, 0x0, 0x0, 0x2800}, 0x4008004)

1.074521115s ago: executing program 4 (id=14715):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f00010300000000480000000101"], 0x114}], 0x1}, 0x24044010)
recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x14022, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)
write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000100800024000"], 0xfc}}, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/210, 0xd2}], 0x1}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendto(r10, 0x0, 0x0, 0x8800, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x298, 0x0, 0x168, 0x98, 0x98, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x200}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@empty, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'gre0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x7, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)

1.067624296s ago: executing program 5 (id=14716):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d70a000020000000620a00000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x1, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe94}, 0x23)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
r3 = socket(0x28, 0x5, 0x0)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r4, 0x4)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
recvmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2001)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="a18302000000000000000500000008000300", @ANYRES32=r10, @ANYBLOB="0c0090003e000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a0500dac545297ee43f01f00000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f40000000063c0000000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002140000001000010000000000000000000084000a"], 0xd0}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12], 0x90}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000006637cf2c00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000f2ffffff00"/28], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.039315297s ago: executing program 6 (id=14717):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff, 0xff], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x21, 0x0, 0x0, 0x1}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x9, 0x1ff, 0x3, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x20}, {0x1}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@tos={{0x28}, {0xff, 0x9}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x10, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xf, 0x5, 0x8, 'snmp\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x30}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000b80)=ANY=[@ANYBLOB="feff"], 0x310)
getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x61, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)

937.954349ms ago: executing program 0 (id=14718):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x2, 0x6)
sendto(r2, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x4000, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x400, 0x33}}}}]}, 0x44}}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {0xf}, {0xffff, 0xffff}, {0xb, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x2, 0x1, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000002c0)={0x1000})
sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x1b0, 0x14, 0x0, 0x70bd25, 0x25dfdbfd, {0x20}, [@nested={0x101, 0xbd, 0x0, 0x1, [@generic="6a483319960bf3e01413a7efee1c57bca3ddc92e974dc135baa2b0d99a61e693991eda8abdbcfa368e1ac94ef6a5fc0e4a2be612596d7531c0233f9c99d4d1f9ad2449e0eb09f0c398331d0e2e1c31f07bd406ecd4a991da9b9a4dec85ff4a4300bec30727e3767f476fbb33e7da88bd6c4b366cdd7f690e6e1ee7f67666b940f31fdadea656386059c7226b31e7af22a6a864d2a8cec1d392282d3f2c41dc7c9288102a34b09acd54271aa8dba3351165987f247ca27aa62418eb17d6b775800c3083908f9c46d4cdc2ec8469040869d343a1c14b083cd18dee6c1590f8551dd798f637a235e97f3d2b8690ba2169684d546de991", @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @generic="94510ca0400df07a1f1bb256796b89706bdb8c14e82e5106db223cfc35b667ab8ec3329b8f73765e442a01898db100b48a5e7ecab73c9d7c5c61d09d868ca26250b504490abdc61bb47145c173fe04a7b3d6581d93ed84804a5510ea", @generic="58256bca5f43d52cecf90170e08c06d811a5e217c267280de963e285af7f7e458993e60457851e9ee4426df0ebc6d0d0dfe79615a711f45dc1"]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000050}, 0x4)

754.222426ms ago: executing program 4 (id=14719):
socket$inet6(0xa, 0x800000000000002, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r11 = socket$unix(0x1, 0x5, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)

733.910337ms ago: executing program 0 (id=14720):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000002c0)={<r5=>0xffffffffffffffff, &(0x7f0000000000)='syzkaller0\x00', 0x410000, &(0x7f0000000080)={@align=0x7, {0x5, 0x0, 0x2, 0x7f0}}, 0x100, &(0x7f0000000180), &(0x7f00000001c0)=0x8})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
recvfrom$rxrpc(r5, &(0x7f0000000300)=""/108, 0x6c, 0x2, &(0x7f0000000400)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}, 0x24)
getsockopt$inet6_int(r4, 0x29, 0x31, 0x0, &(0x7f00000004c0))
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x8)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3d}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="95", 0x1}], 0x1}, 0x800)

649.836187ms ago: executing program 6 (id=14721):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0xffff6ebe}]}, {0x0, [0x30, 0x30, 0x30, 0x2e]}}, 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r2, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r1], 0x68}}, 0x0)

569.413777ms ago: executing program 0 (id=14722):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000018000180140002007665746830000000000000000f00000005000d"], 0x34}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$bt_hci(r4, &(0x7f0000000280)={0x1, @create_conn={{0x405, 0xd}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2, 0x1, 0x9, 0x0, 0xd}}}, 0x11)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
write(r5, &(0x7f0000000400)="9746b3e3471d", 0x6)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc, 0x1}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3c86c0}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000300)={'syztnl1\x00', <r8=>0x0, 0x8, 0x20, 0x1, 0x5, {{0x17, 0x4, 0x1, 0x9, 0x5c, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @multicast2, {[@rr={0x7, 0x23, 0x36, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @multicast2, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010102]}, @rr={0x7, 0xb, 0xe8, [@loopback, @empty]}, @timestamp_addr={0x44, 0x14, 0x25, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x80000000}, {@multicast2, 0xe}]}, @ra={0x94, 0x4, 0x1}, @end]}}}}})
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@newtclass={0x34, 0x28, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x4, 0xd}, {0x9, 0x1}, {0x6, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_RATE={0x6, 0x5, {0xa1, 0x26}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x40)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)

466.685015ms ago: executing program 6 (id=14723):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4000) (async)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
r8 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000008c0), 0x4) (async)
close(r8)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40) (async)
r9 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r9, 0x0, 0x20, &(0x7f00000012c0)="15020000", 0x4) (async)
sendmsg$AUDIT_ADD_RULE(r9, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x42c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x48000) (async)
close(r6) (async)
r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r10, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1ad8f0c32f1b0390164ad57777000000000000000000000000000000c66a0472179d701252ddeeef0aba79"], 0x48) (async)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async)
r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r12, 0x89f1, &(0x7f0000000000))
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r11, @ANYBLOB="20000000000009a57e5df971de0000b702000014000000b7030000000000008500000083000000006909010000000000950000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000e40)=ANY=[@ANYBLOB="94010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

277.694748ms ago: executing program 6 (id=14724):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
unshare(0x9b1ebed16185e8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000009000000010001000900000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001a40)={r4, 0x0, 0x0, 0xffffffff00000000}, 0x20)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0xfffffda6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
pipe(&(0x7f0000000200)={<r7=>0xffffffffffffffff})
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r9, 0x112, 0xb, &(0x7f0000000140)=0xc3, 0x2)
connect$bt_sco(r9, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xfd38)
splice(r8, 0x0, r7, &(0x7f00000002c0)=0xf, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd24, 0x24dfdbff, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9d, 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084c}, 0x4001)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)
r11 = socket$packet(0x11, 0x2, 0x300)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r14, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r12], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto$packet(r11, 0x0, 0x0, 0x80, &(0x7f0000000080)={0x11, 0x1b, r14, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})

187.496112ms ago: executing program 0 (id=14725):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a01040000000000ed00000a0000040951f78e12797a310000000008000540000000020900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) (async)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="227720e150e366ffd04bd1c9fce8437625636483f9941dffaf48de40df5bb71d8d1602ad55c7a270a623be1125d78110794b9bd596710d8accf6ddf8e8459cae790241043c79fd37c4f8322d0b817dc4399c6ab6d67b37474287c62d5a1c54be314b2e59d1604d85b12f549c9626e74230d177c95d197cf330f58e4d926f8240a47d8567be049a7f01c2cec02978ff1897b1157b42cc1fb24bf79054b0ad105148c13c9adac47259a37f2748bcb7314925cda940e85ba4588a9e71375c3b65f804d6374d9124550ab29b2871", 0xcc}], 0x1, &(0x7f0000000040), 0x0, 0x20000000}, {0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x58, 0x117, 0x2, 0x3f, "eaa44592b31d37a1675571814d0b3ed66785ca217e98c3e16c71055dde2e52323a3d2caadfdff41fdeed87260129845d9c9db72f0f067d97a129247b0a4b55"}, @iv={0x28, 0x117, 0x2, 0xe, "92cda5117ab51f3d416e6a9462f0"}, @assoc={0x18, 0x117, 0x4, 0xa63}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x5d}, @iv={0x110, 0x117, 0x2, 0xfa, "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"}], 0x1f0, 0x1}, {0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)="a307825d30de0c7329f3c01eaef4d1fb227d45eeb0a2002a3db7d1fd09593f6175cd796a1f758ecc37a105c0d82154efc3ae08cd701a07f5aa0e031aef91aad52ba30bfb21aa05b52ba6a078e3252d448ca53317cbeb85dd7a1a14945d2a9de39fb46a4a3ba2c678276a109ed25ea3e0ad4fa3b8443275432de4e9787a29bfad92548af58be3ed4b1b2ed1528bd232f1a778c112b7cd44394257af9a04e323f0c5670d0331b546c439b72bb8dec74a82ba82bbd06742614531bee34233e2667d7470b300f71e7455a6f65a175ad9dd50c8abdd8de9457b11f003485dbebfae2747371602d4090c", 0xe7}], 0x1, 0x0, 0x0, 0x80}], 0x3, 0x4000000) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

157.050567ms ago: executing program 4 (id=14726):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64)
r1 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64)
setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) (async, rerun: 32)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 32)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x1001, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r3}, &(0x7f0000000340)=0x8)
socket$inet(0x2, 0x1, 0x5) (async, rerun: 64)
accept4$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000540)=0x1c, 0x800) (rerun: 64)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0x1c, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xe6, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) (async, rerun: 32)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (rerun: 32)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3a4, r7, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TX_RATES={0x370, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0xa}, {0x7, 0x1}, {0x6, 0x8}, {0x4, 0x2}, {0x3, 0x6}, {0x7, 0x7}, {0x5}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x8}, {0x3, 0x4}, {}, {0x5, 0x8}, {0x1, 0x5}, {0x5, 0x3}, {0x1, 0x1}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x8}, {0x6, 0x5}, {0x2, 0xa}, {0x3, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4565, 0x1316, 0xffcf, 0xfce, 0x6, 0x1, 0x100]}}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff6, 0x0, 0x2, 0xfffd, 0x1, 0x98, 0x7, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x370, 0x2, 0xff01, 0x5, 0x1, 0x7b5, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x48, 0x5, 0x16, 0x18, 0x48, 0x18]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x5}, {0x6, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x6}, {0x6, 0xa}, {0x2, 0x5}, {0x4, 0x2}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x4}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x4}, {0x2, 0x6}, {}, {0x0, 0x4}, {0x5, 0x7}, {0x5, 0x1}, {0x5, 0xa}, {0x1, 0x7}, {0x7, 0x3}, {0x3, 0x9}, {0x6, 0x4}, {0x2, 0xa}, {0x0, 0x9}, {0x0, 0x7}, {0x1, 0x6}, {0x7, 0x8}, {}, {0x4, 0x1}, {0x0, 0x5}, {0x0, 0x5}, {0x3, 0xa}, {0x6, 0xa}, {0x6, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x7}, {0x1, 0x6}, {0x3}, {0x4, 0x3}, {0x2, 0x9}, {0x4, 0x5}, {0x6, 0x7}, {0x7}, {0x6, 0x7}, {0x5, 0x3}, {0x4, 0x2}]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x23, 0x60, 0x3, 0x5, 0xb, 0x1b, 0x12, 0x1b, 0x48, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x7, 0x9, 0x36, 0x36, 0x9, 0x6, 0x18, 0x1b, 0x6, 0x16, 0x1b, 0x36, 0x6c, 0x6c, 0x0, 0x1, 0x4, 0x24, 0x36, 0xc, 0xc, 0x36, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x9, 0x3, 0x7ff, 0x0, 0x2, 0x1]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7, 0xa}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x4}, {0x1, 0x8}, {0x3, 0x3}, {0x1, 0x2}, {0x5, 0xa}, {0x4, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x3, 0x6c, 0xb, 0x16, 0x6, 0x5, 0x6c, 0x60, 0x12, 0xc, 0x3e, 0x6, 0x4, 0x12, 0x16, 0x1b, 0x1, 0x12, 0x4, 0x0]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x7}, {0x3, 0x8}, {0x1, 0x6}, {0x2, 0x5}, {0x0, 0x5}, {0x7, 0x5}, {0x3}, {0x0, 0x8}, {0x3, 0x7}, {0x6, 0x6}, {0x0, 0xa}, {0x7}, {0x3, 0x6}, {0x0, 0x1}, {0x1, 0x9}, {0x1, 0x9}, {0x5, 0x5}, {0x5, 0x1}, {0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x3}, {0x4, 0x2}, {0x6, 0x4}, {0x0, 0x9}, {0x2, 0x9}, {0x2}, {0x3}, {0x0, 0x9}, {0x6}, {0x4, 0x7}, {0x1, 0x9}, {0x2, 0x8}, {0x2, 0x2}, {0x5, 0x9}, {0x6, 0x8}, {0x1, 0x4}, {0x2, 0x7}, {0x6}, {0x1, 0x3}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x7}, {0x4, 0x4}, {0x2, 0x3}, {0x6, 0xa}, {0x1, 0x4}, {0x4, 0x5}, {0x4, 0x6}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x1b, 0x9, 0x5, 0x5, 0x6c, 0xb, 0x6, 0x0, 0xc, 0x9, 0x60, 0xc, 0x1b, 0x18, 0x12, 0x30, 0xc, 0xc, 0x60, 0x60, 0x3, 0x4, 0x5, 0xb, 0xc, 0x6, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x1, 0x55a, 0x8e7, 0x7f, 0x5, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0xc, 0x0, 0x0, 0x0, 0x1, 0x34]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x5, 0x2}, {0x2, 0x6}, {0x2, 0x7}, {0x5}, {0x2, 0x7}, {0x0, 0x3}, {0x4, 0x6}, {0x4, 0x2}, {0x3, 0x8}, {0x2, 0xa}, {0x5, 0x3}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x4, 0x3}, {0x3, 0x2}, {0x0, 0x1}, {0x7, 0x3}, {0x0, 0x3}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0x1}, {0x5, 0x6}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x4}, {0x0, 0x5}, {0x6, 0x2}, {0x1}, {0x3, 0x7}, {0x6, 0x1}, {0x0, 0x3}, {0x3, 0x7}, {0x5, 0x8}, {0x1}, {0x5, 0x8}, {0x2, 0x6}, {0x1, 0x3}, {0x5, 0x9}, {0x2}, {0x6, 0x3}, {0x4, 0x6}, {0x0, 0x3}, {0x1, 0x4}, {0x6, 0x1}, {0x7, 0xa}, {0x6, 0x4}, {0x0, 0xa}, {0x0, 0x5}, {0x6, 0x8}, {0x2, 0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x4}, {0x3, 0x1}, {0x2, 0x9}, {0x2, 0x4}, {0x1, 0x1}, {0x2, 0x4}, {0x0, 0x1}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x4, 0xa, 0xe23b, 0x996b, 0x3, 0x9, 0xc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x60, 0x5, 0x1b, 0x18, 0x16, 0x4, 0x1b, 0x16, 0x9, 0xc, 0x36, 0xe5, 0x30, 0x30, 0x48, 0x36, 0x6c, 0x24, 0x16, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0xae, 0x27, 0x6, 0xff, 0x7ff, 0x81]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x32, 0x1d9, 0x8001, 0x0, 0x2, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0xa6, 0xd8, 0x9, 0x2, 0x9, 0x9]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x189, 0xd, 0x1, 0x2, 0x4, 0x3, 0xffff]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0xa}, {0x1, 0x9}, {0x2, 0x8}, {}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x2}, {0x6, 0x6}, {0x7, 0xa}, {0x7, 0x8}, {}, {0x1, 0x5}, {0x1, 0x1}, {0x6, 0x3}, {0x7}, {0x1, 0x7}, {0x3, 0x6}, {0x3, 0x2}, {0x1, 0x2}, {0x2, 0x8}, {0x4, 0x7}, {0x7, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x18, 0x8, 0x12, 0x2, 0xc, 0x9, 0x12, 0x48, 0xc, 0x2, 0x25, 0x1b, 0x36, 0x4, 0x3, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c1) (async)
unshare(0x2c020400)
r8 = socket(0x23, 0x5, 0x2)
getsockopt$SO_J1939_PROMISC(r8, 0x6b, 0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6eb09454900000400000000a08f", 0x0, 0x804, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

90.635184ms ago: executing program 5 (id=14727):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400)="fa", 0x1)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000080))
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}, @typed={0x4, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

38.49401ms ago: executing program 0 (id=14728):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="6229bff85ac15fceaae78c5e5b9a43332a3d9d205c0f2c364c426c5c45c7e6e206c096fbf10772eeb2feeda8cefb117dae343feb64d6633666b619a6aac858a88f0d46a36c1fce63f5ed272af2e0295d94e30c99590883601a9c0c192b7d2bebb2a3a1f440c876d5dc704ba8b91981d169acc7fa21e3ebe7d73916538d1c105379b21969160cc1d9356c7041ae56c7fe1bfe15fb1457a46abb706e978eb89b7bf97dbe0565ed60fefa7f51df47b15000d0009b7ac1d39019133b49908a577b665796a407f860630a8e758a1aa523636ee7ba05cc019d1bc838300ecb542c0a8c46982b9f9a0de1", @ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRESOCT=r2, @ANYRES16=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0xb, 0x100000, 0x1}}, 0x40)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r5, 0x0, 0x0, 0x800)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb2504000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000040)=0x6, 0x4)

0s ago: executing program 6 (id=14729):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000250009012cbd7000f9ffffff0200000004005980080003004700000008003f00", @ANYRES32, @ANYBLOB="16965160f5ef5cc05d46969d22e4f8208cafe15bb09f0f1dcd302a87107cd93c5b44609462410ae3f378fed5de0b40b5c8c4a185241f3608910164c269eac12eceb10cab4f725a28493c99aa8f621675f00a1d5237ec9b07ecf7db32cd8cb8df252d201cee9b93dcdc72e3259e454153dae89b425b8ec5d0fd98a99a1f4654e5169561e383573612b90ff54f048516917f16b2"], 0x28}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(0x0)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x33}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11)
shutdown(r5, 0x1)
write$cgroup_int(r4, &(0x7f0000000200)=0x10001, 0x12)
sendfile(r4, r3, 0x0, 0xf03a0005)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$cgroup_type(r7, &(0x7f00000000c0), 0x9)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)={0x164, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4010}, 0x880)
sendfile(r7, r6, 0x0, 0x10000)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='illinois', 0x8)

kernel console output (not intermixed with test programs):

ot yet configured!
[ 1457.621414][T11708] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1458.778464][T24863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1459.087889][T24958] netem: change failed
[ 1459.122705][T24958] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[ 1459.160859][T24960] xt_hashlimit: size too large, truncated to 1048576
[ 1459.176083][T24960] xt_hashlimit: max too large, truncated to 1048576
[ 1459.286538][T24968] netlink: 'syz.4.13031': attribute type 29 has an invalid length.
[ 1459.545325][T24993] block nbd0: Unsupported socket: should be TCP or UNIX.
[ 1460.193085][T25029] __nla_validate_parse: 3 callbacks suppressed
[ 1460.193099][T25029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13050'.
[ 1460.208656][T25029] netlink: 'syz.4.13050': attribute type 7 has an invalid length.
[ 1460.217209][T25029] netlink: 'syz.4.13050': attribute type 8 has an invalid length.
[ 1460.229543][T25029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13050'.
[ 1460.332381][T25039] netlink: 'syz.0.13055': attribute type 12 has an invalid length.
[ 1460.351960][T25036] lo speed is unknown, defaulting to 1000
[ 1460.492938][T25051] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1460.542720][T25051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1460.602517][T25051] hsr0: entered promiscuous mode
[ 1460.610273][T25058] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13057'.
[ 1460.621613][T25051] hsr0: entered allmulticast mode
[ 1460.627387][T25051] hsr_slave_0: entered allmulticast mode
[ 1460.636858][T25051] hsr_slave_1: entered allmulticast mode
[ 1460.695132][T25048] lo speed is unknown, defaulting to 1000
[ 1460.882135][T25069] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.13061'.
[ 1460.909812][   T29] audit: type=1800 audit(1771183273.992:39): pid=25071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13062" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=891 res=0 errno=0
[ 1461.076488][T25036] wlan1 speed is unknown, defaulting to 1000
[ 1461.093212][T25036] wg1 speed is unknown, defaulting to 1000
[ 1461.198052][T25078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13064'.
[ 1461.207616][T25077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13064'.
[ 1461.265391][T25083] block nbd0: Unsupported socket: should be TCP or UNIX.
[ 1461.386131][T25048] wlan1 speed is unknown, defaulting to 1000
[ 1461.410972][T25048] wg1 speed is unknown, defaulting to 1000
[ 1461.451429][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1461.851133][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms
[ 1461.859182][    C1] lec:lec_tx_timeout: lec0
[ 1461.950699][T25094] nbd: nbd2 already in use
[ 1461.961964][T25094] block nbd2: NBD_DISCONNECT
[ 1461.967786][T25094] block nbd2: Send disconnect failed -32
[ 1461.974671][T25094] block nbd2: shutting down sockets
[ 1462.366790][T25115] netlink: 'syz.0.13074': attribute type 6 has an invalid length.
[ 1463.949162][T20022] dvmrp6 (unregistering): left allmulticast mode
[ 1463.968171][T20022] bond0 (unregistering): (slave geneve3): Releasing active interface
[ 1464.015110][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 1464.130401][T20022] bond1 (unregistering): (slave bridge5): Releasing active interface
[ 1464.345800][T20022] bond6 (unregistering): (slave bridge10): Releasing backup interface
[ 1464.354420][T20022] bridge10 (unregistering): left promiscuous mode
[ 1464.386906][T20022] bond1 (unregistering): Released all slaves
[ 1464.400569][T20022] bond2 (unregistering): Released all slaves
[ 1464.415426][T20022] bond3 (unregistering): (slave veth7): Releasing active interface
[ 1464.426195][T20022] bond3 (unregistering): Released all slaves
[ 1464.439856][T20022] bond4 (unregistering): Released all slaves
[ 1464.457990][T20022] bond5 (unregistering): Released all slaves
[ 1464.474750][T20022] bond0 (unregistering): Released all slaves
[ 1464.498856][T20022] bond6 (unregistering): Released all slaves
[ 1464.517460][T20022] bond7 (unregistering): Released all slaves
[ 1464.595943][T25108] lo speed is unknown, defaulting to 1000
[ 1464.732651][T25135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13079'.
[ 1464.751569][T20022] !��9: left promiscuous mode
[ 1464.785591][T25138] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.13080'.
[ 1464.871935][T11534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1464.900141][T25139] netlink: 'syz.0.13079': attribute type 29 has an invalid length.
[ 1464.924371][T25139] netlink: 'syz.0.13079': attribute type 29 has an invalid length.
[ 1464.980989][T20022] tipc: Disabling bearer <udp:syz2>
[ 1464.986546][T20022] tipc: Left network mode
[ 1464.992797][T25139] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13079'.
[ 1465.059434][T25149] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13082'.
[ 1465.076818][T25145] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1465.168497][T20022] IPVS: stopping backup sync thread 27606 ...
[ 1465.186396][T25140] tipc: Disabling bearer <eth:syzkaller0>
[ 1465.534451][T25108] wlan1 speed is unknown, defaulting to 1000
[ 1465.553606][T25160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13084'.
[ 1465.633982][T25108] wg1 speed is unknown, defaulting to 1000
[ 1465.710004][T25168] netlink: 76 bytes leftover after parsing attributes in process `syz.4.13086'.
[ 1465.860514][T25170] netlink: 'syz.0.13087': attribute type 13 has an invalid length.
[ 1465.912732][T25172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13088'.
[ 1465.944618][T25175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13089'.
[ 1465.953863][T25175] netlink: 'syz.6.13089': attribute type 21 has an invalid length.
[ 1466.032249][T25170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13087'.
[ 1466.217747][T25186] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13092'.
[ 1466.393383][T25196] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1466.538606][T25195] syzkaller0: entered promiscuous mode
[ 1466.572276][T25195] syzkaller0: entered allmulticast mode
[ 1466.660654][T20022] batadv0: left promiscuous mode
[ 1466.677661][T20022] hsr_slave_0: left promiscuous mode
[ 1466.698974][T25211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13097'.
[ 1466.868000][T20022] pimreg (unregistering): left allmulticast mode
[ 1467.443635][T25252] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 1469.546223][T25265] vti0: entered promiscuous mode
[ 1469.585002][T25280] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1469.677394][T25289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13113'.
[ 1469.771593][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1469.817336][T25295] netlink: 68 bytes leftover after parsing attributes in process `syz.6.13116'.
[ 1469.936545][T25302] netlink: 'syz.2.13115': attribute type 2 has an invalid length.
[ 1470.166779][T25309] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13117'.
[ 1470.317388][T25319] syz_tun: left promiscuous mode
[ 1470.329361][T25319] vlan0: left promiscuous mode
[ 1470.375683][T25319] geneve3: left promiscuous mode
[ 1470.380769][T25319] geneve3: left allmulticast mode
[ 1470.407377][T25319] macsec1: left promiscuous mode
[ 1470.419932][T25319] macsec1: left allmulticast mode
[ 1470.465992][T25319] ip6erspan0: left allmulticast mode
[ 1470.480767][T25319] bond0: left promiscuous mode
[ 1470.501829][T25319] tipc: Resetting bearer <eth:syzkaller0>
[ 1470.518272][T25319] syzkaller0: left promiscuous mode
[ 1470.528980][T25319] syzkaller0: left allmulticast mode
[ 1470.580498][T20024] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1470.590564][T20024] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1470.642614][T20024] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1470.659083][T20024] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1470.672009][ T7626] tipc: Node number set to 3620769309
[ 1470.695283][T20022] IPVS: stop unused estimator thread 0...
[ 1470.734246][T25338] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1470.796700][T25338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1470.832019][T25343] syzkaller0: entered promiscuous mode
[ 1470.842667][T25343] syzkaller0: entered allmulticast mode
[ 1470.862905][T25338] syzkaller0: entered promiscuous mode
[ 1470.880402][T25338] syzkaller0: entered allmulticast mode
[ 1470.919798][T25343] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1470.987194][T25351] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1470.998806][T25348] netlink: 'syz.2.13129': attribute type 32 has an invalid length.
[ 1471.016915][T25344] tipc: Resetting bearer <eth:syzkaller0>
[ 1471.104699][T25337] tipc: Resetting bearer <eth:syzkaller0>
[ 1471.210699][T25337] tipc: Disabling bearer <eth:syzkaller0>
[ 1471.245952][T25359] team0 (unregistering): Port device team_slave_0 removed
[ 1471.268206][T25359] team0 (unregistering): Port device team_slave_1 removed
[ 1471.335725][T25343] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1471.412800][T25336] wlan1 speed is unknown, defaulting to 1000
[ 1471.443918][T25336] wg1 speed is unknown, defaulting to 1000
[ 1471.500584][T25343] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1471.649445][T25343] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1471.849457][T25369] wlan1 speed is unknown, defaulting to 1000
[ 1471.877930][T25369] wg1 speed is unknown, defaulting to 1000
[ 1471.949893][T20022] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1471.973845][T20022] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1471.989102][ T6146] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1472.043053][T20022] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1472.132506][T25381] wlan1 speed is unknown, defaulting to 1000
[ 1472.141712][T25381] wg1 speed is unknown, defaulting to 1000
[ 1486.411324][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1486.571772][T25383] Bluetooth: hci6: command 0x0406 tx timeout
[ 1488.483505][T25389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13142'.
[ 1488.505583][T25389] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13142'.
[ 1488.722763][T25410] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13145'.
[ 1488.780680][T25415] netlink: 'syz.2.13146': attribute type 15 has an invalid length.
[ 1489.044958][T25434] netlink: 'syz.4.13151': attribute type 10 has an invalid length.
[ 1489.076437][T25434] team0: Port device dummy0 added
[ 1489.537859][   T29] audit: type=1800 audit(1771183302.622:40): pid=25462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13157" name="x000000000000000900000000000000000000011" dev="tmpfs" ino=1915 res=0 errno=0
[ 1489.592656][T25470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13161'.
[ 1489.605431][   T29] audit: type=1804 audit(1771183302.622:41): pid=25462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.13157" name="x000000000000000900000000000000000000011" dev="tmpfs" ino=1915 res=1 errno=0
[ 1489.612101][T25470] netlink: 596 bytes leftover after parsing attributes in process `syz.0.13161'.
[ 1489.640164][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1489.662113][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1489.670905][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[ 1489.782231][T25469] netlink: 3 bytes leftover after parsing attributes in process `syz.4.13160'.
[ 1489.801240][T25469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13160'.
[ 1489.835121][T25469] netlink: 3 bytes leftover after parsing attributes in process `syz.4.13160'.
[ 1489.856756][T25447] wlan1 speed is unknown, defaulting to 1000
[ 1489.888693][T25447] wg1 speed is unknown, defaulting to 1000
[ 1489.904779][T25477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13162'.
[ 1489.917448][T25469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13160'.
[ 1490.224849][T25485] xt_hashlimit: size too large, truncated to 1048576
[ 1490.504611][T25496] netlink: 'syz.4.13169': attribute type 2 has an invalid length.
[ 1490.583122][ T5824] Bluetooth: hci3: command 0x0405 tx timeout
[ 1490.591912][T25496] !: entered promiscuous mode
[ 1491.083826][T25512] syzkaller0: entered promiscuous mode
[ 1491.090012][T25512] syzkaller0: entered allmulticast mode
[ 1491.129302][T25519] bond4: option arp_all_targets: invalid value (18446744073709551612)
[ 1491.145618][T25519] bond4 (unregistering): Released all slaves
[ 1491.694696][ T5824] Bluetooth: hci1: command 0x0406 tx timeout
[ 1493.282155][T25562] netlink: 'syz.6.13186': attribute type 6 has an invalid length.
[ 1493.296909][T25562] netlink: 'syz.6.13186': attribute type 6 has an invalid length.
[ 1493.896681][T25509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1493.908549][T25539] netlink: 'syz.0.13181': attribute type 3 has an invalid length.
[ 1493.949314][T25539] __nla_validate_parse: 3 callbacks suppressed
[ 1493.949333][T25539] netlink: 244 bytes leftover after parsing attributes in process `syz.0.13181'.
[ 1494.080380][T25571] veth1_to_hsr: entered allmulticast mode
[ 1494.196867][T25573] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13189'.
[ 1494.683189][T25615] netlink: 'syz.2.13200': attribute type 29 has an invalid length.
[ 1494.706173][T25614] netlink: 'syz.6.13201': attribute type 1 has an invalid length.
[ 1494.762245][T25621] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13201'.
[ 1494.811076][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5140 ms
[ 1494.819223][    C1] lec:lec_tx_timeout: lec0
[ 1494.851770][T25617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13202'.
[ 1494.869200][T25614] netlink: 76 bytes leftover after parsing attributes in process `syz.6.13201'.
[ 1494.893167][T25621] bond2: (slave bridge3): making interface the new active one
[ 1494.902295][T25621] bond2: (slave bridge3): Enslaving as an active interface with an up link
[ 1494.934103][T25614] bond2: (slave bridge4): Enslaving as an active interface with a down link
[ 1494.966365][T25614] macvlan0: entered promiscuous mode
[ 1494.979987][T25614] macvlan0: entered allmulticast mode
[ 1495.015121][T25614] bond2: entered promiscuous mode
[ 1495.023797][T25614] bridge3: entered promiscuous mode
[ 1495.158031][T25614] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 1495.214682][T25614] bond2: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1495.259465][T25614] bond2: left promiscuous mode
[ 1495.272357][T25614] bridge3: left promiscuous mode
[ 1495.323308][T25643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13204'.
[ 1495.339038][T25643] IPv6: Can't replace route, no match found
[ 1495.360484][T25642] lo: Caught tx_queue_len zero misconfig
[ 1495.712633][T25665] netlink: 56 bytes leftover after parsing attributes in process `syz.6.13211'.
[ 1495.729525][T25666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13209'.
[ 1495.739025][   T29] audit: type=1107 audit(1771183308.812:42): pid=25658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1495.752722][T25666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13209'.
[ 1495.874033][T25660] ip6_vti0: left promiscuous mode
[ 1495.916255][T25660] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1495.927894][T25660] 8021q: adding VLAN 0 to HW filter on device team0
[ 1495.947580][T25660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1496.347629][T25697] xt_hashlimit: size too large, truncated to 1048576
[ 1498.292058][T25725] Cannot find add_set index 0 as target
[ 1498.612242][T25740] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13229'.
[ 1498.782313][T25750] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1499.103196][T25766] mac80211_hwsim hwsim125 �����;: renamed from wlan0
[ 1499.572298][T25789] netlink: 'syz.4.13243': attribute type 1 has an invalid length.
[ 1499.591979][T25786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1499.597695][T25789] __nla_validate_parse: 1 callbacks suppressed
[ 1499.597762][T25789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13243'.
[ 1499.605692][T25786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1499.653194][T25786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1499.663184][T25786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1499.692252][T25786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1499.720395][T25786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1499.941285][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1499.986675][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 1500.086614][T25813] syzkaller0: entered promiscuous mode
[ 1500.096932][T25813] syzkaller0: entered allmulticast mode
[ 1500.355446][T25783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1500.438476][T25790] wlan1 speed is unknown, defaulting to 1000
[ 1500.463941][T25790] wg1 speed is unknown, defaulting to 1000
[ 1500.718113][T25845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13257'.
[ 1500.971972][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 1501.003413][T25856] tipc: Invalid UDP bearer configuration
[ 1501.003466][T25856] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 1501.796466][T11708] syz1: Port: 1 Link DOWN
[ 1501.918657][T25907] x_tables: duplicate underflow at hook 3
[ 1501.932696][ T5824] Bluetooth: hci2: command 0x0406 tx timeout
[ 1501.996582][T25911] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13267'.
[ 1502.010620][T25913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13268'.
[ 1502.022330][T25907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13266'.
[ 1502.038367][T25908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1502.153188][T25913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13268'.
[ 1502.166605][T25919] block nbd6: NBD_DISCONNECT
[ 1502.173585][T25919] block nbd6: Send disconnect failed -104
[ 1502.179350][T25919] block nbd6: shutting down sockets
[ 1502.557082][T25927] netlink: zone id is out of range
[ 1502.565158][T25927] netlink: zone id is out of range
[ 1502.619203][T25927] netlink: zone id is out of range
[ 1502.664584][T25927] netlink: zone id is out of range
[ 1502.703316][T25943] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[ 1502.718942][T25927] netlink: zone id is out of range
[ 1502.764330][T25927] netlink: zone id is out of range
[ 1502.819265][T25927] netlink: zone id is out of range
[ 1502.848683][T25927] netlink: zone id is out of range
[ 1503.287846][T25971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13276'.
[ 1503.530676][T25978] netlink: 'syz.2.13277': attribute type 6 has an invalid length.
[ 1503.553919][T25978] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1503.573195][T25978] IPVS: length: 122 != 8
[ 1503.594221][T25978] netlink: 'syz.2.13277': attribute type 6 has an invalid length.
[ 1503.872670][T25984] syzkaller0: entered promiscuous mode
[ 1503.878921][T25984] syzkaller0: entered allmulticast mode
[ 1504.143070][T25992] syzkaller0: entered promiscuous mode
[ 1504.148934][T25992] syzkaller0: entered allmulticast mode
[ 1505.363992][T25932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1505.510882][T26002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13282'.
[ 1506.237032][T26027] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13287'.
[ 1507.134338][T26045] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.13292'.
[ 1507.146086][T26039] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13291'.
[ 1507.168873][T26047] block nbd0: Unsupported socket: should be TCP or UNIX.
[ 1507.287301][T26051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13295'.
[ 1507.478731][T26063] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13296'.
[ 1507.503790][T26063] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.13296'.
[ 1507.520897][T26065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1507.584899][T26070] syzkaller1: entered promiscuous mode
[ 1507.595827][T26065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1507.613331][T26064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1507.618501][T26070] syzkaller1: entered allmulticast mode
[ 1507.650760][T26072] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma?
[ 1507.758973][T26077] pimreg: entered allmulticast mode
[ 1507.768008][T26077] dvmrp0: left allmulticast mode
[ 1507.774556][T26077] pimreg: left allmulticast mode
[ 1507.889934][T26084] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13302'.
[ 1507.917024][T26084] netem: unknown loss type 13
[ 1507.924786][T26084] netem: change failed
[ 1507.970090][T26088] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING
[ 1508.145928][T26107] netlink: 'syz.0.13306': attribute type 5 has an invalid length.
[ 1508.173051][T26107] ip6erspan0: entered promiscuous mode
[ 1508.197755][T26106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13308'.
[ 1508.207032][T26106] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13308'.
[ 1508.428113][T26119] team0 (unregistering): Port device team_slave_0 removed
[ 1508.468622][T26119] team0 (unregistering): Port device team_slave_1 removed
[ 1508.509309][T26119] team0 (unregistering): Port device dummy0 removed
[ 1509.011302][T26157] netlink: 'syz.6.13320': attribute type 8 has an invalid length.
[ 1509.262328][T26175] netem: change failed
[ 1509.289552][T26175] syzkaller0: entered promiscuous mode
[ 1509.319518][T26175] syzkaller0: entered allmulticast mode
[ 1509.330968][   T29] audit: type=1800 audit(1771183322.412:43): pid=26183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.13325" name="6" dev="tmpfs" ino=1983 res=0 errno=0
[ 1509.410540][T26184] bond3: entered promiscuous mode
[ 1509.429745][T26177] net_ratelimit: 943 callbacks suppressed
[ 1509.429767][T26177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1509.449696][T26190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1509.477993][T26177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1509.535686][T26175] vcan1: entered promiscuous mode
[ 1509.540748][T26175] vcan1: entered allmulticast mode
[ 1509.559967][T26177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1509.581179][T26177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1509.623675][T26177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1509.642405][T26177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1509.654132][T26177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1509.910262][T26185] wlan1 speed is unknown, defaulting to 1000
[ 1509.918363][T26185] wg1 speed is unknown, defaulting to 1000
[ 1510.018293][T26209] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 1510.083329][T26213] netlink: zone id is out of range
[ 1510.088578][T26213] netlink: zone id is out of range
[ 1510.095537][T26213] netlink: zone id is out of range
[ 1510.297103][T26212] syzkaller0: entered promiscuous mode
[ 1510.306052][T26212] syzkaller0: entered allmulticast mode
[ 1510.313020][T26226] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20003
[ 1510.382291][T26224] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1510.390015][T26224] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1510.450762][T26224] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1510.460502][T26224] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1511.247886][T26260] __nla_validate_parse: 6 callbacks suppressed
[ 1511.247905][T26260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13344'.
[ 1512.613087][T26258] tc_dump_action: action bad kind
[ 1512.713425][T26265] xfrm1: entered allmulticast mode
[ 1512.923110][T26270] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1512.943740][T26287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13351'.
[ 1513.004544][T26296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13350'.
[ 1513.093364][T26301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13353'.
[ 1513.284577][T26314] netlink: 'syz.4.13358': attribute type 2 has an invalid length.
[ 1513.315763][T26308] syzkaller0: entered promiscuous mode
[ 1513.326432][T26308] syzkaller0: entered allmulticast mode
[ 1513.362910][T26314] !��9: entered promiscuous mode
[ 1513.399325][T26308] syzkaller0: left promiscuous mode
[ 1513.405228][T26308] syzkaller0: left allmulticast mode
[ 1513.524603][T26314] syzkaller0: entered promiscuous mode
[ 1513.538778][T26314] syzkaller0: entered allmulticast mode
[ 1513.562725][T26321] netlink: 'syz.4.13358': attribute type 2 has an invalid length.
[ 1513.578454][T26331] ipvlan3: entered allmulticast mode
[ 1513.599050][T26331] veth0_vlan: entered allmulticast mode
[ 1513.616826][T26321] !��9: left promiscuous mode
[ 1513.636412][T26322] netlink: 'syz.0.13361': attribute type 1 has an invalid length.
[ 1513.645597][T26322] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13361'.
[ 1513.656491][T26333] netlink: 'syz.2.13362': attribute type 6 has an invalid length.
[ 1513.836030][T26336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13363'.
[ 1513.845205][T26336] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13363'.
[ 1515.524139][T26344] IPVS: Unknown mcast interface: bridge_slave_0
[ 1515.558573][T26350] dummy0: entered promiscuous mode
[ 1515.592085][T26350] vlan2: entered promiscuous mode
[ 1515.672567][T26353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13368'.
[ 1515.803652][T26366] netlink: 'syz.6.13371': attribute type 13 has an invalid length.
[ 1515.830548][T26366] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13371'.
[ 1515.850597][T26372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13373'.
[ 1515.866504][T26372] netlink: 'syz.0.13373': attribute type 5 has an invalid length.
[ 1515.877502][T26369] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[ 1515.882756][T26366] syzkaller0: entered promiscuous mode
[ 1515.893734][T26366] syzkaller0: entered allmulticast mode
[ 1515.903211][T26373] lo: Caught tx_queue_len zero misconfig
[ 1516.018180][T26366] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1516.268341][T26387] __nla_validate_parse: 3 callbacks suppressed
[ 1516.268359][T26387] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13377'.
[ 1516.567301][T26355] tipc: Resetting bearer <eth:syzkaller0>
[ 1516.623627][T26355] tipc: Disabling bearer <eth:syzkaller0>
[ 1516.849772][T26402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13379'.
[ 1516.869611][T26402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13379'.
[ 1517.425991][T26426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13383'.
[ 1517.464370][T26427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13383'.
[ 1517.472358][T26426] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13383'.
[ 1517.532330][T26426] netlink: 'syz.5.13383': attribute type 18 has an invalid length.
[ 1517.591545][T26427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13383'.
[ 1517.600902][T26427] netlink: 'syz.5.13383': attribute type 18 has an invalid length.
[ 1517.662929][T26438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13388'.
[ 1517.831562][T26441] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13386'.
[ 1518.036609][T26460] netlink: 'syz.2.13392': attribute type 11 has an invalid length.
[ 1518.063058][T26460] netlink: 'syz.2.13392': attribute type 23 has an invalid length.
[ 1518.086385][T26460] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13392'.
[ 1518.172484][T26460] ������: renamed from wg2 (while UP)
[ 1518.651767][T26500] wg1: entered promiscuous mode
[ 1518.656711][T26500] wg1: entered allmulticast mode
[ 1518.879874][T26515] macvtap1: entered promiscuous mode
[ 1518.909843][T26515] macvtap1: entered allmulticast mode
[ 1518.930481][T26515] dummy0: entered allmulticast mode
[ 1518.958422][T26515] dummy0: entered promiscuous mode
[ 1519.013064][T26515] team0: Device macvtap1 failed to register rx_handler
[ 1519.063463][T26515] dummy0: left allmulticast mode
[ 1519.068632][T26515] dummy0: left promiscuous mode
[ 1519.221828][T26521] syzkaller0: entered promiscuous mode
[ 1519.233038][T26521] syzkaller0: entered allmulticast mode
[ 1519.240438][T26480] wlan1 speed is unknown, defaulting to 1000
[ 1519.249822][T26480] wg1 speed is unknown, defaulting to 1000
[ 1519.568217][T26542] bridge0: entered allmulticast mode
[ 1519.590567][T26542] net_ratelimit: 137 callbacks suppressed
[ 1519.590665][T26542] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[ 1519.623513][T26553] netlink: 'syz.4.13412': attribute type 1 has an invalid length.
[ 1519.970879][T26571] netlink: 'syz.4.13416': attribute type 30 has an invalid length.
[ 1520.138357][T26571] bond5: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[ 1520.156165][T26571] bond5 (unregistering): Released all slaves
[ 1520.243334][T26578] macsec2: entered allmulticast mode
[ 1520.248944][T26578] macsec0: entered allmulticast mode
[ 1520.312222][T26581] tunl0: Caught tx_queue_len zero misconfig
[ 1520.329786][T26581] netlink: 'syz.0.13418': attribute type 1 has an invalid length.
[ 1520.426935][T26591] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993
[ 1520.606688][T26600] openvswitch: netlink: IP tunnel dst address not specified
[ 1520.941770][T26625] sctp: [Deprecated]: syz.5.13430 (pid 26625) Use of int in max_burst socket option deprecated.
[ 1520.941770][T26625] Use struct sctp_assoc_value instead
[ 1521.413885][T26651] block nbd0: Unsupported socket: should be TCP or UNIX.
[ 1521.468039][T26656] __nla_validate_parse: 9 callbacks suppressed
[ 1521.468060][T26656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13438'.
[ 1521.516099][ T3042] lec:lec_start_xmit: lec0:No lecd attached
[ 1521.593495][T26661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13439'.
[ 1521.671895][T26661] netlink: 'syz.4.13439': attribute type 5 has an invalid length.
[ 1521.680378][T26661] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13439'.
[ 1522.629250][T26720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13448'.
[ 1522.702086][T26720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13448'.
[ 1523.017244][T26749] vlan2: entered promiscuous mode
[ 1523.053718][T26751] block nbd0: Unsupported socket: should be TCP or UNIX.
[ 1523.063533][T26749] geneve1: entered promiscuous mode
[ 1523.068957][T26749] vlan2: entered allmulticast mode
[ 1523.111837][T26749] geneve1: entered allmulticast mode
[ 1523.371993][T26768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13461'.
[ 1523.422331][T26770] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13460'.
[ 1523.450668][T26768] netlink: 'syz.2.13461': attribute type 1 has an invalid length.
[ 1523.994133][T26724] wlan1 speed is unknown, defaulting to 1000
[ 1524.020222][T26798] netlink: 'syz.0.13465': attribute type 9 has an invalid length.
[ 1524.028885][T26724] wg1 speed is unknown, defaulting to 1000
[ 1524.036305][T26794] netlink: 'syz.0.13465': attribute type 9 has an invalid length.
[ 1524.163953][T26805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13467'.
[ 1524.855732][T26820] IPv6: sit1: Disabled Multicast RS
[ 1524.896444][T26762] wlan1 speed is unknown, defaulting to 1000
[ 1524.923652][T26762] wg1 speed is unknown, defaulting to 1000
[ 1525.067005][T26834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13473'.
[ 1525.116479][T26841] block nbd0: Unsupported socket: should be TCP or UNIX.
[ 1525.382299][T26846] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13477'.
[ 1525.848963][T26833] wlan1 speed is unknown, defaulting to 1000
[ 1525.857010][T26833] wg1 speed is unknown, defaulting to 1000
[ 1526.203381][T26871] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1526.228903][T26871] syzkaller0: entered promiscuous mode
[ 1526.240456][T26871] syzkaller0: entered allmulticast mode
[ 1526.502911][T26876] tipc: Resetting bearer <eth:syzkaller0>
[ 1526.538160][T26870] tipc: Resetting bearer <eth:syzkaller0>
[ 1526.584751][T26870] tipc: Disabling bearer <eth:syzkaller0>
[ 1526.595247][T26879] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13486'.
[ 1526.811541][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5290 ms
[ 1526.819635][    C1] lec:lec_tx_timeout: lec0
[ 1526.833775][T26887] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1526.884368][T26884] netlink: 'syz.2.13487': attribute type 21 has an invalid length.
[ 1526.935123][T26889] netlink: 'syz.2.13487': attribute type 21 has an invalid length.
[ 1526.949038][T26889] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13487'.
[ 1527.030089][T26898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13491'.
[ 1527.053032][T26898] openvswitch: netlink: Message has -1 unknown bytes.
[ 1527.175711][T26903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13492'.
[ 1527.357667][T26912] netlink: 'syz.4.13495': attribute type 10 has an invalid length.
[ 1527.386041][T26912] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[ 1527.397920][T26912] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1527.410880][T26912] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[ 1527.863571][T26945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13505'.
[ 1527.944491][T26947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13506'.
[ 1528.129897][T26941] wlan1 speed is unknown, defaulting to 1000
[ 1528.137993][T26941] wg1 speed is unknown, defaulting to 1000
[ 1528.148157][T26957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13509'.
[ 1528.813969][T26983] sch_tbf: peakrate 4294967283 is lower than or equals to rate 6829859379779001161 !
[ 1528.843015][T26983] pimreg: tun_chr_ioctl cmd 1074025677
[ 1528.848844][T26983] pimreg: linktype set to 6
[ 1528.986536][T26991] x_tables: duplicate underflow at hook 3
[ 1529.095206][T27003] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13521'.
[ 1529.131965][T26991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13518'.
[ 1529.152455][T26991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13518'.
[ 1529.165537][T26964] wlan1 speed is unknown, defaulting to 1000
[ 1529.179272][T26964] wg1 speed is unknown, defaulting to 1000
[ 1529.509680][T11534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1529.579727][T27018] veth0_to_bridge: entered promiscuous mode
[ 1529.725678][T27018] veth0_to_bridge: left promiscuous mode
[ 1529.736021][T27022] syzkaller0: entered promiscuous mode
[ 1529.742046][T27022] syzkaller0: entered allmulticast mode
[ 1529.774002][T27025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1529.794147][T27034] sctp: [Deprecated]: syz.4.13530 (pid 27034) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1529.794147][T27034] Use struct sctp_sack_info instead
[ 1529.820613][T27035] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1529.842881][T27034] sctp: [Deprecated]: syz.4.13530 (pid 27034) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1529.842881][T27034] Use struct sctp_sack_info instead
[ 1530.065562][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1530.074067][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1530.128528][T27022] tipc: Resetting bearer <eth:syzkaller0>
[ 1530.148377][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1530.156743][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1530.187204][T27019] tipc: Resetting bearer <eth:syzkaller0>
[ 1530.272594][T27019] tipc: Disabling bearer <eth:syzkaller0>
[ 1530.445046][T27069] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1530.474246][T27063] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1530.596509][T27037] wlan1 speed is unknown, defaulting to 1000
[ 1530.605244][T27037] wg1 speed is unknown, defaulting to 1000
[ 1531.107540][T27101] netlink: 'syz.4.13541': attribute type 1 has an invalid length.
[ 1531.187163][T27101] bond5: entered promiscuous mode
[ 1531.194295][T27101] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1531.254219][T27091] gretap1: entered promiscuous mode
[ 1531.597905][T27119] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1531.640849][T27121] __nla_validate_parse: 9 callbacks suppressed
[ 1531.640868][T27121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13548'.
[ 1531.666671][T27121] bridge_slave_1: left allmulticast mode
[ 1531.674967][T27121] bridge_slave_1: left promiscuous mode
[ 1531.686047][T27121] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1531.710552][T27121] bridge_slave_0: left allmulticast mode
[ 1531.726861][T27121] bridge_slave_0: left promiscuous mode
[ 1531.733638][T27121] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1531.764338][T27125] netlink: 348 bytes leftover after parsing attributes in process `syz.2.13548'.
[ 1531.813049][T27125] netlink: 348 bytes leftover after parsing attributes in process `syz.2.13548'.
[ 1532.108561][T27142] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13552'.
[ 1532.152133][T27142] bond3: (slave bridge7): Enslaving as an active interface with an up link
[ 1546.924639][T27150] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048)
[ 1546.926033][T27154] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13554'.
[ 1546.943786][T27155] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048)
[ 1547.303249][T27177] netlink: 'syz.4.13558': attribute type 1 has an invalid length.
[ 1547.444476][T27186] syzkaller0: left promiscuous mode
[ 1547.449758][T27186] syzkaller0: left allmulticast mode
[ 1548.242232][T27202] wlan1 speed is unknown, defaulting to 1000
[ 1548.250242][T27202] wg1 speed is unknown, defaulting to 1000
[ 1548.971123][ T5824] Bluetooth: hci3: command 0x0405 tx timeout
[ 1549.892442][T27173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1550.054439][T27213] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1550.109986][T27215] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13567'.
[ 1550.215952][T27221] syzkaller0: entered promiscuous mode
[ 1550.221904][T27221] syzkaller0: entered allmulticast mode
[ 1550.229574][T27221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13569'.
[ 1550.240358][T27225] netlink: 80 bytes leftover after parsing attributes in process `syz.5.13568'.
[ 1550.416830][T27235] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13571'.
[ 1550.467783][T27235] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13571'.
[ 1550.484028][T27235] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13571'.
[ 1550.494689][T27235] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13571'.
[ 1550.505191][T27235] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13571'.
[ 1550.515902][T27235] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13571'.
[ 1550.686247][ T9821] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1550.695750][ T9821] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0
[ 1550.704809][ T9821] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1550.713829][ T9821] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0
[ 1550.723971][ T9821] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1550.733515][ T9821] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0
[ 1550.742603][ T9821] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1550.752574][ T9821] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0
[ 1551.061959][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1551.074494][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1551.089239][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[ 1551.318112][T27261] netlink: 'syz.0.13579': attribute type 27 has an invalid length.
[ 1551.526774][T27273] gretap0: entered promiscuous mode
[ 1551.614835][T27280] syzkaller0: entered promiscuous mode
[ 1551.629500][T27280] syzkaller0: entered allmulticast mode
[ 1552.050598][T27305] __nla_validate_parse: 197 callbacks suppressed
[ 1552.050619][T27305] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13590'.
[ 1552.066995][T27310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13592'.
[ 1552.077737][T27305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13590'.
[ 1552.275235][T27325] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1552.283710][T27324] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1552.295831][T27319] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1552.312471][T27319] syzkaller1: linktype set to 768
[ 1552.318745][T27324] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[ 1552.353160][T27322] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[ 1552.387131][T27328] syzkaller0: entered promiscuous mode
[ 1552.392770][T27328] syzkaller0: entered allmulticast mode
[ 1552.409372][T27322] gretap2: entered promiscuous mode
[ 1552.558164][T27341] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004
[ 1552.639683][T27348] netlink: 76 bytes leftover after parsing attributes in process `syz.6.13602'.
[ 1552.786347][T27356] netlink: 71 bytes leftover after parsing attributes in process `syz.2.13605'.
[ 1553.046466][T27370] sctp: [Deprecated]: syz.2.13610 (pid 27370) Use of int in max_burst socket option deprecated.
[ 1553.046466][T27370] Use struct sctp_assoc_value instead
[ 1553.158109][T27374] netlink: 'syz.6.13611': attribute type 6 has an invalid length.
[ 1553.179434][T27347] wlan1 speed is unknown, defaulting to 1000
[ 1553.206782][T27347] wg1 speed is unknown, defaulting to 1000
[ 1553.526069][T27390] veth9: entered promiscuous mode
[ 1553.535508][T27394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13620'.
[ 1553.536362][T27396] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13619'.
[ 1553.556042][T27396] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13619'.
[ 1553.577846][T27394] macvlan2: entered allmulticast mode
[ 1553.583680][T27394] hsr0: entered allmulticast mode
[ 1553.588826][T27394] hsr_slave_0: entered allmulticast mode
[ 1553.595152][T27394] hsr_slave_1: entered allmulticast mode
[ 1553.661759][T27400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13618'.
[ 1554.110809][T27422] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13624'.
[ 1554.758080][T27458] netlink: 'syz.6.13631': attribute type 1 has an invalid length.
[ 1555.082957][T27414] wlan1 speed is unknown, defaulting to 1000
[ 1555.128187][T27414] wg1 speed is unknown, defaulting to 1000
[ 1555.651106][T27490] netlink: 'syz.6.13639': attribute type 61 has an invalid length.
[ 1555.659258][T27490] netlink: 'syz.6.13639': attribute type 62 has an invalid length.
[ 1555.675364][ T5824] Bluetooth: hci3: link tx timeout
[ 1555.684188][ T5824] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1555.696843][ T5824] Bluetooth: hci3: link tx timeout
[ 1555.702198][ T5824] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1555.749139][T27501] syzkaller0: entered promiscuous mode
[ 1555.758713][T27501] syzkaller0: entered allmulticast mode
[ 1555.943804][T27513] syzkaller1: entered promiscuous mode
[ 1555.963697][T27513] syzkaller1: entered allmulticast mode
[ 1556.088811][ T5824] Bluetooth: hci3: link tx timeout
[ 1556.094638][ T5824] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1556.102965][ T5824] Bluetooth: hci3: link tx timeout
[ 1556.108179][ T5824] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1556.123085][ T5824] Bluetooth: hci3: link tx timeout
[ 1556.128293][ T5824] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1556.136919][ T5824] Bluetooth: hci3: link tx timeout
[ 1556.142569][ T5824] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1556.660161][ T5824] Bluetooth: hci3: link tx timeout
[ 1556.665509][ T5824] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1556.673566][ T5824] Bluetooth: hci3: link tx timeout
[ 1556.678819][ T5824] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1556.732069][ T5824] Bluetooth: hci3: link tx timeout
[ 1556.737286][ T5824] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1556.745045][ T5824] Bluetooth: hci3: link tx timeout
[ 1556.750190][ T5824] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1556.811140][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5720 ms
[ 1556.819198][    C1] lec:lec_tx_timeout: lec0
[ 1557.087309][T27577] netlink: 'syz.6.13660': attribute type 2 has an invalid length.
[ 1557.115732][T27578] __nla_validate_parse: 14 callbacks suppressed
[ 1557.115750][T27578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13661'.
[ 1557.144171][T27581] netlink: 'syz.6.13660': attribute type 2 has an invalid length.
[ 1557.172981][T27582] netlink: 'syz.6.13660': attribute type 2 has an invalid length.
[ 1557.193646][T27577] !��9: entered promiscuous mode
[ 1557.217089][T27582] !��9: left promiscuous mode
[ 1557.405280][T27578] macvtap1: entered promiscuous mode
[ 1557.437189][T27578] veth1_to_hsr: entered promiscuous mode
[ 1557.461817][T27578] macvtap1: entered allmulticast mode
[ 1557.521837][T27578] veth1_to_hsr: entered allmulticast mode
[ 1557.756487][T27611] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13666'.
[ 1557.780079][ T5824] Bluetooth: hci3: command 0x0405 tx timeout
[ 1557.841408][ T7626] IPVS: starting estimator thread 0...
[ 1557.945325][T27626] IPVS: sh: SCTP 172.20.20.187:0 - no destination available
[ 1557.961472][T27622] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1558.021274][T27620] netlink: 'syz.2.13668': attribute type 33 has an invalid length.
[ 1558.272578][T27642] x_tables: ip_tables: osf match: only valid for protocol 6
[ 1558.344347][T27648] netlink: 56 bytes leftover after parsing attributes in process `syz.5.13671'.
[ 1558.601849][T27663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1558.609172][T27663] IPv6: NLM_F_CREATE should be set when creating new route
[ 1558.616505][T27663] IPv6: NLM_F_CREATE should be set when creating new route
[ 1558.852683][T27667] sit0: Caught tx_queue_len zero misconfig
[ 1558.885495][T27605] wlan1 speed is unknown, defaulting to 1000
[ 1558.895449][T27605] wg1 speed is unknown, defaulting to 1000
[ 1559.130285][T27684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13674'.
[ 1559.220288][T27691] netlink: 'syz.0.13679': attribute type 4 has an invalid length.
[ 1559.579079][T27710] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13685'.
[ 1559.856792][ T5824] Bluetooth: hci3: command 0x0405 tx timeout
[ 1560.494912][T27708] wlan1 speed is unknown, defaulting to 1000
[ 1560.503441][T27708] wg1 speed is unknown, defaulting to 1000
[ 1561.644041][T27785] netlink: 156 bytes leftover after parsing attributes in process `syz.6.13698'.
[ 1561.788676][T27794] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 1561.826932][T27794] batman_adv: batadv0: Adding interface: gretap1
[ 1561.866298][T27794] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1561.939203][T27794] batman_adv: batadv0: Interface activated: gretap1
[ 1562.113210][T27807] netlink: 'syz.5.13708': attribute type 4 has an invalid length.
[ 1562.182589][T27807] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.13708'.
[ 1562.348496][T27824] erspan1: entered promiscuous mode
[ 1562.371891][T27824] erspan1: entered allmulticast mode
[ 1562.377699][T27828] batadv_slave_0: Caught tx_queue_len zero misconfig
[ 1562.863680][T27850] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1563.318233][T27850] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1563.797417][T27850] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1563.923015][T27892] delete_channel: no stack
[ 1563.932819][T27850] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1563.954343][T27895] netlink: 'syz.5.13722': attribute type 10 has an invalid length.
[ 1563.963427][T27895] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13722'.
[ 1563.981613][T27895] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1564.128313][T27900] netlink: 176 bytes leftover after parsing attributes in process `syz.0.13725'.
[ 1564.326646][T27907] netlink: 'syz.0.13728': attribute type 2 has an invalid length.
[ 1564.456010][T27918] openvswitch: netlink: IP tunnel dst address not specified
[ 1564.465683][T27918] openvswitch: netlink: IP tunnel dst address not specified
[ 1564.652039][T25383] Bluetooth: hci3: command 0x0405 tx timeout
[ 1565.256939][T27967] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13746'.
[ 1565.465166][T27972] dvmrp6: entered allmulticast mode
[ 1565.653205][T27983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13752'.
[ 1565.859026][T27991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13755'.
[ 1565.915711][T27997] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13757'.
[ 1566.245084][T28026] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13765'.
[ 1566.408993][T28042] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13769'.
[ 1566.855815][T28044] wlan1 speed is unknown, defaulting to 1000
[ 1566.864584][T28044] wg1 speed is unknown, defaulting to 1000
[ 1567.194574][T28076] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0
[ 1567.334218][T28082] : renamed from veth0_to_bond
[ 1567.359359][T28072] wlan1 speed is unknown, defaulting to 1000
[ 1567.367643][T28072] wg1 speed is unknown, defaulting to 1000
[ 1567.587742][T28088] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13782'.
[ 1567.599600][T28088] gretap0: left promiscuous mode
[ 1582.740132][T28095] netlink: 'syz.2.13785': attribute type 1 has an invalid length.
[ 1582.776516][T28095] bond1: entered promiscuous mode
[ 1582.791471][T28095] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1582.809650][T28099] bond1: (slave bridge0): making interface the new active one
[ 1582.819899][T28099] bridge0: entered promiscuous mode
[ 1582.828996][T28099] bond1: (slave bridge0): Enslaving as an active interface with an up link
[ 1582.850121][T28096] bond1: (slave bridge3): Enslaving as a backup interface with an up link
[ 1582.859058][T28103] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[ 1582.876008][T28102] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[ 1583.387491][T28126] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13791'.
[ 1583.727435][T28138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13794'.
[ 1583.755559][T28138] nbd: couldn't find a device at index 65546
[ 1583.764504][T28149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13795'.
[ 1583.787123][T28148] netlink: 104 bytes leftover after parsing attributes in process `syz.5.13796'.
[ 1583.816170][T28153] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.13797'.
[ 1583.929168][T28159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13799'.
[ 1584.003650][T28159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13799'.
[ 1584.172289][T28172] netlink: 'syz.5.13804': attribute type 11 has an invalid length.
[ 1584.189137][T28172] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13804'.
[ 1584.385067][T28178] syzkaller0: entered promiscuous mode
[ 1584.390856][T28178] syzkaller0: entered allmulticast mode
[ 1584.509544][T28190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13811'.
[ 1584.588400][T28162] wlan1 speed is unknown, defaulting to 1000
[ 1584.599353][T28162] wg1 speed is unknown, defaulting to 1000
[ 1584.811635][ T5824] Bluetooth: hci3: command 0x0405 tx timeout
[ 1584.841653][T28198] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13813'.
[ 1585.098531][T28198] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1585.107008][T28182] wlan1 speed is unknown, defaulting to 1000
[ 1585.223558][T28199] bond4 (unregistering): Released all slaves
[ 1585.335356][T28182] wg1 speed is unknown, defaulting to 1000
[ 1585.350754][T28211] netlink: 'syz.0.13816': attribute type 1 has an invalid length.
[ 1585.359431][T28210] netlink: 'syz.0.13816': attribute type 1 has an invalid length.
[ 1585.769507][T28216] syzkaller0: entered promiscuous mode
[ 1585.776226][T28216] syzkaller0: entered allmulticast mode
[ 1585.917814][T28236] netlink: 'syz.5.13821': attribute type 12 has an invalid length.
[ 1585.942648][T28235] nbd: nbd5 already in use
[ 1586.130743][T28246] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1586.153274][ T3042] lec:lec_start_xmit: lec0:No lecd attached
[ 1586.168052][T28245] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1586.192949][T28245] netlink: 'syz.2.13822': attribute type 29 has an invalid length.
[ 1586.375887][T28253] netlink: 'syz.0.13825': attribute type 1 has an invalid length.
[ 1586.453115][T28253] bond4: entered promiscuous mode
[ 1586.458697][T28253] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1586.480337][T28259] FAULT_INJECTION: forcing a failure.
[ 1586.480337][T28259] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1586.520192][T28253] bond4: (slave bridge4): making interface the new active one
[ 1586.534368][T28253] bridge4: entered promiscuous mode
[ 1586.540204][T28253] bond4: (slave bridge4): Enslaving as an active interface with an up link
[ 1586.584413][T28259] CPU: 1 UID: 0 PID: 28259 Comm: syz.5.13829 Not tainted syzkaller #0 PREEMPT(full) 
[ 1586.584447][T28259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1586.584462][T28259] Call Trace:
[ 1586.584471][T28259]  <TASK>
[ 1586.584481][T28259]  dump_stack_lvl+0xe8/0x150
[ 1586.584516][T28259]  should_fail_ex+0x412/0x560
[ 1586.584552][T28259]  _copy_to_user+0x31/0xb0
[ 1586.584578][T28259]  simple_read_from_buffer+0xe1/0x170
[ 1586.584617][T28259]  proc_fail_nth_read+0x1bb/0x230
[ 1586.584650][T28259]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1586.584682][T28259]  ? rw_verify_area+0x2a6/0x4d0
[ 1586.584708][T28259]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1586.584737][T28259]  vfs_read+0x20c/0xa70
[ 1586.584772][T28259]  ? __pfx_vfs_read+0x10/0x10
[ 1586.584800][T28259]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1586.584827][T28259]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1586.584855][T28259]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1586.584881][T28259]  ? free_one_page+0x8e/0x2a0
[ 1586.584918][T28259]  ksys_read+0x150/0x270
[ 1586.584956][T28259]  ? __pfx_ksys_read+0x10/0x10
[ 1586.584993][T28259]  do_syscall_64+0x14d/0xf80
[ 1586.585021][T28259]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1586.585041][T28259]  ? trace_irq_disable+0x37/0x100
[ 1586.585066][T28259]  ? clear_bhb_loop+0x40/0x90
[ 1586.585092][T28259]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1586.585113][T28259] RIP: 0033:0x7ff79ef5c84e
[ 1586.585133][T28259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1586.585152][T28259] RSP: 002b:00007ff79fda8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1586.585174][T28259] RAX: ffffffffffffffda RBX: 00007ff79fda96c0 RCX: 00007ff79ef5c84e
[ 1586.585190][T28259] RDX: 000000000000000f RSI: 00007ff79fda90a0 RDI: 0000000000000004
[ 1586.585211][T28259] RBP: 00007ff79fda9090 R08: 0000000000000000 R09: 0000000000000000
[ 1586.585225][T28259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1586.585238][T28259] R13: 00007ff79f216038 R14: 00007ff79f215fa0 R15: 00007ffd42018238
[ 1586.585274][T28259]  </TASK>
[ 1587.507368][T28310] bond5: (slave bond_slave_1): Device is not our slave
[ 1587.514880][T28310] bond5: option active_slave: invalid value (bond_slave_1)
[ 1587.544249][T28310] bond5 (unregistering): Released all slaves
[ 1588.107990][T28342] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1588.117989][T28342] syzkaller1: linktype set to 768
[ 1588.330153][T28352] netlink: 'syz.6.13854': attribute type 1 has an invalid length.
[ 1588.397551][T28363] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1588.584953][T28375] netlink: 'syz.0.13860': attribute type 21 has an invalid length.
[ 1588.597972][T28375] __nla_validate_parse: 10 callbacks suppressed
[ 1588.597987][T28375] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13860'.
[ 1588.616070][T28375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13860'.
[ 1588.627914][T28375] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.13860'.
[ 1588.651604][T28375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13860'.
[ 1588.672506][T28375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13860'.
[ 1588.682863][T28375] netlink: 'syz.0.13860': attribute type 21 has an invalid length.
[ 1588.692782][T28375] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13860'.
[ 1588.709840][T28375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13860'.
[ 1589.107959][T28402] netlink: 'syz.2.13868': attribute type 1 has an invalid length.
[ 1589.116629][T28402] netlink: 'syz.2.13868': attribute type 2 has an invalid length.
[ 1589.125740][T28402] netlink: 'syz.2.13868': attribute type 1 has an invalid length.
[ 1589.134170][T28402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13868'.
[ 1589.313482][T28409] bridge5: entered allmulticast mode
[ 1589.459168][T28425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13875'.
[ 1589.639285][T28433] netlink: 'syz.4.13874': attribute type 1 has an invalid length.
[ 1590.092835][T28438] batadv_slave_0: Caught tx_queue_len zero misconfig
[ 1590.104850][T28440] netlink: 'syz.2.13879': attribute type 58 has an invalid length.
[ 1590.114453][T28440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13879'.
[ 1590.139827][T28441] syzkaller0: entered allmulticast mode
[ 1590.228922][T28446] sctp: [Deprecated]: syz.6.13881 (pid 28446) Use of int in maxseg socket option.
[ 1590.228922][T28446] Use struct sctp_assoc_value instead
[ 1590.503708][ T5933] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1590.637381][T28470] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1590.781531][ T5933] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1590.928434][T28437] syzkaller0: left allmulticast mode
[ 1591.274570][T28497] bond0: entered promiscuous mode
[ 1591.279670][T28497] bond_slave_0: entered promiscuous mode
[ 1591.302537][T28497] bond_slave_1: entered promiscuous mode
[ 1591.308436][T28497] mac80211_hwsim hwsim140 wlan1: entered promiscuous mode
[ 1591.331603][T28497] bridge_slave_1: entered promiscuous mode
[ 1591.339222][T28497] bond0: left promiscuous mode
[ 1591.351312][T28497] bond_slave_0: left promiscuous mode
[ 1591.361607][T28497] bond_slave_1: left promiscuous mode
[ 1591.367177][T28497] mac80211_hwsim hwsim140 wlan1: left promiscuous mode
[ 1591.391354][T28497] bridge_slave_1: left promiscuous mode
[ 1591.588439][T28511] syzkaller0: entered promiscuous mode
[ 1591.610468][T28511] syzkaller0: entered allmulticast mode
[ 1591.851033][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5700 ms
[ 1591.859093][    C1] lec:lec_tx_timeout: lec0
[ 1592.031687][T28542] �x9�: left allmulticast mode
[ 1592.036535][T28542] �x9�: left promiscuous mode
[ 1592.061374][T28542] bridge0: port 1(
1�x9�) entered disabled state
[ 1592.104047][T28542] bond0: (slave bond_slave_0): Releasing backup interface
[ 1592.145823][T28542] bond0: (slave bond_slave_1): Releasing backup interface
[ 1592.188022][T28542] team0: Failed to send options change via netlink (err -105)
[ 1592.211280][T28542] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[ 1592.235291][T28542] team0: Port device team_slave_0 removed
[ 1592.255296][T28542] team0: Failed to send options change via netlink (err -105)
[ 1592.271815][T28542] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[ 1592.295547][T28542] team0: Port device team_slave_1 removed
[ 1592.307634][T28542] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1592.318558][T28542] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1592.334737][T28542] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1592.575281][T28579] netlink: 'syz.2.13914': attribute type 1 has an invalid length.
[ 1592.725416][T28573] bond1 (unregistering): Released all slaves
[ 1593.039422][T28569] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1593.085172][T11534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1593.342036][T28624] netlink: 'syz.0.13925': attribute type 1 has an invalid length.
[ 1593.353508][T28625] IPv6: Can't replace route, no match found
[ 1593.360775][T28625] IPv6: Can't replace route, no match found
[ 1593.442181][T28624] bond5: entered promiscuous mode
[ 1593.458105][T28624] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1593.488846][T28578] wlan1 speed is unknown, defaulting to 1000
[ 1593.495124][T28629] netlink: 'syz.4.13923': attribute type 33 has an invalid length.
[ 1593.505473][T28578] wg1 speed is unknown, defaulting to 1000
[ 1593.835774][T28583] wlan1 speed is unknown, defaulting to 1000
[ 1593.843891][T28583] wg1 speed is unknown, defaulting to 1000
[ 1594.765284][T28659] __nla_validate_parse: 11 callbacks suppressed
[ 1594.765305][T28659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13933'.
[ 1595.082134][T28672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13936'.
[ 1595.134525][T28672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13936'.
[ 1595.143619][T28672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13936'.
[ 1595.286527][T28678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13939'.
[ 1595.312058][T28678] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1595.324134][T28678] team0: Port device batadv1 added
[ 1595.477056][T28690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13943'.
[ 1595.492500][T28690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13943'.
[ 1595.561317][T28690] netlink: 'syz.4.13943': attribute type 18 has an invalid length.
[ 1595.676454][T28696] netlink: 116 bytes leftover after parsing attributes in process `syz.2.13945'.
[ 1595.858691][T28714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13951'.
[ 1596.185117][T28723] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1596.208580][T28713] wlan1 speed is unknown, defaulting to 1000
[ 1596.216004][T28723] syzkaller0: entered promiscuous mode
[ 1596.222107][T28723] syzkaller0: entered allmulticast mode
[ 1596.233345][T28713] wg1 speed is unknown, defaulting to 1000
[ 1596.256502][T28723] tipc: Resetting bearer <eth:syzkaller0>
[ 1596.550470][T28741] netlink: 104 bytes leftover after parsing attributes in process `syz.6.13959'.
[ 1596.944426][T28762] openvswitch: netlink: Missing key (keys=40, expected=200000)
[ 1596.982129][T28722] tipc: Resetting bearer <eth:syzkaller0>
[ 1597.041548][T28722] tipc: Disabling bearer <eth:syzkaller0>
[ 1597.349193][T28774] geneve3: entered promiscuous mode
[ 1597.383636][T28774] geneve3: entered allmulticast mode
[ 1597.400516][ T6155] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[ 1597.476013][ T6155] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[ 1597.512564][ T6155] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[ 1597.530806][ T6155] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[ 1597.914717][T28802] pimreg: entered allmulticast mode
[ 1598.006408][T28813] Unsupported ieee802154 address type: 0
[ 1612.495055][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1612.505372][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1612.514274][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[ 1614.510438][T28819] __nla_validate_parse: 2 callbacks suppressed
[ 1614.510460][T28819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13979'.
[ 1614.533328][T28826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13980'.
[ 1614.550233][T28821] netlink: 80 bytes leftover after parsing attributes in process `syz.5.13982'.
[ 1614.559034][T28825] netlink: 52 bytes leftover after parsing attributes in process `syz.6.13980'.
[ 1614.579313][T28823] bridge4: entered promiscuous mode
[ 1614.585021][T28823] bridge4: entered allmulticast mode
[ 1614.590500][T28829] netlink: 'syz.5.13982': attribute type 8 has an invalid length.
[ 1614.603396][T28823] team0: Port device bridge4 added
[ 1614.678214][T28823] bond3: option ad_select: invalid value (34)
[ 1614.692704][T28823] bond3 (unregistering): Released all slaves
[ 1614.739623][T28838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13984'.
[ 1615.158474][T28869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13994'.
[ 1615.245129][T28877] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1615.278664][T28879] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13996'.
[ 1615.306050][T28879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13996'.
[ 1615.350863][T28879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13996'.
[ 1615.645504][T28912] Unsupported ieee802154 address type: 0
[ 1615.667635][T28910] veth1_macvtap: entered allmulticast mode
[ 1615.691104][T28914] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14005'.
[ 1615.700302][T28914] netlink: 'syz.5.14005': attribute type 6 has an invalid length.
[ 1615.719590][T28914] netlink: 'syz.5.14005': attribute type 5 has an invalid length.
[ 1615.826699][T28921] rdma_rxe: rxe_newlink: failed to add team_slave_0
[ 1616.198103][T28944] syzkaller0: entered promiscuous mode
[ 1616.211048][T28944] syzkaller0: entered allmulticast mode
[ 1616.459930][T28944] netlink: 'syz.4.14014': attribute type 11 has an invalid length.
[ 1616.528904][T28968] netlink: 'syz.5.14023': attribute type 1 has an invalid length.
[ 1617.850973][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms
[ 1617.859089][    C1] lec:lec_tx_timeout: lec0
[ 1618.064086][T29062] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[ 1618.101837][T29060] veth0_virt_oifi: renamed from macsec0
[ 1618.519250][T29084] IPv6: sit2: Disabled Multicast RS
[ 1618.534431][T29084] sit2: entered allmulticast mode
[ 1618.541451][T29065] wlan1 speed is unknown, defaulting to 1000
[ 1618.548860][T29065] wg1 speed is unknown, defaulting to 1000
[ 1619.205130][T29111] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1619.324882][T29120] vxcan1: entered promiscuous mode
[ 1619.527754][T29131] netlink: 'syz.0.14069': attribute type 2 has an invalid length.
[ 1619.562746][T29131] !��9: entered promiscuous mode
[ 1619.573480][T29131] netlink: 'syz.0.14069': attribute type 2 has an invalid length.
[ 1619.582033][T29131] !��9: left promiscuous mode
[ 1619.760198][T29142] vlan3: entered promiscuous mode
[ 1619.777224][T29142] vlan3: entered allmulticast mode
[ 1620.251168][T29177] __nla_validate_parse: 19 callbacks suppressed
[ 1620.251188][T29177] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14082'.
[ 1620.469113][T29193] netlink: 'syz.5.14086': attribute type 11 has an invalid length.
[ 1620.559342][T29202] netlink: 'syz.4.14088': attribute type 5 has an invalid length.
[ 1620.785331][T29208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14091'.
[ 1620.799799][T29208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14091'.
[ 1620.853692][T29211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14092'.
[ 1620.873235][T29213] batadv_slave_1: Caught tx_queue_len zero misconfig
[ 1620.885388][T29213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14093'.
[ 1620.897539][T29193] syzkaller1: entered promiscuous mode
[ 1620.903479][T29193] syzkaller1: entered allmulticast mode
[ 1620.960898][T29213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1620.990376][T29218] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14094'.
[ 1621.056226][T29212] tipc: Disabling bearer <eth:syzkaller0>
[ 1621.343826][T29226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14097'.
[ 1621.619183][T29243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14101'.
[ 1621.648646][T29243] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.14101'.
[ 1621.679794][T29250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14105'.
[ 1621.693211][T29243] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1621.755452][T29250] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1621.810078][T29250] macsec1: entered promiscuous mode
[ 1621.822716][T29250] bond6: entered promiscuous mode
[ 1621.828004][T29250] macsec1: entered allmulticast mode
[ 1621.834305][T29250] bond6: entered allmulticast mode
[ 1621.903720][T29250] bond6: left allmulticast mode
[ 1621.908754][T29250] bond6: left promiscuous mode
[ 1621.936612][T29246] syzkaller1: entered promiscuous mode
[ 1621.957160][T29246] syzkaller1: entered allmulticast mode
[ 1622.008676][T29260] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1622.037161][T29260] syzkaller0: entered promiscuous mode
[ 1622.056707][T29260] syzkaller0: entered allmulticast mode
[ 1622.233919][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1622.257234][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1622.271780][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1622.298249][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1622.306914][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1622.439219][T29260] tipc: Resetting bearer <eth:syzkaller0>
[ 1622.555189][T29260] tipc: Disabling bearer <eth:syzkaller0>
[ 1622.599023][T18373] syz_tun (unregistering): left allmulticast mode
[ 1622.716680][T29296] netlink: 'syz.0.14116': attribute type 2 has an invalid length.
[ 1622.768130][T29296] !��9: entered promiscuous mode
[ 1622.863653][T29274] wlan1 speed is unknown, defaulting to 1000
[ 1622.880485][T29304] dvmrp12: entered allmulticast mode
[ 1622.923927][T29274] wg1 speed is unknown, defaulting to 1000
[ 1622.994545][T29310] tipc: New replicast peer: 255.255.255.255
[ 1623.012486][T29310] tipc: Enabled bearer <udp:syz2>, priority 26
[ 1623.498830][T29274] chnl_net:caif_netlink_parms(): no params data found
[ 1623.531717][   T29] audit: type=1800 audit(1771183436.612:44): pid=29310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.14119" name="memory.events" dev="tmpfs" ino=2131 res=0 errno=0
[ 1623.690190][T29341] netlink: 'syz.6.14123': attribute type 1 has an invalid length.
[ 1623.709159][T29274] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1623.716870][T29274] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1623.725186][T29274] bridge_slave_0: entered allmulticast mode
[ 1623.746019][T29274] bridge_slave_0: entered promiscuous mode
[ 1623.763733][T29274] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1623.772623][T29274] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1623.779970][T29274] bridge_slave_1: entered allmulticast mode
[ 1623.788325][T29274] bridge_slave_1: entered promiscuous mode
[ 1623.833437][T29274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1623.846227][T29274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1623.877075][T29345] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1623.943915][T29274] team0: Port device team_slave_0 added
[ 1623.969640][T29274] team0: Port device team_slave_1 added
[ 1624.034616][T29345] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1624.054791][T29274] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1624.061930][T29274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1624.088500][T29274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1624.108552][T29274] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1624.115938][T29274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1624.142503][T29274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1624.161898][T29345] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1624.236848][T29345] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1624.260703][T29274] hsr_slave_0: entered promiscuous mode
[ 1624.267705][T29274] hsr_slave_1: entered promiscuous mode
[ 1624.274198][T29274] debugfs: 'hsr0' already exists in 'hsr'
[ 1624.279974][T29274] Cannot create hsr debugfs directory
[ 1624.414904][T25383] Bluetooth: hci0: command tx timeout
[ 1624.434596][T20023] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[ 1624.484797][T20023] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[ 1624.510613][T20023] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[ 1624.558263][T20023] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[ 1625.027148][T29391] netlink: 'syz.4.14139': attribute type 4 has an invalid length.
[ 1625.238456][T29402] netlink: 'syz.2.14143': attribute type 1 has an invalid length.
[ 1625.274281][T29398] __nla_validate_parse: 15 callbacks suppressed
[ 1625.274299][T29398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14142'.
[ 1625.358222][T29411] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1625.370196][T29411] bond3: (slave vxcan3): Error -95 calling set_mac_address
[ 1625.435052][T29398] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1625.475200][T29402] bond3: (slave gretap1): making interface the new active one
[ 1625.484173][T29402] bond3: (slave gretap1): Enslaving as an active interface with an up link
[ 1625.517125][T29413] macvlan0: entered promiscuous mode
[ 1625.523194][T29413] macvlan0: entered allmulticast mode
[ 1625.529501][T29413] bond3: entered promiscuous mode
[ 1625.537103][T29413] gretap1: entered promiscuous mode
[ 1625.548122][T29413] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 1625.588137][T29413] bond3: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1
[ 1625.618637][T29413] bond3: left promiscuous mode
[ 1625.630319][T29413] gretap1: left promiscuous mode
[ 1625.649592][T29420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14147'.
[ 1625.685205][T29420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14147'.
[ 1625.854009][T29433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14152'.
[ 1625.857347][T29274] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1625.870594][T29434] netlink: 'syz.2.14151': attribute type 10 has an invalid length.
[ 1625.879125][T29434] netlink: 228 bytes leftover after parsing attributes in process `syz.2.14151'.
[ 1625.903589][T29274] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1625.937401][T29274] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1626.001559][T29434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14151'.
[ 1626.018276][T29274] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1626.483699][T29274] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1626.491034][T25383] Bluetooth: hci0: command tx timeout
[ 1626.536152][T29274] 8021q: adding VLAN 0 to HW filter on device team0
[ 1626.585213][T20020] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1626.592505][T20020] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1626.667190][T20020] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1626.674517][T20020] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1626.830465][T29484] wg1: entered promiscuous mode
[ 1626.845130][T29484] wg1: entered allmulticast mode
[ 1627.385382][T29274] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1627.486333][T29486] wlan1 speed is unknown, defaulting to 1000
[ 1627.529761][T29486] wg1 speed is unknown, defaulting to 1000
[ 1627.713184][T29525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14170'.
[ 1627.736601][T29527] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14171'.
[ 1627.750398][T29525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14170'.
[ 1627.775687][T29522] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 1627.793000][T29522] bond5 (unregistering): Released all slaves
[ 1627.811003][T29525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14170'.
[ 1627.836957][T29525] netlink: 'syz.0.14170': attribute type 5 has an invalid length.
[ 1627.903114][T29534] netlink: 'syz.0.14170': attribute type 1 has an invalid length.
[ 1628.201784][T29274] veth0_vlan: entered promiscuous mode
[ 1628.248001][T29274] veth1_vlan: entered promiscuous mode
[ 1628.371412][T29545] veth1_to_hsr: left allmulticast mode
[ 1628.377015][T29545] veth1_to_hsr: left promiscuous mode
[ 1628.394378][T29545] batman_adv: batadv0: Interface deactivated: gretap1
[ 1628.419253][ T6146] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[ 1628.428016][ T6146] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[ 1628.438154][ T6146] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[ 1628.456996][T29274] veth0_macvtap: entered promiscuous mode
[ 1628.467793][ T6146] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[ 1628.480242][T29274] veth1_macvtap: entered promiscuous mode
[ 1628.553703][T29274] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1628.571516][T25383] Bluetooth: hci0: command tx timeout
[ 1628.606231][T29274] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1628.637836][ T6146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1628.682021][ T6146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1628.690857][ T6146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1628.712568][ T6146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1628.996803][T29566] syzkaller0: entered promiscuous mode
[ 1629.004632][T29566] syzkaller0: entered allmulticast mode
[ 1629.056018][T29578] syzkaller0: entered promiscuous mode
[ 1629.063989][T29578] syzkaller0: entered allmulticast mode
[ 1629.151807][T29579] netlink: 'syz.2.14182': attribute type 13 has an invalid length.
[ 1629.224888][  T981] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1629.541861][ T6658] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1630.651889][T25383] Bluetooth: hci0: command tx timeout
[ 1631.588387][T29550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1633.540812][ T6146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1633.579360][ T6146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1633.692357][T20013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1633.700448][T20013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1633.736126][ T5933] syz1: Port: 1 Link ACTIVE
[ 1633.827801][T29600] netlink: 'syz.4.14189': attribute type 13 has an invalid length.
[ 1634.048451][T29600] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1634.060410][T29600] syzkaller0: entered promiscuous mode
[ 1634.090852][T29600] syzkaller0: entered allmulticast mode
[ 1634.133881][T29613] netlink: 'syz.5.14193': attribute type 3 has an invalid length.
[ 1634.135370][T29600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1634.161628][T29613] netlink: 'syz.5.14193': attribute type 1 has an invalid length.
[ 1634.176498][T29598] tipc: Resetting bearer <eth:syzkaller0>
[ 1634.187424][T29613] __nla_validate_parse: 217 callbacks suppressed
[ 1634.187441][T29613] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.14193'.
[ 1634.242106][T29598] tipc: Disabling bearer <eth:syzkaller0>
[ 1634.514632][T29597] wlan1 speed is unknown, defaulting to 1000
[ 1634.577811][T29597] wg1 speed is unknown, defaulting to 1000
[ 1634.794601][T29633] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14197'.
[ 1634.880722][T29637] IPVS: lc: SCTP 172.20.20.187:0 - no destination available
[ 1634.896759][    T9] IPVS: starting estimator thread 0...
[ 1634.991527][T29638] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1635.148916][T29660] block nbd2: Unsupported socket: should be TCP or UNIX.
[ 1635.194880][T29654] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14203'.
[ 1635.437337][T29674] bond0: Caught tx_queue_len zero misconfig
[ 1635.467678][T29674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14208'.
[ 1635.569810][T29677] lo: Caught tx_queue_len zero misconfig
[ 1635.582011][T29679] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14210'.
[ 1635.590769][T29677] sch_tbf: burst 0 is lower than device lo mtu (1294) !
[ 1636.129528][T29698] bond5: entered allmulticast mode
[ 1636.138039][T29698] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1637.131629][ T5824] Bluetooth: hci0: command 0x0405 tx timeout
[ 1650.058720][ T3042] lec:lec_start_xmit: lec0:No lecd attached
[ 1651.037304][T29710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14223'.
[ 1651.099304][T29715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14219'.
[ 1651.172729][T29719] netlink: 'syz.5.14224': attribute type 11 has an invalid length.
[ 1651.180687][T29719] netlink: 173856 bytes leftover after parsing attributes in process `syz.5.14224'.
[ 1651.252864][T29719] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14224'.
[ 1651.489656][T29737] veth0_to_hsr: Caught tx_queue_len zero misconfig
[ 1651.558509][T29741] block nbd2: Unsupported socket: should be TCP or UNIX.
[ 1652.133244][T29754] Bluetooth: MGMT ver 1.23
[ 1652.186066][T29756] netlink: 'syz.2.14234': attribute type 1 has an invalid length.
[ 1652.527909][T29770] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14236'.
[ 1652.567152][T29772] netlink: 'syz.0.14239': attribute type 2 has an invalid length.
[ 1652.585180][T29772] : entered promiscuous mode
[ 1652.745468][T29774] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1653.037245][T29795] netlink: 'syz.4.14245': attribute type 10 has an invalid length.
[ 1653.045645][T29795] syz_tun: entered promiscuous mode
[ 1653.058147][T29795] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1653.148954][T29797] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14246'.
[ 1653.487807][T29805] block nbd2: Unsupported socket: should be TCP or UNIX.
[ 1653.915072][T29809] wlan1 speed is unknown, defaulting to 1000
[ 1653.923434][T29809] wg1 speed is unknown, defaulting to 1000
[ 1654.147167][T29815] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14250'.
[ 1654.217743][T29816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14250'.
[ 1654.234815][T29823] netlink: 'syz.4.14253': attribute type 4 has an invalid length.
[ 1654.290487][T29823] netlink: 'syz.4.14253': attribute type 4 has an invalid length.
[ 1654.329469][T29823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1654.465981][T29829] netlink: 'syz.2.14255': attribute type 4 has an invalid length.
[ 1654.711089][T29838] syzkaller0: entered promiscuous mode
[ 1654.716617][T29838] syzkaller0: entered allmulticast mode
[ 1655.145756][T29718] Set syz1 is full, maxelem 65536 reached
[ 1655.504905][T29891] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14271'.
[ 1655.572474][T29898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14273'.
[ 1655.728122][T29896] sch_fq: defrate 4294967293 ignored.
[ 1655.851076][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms
[ 1655.859323][    C1] lec:lec_tx_timeout: lec0
[ 1656.081159][T29923] IPv6: Can't replace route, no match found
[ 1656.152618][T29926] netlink: 'syz.4.14280': attribute type 1 has an invalid length.
[ 1656.160491][T29926] __nla_validate_parse: 1 callbacks suppressed
[ 1656.160505][T29926] netlink: 7954 bytes leftover after parsing attributes in process `syz.4.14280'.
[ 1656.338309][T29942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14287'.
[ 1656.387177][T29947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14288'.
[ 1656.438799][T29947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14288'.
[ 1656.560149][T29965] netlink: 'syz.4.14292': attribute type 1 has an invalid length.
[ 1656.739767][T29969] bond6: (slave geneve4): making interface the new active one
[ 1656.749459][T29969] bond6: (slave geneve4): Enslaving as an active interface with an up link
[ 1656.769102][T29975] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 1656.778578][ T1030] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[ 1656.788944][ T1030] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[ 1656.797519][ T1030] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[ 1656.809447][ T1030] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[ 1656.901746][T29986] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14298'.
[ 1656.961287][T29994] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048)
[ 1657.130282][T30004] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14303'.
[ 1657.279330][T30012] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14304'.
[ 1657.293334][T30012] netlink: 56 bytes leftover after parsing attributes in process `syz.6.14304'.
[ 1657.425130][T30018] block nbd2: Unsupported socket: should be TCP or UNIX.
[ 1657.625620][T30032] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1657.634769][T30033] syzkaller0: entered promiscuous mode
[ 1657.650415][T30033] syzkaller0: entered allmulticast mode
[ 1657.650428][T11534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1657.671867][T30035] netlink: 'syz.4.14310': attribute type 2 has an invalid length.
[ 1657.681539][T30040] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.14312'.
[ 1657.699006][T30035] l24): entered promiscuous mode
[ 1657.735023][T30033] tipc: Resetting bearer <eth:syzkaller0>
[ 1657.792392][T30033] tipc: Disabling bearer <eth:syzkaller0>
[ 1657.863692][T30055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14314'.
[ 1658.042337][T30072] tap0: tun_chr_ioctl cmd 35111
[ 1658.807910][T30121] bond7: option primary_reselect: invalid value (4)
[ 1658.818936][T30121] bond7 (unregistering): Released all slaves
[ 1658.850704][T30128] nbd: must specify a size in bytes for the device
[ 1659.044339][T30130] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[ 1659.314184][T30140] xt_connbytes: Forcing CT accounting to be enabled
[ 1659.447343][T30149] netlink: 'syz.0.14339': attribute type 8 has an invalid length.
[ 1660.252254][T30147] wlan1 speed is unknown, defaulting to 1000
[ 1660.261779][T30147] wg1 speed is unknown, defaulting to 1000
[ 1660.271940][T30187] netlink: 'syz.6.14349': attribute type 5 has an invalid length.
[ 1660.293420][T30187] netlink: 'syz.6.14349': attribute type 1 has an invalid length.
[ 1661.255103][T30194] wlan1 speed is unknown, defaulting to 1000
[ 1661.386676][T30231] netlink: 'syz.6.14359': attribute type 1 has an invalid length.
[ 1661.425326][T30231] bond7: entered promiscuous mode
[ 1661.434060][T30231] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1661.453169][T30234] __nla_validate_parse: 10 callbacks suppressed
[ 1661.453184][T30234] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14359'.
[ 1661.502865][T30233] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1661.538366][T30236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1661.546263][T30236] syzkaller0: entered promiscuous mode
[ 1661.552005][T30236] syzkaller0: entered allmulticast mode
[ 1661.578559][T30236] debugfs: '�&��%����Q�0@æj��ʫ���}��!' already exists in 'ieee80211'
[ 1661.667634][T30195] wlan1 speed is unknown, defaulting to 1000
[ 1661.673964][T30194] wg1 speed is unknown, defaulting to 1000
[ 1661.690278][T30236] tipc: Resetting bearer <eth:syzkaller0>
[ 1661.699671][T30235] tipc: Resetting bearer <eth:syzkaller0>
[ 1661.728093][T30235] tipc: Disabling bearer <eth:syzkaller0>
[ 1661.743616][T30195] wg1 speed is unknown, defaulting to 1000
[ 1661.906537][T30241] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14362'.
[ 1662.211926][T30227] wlan1 speed is unknown, defaulting to 1000
[ 1662.238203][T30227] wg1 speed is unknown, defaulting to 1000
[ 1662.387393][T30255] netlink: 388 bytes leftover after parsing attributes in process `syz.5.14367'.
[ 1663.099596][T30263] wlan1 speed is unknown, defaulting to 1000
[ 1663.167853][T30263] wg1 speed is unknown, defaulting to 1000
[ 1663.209388][T30281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14374'.
[ 1663.339626][T30286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14376'.
[ 1663.416690][T30284] tun0: tun_chr_ioctl cmd 1074025675
[ 1663.431044][T30284] tun0: persist disabled
[ 1663.435527][T30283] tun0: tun_chr_ioctl cmd 1074025675
[ 1663.450473][T30283] tun0: persist enabled
[ 1663.565571][T30290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1663.691528][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1663.802211][T30296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14381'.
[ 1663.937668][T30279] wlan1 speed is unknown, defaulting to 1000
[ 1664.018664][T30279] wg1 speed is unknown, defaulting to 1000
[ 1664.280258][T30317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14384'.
[ 1664.304221][T30317] openvswitch: netlink: Missing key (keys=40, expected=80)
[ 1664.379444][T30320] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14385'.
[ 1664.669870][T30326] netlink: 'syz.6.14386': attribute type 1 has an invalid length.
[ 1664.693236][T30325] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.14387'.
[ 1664.763395][T30328] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14386'.
[ 1665.005084][T30339] netlink: 'syz.0.14389': attribute type 10 has an invalid length.
[ 1665.018699][T30339] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[ 1665.048844][T30339] team0: Port device netdevsim0 added
[ 1665.191993][T30352] sctp: [Deprecated]: syz.5.14395 (pid 30352) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1665.191993][T30352] Use struct sctp_sack_info instead
[ 1665.200673][T30351] netlink: 'syz.0.14394': attribute type 1 has an invalid length.
[ 1665.227799][T30352] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1665.374342][T30357] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1665.383587][T30357] bond7: (slave bond8): making interface the new active one
[ 1665.391939][T30357] bond7: (slave bond8): Enslaving as an active interface with an up link
[ 1665.485797][T30351] bond7: (slave gretap1): Enslaving as a backup interface with an up link
[ 1665.503312][T30357] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1665.521369][T30368] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1665.528835][T30364] syzkaller0: entered promiscuous mode
[ 1665.536099][T30364] syzkaller0: entered allmulticast mode
[ 1665.557803][T30369] vlan4: entered promiscuous mode
[ 1665.564077][T30369] bond7: entered promiscuous mode
[ 1665.569390][T30369] bond8: entered promiscuous mode
[ 1665.654578][T30373] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1665.704460][T30364] tipc: Resetting bearer <eth:syzkaller0>
[ 1665.761426][T30362] tipc: Resetting bearer <eth:syzkaller0>
[ 1665.796737][T30362] tipc: Disabling bearer <eth:syzkaller0>
[ 1665.837358][T30382] netlink: 'syz.0.14404': attribute type 1 has an invalid length.
[ 1666.068937][T30398] syzkaller0: entered promiscuous mode
[ 1666.075151][T30398] syzkaller0: entered allmulticast mode
[ 1666.105116][T30397] vxcan3: entered allmulticast mode
[ 1666.175635][T30416] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1667.848112][T30408] __nla_validate_parse: 10 callbacks suppressed
[ 1667.848132][T30408] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14412'.
[ 1667.877267][T30408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14412'.
[ 1667.888476][T30410] 8021q: VLANs not supported on ip6gre0
[ 1668.037998][T30425] tipc: Enabling of bearer <eth:pim6reg> rejected, failed to enable media
[ 1668.151944][T30438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14419'.
[ 1668.172126][T30438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14419'.
[ 1668.223201][T30438] netlink: 136 bytes leftover after parsing attributes in process `syz.2.14419'.
[ 1668.249527][T30438] netlink: 'syz.2.14419': attribute type 2 has an invalid length.
[ 1668.399313][T30450] netlink: 'syz.5.14423': attribute type 1 has an invalid length.
[ 1668.409616][T30448] syzkaller0: entered promiscuous mode
[ 1668.417144][T30448] syzkaller0: entered allmulticast mode
[ 1668.427211][T30448] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14422'.
[ 1668.437037][T30450] netlink: 'syz.5.14423': attribute type 2 has an invalid length.
[ 1668.477296][T30453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14425'.
[ 1668.493672][T30450] netlink: 'syz.5.14423': attribute type 1 has an invalid length.
[ 1668.502879][T30450] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14423'.
[ 1668.658206][T30460] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14426'.
[ 1668.752566][T30464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14429'.
[ 1668.927289][T30472] syzkaller0: entered promiscuous mode
[ 1668.935847][T30472] syzkaller0: entered allmulticast mode
[ 1668.956774][T30472] 0: reclassify loop, rule prio 0, protocol 800
[ 1669.139667][T30486] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1669.185366][T30484] tipc: Disabling bearer <eth:syzkaller0>
[ 1669.216952][T30489] syzkaller0: entered promiscuous mode
[ 1669.223811][T30489] syzkaller0: entered allmulticast mode
[ 1669.267223][T30491] veth0: entered promiscuous mode
[ 1669.285734][T30492] syzkaller0: entered promiscuous mode
[ 1669.293824][T30492] syzkaller0: entered allmulticast mode
[ 1670.063373][T30531] netlink: 'syz.2.14448': attribute type 1 has an invalid length.
[ 1670.405356][T30538] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[ 1670.559486][T30538] bond4 (unregistering): Released all slaves
[ 1670.657360][T30556] syzkaller0: entered promiscuous mode
[ 1670.671187][T30556] syzkaller0: entered allmulticast mode
[ 1670.739494][T30492] veth0: left promiscuous mode
[ 1670.749878][T30556] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1670.775579][T30555] tipc: Resetting bearer <eth:syzkaller0>
[ 1670.814232][T30555] tipc: Disabling bearer <eth:syzkaller0>
[ 1671.437178][T30580] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1672.321077][T30591] wlan1 speed is unknown, defaulting to 1000
[ 1672.329188][T30591] wg1 speed is unknown, defaulting to 1000
[ 1672.769290][T30638] openvswitch: netlink: Unknown key attributes 2
[ 1672.859553][T30646] __nla_validate_parse: 11 callbacks suppressed
[ 1672.859577][T30646] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14480'.
[ 1673.137821][T30654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14483'.
[ 1673.457476][T30659] x_tables: ip6_tables: udplite match: only valid for protocol 136
[ 1673.825871][T30670] netlink: 'syz.2.14489': attribute type 1 has an invalid length.
[ 1673.861357][T30670] netlink: 228 bytes leftover after parsing attributes in process `syz.2.14489'.
[ 1673.870642][T30670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14489'.
[ 1673.951116][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1673.965064][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1673.974265][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[ 1674.096652][T20023] bridge_slave_1: left allmulticast mode
[ 1674.098376][T25383] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1674.119311][T25383] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1674.131164][T20023] bridge_slave_1: left promiscuous mode
[ 1674.137128][T20023] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1674.145144][T25383] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1674.162718][T25383] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1674.171606][T25383] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1674.228464][T20023] bridge_slave_0: left allmulticast mode
[ 1674.234870][T20023] bridge_slave_0: left promiscuous mode
[ 1674.240762][T20023] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1674.312507][T30682] netlink: 9 bytes leftover after parsing attributes in process `syz.0.14492'.
[ 1674.381622][T30682] netlink: 9 bytes leftover after parsing attributes in process `syz.0.14492'.
[ 1674.593557][T20023] bond4 (unregistering): (slave ip6gretap1): Releasing active interface
[ 1674.611687][T20023] ip6gretap1 (unregistering): left promiscuous mode
[ 1674.628547][T20023] ip6gretap1 (unregistering): left allmulticast mode
[ 1674.670180][T30691] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20002
[ 1674.763740][T20023] bond0 (unregistering): (slave sit2): Releasing backup interface
[ 1675.002456][T20023] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 1675.277469][T20023] bond2 (unregistering): (slave bridge3): Releasing active interface
[ 1675.502759][T20023] bond0 (unregistering): Released all slaves
[ 1675.554359][T20023] bond1 (unregistering): Released all slaves
[ 1675.576947][T20023] bond2 (unregistering): Released all slaves
[ 1675.598692][T20023] bond3 (unregistering): Released all slaves
[ 1675.632938][T20023] bond4 (unregistering): Released all slaves
[ 1675.664665][T20023] bond5 (unregistering): Released all slaves
[ 1675.685709][T20023] bond6 (unregistering): Released all slaves
[ 1675.724255][T20023] bond7 (unregistering): Released all slaves
[ 1675.744550][T20023] bond8 (unregistering): Released all slaves
[ 1675.945912][  T981] wg1 speed is unknown, defaulting to 1000
[ 1675.952832][  T981] syz0: Port: 1 Link DOWN
[ 1675.957470][T20023] !��9: left promiscuous mode
[ 1675.996776][ T7630] infiniband syz1: ib_query_port failed (-19)
[ 1676.045325][T20023] : left promiscuous mode
[ 1676.232341][T30707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14496'.
[ 1676.261150][T25383] Bluetooth: hci4: command tx timeout
[ 1676.316110][T30711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14496'.
[ 1676.373435][T30708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14497'.
[ 1676.411756][T30713] wg1: entered promiscuous mode
[ 1676.425933][T30713] wg1: entered allmulticast mode
[ 1676.567648][T30701] wlan1 speed is unknown, defaulting to 1000
[ 1676.586397][T30701] wg1 speed is unknown, defaulting to 1000
[ 1676.644026][T20023] : left promiscuous mode
[ 1676.710696][T20023] !: left promiscuous mode
[ 1676.899162][T20023] tipc: Left network mode
[ 1676.982330][T20023] IPVS: stopping backup sync thread 21414 ...
[ 1677.176787][T30724] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[ 1677.748101][T30679] wlan1 speed is unknown, defaulting to 1000
[ 1677.783891][T30679] wg1 speed is unknown, defaulting to 1000
[ 1677.785257][T30708] wlan1 speed is unknown, defaulting to 1000
[ 1677.983846][T30739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14502'.
[ 1678.018522][T30708] wg1 speed is unknown, defaulting to 1000
[ 1678.153775][T30740] bridge5: port 1(ip6gretap2) entered blocking state
[ 1678.160748][T30740] bridge5: port 1(ip6gretap2) entered disabled state
[ 1678.178360][T30740] ip6gretap2: entered allmulticast mode
[ 1678.188991][T30740] ip6gretap2: entered promiscuous mode
[ 1678.253677][T20023] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1678.331221][T25383] Bluetooth: hci4: command tx timeout
[ 1678.501776][T20023] team0 (unregistering): Port device team_slave_1 removed
[ 1678.524715][T20023] team0 (unregistering): Port device team_slave_0 removed
[ 1678.588107][T30745] openvswitch: netlink: ufid size 5796 bytes exceeds the range (1, 16)
[ 1678.599805][T30745] openvswitch: netlink: Message has 16 unknown bytes.
[ 1678.612026][T30745] netlink: 'syz.4.14504': attribute type 1 has an invalid length.
[ 1678.806507][T30745] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1678.980991][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1678.989071][    C1] lec:lec_tx_timeout: lec0
[ 1679.022369][T30752] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1679.030139][T30752] syzkaller0: entered promiscuous mode
[ 1679.052961][T30752] syzkaller0: entered allmulticast mode
[ 1679.474252][T30752] tipc: Resetting bearer <eth:syzkaller0>
[ 1679.610035][T30762] syzkaller0: entered promiscuous mode
[ 1679.618612][T30762] syzkaller0: entered allmulticast mode
[ 1679.648738][T30751] tipc: Resetting bearer <eth:syzkaller0>
[ 1679.681759][T30751] tipc: Disabling bearer <eth:syzkaller0>
[ 1680.411125][T25383] Bluetooth: hci4: command tx timeout
[ 1681.786537][T30679] chnl_net:caif_netlink_parms(): no params data found
[ 1682.074144][T30679] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1682.091579][T30679] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1682.098950][T30679] bridge_slave_0: entered allmulticast mode
[ 1682.132538][T30679] bridge_slave_0: entered promiscuous mode
[ 1682.158348][T30679] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1682.191735][T30679] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1682.199116][T30679] bridge_slave_1: entered allmulticast mode
[ 1682.213353][T30679] bridge_slave_1: entered promiscuous mode
[ 1682.264227][T30679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1682.303919][T30679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1682.307421][T30813] netlink: 56 bytes leftover after parsing attributes in process `syz.5.14517'.
[ 1682.505420][T25383] Bluetooth: hci4: command tx timeout
[ 1682.928135][T30679] team0: Port device team_slave_0 added
[ 1682.959177][T20023] IPVS: stop unused estimator thread 0...
[ 1682.965611][T30679] team0: Port device team_slave_1 added
[ 1683.076618][T30829] vxcan1: entered promiscuous mode
[ 1683.150100][T30830] vxcan1: entered promiscuous mode
[ 1683.215970][T30834] vlan3: entered allmulticast mode
[ 1683.222189][T30834] bond0: entered allmulticast mode
[ 1683.227424][T30834] bond_slave_0: entered allmulticast mode
[ 1683.239460][T30834] bond_slave_1: entered allmulticast mode
[ 1683.248677][T30679] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1683.275265][T30679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1683.370811][T30679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1683.422200][T30679] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1683.432424][T30679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1683.467106][T30847] netlink: 'syz.2.14527': attribute type 1 has an invalid length.
[ 1683.475428][T30679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1683.514003][T30851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14528'.
[ 1683.703942][T25383] block nbd2: Receive control failed (result -32)
[ 1683.714769][T30679] hsr_slave_0: entered promiscuous mode
[ 1683.732254][T30679] hsr_slave_1: entered promiscuous mode
[ 1683.738843][T30679] debugfs: 'hsr0' already exists in 'hsr'
[ 1683.745693][T30679] Cannot create hsr debugfs directory
[ 1683.774063][ T6145] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1683.784670][ T6145] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1683.879247][ T6145] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1683.900741][ T6145] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1683.927653][ T6145] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1683.951861][ T6145] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1684.077713][ T6155] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1684.086459][ T6155] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1684.195707][T30879] netlink: 'syz.5.14538': attribute type 4 has an invalid length.
[ 1684.623611][ T1030] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[ 1684.716614][T20020] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[ 1684.820302][ T1030] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[ 1684.852440][ T1030] netdevsim netdevsim6 eth4: set [1, 0] type 2 family 0 port 20000 - 0
[ 1684.916120][T30679] netdevsim netdevsim6 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1684.945141][T30906] netlink: 'syz.5.14544': attribute type 10 has an invalid length.
[ 1684.996289][T30911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14543'.
[ 1685.222093][T20023] batman_adv: batadv0: Removing interface: gretap1
[ 1685.296828][T20023] bond1 (unregistering): (slave bridge1): Releasing active interface
[ 1685.425538][T20023] bond2 (unregistering): (slave bridge3): Releasing active interface
[ 1685.433895][T20023] bond2 (unregistering): (slave bridge3): the permanent HWaddr of slave - e6:87:6d:43:13:05 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1685.505341][T20023] bond2 (unregistering): (slave bridge4): Releasing active interface
[ 1685.655588][T20023] bond3 (unregistering): (slave bridge7): Releasing backup interface
[ 1685.753372][T20023] bond0 (unregistering): Released all slaves
[ 1685.764600][T20023] bond1 (unregistering): Released all slaves
[ 1685.783669][T20023] bond2 (unregistering): Released all slaves
[ 1685.799069][T20023] bond3 (unregistering): Released all slaves
[ 1685.815862][T20023] bond4 (unregistering): Released all slaves
[ 1685.839695][T20023] bond5 (unregistering): Released all slaves
[ 1685.856298][T20023] bond6 (unregistering): Released all slaves
[ 1685.879392][T20023] bond7 (unregistering): Released all slaves
[ 1685.920457][T30906] 8021q: adding VLAN 0 to HW filter on device team0
[ 1685.939940][T30906] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1685.974736][T30679] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1686.034002][T30890] wlan1 speed is unknown, defaulting to 1000
[ 1686.179881][T20023] !: left promiscuous mode
[ 1686.214809][T30679] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1686.269515][T20023] : left promiscuous mode
[ 1686.283553][T30929] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14549'.
[ 1686.309273][T30929] netlink: 'syz.5.14549': attribute type 39 has an invalid length.
[ 1686.362510][T30934] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14549'.
[ 1686.383830][T30934] netlink: 43 bytes leftover after parsing attributes in process `syz.5.14549'.
[ 1686.426991][T30934] netlink: 'syz.5.14549': attribute type 5 has an invalid length.
[ 1686.453116][T30937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14549'.
[ 1686.478698][T30934] netlink: 43 bytes leftover after parsing attributes in process `syz.5.14549'.
[ 1686.500748][T30937] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14549'.
[ 1686.520855][T30679] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1686.884173][T20023] �9: left promiscuous mode
[ 1687.044090][T30934] vlan1: entered allmulticast mode
[ 1687.107145][T30953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14551'.
[ 1687.145997][T30953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14551'.
[ 1687.170102][T20023] tipc: Left network mode
[ 1687.502080][T20023] IPVS: stopping backup sync thread 28076 ...
[ 1687.768251][T30973] bond4: entered promiscuous mode
[ 1687.813062][T30973] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1687.879303][T30980] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1687.902973][T30980] bond4: (slave ip6tnl3): The slave device specified does not support setting the MAC address
[ 1687.916099][T30980] bond4: (slave ip6tnl3): Error -95 calling set_mac_address
[ 1688.046778][T30986] netlink: 'syz.5.14556': attribute type 9 has an invalid length.
[ 1688.054898][T30986] netlink: 'syz.5.14556': attribute type 11 has an invalid length.
[ 1688.073877][T30986] netlink: 'syz.5.14556': attribute type 12 has an invalid length.
[ 1688.230288][T30679] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1688.296523][T30679] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1688.379293][T30679] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1688.446582][T30679] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1688.473044][T31003] pim6reg1: entered promiscuous mode
[ 1688.478532][T31003] pim6reg1: entered allmulticast mode
[ 1688.622353][T31020] __nla_validate_parse: 6 callbacks suppressed
[ 1688.622374][T31020] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14561'.
[ 1688.703282][T31023] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14565'.
[ 1688.741420][T31006] netlink: 'syz.0.14561': attribute type 2 has an invalid length.
[ 1688.954466][T30679] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1689.054182][T30679] 8021q: adding VLAN 0 to HW filter on device team0
[ 1689.085641][ T6146] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1689.092893][ T6146] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1689.168695][ T9821] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1689.175949][ T9821] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1689.688046][T31072] dummy0: Caught tx_queue_len zero misconfig
[ 1689.738069][T31076] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14575'.
[ 1689.769302][T20023] hsr_slave_0: left promiscuous mode
[ 1689.789180][T20023] hsr_slave_1: left promiscuous mode
[ 1689.805995][T20023] macsec0: left allmulticast mode
[ 1690.467796][T31100] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1690.493926][T31100] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1690.616706][T30679] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1690.679775][T31100] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1690.711066][T31100] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1690.824368][T31100] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1690.871118][T31100] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1690.956186][T31121] xt_CONNSECMARK: invalid mode: 253
[ 1690.988834][T31100] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1691.005580][T31121] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14586'.
[ 1691.025310][T31100] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1691.176727][T20023] IPVS: stop unused estimator thread 0...
[ 1691.316675][ T1030] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1691.335382][ T1030] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1691.517005][T20020] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1691.536242][T20020] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1691.787052][ T6145] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1691.801959][ T6145] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1691.886542][ T6145] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1691.905802][ T6145] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1691.928929][T31142] netlink: 'syz.5.14591': attribute type 61 has an invalid length.
[ 1691.956946][T30679] veth0_vlan: entered promiscuous mode
[ 1691.971215][T31142] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14591'.
[ 1691.994961][T30679] veth1_vlan: entered promiscuous mode
[ 1692.092619][T30679] veth0_macvtap: entered promiscuous mode
[ 1692.136273][T30679] veth1_macvtap: entered promiscuous mode
[ 1692.208998][T31147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14593'.
[ 1692.237595][T30679] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1692.272089][T31148] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14593'.
[ 1692.286155][T30679] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1692.420320][ T6155] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1692.430351][ T6155] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1692.529811][ T6155] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1692.564244][ T6146] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1692.599390][T31158] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) !
[ 1692.922332][T20020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1692.930334][T20020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1692.988510][T31175] SET target dimension over the limit!
[ 1693.006613][T20023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1693.015961][T20023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1693.296983][T31188] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1693.320073][T31188] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[ 1693.353511][T31188] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[ 1693.605413][T31208] hsr0: left promiscuous mode
[ 1693.610183][T31208] hsr0: left allmulticast mode
[ 1693.633235][T31208] hsr_slave_0: left allmulticast mode
[ 1693.639415][T31208] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[ 1693.724708][T31208] netlink: 'syz.0.14608': attribute type 9 has an invalid length.
[ 1694.008381][T31217] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14610'.
[ 1694.214082][T31238] netlink: 232 bytes leftover after parsing attributes in process `syz.0.14613'.
[ 1694.229321][T31240] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 1694.299099][T31242] netlink: 'syz.5.14615': attribute type 4 has an invalid length.
[ 1694.378008][T31247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14616'.
[ 1694.393235][T31247] IPv6: addrconf: prefix option has invalid lifetime
[ 1694.471527][   T29] audit: type=1800 audit(1771183507.562:45): pid=31253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.14618" name="blkio.bfq.time" dev="tmpfs" ino=490 res=0 errno=0
[ 1694.523833][T31253] tipc: Started in network mode
[ 1694.529460][T31253] tipc: Node identity b22245923a1c, cluster identity 4711
[ 1694.538070][T31253] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1694.547253][T31253] syzkaller0: entered promiscuous mode
[ 1694.552921][T31253] syzkaller0: entered allmulticast mode
[ 1694.674251][T31265] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14622'.
[ 1694.696395][T31265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14622'.
[ 1694.708794][T31252] tipc: Resetting bearer <eth:syzkaller0>
[ 1694.725557][T31265] netlink: 56 bytes leftover after parsing attributes in process `syz.6.14622'.
[ 1694.743639][T31265] netlink: 388 bytes leftover after parsing attributes in process `syz.6.14622'.
[ 1694.794273][T31252] tipc: Disabling bearer <eth:syzkaller0>
[ 1694.874208][T31277] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20003
[ 1695.033458][T31289] netlink: 'syz.4.14629': attribute type 12 has an invalid length.
[ 1695.041806][T31289] netlink: 120 bytes leftover after parsing attributes in process `syz.4.14629'.
[ 1695.121180][T31289] vlan2: entered allmulticast mode
[ 1695.126369][T31289] veth0_to_bond: entered allmulticast mode
[ 1695.172249][T31300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14630'.
[ 1695.403731][T31308] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14635'.
[ 1695.477419][T31313] geneve0: entered promiscuous mode
[ 1695.486800][T20020] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1695.498230][T31318] nbd: must specify a size in bytes for the device
[ 1695.499173][T20020] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1695.523380][T20020] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1695.544461][T20020] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1696.197195][T31322] wlan1 speed is unknown, defaulting to 1000
[ 1696.454007][T31326] netlink: 'syz.6.14639': attribute type 2 has an invalid length.
[ 1696.476536][T31350] bond5 (unregistering): Released all slaves
[ 1696.598339][T31354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1696.887863][T31335] wlan1 speed is unknown, defaulting to 1000
[ 1697.328536][T31392] pim6reg: entered allmulticast mode
[ 1697.368165][T31391] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1697.376459][T31391] syzkaller0: entered promiscuous mode
[ 1697.385220][T31396] nbd: must specify a size in bytes for the device
[ 1697.392627][T31391] syzkaller0: entered allmulticast mode
[ 1697.412061][T31391] tipc: Resetting bearer <eth:syzkaller0>
[ 1697.960206][T31416] netlink: 'syz.6.14664': attribute type 3 has an invalid length.
[ 1698.002914][T31423] veth1: Caught tx_queue_len zero misconfig
[ 1698.410204][T31444] netlink: 'syz.2.14674': attribute type 1 has an invalid length.
[ 1698.541311][T31449] syzkaller0: entered promiscuous mode
[ 1698.561039][T31449] syzkaller0: entered allmulticast mode
[ 1698.781216][T31457] nbd: must specify a size in bytes for the device
[ 1699.718003][T31466] __nla_validate_parse: 16 callbacks suppressed
[ 1699.718024][T31466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14681'.
[ 1699.734293][T31466] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14681'.
[ 1699.744007][T31466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14681'.
[ 1699.753516][T31466] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14681'.
[ 1700.628692][T31471] vlan2: entered promiscuous mode
[ 1700.641897][T31471] erspan0: entered promiscuous mode
[ 1700.677189][T31477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14685'.
[ 1700.991447][T31496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14692'.
[ 1701.011804][T31496] openvswitch: netlink: Message has -1 unknown bytes.
[ 1701.061358][T31509] netlink: 'syz.6.14695': attribute type 1 has an invalid length.
[ 1701.077986][T31509] netlink: 'syz.6.14695': attribute type 3 has an invalid length.
[ 1701.095619][T31509] netlink: 224 bytes leftover after parsing attributes in process `syz.6.14695'.
[ 1701.195493][T31518] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14698'.
[ 1701.215125][T31521] ipt_ECN: cannot use operation on non-tcp rule
[ 1701.330883][T31527] syzkaller0: entered promiscuous mode
[ 1701.339808][T31527] syzkaller0: entered allmulticast mode
[ 1701.427383][T31533] veth0_virt_wifi: entered promiscuous mode
[ 1701.442434][T31533] veth0_virt_wifi: left promiscuous mode
[ 1701.486612][T31537] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[ 1701.804783][   T29] audit: type=1800 audit(1771183514.892:46): pid=31542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.14704" name="memory.events" dev="tmpfs" ino=135 res=0 errno=0
[ 1701.943381][T31551] macsec2: entered promiscuous mode
[ 1701.948777][T31551] macsec2: entered allmulticast mode
[ 1702.028288][T31554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14710'.
[ 1702.102273][T31561] xt_hashlimit: size too large, truncated to 1048576
[ 1702.122963][T31560] xt_hashlimit: size too large, truncated to 1048576
[ 1702.168587][T31555] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1702.225681][T31560] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1702.252532][T31561] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1702.455421][T31577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14715'.
[ 1702.469470][T31582] netlink: 'syz.5.14716': attribute type 21 has an invalid length.
[ 1702.493515][T31577] netlink: 'syz.4.14715': attribute type 29 has an invalid length.
[ 1702.501997][T31582] netlink: 'syz.5.14716': attribute type 22 has an invalid length.
[ 1702.533826][T31582] netlink: 'syz.5.14716': attribute type 23 has an invalid length.
[ 1702.535456][T31577] netlink: 'syz.4.14715': attribute type 29 has an invalid length.
[ 1702.585351][T31577] SET target dimension over the limit!
[ 1702.631923][T31584] geneve2: entered promiscuous mode
[ 1702.695850][T31563] wlan1 speed is unknown, defaulting to 1000
[ 1702.818660][T31592] syzkaller0: entered promiscuous mode
[ 1702.826897][T31592] syzkaller0: entered allmulticast mode
[ 1702.862076][T31592] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1702.882063][T31591] tipc: Resetting bearer <eth:syzkaller0>
[ 1703.173545][T31591] tipc: Disabling bearer <eth:syzkaller0>
[ 1703.404473][T31614] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN PTI
[ 1703.416523][T31614] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f]
[ 1703.424980][T31614] CPU: 1 UID: 0 PID: 31614 Comm: syz.4.14726 Not tainted syzkaller #0 PREEMPT(full) 
[ 1703.434466][T31614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1703.439660][T31619] ieee80211 phy170: Selected rate control algorithm 'minstrel_ht'
[ 1703.444544][T31614] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0
[ 1703.444583][T31614] Code: c3 31 ff 89 c6 e8 b6 9b c7 f7 85 db 74 5b e8 6d 97 c7 f7 eb 05 e8 66 97 c7 f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89
[ 1703.478848][T31614] RSP: 0018:ffffc9000c69f5e0 EFLAGS: 00010202
[ 1703.484927][T31614] RAX: 0000000000000007 RBX: 0000000000000039 RCX: ffff88805160bc80
[ 1703.492916][T31614] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1703.500897][T31614] RBP: 0000000080000000 R08: ffff88805160bc80 R09: 0000000000000003
[ 1703.508891][T31614] R10: 0000000000000005 R11: 0000000000000000 R12: dffffc0000000000
[ 1703.516878][T31614] R13: 0000000000000000 R14: ffff88805275e258 R15: ffffffffffffffff
[ 1703.524865][T31614] FS:  00007f4955c376c0(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000
[ 1703.533814][T31614] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1703.540415][T31614] CR2: 00007f4954c71980 CR3: 000000004e434000 CR4: 00000000003526f0
[ 1703.548401][T31614] Call Trace:
[ 1703.551690][T31614]  <TASK>
[ 1703.554631][T31614]  ? ip_route_output_key_hash+0xd8/0x2a0
[ 1703.560282][T31614]  ip_route_output_key_hash+0x18d/0x2a0
[ 1703.565842][T31614]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[ 1703.571965][T31614]  ? crng_fast_key_erasure+0x196/0x270
[ 1703.577436][T31614]  ? __pfx_crng_fast_key_erasure+0x10/0x10
[ 1703.583265][T31614]  ip_route_output_flow+0x2a/0x150
[ 1703.588389][T31614]  sctp_v4_get_dst+0x3f8/0x12b0
[ 1703.593254][T31614]  ? crng_make_state+0x2c5/0x600
[ 1703.598236][T31614]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1703.603452][T31614]  ? crng_make_state+0x36a/0x600
[ 1703.608401][T31614]  ? __pfx_sctp_v4_get_dst+0x10/0x10
[ 1703.613711][T31614]  ? _get_random_bytes+0x1e7/0x260
[ 1703.618848][T31614]  ? dst_release+0x72/0x1b0
[ 1703.623394][T31614]  sctp_transport_route+0x118/0x2f0
[ 1703.628594][T31614]  sctp_assoc_add_peer+0x650/0x13b0
[ 1703.633812][T31614]  sctp_connect_new_asoc+0x329/0x6b0
[ 1703.639138][T31614]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1703.644965][T31614]  ? sctp_get_af_specific+0x29/0x80
[ 1703.650178][T31614]  ? sctp_inet6_send_verify+0x80/0x300
[ 1703.655639][T31614]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[ 1703.661457][T31614]  __sctp_connect+0x5cb/0xdc0
[ 1703.666156][T31614]  ? __pfx___sctp_connect+0x10/0x10
[ 1703.671371][T31614]  ? security_sctp_bind_connect+0x7e/0x2c0
[ 1703.677185][T31614]  ? __sctp_setsockopt_connectx+0xc7/0x190
[ 1703.682998][T31614]  sctp_getsockopt_connectx3+0x227/0x360
[ 1703.688638][T31614]  ? lock_sock_nested+0x6a/0x100
[ 1703.693585][T31614]  ? __pfx_sctp_getsockopt_connectx3+0x10/0x10
[ 1703.699762][T31614]  ? __local_bh_enable_ip+0xd0/0x130
[ 1703.705066][T31614]  sctp_getsockopt+0x984/0xb90
[ 1703.709875][T31614]  ? __pfx_sock_common_getsockopt+0x10/0x10
[ 1703.715776][T31614]  do_sock_getsockopt+0x2d3/0x3f0
[ 1703.720819][T31614]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 1703.726376][T31614]  ? __fget_files+0x3a0/0x420
[ 1703.731064][T31614]  ? __fget_files+0x2a/0x420
[ 1703.735668][T31614]  __x64_sys_getsockopt+0x1a4/0x240
[ 1703.740887][T31614]  do_syscall_64+0x14d/0xf80
[ 1703.745500][T31614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1703.751573][T31614]  ? trace_irq_disable+0x37/0x100
[ 1703.756609][T31614]  ? clear_bhb_loop+0x40/0x90
[ 1703.761294][T31614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1703.767199][T31614] RIP: 0033:0x7f4954d9bf79
[ 1703.771637][T31614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1703.791250][T31614] RSP: 002b:00007f4955c37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 1703.799673][T31614] RAX: ffffffffffffffda RBX: 00007f4955015fa0 RCX: 00007f4954d9bf79
[ 1703.807669][T31614] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003
[ 1703.815649][T31614] RBP: 00007f4954e327e0 R08: 0000200000000180 R09: 0000000000000000
[ 1703.823635][T31614] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000
[ 1703.831612][T31614] R13: 00007f4955016038 R14: 00007f4955015fa0 R15: 00007ffdd9a41aa8
[ 1703.839604][T31614]  </TASK>
[ 1703.842638][T31614] Modules linked in:
[ 1703.847603][T31614] ---[ end trace 0000000000000000 ]---
[ 1703.875143][T31614] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0
[ 1703.884963][T31614] Code: c3 31 ff 89 c6 e8 b6 9b c7 f7 85 db 74 5b e8 6d 97 c7 f7 eb 05 e8 66 97 c7 f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89
[ 1703.928369][T31622] netlink: 'syz.6.14729': attribute type 89 has an invalid length.
[ 1703.931133][T31614] RSP: 0018:ffffc9000c69f5e0 EFLAGS: 00010202
[ 1703.952274][T31614] RAX: 0000000000000007 RBX: 0000000000000039 RCX: ffff88805160bc80
[ 1703.960341][T31614] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1703.968648][T31614] RBP: 0000000080000000 R08: ffff88805160bc80 R09: 0000000000000003
[ 1703.977146][T31614] R10: 0000000000000005 R11: 0000000000000000 R12: dffffc0000000000
[ 1703.986029][T31614] R13: 0000000000000000 R14: ffff88805275e258 R15: ffffffffffffffff
[ 1703.994206][T31614] FS:  00007f4955c376c0(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000
[ 1704.003822][T31614] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1704.010642][T31614] CR2: 000000110c3026f2 CR3: 000000004e434000 CR4: 00000000003526f0
[ 1704.019628][T31614] Kernel panic - not syncing: Fatal exception
[ 1704.025905][T31614] Kernel Offset: disabled
[ 1704.030228][T31614] Rebooting in 86400 seconds..